feat(infra): add hackathon infrastructure provisioning

Terraform + mise hybrid setup for Vercel (API + Web), Supabase, Backblaze B2,
and Weaviate Cloud. TF manages services with official providers; bun scripts
handle WCD CRUD and env sync where no TF provider exists.

Generated with oh-my-agent

Co-Authored-By: First Fluke <our.first.fluke@gmail.com>

Author: gracefullight

apps/api/.env.example

@@ -35,3 +35,16 @@ GCS_BUCKET_NAME=
 MINIO_ENDPOINT=localhost:9000
 MINIO_ACCESS_KEY=minioadmin
 MINIO_SECRET_KEY=minioadmin
+
+# Supabase (optional)
+SUPABASE_URL=
+SUPABASE_ANON_KEY=
+
+# Weaviate (optional)
+WEAVIATE_URL=
+WEAVIATE_API_KEY=
+
+# Backblaze B2 (optional)
+B2_KEY_ID=
+B2_APPLICATION_KEY=
+B2_BUCKET_NAME=

apps/infra/hackathon/.gitignore

@@ -0,0 +1,15 @@
+# Terraform
+*.tfstate
+*.tfstate.backup
+.terraform/
+*.tfvars
+!terraform.tfvars.example
+
+# Weaviate state
+.weaviate-state.json
+
+# Scripts
+scripts/node_modules/
+
+# Secrets
+.env

apps/infra/hackathon/b2.tf

@@ -0,0 +1,10 @@
+resource "b2_bucket" "main" {
+  bucket_name = "${var.project_prefix}-storage"
+  bucket_type = "allPrivate"
+}
+
+resource "b2_application_key" "main" {
+  key_name     = "${var.project_prefix}-key"
+  bucket_id    = b2_bucket.main.bucket_id
+  capabilities = ["readFiles", "writeFiles", "listFiles", "deleteFiles"]
+}

apps/infra/hackathon/locals.tf

@@ -0,0 +1,14 @@
+locals {
+  supabase_url = "https://${supabase_project.main.id}.supabase.co"
+
+  api_env_vars = {
+    SUPABASE_URL       = local.supabase_url
+    B2_KEY_ID          = b2_application_key.main.application_key_id
+    B2_APPLICATION_KEY = b2_application_key.main.application_key
+    B2_BUCKET_NAME     = b2_bucket.main.bucket_name
+  }
+
+  web_env_vars = {
+    NEXT_PUBLIC_SUPABASE_URL = local.supabase_url
+  }
+}

apps/infra/hackathon/mise.toml

@@ -0,0 +1,27 @@
+[tasks]
+# Lifecycle
+[tasks.setup]
+description = "Provision everything"
+run = ["mise run apply", "mise run weaviate:up", "mise run env:sync"]
+
+[tasks.teardown]
+description = "Destroy everything"
+run = ["mise run weaviate:down", "mise run destroy"]
+
+# Terraform
+init = { run = "terraform init", description = "Initialize Terraform" }
+plan = { run = "terraform plan", description = "Plan infrastructure" }
+apply = { run = "terraform apply", description = "Apply infrastructure" }
+destroy = { run = "terraform destroy", description = "Destroy infrastructure" }
+fmt = { run = "terraform fmt -recursive", description = "Format Terraform" }
+validate = { run = "terraform validate", description = "Validate Terraform" }
+output = { run = "terraform output -json", description = "Show Terraform outputs" }
+
+# Weaviate Cloud
+"weaviate:up" = { run = "bun run scripts/weaviate.ts up", description = "Create WCD cluster" }
+"weaviate:down" = { run = "bun run scripts/weaviate.ts down", description = "Delete WCD cluster" }
+"weaviate:status" = { run = "bun run scripts/weaviate.ts status", description = "Check WCD cluster" }
+
+# Ops
+"env:sync" = { run = "bun run scripts/env-sync.ts", description = "Sync env vars to Vercel + .env.example" }
+status = { run = "bun run scripts/status.ts", description = "Check all provisioned resources" }

apps/infra/hackathon/outputs.tf

@@ -0,0 +1,35 @@
+output "vercel_api_project_id" {
+  value       = vercel_project.api.id
+  description = "Vercel API project ID"
+}
+
+output "vercel_web_project_id" {
+  value       = vercel_project.web.id
+  description = "Vercel Web project ID"
+}
+
+output "supabase_project_id" {
+  value       = supabase_project.main.id
+  description = "Supabase project ID"
+}
+
+output "supabase_url" {
+  value       = local.supabase_url
+  description = "Supabase project URL"
+}
+
+output "b2_bucket_name" {
+  value       = b2_bucket.main.bucket_name
+  description = "B2 bucket name"
+}
+
+output "b2_key_id" {
+  value       = b2_application_key.main.application_key_id
+  description = "B2 application key ID"
+}
+
+output "b2_app_key" {
+  value       = b2_application_key.main.application_key
+  sensitive   = true
+  description = "B2 application key"
+}

apps/infra/hackathon/provider.tf

@@ -0,0 +1,11 @@
+provider "vercel" {
+  # VERCEL_API_TOKEN env var
+}
+
+provider "supabase" {
+  # SUPABASE_ACCESS_TOKEN env var
+}
+
+provider "b2" {
+  # B2_APPLICATION_KEY_ID + B2_APPLICATION_KEY env vars
+}