@ankhorage/infra 4.1.12 → 5.0.0

package/dist/cli/utils/requireInfraSuccess.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"requireInfraSuccess.d.ts","sourceRoot":"","sources":["../../../src/cli/utils/requireInfraSuccess.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAmB,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAE/E,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAEnE,iGAAiG;AACjG,wBAAgB,mBAAmB,CAAC,CAAC,EACnC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,EACtB,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAA;CAAE,CAAC,CAGlE"}

package/dist/cli/utils/requireInfraSuccess.js

@@ -0,0 +1,17 @@
+/*** Emit diagnostics and narrow a provider-neutral result before command rendering continues. */
+export function requireInfraSuccess(result, context) {
+    writeDiagnostics(context, result.diagnostics);
+    if (!result.ok)
+        throw new Error(result.diagnostics.map(({ message }) => message).join(' '));
+}
+/*** Render diagnostics to the matching process channel without provider-specific formatting. */
+function writeDiagnostics(context, diagnostics) {
+    for (const diagnostic of diagnostics) {
+        const line = `${diagnostic.severity}: ${diagnostic.code}: ${diagnostic.message}\n`;
+        if (diagnostic.severity === 'info')
+            context.writeStdout(line);
+        else
+            context.writeStderr(line);
+    }
+}
+//# sourceMappingURL=requireInfraSuccess.js.map

package/dist/cli/utils/requireInfraSuccess.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"requireInfraSuccess.js","sourceRoot":"","sources":["../../../src/cli/utils/requireInfraSuccess.ts"],"names":[],"mappings":"AAIA,iGAAiG;AACjG,MAAM,UAAU,mBAAmB,CACjC,MAAsB,EACtB,OAA4B;IAE5B,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;IAC9C,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC9F,CAAC;AAED,gGAAgG;AAChG,SAAS,gBAAgB,CACvB,OAA4B,EAC5B,WAAuC;IAEvC,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,GAAG,UAAU,CAAC,QAAQ,KAAK,UAAU,CAAC,IAAI,KAAK,UAAU,CAAC,OAAO,IAAI,CAAC;QACnF,IAAI,UAAU,CAAC,QAAQ,KAAK,MAAM;YAAE,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;;YACzD,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;AACH,CAAC","sourcesContent":["import type { InfraDiagnostic, InfraResult } from '@ankhorage/contracts/infra';\n\nimport type { InfraCommandContext } from '../../types/infraCli.js';\n\n/*** Emit diagnostics and narrow a provider-neutral result before command rendering continues. */\nexport function requireInfraSuccess<T>(\n  result: InfraResult<T>,\n  context: InfraCommandContext,\n): asserts result is Extract<InfraResult<T>, { readonly ok: true }> {\n  writeDiagnostics(context, result.diagnostics);\n  if (!result.ok) throw new Error(result.diagnostics.map(({ message }) => message).join(' '));\n}\n\n/*** Render diagnostics to the matching process channel without provider-specific formatting. */\nfunction writeDiagnostics(\n  context: InfraCommandContext,\n  diagnostics: readonly InfraDiagnostic[],\n): void {\n  for (const diagnostic of diagnostics) {\n    const line = `${diagnostic.severity}: ${diagnostic.code}: ${diagnostic.message}\\n`;\n    if (diagnostic.severity === 'info') context.writeStdout(line);\n    else context.writeStderr(line);\n  }\n}\n"]}

package/dist/cli/utils/resolveInfraPersistence.d.ts

@@ -0,0 +1,4 @@
+import type { InfraDestroyRequest, InfraLedger } from '@ankhorage/contracts/infra';
+/*** Convert explicit owned-resource selectors into the canonical persistent deletion policy. */
+export declare function resolveInfraPersistence(ledger: InfraLedger | undefined, resourceSelectors: readonly string[]): InfraDestroyRequest['persistence'];
+//# sourceMappingURL=resolveInfraPersistence.d.ts.map

package/dist/cli/utils/resolveInfraPersistence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolveInfraPersistence.d.ts","sourceRoot":"","sources":["../../../src/cli/utils/resolveInfraPersistence.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAEnF,gGAAgG;AAChG,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,WAAW,GAAG,SAAS,EAC/B,iBAAiB,EAAE,SAAS,MAAM,EAAE,GACnC,mBAAmB,CAAC,aAAa,CAAC,CAepC"}

package/dist/cli/utils/resolveInfraPersistence.js

@@ -0,0 +1,17 @@
+/*** Convert explicit owned-resource selectors into the canonical persistent deletion policy. */
+export function resolveInfraPersistence(ledger, resourceSelectors) {
+    if (resourceSelectors.length === 0)
+        return { policy: 'retain' };
+    if (ledger === undefined) {
+        throw new Error('Persistent deletion requires stored Infra ownership state.');
+    }
+    const confirmedResources = resourceSelectors.map((selector) => {
+        const resource = ledger.resources.find(({ identity }) => `${identity.adapter}:${identity.resourceId}` === selector);
+        if (!resource?.persistent) {
+            throw new Error(`Persistent resource is not owned by this environment: ${selector}`);
+        }
+        return resource.identity;
+    });
+    return { policy: 'delete', confirmedResources };
+}
+//# sourceMappingURL=resolveInfraPersistence.js.map

package/dist/cli/utils/resolveInfraPersistence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolveInfraPersistence.js","sourceRoot":"","sources":["../../../src/cli/utils/resolveInfraPersistence.ts"],"names":[],"mappings":"AAEA,gGAAgG;AAChG,MAAM,UAAU,uBAAuB,CACrC,MAA+B,EAC/B,iBAAoC;IAEpC,IAAI,iBAAiB,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAChE,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAChF,CAAC;IACD,MAAM,kBAAkB,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE;QAC5D,MAAM,QAAQ,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CACpC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,GAAG,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,UAAU,EAAE,KAAK,QAAQ,CAC5E,CAAC;QACF,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,yDAAyD,QAAQ,EAAE,CAAC,CAAC;QACvF,CAAC;QACD,OAAO,QAAQ,CAAC,QAAQ,CAAC;IAC3B,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,kBAAkB,EAAE,CAAC;AAClD,CAAC","sourcesContent":["import type { InfraDestroyRequest, InfraLedger } from '@ankhorage/contracts/infra';\n\n/*** Convert explicit owned-resource selectors into the canonical persistent deletion policy. */\nexport function resolveInfraPersistence(\n  ledger: InfraLedger | undefined,\n  resourceSelectors: readonly string[],\n): InfraDestroyRequest['persistence'] {\n  if (resourceSelectors.length === 0) return { policy: 'retain' };\n  if (ledger === undefined) {\n    throw new Error('Persistent deletion requires stored Infra ownership state.');\n  }\n  const confirmedResources = resourceSelectors.map((selector) => {\n    const resource = ledger.resources.find(\n      ({ identity }) => `${identity.adapter}:${identity.resourceId}` === selector,\n    );\n    if (!resource?.persistent) {\n      throw new Error(`Persistent resource is not owned by this environment: ${selector}`);\n    }\n    return resource.identity;\n  });\n  return { policy: 'delete', confirmedResources };\n}\n"]}

package/dist/cli/utils/writeInfraEnvironmentOutputs.d.ts

@@ -0,0 +1,5 @@
+import type { InfraOutput } from '@ankhorage/contracts/infra';
+import type { InfraCommandContext } from '../../types/infraCli.js';
+/*** Print public environment-variable outputs while keeping secret values as references. */
+export declare function writeInfraEnvironmentOutputs(context: InfraCommandContext, outputs: readonly InfraOutput[]): void;
+//# sourceMappingURL=writeInfraEnvironmentOutputs.d.ts.map

package/dist/cli/utils/writeInfraEnvironmentOutputs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"writeInfraEnvironmentOutputs.d.ts","sourceRoot":"","sources":["../../../src/cli/utils/writeInfraEnvironmentOutputs.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAE9D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAEnE,4FAA4F;AAC5F,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,mBAAmB,EAC5B,OAAO,EAAE,SAAS,WAAW,EAAE,GAC9B,IAAI,CAUN"}

