@vibesdotdev/infra-cloudflare 0.0.1

package/dist/implementations/logs.impl.js

@@ -0,0 +1,154 @@
+/**
+ * Cloudflare Logs Implementation
+ *
+ * Implements the `infra/logs` kind for Cloudflare Workers.
+ * Provides programmatic log tailing, queries, and analytics.
+ */
+import { getVibesRuntime } from '@vibesdotdev/runtime';
+import { CloudflareLogsConnector } from '@vibesdotdev/connector-cloudflare';
+import { resolveCurrentEnvironmentConfig } from '@vibesdotdev/config/environment/current';
+import * as z from 'zod/v4';
+export const CloudflareLogsDescriptorSchema = z.object({
+    kind: z.literal('infra/logs'),
+    id: z.string().min(1),
+    name: z.string().min(1),
+    description: z.string().optional(),
+    adapter: z.literal('cloudflare-logs'),
+    adapterConfig: z.record(z.string(), z.unknown()).optional(),
+    // Support top-level for backward compat with old descriptors; prefer adapterConfig
+    accountId: z.union([
+        z.string().min(1),
+        z.object({ source: z.literal('secret'), key: z.string().min(1) }),
+        z.object({ source: z.literal('env'), key: z.string().min(1) })
+    ]).optional(),
+    apiToken: z.union([
+        z.object({ source: z.literal('env'), key: z.string().min(1) }),
+        z.object({ source: z.literal('secret'), key: z.string().min(1) })
+    ]).optional(),
+    /**
+     * Optional legacy Global API Key + email pair. Provide both to fall back
+     * to `X-Auth-Key` + `X-Auth-Email` for endpoints that 405 on Bearer auth.
+     */
+    apiKey: z.union([
+        z.object({ source: z.literal('env'), key: z.string().min(1) }),
+        z.object({ source: z.literal('secret'), key: z.string().min(1) })
+    ]).optional(),
+    email: z.union([
+        z.object({ source: z.literal('env'), key: z.string().min(1) }),
+        z.object({ source: z.literal('secret'), key: z.string().min(1) })
+    ]).optional(),
+    /**
+     * Optional override for the secrets-resolution environment scope. When
+     * unset, the impl resolves the current active environment from the
+     * config manifest (the same selection `vibes secrets list` honors),
+     * falling back to `'local'`.
+     */
+    environment: z.string().optional(),
+    /** Log sources to monitor - matches infra/logs kind schema */
+    sources: z
+        .array(z.object({
+        type: z.enum(['worker', 'pages', 'd1', 'r2', 'kv']),
+        name: z.string().min(1),
+        environment: z.string().optional()
+    }))
+        .default([]),
+    retention: z
+        .object({
+        hotDays: z.number().int().positive().default(7),
+        coldDays: z.number().int().positive().default(30)
+    })
+        .optional(),
+    alerts: z
+        .array(z.object({
+        name: z.string().min(1),
+        condition: z.enum(['errorRate', 'duration', 'invocationCount']),
+        threshold: z.number(),
+        window: z.string(),
+        channels: z.array(z.string()).default([])
+    }))
+        .default([])
+});
+class CloudflareLogsImplementation {
+    id = 'cloudflare-logs';
+    descriptor;
+    connector = null;
+    constructor(descriptor) {
+        this.descriptor = CloudflareLogsDescriptorSchema.parse(descriptor);
+    }
+    async getConnector() {
+        if (this.connector)
+            return this.connector;
+        const runtime = getVibesRuntime();
+        const secretsStore = await runtime.query('secrets/store').resolve();
+        // Prefer adapterConfig for constitution-aligned config (adapter-specific under adapterConfig)
+        const ac = (this.descriptor.adapterConfig || {});
+        const accountId = (this.descriptor.accountId ?? ac.accountId ?? { source: 'secret', key: 'CLOUDFLARE_ACCOUNT_ID' });
+        const apiToken = (this.descriptor.apiToken ?? ac.apiToken ?? { source: 'secret', key: 'CLOUDFLARE_API_TOKEN' });
+        // Legacy auth pair is optional — only used by endpoints that 405 on Bearer.
+        const apiKey = (this.descriptor.apiKey ?? ac.apiKey);
+        const email = (this.descriptor.email ?? ac.email);
+        // Resolve which environment scope to read secrets from. Descriptor
+        // override wins; otherwise follow the user's active environment
+        // selection (same source `vibes secrets list` reads). Final fallback
+        // is `'local'` so the CLI stays usable when the config manifest
+        // hasn't been initialized.
