npm - @ankhorage/infra - Versions diffs - 7.2.11 → 7.3.0 - Mend

@ankhorage/infra 7.2.11 → 7.3.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (35) hide show

package/CHANGELOG.md CHANGED Viewed

@@ -1,5 +1,17 @@
 # @ankhorage/infra
+## 7.3.0
+### Minor Changes
+- b182936: Validate declarative internal API-to-workload assignments before planning or infrastructure mutation.
+## 7.2.12
+### Patch Changes
+- e2ec6f6: Update dependencies: `@ankhorage/contracts`, `@ankhorage/utility`.
 ## 7.2.11
 ### Patch Changes

package/README.md CHANGED Viewed

@@ -3,7 +3,7 @@
 # INFRA
-![license: MIT](././paradox/badges/license.svg) ![npm: v7.2.11](././paradox/badges/npm.svg) ![runtime: bun](././paradox/badges/runtime.svg) ![typescript: strict](././paradox/badges/typescript.svg) ![eslint: checked](././paradox/badges/eslint.svg) ![prettier: checked](././paradox/badges/prettier.svg) ![build: checked](././paradox/badges/build.svg) ![tests: checked](././paradox/badges/tests.svg) ![paradox: canonical](././paradox/badges/docs.svg)
+![license: MIT](././paradox/badges/license.svg) ![npm: v7.3.0](././paradox/badges/npm.svg) ![runtime: bun](././paradox/badges/runtime.svg) ![typescript: strict](././paradox/badges/typescript.svg) ![eslint: checked](././paradox/badges/eslint.svg) ![prettier: checked](././paradox/badges/prettier.svg) ![build: checked](././paradox/badges/build.svg) ![tests: checked](././paradox/badges/tests.svg) ![paradox: canonical](././paradox/badges/docs.svg)
 Executable infra provider and standalone CLI for Ankhorage project workflows.
@@ -43,3 +43,4 @@ import { createInfraRuntimeProvider } from '@ankhorage/infra/cli';
 - [getInfraEnvironmentOutputs sequence](././paradox/diagrams/sequences/get-infra-environment-outputs.mmd)
 - [orderInfraPlanActions sequence](././paradox/diagrams/sequences/order-infra-plan-actions.mmd)
 - [resolveInfraEnvironment sequence](././paradox/diagrams/sequences/resolve-infra-environment.mmd)
+- [resolveInfraWorkloadApiComposition sequence](././paradox/diagrams/sequences/resolve-infra-workload-api-composition.mmd)

package/dist/features/environment-lifecycle/application/use-cases/prepareInfraOperationAsync.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"prepareInfraOperationAsync.d.ts","sourceRoot":"","sources":["../../../../../src/features/environment-lifecycle/application/use-cases/prepareInfraOperationAsync.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAmB,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAE/E,OAAO,KAAK,EACV,qBAAqB,EACrB,8BAA8B,EAC9B,sBAAsB,EACvB,MAAM,yCAAyC,CAAC;~~AAQjD~~,iGAAiG;AACjG,wBAAsB,0BAA0B,CAC9C,OAAO,EAAE,qBAAqB,EAC9B,SAAS,EAAE,UAAU,GAAG,MAAM,GAAG,UAAU,GAAG,QAAQ,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,EACvF,YAAY,EAAE,8BAA8B,GAC3C,OAAO,CAAC,WAAW,CAAC,sBAAsB,CAAC,CAAC,~~CA6E9C~~"}
1	+ {"version":3,"file":"prepareInfraOperationAsync.d.ts","sourceRoot":"","sources":["../../../../../src/features/environment-lifecycle/application/use-cases/prepareInfraOperationAsync.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAmB,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAE/E,OAAO,KAAK,EACV,qBAAqB,EACrB,8BAA8B,EAC9B,sBAAsB,EACvB,MAAM,yCAAyC,CAAC;AASjD,iGAAiG;AACjG,wBAAsB,0BAA0B,CAC9C,OAAO,EAAE,qBAAqB,EAC9B,SAAS,EAAE,UAAU,GAAG,MAAM,GAAG,UAAU,GAAG,QAAQ,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,EACvF,YAAY,EAAE,8BAA8B,GAC3C,OAAO,CAAC,WAAW,CAAC,sBAAsB,CAAC,CAAC,CAsF9C"}

package/dist/features/environment-lifecycle/application/use-cases/prepareInfraOperationAsync.js CHANGED Viewed

@@ -1,4 +1,5 @@
 import { resolveInfraEnvironment } from '../../domain/resolveInfraEnvironment.js';
+import { resolveInfraWorkloadApiComposition } from '../../domain/resolveInfraWorkloadApiComposition.js';
 import { appendInfraFailure } from '../../utils/appendInfraFailure.js';
 import { createInfraExecutionContext } from '../../utils/createInfraExecutionContext.js';
 import { collectInfraWorkloadsAsync } from './collectInfraWorkloadsAsync.js';
@@ -43,6 +44,13 @@ export async function prepareInfraOperationAsync(request, operation, dependencie
     if (!workloads.ok)
         return appendInfraFailure(diagnostics, workloads);
     diagnostics.push(...workloads.diagnostics);
+    const allWorkloads = [
+        ...Object.values(environment.value.desired.workloads ?? {}),
+        ...workloads.value,
+    ];
+    const apiComposition = resolveInfraWorkloadApiComposition(environment.value.manifest, allWorkloads);
+    if (!apiComposition.ok)
+        return appendInfraFailure(diagnostics, apiComposition);
     const compute = await adapters.value.compute.inspectAsync(context, environment.value.desired.deployment.compute);
     if (!compute.ok)
         return appendInfraFailure(diagnostics, compute);
@@ -52,7 +60,7 @@ export async function prepareInfraOperationAsync(request, operation, dependencie
         targets: compute.value.targets.length > 0
             ? compute.value.targets
             : (request.previous?.targets ?? compute.value.targets),
-        workloads: [...Object.values(environment.value.desired.workloads ?? {}), ...workloads.value],
+        workloads: allWorkloads,
         availableOutputs: mergeOutputs(request.previous?.outputs ?? [], compute.value.outputs),
     };
     if (runtimeDesired.targets.length === 0) {