package/dist/cli/utils/writeInfraEnvironmentOutputs.js

@@ -0,0 +1,16 @@
+/*** Print public environment-variable outputs while keeping secret values as references. */
+export function writeInfraEnvironmentOutputs(context, outputs) {
+    for (const output of outputs) {
+        if (output.visibility === 'public' && output.environmentVariable !== undefined) {
+            context.writeStdout(`${output.environmentVariable}=${quoteEnvironmentValue(output.value)}\n`);
+        }
+        else if (output.visibility === 'secret') {
+            context.writeStderr(`Secret output ${output.owner.adapter}/${output.owner.resourceId}/${output.name} remains a reference and was not printed.\n`);
+        }
+    }
+}
+/*** Quote one scalar value for portable shell environment consumption. */
+function quoteEnvironmentValue(value) {
+    return `'${String(value).replaceAll("'", "'\\''")}'`;
+}
+//# sourceMappingURL=writeInfraEnvironmentOutputs.js.map

package/dist/cli/utils/writeInfraEnvironmentOutputs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"writeInfraEnvironmentOutputs.js","sourceRoot":"","sources":["../../../src/cli/utils/writeInfraEnvironmentOutputs.ts"],"names":[],"mappings":"AAIA,4FAA4F;AAC5F,MAAM,UAAU,4BAA4B,CAC1C,OAA4B,EAC5B,OAA+B;IAE/B,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,MAAM,CAAC,UAAU,KAAK,QAAQ,IAAI,MAAM,CAAC,mBAAmB,KAAK,SAAS,EAAE,CAAC;YAC/E,OAAO,CAAC,WAAW,CAAC,GAAG,MAAM,CAAC,mBAAmB,IAAI,qBAAqB,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAChG,CAAC;aAAM,IAAI,MAAM,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;YAC1C,OAAO,CAAC,WAAW,CACjB,iBAAiB,MAAM,CAAC,KAAK,CAAC,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC,UAAU,IAAI,MAAM,CAAC,IAAI,6CAA6C,CAC7H,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,0EAA0E;AAC1E,SAAS,qBAAqB,CAAC,KAAgC;IAC7D,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC;AACvD,CAAC","sourcesContent":["import type { InfraOutput } from '@ankhorage/contracts/infra';\n\nimport type { InfraCommandContext } from '../../types/infraCli.js';\n\n/*** Print public environment-variable outputs while keeping secret values as references. */\nexport function writeInfraEnvironmentOutputs(\n  context: InfraCommandContext,\n  outputs: readonly InfraOutput[],\n): void {\n  for (const output of outputs) {\n    if (output.visibility === 'public' && output.environmentVariable !== undefined) {\n      context.writeStdout(`${output.environmentVariable}=${quoteEnvironmentValue(output.value)}\\n`);\n    } else if (output.visibility === 'secret') {\n      context.writeStderr(\n        `Secret output ${output.owner.adapter}/${output.owner.resourceId}/${output.name} remains a reference and was not printed.\\n`,\n      );\n    }\n  }\n}\n\n/*** Quote one scalar value for portable shell environment consumption. */\nfunction quoteEnvironmentValue(value: string | number | boolean): string {\n  return `'${String(value).replaceAll(\"'\", \"'\\\\''\")}'`;\n}\n"]}

package/dist/cli/utils/writeInfraStructured.d.ts

@@ -0,0 +1,4 @@
+import type { InfraCommandContext, ParsedInfraArguments } from '../../types/infraCli.js';
+/*** Render one serializable command result in the requested human or compact JSON form. */
+export declare function writeInfraStructured(context: InfraCommandContext, format: ParsedInfraArguments['format'], value: unknown): void;
+//# sourceMappingURL=writeInfraStructured.d.ts.map

package/dist/cli/utils/writeInfraStructured.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"writeInfraStructured.d.ts","sourceRoot":"","sources":["../../../src/cli/utils/writeInfraStructured.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAEzF,2FAA2F;AAC3F,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,mBAAmB,EAC5B,MAAM,EAAE,oBAAoB,CAAC,QAAQ,CAAC,EACtC,KAAK,EAAE,OAAO,GACb,IAAI,CAGN"}

package/dist/cli/utils/writeInfraStructured.js

@@ -0,0 +1,8 @@
+/*** Render one serializable command result in the requested human or compact JSON form. */
+export function writeInfraStructured(context, format, value) {
+    if (format === 'json')
+        context.writeStdout(`${JSON.stringify(value)}\n`);
+    else
+        context.writeStdout(`${JSON.stringify(value, null, 2)}\n`);
+}
+//# sourceMappingURL=writeInfraStructured.js.map

package/dist/cli/utils/writeInfraStructured.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"writeInfraStructured.js","sourceRoot":"","sources":["../../../src/cli/utils/writeInfraStructured.ts"],"names":[],"mappings":"AAEA,2FAA2F;AAC3F,MAAM,UAAU,oBAAoB,CAClC,OAA4B,EAC5B,MAAsC,EACtC,KAAc;IAEd,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;;QACpE,OAAO,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;AAClE,CAAC","sourcesContent":["import type { InfraCommandContext, ParsedInfraArguments } from '../../types/infraCli.js';\n\n/*** Render one serializable command result in the requested human or compact JSON form. */\nexport function writeInfraStructured(\n  context: InfraCommandContext,\n  format: ParsedInfraArguments['format'],\n  value: unknown,\n): void {\n  if (format === 'json') context.writeStdout(`${JSON.stringify(value)}\\n`);\n  else context.writeStdout(`${JSON.stringify(value, null, 2)}\\n`);\n}\n"]}

package/dist/constants.d.ts

@@ -0,0 +1,10 @@
+export declare const INFRA_PACKAGE_NAME: string;
+export declare const INFRA_PACKAGE_VERSION: string;
+export declare const INFRA_COMMAND_CATEGORY: "infra";
+export declare const INFRA_CAPABILITIES: readonly ["infra.validate", "infra.plan", "infra.generate", "infra.up", "infra.status", "infra.outputs", "infra.down", "infra.destroy"];
+export declare const INFRA_PACKAGE_METADATA: {
+    readonly category: "infra";
+    readonly provider: "./dist/cli/index.js";
+    readonly capabilities: readonly ["infra.validate", "infra.plan", "infra.generate", "infra.up", "infra.status", "infra.outputs", "infra.down", "infra.destroy"];
+};
+//# sourceMappingURL=constants.d.ts.map

package/dist/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAQA,eAAO,MAAM,kBAAkB,QAAmB,CAAC;AACnD,eAAO,MAAM,qBAAqB,QAAsB,CAAC;AACzD,eAAO,MAAM,sBAAsB,SAAiD,CAAC;AACrF,eAAO,MAAM,kBAAkB,yIASiB,CAAC;AAEjD,eAAO,MAAM,sBAAsB;;;;CAIK,CAAC"}

package/dist/{packageMetadata.js → constants.js}

@@ -4,14 +4,17 @@ export const INFRA_PACKAGE_VERSION = packageJson.version;
 export const INFRA_COMMAND_CATEGORY = 'infra';
 export const INFRA_CAPABILITIES = [
     'infra.validate',
+    'infra.plan',
     'infra.generate',
-    'infra.status',
     'infra.up',
+    'infra.status',
+    'infra.outputs',
     'infra.down',
+    'infra.destroy',
 ];
 export const INFRA_PACKAGE_METADATA = {
     category: INFRA_COMMAND_CATEGORY,
-    provider: './dist/ankh.provider.js',
+    provider: './dist/cli/index.js',
     capabilities: INFRA_CAPABILITIES,
 };
-//# sourceMappingURL=packageMetadata.js.map
+//# sourceMappingURL=constants.js.map

