@ankhorage/infra 4.1.12 → 5.1.0

package/CHANGELOG.md

@@ -1,5 +1,21 @@
 # @ankhorage/infra
 
+## 5.1.0
+
+### Minor Changes
+
+- 51a60f2: Expose a typed project lifecycle that applies the canonical Infra use cases while preserving environment-scoped state and generated artifact ownership.
+
+## 5.0.0
+
+### Major Changes
+
+- 11216db: Replace the embedded Minikube implementation and application-specific deployment helpers with a provider-neutral typed environment lifecycle.
+
+  Infra now resolves the published compute, runtime, database/auth/storage, authorization and secret-store packages selected by the canonical manifest. It exposes `validate`, `plan`, `generate`, `up`, `status`, `outputs`, `down` and `destroy` through both the standalone executable and the Ankh provider. Environment-scoped state records exact ownership and secret references, while destroy requires exact project/environment confirmation and explicit confirmation for persistent deletion.
+
+  Consumers must migrate from removed Minikube, OAuth, port-forward, reset and app-serving APIs to the canonical manifest plus the eight lifecycle commands. Project tooling should use the renamed async owner APIs from `@ankhorage/infra/project`, such as `resolveInfraProjectAsync`, `readStoredInfraStateAsync` and `writeInfraGeneratedArtifactsAsync`.
+
 ## 4.1.12
 
 ### Patch Changes

package/README.md

@@ -3,51 +3,42 @@
 
 # INFRA
 
-![license: MIT](././paradox/badges/license.svg) ![npm: v4.1.8](././paradox/badges/npm.svg) ![runtime: bun](././paradox/badges/runtime.svg) ![typescript: strict](././paradox/badges/typescript.svg) ![eslint: checked](././paradox/badges/eslint.svg) ![prettier: checked](././paradox/badges/prettier.svg) ![build: checked](././paradox/badges/build.svg) ![tests: checked](././paradox/badges/tests.svg) ![docs: paradox](././paradox/badges/docs.svg)
+![license: MIT](././paradox/badges/license.svg) ![npm: v5.0.0](././paradox/badges/npm.svg) ![runtime: bun](././paradox/badges/runtime.svg) ![typescript: strict](././paradox/badges/typescript.svg) ![eslint: checked](././paradox/badges/eslint.svg) ![prettier: checked](././paradox/badges/prettier.svg) ![build: checked](././paradox/badges/build.svg) ![tests: checked](././paradox/badges/tests.svg) ![docs: paradox](././paradox/badges/docs.svg)
 
 Executable infra provider and standalone CLI for Ankhorage project workflows.
 
 ## Usage
 
-### Provider, CLI, and project API surface
+### Provider-neutral infrastructure lifecycle
 
-`@ankhorage/infra` owns infrastructure generation, project reconciliation,
-and generated lifecycle execution.
+`@ankhorage/infra` resolves only the compute, runtime, and service adapter packages selected by
+an environment-aware Infra manifest. Its typed use cases own orchestration, dependency ordering,
+safe outputs, deterministic artifacts, and environment-scoped ownership state. Provider packages
+own all technology-specific implementation.
 
-The same owner implementation backs CLI consumers and the public
-`@ankhorage/infra/project` application-service boundary. Trusted hosts such
-as Studio should call that subpath instead of reproducing ledger, generated
-file, lifecycle-script, or port-forward configuration semantics.
-
-CLI entrypoints:
-
-- `ankh infra ...`
-- `bunx @ankhorage/infra ...`
-
-Current command surface:
+The standalone CLI and `ankh infra` expose the same lifecycle:
 
 - `validate`
+- `plan`
 - `generate`
-- `status`
 - `up`
+- `status`
+- `outputs`
 - `down`
+- `destroy`
 
-Project resolution for the CLI is workspace-aware: pass `[project]`, or
-omit it when cwd is already inside `apps/<project>`. Programmatic project
-operations accept an explicit project path and do not require Studio or a
-particular workspace layout.
-
-Running applications can repair their provider-aware host endpoints through
-`ensureProjectInfrastructureRuntime()` from `@ankhorage/infra/project`. This
-operation only ensures the generated runtime port-forward group; it does not
-deploy, bootstrap, or reconcile infrastructure.
+`local` is the only default environment. Destruction always requires an explicit environment and
+exact `<project>:<environment>` confirmation. Persistent resources remain retained unless each
+exact owned resource is separately authorized with `--delete-resource <adapter>:<resourceId>`.
+Environment-style outputs print only explicitly public values with an environment-variable name;
+secret outputs remain references.
 
 Source: `src/readme-usage.ts`
 
 ```ts
-import { runCli } from './cli/bin.js';
+import { runInfraCliAsync } from './cli/runInfraCliAsync.js';
 
-await runCli(['--help']);
+await runInfraCliAsync(['--help']);
 ```
 
 ## Generated documentation
@@ -58,8 +49,6 @@ await runCli(['--help']);
 - [Architecture overview](././paradox/diagrams/architecture-overview.mmd)
 - [Module relationships](././paradox/diagrams/module-relationships.mmd)
 - [Export graph](././paradox/diagrams/export-graph.mmd)
-- [ankhorage-infra sequence](././paradox/diagrams/sequences/ankhorage-infra.mmd)
-- [createInfraSecretStoreAdapter sequence](././paradox/diagrams/sequences/create-infra-secret-store-adapter.mmd)
-- [getLocalAuthRedirectPatterns sequence](././paradox/diagrams/sequences/get-local-auth-redirect-patterns.mmd)
-- [normalizeAuthCallbackRoute sequence](././paradox/diagrams/sequences/normalize-auth-callback-route.mmd)
-- [resolveAuthRedirectConfiguration sequence](././paradox/diagrams/sequences/resolve-auth-redirect-configuration.mmd)
+- [getInfraEnvironmentOutputs sequence](././paradox/diagrams/sequences/get-infra-environment-outputs.mmd)
+- [orderInfraPlanActions sequence](././paradox/diagrams/sequences/order-infra-plan-actions.mmd)
+- [resolveInfraEnvironment sequence](././paradox/diagrams/sequences/resolve-infra-environment.mmd)

package/dist/cli/bin.d.ts

@@ -1,10 +1,3 @@
 #!/usr/bin/env bun
-import type { InfraCommandContext, InfraCommandRunResult } from '../commandContext.js';
-import { type InfraCommandServices, type RunInfraCommandImpl } from '../commands.js';
-export interface InfraCliOptions {
-    readonly context?: InfraCommandContext;
-    readonly runCommandImpl?: RunInfraCommandImpl;
-    readonly services?: Partial<InfraCommandServices>;
-}
-export declare function runCli(argv: readonly string[], options?: InfraCliOptions): Promise<InfraCommandRunResult>;
+export {};
 //# sourceMappingURL=bin.d.ts.map