package/dist/features/environment-lifecycle/application/use-cases/prepareInfraOperationAsync.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"prepareInfraOperationAsync.js","sourceRoot":"","sources":["../../../../../src/features/environment-lifecycle/application/use-cases/prepareInfraOperationAsync.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,uBAAuB,EAAE,MAAM,yCAAyC,CAAC;AAClF,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AACvE,OAAO,EAAE,2BAA2B,EAAE,MAAM,4CAA4C,CAAC;AACzF,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAC7E,OAAO,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AAC3E,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAE7E,iGAAiG;AACjG,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,OAA8B,EAC9B,SAAuF,EACvF,YAA4C;IAE5C,MAAM,WAAW,GAAsB,EAAE,CAAC;IAC1C,MAAM,WAAW,GAAG,uBAAuB,CAAC;QAC1C,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,SAAS;KACV,CAAC,CAAC;IACH,IAAI,CAAC,WAAW,CAAC,EAAE;QAAE,OAAO,WAAW,CAAC;IACxC,WAAW,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC;IAC7C,IACE,OAAO,CAAC,QAAQ,KAAK,SAAS;QAC9B,OAAO,CAAC,eAAe,KAAK,SAAS;QACrC,CAAC,wBAAwB,CAAC,OAAO,CAAC,eAAe,EAAE,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,EAC7E,CAAC;QACD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,WAAW,EAAE;gBACX,GAAG,WAAW;gBACd;oBACE,QAAQ,EAAE,OAAO;oBACjB,IAAI,EAAE,kCAAkC;oBACxC,OAAO,EACL,oHAAoH;iBACvH;aACF;SACF,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,yBAAyB,CAC9C,WAAW,CAAC,KAAK,CAAC,OAAO,EACzB,YAAY,CAAC,eAAe,CAC7B,CAAC;IACF,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,OAAO,kBAAkB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IACnE,WAAW,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,2BAA2B,CAAC,OAAO,EAAE,WAAW,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IACtF,MAAM,UAAU,GAAG,MAAM,0BAA0B,CAAC,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC7E,IAAI,CAAC,UAAU,CAAC,EAAE;QAAE,OAAO,kBAAkB,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;IACvE,WAAW,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,MAAM,0BAA0B,CAAC,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACrF,IAAI,CAAC,SAAS,CAAC,EAAE;QAAE,OAAO,kBAAkB,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IACrE,WAAW,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CACvD,OAAO,EACP,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAC7C,CAAC;IACF,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,OAAO,kBAAkB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IACjE,WAAW,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACzC,MAAM,cAAc,GAAG;QACrB,SAAS,EAAE,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO;QACvD,OAAO,EACL,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;YAC9B,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO;YACvB,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;QAC1D,SAAS,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC,EAAE,GAAG,SAAS,CAAC,KAAK,CAAC;QAC5F,gBAAgB,EAAE,YAAY,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,IAAI,EAAE,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;KACvF,CAAC;IACF,IAAI,cAAc,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxC,WAAW,CAAC,IAAI,CAAC;YACf,QAAQ,EAAE,MAAM;YAChB,IAAI,EAAE,+BAA+B;YACrC,OAAO,EAAE,yEAAyE;SACnF,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;QACpF,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,OAAO,kBAAkB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QACjE,WAAW,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO;QACL,EAAE,EAAE,IAAI;QACR,KAAK,EAAE;YACL,WAAW,EAAE,WAAW,CAAC,KAAK;YAC9B,OAAO;YACP,QAAQ,EAAE,QAAQ,CAAC,KAAK;YACxB,OAAO,EAAE,OAAO,CAAC,KAAK;YACtB,cAAc;SACf;QACD,WAAW;KACZ,CAAC;AACJ,CAAC;AAED,oGAAoG;AACpG,SAAS,wBAAwB,CAC/B,QAA0D,EAC1D,OAAyD;IAEzD,OAAO,iBAAiB,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,iBAAiB,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1F,CAAC;AAED,kEAAkE;AAClE,SAAS,iBAAiB,CACxB,OAAyD;IAEzD,OAAO;QACL,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ;QACnC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ;QACnC,OAAO,CAAC,QAAQ,EAAE,QAAQ;QAC1B,OAAO,CAAC,aAAa,EAAE,QAAQ;QAC/B,OAAO,CAAC,IAAI,EAAE,QAAQ;QACtB,OAAO,CAAC,KAAK,EAAE,QAAQ;QACvB,OAAO,CAAC,WAAW,EAAE,QAAQ;KAC9B,CAAC;AACJ,CAAC;AAED,sFAAsF;AACtF,SAAS,YAAY,CACnB,QAAsE,EACtE,OAAqE;IAErE,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;IACpD,OAAO,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,CAAC;AAC3F,CAAC;AAED,qFAAqF;AACrF,SAAS,SAAS,CAChB,MAA4E;IAE5E,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC;IACzB,OAAO,GAAG,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,WAAW,KAAK,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,UAAU,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC;AAC3G,CAAC","sourcesContent":["import type { InfraDiagnostic, InfraResult } from '@ankhorage/contracts/infra';\n\nimport type {\n InfraOperationRequest,\n InfraOrchestrationDependencies,\n PreparedInfraOperation,\n} from '../../../../types/infraOrchestration.js';\nimport { resolveInfraEnvironment } from '../../domain/resolveInfraEnvironment.js';\nimport { appendInfraFailure } from '../../utils/appendInfraFailure.js';\nimport { createInfraExecutionContext } from '../../utils/createInfraExecutionContext.js';\nimport { collectInfraWorkloadsAsync } from './collectInfraWorkloadsAsync.js';\nimport { resolveInfraAdaptersAsync } from './resolveInfraAdaptersAsync.js';\nimport { validateInfraAdaptersAsync } from './validateInfraAdaptersAsync.js';\n\n/*** Resolve and validate one operation without creating, updating or deleting infrastructure. /\nexport async function prepareInfraOperationAsync(\n request: InfraOperationRequest,\n operation: 'validate' \| 'plan' \| 'generate' \| 'status' \| 'outputs' \| 'down' \| 'destroy',\n dependencies: InfraOrchestrationDependencies,\n): Promise<InfraResult<PreparedInfraOperation>> {\n const diagnostics: InfraDiagnostic[] = [];\n const environment = resolveInfraEnvironment({\n manifest: request.manifest,\n environment: request.environment,\n operation,\n });\n if (!environment.ok) return environment;\n diagnostics.push(...environment.diagnostics);\n if (\n request.previous !== undefined &&\n request.previousDesired !== undefined &&\n !hasSameProviderSelection(request.previousDesired, environment.value.desired)\n ) {\n return {\n ok: false,\n diagnostics: [\n ...diagnostics,\n {\n severity: 'error',\n code: 'infra-provider-selection-changed',\n message:\n 'Stored Infra resources use another provider selection. Destroy that environment before applying the new selection.',\n },\n ],\n };\n }\n const adapters = await resolveInfraAdaptersAsync(\n environment.value.desired,\n dependencies.adapterResolver,\n );\n if (!adapters.ok) return appendInfraFailure(diagnostics, adapters);\n diagnostics.push(...adapters.diagnostics);\n const context = createInfraExecutionContext(request, environment.value, dependencies);\n const validation = await validateInfraAdaptersAsync(context, adapters.value);\n if (!validation.ok) return appendInfraFailure(diagnostics, validation);\n diagnostics.push(...validation.diagnostics);\n const workloads = await collectInfraWorkloadsAsync(context, adapters.value.services);\n if (!workloads.ok) return appendInfraFailure(diagnostics, workloads);\n diagnostics.push(...workloads.diagnostics);\n const compute = await adapters.value.compute.inspectAsync(\n context,\n environment.value.desired.deployment.compute,\n );\n if (!compute.ok) return appendInfraFailure(diagnostics, compute);\n diagnostics.push(...compute.diagnostics);\n const runtimeDesired = {\n selection: environment.value.desired.deployment.runtime,\n targets:\n compute.value.targets.length > 0\n ? compute.value.targets\n : (request.previous?.targets ?? compute.value.targets),\n workloads: [...Object.values(environment.value.desired.workloads ?? {}), ...workloads.value],\n availableOutputs: mergeOutputs(request.previous?.outputs ?? [], compute.value.outputs),\n };\n if (runtimeDesired.targets.length === 0) {\n diagnostics.push({\n severity: 'info',\n code: 'infra-runtime-target-deferred',\n message: 'Runtime validation is deferred until compute exposes a portable target.',\n });\n } else {\n const runtime = await adapters.value.runtime.validateAsync(context, runtimeDesired);\n if (!runtime.ok) return appendInfraFailure(diagnostics, runtime);\n diagnostics.push(...runtime.diagnostics);\n }\n return {\n ok: true,\n value: {\n environment: environment.value,\n context,\n adapters: adapters.value,\n compute: compute.value,\n runtimeDesired,\n },\n diagnostics,\n };\n}\n\n/** Compare provider identity only; configuration changes remain normal in-place reconciliation. /\nfunction hasSameProviderSelection(\n previous: PreparedInfraOperation['environment']['desired'],\n current: PreparedInfraOperation['environment']['desired'],\n): boolean {\n return providerSelection(previous).join('\\0') === providerSelection(current).join('\\0');\n}\n\n/** Read the closed provider slots in stable capability order. /\nfunction providerSelection(\n desired: PreparedInfraOperation['environment']['desired'],\n): readonly (string \| undefined)[] {\n return [\n desired.deployment.compute.provider,\n desired.deployment.runtime.provider,\n desired.database?.provider,\n desired.objectStorage?.provider,\n desired.auth?.provider,\n desired.authz?.provider,\n desired.secretStore?.provider,\n ];\n}\n\n/** Prefer freshly inspected outputs while preserving unrelated safe prior values. /\nfunction mergeOutputs(\n previous: PreparedInfraOperation['runtimeDesired']['availableOutputs'],\n current: PreparedInfraOperation['runtimeDesired']['availableOutputs'],\n): PreparedInfraOperation['runtimeDesired']['availableOutputs'] {\n const currentKeys = new Set(current.map(outputKey));\n return [...previous.filter((output) => !currentKeys.has(outputKey(output))), ...current];\n}\n\n/** Create one stable public-or-secret output identity without reading its value. */\nfunction outputKey(\n output: PreparedInfraOperation['runtimeDesired']['availableOutputs'][number],\n): string {\n const { owner } = output;\n return `${owner.projectId}\\0${owner.environment}\\0${owner.adapter}\\0${owner.resourceId}\\0${output.name}`;\n}\n"]}
1	+ {"version":3,"file":"prepareInfraOperationAsync.js","sourceRoot":"","sources":["../../../../../src/features/environment-lifecycle/application/use-cases/prepareInfraOperationAsync.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,uBAAuB,EAAE,MAAM,yCAAyC,CAAC;AAClF,OAAO,EAAE,kCAAkC,EAAE,MAAM,oDAAoD,CAAC;AACxG,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AACvE,OAAO,EAAE,2BAA2B,EAAE,MAAM,4CAA4C,CAAC;AACzF,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAC7E,OAAO,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AAC3E,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAE7E,iGAAiG;AACjG,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,OAA8B,EAC9B,SAAuF,EACvF,YAA4C;IAE5C,MAAM,WAAW,GAAsB,EAAE,CAAC;IAC1C,MAAM,WAAW,GAAG,uBAAuB,CAAC;QAC1C,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,SAAS;KACV,CAAC,CAAC;IACH,IAAI,CAAC,WAAW,CAAC,EAAE;QAAE,OAAO,WAAW,CAAC;IACxC,WAAW,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC;IAC7C,IACE,OAAO,CAAC,QAAQ,KAAK,SAAS;QAC9B,OAAO,CAAC,eAAe,KAAK,SAAS;QACrC,CAAC,wBAAwB,CAAC,OAAO,CAAC,eAAe,EAAE,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,EAC7E,CAAC;QACD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,WAAW,EAAE;gBACX,GAAG,WAAW;gBACd;oBACE,QAAQ,EAAE,OAAO;oBACjB,IAAI,EAAE,kCAAkC;oBACxC,OAAO,EACL,oHAAoH;iBACvH;aACF;SACF,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,yBAAyB,CAC9C,WAAW,CAAC,KAAK,CAAC,OAAO,EACzB,YAAY,CAAC,eAAe,CAC7B,CAAC;IACF,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,OAAO,kBAAkB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IACnE,WAAW,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,2BAA2B,CAAC,OAAO,EAAE,WAAW,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IACtF,MAAM,UAAU,GAAG,MAAM,0BAA0B,CAAC,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC7E,IAAI,CAAC,UAAU,CAAC,EAAE;QAAE,OAAO,kBAAkB,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;IACvE,WAAW,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,MAAM,0BAA0B,CAAC,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACrF,IAAI,CAAC,SAAS,CAAC,EAAE;QAAE,OAAO,kBAAkB,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IACrE,WAAW,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC;IAC3C,MAAM,YAAY,GAAG;QACnB,GAAG,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC;QAC3D,GAAG,SAAS,CAAC,KAAK;KACnB,CAAC;IACF,MAAM,cAAc,GAAG,kCAAkC,CACvD,WAAW,CAAC,KAAK,CAAC,QAAQ,EAC1B,YAAY,CACb,CAAC;IACF,IAAI,CAAC,cAAc,CAAC,EAAE;QAAE,OAAO,kBAAkB,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;IAC/E,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CACvD,OAAO,EACP,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAC7C,CAAC;IACF,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,OAAO,kBAAkB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IACjE,WAAW,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACzC,MAAM,cAAc,GAAG;QACrB,SAAS,EAAE,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO;QACvD,OAAO,EACL,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;YAC9B,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO;YACvB,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;QAC1D,SAAS,EAAE,YAAY;QACvB,gBAAgB,EAAE,YAAY,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,IAAI,EAAE,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;KACvF,CAAC;IACF,IAAI,cAAc,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxC,WAAW,CAAC,IAAI,CAAC;YACf,QAAQ,EAAE,MAAM;YAChB,IAAI,EAAE,+BAA+B;YACrC,OAAO,EAAE,yEAAyE;SACnF,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;QACpF,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,OAAO,kBAAkB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QACjE,WAAW,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO;QACL,EAAE,EAAE,IAAI;QACR,KAAK,EAAE;YACL,WAAW,EAAE,WAAW,CAAC,KAAK;YAC9B,OAAO;YACP,QAAQ,EAAE,QAAQ,CAAC,KAAK;YACxB,OAAO,EAAE,OAAO,CAAC,KAAK;YACtB,cAAc;SACf;QACD,WAAW;KACZ,CAAC;AACJ,CAAC;AAED,oGAAoG;AACpG,SAAS,wBAAwB,CAC/B,QAA0D,EAC1D,OAAyD;IAEzD,OAAO,iBAAiB,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,iBAAiB,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1F,CAAC;AAED,kEAAkE;AAClE,SAAS,iBAAiB,CACxB,OAAyD;IAEzD,OAAO;QACL,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ;QACnC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ;QACnC,OAAO,CAAC,QAAQ,EAAE,QAAQ;QAC1B,OAAO,CAAC,aAAa,EAAE,QAAQ;QAC/B,OAAO,CAAC,IAAI,EAAE,QAAQ;QACtB,OAAO,CAAC,KAAK,EAAE,QAAQ;QACvB,OAAO,CAAC,WAAW,EAAE,QAAQ;KAC9B,CAAC;AACJ,CAAC;AAED,sFAAsF;AACtF,SAAS,YAAY,CACnB,QAAsE,EACtE,OAAqE;IAErE,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;IACpD,OAAO,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,CAAC;AAC3F,CAAC;AAED,qFAAqF;AACrF,SAAS,SAAS,CAChB,MAA4E;IAE5E,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC;IACzB,OAAO,GAAG,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,WAAW,KAAK,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,UAAU,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC;AAC3G,CAAC","sourcesContent":["import type { InfraDiagnostic, InfraResult } from '@ankhorage/contracts/infra';\n\nimport type {\n InfraOperationRequest,\n InfraOrchestrationDependencies,\n PreparedInfraOperation,\n} from '../../../../types/infraOrchestration.js';\nimport { resolveInfraEnvironment } from '../../domain/resolveInfraEnvironment.js';\nimport { resolveInfraWorkloadApiComposition } from '../../domain/resolveInfraWorkloadApiComposition.js';\nimport { appendInfraFailure } from '../../utils/appendInfraFailure.js';\nimport { createInfraExecutionContext } from '../../utils/createInfraExecutionContext.js';\nimport { collectInfraWorkloadsAsync } from './collectInfraWorkloadsAsync.js';\nimport { resolveInfraAdaptersAsync } from './resolveInfraAdaptersAsync.js';\nimport { validateInfraAdaptersAsync } from './validateInfraAdaptersAsync.js';\n\n/*** Resolve and validate one operation without creating, updating or deleting infrastructure. /\nexport async function prepareInfraOperationAsync(\n request: InfraOperationRequest,\n operation: 'validate' \| 'plan' \| 'generate' \| 'status' \| 'outputs' \| 'down' \| 'destroy',\n dependencies: InfraOrchestrationDependencies,\n): Promise<InfraResult<PreparedInfraOperation>> {\n const diagnostics: InfraDiagnostic[] = [];\n const environment = resolveInfraEnvironment({\n manifest: request.manifest,\n environment: request.environment,\n operation,\n });\n if (!environment.ok) return environment;\n diagnostics.push(...environment.diagnostics);\n if (\n request.previous !== undefined &&\n request.previousDesired !== undefined &&\n !hasSameProviderSelection(request.previousDesired, environment.value.desired)\n ) {\n return {\n ok: false,\n diagnostics: [\n ...diagnostics,\n {\n severity: 'error',\n code: 'infra-provider-selection-changed',\n message:\n 'Stored Infra resources use another provider selection. Destroy that environment before applying the new selection.',\n },\n ],\n };\n }\n const adapters = await resolveInfraAdaptersAsync(\n environment.value.desired,\n dependencies.adapterResolver,\n );\n if (!adapters.ok) return appendInfraFailure(diagnostics, adapters);\n diagnostics.push(...adapters.diagnostics);\n const context = createInfraExecutionContext(request, environment.value, dependencies);\n const validation = await validateInfraAdaptersAsync(context, adapters.value);\n if (!validation.ok) return appendInfraFailure(diagnostics, validation);\n diagnostics.push(...validation.diagnostics);\n const workloads = await collectInfraWorkloadsAsync(context, adapters.value.services);\n if (!workloads.ok) return appendInfraFailure(diagnostics, workloads);\n diagnostics.push(...workloads.diagnostics);\n const allWorkloads = [\n ...Object.values(environment.value.desired.workloads ?? {}),\n ...workloads.value,\n ];\n const apiComposition = resolveInfraWorkloadApiComposition(\n environment.value.manifest,\n allWorkloads,\n );\n if (!apiComposition.ok) return appendInfraFailure(diagnostics, apiComposition);\n const compute = await adapters.value.compute.inspectAsync(\n context,\n environment.value.desired.deployment.compute,\n );\n if (!compute.ok) return appendInfraFailure(diagnostics, compute);\n diagnostics.push(...compute.diagnostics);\n const runtimeDesired = {\n selection: environment.value.desired.deployment.runtime,\n targets:\n compute.value.targets.length > 0\n ? compute.value.targets\n : (request.previous?.targets ?? compute.value.targets),\n workloads: allWorkloads,\n availableOutputs: mergeOutputs(request.previous?.outputs ?? [], compute.value.outputs),\n };\n if (runtimeDesired.targets.length === 0) {\n diagnostics.push({\n severity: 'info',\n code: 'infra-runtime-target-deferred',\n message: 'Runtime validation is deferred until compute exposes a portable target.',\n });\n } else {\n const runtime = await adapters.value.runtime.validateAsync(context, runtimeDesired);\n if (!runtime.ok) return appendInfraFailure(diagnostics, runtime);\n diagnostics.push(...runtime.diagnostics);\n }\n return {\n ok: true,\n value: {\n environment: environment.value,\n context,\n adapters: adapters.value,\n compute: compute.value,\n runtimeDesired,\n },\n diagnostics,\n };\n}\n\n/** Compare provider identity only; configuration changes remain normal in-place reconciliation. /\nfunction hasSameProviderSelection(\n previous: PreparedInfraOperation['environment']['desired'],\n current: PreparedInfraOperation['environment']['desired'],\n): boolean {\n return providerSelection(previous).join('\\0') === providerSelection(current).join('\\0');\n}\n\n/** Read the closed provider slots in stable capability order. /\nfunction providerSelection(\n desired: PreparedInfraOperation['environment']['desired'],\n): readonly (string \| undefined)[] {\n return [\n desired.deployment.compute.provider,\n desired.deployment.runtime.provider,\n desired.database?.provider,\n desired.objectStorage?.provider,\n desired.auth?.provider,\n desired.authz?.provider,\n desired.secretStore?.provider,\n ];\n}\n\n/** Prefer freshly inspected outputs while preserving unrelated safe prior values. /\nfunction mergeOutputs(\n previous: PreparedInfraOperation['runtimeDesired']['availableOutputs'],\n current: PreparedInfraOperation['runtimeDesired']['availableOutputs'],\n): PreparedInfraOperation['runtimeDesired']['availableOutputs'] {\n const currentKeys = new Set(current.map(outputKey));\n return [...previous.filter((output) => !currentKeys.has(outputKey(output))), ...current];\n}\n\n/** Create one stable public-or-secret output identity without reading its value. */\nfunction outputKey(\n output: PreparedInfraOperation['runtimeDesired']['availableOutputs'][number],\n): string {\n const { owner } = output;\n return `${owner.projectId}\\0${owner.environment}\\0${owner.adapter}\\0${owner.resourceId}\\0${output.name}`;\n}\n"]}