package/dist/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAMA,OAAO,WAAW,MAAM,iBAAiB,CAAC;AAE1C,MAAM,CAAC,MAAM,kBAAkB,GAAG,WAAW,CAAC,IAAI,CAAC;AACnD,MAAM,CAAC,MAAM,qBAAqB,GAAG,WAAW,CAAC,OAAO,CAAC;AACzD,MAAM,CAAC,MAAM,sBAAsB,GAAG,OAA8C,CAAC;AACrF,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,gBAAgB;IAChB,YAAY;IACZ,gBAAgB;IAChB,UAAU;IACV,cAAc;IACd,eAAe;IACf,YAAY;IACZ,eAAe;CAC+B,CAAC;AAEjD,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,QAAQ,EAAE,sBAAsB;IAChC,QAAQ,EAAE,qBAAqB;IAC/B,YAAY,EAAE,kBAAkB;CACM,CAAC","sourcesContent":["import type {\n  AnkhCapabilityId,\n  AnkhCommandCategory,\n  AnkhPackageMetadata,\n} from '@ankhorage/contracts/cli';\n\nimport packageJson from '../package.json';\n\nexport const INFRA_PACKAGE_NAME = packageJson.name;\nexport const INFRA_PACKAGE_VERSION = packageJson.version;\nexport const INFRA_COMMAND_CATEGORY = 'infra' as const satisfies AnkhCommandCategory;\nexport const INFRA_CAPABILITIES = [\n  'infra.validate',\n  'infra.plan',\n  'infra.generate',\n  'infra.up',\n  'infra.status',\n  'infra.outputs',\n  'infra.down',\n  'infra.destroy',\n] as const satisfies readonly AnkhCapabilityId[];\n\nexport const INFRA_PACKAGE_METADATA = {\n  category: INFRA_COMMAND_CATEGORY,\n  provider: './dist/cli/index.js',\n  capabilities: INFRA_CAPABILITIES,\n} as const satisfies AnkhPackageMetadata;\n"]}

package/dist/features/environment-lifecycle/adapters/outbound/createEnvironmentInfraCredentialPort.d.ts

@@ -0,0 +1,4 @@
+import type { InfraExecutionContext } from '@ankhorage/contracts/infra';
+/*** Resolve execution-only control-plane credentials from exact-name or prefixed environment data. */
+export declare function createEnvironmentInfraCredentialPort(environment: Readonly<Record<string, string | undefined>>): InfraExecutionContext['credentials'];
+//# sourceMappingURL=createEnvironmentInfraCredentialPort.d.ts.map

package/dist/features/environment-lifecycle/adapters/outbound/createEnvironmentInfraCredentialPort.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"createEnvironmentInfraCredentialPort.d.ts","sourceRoot":"","sources":["../../../../../src/features/environment-lifecycle/adapters/outbound/createEnvironmentInfraCredentialPort.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAe,MAAM,4BAA4B,CAAC;AAKrF,sGAAsG;AACtG,wBAAgB,oCAAoC,CAClD,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,GACxD,qBAAqB,CAAC,aAAa,CAAC,CAiBtC"}

package/dist/features/environment-lifecycle/adapters/outbound/createEnvironmentInfraCredentialPort.js

@@ -0,0 +1,35 @@
+import { createInfraFailure } from '../../utils/createInfraFailure.js';
+import { normalizeInfraEnvironmentKey } from '../../utils/normalizeInfraEnvironmentKey.js';
+/*** Resolve execution-only control-plane credentials from exact-name or prefixed environment data. */
+export function createEnvironmentInfraCredentialPort(environment) {
+    return {
+        resolveAsync(reference) {
+            const prefixedName = `ANKH_INFRA_CREDENTIAL_${normalizeInfraEnvironmentKey(reference.name)}`;
+            const rawValue = Reflect.get(environment, reference.name) ?? Reflect.get(environment, prefixedName);
+            if (rawValue === undefined || rawValue.length === 0) {
+                return Promise.resolve(createInfraFailure('infra-control-plane-credential-missing', `Control-plane credential ${reference.name} is unavailable. Set ${reference.name} or ${prefixedName}.`));
+            }
+            return Promise.resolve(parseCredentialBundle(reference.name, rawValue));
+        },
+    };
+}
+/*** Parse JSON credential bundles; token variables also support their conventional scalar form. */
+function parseCredentialBundle(name, rawValue) {
+    try {
+        const parsed = JSON.parse(rawValue);
+        if (isRecord(parsed) && Object.values(parsed).every((value) => typeof value === 'string')) {
+            return { ok: true, value: parsed, diagnostics: [] };
+        }
+    }
+    catch {
+        if (name.endsWith('_TOKEN')) {
+            return { ok: true, value: { token: rawValue, apiToken: rawValue }, diagnostics: [] };
+        }
+    }
+    return createInfraFailure('infra-control-plane-credential-invalid', `Control-plane credential ${name} must be a JSON object containing string fields.`);
+}
+/*** Narrow JSON credential bundles. */
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+//# sourceMappingURL=createEnvironmentInfraCredentialPort.js.map

package/dist/features/environment-lifecycle/adapters/outbound/createEnvironmentInfraCredentialPort.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"createEnvironmentInfraCredentialPort.js","sourceRoot":"","sources":["../../../../../src/features/environment-lifecycle/adapters/outbound/createEnvironmentInfraCredentialPort.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AACvE,OAAO,EAAE,4BAA4B,EAAE,MAAM,6CAA6C,CAAC;AAE3F,sGAAsG;AACtG,MAAM,UAAU,oCAAoC,CAClD,WAAyD;IAEzD,OAAO;QACL,YAAY,CAAC,SAAS;YACpB,MAAM,YAAY,GAAG,yBAAyB,4BAA4B,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7F,MAAM,QAAQ,GACZ,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,SAAS,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;YACrF,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACpD,OAAO,OAAO,CAAC,OAAO,CACpB,kBAAkB,CAChB,wCAAwC,EACxC,4BAA4B,SAAS,CAAC,IAAI,wBAAwB,SAAS,CAAC,IAAI,OAAO,YAAY,GAAG,CACvG,CACF,CAAC;YACJ,CAAC;YACD,OAAO,OAAO,CAAC,OAAO,CAAC,qBAAqB,CAAC,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC1E,CAAC;KACF,CAAC;AACJ,CAAC;AAED,mGAAmG;AACnG,SAAS,qBAAqB,CAC5B,IAAY,EACZ,QAAgB;IAEhB,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC7C,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,EAAE,CAAC;YAC1F,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAA0C,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;QAC1F,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;QACvF,CAAC;IACH,CAAC;IACD,OAAO,kBAAkB,CACvB,wCAAwC,EACxC,4BAA4B,IAAI,kDAAkD,CACnF,CAAC;AACJ,CAAC;AAED,uCAAuC;AACvC,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC","sourcesContent":["import type { InfraExecutionContext, InfraResult } from '@ankhorage/contracts/infra';\n\nimport { createInfraFailure } from '../../utils/createInfraFailure.js';\nimport { normalizeInfraEnvironmentKey } from '../../utils/normalizeInfraEnvironmentKey.js';\n\n/*** Resolve execution-only control-plane credentials from exact-name or prefixed environment data. */\nexport function createEnvironmentInfraCredentialPort(\n  environment: Readonly<Record<string, string | undefined>>,\n): InfraExecutionContext['credentials'] {\n  return {\n    resolveAsync(reference) {\n      const prefixedName = `ANKH_INFRA_CREDENTIAL_${normalizeInfraEnvironmentKey(reference.name)}`;\n      const rawValue =\n        Reflect.get(environment, reference.name) ?? Reflect.get(environment, prefixedName);\n      if (rawValue === undefined || rawValue.length === 0) {\n        return Promise.resolve(\n          createInfraFailure(\n            'infra-control-plane-credential-missing',\n            `Control-plane credential ${reference.name} is unavailable. Set ${reference.name} or ${prefixedName}.`,\n          ),\n        );\n      }\n      return Promise.resolve(parseCredentialBundle(reference.name, rawValue));\n    },\n  };\n}\n\n/*** Parse JSON credential bundles; token variables also support their conventional scalar form. */\nfunction parseCredentialBundle(\n  name: string,\n  rawValue: string,\n): InfraResult<Readonly<Record<string, string>>> {\n  try {\n    const parsed: unknown = JSON.parse(rawValue);\n    if (isRecord(parsed) && Object.values(parsed).every((value) => typeof value === 'string')) {\n      return { ok: true, value: parsed as Readonly<Record<string, string>>, diagnostics: [] };\n    }\n  } catch {\n    if (name.endsWith('_TOKEN')) {\n      return { ok: true, value: { token: rawValue, apiToken: rawValue }, diagnostics: [] };\n    }\n  }\n  return createInfraFailure(\n    'infra-control-plane-credential-invalid',\n    `Control-plane credential ${name} must be a JSON object containing string fields.`,\n  );\n}\n\n/*** Narrow JSON credential bundles. */\nfunction isRecord(value: unknown): value is Readonly<Record<string, unknown>> {\n  return typeof value === 'object' && value !== null && !Array.isArray(value);\n}\n"]}

