@ankhorage/infra 4.1.10 → 5.0.0

package/dist/features/environment-lifecycle/application/ports/outbound/infraAdapterPackage.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=infraAdapterPackage.js.map

package/dist/features/environment-lifecycle/application/ports/outbound/infraAdapterPackage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"infraAdapterPackage.js","sourceRoot":"","sources":["../../../../../../src/features/environment-lifecycle/application/ports/outbound/infraAdapterPackage.ts"],"names":[],"mappings":"","sourcesContent":["import type { InfraAdapterDescriptor } from '@ankhorage/contracts/infra';\n\nexport interface InfraAdapterPackageResolver {\n  loadAsync(packageName: string): Promise<unknown>;\n}\n\nexport interface InfraAdapterPackageModule {\n  readonly infraAdapterDescriptor: InfraAdapterDescriptor;\n  readonly createInfraAdapter: () => unknown;\n}\n"]}

package/dist/features/environment-lifecycle/application/use-cases/collectInfraWorkloadsAsync.d.ts

@@ -0,0 +1,4 @@
+import type { InfraExecutionContext, InfraResult, InfraServiceAdapter, InfraWorkloadSpec } from '@ankhorage/contracts/infra';
+/*** Collect each service workload graph once in deterministic adapter order. */
+export declare function collectInfraWorkloadsAsync(context: InfraExecutionContext, services: readonly InfraServiceAdapter[]): Promise<InfraResult<readonly InfraWorkloadSpec[]>>;
+//# sourceMappingURL=collectInfraWorkloadsAsync.d.ts.map

package/dist/features/environment-lifecycle/application/use-cases/collectInfraWorkloadsAsync.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"collectInfraWorkloadsAsync.d.ts","sourceRoot":"","sources":["../../../../../src/features/environment-lifecycle/application/use-cases/collectInfraWorkloadsAsync.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,qBAAqB,EACrB,WAAW,EACX,mBAAmB,EACnB,iBAAiB,EAClB,MAAM,4BAA4B,CAAC;AAIpC,gFAAgF;AAChF,wBAAsB,0BAA0B,CAC9C,OAAO,EAAE,qBAAqB,EAC9B,QAAQ,EAAE,SAAS,mBAAmB,EAAE,GACvC,OAAO,CAAC,WAAW,CAAC,SAAS,iBAAiB,EAAE,CAAC,CAAC,CAUpD"}

package/dist/features/environment-lifecycle/application/use-cases/collectInfraWorkloadsAsync.js

@@ -0,0 +1,15 @@
+import { appendInfraFailure } from '../../utils/appendInfraFailure.js';
+/*** Collect each service workload graph once in deterministic adapter order. */
+export async function collectInfraWorkloadsAsync(context, services) {
+    const workloads = [];
+    const diagnostics = [];
+    for (const service of services) {
+        const desired = await service.desiredWorkloadsAsync(context);
+        if (!desired.ok)
+            return appendInfraFailure(diagnostics, desired);
+        workloads.push(...desired.value);
+        diagnostics.push(...desired.diagnostics);
+    }
+    return { ok: true, value: workloads, diagnostics };
+}
+//# sourceMappingURL=collectInfraWorkloadsAsync.js.map

package/dist/features/environment-lifecycle/application/use-cases/collectInfraWorkloadsAsync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"collectInfraWorkloadsAsync.js","sourceRoot":"","sources":["../../../../../src/features/environment-lifecycle/application/use-cases/collectInfraWorkloadsAsync.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AAEvE,gFAAgF;AAChF,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,OAA8B,EAC9B,QAAwC;IAExC,MAAM,SAAS,GAAwB,EAAE,CAAC;IAC1C,MAAM,WAAW,GAAsB,EAAE,CAAC;IAC1C,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC;QAC7D,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,OAAO,kBAAkB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QACjE,SAAS,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;QACjC,WAAW,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC;AACrD,CAAC","sourcesContent":["import type {\n  InfraDiagnostic,\n  InfraExecutionContext,\n  InfraResult,\n  InfraServiceAdapter,\n  InfraWorkloadSpec,\n} from '@ankhorage/contracts/infra';\n\nimport { appendInfraFailure } from '../../utils/appendInfraFailure.js';\n\n/*** Collect each service workload graph once in deterministic adapter order. */\nexport async function collectInfraWorkloadsAsync(\n  context: InfraExecutionContext,\n  services: readonly InfraServiceAdapter[],\n): Promise<InfraResult<readonly InfraWorkloadSpec[]>> {\n  const workloads: InfraWorkloadSpec[] = [];\n  const diagnostics: InfraDiagnostic[] = [];\n  for (const service of services) {\n    const desired = await service.desiredWorkloadsAsync(context);\n    if (!desired.ok) return appendInfraFailure(diagnostics, desired);\n    workloads.push(...desired.value);\n    diagnostics.push(...desired.diagnostics);\n  }\n  return { ok: true, value: workloads, diagnostics };\n}\n"]}

package/dist/features/environment-lifecycle/application/use-cases/destroyInfraEnvironmentAsync.d.ts

@@ -0,0 +1,4 @@
+import type { InfraDestroyOperationRequest, InfraDestroyOperationResult, InfraOrchestrationDependencies } from '../../../../types/infraOrchestration.js';
+/*** Destroy exact owned resources in reverse dependency order behind explicit scope confirmation. */
+export declare function destroyInfraEnvironmentAsync(request: InfraDestroyOperationRequest, dependencies: InfraOrchestrationDependencies): Promise<InfraDestroyOperationResult>;
+//# sourceMappingURL=destroyInfraEnvironmentAsync.d.ts.map

package/dist/features/environment-lifecycle/application/use-cases/destroyInfraEnvironmentAsync.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"destroyInfraEnvironmentAsync.d.ts","sourceRoot":"","sources":["../../../../../src/features/environment-lifecycle/application/use-cases/destroyInfraEnvironmentAsync.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EACV,4BAA4B,EAC5B,2BAA2B,EAC3B,8BAA8B,EAC/B,MAAM,yCAAyC,CAAC;AAQjD,qGAAqG;AACrG,wBAAsB,4BAA4B,CAChD,OAAO,EAAE,4BAA4B,EACrC,YAAY,EAAE,8BAA8B,GAC3C,OAAO,CAAC,2BAA2B,CAAC,CAyDtC"}

package/dist/features/environment-lifecycle/application/use-cases/destroyInfraEnvironmentAsync.js

@@ -0,0 +1,84 @@
+import { appendInfraFailure } from '../../utils/appendInfraFailure.js';
+import { createInfraLedger } from '../../utils/createInfraLedger.js';
+import { infraIdentityKey } from '../../utils/infraIdentityKey.js';
+import { mergeInfraOutputs } from '../../utils/mergeInfraOutputs.js';
+import { mergeInfraResources } from '../../utils/mergeInfraResources.js';
+import { prepareInfraOperationAsync } from './prepareInfraOperationAsync.js';
+/*** Destroy exact owned resources in reverse dependency order behind explicit scope confirmation. */
+export async function destroyInfraEnvironmentAsync(request, dependencies) {
+    const prepared = await prepareInfraOperationAsync(request, 'destroy', dependencies);
+    if (!prepared.ok)
+        return prepared;
+    const destroyRequest = {
+        projectId: request.projectId,
+        environment: prepared.value.environment.id,
+        confirmation: request.confirmation,
+        persistence: request.persistence,
+    };
+    const safety = validateDestroyRequest(destroyRequest, request.previous?.resources ?? []);
+    if (!safety.ok)
+        return safety;
+    const diagnostics = [...prepared.diagnostics];
+    const resources = [];
+    const outputs = [];
+    for (const service of [...prepared.value.adapters.services].reverse()) {
+        const result = await service.destroyAsync(prepared.value.context, destroyRequest);
+        if (!result.ok)
+            return appendInfraFailure(diagnostics, result);
+        resources.push(...result.value.resources);
+        outputs.push(...result.value.outputs);
+        diagnostics.push(...result.diagnostics);
+    }
+    if (prepared.value.runtimeDesired.targets.length > 0) {
+        const runtime = await prepared.value.adapters.runtime.destroyAsync(prepared.value.context, prepared.value.runtimeDesired, destroyRequest);
+        if (!runtime.ok)
+            return appendInfraFailure(diagnostics, runtime);
+        resources.push(...runtime.value.resources);
+        outputs.push(...runtime.value.outputs);
+        diagnostics.push(...runtime.diagnostics);
+    }
+    const compute = await prepared.value.adapters.compute.destroyAsync(prepared.value.context, destroyRequest);
+    if (!compute.ok)
+        return appendInfraFailure(diagnostics, compute);
+    resources.push(...compute.value.resources);
+    outputs.push(...compute.value.outputs);
+    diagnostics.push(...compute.diagnostics);
+    const remainingResources = mergeInfraResources(resources);
+    const remainingOutputs = mergeInfraOutputs(outputs);
+    const ledger = remainingResources.length === 0 && remainingOutputs.length === 0
+        ? null
+        : createInfraLedger({
+            projectId: request.projectId,
+            environment: prepared.value.environment.id,
+            targets: [],
+            resources: remainingResources,
+            outputs: remainingOutputs,
+        });
+    return {
+        ok: true,
+        value: { environment: prepared.value.environment.id, ledger },
+        diagnostics,
+    };
+}
+/*** Refuse cross-project confirmation and unowned persistent deletion before any mutation. */
+function validateDestroyRequest(request, previous) {
+    if (request.confirmation.projectId !== request.projectId ||
+        request.confirmation.environment !== request.environment) {
+        return destroyFailure('infra-destroy-confirmation-mismatch', 'Infra destroy confirmation must exactly match the selected project and environment.');
+    }
+    if (request.persistence.policy === 'retain') {
+        return { ok: true, value: null, diagnostics: [] };
+    }
+    const owned = new Set(previous.map(({ identity }) => infraIdentityKey(identity)));
+    const invalid = request.persistence.confirmedResources.some((identity) => identity.projectId !== request.projectId ||
+        identity.environment !== request.environment ||
+        !owned.has(infraIdentityKey(identity)));
+    return invalid
+        ? destroyFailure('infra-destroy-resource-unowned', 'Persistent deletion confirmation contains a resource outside the stored Infra scope.')
+        : { ok: true, value: null, diagnostics: [] };
+}
+/*** Create one stable non-provider-specific destroy safety failure. */
+function destroyFailure(code, message) {
+    return { ok: false, diagnostics: [{ severity: 'error', code, message }] };
+}
+//# sourceMappingURL=destroyInfraEnvironmentAsync.js.map