package/dist/features/environment-lifecycle/application/use-cases/upInfraEnvironmentAsync.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"upInfraEnvironmentAsync.d.ts","sourceRoot":"","sources":["../../../../../src/features/environment-lifecycle/application/use-cases/upInfraEnvironmentAsync.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EACV,8BAA8B,EAC9B,sBAAsB,EACtB,cAAc,EACf,MAAM,yCAAyC,CAAC;~~AAWjD~~,sGAAsG;AACtG,wBAAsB,uBAAuB,CAC3C,OAAO,EAAE,cAAc,EACvB,YAAY,EAAE,8BAA8B,GAC3C,OAAO,CAAC,sBAAsB,CAAC,~~CA6EjC~~"}
1	+ {"version":3,"file":"upInfraEnvironmentAsync.d.ts","sourceRoot":"","sources":["../../../../../src/features/environment-lifecycle/application/use-cases/upInfraEnvironmentAsync.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EACV,8BAA8B,EAC9B,sBAAsB,EACtB,cAAc,EACf,MAAM,yCAAyC,CAAC;AAYjD,sGAAsG;AACtG,wBAAsB,uBAAuB,CAC3C,OAAO,EAAE,cAAc,EACvB,YAAY,EAAE,8BAA8B,GAC3C,OAAO,CAAC,sBAAsB,CAAC,CAsFjC"}

package/dist/features/environment-lifecycle/application/use-cases/upInfraEnvironmentAsync.js CHANGED Viewed

@@ -1,4 +1,5 @@
 import { resolveInfraEnvironment } from '../../domain/resolveInfraEnvironment.js';
+import { resolveInfraWorkloadApiComposition } from '../../domain/resolveInfraWorkloadApiComposition.js';
 import { appendInfraFailure } from '../../utils/appendInfraFailure.js';
 import { createInfraExecutionContext } from '../../utils/createInfraExecutionContext.js';
 import { createInfraLedger } from '../../utils/createInfraLedger.js';
@@ -26,6 +27,17 @@ export async function upInfraEnvironmentAsync(request, dependencies) {
     if (!validation.ok)
         return appendInfraFailure(diagnostics, validation);
     diagnostics.push(...validation.diagnostics);
+    const workloads = await collectInfraWorkloadsAsync(context, adapters.value.services);
+    if (!workloads.ok)
+        return appendInfraFailure(diagnostics, workloads);
+    diagnostics.push(...workloads.diagnostics);
+    const allWorkloads = [
+        ...Object.values(environment.value.desired.workloads ?? {}),
+        ...workloads.value,
+    ];
+    const apiComposition = resolveInfraWorkloadApiComposition(environment.value.manifest, allWorkloads);
+    if (!apiComposition.ok)
+        return appendInfraFailure(diagnostics, apiComposition);
     const compute = await adapters.value.compute.ensureAsync(context, environment.value.desired.deployment.compute);
     if (!compute.ok)
         return appendInfraFailure(diagnostics, compute);
@@ -34,14 +46,10 @@ export async function upInfraEnvironmentAsync(request, dependencies) {
     if (!preparation.ok)
         return appendInfraFailure(diagnostics, preparation);
     diagnostics.push(...preparation.diagnostics);
-    const workloads = await collectInfraWorkloadsAsync(context, adapters.value.services);
-    if (!workloads.ok)
-        return appendInfraFailure(diagnostics, workloads);
-    diagnostics.push(...workloads.diagnostics);
     const runtimeDesired = {
         selection: environment.value.desired.deployment.runtime,
         targets: compute.value.targets,
-        workloads: [...Object.values(environment.value.desired.workloads ?? {}), ...workloads.value],
+        workloads: allWorkloads,
         availableOutputs: mergeInfraOutputs(request.previous?.outputs ?? [], compute.value.outputs),
     };
     const runtimeValidation = await adapters.value.runtime.validateAsync(context, runtimeDesired);