package/dist/cli/bin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bin.d.ts","sourceRoot":"","sources":["../../src/cli/bin.ts"],"names":[],"mappings":";AAEA,OAAO,KAAK,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAEvF,OAAO,EAEL,KAAK,oBAAoB,EAIzB,KAAK,mBAAmB,EACzB,MAAM,gBAAgB,CAAC;AAExB,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,OAAO,CAAC,EAAE,mBAAmB,CAAC;IACvC,QAAQ,CAAC,cAAc,CAAC,EAAE,mBAAmB,CAAC;IAC9C,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,oBAAoB,CAAC,CAAC;CACnD;AAED,wBAAsB,MAAM,CAC1B,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,OAAO,GAAE,eAAoB,GAC5B,OAAO,CAAC,qBAAqB,CAAC,CA+BhC"}
+{"version":3,"file":"bin.d.ts","sourceRoot":"","sources":["../../src/cli/bin.ts"],"names":[],"mappings":""}

package/dist/cli/bin.js

@@ -1,39 +1,7 @@
 #!/usr/bin/env bun
-import { createDefaultCommandContext } from '../commandContext.js';
-import { findInfraCommandByStandaloneName, renderRootHelp, renderUnknownCommand, runInfraCommand, } from '../commands.js';
-export async function runCli(argv, options = {}) {
-    const context = options.context ?? createDefaultCommandContext();
-    const runCommand = options.runCommandImpl ?? runInfraCommand;
-    const [firstToken, ...restTokens] = argv;
-    if (firstToken === undefined || isHelpToken(firstToken)) {
-        context.writeStdout(renderRootHelp(context.version));
-        return { exitCode: 0 };
-    }
-    if (isVersionToken(firstToken)) {
-        context.writeStdout(`${context.version}\n`);
-        return { exitCode: 0 };
-    }
-    const command = findInfraCommandByStandaloneName(firstToken);
-    if (command === null) {
-        context.writeStderr(renderUnknownCommand(firstToken));
-        return { exitCode: 1 };
-    }
-    return runCommand({
-        argv: restTokens,
-        command,
-        context,
-    }, {
-        services: options.services,
-    });
-}
-function isHelpToken(value) {
-    return value === '--help' || value === '-h' || value === 'help';
-}
-function isVersionToken(value) {
-    return value === '--version' || value === '-v' || value === 'version';
-}
+import { runInfraCliAsync } from './runInfraCliAsync.js';
 if (import.meta.main) {
-    const result = await runCli(process.argv.slice(2));
+    const result = await runInfraCliAsync(process.argv.slice(2));
     process.exit(result.exitCode);
 }
 //# sourceMappingURL=bin.js.map

package/dist/cli/bin.js.map

@@ -1 +1 @@
-{"version":3,"file":"bin.js","sourceRoot":"","sources":["../../src/cli/bin.ts"],"names":[],"mappings":";AAGA,OAAO,EAAE,2BAA2B,EAAE,MAAM,sBAAsB,CAAC;AACnE,OAAO,EACL,gCAAgC,EAEhC,cAAc,EACd,oBAAoB,EACpB,eAAe,GAEhB,MAAM,gBAAgB,CAAC;AAQxB,MAAM,CAAC,KAAK,UAAU,MAAM,CAC1B,IAAuB,EACvB,UAA2B,EAAE;IAE7B,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,2BAA2B,EAAE,CAAC;IACjE,MAAM,UAAU,GAAG,OAAO,CAAC,cAAc,IAAI,eAAe,CAAC;IAC7D,MAAM,CAAC,UAAU,EAAE,GAAG,UAAU,CAAC,GAAG,IAAI,CAAC;IAEzC,IAAI,UAAU,KAAK,SAAS,IAAI,WAAW,CAAC,UAAU,CAAC,EAAE,CAAC;QACxD,OAAO,CAAC,WAAW,CAAC,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;QACrD,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACzB,CAAC;IAED,IAAI,cAAc,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/B,OAAO,CAAC,WAAW,CAAC,GAAG,OAAO,CAAC,OAAO,IAAI,CAAC,CAAC;QAC5C,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACzB,CAAC;IAED,MAAM,OAAO,GAAG,gCAAgC,CAAC,UAAU,CAAC,CAAC;IAC7D,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,OAAO,CAAC,WAAW,CAAC,oBAAoB,CAAC,UAAU,CAAC,CAAC,CAAC;QACtD,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACzB,CAAC;IAED,OAAO,UAAU,CACf;QACE,IAAI,EAAE,UAAU;QAChB,OAAO;QACP,OAAO;KACR,EACD;QACE,QAAQ,EAAE,OAAO,CAAC,QAAQ;KAC3B,CACF,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,MAAM,CAAC;AAClE,CAAC;AAED,SAAS,cAAc,CAAC,KAAa;IACnC,OAAO,KAAK,KAAK,WAAW,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,CAAC;AACxE,CAAC;AAED,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IACrB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACnD,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AAChC,CAAC","sourcesContent":["#!/usr/bin/env bun\n\nimport type { InfraCommandContext, InfraCommandRunResult } from '../commandContext.js';\nimport { createDefaultCommandContext } from '../commandContext.js';\nimport {\n  findInfraCommandByStandaloneName,\n  type InfraCommandServices,\n  renderRootHelp,\n  renderUnknownCommand,\n  runInfraCommand,\n  type RunInfraCommandImpl,\n} from '../commands.js';\n\nexport interface InfraCliOptions {\n  readonly context?: InfraCommandContext;\n  readonly runCommandImpl?: RunInfraCommandImpl;\n  readonly services?: Partial<InfraCommandServices>;\n}\n\nexport async function runCli(\n  argv: readonly string[],\n  options: InfraCliOptions = {},\n): Promise<InfraCommandRunResult> {\n  const context = options.context ?? createDefaultCommandContext();\n  const runCommand = options.runCommandImpl ?? runInfraCommand;\n  const [firstToken, ...restTokens] = argv;\n\n  if (firstToken === undefined || isHelpToken(firstToken)) {\n    context.writeStdout(renderRootHelp(context.version));\n    return { exitCode: 0 };\n  }\n\n  if (isVersionToken(firstToken)) {\n    context.writeStdout(`${context.version}\\n`);\n    return { exitCode: 0 };\n  }\n\n  const command = findInfraCommandByStandaloneName(firstToken);\n  if (command === null) {\n    context.writeStderr(renderUnknownCommand(firstToken));\n    return { exitCode: 1 };\n  }\n\n  return runCommand(\n    {\n      argv: restTokens,\n      command,\n      context,\n    },\n    {\n      services: options.services,\n    },\n  );\n}\n\nfunction isHelpToken(value: string): boolean {\n  return value === '--help' || value === '-h' || value === 'help';\n}\n\nfunction isVersionToken(value: string): boolean {\n  return value === '--version' || value === '-v' || value === 'version';\n}\n\nif (import.meta.main) {\n  const result = await runCli(process.argv.slice(2));\n  process.exit(result.exitCode);\n}\n"]}
+{"version":3,"file":"bin.js","sourceRoot":"","sources":["../../src/cli/bin.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAEzD,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IACrB,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7D,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AAChC,CAAC","sourcesContent":["#!/usr/bin/env bun\n\nimport { runInfraCliAsync } from './runInfraCliAsync.js';\n\nif (import.meta.main) {\n  const result = await runInfraCliAsync(process.argv.slice(2));\n  process.exit(result.exitCode);\n}\n"]}

