@mandujs/core 0.46.2 → 0.48.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mandujs/core",
-  "version": "0.46.2",
+  "version": "0.48.0",
   "description": "Mandu Framework Core - Spec, Generator, Guard, Runtime",
   "type": "module",
   "main": "./src/index.ts",

package/src/deploy/compile/vercel.ts

@@ -0,0 +1,344 @@
+/**
+ * Vercel compiler — manifest + DeployIntent cache → `vercel.json`.
+ *
+ * Issue #250 — Phase 1 M3.
+ *
+ * The compiler is the new identity of the Vercel adapter. The old
+ * adapter was a config scaffolder that emitted the same hand-writable
+ * `vercel.json` regardless of project shape (Issue #250). With the
+ * intent cache in place, `compileVercelJson()` reads:
+ *
+ *   - the routes manifest (what routes exist and their kind)
+ *   - `.mandu/deploy.intent.json` (typed DeployIntent per route)
+ *
+ * and emits a `vercel.json` whose functions block, regions, headers,
+ * and rewrites are derived from the intents — no template variables,
+ * no copy-paste-and-edit. Adapters never invent defaults; missing
+ * intent for any route is a hard error so deploys can't drift
+ * silently into the wrong shape.
+ *
+ * # Runtime mapping
+ *
+ *   - `static` → no function entry. The route prerenders at build
+ *     time and ships from the CDN.
+ *   - `edge`   → `runtime: "edge"` on the function entry.
+ *   - `node`   → omit `runtime` so Vercel uses its built-in Node
+ *     runtime. (Note: current Mandu `startServer` is Bun-only, so
+ *     a `node` intent on Vercel is flagged as not-yet-supported in
+ *     `compileWarnings`. The compile still succeeds — the user can
+ *     opt out by changing the intent.)
+ *   - `bun`    → `runtime: "@vercel/bun@1.0.0"`. Issue #248 noted
+ *     that the package is unpublished today; the compiler emits
+ *     the field anyway and surfaces a warning. Once the runtime
+ *     ships, no compiler change is required.
+ *
+ * # Cache mapping
+ *
+ *   - `"no-store"` → `Cache-Control: no-store`
+ *   - `"public"`   → `Cache-Control: public`
+ *   - `{ maxAge, sMaxAge, swr }` → `public, max-age=...,
+ *     s-maxage=..., stale-while-revalidate=...` (only the keys
+ *     present are written).
+ *
+ * Per-route headers go in `vercel.json#headers` keyed off the route
+ * pattern (with `:param` segments mapped to `:param`).
+ *
+ * # Provider-specific overrides
+ *
+ * `intent.overrides.vercel` is shallow-merged onto the function entry,
+ * so things like `memory` / `maxDuration` / regions overrides work
+ * without growing the core schema.
+ *
+ * # Schema portability gates
+ *
+ * `runtime: "static"` on a dynamic page without `generateStaticParams`
+ * is rejected via `isStaticIntentValidFor`. Issue #250 RFC marks this
+ * as the canonical "schema portability" failure mode adapters must
+ * surface clearly — we list the offending routes in the error.
+ */
+
+import type { RouteSpec, RoutesManifest } from "../../spec/schema";
+import {
+  isStaticIntentValidFor,
+  type DeployIntent,
+  type DeployRuntime,
+} from "../intent";
+import type { DeployIntentCache } from "../cache";
+
+// ─── Vercel config shape ──────────────────────────────────────────────
+
+export interface VercelHeader {
+  source: string;
+  headers: Array<{ key: string; value: string }>;
+}
+
+export interface VercelFunctionConfig {
+  /** Vercel runtime spec; omit for built-in Node. */
+  runtime?: string;
+  /** Per-function regions (provider-specific identifiers). */
+  regions?: string[];
+  /** Function timeout in seconds (Vercel field name). */
+  maxDuration?: number;
+  /** Memory in MB. */
+  memory?: number;
+  /** Anything else from `intent.overrides.vercel`. */
+  [key: string]: unknown;
+}
+
+export interface VercelConfig {
+  $schema: string;
+  version: 2;
+  framework: null;
+  buildCommand: string;
+  installCommand: string;
+  outputDirectory: string;
+  functions?: Record<string, VercelFunctionConfig>;
+  headers?: VercelHeader[];
+  rewrites?: Array<{ source: string; destination: string }>;
+}
+
+// ─── Public surface ───────────────────────────────────────────────────
+
+export interface CompileVercelOptions {
+  /** Project name (Mandu-side bookkeeping; not emitted into vercel.json). */
+  projectName: string;
+  /** Build command. Defaults to `bun run mandu build --static` (static-only). */
+  buildCommand?: string;
+  /** Install command. */
+  installCommand?: string;
+  /** Output directory. Defaults to `dist`. */
+  outputDirectory?: string;
+}
+
+export interface VercelCompileResult {
+  config: VercelConfig;
+  /**
+   * Non-fatal warnings the CLI surfaces to the user. Examples: the
+   * `node` / `bun` intent was emitted but the corresponding Vercel
+   * runtime is not yet usable for Mandu (see #248).