package/dist/features/environment-lifecycle/application/use-cases/upInfraEnvironmentAsync.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"upInfraEnvironmentAsync.js","sourceRoot":"","sources":["../../../../../src/features/environment-lifecycle/application/use-cases/upInfraEnvironmentAsync.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,uBAAuB,EAAE,MAAM,yCAAyC,CAAC;AAClF,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AACvE,OAAO,EAAE,2BAA2B,EAAE,MAAM,4CAA4C,CAAC;AACzF,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAC7E,OAAO,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AAC3E,OAAO,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AAC3E,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAE7E,sGAAsG;AACtG,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,OAAuB,EACvB,YAA4C;IAE5C,MAAM,WAAW,GAAG,uBAAuB,CAAC;QAC1C,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,SAAS,EAAE,IAAI;KAChB,CAAC,CAAC;IACH,IAAI,CAAC,WAAW,CAAC,EAAE;QAAE,OAAO,WAAW,CAAC;IACxC,MAAM,WAAW,GAAsB,CAAC,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC;IACpE,MAAM,QAAQ,GAAG,MAAM,yBAAyB,CAC9C,WAAW,CAAC,KAAK,CAAC,OAAO,EACzB,YAAY,CAAC,eAAe,CAC7B,CAAC;IACF,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,OAAO,kBAAkB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IACnE,WAAW,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,2BAA2B,CAAC,OAAO,EAAE,WAAW,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IACtF,MAAM,UAAU,GAAG,MAAM,0BAA0B,CAAC,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC7E,IAAI,CAAC,UAAU,CAAC,EAAE;QAAE,OAAO,kBAAkB,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;IACvE,WAAW,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CACtD,OAAO,EACP,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAC7C,CAAC;IACF,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,OAAO,kBAAkB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IACjE,WAAW,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACzC,MAAM,WAAW,GAAG,MAAM,yBAAyB,CAAC,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACtF,IAAI,CAAC,WAAW,CAAC,EAAE;QAAE,OAAO,kBAAkB,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;IACzE,WAAW,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC;IAC7C,MAAM,SAAS,GAAG,MAAM,0BAA0B,CAAC,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACrF,IAAI,CAAC,SAAS,CAAC,EAAE;QAAE,OAAO,kBAAkB,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IACrE,WAAW,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC;IAC3C,MAAM,cAAc,GAAG;QACrB,SAAS,EAAE,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO;QACvD,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO;QAC9B,SAAS,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC,EAAE,GAAG,SAAS,CAAC,KAAK,CAAC;QAC5F,gBAAgB,EAAE,iBAAiB,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,IAAI,EAAE,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;KAC5F,CAAC;IACF,MAAM,iBAAiB,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IAC9F,IAAI,CAAC,iBAAiB,CAAC,EAAE;QAAE,OAAO,kBAAkB,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC;IACrF,WAAW,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,WAAW,CAAC,CAAC;IACnD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IAClF,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,OAAO,kBAAkB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IACjE,WAAW,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,QAAQ,EAAE;QAC9E,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO;QACxB,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO;KACzB,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,OAAO,kBAAkB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IACnE,WAAW,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC1C,MAAM,SAAS,GAAG;QAChB,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS;QAC1B,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS;QAC1B,GAAG,QAAQ,CAAC,KAAK,CAAC,SAAS;KAC5B,CAAC;IACF,MAAM,OAAO,GAAG,iBAAiB,CAC/B,OAAO,CAAC,KAAK,CAAC,OAAO,EACrB,OAAO,CAAC,KAAK,CAAC,OAAO,EACrB,QAAQ,CAAC,KAAK,CAAC,OAAO,CACvB,CAAC;IACF,MAAM,MAAM,GAAG,iBAAiB,CAAC;QAC/B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,WAAW,EAAE,WAAW,CAAC,KAAK,CAAC,EAAE;QACjC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO;QAC9B,SAAS;QACT,OAAO;QACP,QAAQ,EAAE,OAAO,CAAC,QAAQ;KAC3B,CAAC,CAAC;IACH,OAAO;QACL,EAAE,EAAE,IAAI;QACR,KAAK,EAAE;YACL,WAAW,EAAE,WAAW,CAAC,KAAK,CAAC,EAAE;YACjC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO;YAC9B,SAAS;YACT,OAAO;YACP,MAAM;SACP;QACD,WAAW;KACZ,CAAC;AACJ,CAAC;AAED,0FAA0F;AAC1F,KAAK,UAAU,sBAAsB,CACnC,OAA8B,EAC9B,QAAwC,EACxC,cAAsC;IAOtC,MAAM,SAAS,GAAyB,EAAE,CAAC;IAC3C,MAAM,OAAO,GAAkB,EAAE,CAAC;IAClC,MAAM,WAAW,GAAsB,EAAE,CAAC;IAC1C,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;QACrE,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,kBAAkB,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAC/D,SAAS,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC1C,OAAO,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACtC,WAAW,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,WAAW,EAAE,CAAC;AAClE,CAAC","sourcesContent":["import type {\n InfraDiagnostic,\n InfraExecutionContext,\n InfraOutput,\n InfraOwnedResource,\n InfraResult,\n InfraServiceAdapter,\n} from '@ankhorage/contracts/infra';\n\nimport type {\n InfraOrchestrationDependencies,\n InfraUpOperationResult,\n InfraUpRequest,\n} from '../../../../types/infraOrchestration.js';\nimport { resolveInfraEnvironment } from '../../domain/resolveInfraEnvironment.js';\nimport { appendInfraFailure } from '../../utils/appendInfraFailure.js';\nimport { createInfraExecutionContext } from '../../utils/createInfraExecutionContext.js';\nimport { createInfraLedger } from '../../utils/createInfraLedger.js';\nimport { mergeInfraOutputs } from '../../utils/mergeInfraOutputs.js';\nimport { collectInfraWorkloadsAsync } from './collectInfraWorkloadsAsync.js';\nimport { prepareInfraServicesAsync } from './prepareInfraServicesAsync.js';\nimport { resolveInfraAdaptersAsync } from './resolveInfraAdaptersAsync.js';\nimport { validateInfraAdaptersAsync } from './validateInfraAdaptersAsync.js';\n\n/*** Validate and reconcile compute, service preparation, workloads, runtime and services in order. /\nexport async function upInfraEnvironmentAsync(\n request: InfraUpRequest,\n dependencies: InfraOrchestrationDependencies,\n): Promise<InfraUpOperationResult> {\n const environment = resolveInfraEnvironment({\n manifest: request.manifest,\n environment: request.environment,\n operation: 'up',\n });\n if (!environment.ok) return environment;\n const diagnostics: InfraDiagnostic[] = [...environment.diagnostics];\n const adapters = await resolveInfraAdaptersAsync(\n environment.value.desired,\n dependencies.adapterResolver,\n );\n if (!adapters.ok) return appendInfraFailure(diagnostics, adapters);\n diagnostics.push(...adapters.diagnostics);\n const context = createInfraExecutionContext(request, environment.value, dependencies);\n const validation = await validateInfraAdaptersAsync(context, adapters.value);\n if (!validation.ok) return appendInfraFailure(diagnostics, validation);\n diagnostics.push(...validation.diagnostics);\n const compute = await adapters.value.compute.ensureAsync(\n context,\n environment.value.desired.deployment.compute,\n );\n if (!compute.ok) return appendInfraFailure(diagnostics, compute);\n diagnostics.push(...compute.diagnostics);\n const preparation = await prepareInfraServicesAsync(context, adapters.value.services);\n if (!preparation.ok) return appendInfraFailure(diagnostics, preparation);\n diagnostics.push(...preparation.diagnostics);\n const workloads = await collectInfraWorkloadsAsync(context, adapters.value.services);\n if (!workloads.ok) return appendInfraFailure(diagnostics, workloads);\n diagnostics.push(...workloads.diagnostics);\n const runtimeDesired = {\n selection: environment.value.desired.deployment.runtime,\n targets: compute.value.targets,\n workloads: [...Object.values(environment.value.desired.workloads ?? {}), ...workloads.value],\n availableOutputs: mergeInfraOutputs(request.previous?.outputs ?? [], compute.value.outputs),\n };\n const runtimeValidation = await adapters.value.runtime.validateAsync(context, runtimeDesired);\n if (!runtimeValidation.ok) return appendInfraFailure(diagnostics, runtimeValidation);\n diagnostics.push(...runtimeValidation.diagnostics);\n const runtime = await adapters.value.runtime.ensureAsync(context, runtimeDesired);\n if (!runtime.ok) return appendInfraFailure(diagnostics, runtime);\n diagnostics.push(...runtime.diagnostics);\n const services = await reconcileServicesAsync(context, adapters.value.services, [\n ...compute.value.outputs,\n ...runtime.value.outputs,\n ]);\n if (!services.ok) return appendInfraFailure(diagnostics, services);\n diagnostics.push(...services.diagnostics);\n const resources = [\n ...compute.value.resources,\n ...runtime.value.resources,\n ...services.value.resources,\n ];\n const outputs = mergeInfraOutputs(\n compute.value.outputs,\n runtime.value.outputs,\n services.value.outputs,\n );\n const ledger = createInfraLedger({\n projectId: request.projectId,\n environment: environment.value.id,\n targets: compute.value.targets,\n resources,\n outputs,\n previous: request.previous,\n });\n return {\n ok: true,\n value: {\n environment: environment.value.id,\n targets: compute.value.targets,\n resources,\n outputs,\n ledger,\n },\n diagnostics,\n };\n}\n\n/** Reconcile service-owned external state after its runtime workloads expose outputs. */\nasync function reconcileServicesAsync(\n context: InfraExecutionContext,\n services: readonly InfraServiceAdapter[],\n runtimeOutputs: readonly InfraOutput[],\n): Promise<\n InfraResult<{\n readonly resources: readonly InfraOwnedResource[];\n readonly outputs: readonly InfraOutput[];\n }>\n> {\n const resources: InfraOwnedResource[] = [];\n const outputs: InfraOutput[] = [];\n const diagnostics: InfraDiagnostic[] = [];\n for (const service of services) {\n const result = await service.reconcileAsync(context, runtimeOutputs);\n if (!result.ok) return appendInfraFailure(diagnostics, result);\n resources.push(...result.value.resources);\n outputs.push(...result.value.outputs);\n diagnostics.push(...result.diagnostics);\n }\n return { ok: true, value: { resources, outputs }, diagnostics };\n}\n"]}
1	+ {"version":3,"file":"upInfraEnvironmentAsync.js","sourceRoot":"","sources":["../../../../../src/features/environment-lifecycle/application/use-cases/upInfraEnvironmentAsync.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,uBAAuB,EAAE,MAAM,yCAAyC,CAAC;AAClF,OAAO,EAAE,kCAAkC,EAAE,MAAM,oDAAoD,CAAC;AACxG,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AACvE,OAAO,EAAE,2BAA2B,EAAE,MAAM,4CAA4C,CAAC;AACzF,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAC7E,OAAO,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AAC3E,OAAO,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AAC3E,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAE7E,sGAAsG;AACtG,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,OAAuB,EACvB,YAA4C;IAE5C,MAAM,WAAW,GAAG,uBAAuB,CAAC;QAC1C,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,SAAS,EAAE,IAAI;KAChB,CAAC,CAAC;IACH,IAAI,CAAC,WAAW,CAAC,EAAE;QAAE,OAAO,WAAW,CAAC;IACxC,MAAM,WAAW,GAAsB,CAAC,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC;IACpE,MAAM,QAAQ,GAAG,MAAM,yBAAyB,CAC9C,WAAW,CAAC,KAAK,CAAC,OAAO,EACzB,YAAY,CAAC,eAAe,CAC7B,CAAC;IACF,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,OAAO,kBAAkB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IACnE,WAAW,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,2BAA2B,CAAC,OAAO,EAAE,WAAW,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IACtF,MAAM,UAAU,GAAG,MAAM,0BAA0B,CAAC,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC7E,IAAI,CAAC,UAAU,CAAC,EAAE;QAAE,OAAO,kBAAkB,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;IACvE,WAAW,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,MAAM,0BAA0B,CAAC,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACrF,IAAI,CAAC,SAAS,CAAC,EAAE;QAAE,OAAO,kBAAkB,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IACrE,WAAW,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC;IAC3C,MAAM,YAAY,GAAG;QACnB,GAAG,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC;QAC3D,GAAG,SAAS,CAAC,KAAK;KACnB,CAAC;IACF,MAAM,cAAc,GAAG,kCAAkC,CACvD,WAAW,CAAC,KAAK,CAAC,QAAQ,EAC1B,YAAY,CACb,CAAC;IACF,IAAI,CAAC,cAAc,CAAC,EAAE;QAAE,OAAO,kBAAkB,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;IAC/E,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CACtD,OAAO,EACP,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAC7C,CAAC;IACF,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,OAAO,kBAAkB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IACjE,WAAW,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACzC,MAAM,WAAW,GAAG,MAAM,yBAAyB,CAAC,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACtF,IAAI,CAAC,WAAW,CAAC,EAAE;QAAE,OAAO,kBAAkB,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;IACzE,WAAW,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC;IAC7C,MAAM,cAAc,GAAG;QACrB,SAAS,EAAE,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO;QACvD,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO;QAC9B,SAAS,EAAE,YAAY;QACvB,gBAAgB,EAAE,iBAAiB,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,IAAI,EAAE,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;KAC5F,CAAC;IACF,MAAM,iBAAiB,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IAC9F,IAAI,CAAC,iBAAiB,CAAC,EAAE;QAAE,OAAO,kBAAkB,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC;IACrF,WAAW,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,WAAW,CAAC,CAAC;IACnD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IAClF,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,OAAO,kBAAkB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IACjE,WAAW,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,QAAQ,EAAE;QAC9E,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO;QACxB,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO;KACzB,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,OAAO,kBAAkB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IACnE,WAAW,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC1C,MAAM,SAAS,GAAG;QAChB,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS;QAC1B,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS;QAC1B,GAAG,QAAQ,CAAC,KAAK,CAAC,SAAS;KAC5B,CAAC;IACF,MAAM,OAAO,GAAG,iBAAiB,CAC/B,OAAO,CAAC,KAAK,CAAC,OAAO,EACrB,OAAO,CAAC,KAAK,CAAC,OAAO,EACrB,QAAQ,CAAC,KAAK,CAAC,OAAO,CACvB,CAAC;IACF,MAAM,MAAM,GAAG,iBAAiB,CAAC;QAC/B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,WAAW,EAAE,WAAW,CAAC,KAAK,CAAC,EAAE;QACjC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO;QAC9B,SAAS;QACT,OAAO;QACP,QAAQ,EAAE,OAAO,CAAC,QAAQ;KAC3B,CAAC,CAAC;IACH,OAAO;QACL,EAAE,EAAE,IAAI;QACR,KAAK,EAAE;YACL,WAAW,EAAE,WAAW,CAAC,KAAK,CAAC,EAAE;YACjC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO;YAC9B,SAAS;YACT,OAAO;YACP,MAAM;SACP;QACD,WAAW;KACZ,CAAC;AACJ,CAAC;AAED,0FAA0F;AAC1F,KAAK,UAAU,sBAAsB,CACnC,OAA8B,EAC9B,QAAwC,EACxC,cAAsC;IAOtC,MAAM,SAAS,GAAyB,EAAE,CAAC;IAC3C,MAAM,OAAO,GAAkB,EAAE,CAAC;IAClC,MAAM,WAAW,GAAsB,EAAE,CAAC;IAC1C,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;QACrE,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,kBAAkB,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAC/D,SAAS,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC1C,OAAO,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACtC,WAAW,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,WAAW,EAAE,CAAC;AAClE,CAAC","sourcesContent":["import type {\n InfraDiagnostic,\n InfraExecutionContext,\n InfraOutput,\n InfraOwnedResource,\n InfraResult,\n InfraServiceAdapter,\n} from '@ankhorage/contracts/infra';\n\nimport type {\n InfraOrchestrationDependencies,\n InfraUpOperationResult,\n InfraUpRequest,\n} from '../../../../types/infraOrchestration.js';\nimport { resolveInfraEnvironment } from '../../domain/resolveInfraEnvironment.js';\nimport { resolveInfraWorkloadApiComposition } from '../../domain/resolveInfraWorkloadApiComposition.js';\nimport { appendInfraFailure } from '../../utils/appendInfraFailure.js';\nimport { createInfraExecutionContext } from '../../utils/createInfraExecutionContext.js';\nimport { createInfraLedger } from '../../utils/createInfraLedger.js';\nimport { mergeInfraOutputs } from '../../utils/mergeInfraOutputs.js';\nimport { collectInfraWorkloadsAsync } from './collectInfraWorkloadsAsync.js';\nimport { prepareInfraServicesAsync } from './prepareInfraServicesAsync.js';\nimport { resolveInfraAdaptersAsync } from './resolveInfraAdaptersAsync.js';\nimport { validateInfraAdaptersAsync } from './validateInfraAdaptersAsync.js';\n\n/*** Validate and reconcile compute, service preparation, workloads, runtime and services in order. /\nexport async function upInfraEnvironmentAsync(\n request: InfraUpRequest,\n dependencies: InfraOrchestrationDependencies,\n): Promise<InfraUpOperationResult> {\n const environment = resolveInfraEnvironment({\n manifest: request.manifest,\n environment: request.environment,\n operation: 'up',\n });\n if (!environment.ok) return environment;\n const diagnostics: InfraDiagnostic[] = [...environment.diagnostics];\n const adapters = await resolveInfraAdaptersAsync(\n environment.value.desired,\n dependencies.adapterResolver,\n );\n if (!adapters.ok) return appendInfraFailure(diagnostics, adapters);\n diagnostics.push(...adapters.diagnostics);\n const context = createInfraExecutionContext(request, environment.value, dependencies);\n const validation = await validateInfraAdaptersAsync(context, adapters.value);\n if (!validation.ok) return appendInfraFailure(diagnostics, validation);\n diagnostics.push(...validation.diagnostics);\n const workloads = await collectInfraWorkloadsAsync(context, adapters.value.services);\n if (!workloads.ok) return appendInfraFailure(diagnostics, workloads);\n diagnostics.push(...workloads.diagnostics);\n const allWorkloads = [\n ...Object.values(environment.value.desired.workloads ?? {}),\n ...workloads.value,\n ];\n const apiComposition = resolveInfraWorkloadApiComposition(\n environment.value.manifest,\n allWorkloads,\n );\n if (!apiComposition.ok) return appendInfraFailure(diagnostics, apiComposition);\n const compute = await adapters.value.compute.ensureAsync(\n context,\n environment.value.desired.deployment.compute,\n );\n if (!compute.ok) return appendInfraFailure(diagnostics, compute);\n diagnostics.push(...compute.diagnostics);\n const preparation = await prepareInfraServicesAsync(context, adapters.value.services);\n if (!preparation.ok) return appendInfraFailure(diagnostics, preparation);\n diagnostics.push(...preparation.diagnostics);\n const runtimeDesired = {\n selection: environment.value.desired.deployment.runtime,\n targets: compute.value.targets,\n workloads: allWorkloads,\n availableOutputs: mergeInfraOutputs(request.previous?.outputs ?? [], compute.value.outputs),\n };\n const runtimeValidation = await adapters.value.runtime.validateAsync(context, runtimeDesired);\n if (!runtimeValidation.ok) return appendInfraFailure(diagnostics, runtimeValidation);\n diagnostics.push(...runtimeValidation.diagnostics);\n const runtime = await adapters.value.runtime.ensureAsync(context, runtimeDesired);\n if (!runtime.ok) return appendInfraFailure(diagnostics, runtime);\n diagnostics.push(...runtime.diagnostics);\n const services = await reconcileServicesAsync(context, adapters.value.services, [\n ...compute.value.outputs,\n ...runtime.value.outputs,\n ]);\n if (!services.ok) return appendInfraFailure(diagnostics, services);\n diagnostics.push(...services.diagnostics);\n const resources = [\n ...compute.value.resources,\n ...runtime.value.resources,\n ...services.value.resources,\n ];\n const outputs = mergeInfraOutputs(\n compute.value.outputs,\n runtime.value.outputs,\n services.value.outputs,\n );\n const ledger = createInfraLedger({\n projectId: request.projectId,\n environment: environment.value.id,\n targets: compute.value.targets,\n resources,\n outputs,\n previous: request.previous,\n });\n return {\n ok: true,\n value: {\n environment: environment.value.id,\n targets: compute.value.targets,\n resources,\n outputs,\n ledger,\n },\n diagnostics,\n };\n}\n\n/** Reconcile service-owned external state after its runtime workloads expose outputs. */\nasync function reconcileServicesAsync(\n context: InfraExecutionContext,\n services: readonly InfraServiceAdapter[],\n runtimeOutputs: readonly InfraOutput[],\n): Promise<\n InfraResult<{\n readonly resources: readonly InfraOwnedResource[];\n readonly outputs: readonly InfraOutput[];\n }>\n> {\n const resources: InfraOwnedResource[] = [];\n const outputs: InfraOutput[] = [];\n const diagnostics: InfraDiagnostic[] = [];\n for (const service of services) {\n const result = await service.reconcileAsync(context, runtimeOutputs);\n if (!result.ok) return appendInfraFailure(diagnostics, result);\n resources.push(...result.value.resources);\n outputs.push(...result.value.outputs);\n diagnostics.push(...result.diagnostics);\n }\n return { ok: true, value: { resources, outputs }, diagnostics };\n}\n"]}

package/dist/features/environment-lifecycle/domain/resolveInfraWorkloadApiComposition.d.ts ADDED Viewed