package/dist/cli/commands/destroy.d.ts

@@ -0,0 +1,11 @@
+/*** Define exact-scope destruction behind environment and persistent-resource confirmation. */
+export declare const destroy: {
+    readonly standaloneName: "destroy";
+    readonly path: readonly ["destroy"];
+    readonly capability: "infra.destroy";
+    readonly summary: "Destroy exact owned resources behind explicit confirmation.";
+    readonly run: (request: import("../../types/infraCli.js").InfraCommandRunRequest, services: import("../index.js").InfraCommandServices) => Promise<{
+        exitCode: number;
+    }>;
+};
+//# sourceMappingURL=destroy.d.ts.map

package/dist/cli/commands/destroy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"destroy.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/destroy.ts"],"names":[],"mappings":"AAUA,+FAA+F;AAC/F,eAAO,MAAM,OAAO;;;;;;;;CAuCuB,CAAC"}

package/dist/cli/commands/destroy.js

@@ -0,0 +1,51 @@
+import { INFRA_CAPABILITIES } from '../../constants.js';
+import { prepareInfraCommandOperationAsync } from '../utils/prepareInfraCommandOperationAsync.js';
+import { requireInfraSuccess } from '../utils/requireInfraSuccess.js';
+import { resolveInfraPersistence } from '../utils/resolveInfraPersistence.js';
+import { writeInfraStructured } from '../utils/writeInfraStructured.js';
+/*** Define exact-scope destruction behind environment and persistent-resource confirmation. */
+export const destroy = {
+    standaloneName: 'destroy',
+    path: ['destroy'],
+    capability: INFRA_CAPABILITIES[7],
+    summary: 'Destroy exact owned resources behind explicit confirmation.',
+    async run(request, services) {
+        const operation = await prepareInfraCommandOperationAsync(request, services, true);
+        const environment = requireEnvironment(request.arguments.environment);
+        const confirmation = `${operation.project.projectId}:${environment}`;
+        if (request.arguments.confirmation !== confirmation) {
+            throw new Error(`Infra destroy requires --confirm ${confirmation}.`);
+        }
+        const destroyRequest = {
+            ...operation.operation,
+            environment,
+            confirmation: { projectId: operation.project.projectId, environment },
+            persistence: resolveInfraPersistence(operation.state?.ledger, request.arguments.deleteResources),
+        };
+        const result = await services.operations.destroy(destroyRequest, operation.dependencies);
+        requireInfraSuccess(result, request.context);
+        await services.writeArtifacts(operation.project.projectPath, [], operation.state?.ledger);
+        if (result.value.ledger === null) {
+            await services.removeState(operation.project.projectPath, environment);
+        }
+        else {
+            await services.writeState(operation.project.projectPath, {
+                schemaVersion: 1,
+                desired: operation.desired,
+                ledger: result.value.ledger,
+            });
+        }
+        writeInfraStructured(request.context, request.arguments.format, {
+            environment: result.value.environment,
+            retainedResources: result.value.ledger?.resources.length ?? 0,
+        });
+        return { exitCode: 0 };
+    },
+};
+/*** Require the explicit destroy environment after CLI parsing. */
+function requireEnvironment(value) {
+    if (value === undefined)
+        throw new Error('Infra destroy requires an explicit environment.');
+    return value;
+}
+//# sourceMappingURL=destroy.js.map

package/dist/cli/commands/destroy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"destroy.js","sourceRoot":"","sources":["../../../src/cli/commands/destroy.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAGxD,OAAO,EAAE,iCAAiC,EAAE,MAAM,+CAA+C,CAAC;AAClG,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,EAAE,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AAC9E,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AAExE,+FAA+F;AAC/F,MAAM,CAAC,MAAM,OAAO,GAAG;IACrB,cAAc,EAAE,SAAS;IACzB,IAAI,EAAE,CAAC,SAAS,CAAC;IACjB,UAAU,EAAE,kBAAkB,CAAC,CAAC,CAAC;IACjC,OAAO,EAAE,6DAA6D;IACtE,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ;QACzB,MAAM,SAAS,GAAG,MAAM,iCAAiC,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;QACnF,MAAM,WAAW,GAAG,kBAAkB,CAAC,OAAO,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QACtE,MAAM,YAAY,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,SAAS,IAAI,WAAW,EAAE,CAAC;QACrE,IAAI,OAAO,CAAC,SAAS,CAAC,YAAY,KAAK,YAAY,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CAAC,oCAAoC,YAAY,GAAG,CAAC,CAAC;QACvE,CAAC;QACD,MAAM,cAAc,GAAiC;YACnD,GAAG,SAAS,CAAC,SAAS;YACtB,WAAW;YACX,YAAY,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,OAAO,CAAC,SAAS,EAAE,WAAW,EAAE;YACrE,WAAW,EAAE,uBAAuB,CAClC,SAAS,CAAC,KAAK,EAAE,MAAM,EACvB,OAAO,CAAC,SAAS,CAAC,eAAe,CAClC;SACF,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,cAAc,EAAE,SAAS,CAAC,YAAY,CAAC,CAAC;QACzF,mBAAmB,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QAC7C,MAAM,QAAQ,CAAC,cAAc,CAAC,SAAS,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,EAAE,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC1F,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;YACjC,MAAM,QAAQ,CAAC,WAAW,CAAC,SAAS,CAAC,OAAO,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;QACzE,CAAC;aAAM,CAAC;YACN,MAAM,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,OAAO,CAAC,WAAW,EAAE;gBACvD,aAAa,EAAE,CAAC;gBAChB,OAAO,EAAE,SAAS,CAAC,OAAO;gBAC1B,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM;aAC5B,CAAC,CAAC;QACL,CAAC;QACD,oBAAoB,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,MAAM,EAAE;YAC9D,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,WAAW;YACrC,iBAAiB,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,CAAC,MAAM,IAAI,CAAC;SAC9D,CAAC,CAAC;QACH,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACzB,CAAC;CACwC,CAAC;AAE5C,mEAAmE;AACnE,SAAS,kBAAkB,CAAC,KAAmC;IAC7D,IAAI,KAAK,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IAC5F,OAAO,KAAK,CAAC;AACf,CAAC","sourcesContent":["import type { AppEnvironmentId } from '@ankhorage/contracts/environments';\n\nimport { INFRA_CAPABILITIES } from '../../constants.js';\nimport type { InfraCommandDefinition } from '../../types/infraCli.js';\nimport type { InfraDestroyOperationRequest } from '../../types/infraOrchestration.js';\nimport { prepareInfraCommandOperationAsync } from '../utils/prepareInfraCommandOperationAsync.js';\nimport { requireInfraSuccess } from '../utils/requireInfraSuccess.js';\nimport { resolveInfraPersistence } from '../utils/resolveInfraPersistence.js';\nimport { writeInfraStructured } from '../utils/writeInfraStructured.js';\n\n/*** Define exact-scope destruction behind environment and persistent-resource confirmation. */\nexport const destroy = {\n  standaloneName: 'destroy',\n  path: ['destroy'],\n  capability: INFRA_CAPABILITIES[7],\n  summary: 'Destroy exact owned resources behind explicit confirmation.',\n  async run(request, services) {\n    const operation = await prepareInfraCommandOperationAsync(request, services, true);\n    const environment = requireEnvironment(request.arguments.environment);\n    const confirmation = `${operation.project.projectId}:${environment}`;\n    if (request.arguments.confirmation !== confirmation) {\n      throw new Error(`Infra destroy requires --confirm ${confirmation}.`);\n    }\n    const destroyRequest: InfraDestroyOperationRequest = {\n      ...operation.operation,\n      environment,\n      confirmation: { projectId: operation.project.projectId, environment },\n      persistence: resolveInfraPersistence(\n        operation.state?.ledger,\n        request.arguments.deleteResources,\n      ),\n    };\n    const result = await services.operations.destroy(destroyRequest, operation.dependencies);\n    requireInfraSuccess(result, request.context);\n    await services.writeArtifacts(operation.project.projectPath, [], operation.state?.ledger);\n    if (result.value.ledger === null) {\n      await services.removeState(operation.project.projectPath, environment);\n    } else {\n      await services.writeState(operation.project.projectPath, {\n        schemaVersion: 1,\n        desired: operation.desired,\n        ledger: result.value.ledger,\n      });\n    }\n    writeInfraStructured(request.context, request.arguments.format, {\n      environment: result.value.environment,\n      retainedResources: result.value.ledger?.resources.length ?? 0,\n    });\n    return { exitCode: 0 };\n  },\n} as const satisfies InfraCommandDefinition;\n\n/*** Require the explicit destroy environment after CLI parsing. */\nfunction requireEnvironment(value: AppEnvironmentId | undefined): AppEnvironmentId {\n  if (value === undefined) throw new Error('Infra destroy requires an explicit environment.');\n  return value;\n}\n"]}