package/dist/features/environment-lifecycle/application/use-cases/destroyInfraEnvironmentAsync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"destroyInfraEnvironmentAsync.js","sourceRoot":"","sources":["../../../../../src/features/environment-lifecycle/application/use-cases/destroyInfraEnvironmentAsync.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AACvE,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AACzE,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAE7E,qGAAqG;AACrG,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,OAAqC,EACrC,YAA4C;IAE5C,MAAM,QAAQ,GAAG,MAAM,0BAA0B,CAAC,OAAO,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;IACpF,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,OAAO,QAAQ,CAAC;IAClC,MAAM,cAAc,GAAwB;QAC1C,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE;QAC1C,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,WAAW,EAAE,OAAO,CAAC,WAAW;KACjC,CAAC;IACF,MAAM,MAAM,GAAG,sBAAsB,CAAC,cAAc,EAAE,OAAO,CAAC,QAAQ,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC;IACzF,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,MAAM,CAAC;IAC9B,MAAM,WAAW,GAAsB,CAAC,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC;IACjE,MAAM,SAAS,GAAyB,EAAE,CAAC;IAC3C,MAAM,OAAO,GAAkB,EAAE,CAAC;IAClC,KAAK,MAAM,OAAO,IAAI,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;QACtE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;QAClF,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,kBAAkB,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAC/D,SAAS,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC1C,OAAO,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACtC,WAAW,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC;IAC1C,CAAC;IACD,IAAI,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,YAAY,CAChE,QAAQ,CAAC,KAAK,CAAC,OAAO,EACtB,QAAQ,CAAC,KAAK,CAAC,cAAc,EAC7B,cAAc,CACf,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,OAAO,kBAAkB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QACjE,SAAS,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC3C,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACvC,WAAW,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAC3C,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,YAAY,CAChE,QAAQ,CAAC,KAAK,CAAC,OAAO,EACtB,cAAc,CACf,CAAC;IACF,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,OAAO,kBAAkB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IACjE,SAAS,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC3C,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACvC,WAAW,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACzC,MAAM,kBAAkB,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;IAC1D,MAAM,gBAAgB,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IACpD,MAAM,MAAM,GACV,kBAAkB,CAAC,MAAM,KAAK,CAAC,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC;QAC9D,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,iBAAiB,CAAC;YAChB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE;YAC1C,OAAO,EAAE,EAAE;YACX,SAAS,EAAE,kBAAkB;YAC7B,OAAO,EAAE,gBAAgB;SAC1B,CAAC,CAAC;IACT,OAAO;QACL,EAAE,EAAE,IAAI;QACR,KAAK,EAAE,EAAE,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE;QAC7D,WAAW;KACZ,CAAC;AACJ,CAAC;AAED,8FAA8F;AAC9F,SAAS,sBAAsB,CAC7B,OAA4B,EAC5B,QAAuC;IAEvC,IACE,OAAO,CAAC,YAAY,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS;QACpD,OAAO,CAAC,YAAY,CAAC,WAAW,KAAK,OAAO,CAAC,WAAW,EACxD,CAAC;QACD,OAAO,cAAc,CACnB,qCAAqC,EACrC,qFAAqF,CACtF,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,WAAW,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC5C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;IACpD,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAClF,MAAM,OAAO,GAAG,OAAO,CAAC,WAAW,CAAC,kBAAkB,CAAC,IAAI,CACzD,CAAC,QAAQ,EAAE,EAAE,CACX,QAAQ,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS;QACxC,QAAQ,CAAC,WAAW,KAAK,OAAO,CAAC,WAAW;QAC5C,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CACzC,CAAC;IACF,OAAO,OAAO;QACZ,CAAC,CAAC,cAAc,CACZ,gCAAgC,EAChC,sFAAsF,CACvF;QACH,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;AACjD,CAAC;AAED,uEAAuE;AACvE,SAAS,cAAc,CAAC,IAAY,EAAE,OAAe;IACnD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;AAC5E,CAAC","sourcesContent":["import type {\n  InfraDestroyRequest,\n  InfraDiagnostic,\n  InfraOutput,\n  InfraOwnedResource,\n  InfraResult,\n} from '@ankhorage/contracts/infra';\n\nimport type {\n  InfraDestroyOperationRequest,\n  InfraDestroyOperationResult,\n  InfraOrchestrationDependencies,\n} from '../../../../types/infraOrchestration.js';\nimport { appendInfraFailure } from '../../utils/appendInfraFailure.js';\nimport { createInfraLedger } from '../../utils/createInfraLedger.js';\nimport { infraIdentityKey } from '../../utils/infraIdentityKey.js';\nimport { mergeInfraOutputs } from '../../utils/mergeInfraOutputs.js';\nimport { mergeInfraResources } from '../../utils/mergeInfraResources.js';\nimport { prepareInfraOperationAsync } from './prepareInfraOperationAsync.js';\n\n/*** Destroy exact owned resources in reverse dependency order behind explicit scope confirmation. */\nexport async function destroyInfraEnvironmentAsync(\n  request: InfraDestroyOperationRequest,\n  dependencies: InfraOrchestrationDependencies,\n): Promise<InfraDestroyOperationResult> {\n  const prepared = await prepareInfraOperationAsync(request, 'destroy', dependencies);\n  if (!prepared.ok) return prepared;\n  const destroyRequest: InfraDestroyRequest = {\n    projectId: request.projectId,\n    environment: prepared.value.environment.id,\n    confirmation: request.confirmation,\n    persistence: request.persistence,\n  };\n  const safety = validateDestroyRequest(destroyRequest, request.previous?.resources ?? []);\n  if (!safety.ok) return safety;\n  const diagnostics: InfraDiagnostic[] = [...prepared.diagnostics];\n  const resources: InfraOwnedResource[] = [];\n  const outputs: InfraOutput[] = [];\n  for (const service of [...prepared.value.adapters.services].reverse()) {\n    const result = await service.destroyAsync(prepared.value.context, destroyRequest);\n    if (!result.ok) return appendInfraFailure(diagnostics, result);\n    resources.push(...result.value.resources);\n    outputs.push(...result.value.outputs);\n    diagnostics.push(...result.diagnostics);\n  }\n  if (prepared.value.runtimeDesired.targets.length > 0) {\n    const runtime = await prepared.value.adapters.runtime.destroyAsync(\n      prepared.value.context,\n      prepared.value.runtimeDesired,\n      destroyRequest,\n    );\n    if (!runtime.ok) return appendInfraFailure(diagnostics, runtime);\n    resources.push(...runtime.value.resources);\n    outputs.push(...runtime.value.outputs);\n    diagnostics.push(...runtime.diagnostics);\n  }\n  const compute = await prepared.value.adapters.compute.destroyAsync(\n    prepared.value.context,\n    destroyRequest,\n  );\n  if (!compute.ok) return appendInfraFailure(diagnostics, compute);\n  resources.push(...compute.value.resources);\n  outputs.push(...compute.value.outputs);\n  diagnostics.push(...compute.diagnostics);\n  const remainingResources = mergeInfraResources(resources);\n  const remainingOutputs = mergeInfraOutputs(outputs);\n  const ledger =\n    remainingResources.length === 0 && remainingOutputs.length === 0\n      ? null\n      : createInfraLedger({\n          projectId: request.projectId,\n          environment: prepared.value.environment.id,\n          targets: [],\n          resources: remainingResources,\n          outputs: remainingOutputs,\n        });\n  return {\n    ok: true,\n    value: { environment: prepared.value.environment.id, ledger },\n    diagnostics,\n  };\n}\n\n/*** Refuse cross-project confirmation and unowned persistent deletion before any mutation. */\nfunction validateDestroyRequest(\n  request: InfraDestroyRequest,\n  previous: readonly InfraOwnedResource[],\n): InfraResult<null> {\n  if (\n    request.confirmation.projectId !== request.projectId ||\n    request.confirmation.environment !== request.environment\n  ) {\n    return destroyFailure(\n      'infra-destroy-confirmation-mismatch',\n      'Infra destroy confirmation must exactly match the selected project and environment.',\n    );\n  }\n  if (request.persistence.policy === 'retain') {\n    return { ok: true, value: null, diagnostics: [] };\n  }\n  const owned = new Set(previous.map(({ identity }) => infraIdentityKey(identity)));\n  const invalid = request.persistence.confirmedResources.some(\n    (identity) =>\n      identity.projectId !== request.projectId ||\n      identity.environment !== request.environment ||\n      !owned.has(infraIdentityKey(identity)),\n  );\n  return invalid\n    ? destroyFailure(\n        'infra-destroy-resource-unowned',\n        'Persistent deletion confirmation contains a resource outside the stored Infra scope.',\n      )\n    : { ok: true, value: null, diagnostics: [] };\n}\n\n/*** Create one stable non-provider-specific destroy safety failure. */\nfunction destroyFailure(code: string, message: string): InfraResult<never> {\n  return { ok: false, diagnostics: [{ severity: 'error', code, message }] };\n}\n"]}