package/dist/features/environment-lifecycle/adapters/outbound/createEnvironmentInfraSecretPort.d.ts

@@ -0,0 +1,4 @@
+import type { InfraExecutionContext } from '@ankhorage/contracts/infra';
+/*** Resolve explicitly addressed secret values from environment data without serializing them. */
+export declare function createEnvironmentInfraSecretPort(environment: Readonly<Record<string, string | undefined>>): InfraExecutionContext['secrets'];
+//# sourceMappingURL=createEnvironmentInfraSecretPort.d.ts.map

package/dist/features/environment-lifecycle/adapters/outbound/createEnvironmentInfraSecretPort.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"createEnvironmentInfraSecretPort.d.ts","sourceRoot":"","sources":["../../../../../src/features/environment-lifecycle/adapters/outbound/createEnvironmentInfraSecretPort.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAKxE,kGAAkG;AAClG,wBAAgB,gCAAgC,CAC9C,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,GACxD,qBAAqB,CAAC,SAAS,CAAC,CAuBlC"}

package/dist/features/environment-lifecycle/adapters/outbound/createEnvironmentInfraSecretPort.js

@@ -0,0 +1,23 @@
+import { createInfraFailure } from '../../utils/createInfraFailure.js';
+import { normalizeInfraEnvironmentKey } from '../../utils/normalizeInfraEnvironmentKey.js';
+/*** Resolve explicitly addressed secret values from environment data without serializing them. */
+export function createEnvironmentInfraSecretPort(environment) {
+    return {
+        resolveAsync(reference) {
+            const variable = [
+                'ANKH_INFRA_SECRET',
+                reference.projectId,
+                reference.environment,
+                reference.ref,
+                reference.key,
+            ]
+                .map(normalizeInfraEnvironmentKey)
+                .join('_');
+            const value = Reflect.get(environment, variable);
+            return Promise.resolve(typeof value !== 'string' || value.length === 0
+                ? createInfraFailure('infra-secret-unavailable', `Secret reference ${reference.ref}/${reference.key} is unavailable. Set ${variable}.`)
+                : { ok: true, value, diagnostics: [] });
+        },
+    };
+}
+//# sourceMappingURL=createEnvironmentInfraSecretPort.js.map

package/dist/features/environment-lifecycle/adapters/outbound/createEnvironmentInfraSecretPort.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"createEnvironmentInfraSecretPort.js","sourceRoot":"","sources":["../../../../../src/features/environment-lifecycle/adapters/outbound/createEnvironmentInfraSecretPort.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AACvE,OAAO,EAAE,4BAA4B,EAAE,MAAM,6CAA6C,CAAC;AAE3F,kGAAkG;AAClG,MAAM,UAAU,gCAAgC,CAC9C,WAAyD;IAEzD,OAAO;QACL,YAAY,CAAC,SAAS;YACpB,MAAM,QAAQ,GAAG;gBACf,mBAAmB;gBACnB,SAAS,CAAC,SAAS;gBACnB,SAAS,CAAC,WAAW;gBACrB,SAAS,CAAC,GAAG;gBACb,SAAS,CAAC,GAAG;aACd;iBACE,GAAG,CAAC,4BAA4B,CAAC;iBACjC,IAAI,CAAC,GAAG,CAAC,CAAC;YACb,MAAM,KAAK,GAAY,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;YAC1D,OAAO,OAAO,CAAC,OAAO,CACpB,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;gBAC7C,CAAC,CAAC,kBAAkB,CAChB,0BAA0B,EAC1B,oBAAoB,SAAS,CAAC,GAAG,IAAI,SAAS,CAAC,GAAG,wBAAwB,QAAQ,GAAG,CACtF;gBACH,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE,CACzC,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC","sourcesContent":["import type { InfraExecutionContext } from '@ankhorage/contracts/infra';\n\nimport { createInfraFailure } from '../../utils/createInfraFailure.js';\nimport { normalizeInfraEnvironmentKey } from '../../utils/normalizeInfraEnvironmentKey.js';\n\n/*** Resolve explicitly addressed secret values from environment data without serializing them. */\nexport function createEnvironmentInfraSecretPort(\n  environment: Readonly<Record<string, string | undefined>>,\n): InfraExecutionContext['secrets'] {\n  return {\n    resolveAsync(reference) {\n      const variable = [\n        'ANKH_INFRA_SECRET',\n        reference.projectId,\n        reference.environment,\n        reference.ref,\n        reference.key,\n      ]\n        .map(normalizeInfraEnvironmentKey)\n        .join('_');\n      const value: unknown = Reflect.get(environment, variable);\n      return Promise.resolve(\n        typeof value !== 'string' || value.length === 0\n          ? createInfraFailure(\n              'infra-secret-unavailable',\n              `Secret reference ${reference.ref}/${reference.key} is unavailable. Set ${variable}.`,\n            )\n          : { ok: true, value, diagnostics: [] },\n      );\n    },\n  };\n}\n"]}

package/dist/features/environment-lifecycle/adapters/outbound/createNodeInfraAdapterPackageResolver.d.ts

@@ -0,0 +1,4 @@
+import type { InfraAdapterPackageResolver } from '../../application/ports/outbound/infraAdapterPackage.js';
+/*** Load only a catalog-selected package through the host module resolver. */
+export declare function createNodeInfraAdapterPackageResolver(): InfraAdapterPackageResolver;
+//# sourceMappingURL=createNodeInfraAdapterPackageResolver.d.ts.map

package/dist/features/environment-lifecycle/adapters/outbound/createNodeInfraAdapterPackageResolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"createNodeInfraAdapterPackageResolver.d.ts","sourceRoot":"","sources":["../../../../../src/features/environment-lifecycle/adapters/outbound/createNodeInfraAdapterPackageResolver.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,yDAAyD,CAAC;AAE3G,8EAA8E;AAC9E,wBAAgB,qCAAqC,IAAI,2BAA2B,CAMnF"}

package/dist/features/environment-lifecycle/adapters/outbound/createNodeInfraAdapterPackageResolver.js

@@ -0,0 +1,9 @@
+/*** Load only a catalog-selected package through the host module resolver. */
+export function createNodeInfraAdapterPackageResolver() {
+    return {
+        loadAsync(packageName) {
+            return import(packageName);
+        },
+    };
+}
+//# sourceMappingURL=createNodeInfraAdapterPackageResolver.js.map

package/dist/features/environment-lifecycle/adapters/outbound/createNodeInfraAdapterPackageResolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"createNodeInfraAdapterPackageResolver.js","sourceRoot":"","sources":["../../../../../src/features/environment-lifecycle/adapters/outbound/createNodeInfraAdapterPackageResolver.ts"],"names":[],"mappings":"AAEA,8EAA8E;AAC9E,MAAM,UAAU,qCAAqC;IACnD,OAAO;QACL,SAAS,CAAC,WAAW;YACnB,OAAO,MAAM,CAAC,WAAW,CAAC,CAAC;QAC7B,CAAC;KACF,CAAC;AACJ,CAAC","sourcesContent":["import type { InfraAdapterPackageResolver } from '../../application/ports/outbound/infraAdapterPackage.js';\n\n/*** Load only a catalog-selected package through the host module resolver. */\nexport function createNodeInfraAdapterPackageResolver(): InfraAdapterPackageResolver {\n  return {\n    loadAsync(packageName) {\n      return import(packageName);\n    },\n  };\n}\n"]}

package/dist/features/environment-lifecycle/adapters/outbound/readStoredInfraStateAsync.d.ts