+        let environment = this.descriptor.environment;
+        if (!environment) {
+            try {
+                const current = await resolveCurrentEnvironmentConfig();
+                environment = current.name;
+            }
+            catch {
+                environment = 'local';
+            }
+        }
+        this.connector = await CloudflareLogsConnector.create({
+            accountId,
+            apiToken,
+            ...(apiKey ? { apiKey } : {}),
+            ...(email ? { email } : {})
+        }, {
+            environment,
+            secretsStore
+        });
+        return this.connector;
+    }
+    async tailLogs(workerName, options = {}) {
+        const connector = await this.getConnector();
+        try {
+            return await connector.tailLogs(workerName, options);
+        }
+        catch (error) {
+            const msg = error instanceof Error ? error.message : String(error);
+            if (msg.includes('Method not allowed for this authentication scheme')) {
+                throw new Error('Cloudflare rejected log tail with "method not allowed for this authentication scheme". ' +
+                    'Your API token likely lacks the "Workers Scripts:Edit" (or equivalent Tail) permission. ' +
+                    'Either grant that permission to CLOUDFLARE_API_TOKEN, or configure ' +
+                    'CLOUDFLARE_API_KEY + CLOUDFLARE_EMAIL in the secrets store for legacy auth fallback.');
+            }
+            throw error;
+        }
+    }
+    async stopTail(sourceName, tailId) {
+        const connector = await this.getConnector();
+        await connector.stopTail(sourceName, tailId);
+    }
+    async listTails(sourceName) {
+        const connector = await this.getConnector();
+        const sessions = await connector.listTails(sourceName);
+        return sessions.map((s) => ({ id: s.tailId, createdAt: s.createdAt.toISOString() }));
+    }
+    async getAnalytics(sourceName, timeRange) {
+        const connector = await this.getConnector();
+        return connector.getAnalytics(sourceName, timeRange ?? {});
+    }
+    async getErrorRate(sourceName, timeRange) {
+        const connector = await this.getConnector();
+        return connector.getErrorRate(sourceName, timeRange ?? {});
+    }
+}
+export function createCloudflareLogsImplementation(input) {
+    const descriptor = CloudflareLogsDescriptorSchema.parse(input);
+    return new CloudflareLogsImplementation(descriptor);
+}
+//# sourceMappingURL=logs.impl.js.map

package/dist/implementations/logs.impl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logs.impl.js","sourceRoot":"","sources":["../../src/implementations/logs.impl.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,uBAAuB,EAAE,MAAM,mCAAmC,CAAC;AAC5E,OAAO,EAAE,+BAA+B,EAAE,MAAM,yCAAyC,CAAC;AAG1F,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC;IACtD,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC;IAC7B,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC;IACrC,aAAa,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC3D,mFAAmF;IACnF,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC;QAClB,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACjB,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9D,CAAC,CAAC,QAAQ,EAAE;IACb,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC;QACjB,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;KACjE,CAAC,CAAC,QAAQ,EAAE;IACb;;;OAGG;IACH,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC;QACf,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;KACjE,CAAC,CAAC,QAAQ,EAAE;IACb,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC;QACd,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;KACjE,CAAC,CAAC,QAAQ,EAAE;IACb;;;;;OAKG;IACH,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,8DAA8D;IAC9D,OAAO,EAAE,CAAC;SACR,KAAK,CACL,CAAC,CAAC,MAAM,CAAC;QACR,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QACnD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACvB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAClC,CAAC,CACF;SACA,OAAO,CAAC,EAAE,CAAC;IACb,SAAS,EAAE,CAAC;SACV,MAAM,CAAC;QACP,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QAC/C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;KACjD,CAAC;SACD,QAAQ,EAAE;IACZ,MAAM,EAAE,CAAC;SACP,KAAK,CACL,CAAC,CAAC,MAAM,CAAC;QACR,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACvB,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,UAAU,EAAE,iBAAiB,CAAC,CAAC;QAC/D,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;QACrB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;QAClB,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;KACzC,CAAC,CACF;SACA,OAAO,CAAC,EAAE,CAAC;CACb,CAAC,CAAC;AAkBH,MAAM,4BAA4B;IACxB,EAAE,GAAG,iBAAiB,CAAC;IACvB,UAAU,CAA2B;IACtC,SAAS,GAAmC,IAAI,CAAC;IAEzD,YAAY,UAAoC;QAC/C,IAAI,CAAC,UAAU,GAAG,8BAA8B,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACpE,CAAC;IAEO,KAAK,CAAC,YAAY;QACzB,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC,SAAS,CAAC;QAE1C,MAAM,OAAO,GAAG,eAAe,EAAE,CAAC;QAClC,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,OAAO,EAAgC,CAAC;QAElG,8FAA8F;QAC9F,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,IAAI,EAAE,CAA4B,CAAC;QAC5E,MAAM,SAAS,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,IAAI,EAAE,CAAC,SAAS,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,uBAAuB,EAAE,CAAQ,CAAC;QAC3H,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,IAAI,EAAE,CAAC,QAAQ,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,sBAAsB,EAAE,CAAQ,CAAC;QACvH,4EAA4E;QAC5E,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,IAAI,