@@ -0,0 +1,5 @@
+import type { InfraManifest, InfraResult, InfraWorkloadSpec } from '@ankhorage/contracts/infra';
+import type { InfraWorkloadApiAssignment } from '../../../types/infraWorkloadApiComposition.js';
+/*** Resolve internal API declarations to exactly one declared workload without selecting HTTP transport. */
+export declare function resolveInfraWorkloadApiComposition(manifest: InfraManifest, workloads: readonly InfraWorkloadSpec[]): InfraResult<readonly InfraWorkloadApiAssignment[]>;
+//# sourceMappingURL=resolveInfraWorkloadApiComposition.d.ts.map

package/dist/features/environment-lifecycle/domain/resolveInfraWorkloadApiComposition.d.ts.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"resolveInfraWorkloadApiComposition.d.ts","sourceRoot":"","sources":["../../../../src/features/environment-lifecycle/domain/resolveInfraWorkloadApiComposition.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,aAAa,EACb,WAAW,EACX,iBAAiB,EAClB,MAAM,4BAA4B,CAAC;AAEpC,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,+CAA+C,CAAC;AAEhG,4GAA4G;AAC5G,wBAAgB,kCAAkC,CAChD,QAAQ,EAAE,aAAa,EACvB,SAAS,EAAE,SAAS,iBAAiB,EAAE,GACtC,WAAW,CAAC,SAAS,0BAA0B,EAAE,CAAC,CA8BpD"}

package/dist/features/environment-lifecycle/domain/resolveInfraWorkloadApiComposition.js ADDED Viewed

@@ -0,0 +1,55 @@
+/*** Resolve internal API declarations to exactly one declared workload without selecting HTTP transport. */
+export function resolveInfraWorkloadApiComposition(manifest, workloads) {
+    const diagnostics = [];
+    const assignments = [];
+    const apiDefinitions = new Map(Object.entries(manifest.apis ?? {}));
+    const assignedWorkloads = new Map();
+    for (const workload of workloads) {
+        for (const apiId of Object.keys(workload.apis?.apiIds ?? {})) {
+            const api = apiDefinitions.get(apiId);
+            if (api === undefined) {
+                diagnostics.push(createMissingApiDiagnostic(workload.id, apiId));
+                continue;
+            }
+            if (api.origin !== 'internal') {
+                diagnostics.push(createExternalApiDiagnostic(workload.id, apiId));
+                continue;
+            }
+            const assignedWorkloadId = assignedWorkloads.get(apiId);
+            if (assignedWorkloadId !== undefined) {
+                diagnostics.push(createDuplicateApiDiagnostic(apiId, assignedWorkloadId, workload.id));
+                continue;
+            }
+            assignedWorkloads.set(apiId, workload.id);
+            assignments.push({ apiId, workloadId: workload.id });
+        }
+    }
+    return diagnostics.length === 0
+        ? { ok: true, value: assignments, diagnostics }
+        : { ok: false, diagnostics };
+}
+/*** Describe an API reference whose registry definition is unavailable to the desired state. */
+function createMissingApiDiagnostic(workloadId, apiId) {
+    return {
+        severity: 'error',
+        code: 'infra-workload-api-missing',
+        message: `Workload "${workloadId}" references API "${apiId}", but it is not declared in manifest.apis.`,
+    };
+}
+/*** Describe an external API incorrectly claimed as a workload-served API. */
+function createExternalApiDiagnostic(workloadId, apiId) {
+    return {
+        severity: 'error',
+        code: 'infra-workload-api-external',
+        message: `Workload "${workloadId}" references external API "${apiId}"; only internal APIs may be served by workloads.`,
+    };
+}
+/*** Describe the conflicting second workload for one internal API. */
+function createDuplicateApiDiagnostic(apiId, assignedWorkloadId, workloadId) {
+    return {
+        severity: 'error',
+        code: 'infra-workload-api-duplicate',
+        message: `Internal API "${apiId}" is assigned to both workloads "${assignedWorkloadId}" and "${workloadId}".`,
+    };
+}
+//# sourceMappingURL=resolveInfraWorkloadApiComposition.js.map

package/dist/features/environment-lifecycle/domain/resolveInfraWorkloadApiComposition.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"resolveInfraWorkloadApiComposition.js","sourceRoot":"","sources":["../../../../src/features/environment-lifecycle/domain/resolveInfraWorkloadApiComposition.ts"],"names":[],"mappings":"AASA,4GAA4G;AAC5G,MAAM,UAAU,kCAAkC,CAChD,QAAuB,EACvB,SAAuC;IAEvC,MAAM,WAAW,GAAsB,EAAE,CAAC;IAC1C,MAAM,WAAW,GAAiC,EAAE,CAAC;IACrD,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;IACpE,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAkB,CAAC;IAEpD,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC;YAC7D,MAAM,GAAG,GAAG,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACtC,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;gBACtB,WAAW,CAAC,IAAI,CAAC,0BAA0B,CAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC;gBACjE,SAAS;YACX,CAAC;YACD,IAAI,GAAG,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;gBAC9B,WAAW,CAAC,IAAI,CAAC,2BAA2B,CAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC;gBAClE,SAAS;YACX,CAAC;YACD,MAAM,kBAAkB,GAAG,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACxD,IAAI,kBAAkB,KAAK,SAAS,EAAE,CAAC;gBACrC,WAAW,CAAC,IAAI,CAAC,4BAA4B,CAAC,KAAK,EAAE,kBAAkB,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;gBACvF,SAAS;YACX,CAAC;YACD,iBAAiB,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;YAC1C,WAAW,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IAED,OAAO,WAAW,CAAC,MAAM,KAAK,CAAC;QAC7B,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE;QAC/C,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;AACjC,CAAC;AAED,gGAAgG;AAChG,SAAS,0BAA0B,CAAC,UAAkB,EAAE,KAAa;IACnE,OAAO;QACL,QAAQ,EAAE,OAAgB;QAC1B,IAAI,EAAE,4BAA4B;QAClC,OAAO,EAAE,aAAa,UAAU,qBAAqB,KAAK,6CAA6C;KACxG,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,SAAS,2BAA2B,CAAC,UAAkB,EAAE,KAAa;IACpE,OAAO;QACL,QAAQ,EAAE,OAAgB;QAC1B,IAAI,EAAE,6BAA6B;QACnC,OAAO,EAAE,aAAa,UAAU,8BAA8B,KAAK,mDAAmD;KACvH,CAAC;AACJ,CAAC;AAED,sEAAsE;AACtE,SAAS,4BAA4B,CACnC,KAAa,EACb,kBAA0B,EAC1B,UAAkB;IAElB,OAAO;QACL,QAAQ,EAAE,OAAgB;QAC1B,IAAI,EAAE,8BAA8B;QACpC,OAAO,EAAE,iBAAiB,KAAK,oCAAoC,kBAAkB,UAAU,UAAU,IAAI;KAC9G,CAAC;AACJ,CAAC","sourcesContent":["import type {\n InfraDiagnostic,\n InfraManifest,\n InfraResult,\n InfraWorkloadSpec,\n} from '@ankhorage/contracts/infra';\n\nimport type { InfraWorkloadApiAssignment } from '../../../types/infraWorkloadApiComposition.js';\n\n/*** Resolve internal API declarations to exactly one declared workload without selecting HTTP transport. */\nexport function resolveInfraWorkloadApiComposition(\n manifest: InfraManifest,\n workloads: readonly InfraWorkloadSpec[],\n): InfraResult<readonly InfraWorkloadApiAssignment[]> {\n const diagnostics: InfraDiagnostic[] = [];\n const assignments: InfraWorkloadApiAssignment[] = [];\n const apiDefinitions = new Map(Object.entries(manifest.apis ?? {}));\n const assignedWorkloads = new Map<string, string>();\n\n for (const workload of workloads) {\n for (const apiId of Object.keys(workload.apis?.apiIds ?? {})) {\n const api = apiDefinitions.get(apiId);\n if (api === undefined) {\n diagnostics.push(createMissingApiDiagnostic(workload.id, apiId));\n continue;\n }\n if (api.origin !== 'internal') {\n diagnostics.push(createExternalApiDiagnostic(workload.id, apiId));\n continue;\n }\n const assignedWorkloadId = assignedWorkloads.get(apiId);\n if (assignedWorkloadId !== undefined) {\n diagnostics.push(createDuplicateApiDiagnostic(apiId, assignedWorkloadId, workload.id));\n continue;\n }\n assignedWorkloads.set(apiId, workload.id);\n assignments.push({ apiId, workloadId: workload.id });\n }\n }\n\n return diagnostics.length === 0\n ? { ok: true, value: assignments, diagnostics }\n : { ok: false, diagnostics };\n}\n\n/*** Describe an API reference whose registry definition is unavailable to the desired state. */\nfunction createMissingApiDiagnostic(workloadId: string, apiId: string) {\n return {\n severity: 'error' as const,\n code: 'infra-workload-api-missing',\n message: `Workload \"${workloadId}\" references API \"${apiId}\", but it is not declared in manifest.apis.`,\n };\n}\n\n/*** Describe an external API incorrectly claimed as a workload-served API. */\nfunction createExternalApiDiagnostic(workloadId: string, apiId: string) {\n return {\n severity: 'error' as const,\n code: 'infra-workload-api-external',\n message: `Workload \"${workloadId}\" references external API \"${apiId}\"; only internal APIs may be served by workloads.`,\n };\n}\n\n/*** Describe the conflicting second workload for one internal API. */\nfunction createDuplicateApiDiagnostic(\n apiId: string,\n assignedWorkloadId: string,\n workloadId: string,\n) {\n return {\n severity: 'error' as const,\n code: 'infra-workload-api-duplicate',\n message: `Internal API \"${apiId}\" is assigned to both workloads \"${assignedWorkloadId}\" and \"${workloadId}\".`,\n };\n}\n"]}