package/dist/features/environment-lifecycle/application/use-cases/downInfraEnvironmentAsync.d.ts

@@ -0,0 +1,4 @@
+import type { InfraDownOperationResult, InfraOperationRequest, InfraOrchestrationDependencies } from '../../../../types/infraOrchestration.js';
+/*** Reversibly suspend services and runtime while retaining compute and persistent data. */
+export declare function downInfraEnvironmentAsync(request: InfraOperationRequest, dependencies: InfraOrchestrationDependencies): Promise<InfraDownOperationResult>;
+//# sourceMappingURL=downInfraEnvironmentAsync.d.ts.map

package/dist/features/environment-lifecycle/application/use-cases/downInfraEnvironmentAsync.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"downInfraEnvironmentAsync.d.ts","sourceRoot":"","sources":["../../../../../src/features/environment-lifecycle/application/use-cases/downInfraEnvironmentAsync.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,wBAAwB,EACxB,qBAAqB,EACrB,8BAA8B,EAC/B,MAAM,yCAAyC,CAAC;AAOjD,4FAA4F;AAC5F,wBAAsB,yBAAyB,CAC7C,OAAO,EAAE,qBAAqB,EAC9B,YAAY,EAAE,8BAA8B,GAC3C,OAAO,CAAC,wBAAwB,CAAC,CA+CnC"}

package/dist/features/environment-lifecycle/application/use-cases/downInfraEnvironmentAsync.js

@@ -0,0 +1,55 @@
+import { appendInfraFailure } from '../../utils/appendInfraFailure.js';
+import { createInfraLedger } from '../../utils/createInfraLedger.js';
+import { retainUnchangedAdapterOutputs } from '../../utils/retainUnchangedAdapterOutputs.js';
+import { retainUnchangedAdapterResources } from '../../utils/retainUnchangedAdapterResources.js';
+import { prepareInfraOperationAsync } from './prepareInfraOperationAsync.js';
+/*** Reversibly suspend services and runtime while retaining compute and persistent data. */
+export async function downInfraEnvironmentAsync(request, dependencies) {
+    const prepared = await prepareInfraOperationAsync(request, 'down', dependencies);
+    if (!prepared.ok)
+        return prepared;
+    const diagnostics = [...prepared.diagnostics];
+    const resources = [];
+    const outputs = [];
+    const replacedAdapters = new Set();
+    for (const service of [...prepared.value.adapters.services].reverse()) {
+        if (service.suspendAsync === undefined)
+            continue;
+        const result = await service.suspendAsync(prepared.value.context);
+        if (!result.ok)
+            return appendInfraFailure(diagnostics, result);
+        replacedAdapters.add(service.descriptor.id);
+        resources.push(...result.value.resources);
+        outputs.push(...result.value.outputs);
+        diagnostics.push(...result.diagnostics);
+    }
+    if (prepared.value.runtimeDesired.targets.length > 0) {
+        const runtime = await prepared.value.adapters.runtime.suspendAsync(prepared.value.context, prepared.value.runtimeDesired);
+        if (!runtime.ok)
+            return appendInfraFailure(diagnostics, runtime);
+        replacedAdapters.add(prepared.value.adapters.runtime.descriptor.id);
+        resources.push(...runtime.value.resources);
+        outputs.push(...runtime.value.outputs);
+        diagnostics.push(...runtime.diagnostics);
+    }
+    const previousResources = request.previous?.resources ?? [];
+    const previousOutputs = request.previous?.outputs ?? [];
+    return {
+        ok: true,
+        value: {
+            environment: prepared.value.environment.id,
+            ledger: createInfraLedger({
+                projectId: request.projectId,
+                environment: prepared.value.environment.id,
+                targets: prepared.value.compute.targets.length > 0
+                    ? prepared.value.compute.targets
+                    : (request.previous?.targets ?? []),
+                resources: retainUnchangedAdapterResources(previousResources, resources, replacedAdapters),
+                outputs: retainUnchangedAdapterOutputs(previousOutputs, outputs, replacedAdapters),
+                previous: request.previous,
+            }),
+        },
+        diagnostics,
+    };
+}
+//# sourceMappingURL=downInfraEnvironmentAsync.js.map