EAAE,CAAC,MAAM,CAAQ,CAAC;QAC5D,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,IAAI,EAAE,CAAC,KAAK,CAAQ,CAAC;QAEzD,mEAAmE;QACnE,gEAAgE;QAChE,qEAAqE;QACrE,gEAAgE;QAChE,2BAA2B;QAC3B,IAAI,WAAW,GAAG,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC;QAC9C,IAAI,CAAC,WAAW,EAAE,CAAC;YAClB,IAAI,CAAC;gBACJ,MAAM,OAAO,GAAG,MAAM,+BAA+B,EAAE,CAAC;gBACxD,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;YAC5B,CAAC;YAAC,MAAM,CAAC;gBACR,WAAW,GAAG,OAAO,CAAC;YACvB,CAAC;QACF,CAAC;QAED,IAAI,CAAC,SAAS,GAAG,MAAM,uBAAuB,CAAC,MAAM,CAAC;YACrD,SAAS;YACT,QAAQ;YACR,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7B,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC3B,EAAE;YACF,WAAW;YACX,YAAY;SACZ,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC,SAAS,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,QAAQ,CACb,UAAkB,EAClB,UAAsG,EAAE;QAExG,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAC5C,IAAI,CAAC;YACJ,OAAO,MAAM,SAAS,CAAC,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QACtD,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACzB,MAAM,GAAG,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACnE,IAAI,GAAG,CAAC,QAAQ,CAAC,mDAAmD,CAAC,EAAE,CAAC;gBACvE,MAAM,IAAI,KAAK,CACd,yFAAyF;oBACxF,0FAA0F;oBAC1F,qEAAqE;oBACrE,sFAAsF,CACvF,CAAC;YACH,CAAC;YACD,MAAM,KAAK,CAAC;QACb,CAAC;IACF,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,UAAkB,EAAE,MAAc;QAChD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAC5C,MAAM,SAAS,CAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,UAAkB;QACjC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAC5C,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QACvD,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC;IACtF,CAAC;IAED,KAAK,CAAC,YAAY,CACjB,UAAkB,EAClB,SAAmD;QAEnD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAC5C,OAAO,SAAS,CAAC,YAAY,CAAC,UAAU,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,YAAY,CACjB,UAAkB,EAClB,SAAmD;QAEnD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAC5C,OAAO,SAAS,CAAC,YAAY,CAAC,UAAU,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC;IAC5D,CAAC;CACD;AAED,MAAM,UAAU,kCAAkC,CACjD,KAAoC;IAEpC,MAAM,UAAU,GAAG,8BAA8B,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC/D,OAAO,IAAI,4BAA4B,CAAC,UAAU,CAAC,CAAC;AACrD,CAAC"}

package/dist/implementations/observability.descriptor.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Default Cloudflare Workers Observability descriptor — auto-registered
+ * at plugin load so `runtime.assets('infra/observability').descriptors()`
+ * surfaces it without each consumer declaring one in their config.
+ */
+import type { InfraObservabilityDescriptor } from '@vibesdotdev/infra-core';
+declare const descriptor: InfraObservabilityDescriptor;
+export default descriptor;
+//# sourceMappingURL=observability.descriptor.d.ts.map

package/dist/implementations/observability.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"observability.descriptor.d.ts","sourceRoot":"","sources":["../../src/implementations/observability.descriptor.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,yBAAyB,CAAC;AAE5E,QAAA,MAAM,UAAU,EAAE,4BAcjB,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/implementations/observability.descriptor.js

@@ -0,0 +1,22 @@
+/**
+ * Default Cloudflare Workers Observability descriptor — auto-registered
+ * at plugin load so `runtime.assets('infra/observability').descriptors()`
+ * surfaces it without each consumer declaring one in their config.
+ */
+const descriptor = {
+    kind: 'infra/observability',
+    id: 'cloudflare-workers-observability',
+    name: 'Cloudflare Workers Observability',
+    description: 'Per-Worker observability config (logs/traces sampling, exports) via CF Workers Settings API',
+    adapter: 'cloudflare-workers-observability',
+    adapterConfig: {
+        apiTokenEnvVar: 'CLOUDFLARE_API_TOKEN',
+        accountIdEnvVar: 'CLOUDFLARE_ACCOUNT_ID'
+    },
+    environment: 'local',
+    // Default scope: every Worker in the account. CLI commands can
+    // narrow with --worker.
+    defaultScope: { kind: 'account-wide' }
+};
+export default descriptor;
+//# sourceMappingURL=observability.descriptor.js.map

package/dist/implementations/observability.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"observability.descriptor.js","sourceRoot":"","sources":["../../src/implementations/observability.descriptor.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,MAAM,UAAU,GAAiC;IAChD,IAAI,EAAE,qBAAqB;IAC3B,EAAE,EAAE,kCAAkC;IACtC,IAAI,EAAE,kCAAkC;IACxC,WAAW,EAAE,6FAA6F;IAC1G,OAAO,EAAE,kCAAkC;IAC3C,aAAa,EAAE;QACd,cAAc,EAAE,sBAAsB;QACtC,eAAe,EAAE,uBAAuB;KACxC;IACD,WAAW,EAAE,OAAO;IACpB,+DAA+D;IAC/D,wBAAwB;IACxB,YAAY,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE;CACtC,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/implementations/observability.impl.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Cloudflare Workers Observability Implementation
+ *
+ * Reads/writes per-Worker observability via the CF Workers Settings API:
+ *
+ *   GET   /accounts/:account/workers/scripts/:script/settings
+ *   PATCH /accounts/:account/workers/scripts/:script/settings
+ *
+ * The PATCH body shape is the same as the GET response — supply only
+ * the keys you want to change. We translate the kind's
+ * `ObservabilitySettings` shape onto CF's nested observability.{logs,
+ * traces} fields.
+ *
+ * Credentials resolve through the standard `secrets/store` runtime
+ * chain via `resolveAdapterCredential`; no CF-specific helpers. Token
+ * candidates default to CLOUDFLARE_API_TOKEN (Workers Scripts: Edit
+ * scope required for write).