package/dist/index.d.ts CHANGED Viewed

@@ -13,5 +13,7 @@ export { upInfraEnvironmentAsync } from './features/environment-lifecycle/applic
 export { validateInfraEnvironmentAsync } from './features/environment-lifecycle/application/use-cases/validateInfraEnvironmentAsync.js';
 export { orderInfraPlanActions } from './features/environment-lifecycle/domain/orderInfraPlanActions.js';
 export { resolveInfraEnvironment } from './features/environment-lifecycle/domain/resolveInfraEnvironment.js';
+export { resolveInfraWorkloadApiComposition } from './features/environment-lifecycle/domain/resolveInfraWorkloadApiComposition.js';
 export type { InfraDestroyOperationRequest, InfraDestroyOperationResult, InfraDestroyResult, InfraDownOperationResult, InfraDownResult, InfraGenerateOperationResult, InfraGenerateResult, InfraOperationRequest, InfraOrchestrationDependencies, InfraOutputsOperationResult, InfraOutputsResult, InfraPlanOperationResult, InfraStatusOperationResult, InfraStoredState, InfraUpOperationResult, InfraUpRequest, InfraUpResult, InfraValidateOperationResult, InfraValidateResult, PreparedInfraOperation, ResolvedInfraAdapters, ResolvedInfraEnvironment, } from './types/infraOrchestration.js';
+export type { InfraWorkloadApiAssignment } from './types/infraWorkloadApiComposition.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oCAAoC,EAAE,MAAM,4FAA4F,CAAC;AAClJ,OAAO,EAAE,gCAAgC,EAAE,MAAM,wFAAwF,CAAC;AAC1I,OAAO,EAAE,qCAAqC,EAAE,MAAM,6FAA6F,CAAC;AACpJ,YAAY,EACV,yBAAyB,EACzB,2BAA2B,GAC5B,MAAM,oFAAoF,CAAC;AAC5F,OAAO,EAAE,4BAA4B,EAAE,MAAM,wFAAwF,CAAC;AACtI,OAAO,EAAE,yBAAyB,EAAE,MAAM,qFAAqF,CAAC;AAChI,OAAO,EAAE,6BAA6B,EAAE,MAAM,yFAAyF,CAAC;AACxI,OAAO,EAAE,0BAA0B,EAAE,MAAM,sFAAsF,CAAC;AAClI,OAAO,EAAE,yBAAyB,EAAE,MAAM,qFAAqF,CAAC;AAChI,OAAO,EAAE,yBAAyB,EAAE,MAAM,qFAAqF,CAAC;AAChI,OAAO,EAAE,2BAA2B,EAAE,MAAM,uFAAuF,CAAC;AACpI,OAAO,EAAE,uBAAuB,EAAE,MAAM,mFAAmF,CAAC;AAC5H,OAAO,EAAE,6BAA6B,EAAE,MAAM,yFAAyF,CAAC;AACxI,OAAO,EAAE,qBAAqB,EAAE,MAAM,kEAAkE,CAAC;AACzG,OAAO,EAAE,uBAAuB,EAAE,MAAM,oEAAoE,CAAC;AAC7G,YAAY,EACV,4BAA4B,EAC5B,2BAA2B,EAC3B,kBAAkB,EAClB,wBAAwB,EACxB,eAAe,EACf,4BAA4B,EAC5B,mBAAmB,EACnB,qBAAqB,EACrB,8BAA8B,EAC9B,2BAA2B,EAC3B,kBAAkB,EAClB,wBAAwB,EACxB,0BAA0B,EAC1B,gBAAgB,EAChB,sBAAsB,EACtB,cAAc,EACd,aAAa,EACb,4BAA4B,EAC5B,mBAAmB,EACnB,sBAAsB,EACtB,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,+BAA+B,CAAC"}
1	+ {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oCAAoC,EAAE,MAAM,4FAA4F,CAAC;AAClJ,OAAO,EAAE,gCAAgC,EAAE,MAAM,wFAAwF,CAAC;AAC1I,OAAO,EAAE,qCAAqC,EAAE,MAAM,6FAA6F,CAAC;AACpJ,YAAY,EACV,yBAAyB,EACzB,2BAA2B,GAC5B,MAAM,oFAAoF,CAAC;AAC5F,OAAO,EAAE,4BAA4B,EAAE,MAAM,wFAAwF,CAAC;AACtI,OAAO,EAAE,yBAAyB,EAAE,MAAM,qFAAqF,CAAC;AAChI,OAAO,EAAE,6BAA6B,EAAE,MAAM,yFAAyF,CAAC;AACxI,OAAO,EAAE,0BAA0B,EAAE,MAAM,sFAAsF,CAAC;AAClI,OAAO,EAAE,yBAAyB,EAAE,MAAM,qFAAqF,CAAC;AAChI,OAAO,EAAE,yBAAyB,EAAE,MAAM,qFAAqF,CAAC;AAChI,OAAO,EAAE,2BAA2B,EAAE,MAAM,uFAAuF,CAAC;AACpI,OAAO,EAAE,uBAAuB,EAAE,MAAM,mFAAmF,CAAC;AAC5H,OAAO,EAAE,6BAA6B,EAAE,MAAM,yFAAyF,CAAC;AACxI,OAAO,EAAE,qBAAqB,EAAE,MAAM,kEAAkE,CAAC;AACzG,OAAO,EAAE,uBAAuB,EAAE,MAAM,oEAAoE,CAAC;AAC7G,OAAO,EAAE,kCAAkC,EAAE,MAAM,+EAA+E,CAAC;AACnI,YAAY,EACV,4BAA4B,EAC5B,2BAA2B,EAC3B,kBAAkB,EAClB,wBAAwB,EACxB,eAAe,EACf,4BAA4B,EAC5B,mBAAmB,EACnB,qBAAqB,EACrB,8BAA8B,EAC9B,2BAA2B,EAC3B,kBAAkB,EAClB,wBAAwB,EACxB,0BAA0B,EAC1B,gBAAgB,EAChB,sBAAsB,EACtB,cAAc,EACd,aAAa,EACb,4BAA4B,EAC5B,mBAAmB,EACnB,sBAAsB,EACtB,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,+BAA+B,CAAC;AACvC,YAAY,EAAE,0BAA0B,EAAE,MAAM,wCAAwC,CAAC"}

package/dist/index.js CHANGED Viewed

@@ -12,4 +12,5 @@ export { upInfraEnvironmentAsync } from './features/environment-lifecycle/applic
 export { validateInfraEnvironmentAsync } from './features/environment-lifecycle/application/use-cases/validateInfraEnvironmentAsync.js';
 export { orderInfraPlanActions } from './features/environment-lifecycle/domain/orderInfraPlanActions.js';
 export { resolveInfraEnvironment } from './features/environment-lifecycle/domain/resolveInfraEnvironment.js';
+export { resolveInfraWorkloadApiComposition } from './features/environment-lifecycle/domain/resolveInfraWorkloadApiComposition.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oCAAoC,EAAE,MAAM,4FAA4F,CAAC;AAClJ,OAAO,EAAE,gCAAgC,EAAE,MAAM,wFAAwF,CAAC;AAC1I,OAAO,EAAE,qCAAqC,EAAE,MAAM,6FAA6F,CAAC;AAKpJ,OAAO,EAAE,4BAA4B,EAAE,MAAM,wFAAwF,CAAC;AACtI,OAAO,EAAE,yBAAyB,EAAE,MAAM,qFAAqF,CAAC;AAChI,OAAO,EAAE,6BAA6B,EAAE,MAAM,yFAAyF,CAAC;AACxI,OAAO,EAAE,0BAA0B,EAAE,MAAM,sFAAsF,CAAC;AAClI,OAAO,EAAE,yBAAyB,EAAE,MAAM,qFAAqF,CAAC;AAChI,OAAO,EAAE,yBAAyB,EAAE,MAAM,qFAAqF,CAAC;AAChI,OAAO,EAAE,2BAA2B,EAAE,MAAM,uFAAuF,CAAC;AACpI,OAAO,EAAE,uBAAuB,EAAE,MAAM,mFAAmF,CAAC;AAC5H,OAAO,EAAE,6BAA6B,EAAE,MAAM,yFAAyF,CAAC;AACxI,OAAO,EAAE,qBAAqB,EAAE,MAAM,kEAAkE,CAAC;AACzG,OAAO,EAAE,uBAAuB,EAAE,MAAM,oEAAoE,CAAC","sourcesContent":["export { createEnvironmentInfraCredentialPort } from './features/environment-lifecycle/adapters/outbound/createEnvironmentInfraCredentialPort.js';\nexport { createEnvironmentInfraSecretPort } from './features/environment-lifecycle/adapters/outbound/createEnvironmentInfraSecretPort.js';\nexport { createNodeInfraAdapterPackageResolver } from './features/environment-lifecycle/adapters/outbound/createNodeInfraAdapterPackageResolver.js';\nexport type {\n InfraAdapterPackageModule,\n InfraAdapterPackageResolver,\n} from './features/environment-lifecycle/application/ports/outbound/infraAdapterPackage.js';\nexport { destroyInfraEnvironmentAsync } from './features/environment-lifecycle/application/use-cases/destroyInfraEnvironmentAsync.js';\nexport { downInfraEnvironmentAsync } from './features/environment-lifecycle/application/use-cases/downInfraEnvironmentAsync.js';\nexport { generateInfraEnvironmentAsync } from './features/environment-lifecycle/application/use-cases/generateInfraEnvironmentAsync.js';\nexport { getInfraEnvironmentOutputs } from './features/environment-lifecycle/application/use-cases/getInfraEnvironmentOutputs.js';\nexport { planInfraEnvironmentAsync } from './features/environment-lifecycle/application/use-cases/planInfraEnvironmentAsync.js';\nexport { resolveInfraAdaptersAsync } from './features/environment-lifecycle/application/use-cases/resolveInfraAdaptersAsync.js';\nexport { statusInfraEnvironmentAsync } from './features/environment-lifecycle/application/use-cases/statusInfraEnvironmentAsync.js';\nexport { upInfraEnvironmentAsync } from './features/environment-lifecycle/application/use-cases/upInfraEnvironmentAsync.js';\nexport { validateInfraEnvironmentAsync } from './features/environment-lifecycle/application/use-cases/validateInfraEnvironmentAsync.js';\nexport { orderInfraPlanActions } from './features/environment-lifecycle/domain/orderInfraPlanActions.js';\nexport { resolveInfraEnvironment } from './features/environment-lifecycle/domain/resolveInfraEnvironment.js';\nexport type {\n InfraDestroyOperationRequest,\n InfraDestroyOperationResult,\n InfraDestroyResult,\n InfraDownOperationResult,\n InfraDownResult,\n InfraGenerateOperationResult,\n InfraGenerateResult,\n InfraOperationRequest,\n InfraOrchestrationDependencies,\n InfraOutputsOperationResult,\n InfraOutputsResult,\n InfraPlanOperationResult,\n InfraStatusOperationResult,\n InfraStoredState,\n InfraUpOperationResult,\n InfraUpRequest,\n InfraUpResult,\n InfraValidateOperationResult,\n InfraValidateResult,\n PreparedInfraOperation,\n ResolvedInfraAdapters,\n ResolvedInfraEnvironment,\n} from './types/infraOrchestration.js';\n"]}
1	+ {"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oCAAoC,EAAE,MAAM,4FAA4F,CAAC;AAClJ,OAAO,EAAE,gCAAgC,EAAE,MAAM,wFAAwF,CAAC;AAC1I,OAAO,EAAE,qCAAqC,EAAE,MAAM,6FAA6F,CAAC;AAKpJ,OAAO,EAAE,4BAA4B,EAAE,MAAM,wFAAwF,CAAC;AACtI,OAAO,EAAE,yBAAyB,EAAE,MAAM,qFAAqF,CAAC;AAChI,OAAO,EAAE,6BAA6B,EAAE,MAAM,yFAAyF,CAAC;AACxI,OAAO,EAAE,0BAA0B,EAAE,MAAM,sFAAsF,CAAC;AAClI,OAAO,EAAE,yBAAyB,EAAE,MAAM,qFAAqF,CAAC;AAChI,OAAO,EAAE,yBAAyB,EAAE,MAAM,qFAAqF,CAAC;AAChI,OAAO,EAAE,2BAA2B,EAAE,MAAM,uFAAuF,CAAC;AACpI,OAAO,EAAE,uBAAuB,EAAE,MAAM,mFAAmF,CAAC;AAC5H,OAAO,EAAE,6BAA6B,EAAE,MAAM,yFAAyF,CAAC;AACxI,OAAO,EAAE,qBAAqB,EAAE,MAAM,kEAAkE,CAAC;AACzG,OAAO,EAAE,uBAAuB,EAAE,MAAM,oEAAoE,CAAC;AAC7G,OAAO,EAAE,kCAAkC,EAAE,MAAM,+EAA+E,CAAC","sourcesContent":["export { createEnvironmentInfraCredentialPort } from './features/environment-lifecycle/adapters/outbound/createEnvironmentInfraCredentialPort.js';\nexport { createEnvironmentInfraSecretPort } from './features/environment-lifecycle/adapters/outbound/createEnvironmentInfraSecretPort.js';\nexport { createNodeInfraAdapterPackageResolver } from './features/environment-lifecycle/adapters/outbound/createNodeInfraAdapterPackageResolver.js';\nexport type {\n InfraAdapterPackageModule,\n InfraAdapterPackageResolver,\n} from './features/environment-lifecycle/application/ports/outbound/infraAdapterPackage.js';\nexport { destroyInfraEnvironmentAsync } from './features/environment-lifecycle/application/use-cases/destroyInfraEnvironmentAsync.js';\nexport { downInfraEnvironmentAsync } from './features/environment-lifecycle/application/use-cases/downInfraEnvironmentAsync.js';\nexport { generateInfraEnvironmentAsync } from './features/environment-lifecycle/application/use-cases/generateInfraEnvironmentAsync.js';\nexport { getInfraEnvironmentOutputs } from './features/environment-lifecycle/application/use-cases/getInfraEnvironmentOutputs.js';\nexport { planInfraEnvironmentAsync } from './features/environment-lifecycle/application/use-cases/planInfraEnvironmentAsync.js';\nexport { resolveInfraAdaptersAsync } from './features/environment-lifecycle/application/use-cases/resolveInfraAdaptersAsync.js';\nexport { statusInfraEnvironmentAsync } from './features/environment-lifecycle/application/use-cases/statusInfraEnvironmentAsync.js';\nexport { upInfraEnvironmentAsync } from './features/environment-lifecycle/application/use-cases/upInfraEnvironmentAsync.js';\nexport { validateInfraEnvironmentAsync } from './features/environment-lifecycle/application/use-cases/validateInfraEnvironmentAsync.js';\nexport { orderInfraPlanActions } from './features/environment-lifecycle/domain/orderInfraPlanActions.js';\nexport { resolveInfraEnvironment } from './features/environment-lifecycle/domain/resolveInfraEnvironment.js';\nexport { resolveInfraWorkloadApiComposition } from './features/environment-lifecycle/domain/resolveInfraWorkloadApiComposition.js';\nexport type {\n InfraDestroyOperationRequest,\n InfraDestroyOperationResult,\n InfraDestroyResult,\n InfraDownOperationResult,\n InfraDownResult,\n InfraGenerateOperationResult,\n InfraGenerateResult,\n InfraOperationRequest,\n InfraOrchestrationDependencies,\n InfraOutputsOperationResult,\n InfraOutputsResult,\n InfraPlanOperationResult,\n InfraStatusOperationResult,\n InfraStoredState,\n InfraUpOperationResult,\n InfraUpRequest,\n InfraUpResult,\n InfraValidateOperationResult,\n InfraValidateResult,\n PreparedInfraOperation,\n ResolvedInfraAdapters,\n ResolvedInfraEnvironment,\n} from './types/infraOrchestration.js';\nexport type { InfraWorkloadApiAssignment } from './types/infraWorkloadApiComposition.js';\n"]}