+   */
+  warnings: string[];
+  /**
+   * Per-route summary the CLI prints in `mandu deploy --target=vercel`
+   * dry-run, so the operator can confirm the intent → vercel.json
+   * mapping at a glance before pushing.
+   */
+  perRoute: Array<{
+    routeId: string;
+    pattern: string;
+    runtime: DeployRuntime;
+    functionEntry: string | null;
+    cacheHeader: string | null;
+  }>;
+}
+
+export class VercelCompileError extends Error {
+  readonly code = "DEPLOY_VERCEL_COMPILE_FAILED";
+  readonly routes: ReadonlyArray<{ routeId: string; reason: string }>;
+
+  constructor(
+    routes: ReadonlyArray<{ routeId: string; reason: string }>,
+  ) {
+    super(
+      `Vercel compile failed:\n${routes.map((r) => `  - ${r.routeId}: ${r.reason}`).join("\n")}`,
+    );
+    this.routes = routes;
+    this.name = "VercelCompileError";
+  }
+}
+
+/**
+ * Compile a manifest + intent cache into a `vercel.json`.
+ *
+ * Throws `VercelCompileError` when one or more routes have intents
+ * the adapter cannot represent (missing entry, invalid `static`
+ * declaration, etc). Non-fatal issues are returned in `warnings`.
+ */
+export function compileVercelJson(
+  manifest: RoutesManifest,
+  cache: DeployIntentCache,
+  options: CompileVercelOptions,
+): VercelCompileResult {
+  validateProjectName(options.projectName);
+
+  const warnings: string[] = [];
+  const errors: Array<{ routeId: string; reason: string }> = [];
+  const functions: Record<string, VercelFunctionConfig> = {};
+  const headers: VercelHeader[] = [];
+  const perRoute: VercelCompileResult["perRoute"] = [];
+
+  // Long-cache directive for hashed bundles is the same in every
+  // Mandu deploy — ship it unconditionally.
+  headers.push({
+    source: "/.mandu/client/(.*)",
+    headers: [
+      { key: "Cache-Control", value: "public, max-age=31536000, immutable" },
+    ],
+  });
+
+  for (const route of manifest.routes) {
+    const entry = cache.intents[route.id];
+    if (!entry) {
+      errors.push({
+        routeId: route.id,
+        reason: "no DeployIntent in .mandu/deploy.intent.json — run `mandu deploy:plan` first",
+      });
+      continue;
+    }
+    const { intent } = entry;
+
+    // Schema portability gate: `runtime: "static"` on a route that
+    // can't actually be prerendered.
+    const isDynamic = isPatternDynamic(route.pattern);
+    const hasGenerateStaticParams =
+      route.kind === "page" &&
+      Array.isArray((route as { staticParams?: unknown[] }).staticParams) &&
+      ((route as { staticParams?: unknown[] }).staticParams?.length ?? 0) > 0;
+    const validation = isStaticIntentValidFor(intent, {
+      isDynamic,
+      hasGenerateStaticParams,
+      kind: route.kind,
+    });
+    if (!validation.ok) {
+      errors.push({ routeId: route.id, reason: validation.reason });
+      continue;
+    }
+
+    // Per-route header (built from the intent cache directive).
+    const cacheHeader = formatCacheControl(intent.cache);
+    if (cacheHeader && intent.runtime === "static") {
+      headers.push({
+        source: route.pattern,
+        headers: [{ key: "Cache-Control", value: cacheHeader }],
+      });
+    }
+
+    // Function entry (skipped for static).