package/dist/cli/commands/down.d.ts

@@ -0,0 +1,11 @@
+/*** Define reversible runtime suspension while retaining persistent resources. */
+export declare const down: {
+    readonly standaloneName: "down";
+    readonly path: readonly ["down"];
+    readonly capability: "infra.down";
+    readonly summary: "Reversibly suspend runtime workloads while retaining persistent data.";
+    readonly run: (request: import("../../types/infraCli.js").InfraCommandRunRequest, services: import("../index.js").InfraCommandServices) => Promise<{
+        exitCode: number;
+    }>;
+};
+//# sourceMappingURL=down.d.ts.map

package/dist/cli/commands/down.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"down.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/down.ts"],"names":[],"mappings":"AAMA,kFAAkF;AAClF,eAAO,MAAM,IAAI;;;;;;;;CAoB0B,CAAC"}

package/dist/cli/commands/down.js

@@ -0,0 +1,27 @@
+import { INFRA_CAPABILITIES } from '../../constants.js';
+import { prepareInfraCommandOperationAsync } from '../utils/prepareInfraCommandOperationAsync.js';
+import { requireInfraSuccess } from '../utils/requireInfraSuccess.js';
+import { writeInfraStructured } from '../utils/writeInfraStructured.js';
+/*** Define reversible runtime suspension while retaining persistent resources. */
+export const down = {
+    standaloneName: 'down',
+    path: ['down'],
+    capability: INFRA_CAPABILITIES[6],
+    summary: 'Reversibly suspend runtime workloads while retaining persistent data.',
+    async run(request, services) {
+        const operation = await prepareInfraCommandOperationAsync(request, services);
+        const result = await services.operations.down(operation.operation, operation.dependencies);
+        requireInfraSuccess(result, request.context);
+        await services.writeState(operation.project.projectPath, {
+            schemaVersion: 1,
+            desired: operation.desired,
+            ledger: result.value.ledger,
+        });
+        writeInfraStructured(request.context, request.arguments.format, {
+            environment: result.value.environment,
+            state: 'stopped',
+        });
+        return { exitCode: 0 };
+    },
+};
+//# sourceMappingURL=down.js.map

package/dist/cli/commands/down.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"down.js","sourceRoot":"","sources":["../../../src/cli/commands/down.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAExD,OAAO,EAAE,iCAAiC,EAAE,MAAM,+CAA+C,CAAC;AAClG,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AAExE,kFAAkF;AAClF,MAAM,CAAC,MAAM,IAAI,GAAG;IAClB,cAAc,EAAE,MAAM;IACtB,IAAI,EAAE,CAAC,MAAM,CAAC;IACd,UAAU,EAAE,kBAAkB,CAAC,CAAC,CAAC;IACjC,OAAO,EAAE,uEAAuE;IAChF,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ;QACzB,MAAM,SAAS,GAAG,MAAM,iCAAiC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC7E,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,SAAS,CAAC,YAAY,CAAC,CAAC;QAC3F,mBAAmB,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QAC7C,MAAM,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,OAAO,CAAC,WAAW,EAAE;YACvD,aAAa,EAAE,CAAC;YAChB,OAAO,EAAE,SAAS,CAAC,OAAO;YAC1B,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM;SAC5B,CAAC,CAAC;QACH,oBAAoB,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,MAAM,EAAE;YAC9D,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,WAAW;YACrC,KAAK,EAAE,SAAS;SACjB,CAAC,CAAC;QACH,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACzB,CAAC;CACwC,CAAC","sourcesContent":["import { INFRA_CAPABILITIES } from '../../constants.js';\nimport type { InfraCommandDefinition } from '../../types/infraCli.js';\nimport { prepareInfraCommandOperationAsync } from '../utils/prepareInfraCommandOperationAsync.js';\nimport { requireInfraSuccess } from '../utils/requireInfraSuccess.js';\nimport { writeInfraStructured } from '../utils/writeInfraStructured.js';\n\n/*** Define reversible runtime suspension while retaining persistent resources. */\nexport const down = {\n  standaloneName: 'down',\n  path: ['down'],\n  capability: INFRA_CAPABILITIES[6],\n  summary: 'Reversibly suspend runtime workloads while retaining persistent data.',\n  async run(request, services) {\n    const operation = await prepareInfraCommandOperationAsync(request, services);\n    const result = await services.operations.down(operation.operation, operation.dependencies);\n    requireInfraSuccess(result, request.context);\n    await services.writeState(operation.project.projectPath, {\n      schemaVersion: 1,\n      desired: operation.desired,\n      ledger: result.value.ledger,\n    });\n    writeInfraStructured(request.context, request.arguments.format, {\n      environment: result.value.environment,\n      state: 'stopped',\n    });\n    return { exitCode: 0 };\n  },\n} as const satisfies InfraCommandDefinition;\n"]}