+ */
+import * as z from 'zod/v4';
+import { type ObservabilityImplementation } from '@vibesdotdev/infra-core';
+export declare const CloudflareObservabilityDescriptorSchema: z.ZodObject<{
+    kind: z.ZodLiteral<"infra/observability">;
+    id: z.ZodString;
+    name: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
+    adapter: z.ZodLiteral<"cloudflare-workers-observability">;
+    adapterConfig: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    environment: z.ZodDefault<z.ZodString>;
+    defaultScope: z.ZodOptional<z.ZodUnknown>;
+    settings: z.ZodOptional<z.ZodUnknown>;
+}, z.core.$strip>;
+export type CloudflareObservabilityDescriptorInput = z.input<typeof CloudflareObservabilityDescriptorSchema>;
+export type CloudflareObservabilityDescriptor = z.infer<typeof CloudflareObservabilityDescriptorSchema>;
+export declare function createCloudflareObservabilityImplementation(input: CloudflareObservabilityDescriptorInput): ObservabilityImplementation;
+//# sourceMappingURL=observability.impl.d.ts.map

package/dist/implementations/observability.impl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"observability.impl.d.ts","sourceRoot":"","sources":["../../src/implementations/observability.impl.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAEN,KAAK,2BAA2B,EAMhC,MAAM,yBAAyB,CAAC;AAEjC,eAAO,MAAM,uCAAuC;;;;;;;;;;iBAUlD,CAAC;AAEH,MAAM,MAAM,sCAAsC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uCAAuC,CAAC,CAAC;AAC7G,MAAM,MAAM,iCAAiC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uCAAuC,CAAC,CAAC;AAiQxG,wBAAgB,2CAA2C,CAC1D,KAAK,EAAE,sCAAsC,GAC3C,2BAA2B,CAI7B"}

package/dist/implementations/observability.impl.js

@@ -0,0 +1,229 @@
+/**
+ * Cloudflare Workers Observability Implementation
+ *
+ * Reads/writes per-Worker observability via the CF Workers Settings API:
+ *
+ *   GET   /accounts/:account/workers/scripts/:script/settings
+ *   PATCH /accounts/:account/workers/scripts/:script/settings
+ *
+ * The PATCH body shape is the same as the GET response — supply only
+ * the keys you want to change. We translate the kind's
+ * `ObservabilitySettings` shape onto CF's nested observability.{logs,
+ * traces} fields.
+ *
+ * Credentials resolve through the standard `secrets/store` runtime
+ * chain via `resolveAdapterCredential`; no CF-specific helpers. Token
+ * candidates default to CLOUDFLARE_API_TOKEN (Workers Scripts: Edit
+ * scope required for write).
+ */
+import * as z from 'zod/v4';
+import { resolveAdapterCredential } from '@vibesdotdev/infra-core';
+export const CloudflareObservabilityDescriptorSchema = z.object({
+    kind: z.literal('infra/observability'),
+    id: z.string().min(1),
+    name: z.string().min(1),
+    description: z.string().optional(),
+    adapter: z.literal('cloudflare-workers-observability'),
+    adapterConfig: z.record(z.string(), z.unknown()).optional(),
+    environment: z.string().default('local'),
+    defaultScope: z.unknown().optional(),
+    settings: z.unknown().optional()
+});
+/** Map CF native observability → provider-agnostic ObservabilitySettings. */
+function fromCfObservability(cf) {
+    const out = {};
+    if (cf?.logs) {
+        out.logs = {
+            enabled: cf.logs.enabled ?? cf.enabled ?? false,
+            headSamplingRate: cf.logs.head_sampling_rate ?? cf.head_sampling_rate,
+            persist: cf.logs.persist,
+            invocationLogs: cf.logs.invocation_logs
+        };
+    }
+    if (cf?.traces) {
+        out.traces = {
+            enabled: cf.traces.enabled ?? false,
+            headSamplingRate: cf.traces.head_sampling_rate,
+            persist: cf.traces.persist
+        };
+    }
+    return out;
+}
+/** Map ObservabilitySettings → CF PATCH body (only includes provided keys). */
+function toCfObservability(settings) {
+    const body = {};
+    if (settings.logs) {
+        // CF gates everything under `enabled` at the top-level; mirror the
+        // logs.enabled value so single-toggle clients work as expected.
+        body.enabled = settings.logs.enabled;
+        body.head_sampling_rate = settings.logs.headSamplingRate;
+        body.logs = {
+            enabled: settings.logs.enabled,
+            head_sampling_rate: settings.logs.headSamplingRate,
+            persist: settings.logs.persist,
+            invocation_logs: settings.logs.invocationLogs
+        };
+    }
+    if (settings.traces) {
+        body.traces = {
+            enabled: settings.traces.enabled,
+            head_sampling_rate: settings.traces.headSamplingRate,
+            persist: settings.traces.persist
+        };
+    }
+    return body;
+}
+function settingsEqual(a, b) {
+    return JSON.stringify(a) === JSON.stringify(b);
+}
+class CloudflareObservabilityImplementation {
+    id = 'cloudflare-workers-observability';
+    descriptor;
+    creds = null;
+    constructor(descriptor) {
+        this.descriptor = CloudflareObservabilityDescriptorSchema.parse(descriptor);
+    }
+    async getCreds() {
+        if (this.creds)
+            return this.creds;
+        const env = this.descriptor.environment || 'local';
+        const ac = (this.descriptor.adapterConfig ?? {});
+        const accountKey = typeof ac.accountIdEnvVar === 'string' ? ac.accountIdEnvVar : 'CLOUDFLARE_ACCOUNT_ID';
+        const primaryToken = typeof ac.apiTokenEnvVar === 'string' ? ac.apiTokenEnvVar : 'CLOUDFLARE_API_TOKEN';
+        const fallbackToken = typeof ac.apiTokenFallbackEnvVar === 'string' ? ac.apiTokenFallbackEnvVar : null;
+        const tokenCandidates = fallbackToken ? [primaryToken, fallbackToken] : [primaryToken];
+        const accountRes = await resolveAdapterCredential({
+            keyCandidates: [accountKey],
+            environment: env,
+            humanName: 'Cloudflare account id'
+        });
+        const tokenRes = await resolveAdapterCredential({
+            keyCandidates: tokenCandidates,
+            environment: env,
+            humanName: 'Cloudflare API token (Workers Scripts: Edit scope for write ops)'
+        });
+        this.creds = { accountId: accountRes.value, apiToken: tokenRes.value };
+        return this.creds;
+    }
+    async call(path, init) {
+        const { apiToken } = await this.getCreds();
+        // Note: callers that need the multipart/form-data shape (the
+        // script settings PATCH endpoint) must set their own Content-Type
+        // via the init.headers override — otherwise we apply JSON by default.