package/dist/features/environment-lifecycle/application/use-cases/downInfraEnvironmentAsync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"downInfraEnvironmentAsync.js","sourceRoot":"","sources":["../../../../../src/features/environment-lifecycle/application/use-cases/downInfraEnvironmentAsync.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AACvE,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,EAAE,6BAA6B,EAAE,MAAM,8CAA8C,CAAC;AAC7F,OAAO,EAAE,+BAA+B,EAAE,MAAM,gDAAgD,CAAC;AACjG,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAE7E,4FAA4F;AAC5F,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,OAA8B,EAC9B,YAA4C;IAE5C,MAAM,QAAQ,GAAG,MAAM,0BAA0B,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;IACjF,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,OAAO,QAAQ,CAAC;IAClC,MAAM,WAAW,GAAsB,CAAC,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC;IACjE,MAAM,SAAS,GAAyB,EAAE,CAAC;IAC3C,MAAM,OAAO,GAAkB,EAAE,CAAC;IAClC,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC3C,KAAK,MAAM,OAAO,IAAI,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;QACtE,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS;YAAE,SAAS;QACjD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAClE,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,kBAAkB,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAC/D,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAC5C,SAAS,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC1C,OAAO,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACtC,WAAW,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC;IAC1C,CAAC;IACD,IAAI,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,YAAY,CAChE,QAAQ,CAAC,KAAK,CAAC,OAAO,EACtB,QAAQ,CAAC,KAAK,CAAC,cAAc,CAC9B,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,OAAO,kBAAkB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QACjE,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QACpE,SAAS,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC3C,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACvC,WAAW,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAC3C,CAAC;IACD,MAAM,iBAAiB,GAAG,OAAO,CAAC,QAAQ,EAAE,SAAS,IAAI,EAAE,CAAC;IAC5D,MAAM,eAAe,GAAG,OAAO,CAAC,QAAQ,EAAE,OAAO,IAAI,EAAE,CAAC;IACxD,OAAO;QACL,EAAE,EAAE,IAAI;QACR,KAAK,EAAE;YACL,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE;YAC1C,MAAM,EAAE,iBAAiB,CAAC;gBACxB,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE;gBAC1C,OAAO,EACL,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;oBACvC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO;oBAChC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,IAAI,EAAE,CAAC;gBACvC,SAAS,EAAE,+BAA+B,CAAC,iBAAiB,EAAE,SAAS,EAAE,gBAAgB,CAAC;gBAC1F,OAAO,EAAE,6BAA6B,CAAC,eAAe,EAAE,OAAO,EAAE,gBAAgB,CAAC;gBAClF,QAAQ,EAAE,OAAO,CAAC,QAAQ;aAC3B,CAAC;SACH;QACD,WAAW;KACZ,CAAC;AACJ,CAAC","sourcesContent":["import type { InfraDiagnostic, InfraOutput, InfraOwnedResource } from '@ankhorage/contracts/infra';\n\nimport type {\n  InfraDownOperationResult,\n  InfraOperationRequest,\n  InfraOrchestrationDependencies,\n} from '../../../../types/infraOrchestration.js';\nimport { appendInfraFailure } from '../../utils/appendInfraFailure.js';\nimport { createInfraLedger } from '../../utils/createInfraLedger.js';\nimport { retainUnchangedAdapterOutputs } from '../../utils/retainUnchangedAdapterOutputs.js';\nimport { retainUnchangedAdapterResources } from '../../utils/retainUnchangedAdapterResources.js';\nimport { prepareInfraOperationAsync } from './prepareInfraOperationAsync.js';\n\n/*** Reversibly suspend services and runtime while retaining compute and persistent data. */\nexport async function downInfraEnvironmentAsync(\n  request: InfraOperationRequest,\n  dependencies: InfraOrchestrationDependencies,\n): Promise<InfraDownOperationResult> {\n  const prepared = await prepareInfraOperationAsync(request, 'down', dependencies);\n  if (!prepared.ok) return prepared;\n  const diagnostics: InfraDiagnostic[] = [...prepared.diagnostics];\n  const resources: InfraOwnedResource[] = [];\n  const outputs: InfraOutput[] = [];\n  const replacedAdapters = new Set<string>();\n  for (const service of [...prepared.value.adapters.services].reverse()) {\n    if (service.suspendAsync === undefined) continue;\n    const result = await service.suspendAsync(prepared.value.context);\n    if (!result.ok) return appendInfraFailure(diagnostics, result);\n    replacedAdapters.add(service.descriptor.id);\n    resources.push(...result.value.resources);\n    outputs.push(...result.value.outputs);\n    diagnostics.push(...result.diagnostics);\n  }\n  if (prepared.value.runtimeDesired.targets.length > 0) {\n    const runtime = await prepared.value.adapters.runtime.suspendAsync(\n      prepared.value.context,\n      prepared.value.runtimeDesired,\n    );\n    if (!runtime.ok) return appendInfraFailure(diagnostics, runtime);\n    replacedAdapters.add(prepared.value.adapters.runtime.descriptor.id);\n    resources.push(...runtime.value.resources);\n    outputs.push(...runtime.value.outputs);\n    diagnostics.push(...runtime.diagnostics);\n  }\n  const previousResources = request.previous?.resources ?? [];\n  const previousOutputs = request.previous?.outputs ?? [];\n  return {\n    ok: true,\n    value: {\n      environment: prepared.value.environment.id,\n      ledger: createInfraLedger({\n        projectId: request.projectId,\n        environment: prepared.value.environment.id,\n        targets:\n          prepared.value.compute.targets.length > 0\n            ? prepared.value.compute.targets\n            : (request.previous?.targets ?? []),\n        resources: retainUnchangedAdapterResources(previousResources, resources, replacedAdapters),\n        outputs: retainUnchangedAdapterOutputs(previousOutputs, outputs, replacedAdapters),\n        previous: request.previous,\n      }),\n    },\n    diagnostics,\n  };\n}\n"]}

package/dist/features/environment-lifecycle/application/use-cases/generateInfraEnvironmentAsync.d.ts

@@ -0,0 +1,4 @@
+import type { InfraGenerateOperationResult, InfraOperationRequest, InfraOrchestrationDependencies } from '../../../../types/infraOrchestration.js';
+/*** Generate deterministic review artifacts without mutating local or remote infrastructure. */
+export declare function generateInfraEnvironmentAsync(request: InfraOperationRequest, dependencies: InfraOrchestrationDependencies): Promise<InfraGenerateOperationResult>;
+//# sourceMappingURL=generateInfraEnvironmentAsync.d.ts.map

package/dist/features/environment-lifecycle/application/use-cases/generateInfraEnvironmentAsync.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"generateInfraEnvironmentAsync.d.ts","sourceRoot":"","sources":["../../../../../src/features/environment-lifecycle/application/use-cases/generateInfraEnvironmentAsync.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,4BAA4B,EAC5B,qBAAqB,EACrB,8BAA8B,EAC/B,MAAM,yCAAyC,CAAC;AAOjD,gGAAgG;AAChG,wBAAsB,6BAA6B,CACjD,OAAO,EAAE,qBAAqB,EAC9B,YAAY,EAAE,8BAA8B,GAC3C,OAAO,CAAC,4BAA4B,CAAC,CAiCvC"}

package/dist/features/environment-lifecycle/application/use-cases/generateInfraEnvironmentAsync.js

@@ -0,0 +1,38 @@
+import { appendInfraFailure } from '../../utils/appendInfraFailure.js';
+import { createInfraLedger } from '../../utils/createInfraLedger.js';
+import { mergeInfraOutputs } from '../../utils/mergeInfraOutputs.js';
+import { mergeInfraResources } from '../../utils/mergeInfraResources.js';
+import { prepareInfraOperationAsync } from './prepareInfraOperationAsync.js';
+/*** Generate deterministic review artifacts without mutating local or remote infrastructure. */
+export async function generateInfraEnvironmentAsync(request, dependencies) {
+    const prepared = await prepareInfraOperationAsync(request, 'generate', dependencies);
+    if (!prepared.ok)
+        return prepared;
+    const diagnostics = [...prepared.diagnostics];
+    const { runtime } = prepared.value.adapters;
+    const artifacts = runtime.generateAsync === undefined || prepared.value.runtimeDesired.targets.length === 0
+        ? { ok: true, value: [], diagnostics: [] }
+        : await runtime.generateAsync(prepared.value.context, prepared.value.runtimeDesired);
+    if (!artifacts.ok)
+        return appendInfraFailure(diagnostics, artifacts);
+    diagnostics.push(...artifacts.diagnostics);
+    return {
+        ok: true,
+        value: {
+            environment: prepared.value.environment.id,
+            artifacts: artifacts.value,
+            ledger: createInfraLedger({
+                projectId: request.projectId,
+                environment: prepared.value.environment.id,
+                targets: prepared.value.compute.targets.length > 0
+                    ? prepared.value.compute.targets
+                    : (request.previous?.targets ?? []),
+                resources: mergeInfraResources(request.previous?.resources ?? [], prepared.value.compute.resources),
+                outputs: mergeInfraOutputs(request.previous?.outputs ?? [], prepared.value.compute.outputs),
+                artifacts: artifacts.value,
+            }),
+        },
+        diagnostics,
+    };
+}
+//# sourceMappingURL=generateInfraEnvironmentAsync.js.map

package/dist/features/environment-lifecycle/application/use-cases/generateInfraEnvironmentAsync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"generateInfraEnvironmentAsync.js","sourceRoot":"","sources":["../../../../../src/features/environment-lifecycle/application/use-cases/generateInfraEnvironmentAsync.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AACvE,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AACzE,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAE7E,gGAAgG;AAChG,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,OAA8B,EAC9B,YAA4C;IAE5C,MAAM,QAAQ,GAAG,MAAM,0BAA0B,CAAC,OAAO,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;IACrF,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,OAAO,QAAQ,CAAC;IAClC,MAAM,WAAW,GAAsB,CAAC,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC;IACjE,MAAM,EAAE,OAAO,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC;IAC5C,MAAM,SAAS,GACb,OAAO,CAAC,aAAa,KAAK,SAAS,IAAI,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;QACvF,CAAC,CAAC,EAAE,EAAE,EAAE,IAAa,EAAE,KAAK,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE;QACnD,CAAC,CAAC,MAAM,OAAO,CAAC,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IACzF,IAAI,CAAC,SAAS,CAAC,EAAE;QAAE,OAAO,kBAAkB,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IACrE,WAAW,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC;IAC3C,OAAO;QACL,EAAE,EAAE,IAAI;QACR,KAAK,EAAE;YACL,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE;YAC1C,SAAS,EAAE,SAAS,CAAC,KAAK;YAC1B,MAAM,EAAE,iBAAiB,CAAC;gBACxB,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE;gBAC1C,OAAO,EACL,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;oBACvC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO;oBAChC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,IAAI,EAAE,CAAC;gBACvC,SAAS,EAAE,mBAAmB,CAC5B,OAAO,CAAC,QAAQ,EAAE,SAAS,IAAI,EAAE,EACjC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CACjC;gBACD,OAAO,EAAE,iBAAiB,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,IAAI,EAAE,EAAE,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;gBAC3F,SAAS,EAAE,SAAS,CAAC,KAAK;aAC3B,CAAC;SACH;QACD,WAAW;KACZ,CAAC;AACJ,CAAC","sourcesContent":["import type { InfraDiagnostic } from '@ankhorage/contracts/infra';\n\nimport type {\n  InfraGenerateOperationResult,\n  InfraOperationRequest,\n  InfraOrchestrationDependencies,\n} from '../../../../types/infraOrchestration.js';\nimport { appendInfraFailure } from '../../utils/appendInfraFailure.js';\nimport { createInfraLedger } from '../../utils/createInfraLedger.js';\nimport { mergeInfraOutputs } from '../../utils/mergeInfraOutputs.js';\nimport { mergeInfraResources } from '../../utils/mergeInfraResources.js';\nimport { prepareInfraOperationAsync } from './prepareInfraOperationAsync.js';\n\n/*** Generate deterministic review artifacts without mutating local or remote infrastructure. */\nexport async function generateInfraEnvironmentAsync(\n  request: InfraOperationRequest,\n  dependencies: InfraOrchestrationDependencies,\n): Promise<InfraGenerateOperationResult> {\n  const prepared = await prepareInfraOperationAsync(request, 'generate', dependencies);\n  if (!prepared.ok) return prepared;\n  const diagnostics: InfraDiagnostic[] = [...prepared.diagnostics];\n  const { runtime } = prepared.value.adapters;\n  const artifacts =\n    runtime.generateAsync === undefined || prepared.value.runtimeDesired.targets.length === 0\n      ? { ok: true as const, value: [], diagnostics: [] }\n      : await runtime.generateAsync(prepared.value.context, prepared.value.runtimeDesired);\n  if (!artifacts.ok) return appendInfraFailure(diagnostics, artifacts);\n  diagnostics.push(...artifacts.diagnostics);\n  return {\n    ok: true,\n    value: {\n      environment: prepared.value.environment.id,\n      artifacts: artifacts.value,\n      ledger: createInfraLedger({\n        projectId: request.projectId,\n        environment: prepared.value.environment.id,\n        targets:\n          prepared.value.compute.targets.length > 0\n            ? prepared.value.compute.targets\n            : (request.previous?.targets ?? []),\n        resources: mergeInfraResources(\n          request.previous?.resources ?? [],\n          prepared.value.compute.resources,\n        ),\n        outputs: mergeInfraOutputs(request.previous?.outputs ?? [], prepared.value.compute.outputs),\n        artifacts: artifacts.value,\n      }),\n    },\n    diagnostics,\n  };\n}\n"]}