@@ -0,0 +1,5 @@
+import type { AppEnvironmentId } from '@ankhorage/contracts/environments';
+import type { InfraStoredState } from '../../../../types/infraOrchestration.js';
+/*** Read exact environment state; malformed ownership state fails closed rather than disappearing. */
+export declare function readStoredInfraStateAsync(projectPath: string, environment: AppEnvironmentId): Promise<InfraStoredState | null>;
+//# sourceMappingURL=readStoredInfraStateAsync.d.ts.map

package/dist/features/environment-lifecycle/adapters/outbound/readStoredInfraStateAsync.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"readStoredInfraStateAsync.d.ts","sourceRoot":"","sources":["../../../../../src/features/environment-lifecycle/adapters/outbound/readStoredInfraStateAsync.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AAG1E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yCAAyC,CAAC;AAIhF,sGAAsG;AACtG,wBAAsB,yBAAyB,CAC7C,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,gBAAgB,GAC5B,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAYlC"}

package/dist/features/environment-lifecycle/adapters/outbound/readStoredInfraStateAsync.js

@@ -0,0 +1,28 @@
+import { promises as fs } from 'fs';
+import { isInfraStoredState } from '../../utils/isInfraStoredState.js';
+import { resolveInfraStatePath } from '../../utils/resolveInfraStatePath.js';
+/*** Read exact environment state; malformed ownership state fails closed rather than disappearing. */
+export async function readStoredInfraStateAsync(projectPath, environment) {
+    const statePath = resolveInfraStatePath(projectPath, environment);
+    try {
+        const parsed = JSON.parse(await fs.readFile(statePath, 'utf8'));
+        if (!isInfraStoredState(parsed)) {
+            throw new Error(`Stored Infra state has an invalid shape: ${statePath}`);
+        }
+        return parsed;
+    }
+    catch (error) {
+        if (isMissingFile(error))
+            return null;
+        throw error;
+    }
+}
+/*** Recognize only the filesystem's absent-file failure. */
+function isMissingFile(error) {
+    return isRecord(error) && error.code === 'ENOENT';
+}
+/*** Narrow filesystem error values. */
+function isRecord(value) {
+    return typeof value === 'object' && value !== null;
+}
+//# sourceMappingURL=readStoredInfraStateAsync.js.map

package/dist/features/environment-lifecycle/adapters/outbound/readStoredInfraStateAsync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"readStoredInfraStateAsync.js","sourceRoot":"","sources":["../../../../../src/features/environment-lifecycle/adapters/outbound/readStoredInfraStateAsync.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,IAAI,CAAC;AAGpC,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AACvE,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAE7E,sGAAsG;AACtG,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,WAAmB,EACnB,WAA6B;IAE7B,MAAM,SAAS,GAAG,qBAAqB,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;IAClE,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;QACzE,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,4CAA4C,SAAS,EAAE,CAAC,CAAC;QAC3E,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,aAAa,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACtC,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,4DAA4D;AAC5D,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC;AACpD,CAAC;AAED,uCAAuC;AACvC,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC;AACrD,CAAC","sourcesContent":["import type { AppEnvironmentId } from '@ankhorage/contracts/environments';\nimport { promises as fs } from 'fs';\n\nimport type { InfraStoredState } from '../../../../types/infraOrchestration.js';\nimport { isInfraStoredState } from '../../utils/isInfraStoredState.js';\nimport { resolveInfraStatePath } from '../../utils/resolveInfraStatePath.js';\n\n/*** Read exact environment state; malformed ownership state fails closed rather than disappearing. */\nexport async function readStoredInfraStateAsync(\n  projectPath: string,\n  environment: AppEnvironmentId,\n): Promise<InfraStoredState | null> {\n  const statePath = resolveInfraStatePath(projectPath, environment);\n  try {\n    const parsed: unknown = JSON.parse(await fs.readFile(statePath, 'utf8'));\n    if (!isInfraStoredState(parsed)) {\n      throw new Error(`Stored Infra state has an invalid shape: ${statePath}`);\n    }\n    return parsed;\n  } catch (error) {\n    if (isMissingFile(error)) return null;\n    throw error;\n  }\n}\n\n/*** Recognize only the filesystem's absent-file failure. */\nfunction isMissingFile(error: unknown): boolean {\n  return isRecord(error) && error.code === 'ENOENT';\n}\n\n/*** Narrow filesystem error values. */\nfunction isRecord(value: unknown): value is Readonly<Record<string, unknown>> {\n  return typeof value === 'object' && value !== null;\n}\n"]}

package/dist/features/environment-lifecycle/adapters/outbound/removeStoredInfraStateAsync.d.ts

@@ -0,0 +1,4 @@
+import type { AppEnvironmentId } from '@ankhorage/contracts/environments';
+/*** Remove only the exact selected environment state after a complete destroy. */
+export declare function removeStoredInfraStateAsync(projectPath: string, environment: AppEnvironmentId): Promise<void>;
+//# sourceMappingURL=removeStoredInfraStateAsync.d.ts.map

package/dist/features/environment-lifecycle/adapters/outbound/removeStoredInfraStateAsync.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"removeStoredInfraStateAsync.d.ts","sourceRoot":"","sources":["../../../../../src/features/environment-lifecycle/adapters/outbound/removeStoredInfraStateAsync.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AAK1E,kFAAkF;AAClF,wBAAsB,2BAA2B,CAC/C,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,gBAAgB,GAC5B,OAAO,CAAC,IAAI,CAAC,CAEf"}

package/dist/features/environment-lifecycle/adapters/outbound/removeStoredInfraStateAsync.js

@@ -0,0 +1,7 @@
+import { promises as fs } from 'fs';
+import { resolveInfraStatePath } from '../../utils/resolveInfraStatePath.js';
+/*** Remove only the exact selected environment state after a complete destroy. */
+export async function removeStoredInfraStateAsync(projectPath, environment) {
+    await fs.rm(resolveInfraStatePath(projectPath, environment), { force: true });
+}
+//# sourceMappingURL=removeStoredInfraStateAsync.js.map

package/dist/features/environment-lifecycle/adapters/outbound/removeStoredInfraStateAsync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"removeStoredInfraStateAsync.js","sourceRoot":"","sources":["../../../../../src/features/environment-lifecycle/adapters/outbound/removeStoredInfraStateAsync.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,IAAI,CAAC;AAEpC,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAE7E,kFAAkF;AAClF,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,WAAmB,EACnB,WAA6B;IAE7B,MAAM,EAAE,CAAC,EAAE,CAAC,qBAAqB,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAChF,CAAC","sourcesContent":["import type { AppEnvironmentId } from '@ankhorage/contracts/environments';\nimport { promises as fs } from 'fs';\n\nimport { resolveInfraStatePath } from '../../utils/resolveInfraStatePath.js';\n\n/*** Remove only the exact selected environment state after a complete destroy. */\nexport async function removeStoredInfraStateAsync(\n  projectPath: string,\n  environment: AppEnvironmentId,\n): Promise<void> {\n  await fs.rm(resolveInfraStatePath(projectPath, environment), { force: true });\n}\n"]}

package/dist/features/environment-lifecycle/adapters/outbound/resolveInfraProjectAsync.d.ts