+        const callerHeaders = (init?.headers ?? {});
+        const explicitContentType = Object.keys(callerHeaders).some((k) => k.toLowerCase() === 'content-type');
+        const defaultHeaders = {
+            Authorization: `Bearer ${apiToken}`
+        };
+        if (!explicitContentType && !(init?.body instanceof FormData)) {
+            defaultHeaders['Content-Type'] = 'application/json';
+        }
+        const res = await fetch(`https://api.cloudflare.com/client/v4${path}`, {
+            ...init,
+            headers: {
+                ...defaultHeaders,
+                ...callerHeaders
+            }
+        });
+        const text = await res.text();
+        let body;
+        try {
+            body = JSON.parse(text);
+        }
+        catch {
+            throw new Error(`cloudflare-observability: non-JSON response from ${path}: ${text.slice(0, 200)}`);
+        }
+        if (!res.ok || body.success === false) {
+            const errSummary = body.errors?.map((e) => `${e.code}: ${e.message}`).join('; ') ?? text.slice(0, 200);
+            throw new Error(`cloudflare-observability: ${path} → ${res.status} ${errSummary}`);
+        }
+        return body;
+    }
+    async listWorkerNames(filter) {
+        const { accountId } = await this.getCreds();
+        const body = await this.call(`/accounts/${accountId}/workers/scripts?per_page=200`);
+        const all = (body.result ?? []).map((s) => s.id);
+        if (!filter)
+            return all;
+        // Simple glob: support * as a wildcard.
+        const pattern = filter.replace(/[.+?^${}()|[\]\\]/g, '\\$&').replace(/\*/g, '.*');
+        const re = new RegExp(`^${pattern}$`);
+        return all.filter((name) => re.test(name));
+    }
+    async resolveScopeToWorkers(scope) {
+        if (scope.kind === 'worker')
+            return [scope.workerName];
+        return this.listWorkerNames(scope.filter);
+    }
+    async getStatus(scope) {
+        const { accountId } = await this.getCreds();
+        const workers = await this.resolveScopeToWorkers(scope);
+        const snapshots = [];
+        for (const workerName of workers) {
+            try {
+                const body = await this.call(`/accounts/${accountId}/workers/scripts/${workerName}/settings`);
+                snapshots.push({
+                    workerName,
+                    settings: fromCfObservability(body.result.observability),
+                    modifiedAt: body.result.modified_on
+                });
+            }
+            catch (err) {
+                // Skip workers that don't exist or aren't readable, but
+                // surface as snapshots with empty settings so the CLI can
+                // distinguish "not present" from "100% sampling".
+                snapshots.push({
+                    workerName,
+                    settings: {},
+                    modifiedAt: undefined
+                });
+                if (process.env.VIBES_DEBUG_OBSERVABILITY === '1') {
+                    console.error(`[observability-debug] ${workerName}: ${err.message}`);
+                }
+            }
+        }
+        return snapshots;
+    }
+    async set(input) {
+        const { accountId } = await this.getCreds();
+        const skipUnchanged = input.skipUnchanged ?? true;
+        const workers = await this.resolveScopeToWorkers(input.scope);
+        const result = { changed: [], unchanged: [], failed: [] };
+        for (const workerName of workers) {
+            try {
+                const current = await this.call(`/accounts/${accountId}/workers/scripts/${workerName}/settings`);
+                const before = fromCfObservability(current.result.observability);
+                // Merge requested settings into existing, then check for change.
+                const desired = {
+                    logs: { ...(before.logs ?? { enabled: false }), ...(input.settings.logs ?? {}) },
+                    traces: { ...(before.traces ?? { enabled: false }), ...(input.settings.traces ?? {}) }
+                };
+                if (skipUnchanged && settingsEqual(before, desired)) {
+                    result.unchanged.push(workerName);
+                    continue;
+                }
+                // CF's script-settings PATCH requires multipart/form-data with
+                // a `settings` field carrying the JSON metadata. Bare JSON
+                // returns 415 ("Content-Type must be one of: multipart/form-data").