package/dist/features/environment-lifecycle/application/use-cases/getInfraEnvironmentOutputs.d.ts

@@ -0,0 +1,4 @@
+import type { InfraOperationRequest, InfraOutputsOperationResult } from '../../../../types/infraOrchestration.js';
+/*** Return only safe serialized public outputs and secret references from the canonical ledger. */
+export declare function getInfraEnvironmentOutputs(request: InfraOperationRequest): InfraOutputsOperationResult;
+//# sourceMappingURL=getInfraEnvironmentOutputs.d.ts.map

package/dist/features/environment-lifecycle/application/use-cases/getInfraEnvironmentOutputs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getInfraEnvironmentOutputs.d.ts","sourceRoot":"","sources":["../../../../../src/features/environment-lifecycle/application/use-cases/getInfraEnvironmentOutputs.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,qBAAqB,EACrB,2BAA2B,EAC5B,MAAM,yCAAyC,CAAC;AAGjD,mGAAmG;AACnG,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,qBAAqB,GAC7B,2BAA2B,CA+B7B"}

package/dist/features/environment-lifecycle/application/use-cases/getInfraEnvironmentOutputs.js

@@ -0,0 +1,34 @@
+import { resolveInfraEnvironment } from '../../domain/resolveInfraEnvironment.js';
+/*** Return only safe serialized public outputs and secret references from the canonical ledger. */
+export function getInfraEnvironmentOutputs(request) {
+    const environment = resolveInfraEnvironment({
+        manifest: request.manifest,
+        environment: request.environment,
+        operation: 'outputs',
+    });
+    if (!environment.ok)
+        return environment;
+    if (request.previous !== undefined &&
+        (request.previous.projectId !== request.projectId ||
+            request.previous.environment !== environment.value.id)) {
+        return {
+            ok: false,
+            diagnostics: [
+                {
+                    severity: 'error',
+                    code: 'infra-ledger-scope-mismatch',
+                    message: 'Stored Infra state does not belong to the selected project and environment.',
+                },
+            ],
+        };
+    }
+    return {
+        ok: true,
+        value: {
+            environment: environment.value.id,
+            outputs: request.previous?.outputs ?? [],
+        },
+        diagnostics: environment.diagnostics,
+    };
+}
+//# sourceMappingURL=getInfraEnvironmentOutputs.js.map

package/dist/features/environment-lifecycle/application/use-cases/getInfraEnvironmentOutputs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getInfraEnvironmentOutputs.js","sourceRoot":"","sources":["../../../../../src/features/environment-lifecycle/application/use-cases/getInfraEnvironmentOutputs.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,uBAAuB,EAAE,MAAM,yCAAyC,CAAC;AAElF,mGAAmG;AACnG,MAAM,UAAU,0BAA0B,CACxC,OAA8B;IAE9B,MAAM,WAAW,GAAG,uBAAuB,CAAC;QAC1C,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,SAAS,EAAE,SAAS;KACrB,CAAC,CAAC;IACH,IAAI,CAAC,WAAW,CAAC,EAAE;QAAE,OAAO,WAAW,CAAC;IACxC,IACE,OAAO,CAAC,QAAQ,KAAK,SAAS;QAC9B,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS;YAC/C,OAAO,CAAC,QAAQ,CAAC,WAAW,KAAK,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,EACxD,CAAC;QACD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,WAAW,EAAE;gBACX;oBACE,QAAQ,EAAE,OAAO;oBACjB,IAAI,EAAE,6BAA6B;oBACnC,OAAO,EAAE,6EAA6E;iBACvF;aACF;SACF,CAAC;IACJ,CAAC;IACD,OAAO;QACL,EAAE,EAAE,IAAI;QACR,KAAK,EAAE;YACL,WAAW,EAAE,WAAW,CAAC,KAAK,CAAC,EAAE;YACjC,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,IAAI,EAAE;SACzC;QACD,WAAW,EAAE,WAAW,CAAC,WAAW;KACrC,CAAC;AACJ,CAAC","sourcesContent":["import type {\n  InfraOperationRequest,\n  InfraOutputsOperationResult,\n} from '../../../../types/infraOrchestration.js';\nimport { resolveInfraEnvironment } from '../../domain/resolveInfraEnvironment.js';\n\n/*** Return only safe serialized public outputs and secret references from the canonical ledger. */\nexport function getInfraEnvironmentOutputs(\n  request: InfraOperationRequest,\n): InfraOutputsOperationResult {\n  const environment = resolveInfraEnvironment({\n    manifest: request.manifest,\n    environment: request.environment,\n    operation: 'outputs',\n  });\n  if (!environment.ok) return environment;\n  if (\n    request.previous !== undefined &&\n    (request.previous.projectId !== request.projectId ||\n      request.previous.environment !== environment.value.id)\n  ) {\n    return {\n      ok: false,\n      diagnostics: [\n        {\n          severity: 'error',\n          code: 'infra-ledger-scope-mismatch',\n          message: 'Stored Infra state does not belong to the selected project and environment.',\n        },\n      ],\n    };\n  }\n  return {\n    ok: true,\n    value: {\n      environment: environment.value.id,\n      outputs: request.previous?.outputs ?? [],\n    },\n    diagnostics: environment.diagnostics,\n  };\n}\n"]}

package/dist/features/environment-lifecycle/application/use-cases/planInfraEnvironmentAsync.d.ts

@@ -0,0 +1,4 @@
+import type { InfraOperationRequest, InfraOrchestrationDependencies, InfraPlanOperationResult } from '../../../../types/infraOrchestration.js';
+/*** Aggregate a side-effect-free dependency-ordered plan from all selected adapters. */
+export declare function planInfraEnvironmentAsync(request: InfraOperationRequest, dependencies: InfraOrchestrationDependencies): Promise<InfraPlanOperationResult>;
+//# sourceMappingURL=planInfraEnvironmentAsync.d.ts.map

package/dist/features/environment-lifecycle/application/use-cases/planInfraEnvironmentAsync.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"planInfraEnvironmentAsync.d.ts","sourceRoot":"","sources":["../../../../../src/features/environment-lifecycle/application/use-cases/planInfraEnvironmentAsync.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,qBAAqB,EACrB,8BAA8B,EAC9B,wBAAwB,EACzB,MAAM,yCAAyC,CAAC;AAKjD,wFAAwF;AACxF,wBAAsB,yBAAyB,CAC7C,OAAO,EAAE,qBAAqB,EAC9B,YAAY,EAAE,8BAA8B,GAC3C,OAAO,CAAC,wBAAwB,CAAC,CAmDnC"}

package/dist/features/environment-lifecycle/application/use-cases/planInfraEnvironmentAsync.js