@@ -0,0 +1,7 @@
+import type { ResolvedInfraProject } from '../../../../types/infraProject.js';
+/*** Resolve one manifest-backed Infra project from the workspace and optional project selector. */
+export declare function resolveInfraProjectAsync(options: {
+    readonly cwd: string;
+    readonly projectId?: string;
+}): Promise<ResolvedInfraProject>;
+//# sourceMappingURL=resolveInfraProjectAsync.d.ts.map

package/dist/features/environment-lifecycle/adapters/outbound/resolveInfraProjectAsync.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolveInfraProjectAsync.d.ts","sourceRoot":"","sources":["../../../../../src/features/environment-lifecycle/adapters/outbound/resolveInfraProjectAsync.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AAE9E,mGAAmG;AACnG,wBAAsB,wBAAwB,CAAC,OAAO,EAAE;IACtD,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAiChC"}

package/dist/{project.js → features/environment-lifecycle/adapters/outbound/resolveInfraProjectAsync.js}

@@ -1,7 +1,8 @@
 import { isAppManifest } from '@ankhorage/contracts';
 import { promises as fs } from 'fs';
 import path from 'path';
-export async function resolveInfraProject(options) {
+/*** Resolve one manifest-backed Infra project from the workspace and optional project selector. */
+export async function resolveInfraProjectAsync(options) {
     const workspaceRoot = await findWorkspaceRoot(options.cwd);
     if (workspaceRoot === null) {
         throw new Error(`Could not find an Ankh workspace root from cwd: ${options.cwd}`);
@@ -18,7 +19,7 @@ export async function resolveInfraProject(options) {
         throw new Error(`Project '${projectId}' not found.`);
     }
     const manifestPath = path.join(projectPath, 'ankh.config.json');
-    const manifest = await readProjectManifest({ manifestPath, projectId });
+    const manifest = await readProjectManifest(manifestPath);
     return {
         appsRoot,
         manifest,
@@ -36,45 +37,20 @@ function resolveProjectPath(appsRoot, projectId) {
     }
     return projectPath;
 }
-function createFallbackManifest(projectId) {
-    return {
-        metadata: {
-            name: projectId,
-            slug: projectId,
-            version: '0.0.0',
-            category: 'developer_tools',
-            themeId: 'default',
-        },
-        themes: [],
-        activeThemeId: 'default',
-        infra: { modules: [] },
-        navigator: {
-            type: 'stack',
-            routes: [{ name: 'index', screenId: 'index' }],
-        },
-        screens: {},
-        settings: {
-            localization: {
-                defaultLocale: 'en',
-                locales: ['en'],
-            },
-        },
-    };
-}
-async function readProjectManifest(args) {
-    if (!(await pathExists(args.manifestPath))) {
-        return createFallbackManifest(args.projectId);
+async function readProjectManifest(manifestPath) {
+    if (!(await pathExists(manifestPath))) {
+        throw new Error(`Project manifest not found: ${manifestPath}`);
     }
-    const rawManifest = await fs.readFile(args.manifestPath, 'utf8');
+    const rawManifest = await fs.readFile(manifestPath, 'utf8');
     let parsed;
     try {
         parsed = JSON.parse(rawManifest);
     }
     catch (error) {
-        throw new Error(`Project manifest is not valid JSON: ${args.manifestPath}: ${getErrorMessage(error)}`, { cause: error });
+        throw new Error(`Project manifest is not valid JSON: ${manifestPath}: ${getErrorMessage(error)}`, { cause: error });
     }
     if (!isAppManifest(parsed)) {
-        throw new Error(`Project manifest has an invalid shape: ${args.manifestPath}`);
+        throw new Error(`Project manifest has an invalid shape: ${manifestPath}`);
     }
     return parsed;
 }
@@ -132,4 +108,4 @@ async function pathExists(filePath) {
 function getErrorMessage(error) {
     return error instanceof Error ? error.message : String(error);
 }
-//# sourceMappingURL=project.js.map
+//# sourceMappingURL=resolveInfraProjectAsync.js.map

package/dist/features/environment-lifecycle/adapters/outbound/resolveInfraProjectAsync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolveInfraProjectAsync.js","sourceRoot":"","sources":["../../../../../src/features/environment-lifecycle/adapters/outbound/resolveInfraProjectAsync.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoB,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACvE,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,IAAI,CAAC;AACpC,OAAO,IAAI,MAAM,MAAM,CAAC;AAIxB,mGAAmG;AACnG,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,OAG9C;IACC,MAAM,aAAa,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC3D,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,mDAAmD,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACpF,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;IAClD,MAAM,SAAS,GACb,OAAO,CAAC,SAAS,KAAK,SAAS;QAC7B,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,GAAG,EAAE,QAAQ,CAAC;QACvC,CAAC,CAAC,yBAAyB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACnD,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACb,iGAAiG,CAClG,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,kBAAkB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IAC5D,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,YAAY,SAAS,cAAc,CAAC,CAAC;IACvD,CAAC;IAED,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,kBAAkB,CAAC,CAAC;IAChE,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,YAAY,CAAC,CAAC;IAEzD,OAAO;QACL,QAAQ;QACR,QAAQ;QACR,YAAY;QACZ,SAAS;QACT,WAAW;QACX,aAAa;KACd,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,QAAgB,EAAE,SAAiB;IAC7D,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IACtD,MAAM,YAAY,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAE5D,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IAED,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,YAAoB;IACrD,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,+BAA+B,YAAY,EAAE,CAAC,CAAC;IACjE,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IAC5D,IAAI,MAAe,CAAC;IAEpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,uCAAuC,YAAY,KAAK,eAAe,CAAC,KAAK,CAAC,EAAE,EAChF,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,0CAA0C,YAAY,EAAE,CAAC,CAAC;IAC5E,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,SAAiB;IAChD,IAAI,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAE1C,SAAS,CAAC;QACR,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAChD,IAAI,MAAM,WAAW,CAAC,QAAQ,CAAC;YAAE,OAAO,WAAW,CAAC;QAEpD,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAC7C,IAAI,UAAU,KAAK,WAAW;YAAE,OAAO,IAAI,CAAC;QAC5C,WAAW,GAAG,UAAU,CAAC;IAC3B,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,GAAW,EAAE,QAAgB;IACnD,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9E,IAAI,YAAY,KAAK,EAAE,IAAI,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC1F,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,CAAC,SAAS,CAAC,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjD,OAAO,SAAS,KAAK,SAAS,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;AAC7F,CAAC;AAED,SAAS,yBAAyB,CAAC,SAAiB;IAClD,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;IACjF,CAAC;IAED,IACE,SAAS,KAAK,GAAG;QACjB,SAAS,KAAK,IAAI;QAClB,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;QAC1B,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC;QACvB,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,EACxB,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,uBAAuB,SAAS,2CAA2C,CAAC,CAAC;IAC/F,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,QAAgB;IACzC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACrC,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,QAAgB;IACxC,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC","sourcesContent":["import { type AppManifest, isAppManifest } from '@ankhorage/contracts';\nimport { promises as fs } from 'fs';\nimport path from 'path';\n\nimport type { ResolvedInfraProject } from '../../../../types/infraProject.js';\n\n/*** Resolve one manifest-backed Infra project from the workspace and optional project selector. */\nexport async function resolveInfraProjectAsync(options: {\n  readonly cwd: string;\n  readonly projectId?: string;\n}): Promise<ResolvedInfraProject> {\n  const workspaceRoot = await findWorkspaceRoot(options.cwd);\n  if (workspaceRoot === null) {\n    throw new Error(`Could not find an Ankh workspace root from cwd: ${options.cwd}`);\n  }\n\n  const appsRoot = path.join(workspaceRoot, 'apps');\n  const projectId =\n    options.projectId === undefined\n      ? inferProjectId(options.cwd, appsRoot)\n      : validateExplicitProjectId(options.projectId);\n  if (projectId === null) {\n    throw new Error(\n      'Could not infer a project from cwd. Pass a project id or run the command inside apps/<project>.',\n    );\n  }\n\n  const projectPath = resolveProjectPath(appsRoot, projectId);\n  if (!(await pathExists(projectPath))) {\n    throw new Error(`Project '${projectId}' not found.`);\n  }\n\n  const manifestPath = path.join(projectPath, 'ankh.config.json');\n  const manifest = await readProjectManifest(manifestPath);\n\n  return {\n    appsRoot,\n    manifest,\n    manifestPath,\n    projectId,\n    projectPath,\n    workspaceRoot,\n  };\n}\n\nfunction resolveProjectPath(appsRoot: string, projectId: string): string {\n  const projectPath = path.resolve(appsRoot, projectId);\n  const appsRootPath = `${path.resolve(appsRoot)}${path.sep}`;\n\n  if (!projectPath.startsWith(appsRootPath)) {\n    throw new Error('Security check failed while resolving the project path.');\n  }\n\n  return projectPath;\n}\n\nasync function readProjectManifest(manifestPath: string): Promise<AppManifest> {\n  if (!(await pathExists(manifestPath))) {\n    throw new Error(`Project manifest not found: ${manifestPath}`);\n  }\n\n  const rawManifest = await fs.readFile(manifestPath, 'utf8');\n  let parsed: unknown;\n\n  try {\n    parsed = JSON.parse(rawManifest);\n  } catch (error) {\n    throw new Error(\n      `Project manifest is not valid JSON: ${manifestPath}: ${getErrorMessage(error)}`,\n      { cause: error },\n    );\n  }\n\n  if (!isAppManifest(parsed)) {\n    throw new Error(`Project manifest has an invalid shape: ${manifestPath}`);\n  }\n\n  return parsed;\n}\n\nasync function findWorkspaceRoot(startPath: string): Promise<string | null> {\n  let currentPath = path.resolve(startPath);\n\n  for (;;) {\n    const appsRoot = path.join(currentPath, 'apps');\n    if (await isDirectory(appsRoot)) return currentPath;\n\n    const parentPath = path.dirname(currentPath);\n    if (parentPath === currentPath) return null;\n    currentPath = parentPath;\n  }\n}\n\nfunction inferProjectId(cwd: string, appsRoot: string): string | null {\n  const relativePath = path.relative(path.resolve(appsRoot), path.resolve(cwd));\n  if (relativePath === '' || relativePath.startsWith('..') || path.isAbsolute(relativePath)) {\n    return null;\n  }\n\n  const [projectId] = relativePath.split(path.sep);\n  return projectId === undefined || projectId.length === 0 ? null : path.basename(projectId);\n}\n\nfunction validateExplicitProjectId(projectId: string): string {\n  if (projectId.trim().length === 0) {\n    throw new Error('Invalid project id: expected a single safe project segment.');\n  }\n\n  if (\n    projectId === '.' ||\n    projectId === '..' ||\n    path.isAbsolute(projectId) ||\n    projectId.includes('/') ||\n    projectId.includes('\\\\')\n  ) {\n    throw new Error(`Invalid project id: ${projectId}. Expected a single safe project segment.`);\n  }\n\n  return projectId;\n}\n\nasync function isDirectory(filePath: string): Promise<boolean> {\n  try {\n    const stat = await fs.stat(filePath);\n    return stat.isDirectory();\n  } catch {\n    return false;\n  }\n}\n\nasync function pathExists(filePath: string): Promise<boolean> {\n  try {\n    await fs.access(filePath);\n    return true;\n  } catch {\n    return false;\n  }\n}\n\nfunction getErrorMessage(error: unknown): string {\n  return error instanceof Error ? error.message : String(error);\n}\n"]}