package/dist/cli/commands/generate.d.ts

@@ -0,0 +1,11 @@
+/*** Define deterministic review-artifact generation without remote side effects. */
+export declare const generate: {
+    readonly standaloneName: "generate";
+    readonly path: readonly ["generate"];
+    readonly capability: "infra.generate";
+    readonly summary: "Generate deterministic review artifacts without remote side effects.";
+    readonly run: (request: import("../../types/infraCli.js").InfraCommandRunRequest, services: import("../index.js").InfraCommandServices) => Promise<{
+        exitCode: number;
+    }>;
+};
+//# sourceMappingURL=generate.d.ts.map

package/dist/cli/commands/generate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"generate.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/generate.ts"],"names":[],"mappings":"AAMA,oFAAoF;AACpF,eAAO,MAAM,QAAQ;;;;;;;;CA0BsB,CAAC"}

package/dist/cli/commands/generate.js

@@ -0,0 +1,29 @@
+import { INFRA_CAPABILITIES } from '../../constants.js';
+import { prepareInfraCommandOperationAsync } from '../utils/prepareInfraCommandOperationAsync.js';
+import { requireInfraSuccess } from '../utils/requireInfraSuccess.js';
+import { writeInfraStructured } from '../utils/writeInfraStructured.js';
+/*** Define deterministic review-artifact generation without remote side effects. */
+export const generate = {
+    standaloneName: 'generate',
+    path: ['generate'],
+    capability: INFRA_CAPABILITIES[2],
+    summary: 'Generate deterministic review artifacts without remote side effects.',
+    async run(request, services) {
+        const operation = await prepareInfraCommandOperationAsync(request, services);
+        const result = await services.operations.generate(operation.operation, operation.dependencies);
+        requireInfraSuccess(result, request.context);
+        const written = await services.writeArtifacts(operation.project.projectPath, result.value.artifacts, operation.state?.ledger);
+        await services.writeState(operation.project.projectPath, {
+            schemaVersion: 1,
+            desired: operation.desired,
+            ledger: result.value.ledger,
+        });
+        writeInfraStructured(request.context, request.arguments.format, {
+            environment: result.value.environment,
+            ...written,
+            artifacts: result.value.artifacts.map(({ path }) => path),
+        });
+        return { exitCode: 0 };
+    },
+};
+//# sourceMappingURL=generate.js.map

package/dist/cli/commands/generate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"generate.js","sourceRoot":"","sources":["../../../src/cli/commands/generate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAExD,OAAO,EAAE,iCAAiC,EAAE,MAAM,+CAA+C,CAAC;AAClG,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AAExE,oFAAoF;AACpF,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB,cAAc,EAAE,UAAU;IAC1B,IAAI,EAAE,CAAC,UAAU,CAAC;IAClB,UAAU,EAAE,kBAAkB,CAAC,CAAC,CAAC;IACjC,OAAO,EAAE,sEAAsE;IAC/E,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ;QACzB,MAAM,SAAS,GAAG,MAAM,iCAAiC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC7E,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,EAAE,SAAS,CAAC,YAAY,CAAC,CAAC;QAC/F,mBAAmB,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QAC7C,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,cAAc,CAC3C,SAAS,CAAC,OAAO,CAAC,WAAW,EAC7B,MAAM,CAAC,KAAK,CAAC,SAAS,EACtB,SAAS,CAAC,KAAK,EAAE,MAAM,CACxB,CAAC;QACF,MAAM,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,OAAO,CAAC,WAAW,EAAE;YACvD,aAAa,EAAE,CAAC;YAChB,OAAO,EAAE,SAAS,CAAC,OAAO;YAC1B,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM;SAC5B,CAAC,CAAC;QACH,oBAAoB,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,MAAM,EAAE;YAC9D,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,WAAW;YACrC,GAAG,OAAO;YACV,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC;SAC1D,CAAC,CAAC;QACH,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACzB,CAAC;CACwC,CAAC","sourcesContent":["import { INFRA_CAPABILITIES } from '../../constants.js';\nimport type { InfraCommandDefinition } from '../../types/infraCli.js';\nimport { prepareInfraCommandOperationAsync } from '../utils/prepareInfraCommandOperationAsync.js';\nimport { requireInfraSuccess } from '../utils/requireInfraSuccess.js';\nimport { writeInfraStructured } from '../utils/writeInfraStructured.js';\n\n/*** Define deterministic review-artifact generation without remote side effects. */\nexport const generate = {\n  standaloneName: 'generate',\n  path: ['generate'],\n  capability: INFRA_CAPABILITIES[2],\n  summary: 'Generate deterministic review artifacts without remote side effects.',\n  async run(request, services) {\n    const operation = await prepareInfraCommandOperationAsync(request, services);\n    const result = await services.operations.generate(operation.operation, operation.dependencies);\n    requireInfraSuccess(result, request.context);\n    const written = await services.writeArtifacts(\n      operation.project.projectPath,\n      result.value.artifacts,\n      operation.state?.ledger,\n    );\n    await services.writeState(operation.project.projectPath, {\n      schemaVersion: 1,\n      desired: operation.desired,\n      ledger: result.value.ledger,\n    });\n    writeInfraStructured(request.context, request.arguments.format, {\n      environment: result.value.environment,\n      ...written,\n      artifacts: result.value.artifacts.map(({ path }) => path),\n    });\n    return { exitCode: 0 };\n  },\n} as const satisfies InfraCommandDefinition;\n"]}

package/dist/cli/commands/outputs.d.ts

@@ -0,0 +1,11 @@
+/*** Define safe public-output and secret-reference presentation. */
+export declare const outputs: {
+    readonly standaloneName: "outputs";
+    readonly path: readonly ["outputs"];
+    readonly capability: "infra.outputs";
+    readonly summary: "Print safe public outputs and secret references.";
+    readonly run: (request: import("../../types/infraCli.js").InfraCommandRunRequest, services: import("../index.js").InfraCommandServices) => Promise<{
+        exitCode: number;
+    }>;
+};
+//# sourceMappingURL=outputs.d.ts.map