@@ -0,0 +1,57 @@
+import { orderInfraPlanActions } from '../../domain/orderInfraPlanActions.js';
+import { appendInfraFailure } from '../../utils/appendInfraFailure.js';
+import { prepareInfraOperationAsync } from './prepareInfraOperationAsync.js';
+/*** Aggregate a side-effect-free dependency-ordered plan from all selected adapters. */
+export async function planInfraEnvironmentAsync(request, dependencies) {
+    const prepared = await prepareInfraOperationAsync(request, 'plan', dependencies);
+    if (!prepared.ok)
+        return prepared;
+    const diagnostics = [...prepared.diagnostics];
+    const actions = [];
+    const compute = await prepared.value.adapters.compute.planAsync(prepared.value.context, prepared.value.environment.desired.deployment.compute);
+    if (!compute.ok)
+        return appendInfraFailure(diagnostics, compute);
+    actions.push(...compute.value);
+    diagnostics.push(...compute.diagnostics);
+    if (prepared.value.runtimeDesired.targets.length === 0) {
+        actions.push({
+            owner: {
+                projectId: request.projectId,
+                environment: prepared.value.environment.id,
+                adapter: prepared.value.adapters.runtime.descriptor.id,
+                resourceId: 'runtime',
+            },
+            operation: 'create',
+            impact: 'none',
+            detail: 'Runtime planning is deferred until the planned compute target exists.',
+            dependsOn: compute.value.map(({ owner }) => owner),
+        });
+    }
+    else {
+        const runtime = await prepared.value.adapters.runtime.planAsync(prepared.value.context, prepared.value.runtimeDesired);
+        if (!runtime.ok)
+            return appendInfraFailure(diagnostics, runtime);
+        actions.push(...runtime.value);
+        diagnostics.push(...runtime.diagnostics);
+    }
+    for (const service of prepared.value.adapters.services) {
+        const plan = await service.planAsync(prepared.value.context);
+        if (!plan.ok)
+            return appendInfraFailure(diagnostics, plan);
+        actions.push(...plan.value);
+        diagnostics.push(...plan.diagnostics);
+    }
+    const ordered = orderInfraPlanActions(actions);
+    if (!ordered.ok)
+        return appendInfraFailure(diagnostics, ordered);
+    return {
+        ok: true,
+        value: {
+            projectId: request.projectId,
+            environment: prepared.value.environment.id,
+            actions: ordered.value,
+        },
+        diagnostics,
+    };
+}
+//# sourceMappingURL=planInfraEnvironmentAsync.js.map

package/dist/features/environment-lifecycle/application/use-cases/planInfraEnvironmentAsync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"planInfraEnvironmentAsync.js","sourceRoot":"","sources":["../../../../../src/features/environment-lifecycle/application/use-cases/planInfraEnvironmentAsync.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AAC9E,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AACvE,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAE7E,wFAAwF;AACxF,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,OAA8B,EAC9B,YAA4C;IAE5C,MAAM,QAAQ,GAAG,MAAM,0BAA0B,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;IACjF,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,OAAO,QAAQ,CAAC;IAClC,MAAM,WAAW,GAAsB,CAAC,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC;IACjE,MAAM,OAAO,GAAsB,EAAE,CAAC;IACtC,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAC7D,QAAQ,CAAC,KAAK,CAAC,OAAO,EACtB,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CACtD,CAAC;IACF,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,OAAO,kBAAkB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IACjE,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IAC/B,WAAW,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACzC,IAAI,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvD,OAAO,CAAC,IAAI,CAAC;YACX,KAAK,EAAE;gBACL,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE;gBAC1C,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE;gBACtD,UAAU,EAAE,SAAS;aACtB;YACD,SAAS,EAAE,QAAQ;YACnB,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,uEAAuE;YAC/E,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC;SACnD,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAC7D,QAAQ,CAAC,KAAK,CAAC,OAAO,EACtB,QAAQ,CAAC,KAAK,CAAC,cAAc,CAC9B,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,OAAO,kBAAkB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QACjE,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;QAC/B,WAAW,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAC3C,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACvD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC7D,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,OAAO,kBAAkB,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QAC3D,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5B,WAAW,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC;IACxC,CAAC;IACD,MAAM,OAAO,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAC/C,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,OAAO,kBAAkB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IACjE,OAAO;QACL,EAAE,EAAE,IAAI;QACR,KAAK,EAAE;YACL,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE;YAC1C,OAAO,EAAE,OAAO,CAAC,KAAK;SACvB;QACD,WAAW;KACZ,CAAC;AACJ,CAAC","sourcesContent":["import type { InfraDiagnostic, InfraPlanAction } from '@ankhorage/contracts/infra';\n\nimport type {\n  InfraOperationRequest,\n  InfraOrchestrationDependencies,\n  InfraPlanOperationResult,\n} from '../../../../types/infraOrchestration.js';\nimport { orderInfraPlanActions } from '../../domain/orderInfraPlanActions.js';\nimport { appendInfraFailure } from '../../utils/appendInfraFailure.js';\nimport { prepareInfraOperationAsync } from './prepareInfraOperationAsync.js';\n\n/*** Aggregate a side-effect-free dependency-ordered plan from all selected adapters. */\nexport async function planInfraEnvironmentAsync(\n  request: InfraOperationRequest,\n  dependencies: InfraOrchestrationDependencies,\n): Promise<InfraPlanOperationResult> {\n  const prepared = await prepareInfraOperationAsync(request, 'plan', dependencies);\n  if (!prepared.ok) return prepared;\n  const diagnostics: InfraDiagnostic[] = [...prepared.diagnostics];\n  const actions: InfraPlanAction[] = [];\n  const compute = await prepared.value.adapters.compute.planAsync(\n    prepared.value.context,\n    prepared.value.environment.desired.deployment.compute,\n  );\n  if (!compute.ok) return appendInfraFailure(diagnostics, compute);\n  actions.push(...compute.value);\n  diagnostics.push(...compute.diagnostics);\n  if (prepared.value.runtimeDesired.targets.length === 0) {\n    actions.push({\n      owner: {\n        projectId: request.projectId,\n        environment: prepared.value.environment.id,\n        adapter: prepared.value.adapters.runtime.descriptor.id,\n        resourceId: 'runtime',\n      },\n      operation: 'create',\n      impact: 'none',\n      detail: 'Runtime planning is deferred until the planned compute target exists.',\n      dependsOn: compute.value.map(({ owner }) => owner),\n    });\n  } else {\n    const runtime = await prepared.value.adapters.runtime.planAsync(\n      prepared.value.context,\n      prepared.value.runtimeDesired,\n    );\n    if (!runtime.ok) return appendInfraFailure(diagnostics, runtime);\n    actions.push(...runtime.value);\n    diagnostics.push(...runtime.diagnostics);\n  }\n  for (const service of prepared.value.adapters.services) {\n    const plan = await service.planAsync(prepared.value.context);\n    if (!plan.ok) return appendInfraFailure(diagnostics, plan);\n    actions.push(...plan.value);\n    diagnostics.push(...plan.diagnostics);\n  }\n  const ordered = orderInfraPlanActions(actions);\n  if (!ordered.ok) return appendInfraFailure(diagnostics, ordered);\n  return {\n    ok: true,\n    value: {\n      projectId: request.projectId,\n      environment: prepared.value.environment.id,\n      actions: ordered.value,\n    },\n    diagnostics,\n  };\n}\n"]}

package/dist/features/environment-lifecycle/application/use-cases/prepareInfraOperationAsync.d.ts

@@ -0,0 +1,5 @@
+import type { InfraResult } from '@ankhorage/contracts/infra';
+import type { InfraOperationRequest, InfraOrchestrationDependencies, PreparedInfraOperation } from '../../../../types/infraOrchestration.js';
+/*** Resolve and validate one operation without creating, updating or deleting infrastructure. */
+export declare function prepareInfraOperationAsync(request: InfraOperationRequest, operation: 'validate' | 'plan' | 'generate' | 'status' | 'outputs' | 'down' | 'destroy', dependencies: InfraOrchestrationDependencies): Promise<InfraResult<PreparedInfraOperation>>;
+//# sourceMappingURL=prepareInfraOperationAsync.d.ts.map

package/dist/features/environment-lifecycle/application/use-cases/prepareInfraOperationAsync.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prepareInfraOperationAsync.d.ts","sourceRoot":"","sources":["../../../../../src/features/environment-lifecycle/application/use-cases/prepareInfraOperationAsync.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAmB,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAE/E,OAAO,KAAK,EACV,qBAAqB,EACrB,8BAA8B,EAC9B,sBAAsB,EACvB,MAAM,yCAAyC,CAAC;AAQjD,iGAAiG;AACjG,wBAAsB,0BAA0B,CAC9C,OAAO,EAAE,qBAAqB,EAC9B,SAAS,EAAE,UAAU,GAAG,MAAM,GAAG,UAAU,GAAG,QAAQ,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,EACvF,YAAY,EAAE,8BAA8B,GAC3C,OAAO,CAAC,WAAW,CAAC,sBAAsB,CAAC,CAAC,CA6E9C"}

package/dist/features/environment-lifecycle/application/use-cases/prepareInfraOperationAsync.js