package/dist/features/environment-lifecycle/adapters/outbound/writeInfraGeneratedArtifactsAsync.d.ts

@@ -0,0 +1,5 @@
+import type { InfraGeneratedArtifact, InfraLedger } from '@ankhorage/contracts/infra';
+import type { InfraArtifactWriteResult } from '../../../../types/infraProject.js';
+/*** Write validated generated artifacts and remove only stale paths from the prior ledger. */
+export declare function writeInfraGeneratedArtifactsAsync(projectPath: string, artifacts: readonly InfraGeneratedArtifact[], previous: InfraLedger | undefined): Promise<InfraArtifactWriteResult>;
+//# sourceMappingURL=writeInfraGeneratedArtifactsAsync.d.ts.map

package/dist/features/environment-lifecycle/adapters/outbound/writeInfraGeneratedArtifactsAsync.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"writeInfraGeneratedArtifactsAsync.d.ts","sourceRoot":"","sources":["../../../../../src/features/environment-lifecycle/adapters/outbound/writeInfraGeneratedArtifactsAsync.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAItF,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,mCAAmC,CAAC;AAGlF,8FAA8F;AAC9F,wBAAsB,iCAAiC,CACrD,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,SAAS,sBAAsB,EAAE,EAC5C,QAAQ,EAAE,WAAW,GAAG,SAAS,GAChC,OAAO,CAAC,wBAAwB,CAAC,CAqBnC"}

package/dist/features/environment-lifecycle/adapters/outbound/writeInfraGeneratedArtifactsAsync.js

@@ -0,0 +1,28 @@
+import { promises as fs } from 'fs';
+import path from 'path';
+import { resolveProjectFile } from '../../utils/resolveProjectFile.js';
+/*** Write validated generated artifacts and remove only stale paths from the prior ledger. */
+export async function writeInfraGeneratedArtifactsAsync(projectPath, artifacts, previous) {
+    const nextPaths = new Set();
+    const validated = artifacts.map((artifact) => {
+        if (nextPaths.has(artifact.path)) {
+            throw new Error(`Duplicate generated Infra artifact path: ${artifact.path}`);
+        }
+        nextPaths.add(artifact.path);
+        return { artifact, outputPath: resolveProjectFile(projectPath, artifact.path) };
+    });
+    for (const { artifact, outputPath } of validated) {
+        await fs.mkdir(path.dirname(outputPath), { recursive: true });
+        await fs.writeFile(outputPath, artifact.content, 'utf8');
+        if (artifact.executable === true)
+            await fs.chmod(outputPath, 0o755);
+    }
+    const stalePaths = (previous?.artifacts ?? [])
+        .map(({ path: artifactPath }) => artifactPath)
+        .filter((artifactPath) => !nextPaths.has(artifactPath));
+    for (const stalePath of stalePaths) {
+        await fs.rm(resolveProjectFile(projectPath, stalePath), { force: true });
+    }
+    return { written: validated.length, removed: stalePaths.length };
+}
+//# sourceMappingURL=writeInfraGeneratedArtifactsAsync.js.map

