@vibesdotdev/infra-cloudflare 0.0.1

package/package.json

@@ -0,0 +1,153 @@
+{
+  "name": "@vibesdotdev/infra-cloudflare",
+  "version": "0.0.1",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "bun": "./src/index.ts",
+      "import": "./dist/index.js",
+      "default": "./dist/index.js"
+    },
+    "./pages": {
+      "types": "./dist/pages.d.ts",
+      "bun": "./src/pages.ts",
+      "import": "./dist/pages.js",
+      "default": "./dist/pages.js"
+    },
+    "./web-app": {
+      "types": "./dist/web-app.d.ts",
+      "bun": "./src/web-app.ts",
+      "import": "./dist/web-app.js",
+      "default": "./dist/web-app.js"
+    },
+    "./implementations/workers": {
+      "types": "./dist/implementations/workers.impl.d.ts",
+      "bun": "./src/implementations/workers.impl.ts",
+      "import": "./dist/implementations/workers.impl.js",
+      "default": "./dist/implementations/workers.impl.js"
+    },
+    "./implementations/queues": {
+      "types": "./dist/implementations/queues.impl.d.ts",
+      "bun": "./src/implementations/queues.impl.ts",
+      "import": "./dist/implementations/queues.impl.js",
+      "default": "./dist/implementations/queues.impl.js"
+    },
+    "./implementations/r2": {
+      "types": "./dist/implementations/r2.impl.d.ts",
+      "bun": "./src/implementations/r2.impl.ts",
+      "import": "./dist/implementations/r2.impl.js",
+      "default": "./dist/implementations/r2.impl.js"
+    },
+    "./implementations/kv": {
+      "types": "./dist/implementations/kv.impl.d.ts",
+      "bun": "./src/implementations/kv.impl.ts",
+      "import": "./dist/implementations/kv.impl.js",
+      "default": "./dist/implementations/kv.impl.js"
+    },
+    "./implementations/pages": {
+      "types": "./dist/implementations/pages.impl.d.ts",
+      "bun": "./src/implementations/pages.impl.ts",
+      "import": "./dist/implementations/pages.impl.js",
+      "default": "./dist/implementations/pages.impl.js"
+    },
+    "./implementations/web-app": {
+      "types": "./dist/implementations/web-app.impl.d.ts",
+      "bun": "./src/implementations/web-app.impl.ts",
+      "import": "./dist/implementations/web-app.impl.js",
+      "default": "./dist/implementations/web-app.impl.js"
+    },
+    "./plugin": {
+      "types": "./dist/cloudflare.plugin.d.ts",
+      "bun": "./src/cloudflare.plugin.ts",
+      "import": "./dist/cloudflare.plugin.js",
+      "default": "./dist/cloudflare.plugin.js"
+    },
+    "./secrets": {
+      "types": "./dist/secrets/index.d.ts",
+      "bun": "./src/secrets/index.ts",
+      "import": "./dist/secrets/index.js",
+      "default": "./dist/secrets/index.js"
+    },
+    "./*.js": "./dist/*.js",
+    "./*/*.js": "./dist/*/*.js",
+    "./*/*/*.js": "./dist/*/*/*.js",
+    "./*/*/*/*.js": "./dist/*/*/*/*.js",
+    "./*": {
+      "types": "./dist/*.d.ts",
+      "bun": "./src/*.ts",
+      "import": "./dist/*.js",
+      "default": "./dist/*.js"
+    },
+    "./*/*": {
+      "types": "./dist/*/*.d.ts",
+      "bun": "./src/*/*.ts",
+      "import": "./dist/*/*.js",
+      "default": "./dist/*/*.js"
+    },
+    "./*/*/*": {
+      "types": "./dist/*/*/*.d.ts",
+      "bun": "./src/*/*/*.ts",
+      "import": "./dist/*/*/*.js",
+      "default": "./dist/*/*/*.js"
+    },
+    "./*/*/*/*": {
+      "types": "./dist/*/*/*/*.d.ts",
+      "bun": "./src/*/*/*/*.ts",
+      "import": "./dist/*/*/*/*.js",
+      "default": "./dist/*/*/*/*.js"
+    }
+  },
+  "publishConfig": {
+    "registry": "https://registry.npmjs.org",
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/vibesdotdev/monorepo.git",
+    "directory": "packages/infra-cloudflare"
+  },
+  "dependencies": {
+    "@vibesdotdev/config": "0.0.1",
+    "@vibesdotdev/infra-core": "0.0.1",
+    "@vibesdotdev/runtime": "0.0.1",
+    "@vibesdotdev/secrets": "0.0.1",
+    "@vibesdotdev/connector-cloudflare": "0.0.1",
+    "zod": "^4.3.6"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "check": "bun --bun tsc -p tsconfig.json --noEmit",
+    "test": "bun test src"
+  },
+  "license": "MIT",
+  "files": [
+    "dist",
+    "src",
+    "bin",
+    "README.md",
+    "SPEC.md",
+    "LICENSE",
+    "!src/**/__tests__/**",
+    "!src/**/__stubs__/**",
+    "!src/**/*.test.ts",
+    "!src/**/*.test.tsx",
+    "!src/**/*.spec.ts",
+    "!src/**/*.spec.tsx",
+    "!dist/**/__tests__/**",
+    "!dist/**/__stubs__/**",
+    "!dist/**/*.test.js",
+    "!dist/**/*.test.js.map",
+    "!dist/**/*.test.d.ts",
+    "!dist/**/*.test.d.ts.map",
+    "!dist/**/*.spec.js",
+    "!dist/**/*.spec.js.map",
+    "!dist/**/*.spec.d.ts",
+    "!dist/**/*.spec.d.ts.map"
+  ],
+  "vibes": {
+    "visibility": "public-framework"
+  }
+}