package/dist/cli/commands/outputs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"outputs.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/outputs.ts"],"names":[],"mappings":"AAOA,oEAAoE;AACpE,eAAO,MAAM,OAAO;;;;;;;;CAgBuB,CAAC"}

package/dist/cli/commands/outputs.js

@@ -0,0 +1,25 @@
+import { INFRA_CAPABILITIES } from '../../constants.js';
+import { prepareInfraCommandOperationAsync } from '../utils/prepareInfraCommandOperationAsync.js';
+import { requireInfraSuccess } from '../utils/requireInfraSuccess.js';
+import { writeInfraEnvironmentOutputs } from '../utils/writeInfraEnvironmentOutputs.js';
+import { writeInfraStructured } from '../utils/writeInfraStructured.js';
+/*** Define safe public-output and secret-reference presentation. */
+export const outputs = {
+    standaloneName: 'outputs',
+    path: ['outputs'],
+    capability: INFRA_CAPABILITIES[5],
+    summary: 'Print safe public outputs and secret references.',
+    async run(request, services) {
+        const operation = await prepareInfraCommandOperationAsync(request, services);
+        const result = services.operations.outputs(operation.operation);
+        requireInfraSuccess(result, request.context);
+        if (request.arguments.format === 'env') {
+            writeInfraEnvironmentOutputs(request.context, result.value.outputs);
+        }
+        else {
+            writeInfraStructured(request.context, request.arguments.format, result.value);
+        }
+        return { exitCode: 0 };
+    },
+};
+//# sourceMappingURL=outputs.js.map

package/dist/cli/commands/outputs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"outputs.js","sourceRoot":"","sources":["../../../src/cli/commands/outputs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAExD,OAAO,EAAE,iCAAiC,EAAE,MAAM,+CAA+C,CAAC;AAClG,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,EAAE,4BAA4B,EAAE,MAAM,0CAA0C,CAAC;AACxF,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AAExE,oEAAoE;AACpE,MAAM,CAAC,MAAM,OAAO,GAAG;IACrB,cAAc,EAAE,SAAS;IACzB,IAAI,EAAE,CAAC,SAAS,CAAC;IACjB,UAAU,EAAE,kBAAkB,CAAC,CAAC,CAAC;IACjC,OAAO,EAAE,kDAAkD;IAC3D,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ;QACzB,MAAM,SAAS,GAAG,MAAM,iCAAiC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC7E,MAAM,MAAM,GAAG,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAChE,mBAAmB,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QAC7C,IAAI,OAAO,CAAC,SAAS,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YACvC,4BAA4B,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACtE,CAAC;aAAM,CAAC;YACN,oBAAoB,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QAChF,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACzB,CAAC;CACwC,CAAC","sourcesContent":["import { INFRA_CAPABILITIES } from '../../constants.js';\nimport type { InfraCommandDefinition } from '../../types/infraCli.js';\nimport { prepareInfraCommandOperationAsync } from '../utils/prepareInfraCommandOperationAsync.js';\nimport { requireInfraSuccess } from '../utils/requireInfraSuccess.js';\nimport { writeInfraEnvironmentOutputs } from '../utils/writeInfraEnvironmentOutputs.js';\nimport { writeInfraStructured } from '../utils/writeInfraStructured.js';\n\n/*** Define safe public-output and secret-reference presentation. */\nexport const outputs = {\n  standaloneName: 'outputs',\n  path: ['outputs'],\n  capability: INFRA_CAPABILITIES[5],\n  summary: 'Print safe public outputs and secret references.',\n  async run(request, services) {\n    const operation = await prepareInfraCommandOperationAsync(request, services);\n    const result = services.operations.outputs(operation.operation);\n    requireInfraSuccess(result, request.context);\n    if (request.arguments.format === 'env') {\n      writeInfraEnvironmentOutputs(request.context, result.value.outputs);\n    } else {\n      writeInfraStructured(request.context, request.arguments.format, result.value);\n    }\n    return { exitCode: 0 };\n  },\n} as const satisfies InfraCommandDefinition;\n"]}

package/dist/cli/commands/plan.d.ts

@@ -0,0 +1,11 @@
+/*** Define the ordered side-effect-free infrastructure planning command. */
+export declare const plan: {
+    readonly standaloneName: "plan";
+    readonly path: readonly ["plan"];
+    readonly capability: "infra.plan";
+    readonly summary: "Print an ordered side-effect-free infrastructure plan.";
+    readonly run: (request: import("../../types/infraCli.js").InfraCommandRunRequest, services: import("../index.js").InfraCommandServices) => Promise<{
+        exitCode: number;
+    }>;
+};
+//# sourceMappingURL=plan.d.ts.map

package/dist/cli/commands/plan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plan.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/plan.ts"],"names":[],"mappings":"AAMA,4EAA4E;AAC5E,eAAO,MAAM,IAAI;;;;;;;;CAY0B,CAAC"}

package/dist/cli/commands/plan.js

@@ -0,0 +1,19 @@
+import { INFRA_CAPABILITIES } from '../../constants.js';
+import { prepareInfraCommandOperationAsync } from '../utils/prepareInfraCommandOperationAsync.js';
+import { requireInfraSuccess } from '../utils/requireInfraSuccess.js';
+import { writeInfraStructured } from '../utils/writeInfraStructured.js';
+/*** Define the ordered side-effect-free infrastructure planning command. */
+export const plan = {
+    standaloneName: 'plan',
+    path: ['plan'],
+    capability: INFRA_CAPABILITIES[1],
+    summary: 'Print an ordered side-effect-free infrastructure plan.',
+    async run(request, services) {
+        const operation = await prepareInfraCommandOperationAsync(request, services);
+        const result = await services.operations.plan(operation.operation, operation.dependencies);
+        requireInfraSuccess(result, request.context);
+        writeInfraStructured(request.context, request.arguments.format, result.value);
+        return { exitCode: 0 };
+    },
+};
+//# sourceMappingURL=plan.js.map