+    let functionEntry: string | null = null;
+    if (intent.runtime !== "static") {
+      functionEntry = mapRouteToFunctionEntry(route);
+      const fn: VercelFunctionConfig = {};
+
+      if (intent.runtime === "edge") {
+        fn.runtime = "edge";
+      } else if (intent.runtime === "bun") {
+        fn.runtime = "@vercel/bun@1.0.0";
+        warnings.push(
+          `${route.id}: runtime: "bun" emits @vercel/bun@1.0.0 in vercel.json, but the package is not published yet (Issue #248). Deploy will fail until @vercel/bun ships or the intent changes.`,
+        );
+      } else {
+        // node — leave runtime unset so Vercel picks its built-in
+        // Node runtime, but warn that Mandu's startServer is Bun-only.
+        warnings.push(
+          `${route.id}: runtime: "node" — Vercel will run this on its built-in Node runtime, but Mandu's startServer uses Bun-only globals. Switch to runtime: "edge" / "bun", or self-host this route.`,
+        );
+      }
+
+      if (intent.regions && intent.regions.length > 0) fn.regions = intent.regions;
+      if (intent.timeout !== undefined) {
+        // Vercel `maxDuration` is in seconds; intent.timeout is in ms.
+        fn.maxDuration = Math.max(1, Math.ceil(intent.timeout / 1000));
+      }
+
+      // Provider-specific overrides — last write wins.
+      const overrides = (intent.overrides?.vercel ?? {}) as Record<string, unknown>;
+      for (const [k, v] of Object.entries(overrides)) {
+        fn[k] = v;
+      }
+
+      // `node` intent leaves `runtime` undefined intentionally — only
+      // strip the key when it never got set.
+      if (fn.runtime === undefined) delete fn.runtime;
+
+      functions[functionEntry] = fn;
+
+      if (cacheHeader) {
+        headers.push({
+          source: route.pattern,
+          headers: [{ key: "Cache-Control", value: cacheHeader }],
+        });
+      }
+    }
+
+    // Visibility on Vercel is owned by Project Settings (preview
+    // protection / IP allowlist). Surface a hint when the user
+    // declared `private` so they know to wire it up out of band.
+    if (intent.visibility === "private") {
+      warnings.push(
+        `${route.id}: visibility: "private" — Vercel routes default to public. Configure preview protection / IP allowlist in Project Settings.`,
+      );
+    }
+
+    perRoute.push({
+      routeId: route.id,
+      pattern: route.pattern,
+      runtime: intent.runtime,
+      functionEntry,
+      cacheHeader,
+    });
+  }
+
+  if (errors.length > 0) {
+    throw new VercelCompileError(errors);
+  }
+
+  const config: VercelConfig = {
+    $schema: "https://openapi.vercel.sh/vercel.json",
+    version: 2,
+    framework: null,
+    buildCommand: options.buildCommand ?? "bun run mandu build --static",
+    installCommand: options.installCommand ?? "bun install --frozen-lockfile",
+    outputDirectory: options.outputDirectory ?? "dist",
+    headers,
+  };
+  if (Object.keys(functions).length > 0) {
+    config.functions = functions;
+  }
+
+  return { config, warnings, perRoute };
+}
+
+/** Stable JSON output — trailing newline so editors don't fight us. */
+export function renderVercelJsonFromCompile(result: VercelCompileResult): string {
+  return `${JSON.stringify(result.config, null, 2)}\n`;
+}
+
+// ─── Internals ────────────────────────────────────────────────────────
+
+function validateProjectName(name: string): void {
+  if (!/^[a-z0-9][a-z0-9-_]{0,99}$/i.test(name)) {
+    throw new Error(`compileVercelJson: projectName "${name}" is invalid`);
+  }
+}
+
+/**
+ * Map a route's manifest entry to the vercel.json `functions[*]` key.
+ *
+ * Vercel keys functions by their on-disk path relative to the project
+ * root (e.g., `api/embed.ts`). Mandu's manifest stores `module` in the
+ * same shape, so we use that directly. For page routes the
+ * `componentModule` is the canonical SSR entry.