+                const form = new FormData();
+                form.append('settings', JSON.stringify({ observability: toCfObservability(desired) }));
+                await this.call(`/accounts/${accountId}/workers/scripts/${workerName}/settings`, {
+                    method: 'PATCH',
+                    body: form
+                });
+                result.changed.push({ workerName, before, after: desired });
+            }
+            catch (err) {
+                result.failed.push({
+                    workerName,
+                    error: err instanceof Error ? err.message : String(err)
+                });
+            }
+        }
+        return result;
+    }
+}
+export function createCloudflareObservabilityImplementation(input) {
+    return new CloudflareObservabilityImplementation(CloudflareObservabilityDescriptorSchema.parse(input));
+}
+//# sourceMappingURL=observability.impl.js.map

package/dist/implementations/observability.impl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"observability.impl.js","sourceRoot":"","sources":["../../src/implementations/observability.impl.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EACN,wBAAwB,EAOxB,MAAM,yBAAyB,CAAC;AAEjC,MAAM,CAAC,MAAM,uCAAuC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/D,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC;IACtC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,kCAAkC,CAAC;IACtD,aAAa,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC3D,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC;IACxC,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACpC,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAChC,CAAC,CAAC;AAqCH,6EAA6E;AAC7E,SAAS,mBAAmB,CAAC,EAAmC;IAC/D,MAAM,GAAG,GAA0B,EAAE,CAAC;IACtC,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC;QACd,GAAG,CAAC,IAAI,GAAG;YACV,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,OAAO,IAAI,KAAK;YAC/C,gBAAgB,EAAE,EAAE,CAAC,IAAI,CAAC,kBAAkB,IAAI,EAAE,CAAC,kBAAkB;YACrE,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO;YACxB,cAAc,EAAE,EAAE,CAAC,IAAI,CAAC,eAAe;SACvC,CAAC;IACH,CAAC;IACD,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC;QAChB,GAAG,CAAC,MAAM,GAAG;YACZ,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,IAAI,KAAK;YACnC,gBAAgB,EAAE,EAAE,CAAC,MAAM,CAAC,kBAAkB;YAC9C,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO;SAC1B,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACZ,CAAC;AAED,+EAA+E;AAC/E,SAAS,iBAAiB,CAAC,QAA+B;IACzD,MAAM,IAAI,GAAwB,EAAE,CAAC;IACrC,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnB,mEAAmE;QACnE,gEAAgE;QAChE,IAAI,CAAC,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC;QACrC,IAAI,CAAC,kBAAkB,GAAG,QAAQ,CAAC,IAAI,CAAC,gBAAgB,CAAC;QACzD,IAAI,CAAC,IAAI,GAAG;YACX,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,OAAO;YAC9B,kBAAkB,EAAE,QAAQ,CAAC,IAAI,CAAC,gBAAgB;YAClD,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,OAAO;YAC9B,eAAe,EAAE,QAAQ,CAAC,IAAI,CAAC,cAAc;SAC7C,CAAC;IACH,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;QACrB,IAAI,CAAC,MAAM,GAAG;YACb,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,OAAO;YAChC,kBAAkB,EAAE,QAAQ,CAAC,MAAM,CAAC,gBAAgB;YACpD,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,OAAO;SAChC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED,SAAS,aAAa,CAAC,CAAwB,EAAE,CAAwB;IACxE,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,qCAAqC;IACjC,EAAE,GAAG,kCAAkC,CAAC;IACxC,UAAU,CAAoC;IAC/C,KAAK,GAAmD,IAAI,CAAC;IAErE,YAAY,UAA6C;QACxD,IAAI,CAAC,UAAU,GAAG,uCAAuC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC7E,CAAC;IAEO,KAAK,CAAC,QAAQ;QACrB,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC;QAElC,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,WAAW,IAAI,OAAO,CAAC;QACnD,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,IAAI,EAAE,CAA4B,CAAC;QAC5E,MAAM,UAAU,GACf,OAAO,EAAE,CAAC,eAAe,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC,uBAAuB,CAAC;QACvF,MAAM,YAAY,GACjB,OAAO,EAAE,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,sBAAsB,CAAC;QACpF,MAAM,aAAa,GAAG,OAAO,EAAE,CAAC,sBAAsB,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,sBAAsB,CAAC,CAAC,CAAC,IAAI,CAAC;QAEvG,MAAM,eAAe,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;QAEvF,MAAM,UAAU,GAAG,MAAM,wBAAwB,CAAC;YACjD,aAAa,EAAE,CAAC,UAAU,CAAC;YAC3B,WAAW,EAAE,GAAG;YAChB,SAAS,EAAE,uBAAuB;SAClC,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAAC;YAC/C,aAAa,EAAE,eAAe;YAC9B,WAAW,EAAE,GAAG;YAChB,SAAS,EAAE,kEAAkE;SAC7E,CAAC,CAAC;QAEH,IAAI,CAAC,KAAK,GAAG,EAAE,SAAS,EAAE,UAAU,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC;QACvE,OAAO,IAAI,CAAC,KAAK,CAAC;IACnB,CAAC;IAEO,KAAK,CAAC,IAAI,CAAI,IAAY,EAAE,IAAkB;QACrD,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC3C,6DAA6D;QAC7D,kEAAkE;QAClE,sEAAsE;QACtE,MAAM,aAAa,GAAG,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,CAA2B,CAAC;QACtE,MAAM,mBAAmB,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,IAAI,CAC1D,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,cAAc,CACzC,CAAC;QACF,MAAM,cAAc,GAA2B;YAC9C,aAAa,EAAE,UAAU,QAAQ,EAAE;SACnC,CAAC;QACF,IAAI,CAAC,mBAAmB,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,YAAY,QAAQ,CAAC,EAAE,CAAC;YAC/D,cAAc,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;QACrD,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,uCAAuC,IAAI,EAAE,EAAE;YACtE,GAAG,IAAI;YACP,OAAO,EAAE;gBACR,GAAG,cAAc;gBACjB,GAAG,aAAa;aAChB;SACD,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,IAAkB,CAAC;QACvB,IAAI,CAAC;YACJ,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAiB,CAAC;QACzC,CAAC;QAAC,MAAM,CAAC;YACR,MAAM,IAAI,KAAK,CACd,oDAAoD,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CACjF,CAAC;QACH,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;YACvC,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YACvG,MAAM,IAAI,KAAK,CAAC,6BAA6B,IAAI,MAAM,GAAG,CAAC,MAAM,IAAI,UAAU,EAAE,CAAC,CAAC;QACpF,CAAC;QACD,OAAO,IAAI,CAAC;IACb,CAAC;IAEO,KAAK,CAAC,eAAe,CAAC,MAAe;QAC5C,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC5C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAC3B,aAAa,SAAS,+BAA+B,CACrD,CAAC;QACF,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACjD,IAAI,CAAC,MAAM;YAAE,OAAO,GAAG,CAAC;QACxB,wCAAwC;QACxC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,oBAAoB,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAClF,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,IAAI,OAAO,GAAG,CAAC,CAAC;QACtC,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5C,CAAC;IAEO,KAAK,CAAC,qBAAqB,CAAC,KAAyB;QAC5D,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACvD,OAAO,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3C,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,KAAyB;QACxC,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC5C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC;QACxD,MAAM,SAAS,GAA4B,EAAE,CAAC;QAC9C,KAAK,MAAM,UAAU,IAAI,OAAO,EAAE,CAAC;YAClC,IAAI,CAAC;gBACJ,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAC3B,aAAa,SAAS,oBAAoB,UAAU,WAAW,CAC/D,CAAC;gBACF,SAAS,CAAC,IAAI,CAAC;oBACd,UAAU;oBACV,QAAQ,EAAE,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC;oBACxD,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;iBACnC,CAAC,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACd,wDAAwD;gBACxD,0DAA0D;gBAC1D,kDAAkD;gBAClD,SAAS,CAAC,IAAI,CAAC;oBACd,UAAU;oBACV,QAAQ,EAAE,EAAE;oBACZ,UAAU,EAAE,SAAS;iBACrB,CAAC,CAAC;gBACH,IAAI,OAAO,CAAC,GAAG,CAAC,yBAAyB,KAAK,GAAG,EAAE,CAAC;oBACnD,OAAO,CAAC,KAAK,CAAC,yBAAyB,UAAU,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;gBACjF,CAAC;YACF,CAAC;QACF,CAAC;QACD,OAAO,SAAS,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,KAA4B;QACrC,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC5C,MAAM,aAAa,GAAG,KAAK,CAAC,aAAa,IAAI,IAAI,CAAC;QAClD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC9D,MAAM,MAAM,GAA2B,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QAElF,KAAK,MAAM,UAAU,IAAI,OAAO,EAAE,CAAC;YAClC,IAAI,CAAC;gBACJ,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAC9B,aAAa,SAAS,oBAAoB,UAAU,WAAW,CAC/D,CAAC;gBACF,MAAM,MAAM,GAAG,mBAAmB,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;gBAEjE,iEAAiE;gBACjE,MAAM,OAAO,GAA0B;oBACtC,IAAI,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE;oBAChF,MAAM,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE;iBACtF,CAAC;gBAEF,IAAI,aAAa,IAAI,aAAa,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;oBACrD,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;oBAClC,SAAS;gBACV,CAAC;gBAED,+DAA+D;gBAC/D,2DAA2D;gBAC3D,oEAAoE;gBACpE,MAAM,IAAI,GAAG,IAAI,QAAQ,EAAE,CAAC;gBAC5B,IAAI,CAAC,MAAM,CACV,UAAU,EACV,IAAI,CAAC,SAAS,CAAC,EAAE,aAAa,EAAE,iBAAiB,CAAC,OAAO,CAAC,EAAE,CAAC,CAC7D,CAAC;gBACF,MAAM,IAAI,CAAC,IAAI,CAAU,aAAa,SAAS,oBAAoB,UAAU,WAAW,EAAE;oBACzF,MAAM,EAAE,OAAO;oBACf,IAAI,EAAE,IAAI;iBACV,CAAC,CAAC;gBACH,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;YAC7D,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACd,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;oBAClB,UAAU;oBACV,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;iBACvD,CAAC,CAAC;YACJ,CAAC;QACF,CAAC;QAED,OAAO,MAAM,CAAC;IACf,CAAC;CACD;AAED,MAAM,UAAU,2CAA2C,CAC1D,KAA6C;IAE7C,OAAO,IAAI,qCAAqC,CAC/C,uCAAuC,CAAC,KAAK,CAAC,KAAK,CAAC,CACpD,CAAC;AACH,CAAC"}

package/dist/implementations/pages.impl.d.ts

@@ -0,0 +1,98 @@
+/**
+ * Cloudflare Pages Implementation
+ *
+ * Config generator and deployment helpers for Cloudflare Pages projects.
+ * Wraps an infra-core AppDeployment into a Cloudflare Pages-compatible
+ * wrangler.jsonc fragment and provides rendering utilities.
+ *
+ * Retained for ecosystem/SDK consumers that target Cloudflare Pages.
+ * Vibes monorepo apps deploy as Workers + Static Assets — see web-app.impl.ts.