@@ -0,0 +1,109 @@
+import { resolveInfraEnvironment } from '../../domain/resolveInfraEnvironment.js';
+import { appendInfraFailure } from '../../utils/appendInfraFailure.js';
+import { createInfraExecutionContext } from '../../utils/createInfraExecutionContext.js';
+import { collectInfraWorkloadsAsync } from './collectInfraWorkloadsAsync.js';
+import { resolveInfraAdaptersAsync } from './resolveInfraAdaptersAsync.js';
+import { validateInfraAdaptersAsync } from './validateInfraAdaptersAsync.js';
+/*** Resolve and validate one operation without creating, updating or deleting infrastructure. */
+export async function prepareInfraOperationAsync(request, operation, dependencies) {
+    const diagnostics = [];
+    const environment = resolveInfraEnvironment({
+        manifest: request.manifest,
+        environment: request.environment,
+        operation,
+    });
+    if (!environment.ok)
+        return environment;
+    diagnostics.push(...environment.diagnostics);
+    if (request.previous !== undefined &&
+        request.previousDesired !== undefined &&
+        !hasSameProviderSelection(request.previousDesired, environment.value.desired)) {
+        return {
+            ok: false,
+            diagnostics: [
+                ...diagnostics,
+                {
+                    severity: 'error',
+                    code: 'infra-provider-selection-changed',
+                    message: 'Stored Infra resources use another provider selection. Destroy that environment before applying the new selection.',
+                },
+            ],
+        };
+    }
+    const adapters = await resolveInfraAdaptersAsync(environment.value.desired, dependencies.adapterResolver);
+    if (!adapters.ok)
+        return appendInfraFailure(diagnostics, adapters);
+    diagnostics.push(...adapters.diagnostics);
+    const context = createInfraExecutionContext(request, environment.value, dependencies);
+    const validation = await validateInfraAdaptersAsync(context, adapters.value);
+    if (!validation.ok)
+        return appendInfraFailure(diagnostics, validation);
+    diagnostics.push(...validation.diagnostics);
+    const workloads = await collectInfraWorkloadsAsync(context, adapters.value.services);
+    if (!workloads.ok)
+        return appendInfraFailure(diagnostics, workloads);
+    diagnostics.push(...workloads.diagnostics);
+    const compute = await adapters.value.compute.inspectAsync(context, environment.value.desired.deployment.compute);
+    if (!compute.ok)
+        return appendInfraFailure(diagnostics, compute);
+    diagnostics.push(...compute.diagnostics);
+    const runtimeDesired = {
+        selection: environment.value.desired.deployment.runtime,
+        targets: compute.value.targets.length > 0
+            ? compute.value.targets
+            : (request.previous?.targets ?? compute.value.targets),
+        workloads: [...(environment.value.desired.workloads ?? []), ...workloads.value],
+        availableOutputs: mergeOutputs(request.previous?.outputs ?? [], compute.value.outputs),
+    };
+    if (runtimeDesired.targets.length === 0) {
+        diagnostics.push({
+            severity: 'info',
+            code: 'infra-runtime-target-deferred',
+            message: 'Runtime validation is deferred until compute exposes a portable target.',
+        });
+    }
+    else {
+        const runtime = await adapters.value.runtime.validateAsync(context, runtimeDesired);
+        if (!runtime.ok)
+            return appendInfraFailure(diagnostics, runtime);
+        diagnostics.push(...runtime.diagnostics);
+    }
+    return {
+        ok: true,
+        value: {
+            environment: environment.value,
+            context,
+            adapters: adapters.value,
+            compute: compute.value,
+            runtimeDesired,
+        },
+        diagnostics,
+    };
+}
+/*** Compare provider identity only; configuration changes remain normal in-place reconciliation. */
+function hasSameProviderSelection(previous, current) {
+    return providerSelection(previous).join('\0') === providerSelection(current).join('\0');
+}
+/*** Read the closed provider slots in stable capability order. */
+function providerSelection(desired) {
+    return [
+        desired.deployment.compute.provider,
+        desired.deployment.runtime.provider,
+        desired.database?.provider,
+        desired.objectStorage?.provider,
+        desired.auth?.provider,
+        desired.authz?.provider,
+        desired.secretStore?.provider,
+    ];
+}
+/*** Prefer freshly inspected outputs while preserving unrelated safe prior values. */
+function mergeOutputs(previous, current) {
+    const currentKeys = new Set(current.map(outputKey));
+    return [...previous.filter((output) => !currentKeys.has(outputKey(output))), ...current];
+}
+/*** Create one stable public-or-secret output identity without reading its value. */
+function outputKey(output) {
+    const { owner } = output;
+    return `${owner.projectId}\0${owner.environment}\0${owner.adapter}\0${owner.resourceId}\0${output.name}`;
+}
+//# sourceMappingURL=prepareInfraOperationAsync.js.map

