feat(terraform): add --push-env flag for external container build scripts

External container projects (tmi-ux, tmi-tf-wh) need OCIR registry
info to push their images. Add --push-env flag that outputs eval-able
shell env vars (OCIR_REGISTRY, OCIR_NAMESPACE, TMI_UX_IMAGE_URL, etc.)

Usage from external projects:
  eval $(path/to/tmi/scripts/deploy-oci.sh --push-env)
  # or
  eval $(make -C path/to/tmi push-oci-env)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: ericfitz

Makefile

@@ -1160,7 +1160,7 @@ tf-destroy:  ## Destroy Terraform infrastructure (DESTRUCTIVE!)
 	@cd $(TF_DIR) && terraform destroy
 
 # OCI-specific deployment shortcuts
-.PHONY: deploy-oci deploy-oci-plan deploy-oci-skip-build destroy-oci push-oci-info
+.PHONY: deploy-oci deploy-oci-plan deploy-oci-skip-build destroy-oci push-oci-info push-oci-env
 
 deploy-oci:  ## Deploy TMI to OCI (two-phase: infra, build containers, then K8s resources)
 	@scripts/deploy-oci.sh $(if $(AUTO_APPROVE),--auto-approve,)
@@ -1177,6 +1177,9 @@ destroy-oci:  ## Destroy TMI OCI infrastructure (DESTRUCTIVE!)
 push-oci-info:  ## Show OCIR push instructions for external containers (tmi-ux, tmi-tf-wh)
 	@scripts/deploy-oci.sh --push-info
 
+push-oci-env:  ## Output OCIR registry info as env vars (use: eval $$(make push-oci-env))
+	@scripts/deploy-oci.sh --push-env
+
 # ============================================================================
 # PROMTAIL CONTAINER MANAGEMENT
 # ============================================================================
@@ -1683,6 +1686,7 @@ help:
 	@echo "  deploy-oci-skip-build        - Deploy TMI to OCI without rebuilding containers"
 	@echo "  destroy-oci                  - Destroy TMI OCI infrastructure"
 	@echo "  push-oci-info                - Show OCIR push info for external containers"
+	@echo "  push-oci-env                 - Output OCIR registry env vars (eval-able)"
 	@echo ""
 	@echo "SBOM Generation (Software Bill of Materials):"
 	@echo "  generate-sbom                - Generate SBOM for Go application (cyclonedx-gomod)"

scripts/deploy-oci.sh

@@ -20,6 +20,7 @@
 #   --auto-approve       Skip terraform apply confirmation
 #   --skip-build         Skip container build+push (use existing images in OCIR)
 #   --push-info          Print OCIR push instructions for external containers and exit
+#   --push-env           Output OCIR registry info as shell env vars (eval-able)
 #   --help               Show this help message
 #
 # Examples:
@@ -60,6 +61,7 @@ DRY_RUN=false
 AUTO_APPROVE=false
 SKIP_BUILD=false
 PUSH_INFO=false
+PUSH_ENV=false
 
 # Parse arguments
 while [[ $# -gt 0 ]]; do
@@ -96,8 +98,12 @@ while [[ $# -gt 0 ]]; do
             PUSH_INFO=true
             shift
             ;;
+        --push-env)
+            PUSH_ENV=true
+            shift
+            ;;
         --help)
-            head -34 "$0" | tail -32
+            head -35 "$0" | tail -33
             exit 0
             ;;
         *)
@@ -330,9 +336,38 @@ print_external_container_info() {
         log_info "OCIR login (if not already authenticated):"
         echo -e "  docker login ${registry} -u ${namespace}/<your-oci-username>"
         echo -e "  (Use an OCI Auth Token as password — create at OCI Console > User Settings > Auth Tokens)"
+        echo ""
+        log_info "Or use eval to set env vars for external build scripts:"
+        echo -e "  eval \$(scripts/deploy-oci.sh --push-env)"
     fi
 }
 
+# ---------------------------------------------------------------------------
+# Output OCIR registry info as shell env vars (machine-readable)
+# Usage from external projects: eval $(path/to/deploy-oci.sh --push-env)
+# ---------------------------------------------------------------------------
+print_push_env() {
+    local namespace
+    namespace=$(oci os ns get --query data --raw-output --profile "$OCI_PROFILE" 2>/dev/null || echo "")
+    local registry="${OCI_REGION}.ocir.io"
+    local name_prefix
+    name_prefix=$(grep '^name_prefix' "$TF_DIR/terraform.tfvars" 2>/dev/null \
+        | sed 's/.*= *"//;s/".*//' || echo "tmi")
+
+    # Common registry info
+    echo "export OCIR_REGISTRY=${registry}"
+    echo "export OCIR_NAMESPACE=${namespace}"
+    echo "export OCIR_REGION=${OCI_REGION}"
+    echo "export OCIR_BASE_URL=${registry}/${namespace}/${name_prefix}"
+    echo "export OCIR_PLATFORM=linux/arm64"
+
+    # Per-component image URLs
+    echo "export TMI_IMAGE_URL=${registry}/${namespace}/${name_prefix}/tmi:latest"
+    echo "export TMI_REDIS_IMAGE_URL=${registry}/${namespace}/${name_prefix}/tmi-redis:latest"
+    echo "export TMI_UX_IMAGE_URL=${registry}/${namespace}/${name_prefix}/tmi-ux:latest"
+    echo "export TMI_TF_WH_IMAGE_URL=${registry}/${namespace}/${name_prefix}/tmi-tf-wh:latest"
+}
+
 # ---------------------------------------------------------------------------
 # Delete orphaned OCI load balancers
 # ---------------------------------------------------------------------------
@@ -564,8 +599,8 @@ do_deploy() {
 # Main
 # ---------------------------------------------------------------------------
 
-# Handle --push-info without full preflight
-if $PUSH_INFO; then
+# Handle --push-info and --push-env without full preflight
+if $PUSH_INFO || $PUSH_ENV; then
     # Minimal setup: read profile/region from tfvars
     if [[ -z "$OCI_PROFILE" ]]; then
         OCI_PROFILE=$(grep '^oci_config_profile' "$TF_DIR/terraform.tfvars" 2>/dev/null \
@@ -575,7 +610,11 @@ if $PUSH_INFO; then
         OCI_REGION=$(grep '^region' "$TF_DIR/terraform.tfvars" 2>/dev/null \
             | sed 's/.*= *"//;s/".*//' || echo "us-ashburn-1")
     fi
-    print_external_container_info
+    if $PUSH_ENV; then
+        print_push_env
+    else
+        print_external_container_info
+    fi
     exit 0
 fi