package/dist/types/infraWorkloadApiComposition.d.ts ADDED Viewed

@@ -0,0 +1,6 @@
+/** One internal API assigned to the workload that serves it. */
+export interface InfraWorkloadApiAssignment {
+    readonly apiId: string;
+    readonly workloadId: string;
+}
+//# sourceMappingURL=infraWorkloadApiComposition.d.ts.map

package/dist/types/infraWorkloadApiComposition.d.ts.map ADDED Viewed

	@@ -0,0 +1 @@
1	+ {"version":3,"file":"infraWorkloadApiComposition.d.ts","sourceRoot":"","sources":["../../src/types/infraWorkloadApiComposition.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B"}

package/dist/types/infraWorkloadApiComposition.js ADDED Viewed

	@@ -0,0 +1,2 @@
1	+ export {};
2	+ //# sourceMappingURL=infraWorkloadApiComposition.js.map

package/dist/types/infraWorkloadApiComposition.js.map ADDED Viewed

	@@ -0,0 +1 @@
1	+ {"version":3,"file":"infraWorkloadApiComposition.js","sourceRoot":"","sources":["../../src/types/infraWorkloadApiComposition.ts"],"names":[],"mappings":"","sourcesContent":["/** One internal API assigned to the workload that serves it. */\nexport interface InfraWorkloadApiAssignment {\n readonly apiId: string;\n readonly workloadId: string;\n}\n"]}

package/package.json CHANGED Viewed

@@ -1,7 +1,7 @@
 {
   "name": "@ankhorage/infra",
   "type": "module",
-  "version": "7.2.11",
+  "version": "7.3.0",
   "description": "Project-aware infrastructure generation library and executable Ankh provider for Ankhorage.",
   "homepage": "https://github.com/ankhorage/infra#readme",
   "bugs": {
@@ -35,10 +35,10 @@
     "openapi"
   ],
   "dependencies": {
-    "@ankhorage/ankh": "^0.13.2",
+    "@ankhorage/ankh": "^0.13.6",
     "@ankhorage/capability": "^0.2.2",
-    "@ankhorage/contracts": "^26.0.1",
-    "@ankhorage/utility": "^1.9.86"
+    "@ankhorage/contracts": "^26.10.0",
+    "@ankhorage/utility": "^1.10.0"
   },
   "files": [
     "dist",
@@ -230,19 +230,19 @@
     "knip:test": "bun run knip:check"
   },
   "devDependencies": {
-    "@ankhorage/cerbos": "^0.2.0",
-    "@ankhorage/devtools": "^2.3.21",
-    "@ankhorage/docker-compose": "^0.5.3",
-    "@ankhorage/hetzner": "^0.3.0",
-    "@ankhorage/k3s": "^0.4.1",
-    "@ankhorage/local": "^0.3.22",
-    "@ankhorage/minikube": "^0.4.124",
+    "@ankhorage/infra-cerbos": "^0.2.3",
+    "@ankhorage/devtools": "^2.6.0",
+    "@ankhorage/infra-docker-compose": "^0.5.6",
+    "@ankhorage/infra-hetzner": "^0.3.3",
+    "@ankhorage/infra-k3s": "^0.4.4",
+    "@ankhorage/infra-local": "^0.3.31",
+    "@ankhorage/infra-minikube": "^0.4.132",
     "@ankhorage/paradox": "^0.3.5",
-    "@ankhorage/r2": "^0.2.0",
-    "@ankhorage/supabase": "^0.5.14",
+    "@ankhorage/infra-r2": "^0.3.0",
+    "@ankhorage/infra-supabase": "^0.6.0",
     "@ankhorage/supabase-vault": "^0.3.12",
     "@types/bun": "^1.4.2",
-    "@types/node": "^26.6.5",
+    "@types/node": "^26.6.6",
     "typescript": "^6.0.3"
   },
   "packageManager": "bun@1.4.2"

package/src/environmentLifecycle.test.ts CHANGED Viewed

@@ -54,10 +54,10 @@ describe('selected adapter resolution', () => {
     expect(result.ok).toBe(true);
     expect(requested).toEqual([
-      '@ankhorage/local',
-      '@ankhorage/docker-compose',
-      '@ankhorage/supabase',
-      '@ankhorage/cerbos',
+      '@ankhorage/infra-local',
+      '@ankhorage/infra-docker-compose',
+      '@ankhorage/infra-supabase',
+      '@ankhorage/infra-cerbos',
     ]);
     if (!result.ok) throw new Error('Expected adapters.');
     expect(result.value.services.map(({ descriptor }) => descriptor.id)).toEqual([

package/src/features/environment-lifecycle/application/use-cases/prepareInfraOperationAsync.ts CHANGED Viewed

@@ -6,6 +6,7 @@ import type {
   PreparedInfraOperation,
 } from '../../../../types/infraOrchestration.js';
 import { resolveInfraEnvironment } from '../../domain/resolveInfraEnvironment.js';
+import { resolveInfraWorkloadApiComposition } from '../../domain/resolveInfraWorkloadApiComposition.js';
 import { appendInfraFailure } from '../../utils/appendInfraFailure.js';
 import { createInfraExecutionContext } from '../../utils/createInfraExecutionContext.js';
 import { collectInfraWorkloadsAsync } from './collectInfraWorkloadsAsync.js';
@@ -57,6 +58,15 @@ export async function prepareInfraOperationAsync(
   const workloads = await collectInfraWorkloadsAsync(context, adapters.value.services);
   if (!workloads.ok) return appendInfraFailure(diagnostics, workloads);
   diagnostics.push(...workloads.diagnostics);
+  const allWorkloads = [
+    ...Object.values(environment.value.desired.workloads ?? {}),
+    ...workloads.value,
+  ];
+  const apiComposition = resolveInfraWorkloadApiComposition(
+    environment.value.manifest,
+    allWorkloads,
+  );
+  if (!apiComposition.ok) return appendInfraFailure(diagnostics, apiComposition);
   const compute = await adapters.value.compute.inspectAsync(
     context,
     environment.value.desired.deployment.compute,
@@ -69,7 +79,7 @@ export async function prepareInfraOperationAsync(
       compute.value.targets.length > 0
         ? compute.value.targets
         : (request.previous?.targets ?? compute.value.targets),
-    workloads: [...Object.values(environment.value.desired.workloads ?? {}), ...workloads.value],
+    workloads: allWorkloads,
     availableOutputs: mergeOutputs(request.previous?.outputs ?? [], compute.value.outputs),
   };
   if (runtimeDesired.targets.length === 0) {

package/src/features/environment-lifecycle/application/use-cases/upInfraEnvironmentAsync.ts CHANGED Viewed

@@ -13,6 +13,7 @@ import type {
   InfraUpRequest,
 } from '../../../../types/infraOrchestration.js';
 import { resolveInfraEnvironment } from '../../domain/resolveInfraEnvironment.js';
+import { resolveInfraWorkloadApiComposition } from '../../domain/resolveInfraWorkloadApiComposition.js';
 import { appendInfraFailure } from '../../utils/appendInfraFailure.js';
 import { createInfraExecutionContext } from '../../utils/createInfraExecutionContext.js';
 import { createInfraLedger } from '../../utils/createInfraLedger.js';
@@ -44,6 +45,18 @@ export async function upInfraEnvironmentAsync(
   const validation = await validateInfraAdaptersAsync(context, adapters.value);
   if (!validation.ok) return appendInfraFailure(diagnostics, validation);
   diagnostics.push(...validation.diagnostics);
+  const workloads = await collectInfraWorkloadsAsync(context, adapters.value.services);
+  if (!workloads.ok) return appendInfraFailure(diagnostics, workloads);
+  diagnostics.push(...workloads.diagnostics);
+  const allWorkloads = [
+    ...Object.values(environment.value.desired.workloads ?? {}),
+    ...workloads.value,
+  ];
+  const apiComposition = resolveInfraWorkloadApiComposition(
+    environment.value.manifest,
+    allWorkloads,
+  );
+  if (!apiComposition.ok) return appendInfraFailure(diagnostics, apiComposition);
   const compute = await adapters.value.compute.ensureAsync(
     context,
     environment.value.desired.deployment.compute,
@@ -53,13 +66,10 @@ export async function upInfraEnvironmentAsync(
   const preparation = await prepareInfraServicesAsync(context, adapters.value.services);
   if (!preparation.ok) return appendInfraFailure(diagnostics, preparation);
   diagnostics.push(...preparation.diagnostics);
-  const workloads = await collectInfraWorkloadsAsync(context, adapters.value.services);
-  if (!workloads.ok) return appendInfraFailure(diagnostics, workloads);
-  diagnostics.push(...workloads.diagnostics);
   const runtimeDesired = {
     selection: environment.value.desired.deployment.runtime,
     targets: compute.value.targets,
-    workloads: [...Object.values(environment.value.desired.workloads ?? {}), ...workloads.value],
+    workloads: allWorkloads,
     availableOutputs: mergeInfraOutputs(request.previous?.outputs ?? [], compute.value.outputs),
   };
   const runtimeValidation = await adapters.value.runtime.validateAsync(context, runtimeDesired);

package/src/features/environment-lifecycle/domain/resolveInfraWorkloadApiComposition.ts ADDED Viewed

@@ -0,0 +1,75 @@
+import type {
+  InfraDiagnostic,
+  InfraManifest,
+  InfraResult,
+  InfraWorkloadSpec,
+} from '@ankhorage/contracts/infra';
+import type { InfraWorkloadApiAssignment } from '../../../types/infraWorkloadApiComposition.js';
+/*** Resolve internal API declarations to exactly one declared workload without selecting HTTP transport. */
+export function resolveInfraWorkloadApiComposition(
+  manifest: InfraManifest,
+  workloads: readonly InfraWorkloadSpec[],
+): InfraResult<readonly InfraWorkloadApiAssignment[]> {
+  const diagnostics: InfraDiagnostic[] = [];
+  const assignments: InfraWorkloadApiAssignment[] = [];
+  const apiDefinitions = new Map(Object.entries(manifest.apis ?? {}));
+  const assignedWorkloads = new Map<string, string>();
+  for (const workload of workloads) {
+    for (const apiId of Object.keys(workload.apis?.apiIds ?? {})) {
+      const api = apiDefinitions.get(apiId);
+      if (api === undefined) {
+        diagnostics.push(createMissingApiDiagnostic(workload.id, apiId));
+        continue;
+      }
+      if (api.origin !== 'internal') {
+        diagnostics.push(createExternalApiDiagnostic(workload.id, apiId));
+        continue;
+      }
+      const assignedWorkloadId = assignedWorkloads.get(apiId);
+      if (assignedWorkloadId !== undefined) {
+        diagnostics.push(createDuplicateApiDiagnostic(apiId, assignedWorkloadId, workload.id));
+        continue;
+      }
+      assignedWorkloads.set(apiId, workload.id);
+      assignments.push({ apiId, workloadId: workload.id });
+    }
+  }
+  return diagnostics.length === 0
+    ? { ok: true, value: assignments, diagnostics }
+    : { ok: false, diagnostics };
+}
+/*** Describe an API reference whose registry definition is unavailable to the desired state. */
+function createMissingApiDiagnostic(workloadId: string, apiId: string) {
+  return {
+    severity: 'error' as const,
+    code: 'infra-workload-api-missing',
+    message: `Workload "${workloadId}" references API "${apiId}", but it is not declared in manifest.apis.`,
+  };
+}
+/*** Describe an external API incorrectly claimed as a workload-served API. */
+function createExternalApiDiagnostic(workloadId: string, apiId: string) {
+  return {
+    severity: 'error' as const,
+    code: 'infra-workload-api-external',
+    message: `Workload "${workloadId}" references external API "${apiId}"; only internal APIs may be served by workloads.`,
+  };
+}
+/*** Describe the conflicting second workload for one internal API. */
+function createDuplicateApiDiagnostic(
+  apiId: string,
+  assignedWorkloadId: string,
+  workloadId: string,
+) {
+  return {
+    severity: 'error' as const,
+    code: 'infra-workload-api-duplicate',
+    message: `Internal API "${apiId}" is assigned to both workloads "${assignedWorkloadId}" and "${workloadId}".`,
+  };
+}