package/dist/features/environment-lifecycle/application/use-cases/prepareInfraOperationAsync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prepareInfraOperationAsync.js","sourceRoot":"","sources":["../../../../../src/features/environment-lifecycle/application/use-cases/prepareInfraOperationAsync.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,uBAAuB,EAAE,MAAM,yCAAyC,CAAC;AAClF,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AACvE,OAAO,EAAE,2BAA2B,EAAE,MAAM,4CAA4C,CAAC;AACzF,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAC7E,OAAO,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AAC3E,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAE7E,iGAAiG;AACjG,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,OAA8B,EAC9B,SAAuF,EACvF,YAA4C;IAE5C,MAAM,WAAW,GAAsB,EAAE,CAAC;IAC1C,MAAM,WAAW,GAAG,uBAAuB,CAAC;QAC1C,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,SAAS;KACV,CAAC,CAAC;IACH,IAAI,CAAC,WAAW,CAAC,EAAE;QAAE,OAAO,WAAW,CAAC;IACxC,WAAW,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC;IAC7C,IACE,OAAO,CAAC,QAAQ,KAAK,SAAS;QAC9B,OAAO,CAAC,eAAe,KAAK,SAAS;QACrC,CAAC,wBAAwB,CAAC,OAAO,CAAC,eAAe,EAAE,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,EAC7E,CAAC;QACD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,WAAW,EAAE;gBACX,GAAG,WAAW;gBACd;oBACE,QAAQ,EAAE,OAAO;oBACjB,IAAI,EAAE,kCAAkC;oBACxC,OAAO,EACL,oHAAoH;iBACvH;aACF;SACF,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,yBAAyB,CAC9C,WAAW,CAAC,KAAK,CAAC,OAAO,EACzB,YAAY,CAAC,eAAe,CAC7B,CAAC;IACF,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,OAAO,kBAAkB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IACnE,WAAW,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,2BAA2B,CAAC,OAAO,EAAE,WAAW,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IACtF,MAAM,UAAU,GAAG,MAAM,0BAA0B,CAAC,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC7E,IAAI,CAAC,UAAU,CAAC,EAAE;QAAE,OAAO,kBAAkB,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;IACvE,WAAW,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,MAAM,0BAA0B,CAAC,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACrF,IAAI,CAAC,SAAS,CAAC,EAAE;QAAE,OAAO,kBAAkB,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IACrE,WAAW,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CACvD,OAAO,EACP,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAC7C,CAAC;IACF,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,OAAO,kBAAkB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IACjE,WAAW,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACzC,MAAM,cAAc,GAAG;QACrB,SAAS,EAAE,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO;QACvD,OAAO,EACL,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;YAC9B,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO;YACvB,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;QAC1D,SAAS,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC,EAAE,GAAG,SAAS,CAAC,KAAK,CAAC;QAC/E,gBAAgB,EAAE,YAAY,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,IAAI,EAAE,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;KACvF,CAAC;IACF,IAAI,cAAc,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxC,WAAW,CAAC,IAAI,CAAC;YACf,QAAQ,EAAE,MAAM;YAChB,IAAI,EAAE,+BAA+B;YACrC,OAAO,EAAE,yEAAyE;SACnF,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;QACpF,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,OAAO,kBAAkB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QACjE,WAAW,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO;QACL,EAAE,EAAE,IAAI;QACR,KAAK,EAAE;YACL,WAAW,EAAE,WAAW,CAAC,KAAK;YAC9B,OAAO;YACP,QAAQ,EAAE,QAAQ,CAAC,KAAK;YACxB,OAAO,EAAE,OAAO,CAAC,KAAK;YACtB,cAAc;SACf;QACD,WAAW;KACZ,CAAC;AACJ,CAAC;AAED,oGAAoG;AACpG,SAAS,wBAAwB,CAC/B,QAA0D,EAC1D,OAAyD;IAEzD,OAAO,iBAAiB,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,iBAAiB,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1F,CAAC;AAED,kEAAkE;AAClE,SAAS,iBAAiB,CACxB,OAAyD;IAEzD,OAAO;QACL,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ;QACnC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ;QACnC,OAAO,CAAC,QAAQ,EAAE,QAAQ;QAC1B,OAAO,CAAC,aAAa,EAAE,QAAQ;QAC/B,OAAO,CAAC,IAAI,EAAE,QAAQ;QACtB,OAAO,CAAC,KAAK,EAAE,QAAQ;QACvB,OAAO,CAAC,WAAW,EAAE,QAAQ;KAC9B,CAAC;AACJ,CAAC;AAED,sFAAsF;AACtF,SAAS,YAAY,CACnB,QAAsE,EACtE,OAAqE;IAErE,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;IACpD,OAAO,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,CAAC;AAC3F,CAAC;AAED,qFAAqF;AACrF,SAAS,SAAS,CAChB,MAA4E;IAE5E,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC;IACzB,OAAO,GAAG,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,WAAW,KAAK,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,UAAU,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC;AAC3G,CAAC","sourcesContent":["import type { InfraDiagnostic, InfraResult } from '@ankhorage/contracts/infra';\n\nimport type {\n  InfraOperationRequest,\n  InfraOrchestrationDependencies,\n  PreparedInfraOperation,\n} from '../../../../types/infraOrchestration.js';\nimport { resolveInfraEnvironment } from '../../domain/resolveInfraEnvironment.js';\nimport { appendInfraFailure } from '../../utils/appendInfraFailure.js';\nimport { createInfraExecutionContext } from '../../utils/createInfraExecutionContext.js';\nimport { collectInfraWorkloadsAsync } from './collectInfraWorkloadsAsync.js';\nimport { resolveInfraAdaptersAsync } from './resolveInfraAdaptersAsync.js';\nimport { validateInfraAdaptersAsync } from './validateInfraAdaptersAsync.js';\n\n/*** Resolve and validate one operation without creating, updating or deleting infrastructure. */\nexport async function prepareInfraOperationAsync(\n  request: InfraOperationRequest,\n  operation: 'validate' | 'plan' | 'generate' | 'status' | 'outputs' | 'down' | 'destroy',\n  dependencies: InfraOrchestrationDependencies,\n): Promise<InfraResult<PreparedInfraOperation>> {\n  const diagnostics: InfraDiagnostic[] = [];\n  const environment = resolveInfraEnvironment({\n    manifest: request.manifest,\n    environment: request.environment,\n    operation,\n  });\n  if (!environment.ok) return environment;\n  diagnostics.push(...environment.diagnostics);\n  if (\n    request.previous !== undefined &&\n    request.previousDesired !== undefined &&\n    !hasSameProviderSelection(request.previousDesired, environment.value.desired)\n  ) {\n    return {\n      ok: false,\n      diagnostics: [\n        ...diagnostics,\n        {\n          severity: 'error',\n          code: 'infra-provider-selection-changed',\n          message:\n            'Stored Infra resources use another provider selection. Destroy that environment before applying the new selection.',\n        },\n      ],\n    };\n  }\n  const adapters = await resolveInfraAdaptersAsync(\n    environment.value.desired,\n    dependencies.adapterResolver,\n  );\n  if (!adapters.ok) return appendInfraFailure(diagnostics, adapters);\n  diagnostics.push(...adapters.diagnostics);\n  const context = createInfraExecutionContext(request, environment.value, dependencies);\n  const validation = await validateInfraAdaptersAsync(context, adapters.value);\n  if (!validation.ok) return appendInfraFailure(diagnostics, validation);\n  diagnostics.push(...validation.diagnostics);\n  const workloads = await collectInfraWorkloadsAsync(context, adapters.value.services);\n  if (!workloads.ok) return appendInfraFailure(diagnostics, workloads);\n  diagnostics.push(...workloads.diagnostics);\n  const compute = await adapters.value.compute.inspectAsync(\n    context,\n    environment.value.desired.deployment.compute,\n  );\n  if (!compute.ok) return appendInfraFailure(diagnostics, compute);\n  diagnostics.push(...compute.diagnostics);\n  const runtimeDesired = {\n    selection: environment.value.desired.deployment.runtime,\n    targets:\n      compute.value.targets.length > 0\n        ? compute.value.targets\n        : (request.previous?.targets ?? compute.value.targets),\n    workloads: [...(environment.value.desired.workloads ?? []), ...workloads.value],\n    availableOutputs: mergeOutputs(request.previous?.outputs ?? [], compute.value.outputs),\n  };\n  if (runtimeDesired.targets.length === 0) {\n    diagnostics.push({\n      severity: 'info',\n      code: 'infra-runtime-target-deferred',\n      message: 'Runtime validation is deferred until compute exposes a portable target.',\n    });\n  } else {\n    const runtime = await adapters.value.runtime.validateAsync(context, runtimeDesired);\n    if (!runtime.ok) return appendInfraFailure(diagnostics, runtime);\n    diagnostics.push(...runtime.diagnostics);\n  }\n  return {\n    ok: true,\n    value: {\n      environment: environment.value,\n      context,\n      adapters: adapters.value,\n      compute: compute.value,\n      runtimeDesired,\n    },\n    diagnostics,\n  };\n}\n\n/*** Compare provider identity only; configuration changes remain normal in-place reconciliation. */\nfunction hasSameProviderSelection(\n  previous: PreparedInfraOperation['environment']['desired'],\n  current: PreparedInfraOperation['environment']['desired'],\n): boolean {\n  return providerSelection(previous).join('\\0') === providerSelection(current).join('\\0');\n}\n\n/*** Read the closed provider slots in stable capability order. */\nfunction providerSelection(\n  desired: PreparedInfraOperation['environment']['desired'],\n): readonly (string | undefined)[] {\n  return [\n    desired.deployment.compute.provider,\n    desired.deployment.runtime.provider,\n    desired.database?.provider,\n    desired.objectStorage?.provider,\n    desired.auth?.provider,\n    desired.authz?.provider,\n    desired.secretStore?.provider,\n  ];\n}\n\n/*** Prefer freshly inspected outputs while preserving unrelated safe prior values. */\nfunction mergeOutputs(\n  previous: PreparedInfraOperation['runtimeDesired']['availableOutputs'],\n  current: PreparedInfraOperation['runtimeDesired']['availableOutputs'],\n): PreparedInfraOperation['runtimeDesired']['availableOutputs'] {\n  const currentKeys = new Set(current.map(outputKey));\n  return [...previous.filter((output) => !currentKeys.has(outputKey(output))), ...current];\n}\n\n/*** Create one stable public-or-secret output identity without reading its value. */\nfunction outputKey(\n  output: PreparedInfraOperation['runtimeDesired']['availableOutputs'][number],\n): string {\n  const { owner } = output;\n  return `${owner.projectId}\\0${owner.environment}\\0${owner.adapter}\\0${owner.resourceId}\\0${output.name}`;\n}\n"]}

package/dist/features/environment-lifecycle/application/use-cases/resolveInfraAdaptersAsync.d.ts

@@ -0,0 +1,6 @@
+import { type InfraEnvironmentSpec, type InfraResult } from '@ankhorage/contracts/infra';
+import type { ResolvedInfraAdapters } from '../../../../types/infraOrchestration.js';
+import type { InfraAdapterPackageResolver } from '../ports/outbound/infraAdapterPackage.js';
+/*** Resolve exactly the selected provider packages and validate their public adapter boundaries. */
+export declare function resolveInfraAdaptersAsync(environment: InfraEnvironmentSpec, resolver: InfraAdapterPackageResolver): Promise<InfraResult<ResolvedInfraAdapters>>;
+//# sourceMappingURL=resolveInfraAdaptersAsync.d.ts.map

package/dist/features/environment-lifecycle/application/use-cases/resolveInfraAdaptersAsync.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolveInfraAdaptersAsync.d.ts","sourceRoot":"","sources":["../../../../../src/features/environment-lifecycle/application/use-cases/resolveInfraAdaptersAsync.ts"],"names":[],"mappings":"AAAA,OAAO,EAKL,KAAK,oBAAoB,EACzB,KAAK,WAAW,EAKjB,MAAM,4BAA4B,CAAC;AAEpC,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,yCAAyC,CAAC;AACrF,OAAO,KAAK,EAEV,2BAA2B,EAC5B,MAAM,0CAA0C,CAAC;AAElD,oGAAoG;AACpG,wBAAsB,yBAAyB,CAC7C,WAAW,EAAE,oBAAoB,EACjC,QAAQ,EAAE,2BAA2B,GACpC,OAAO,CAAC,WAAW,CAAC,qBAAqB,CAAC,CAAC,CA2B7C"}