+ */
+function mapRouteToFunctionEntry(route: RouteSpec): string {
+  const entry =
+    (route as { componentModule?: string }).componentModule ?? route.module;
+  return entry.replace(/^\.?\//, "");
+}
+
+function formatCacheControl(cache: DeployIntent["cache"]): string | null {
+  if (cache === "no-store") return "no-store";
+  if (cache === "public") return "public";
+  const bits: string[] = ["public"];
+  if (cache.maxAge !== undefined) bits.push(`max-age=${cache.maxAge}`);
+  if (cache.sMaxAge !== undefined) bits.push(`s-maxage=${cache.sMaxAge}`);
+  if (cache.swr !== undefined) bits.push(`stale-while-revalidate=${cache.swr}`);
+  return bits.length > 1 ? bits.join(", ") : null;
+}
+
+function isPatternDynamic(pattern: string): boolean {
+  return (
+    /\[(\.\.\.)?[^\]]+\]/.test(pattern) ||
+    /\/:[^/]+/.test(pattern) ||
+    /\*/.test(pattern)
+  );
+}

package/src/deploy/index.ts

@@ -52,6 +52,11 @@ export {
   type InferenceResult,
 } from "./inference/heuristic";
 
+export {
+  inferDeployIntentWithBrain,
+  type BrainInferenceOptions,
+} from "./inference/brain";
+
 export {
   planDeploy,
   planHasChanges,
@@ -60,3 +65,14 @@ export {
   type PlanDiffEntryKind,
   type PlanResult,
 } from "./plan";
+
+export {
+  compileVercelJson,
+  renderVercelJsonFromCompile,
+  VercelCompileError,
+  type CompileVercelOptions,
+  type VercelCompileResult,
+  type VercelConfig,
+  type VercelFunctionConfig,
+  type VercelHeader,
+} from "./compile/vercel";

package/src/deploy/inference/brain.ts

@@ -0,0 +1,268 @@
+/**
+ * Brain-based deploy intent inferer.
+ *
+ * Issue #250 — Phase 1 M4.
+ *
+ * The brain inferer is **not** a replacement for the heuristic — it
+ * runs AFTER the heuristic and decides whether to confirm or refine
+ * the first-pass result. Three reasons for the wrap-not-replace shape:
+ *
+ *   1. **Cost cap.** The heuristic answers ~80% of routes correctly
+ *      and pays nothing. Brain only weighs in on the rest.
+ *   2. **Determinism floor.** When the brain is offline, fails to
+ *      authenticate, returns malformed JSON, or its output fails Zod
+ *      validation, the heuristic result stands. The pipeline never
+ *      blocks on the brain.
+ *   3. **Auditability.** Every intent the cache stores carries a
+ *      `rationale` string. Wrapping lets the brain rationale read
+ *      "agreed with heuristic: ..." or "overridden because ..." —
+ *      reviewers can see the reasoning in the diff.
+ *
+ * Failure modes (all fall back to heuristic):
+ *
+ *   - LLM call throws (network, auth, rate limit) → heuristic.
+ *   - LLM returns empty / non-JSON content → heuristic.
+ *   - LLM returns JSON that doesn't satisfy `DeployIntent` Zod → heuristic.
+ *   - LLM returns valid intent but `runtime: "static"` on a route
+ *     the manifest knows can't prerender → heuristic (caught by
+ *     `isStaticIntentValidFor`).
+ *
+ * The fallback is silent on `failOnError: false` (default — agents
+ * should still get a useful plan even with brain hiccups). Tests can
+ * pass `failOnError: true` to surface every brain miss.
+ */
+
+import { z } from "zod";
+import {
+  DeployIntent,
+  isStaticIntentValidFor,
+  type DeployIntent as DeployIntentType,
+} from "../intent";
+import type { LLMAdapter } from "../../brain/adapters/base";
+import type { DeployInferenceContext } from "./context";
+import { inferDeployIntentHeuristic, type InferenceResult } from "./heuristic";
+
+// ─── Public surface ───────────────────────────────────────────────────
+
+export interface BrainInferenceOptions {
+  /**
+   * The LLM adapter to call. Get one from
+   * `resolveBrainAdapter({ adapter: "auto" })`.
+   */
+  adapter: LLMAdapter;
+  /**
+   * Hard-fail on any brain error instead of falling back to the
+   * heuristic. Tests use this; production leaves it false.
+   */
+  failOnError?: boolean;
+  /**
+   * Timeout in ms for the LLM call. Defaults to 15s — deploy:plan is
+   * usually run interactively, agents prefer quick failure over long
+   * waits when the network is bad.