package/dist/cli/commands/plan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plan.js","sourceRoot":"","sources":["../../../src/cli/commands/plan.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAExD,OAAO,EAAE,iCAAiC,EAAE,MAAM,+CAA+C,CAAC;AAClG,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AAExE,4EAA4E;AAC5E,MAAM,CAAC,MAAM,IAAI,GAAG;IAClB,cAAc,EAAE,MAAM;IACtB,IAAI,EAAE,CAAC,MAAM,CAAC;IACd,UAAU,EAAE,kBAAkB,CAAC,CAAC,CAAC;IACjC,OAAO,EAAE,wDAAwD;IACjE,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ;QACzB,MAAM,SAAS,GAAG,MAAM,iCAAiC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC7E,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,SAAS,CAAC,YAAY,CAAC,CAAC;QAC3F,mBAAmB,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QAC7C,oBAAoB,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QAC9E,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACzB,CAAC;CACwC,CAAC","sourcesContent":["import { INFRA_CAPABILITIES } from '../../constants.js';\nimport type { InfraCommandDefinition } from '../../types/infraCli.js';\nimport { prepareInfraCommandOperationAsync } from '../utils/prepareInfraCommandOperationAsync.js';\nimport { requireInfraSuccess } from '../utils/requireInfraSuccess.js';\nimport { writeInfraStructured } from '../utils/writeInfraStructured.js';\n\n/*** Define the ordered side-effect-free infrastructure planning command. */\nexport const plan = {\n  standaloneName: 'plan',\n  path: ['plan'],\n  capability: INFRA_CAPABILITIES[1],\n  summary: 'Print an ordered side-effect-free infrastructure plan.',\n  async run(request, services) {\n    const operation = await prepareInfraCommandOperationAsync(request, services);\n    const result = await services.operations.plan(operation.operation, operation.dependencies);\n    requireInfraSuccess(result, request.context);\n    writeInfraStructured(request.context, request.arguments.format, result.value);\n    return { exitCode: 0 };\n  },\n} as const satisfies InfraCommandDefinition;\n"]}

package/dist/cli/commands/status.d.ts

@@ -0,0 +1,11 @@
+/*** Define provider-neutral environment status aggregation. */
+export declare const status: {
+    readonly standaloneName: "status";
+    readonly path: readonly ["status"];
+    readonly capability: "infra.status";
+    readonly summary: "Aggregate provider-neutral environment status.";
+    readonly run: (request: import("../../types/infraCli.js").InfraCommandRunRequest, services: import("../index.js").InfraCommandServices) => Promise<{
+        exitCode: number;
+    }>;
+};
+//# sourceMappingURL=status.d.ts.map

package/dist/cli/commands/status.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"status.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/status.ts"],"names":[],"mappings":"AAMA,+DAA+D;AAC/D,eAAO,MAAM,MAAM;;;;;;;;CAYwB,CAAC"}

package/dist/cli/commands/status.js

@@ -0,0 +1,19 @@
+import { INFRA_CAPABILITIES } from '../../constants.js';
+import { prepareInfraCommandOperationAsync } from '../utils/prepareInfraCommandOperationAsync.js';
+import { requireInfraSuccess } from '../utils/requireInfraSuccess.js';
+import { writeInfraStructured } from '../utils/writeInfraStructured.js';
+/*** Define provider-neutral environment status aggregation. */
+export const status = {
+    standaloneName: 'status',
+    path: ['status'],
+    capability: INFRA_CAPABILITIES[4],
+    summary: 'Aggregate provider-neutral environment status.',
+    async run(request, services) {
+        const operation = await prepareInfraCommandOperationAsync(request, services);
+        const result = await services.operations.status(operation.operation, operation.dependencies);
+        requireInfraSuccess(result, request.context);
+        writeInfraStructured(request.context, request.arguments.format, result.value);
+        return { exitCode: 0 };
+    },
+};
+//# sourceMappingURL=status.js.map

package/dist/cli/commands/status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"status.js","sourceRoot":"","sources":["../../../src/cli/commands/status.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAExD,OAAO,EAAE,iCAAiC,EAAE,MAAM,+CAA+C,CAAC;AAClG,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AAExE,+DAA+D;AAC/D,MAAM,CAAC,MAAM,MAAM,GAAG;IACpB,cAAc,EAAE,QAAQ;IACxB,IAAI,EAAE,CAAC,QAAQ,CAAC;IAChB,UAAU,EAAE,kBAAkB,CAAC,CAAC,CAAC;IACjC,OAAO,EAAE,gDAAgD;IACzD,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ;QACzB,MAAM,SAAS,GAAG,MAAM,iCAAiC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC7E,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,EAAE,SAAS,CAAC,YAAY,CAAC,CAAC;QAC7F,mBAAmB,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QAC7C,oBAAoB,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QAC9E,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACzB,CAAC;CACwC,CAAC","sourcesContent":["import { INFRA_CAPABILITIES } from '../../constants.js';\nimport type { InfraCommandDefinition } from '../../types/infraCli.js';\nimport { prepareInfraCommandOperationAsync } from '../utils/prepareInfraCommandOperationAsync.js';\nimport { requireInfraSuccess } from '../utils/requireInfraSuccess.js';\nimport { writeInfraStructured } from '../utils/writeInfraStructured.js';\n\n/*** Define provider-neutral environment status aggregation. */\nexport const status = {\n  standaloneName: 'status',\n  path: ['status'],\n  capability: INFRA_CAPABILITIES[4],\n  summary: 'Aggregate provider-neutral environment status.',\n  async run(request, services) {\n    const operation = await prepareInfraCommandOperationAsync(request, services);\n    const result = await services.operations.status(operation.operation, operation.dependencies);\n    requireInfraSuccess(result, request.context);\n    writeInfraStructured(request.context, request.arguments.format, result.value);\n    return { exitCode: 0 };\n  },\n} as const satisfies InfraCommandDefinition;\n"]}

package/dist/cli/commands/up.d.ts

@@ -0,0 +1,11 @@
+/*** Define idempotent environment creation and reconciliation. */
+export declare const up: {
+    readonly standaloneName: "up";
+    readonly path: readonly ["up"];
+    readonly capability: "infra.up";
+    readonly summary: "Idempotently ensure and reconcile the selected environment.";
+    readonly run: (request: import("../../types/infraCli.js").InfraCommandRunRequest, services: import("../index.js").InfraCommandServices) => Promise<{
+        exitCode: number;
+    }>;
+};
+//# sourceMappingURL=up.d.ts.map

package/dist/cli/commands/up.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"up.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/up.ts"],"names":[],"mappings":"AAMA,kEAAkE;AAClE,eAAO,MAAM,EAAE;;;;;;;;CAqB4B,CAAC"}

package/dist/cli/commands/up.js

@@ -0,0 +1,28 @@
+import { INFRA_CAPABILITIES } from '../../constants.js';
+import { prepareInfraCommandOperationAsync } from '../utils/prepareInfraCommandOperationAsync.js';
+import { requireInfraSuccess } from '../utils/requireInfraSuccess.js';
+import { writeInfraStructured } from '../utils/writeInfraStructured.js';
+/*** Define idempotent environment creation and reconciliation. */
+export const up = {
+    standaloneName: 'up',
+    path: ['up'],
+    capability: INFRA_CAPABILITIES[3],
+    summary: 'Idempotently ensure and reconcile the selected environment.',
+    async run(request, services) {
+        const operation = await prepareInfraCommandOperationAsync(request, services);
+        const result = await services.operations.up(operation.operation, operation.dependencies);
+        requireInfraSuccess(result, request.context);
+        await services.writeState(operation.project.projectPath, {
+            schemaVersion: 1,
+            desired: operation.desired,
+            ledger: result.value.ledger,
+        });
+        writeInfraStructured(request.context, request.arguments.format, {
+            environment: result.value.environment,
+            resources: result.value.resources.length,
+            outputs: result.value.outputs,
+        });
+        return { exitCode: 0 };
+    },
+};
+//# sourceMappingURL=up.js.map