package/dist/features/environment-lifecycle/adapters/outbound/writeInfraGeneratedArtifactsAsync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"writeInfraGeneratedArtifactsAsync.js","sourceRoot":"","sources":["../../../../../src/features/environment-lifecycle/adapters/outbound/writeInfraGeneratedArtifactsAsync.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,IAAI,CAAC;AACpC,OAAO,IAAI,MAAM,MAAM,CAAC;AAGxB,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AAEvE,8FAA8F;AAC9F,MAAM,CAAC,KAAK,UAAU,iCAAiC,CACrD,WAAmB,EACnB,SAA4C,EAC5C,QAAiC;IAEjC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,MAAM,SAAS,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE;QAC3C,IAAI,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,4CAA4C,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;QAC/E,CAAC;QACD,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC7B,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,kBAAkB,CAAC,WAAW,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;IAClF,CAAC,CAAC,CAAC;IACH,KAAK,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,SAAS,EAAE,CAAC;QACjD,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9D,MAAM,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACzD,IAAI,QAAQ,CAAC,UAAU,KAAK,IAAI;YAAE,MAAM,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,UAAU,GAAG,CAAC,QAAQ,EAAE,SAAS,IAAI,EAAE,CAAC;SAC3C,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,YAAY,CAAC;SAC7C,MAAM,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC;IAC1D,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,EAAE,CAAC,EAAE,CAAC,kBAAkB,CAAC,WAAW,EAAE,SAAS,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC;AACnE,CAAC","sourcesContent":["import type { InfraGeneratedArtifact, InfraLedger } from '@ankhorage/contracts/infra';\nimport { promises as fs } from 'fs';\nimport path from 'path';\n\nimport type { InfraArtifactWriteResult } from '../../../../types/infraProject.js';\nimport { resolveProjectFile } from '../../utils/resolveProjectFile.js';\n\n/*** Write validated generated artifacts and remove only stale paths from the prior ledger. */\nexport async function writeInfraGeneratedArtifactsAsync(\n  projectPath: string,\n  artifacts: readonly InfraGeneratedArtifact[],\n  previous: InfraLedger | undefined,\n): Promise<InfraArtifactWriteResult> {\n  const nextPaths = new Set<string>();\n  const validated = artifacts.map((artifact) => {\n    if (nextPaths.has(artifact.path)) {\n      throw new Error(`Duplicate generated Infra artifact path: ${artifact.path}`);\n    }\n    nextPaths.add(artifact.path);\n    return { artifact, outputPath: resolveProjectFile(projectPath, artifact.path) };\n  });\n  for (const { artifact, outputPath } of validated) {\n    await fs.mkdir(path.dirname(outputPath), { recursive: true });\n    await fs.writeFile(outputPath, artifact.content, 'utf8');\n    if (artifact.executable === true) await fs.chmod(outputPath, 0o755);\n  }\n  const stalePaths = (previous?.artifacts ?? [])\n    .map(({ path: artifactPath }) => artifactPath)\n    .filter((artifactPath) => !nextPaths.has(artifactPath));\n  for (const stalePath of stalePaths) {\n    await fs.rm(resolveProjectFile(projectPath, stalePath), { force: true });\n  }\n  return { written: validated.length, removed: stalePaths.length };\n}\n"]}

package/dist/features/environment-lifecycle/adapters/outbound/writeStoredInfraStateAsync.d.ts

@@ -0,0 +1,4 @@
+import type { InfraStoredState } from '../../../../types/infraOrchestration.js';
+/*** Persist serializable desired identity plus a secret-safe canonical ledger atomically. */
+export declare function writeStoredInfraStateAsync(projectPath: string, state: InfraStoredState): Promise<void>;
+//# sourceMappingURL=writeStoredInfraStateAsync.d.ts.map

package/dist/features/environment-lifecycle/adapters/outbound/writeStoredInfraStateAsync.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"writeStoredInfraStateAsync.d.ts","sourceRoot":"","sources":["../../../../../src/features/environment-lifecycle/adapters/outbound/writeStoredInfraStateAsync.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yCAAyC,CAAC;AAIhF,6FAA6F;AAC7F,wBAAsB,0BAA0B,CAC9C,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,gBAAgB,GACtB,OAAO,CAAC,IAAI,CAAC,CASf"}

package/dist/features/environment-lifecycle/adapters/outbound/writeStoredInfraStateAsync.js

@@ -0,0 +1,16 @@
+import { promises as fs } from 'fs';
+import path from 'path';
+import { isInfraStoredState } from '../../utils/isInfraStoredState.js';
+import { resolveInfraStatePath } from '../../utils/resolveInfraStatePath.js';
+/*** Persist serializable desired identity plus a secret-safe canonical ledger atomically. */
+export async function writeStoredInfraStateAsync(projectPath, state) {
+    if (!isInfraStoredState(state)) {
+        throw new Error('Refusing to persist invalid or cross-scoped Infra ownership state.');
+    }
+    const statePath = resolveInfraStatePath(projectPath, state.ledger.environment);
+    const temporaryPath = `${statePath}.tmp`;
+    await fs.mkdir(path.dirname(statePath), { recursive: true });
+    await fs.writeFile(temporaryPath, `${JSON.stringify(state, null, 2)}\n`, 'utf8');
+    await fs.rename(temporaryPath, statePath);
+}
+//# sourceMappingURL=writeStoredInfraStateAsync.js.map

package/dist/features/environment-lifecycle/adapters/outbound/writeStoredInfraStateAsync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"writeStoredInfraStateAsync.js","sourceRoot":"","sources":["../../../../../src/features/environment-lifecycle/adapters/outbound/writeStoredInfraStateAsync.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,IAAI,CAAC;AACpC,OAAO,IAAI,MAAM,MAAM,CAAC;AAGxB,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AACvE,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAE7E,6FAA6F;AAC7F,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,WAAmB,EACnB,KAAuB;IAEvB,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;IACxF,CAAC;IACD,MAAM,SAAS,GAAG,qBAAqB,CAAC,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAC/E,MAAM,aAAa,GAAG,GAAG,SAAS,MAAM,CAAC;IACzC,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,MAAM,EAAE,CAAC,SAAS,CAAC,aAAa,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACjF,MAAM,EAAE,CAAC,MAAM,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;AAC5C,CAAC","sourcesContent":["import { promises as fs } from 'fs';\nimport path from 'path';\n\nimport type { InfraStoredState } from '../../../../types/infraOrchestration.js';\nimport { isInfraStoredState } from '../../utils/isInfraStoredState.js';\nimport { resolveInfraStatePath } from '../../utils/resolveInfraStatePath.js';\n\n/*** Persist serializable desired identity plus a secret-safe canonical ledger atomically. */\nexport async function writeStoredInfraStateAsync(\n  projectPath: string,\n  state: InfraStoredState,\n): Promise<void> {\n  if (!isInfraStoredState(state)) {\n    throw new Error('Refusing to persist invalid or cross-scoped Infra ownership state.');\n  }\n  const statePath = resolveInfraStatePath(projectPath, state.ledger.environment);\n  const temporaryPath = `${statePath}.tmp`;\n  await fs.mkdir(path.dirname(statePath), { recursive: true });\n  await fs.writeFile(temporaryPath, `${JSON.stringify(state, null, 2)}\\n`, 'utf8');\n  await fs.rename(temporaryPath, statePath);\n}\n"]}

package/dist/features/environment-lifecycle/application/ports/outbound/infraAdapterPackage.d.ts

@@ -0,0 +1,9 @@
+import type { InfraAdapterDescriptor } from '@ankhorage/contracts/infra';
+export interface InfraAdapterPackageResolver {
+    loadAsync(packageName: string): Promise<unknown>;
+}
+export interface InfraAdapterPackageModule {
+    readonly infraAdapterDescriptor: InfraAdapterDescriptor;
+    readonly createInfraAdapter: () => unknown;
+}
+//# sourceMappingURL=infraAdapterPackage.d.ts.map

package/dist/features/environment-lifecycle/application/ports/outbound/infraAdapterPackage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"infraAdapterPackage.d.ts","sourceRoot":"","sources":["../../../../../../src/features/environment-lifecycle/application/ports/outbound/infraAdapterPackage.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AAEzE,MAAM,WAAW,2BAA2B;IAC1C,SAAS,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAClD;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,sBAAsB,EAAE,sBAAsB,CAAC;IACxD,QAAQ,CAAC,kBAAkB,EAAE,MAAM,OAAO,CAAC;CAC5C"}

package/dist/features/environment-lifecycle/application/ports/outbound/infraAdapterPackage.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=infraAdapterPackage.js.map

package/dist/features/environment-lifecycle/application/ports/outbound/infraAdapterPackage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"infraAdapterPackage.js","sourceRoot":"","sources":["../../../../../../src/features/environment-lifecycle/application/ports/outbound/infraAdapterPackage.ts"],"names":[],"mappings":"","sourcesContent":["import type { InfraAdapterDescriptor } from '@ankhorage/contracts/infra';\n\nexport interface InfraAdapterPackageResolver {\n  loadAsync(packageName: string): Promise<unknown>;\n}\n\nexport interface InfraAdapterPackageModule {\n  readonly infraAdapterDescriptor: InfraAdapterDescriptor;\n  readonly createInfraAdapter: () => unknown;\n}\n"]}