+   */
+  timeoutMs?: number;
+  /**
+   * Maximum source bytes sent to the brain. Anything beyond this is
+   * truncated with a `[…truncated]` marker. Default 4096 — enough for
+   * a route handler, well under any cloud token cap.
+   */
+  maxSourceBytes?: number;
+}
+
+/**
+ * Build the brain-based inferer. The returned function has the same
+ * signature `planDeploy({ infer })` expects, so it plugs in without
+ * any changes to the plan engine.
+ */
+export function inferDeployIntentWithBrain(
+  options: BrainInferenceOptions,
+): (ctx: DeployInferenceContext) => Promise<InferenceResult> {
+  return async (ctx) => {
+    const heuristic = inferDeployIntentHeuristic(ctx);
+    try {
+      const refined = await callBrain(ctx, heuristic, options);
+      if (!refined) return heuristic;
+
+      // Re-validate the brain's intent against the route shape — the
+      // brain is good at semantics but may miss the "static requires
+      // generateStaticParams" rule.
+      const validation = isStaticIntentValidFor(refined.intent, {
+        isDynamic: ctx.isDynamic,
+        hasGenerateStaticParams: ctx.hasGenerateStaticParams,
+        kind: ctx.kind,
+      });
+      if (!validation.ok) {
+        return {
+          intent: heuristic.intent,
+          rationale: `${heuristic.rationale} (brain proposed ${refined.intent.runtime} but it conflicts with route shape: ${validation.reason})`,
+        };
+      }
+
+      return refined;
+    } catch (err) {
+      if (options.failOnError) throw err;
+      return {
+        intent: heuristic.intent,
+        rationale: `${heuristic.rationale} (brain unavailable: ${err instanceof Error ? err.message : String(err)})`,
+      };
+    }
+  };
+}
+
+// ─── Internals ────────────────────────────────────────────────────────
+
+/** Schema for the brain's JSON response — slightly looser than DeployIntent
+ *  so we can validate field-by-field with helpful errors. */
+const BrainInferenceResponse = z
+  .object({
+    runtime: z.enum(["static", "edge", "node", "bun"]),
+    cache: z.union([
+      z.literal("no-store"),
+      z.literal("public"),
+      z.object({
+        maxAge: z.number().int().nonnegative().optional(),
+        sMaxAge: z.number().int().nonnegative().optional(),
+        swr: z.number().int().nonnegative().optional(),
+      }),
+    ]).optional(),
+    regions: z.array(z.string().min(1)).optional(),
+    timeout: z.number().int().positive().optional(),
+    visibility: z.enum(["public", "private"]).optional(),
+    rationale: z.string().min(1),
+    /** Brain's confidence — used only for telemetry; not persisted. */
+    confidence: z.number().min(0).max(1).optional(),
+  })
+  .strict();
+
+async function callBrain(
+  ctx: DeployInferenceContext,
+  heuristic: InferenceResult,
+  options: BrainInferenceOptions,
+): Promise<InferenceResult | null> {
+  const timeout = options.timeoutMs ?? 15_000;
+  // maxBytes reserved for future source-passing; for now the prompt
+  // works off context metadata (imports, deps) without raw source.
+  void options.maxSourceBytes;
+
+  const prompt = buildPrompt(ctx, heuristic);
+
+  // Race the LLM call against a timeout.
+  const controller = new AbortController();
+  const tHandle = setTimeout(() => controller.abort(), timeout);
+  let raw: string;
+  try {
+    raw = await options.adapter.generate(prompt, {
+      // CompletionOptions doesn't formally include `signal` today; we
+      // pass it via the loose extras object so adapters that honour it
+      // get the cancel signal, while older ones gracefully ignore.
+      ...({ signal: controller.signal } as object),
+      temperature: 0.0,
+      maxTokens: 512,
+    });
+  } finally {
+    clearTimeout(tHandle);
+  }
+
+  const parsed = parseBrainResponse(raw);
+  if (!parsed) return null;
+
+  // Merge against heuristic defaults — brain doesn't have to repeat
+  // every field, only the ones it overrides.