+ */
+import * as z from 'zod/v4';
+import type { AppDeployment } from '@vibesdotdev/infra-core/deployment';
+export declare const CloudflarePagesDescriptorSchema: z.ZodObject<{
+    kind: z.ZodLiteral<"infra/web-app">;
+    id: z.ZodString;
+    name: z.ZodString;
+    adapter: z.ZodEnum<{
+        "cloudflare-pages": "cloudflare-pages";
+        "cloudflare-workers": "cloudflare-workers";
+    }>;
+    cfProjectName: z.ZodString;
+    outputDir: z.ZodString;
+    compatibilityDate: z.ZodOptional<z.ZodString>;
+    compatibilityFlags: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    env: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+    secretsStoreId: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type CloudflarePagesDescriptor = z.infer<typeof CloudflarePagesDescriptorSchema>;
+export type CloudflarePagesDescriptorInput = z.input<typeof CloudflarePagesDescriptorSchema>;
+export interface CloudflarePagesDeployment {
+    projectName: string;
+    deployment: AppDeployment;
+    compatibilityDate: string;
+    /** Generate wrangler.jsonc fragment for this Pages deployment */
+    generateWranglerConfig(): WranglerPagesConfig;
+}
+export interface WranglerSecretsStoreBinding {
+    binding: string;
+    store_id: string;
+    secret_name: string;
+}
+export interface WranglerPagesConfig {
+    $schema?: string;
+    name: string;
+    compatibility_date: string;
+    compatibility_flags: string[];
+    /** Pages build output directory */
+    pages_build_output_dir: string;
+    /** Environment variables for production */
+    vars?: Record<string, string>;
+    /** Account-level Secrets Store bindings (one per secret env var) */
+    secrets_store_secrets?: WranglerSecretsStoreBinding[];
+    /** Per-Pages-project required secret names (deploy-time validation only) */
+    secrets?: {
+        required: string[];
+    };
+}
+/**
+ * Create a Cloudflare Pages deployment wrapper around an AppDeployment.
+ *
+ * @param options - Deployment options including projectName and the base deployment
+ * @returns A CloudflarePagesDeployment with wrangler config generation
+ */
+export declare function createCloudflarePagesDeployment(options: {
+    projectName: string;
+    deployment: AppDeployment;
+    compatibilityDate?: string;
+    /**
+     * Account-level Secrets Store ID. When set, secret env vars are emitted
+     * as `secrets_store_secrets[]` bindings instead of being silently dropped.
+     */
+    secretsStoreId?: string;
+}): CloudflarePagesDeployment;
+/**
+ * Render a wrangler.jsonc string from a wrangler config object.
+ *
+ * Canonical output: tab-indented JSON with a leading JSONC header and a
+ * trailing newline. The same renderer is used for Pages and Workers
+ * (`infra-cloudflare/web-app`) — pass `headerLines` to customize the
+ * leading comment block.
+ *
+ * @param config - The wrangler config object to render
+ * @param options - Optional header override
+ * @returns JSONC-formatted string (JSON with comments)
+ */
+export declare function renderWranglerJson(config: WranglerPagesConfig | Record<string, unknown>, options?: {
+    headerLines?: string[];
+}): string;
+/**
+ * Generate a Pages deployment descriptor from an existing AppDeployment.
+ * This creates a descriptor that can be used for runtime discovery.
+ *
+ * @param deployment - The base AppDeployment
+ * @param cfProjectName - Explicit Cloudflare project name (required, no hardcoded conventions)
+ * @returns A validated Pages descriptor
+ */
+export declare function generateCloudflarePagesDescriptor(deployment: AppDeployment, cfProjectName: string): CloudflarePagesDescriptor;
+//# sourceMappingURL=pages.impl.d.ts.map

package/dist/implementations/pages.impl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pages.impl.d.ts","sourceRoot":"","sources":["../../src/implementations/pages.impl.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oCAAoC,CAAC;AAExE,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;iBAqB1C,CAAC;AAEH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AACxF,MAAM,MAAM,8BAA8B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AAE7F,MAAM,WAAW,yBAAyB;IACzC,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,aAAa,CAAC;IAC1B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,iEAAiE;IACjE,sBAAsB,IAAI,mBAAmB,CAAC;CAC9C;AAED,MAAM,WAAW,2BAA2B;IAC3C,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,mBAAmB;IACnC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,kBAAkB,EAAE,MAAM,CAAC;IAC3B,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAC9B,mCAAmC;IACnC,sBAAsB,EAAE,MAAM,CAAC;IAC/B,2CAA2C;IAC3C,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9B,oEAAoE;IACpE,qBAAqB,CAAC,EAAE,2BAA2B,EAAE,CAAC;IACtD,4EAA4E;IAC5E,OAAO,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;CACjC;AAED;;;;;GAKG;AACH,wBAAgB,+BAA+B,CAAC,OAAO,EAAE;IACxD,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,aAAa,CAAC;IAC1B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;CACxB,GAAG,yBAAyB,CAqD5B;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,kBAAkB,CACjC,MAAM,EAAE,mBAAmB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACrD,OAAO,CAAC,EAAE;IAAE,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,GAClC,MAAM,CAQR;AAED;;;;;;;GAOG;AACH,wBAAgB,iCAAiC,CAChD,UAAU,EAAE,aAAa,EACzB,aAAa,EAAE,MAAM,GACnB,yBAAyB,CAa3B"}