package/dist/cli/commands/up.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"up.js","sourceRoot":"","sources":["../../../src/cli/commands/up.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAExD,OAAO,EAAE,iCAAiC,EAAE,MAAM,+CAA+C,CAAC;AAClG,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AAExE,kEAAkE;AAClE,MAAM,CAAC,MAAM,EAAE,GAAG;IAChB,cAAc,EAAE,IAAI;IACpB,IAAI,EAAE,CAAC,IAAI,CAAC;IACZ,UAAU,EAAE,kBAAkB,CAAC,CAAC,CAAC;IACjC,OAAO,EAAE,6DAA6D;IACtE,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ;QACzB,MAAM,SAAS,GAAG,MAAM,iCAAiC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC7E,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,SAAS,CAAC,YAAY,CAAC,CAAC;QACzF,mBAAmB,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QAC7C,MAAM,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,OAAO,CAAC,WAAW,EAAE;YACvD,aAAa,EAAE,CAAC;YAChB,OAAO,EAAE,SAAS,CAAC,OAAO;YAC1B,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM;SAC5B,CAAC,CAAC;QACH,oBAAoB,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,MAAM,EAAE;YAC9D,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,WAAW;YACrC,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM;YACxC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO;SAC9B,CAAC,CAAC;QACH,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACzB,CAAC;CACwC,CAAC","sourcesContent":["import { INFRA_CAPABILITIES } from '../../constants.js';\nimport type { InfraCommandDefinition } from '../../types/infraCli.js';\nimport { prepareInfraCommandOperationAsync } from '../utils/prepareInfraCommandOperationAsync.js';\nimport { requireInfraSuccess } from '../utils/requireInfraSuccess.js';\nimport { writeInfraStructured } from '../utils/writeInfraStructured.js';\n\n/*** Define idempotent environment creation and reconciliation. */\nexport const up = {\n  standaloneName: 'up',\n  path: ['up'],\n  capability: INFRA_CAPABILITIES[3],\n  summary: 'Idempotently ensure and reconcile the selected environment.',\n  async run(request, services) {\n    const operation = await prepareInfraCommandOperationAsync(request, services);\n    const result = await services.operations.up(operation.operation, operation.dependencies);\n    requireInfraSuccess(result, request.context);\n    await services.writeState(operation.project.projectPath, {\n      schemaVersion: 1,\n      desired: operation.desired,\n      ledger: result.value.ledger,\n    });\n    writeInfraStructured(request.context, request.arguments.format, {\n      environment: result.value.environment,\n      resources: result.value.resources.length,\n      outputs: result.value.outputs,\n    });\n    return { exitCode: 0 };\n  },\n} as const satisfies InfraCommandDefinition;\n"]}

package/dist/cli/commands/validate.d.ts

@@ -0,0 +1,11 @@
+/*** Define the manifest, compatibility, credential and selected-adapter validation command. */
+export declare const validate: {
+    readonly standaloneName: "validate";
+    readonly path: readonly ["validate"];
+    readonly capability: "infra.validate";
+    readonly summary: "Validate manifest, compatibility, credentials and selected adapters.";
+    readonly run: (request: import("../../types/infraCli.js").InfraCommandRunRequest, services: import("../index.js").InfraCommandServices) => Promise<{
+        exitCode: number;
+    }>;
+};
+//# sourceMappingURL=validate.d.ts.map

package/dist/cli/commands/validate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/validate.ts"],"names":[],"mappings":"AAMA,+FAA+F;AAC/F,eAAO,MAAM,QAAQ;;;;;;;;CAYsB,CAAC"}

package/dist/cli/commands/validate.js

@@ -0,0 +1,19 @@
+import { INFRA_CAPABILITIES } from '../../constants.js';
+import { prepareInfraCommandOperationAsync } from '../utils/prepareInfraCommandOperationAsync.js';
+import { requireInfraSuccess } from '../utils/requireInfraSuccess.js';
+import { writeInfraStructured } from '../utils/writeInfraStructured.js';
+/*** Define the manifest, compatibility, credential and selected-adapter validation command. */
+export const validate = {
+    standaloneName: 'validate',
+    path: ['validate'],
+    capability: INFRA_CAPABILITIES[0],
+    summary: 'Validate manifest, compatibility, credentials and selected adapters.',
+    async run(request, services) {
+        const operation = await prepareInfraCommandOperationAsync(request, services);
+        const result = await services.operations.validate(operation.operation, operation.dependencies);
+        requireInfraSuccess(result, request.context);
+        writeInfraStructured(request.context, request.arguments.format, result.value);
+        return { exitCode: 0 };
+    },
+};
+//# sourceMappingURL=validate.js.map

package/dist/cli/commands/validate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.js","sourceRoot":"","sources":["../../../src/cli/commands/validate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAExD,OAAO,EAAE,iCAAiC,EAAE,MAAM,+CAA+C,CAAC;AAClG,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AAExE,+FAA+F;AAC/F,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB,cAAc,EAAE,UAAU;IAC1B,IAAI,EAAE,CAAC,UAAU,CAAC;IAClB,UAAU,EAAE,kBAAkB,CAAC,CAAC,CAAC;IACjC,OAAO,EAAE,sEAAsE;IAC/E,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ;QACzB,MAAM,SAAS,GAAG,MAAM,iCAAiC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC7E,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,EAAE,SAAS,CAAC,YAAY,CAAC,CAAC;QAC/F,mBAAmB,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QAC7C,oBAAoB,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QAC9E,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACzB,CAAC;CACwC,CAAC","sourcesContent":["import { INFRA_CAPABILITIES } from '../../constants.js';\nimport type { InfraCommandDefinition } from '../../types/infraCli.js';\nimport { prepareInfraCommandOperationAsync } from '../utils/prepareInfraCommandOperationAsync.js';\nimport { requireInfraSuccess } from '../utils/requireInfraSuccess.js';\nimport { writeInfraStructured } from '../utils/writeInfraStructured.js';\n\n/*** Define the manifest, compatibility, credential and selected-adapter validation command. */\nexport const validate = {\n  standaloneName: 'validate',\n  path: ['validate'],\n  capability: INFRA_CAPABILITIES[0],\n  summary: 'Validate manifest, compatibility, credentials and selected adapters.',\n  async run(request, services) {\n    const operation = await prepareInfraCommandOperationAsync(request, services);\n    const result = await services.operations.validate(operation.operation, operation.dependencies);\n    requireInfraSuccess(result, request.context);\n    writeInfraStructured(request.context, request.arguments.format, result.value);\n    return { exitCode: 0 };\n  },\n} as const satisfies InfraCommandDefinition;\n"]}