+  const merged: DeployIntentType = DeployIntent.parse({
+    runtime: parsed.runtime,
+    cache: parsed.cache ?? heuristic.intent.cache,
+    regions: parsed.regions ?? heuristic.intent.regions,
+    timeout: parsed.timeout ?? heuristic.intent.timeout,
+    visibility: parsed.visibility ?? heuristic.intent.visibility,
+  });
+
+  const rationale =
+    parsed.runtime === heuristic.intent.runtime &&
+    sameCache(parsed.cache ?? heuristic.intent.cache, heuristic.intent.cache)
+      ? `agreed with heuristic: ${parsed.rationale}`
+      : `brain refined: ${parsed.rationale}`;
+
+  return { intent: merged, rationale };
+}
+
+function buildPrompt(
+  ctx: DeployInferenceContext,
+  heuristic: InferenceResult,
+): string {
+  const truncatedImports = ctx.imports.slice(0, 30).join(", ");
+  const dependencyClasses = [...ctx.dependencyClasses].join(", ");
+
+  return [
+    "You are an expert deploy engineer for the Mandu framework.",
+    "",
+    "TASK: Decide the deploy runtime + cache directive for one route.",
+    "Output strict JSON ONLY (no markdown fences, no commentary).",
+    "",
+    "SCHEMA:",
+    `{
+  "runtime": "static" | "edge" | "node" | "bun",
+  "cache": "no-store" | "public" | { "maxAge"?: number, "sMaxAge"?: number, "swr"?: number },
+  "regions": string[],
+  "timeout": number_in_ms,
+  "visibility": "public" | "private",
+  "rationale": "1-sentence explanation",
+  "confidence": 0..1
+}`,
+    "",
+    "RULES:",
+    "- runtime=static is only valid for prerenderable pages (no dynamic segments OR has generateStaticParams).",
+    "- API routes (kind=api) MUST use edge / node / bun, never static.",
+    "- Prefer edge for low-latency stateless work; node/bun for DB / native deps / long-latency calls.",
+    "- bun is required when the route imports `bun:*` modules.",
+    "- Default cache for API: no-store. Default for static pages: { sMaxAge: 31536000, swr: 86400 }.",
+    "- Override the heuristic only when there is CLEAR evidence in the source. Otherwise echo the heuristic.",
+    "",
+    `ROUTE: ${ctx.routeId} (${ctx.pattern})`,
+    `KIND: ${ctx.kind}`,
+    `DYNAMIC: ${ctx.isDynamic}`,
+    `HAS_GENERATE_STATIC_PARAMS: ${ctx.hasGenerateStaticParams}`,
+    `IMPORTS: ${truncatedImports || "(none)"}`,
+    `DEPENDENCY_CLASSES: ${dependencyClasses || "(none)"}`,
+    "",
+    "HEURISTIC FIRST-PASS:",
+    `- runtime: ${heuristic.intent.runtime}`,
+    `- cache: ${formatCacheForPrompt(heuristic.intent.cache)}`,
+    `- visibility: ${heuristic.intent.visibility}`,
+    `- rationale: ${heuristic.rationale}`,
+    "",
+    "RESPOND WITH JSON ONLY:",
+  ].join("\n");
+}
+
+function parseBrainResponse(raw: string): z.infer<typeof BrainInferenceResponse> | null {
+  if (!raw || raw.trim() === "") return null;
+  // The brain might wrap JSON in fences despite the rules — strip the
+  // most common wrappers before parsing.
+  const stripped = stripCodeFences(raw).trim();
+  let json: unknown;
+  try {
+    json = JSON.parse(stripped);
+  } catch {
+    return null;
+  }
+  const result = BrainInferenceResponse.safeParse(json);
+  if (!result.success) return null;
+  return result.data;
+}
+
+function stripCodeFences(s: string): string {
+  // ```json ... ``` or ``` ... ``` — capture the inner block.
+  const fenced = /^```(?:json)?\s*\n([\s\S]*?)\n```\s*$/m.exec(s.trim());
+  if (fenced) return fenced[1]!;
+  return s;
+}
+
+function formatCacheForPrompt(cache: DeployIntentType["cache"]): string {
+  if (cache === "no-store" || cache === "public") return cache;
+  return JSON.stringify(cache);
+}
+
+function sameCache(a: DeployIntentType["cache"], b: DeployIntentType["cache"]): boolean {
+  if (typeof a === "string" || typeof b === "string") return a === b;
+  return JSON.stringify(a) === JSON.stringify(b);
+}