package/src/hetznerK3sProduction.test.ts CHANGED Viewed

@@ -15,7 +15,7 @@ import {
   type HetznerProjectIdentity,
   type HetznerResourceId,
   infraAdapterDescriptor as hetznerInfraAdapterDescriptor,
-} from '@ankhorage/hetzner';
+} from '@ankhorage/infra-hetzner';
 import {
   createInfraAdapter as createK3sInfraAdapter,
   infraAdapterDescriptor as k3sInfraAdapterDescriptor,
@@ -23,13 +23,13 @@ import {
   type K3sClusterSpec,
   type K3sControlPlane,
   type K3sNodeAccess,
-} from '@ankhorage/k3s';
+} from '@ankhorage/infra-k3s';
 import {
   createInfraAdapter as createSupabaseInfraAdapter,
   infraAdapterDescriptor as supabaseInfraAdapterDescriptor,
   type SupabaseControlPlane,
   type SupabaseControlPlaneRequest,
-} from '@ankhorage/supabase';
+} from '@ankhorage/infra-supabase';
 import { expect, test } from 'bun:test';
 import { destroyInfraEnvironmentAsync } from './features/environment-lifecycle/application/use-cases/destroyInfraEnvironmentAsync.js';

package/src/hetznerK3sSupabaseR2.test.ts CHANGED Viewed

@@ -13,7 +13,7 @@ import {
   type HetznerProjectIdentity,
   type HetznerResourceId,
   infraAdapterDescriptor as hetznerInfraAdapterDescriptor,
-} from '@ankhorage/hetzner';
+} from '@ankhorage/infra-hetzner';
 import {
   createInfraAdapter as createK3sInfraAdapter,
   infraAdapterDescriptor as k3sInfraAdapterDescriptor,
@@ -21,20 +21,20 @@ import {
   type K3sClusterSpec,
   type K3sControlPlane,
   type K3sNodeAccess,
-} from '@ankhorage/k3s';
+} from '@ankhorage/infra-k3s';
 import {
   createInfraAdapter as createR2InfraAdapter,
   infraAdapterDescriptor as r2InfraAdapterDescriptor,
   type R2BucketControlPlane,
   type R2BucketObservation,
   type R2CloudRequest,
-} from '@ankhorage/r2';
+} from '@ankhorage/infra-r2';
 import {
   createInfraAdapter as createSupabaseInfraAdapter,
   infraAdapterDescriptor as supabaseInfraAdapterDescriptor,
   type SupabaseControlPlane,
   type SupabaseControlPlaneRequest,
-} from '@ankhorage/supabase';
+} from '@ankhorage/infra-supabase';
 import { expect, test } from 'bun:test';
 import { planInfraEnvironmentAsync } from './features/environment-lifecycle/application/use-cases/planInfraEnvironmentAsync.js';
@@ -57,7 +57,11 @@ const manifest = {
       },
       database: { provider: 'supabase', tier: 'prod' },
       auth: { provider: 'supabase' },
-      objectStorage: { provider: 'r2', accountId: r2AccountId, buckets: [r2Bucket] },
+      objectStorage: {
+        provider: 'r2',
+        accountId: r2AccountId,
+        buckets: { [r2Bucket]: true },
+      },
       networking: {
         domain,
         publicBaseUrl,

package/src/index.test.ts CHANGED Viewed

@@ -16,6 +16,7 @@ describe('@ankhorage/infra', () => {
       'planInfraEnvironmentAsync',
       'resolveInfraAdaptersAsync',
       'resolveInfraEnvironment',
+      'resolveInfraWorkloadApiComposition',
       'statusInfraEnvironmentAsync',
       'upInfraEnvironmentAsync',
       'validateInfraEnvironmentAsync',

package/src/index.ts CHANGED Viewed

@@ -16,6 +16,7 @@ export { upInfraEnvironmentAsync } from './features/environment-lifecycle/applic
 export { validateInfraEnvironmentAsync } from './features/environment-lifecycle/application/use-cases/validateInfraEnvironmentAsync.js';
 export { orderInfraPlanActions } from './features/environment-lifecycle/domain/orderInfraPlanActions.js';
 export { resolveInfraEnvironment } from './features/environment-lifecycle/domain/resolveInfraEnvironment.js';
+export { resolveInfraWorkloadApiComposition } from './features/environment-lifecycle/domain/resolveInfraWorkloadApiComposition.js';
 export type {
   InfraDestroyOperationRequest,
   InfraDestroyOperationResult,
@@ -40,3 +41,4 @@ export type {
   ResolvedInfraAdapters,
   ResolvedInfraEnvironment,
 } from './types/infraOrchestration.js';
+export type { InfraWorkloadApiAssignment } from './types/infraWorkloadApiComposition.js';

package/src/infraOperations.test.ts CHANGED Viewed

@@ -60,6 +60,33 @@ describe('provider-neutral lifecycle operations', () => {
     expect(calls.some((call) => call.endsWith('.destroy'))).toBe(false);
   });
+  it('refuses an undeclared workload API before provider inspection or planning', async () => {
+    const calls: string[] = [];
+    const invalidManifest = {
+      ...manifest,
+      environments: {
+        local: {
+          ...desired,
+          workloads: {
+            api: { ...workload('api'), apis: { apiIds: { missing: true } } },
+          },
+        },
+      },
+    };
+    const result = await planInfraEnvironmentAsync(
+      { projectId: 'sample', manifest: invalidManifest },
+      createDependencies(calls),
+    );
+    expect(result).toMatchObject({
+      ok: false,
+      diagnostics: [{ code: 'infra-workload-api-missing' }],
+    });
+    expect(calls).not.toContain('local.inspect');
+    expect(calls.some((call) => call.endsWith('.plan'))).toBe(false);
+  });
   it('plans fresh remote compute and a deferred runtime without inventing an SSH target', async () => {
     const calls: string[] = [];
     const remoteManifest = {

package/src/infraUp.test.ts CHANGED Viewed

@@ -39,11 +39,11 @@ describe('environment up orchestration', () => {
       'local.validate',
       'supabase.validate',
       'cerbos.validate',
+      'supabase.workloads',
+      'cerbos.workloads',
       'local.ensure',
       'supabase.prepare',
       'cerbos.prepare',
-      'supabase.workloads',
-      'cerbos.workloads',
       'docker-compose.validate',
       'docker-compose.ensure',
       'supabase.reconcile',
@@ -83,7 +83,36 @@ describe('environment up orchestration', () => {
     expect(calls).toEqual(['local.validate', 'supabase.validate']);
   });
-  it('stops before workload materialization when service preparation fails', async () => {
+  it('stops before mutation when workload API composition is invalid', async () => {
+    const calls: string[] = [];
+    const invalidManifest = {
+      ...manifest,
+      environments: {
+        local: {
+          ...environment,
+          workloads: {
+            api: {
+              ...workload('api'),
+              apis: { apiIds: { missing: true } },
+            },
+          },
+        },
+      },
+    };
+    const result = await upInfraEnvironmentAsync(
+      { projectId: 'sample', manifest: invalidManifest },
+      createDependencies(calls, [], []),
+    );
+    expect(result).toMatchObject({
+      ok: false,
+      diagnostics: [{ code: 'infra-workload-api-missing' }],
+    });
+    expect(calls.some((call) => call.endsWith('.ensure'))).toBe(false);
+    expect(calls.some((call) => call.endsWith('.prepare'))).toBe(false);
+  });
+  it('stops before runtime reconciliation when service preparation fails', async () => {
     const calls: string[] = [];
     const dependencies = createDependencies(calls, [], [], 'supabase.prepare');
     const result = await upInfraEnvironmentAsync({ projectId: 'sample', manifest }, dependencies);
@@ -97,10 +126,12 @@ describe('environment up orchestration', () => {
       'local.validate',
       'supabase.validate',
       'cerbos.validate',
+      'supabase.workloads',
+      'cerbos.workloads',
       'local.ensure',
       'supabase.prepare',
     ]);
-    expect(calls).not.toContain('supabase.workloads');
+    expect(calls).not.toContain('docker-compose.validate');
     expect(calls).not.toContain('docker-compose.ensure');
   });

package/src/localK3sSupabase.test.ts CHANGED Viewed

@@ -16,19 +16,19 @@ import {
   type K3sClusterSpec,
   type K3sControlPlane,
   type K3sNodeAccess,
-} from '@ankhorage/k3s';
+} from '@ankhorage/infra-k3s';
 import {
   createInfraAdapter as createLocalInfraAdapter,
   infraAdapterDescriptor as localInfraAdapterDescriptor,
   type LocalHostObservation,
   type LocalHostProbe,
-} from '@ankhorage/local';
+} from '@ankhorage/infra-local';
 import {
   createInfraAdapter as createSupabaseInfraAdapter,
   infraAdapterDescriptor as supabaseInfraAdapterDescriptor,
   type SupabaseControlPlane,
   type SupabaseControlPlaneRequest,
-} from '@ankhorage/supabase';
+} from '@ankhorage/infra-supabase';
 import { expect, test } from 'bun:test';
 import { destroyInfraEnvironmentAsync } from './features/environment-lifecycle/application/use-cases/destroyInfraEnvironmentAsync.js';

package/src/productionServerRuntimeEnvironment.integration.test.ts CHANGED Viewed

@@ -7,7 +7,7 @@ import type {
   InfraResourceStatus,
   InfraResult,
 } from '@ankhorage/contracts/infra';
-import { infraAdapterDescriptor as hetznerInfraAdapterDescriptor } from '@ankhorage/hetzner';
+import { infraAdapterDescriptor as hetznerInfraAdapterDescriptor } from '@ankhorage/infra-hetzner';
 import {
   createInfraAdapter as createK3sInfraAdapter,
   infraAdapterDescriptor as k3sInfraAdapterDescriptor,
@@ -15,7 +15,7 @@ import {
   type K3sClusterSpec,
   type K3sControlPlane,
   type K3sNodeAccess,
-} from '@ankhorage/k3s';
+} from '@ankhorage/infra-k3s';
 import { expect, test } from 'bun:test';
 import { type InfraOrchestrationDependencies, upInfraEnvironmentAsync } from './index.js';

package/src/resolveInfraWorkloadApiComposition.test.ts ADDED Viewed

@@ -0,0 +1,87 @@
+import type { InfraManifest, InfraWorkloadSpec } from '@ankhorage/contracts/infra';
+import { describe, expect, it } from 'bun:test';
+import { resolveInfraWorkloadApiComposition } from './features/environment-lifecycle/domain/resolveInfraWorkloadApiComposition.js';
+const environment = {
+  deployment: { compute: { provider: 'local' }, runtime: { provider: 'docker-compose' } },
+} as const;
+describe('resolveInfraWorkloadApiComposition', () => {
+  it('assigns every declared internal API to its single workload', () => {
+    const result = resolveInfraWorkloadApiComposition(manifest(), [workload('api', ['projects'])]);
+    expect(result).toEqual({
+      ok: true,
+      value: [{ apiId: 'projects', workloadId: 'api' }],
+      diagnostics: [],
+    });
+  });
+  it('fails closed for missing API declarations and external API targets', () => {
+    const result = resolveInfraWorkloadApiComposition(manifest(), [
+      workload('api', ['missing', 'third-party']),
+    ]);
+    expect(result).toMatchObject({
+      ok: false,
+      diagnostics: [
+        { code: 'infra-workload-api-missing' },
+        { code: 'infra-workload-api-external' },
+      ],
+    });
+  });
+  it('fails closed when multiple workloads claim one internal API', () => {
+    const result = resolveInfraWorkloadApiComposition(manifest(), [
+      workload('api-a', ['projects']),
+      workload('api-b', ['projects']),
+    ]);
+    expect(result).toMatchObject({
+      ok: false,
+      diagnostics: [{ code: 'infra-workload-api-duplicate' }],
+    });
+  });
+  it('fails closed when a workload references APIs without an API registry', () => {
+    const { apis: _apis, ...withoutApis } = manifest();
+    const result = resolveInfraWorkloadApiComposition(withoutApis, [workload('api', ['projects'])]);
+    expect(result).toMatchObject({
+      ok: false,
+      diagnostics: [{ code: 'infra-workload-api-missing' }],
+    });
+  });
+});
+function manifest(): InfraManifest {
+  return {
+    environments: { local: environment },
+    apis: {
+      projects: {
+        id: 'projects',
+        origin: 'internal',
+        protocol: 'rest',
+        basePath: '/projects',
+        endpoints: {},
+      },
+      'third-party': {
+        id: 'third-party',
+        origin: 'external',
+        protocol: 'rest',
+        baseUrl: 'https://third-party.example.test',
+        endpoints: {},
+      },
+    },
+    modules: {},
+  };
+}
+function workload(id: string, apiIds: readonly string[]): InfraWorkloadSpec {
+  return {
+    id,
+    artifact: { kind: 'image', image: `example/${id}:1` },
+    apis: { apiIds: Object.fromEntries(apiIds.map((apiId) => [apiId, true])) },
+  };
+}

package/src/types/infraWorkloadApiComposition.ts ADDED Viewed

@@ -0,0 +1,5 @@
+/** One internal API assigned to the workload that serves it. */
+export interface InfraWorkloadApiAssignment {
+  readonly apiId: string;
+  readonly workloadId: string;
+}