package/src/cloudflare.plugin.ts

@@ -0,0 +1,477 @@
+/**
+ * Cloudflare Infrastructure Plugin
+ *
+ * Registers Cloudflare provider implementations for each infra kind.
+ * When a descriptor's adapter/engine matches a Cloudflare provider,
+ * the corresponding config generator is loaded.
+ *
+ * Web apps deploy via @sveltejs/adapter-cloudflare Workers Static Assets,
+ * configured per-app in apps/{app}-web/wrangler.jsonc. The Pages module
+ * provides `createCloudflarePagesDeployment` and `renderWranglerJson`
+ * for consumers that need programmatic wrangler config generation.
+ */
+
+import { createRuntimePlugin, createRuntimeImplementation, createRuntimeAsset } from '@vibesdotdev/runtime';
+import {
+	generateCloudflareWorkerConfig,
+	CloudflareWorkerDescriptorSchema,
+	type CloudflareWorkerDescriptorInput,
+	type WranglerWorkerConfig
+} from './implementations/workers.impl';
+import {
+	generateCloudflareQueueConfig,
+	CloudflareQueueDescriptorSchema,
+	type CloudflareQueueDescriptor
+} from './implementations/queues.impl';
+import {
+	generateCloudflareR2Config,
+	CloudflareR2DescriptorSchema,
+	type CloudflareR2Descriptor
+} from './implementations/r2.impl';
+import {
+	generateCloudflareKVConfig,
+	CloudflareKVDescriptorSchema,
+	type CloudflareKVDescriptor
+} from './implementations/kv.impl';
+import {
+	generateCloudflarePagesDescriptor,
+	CloudflarePagesDescriptorSchema,
+	type CloudflarePagesDescriptor
+} from './implementations/pages.impl';
+import {
+	CloudflareWebAppDescriptorSchema,
+	type CloudflareWebAppDescriptorInput
+} from './implementations/web-app.impl';
+import {
+	CloudflareLogsDescriptorSchema,
+	createCloudflareLogsImplementation,
+	type CloudflareLogsDescriptorInput
+} from './implementations/logs.impl';
+import {
+	CloudflareAlertsDescriptorSchema,
+	createCloudflareAlertsImplementation,
+	type CloudflareAlertsDescriptorInput
+} from './implementations/alerts.impl';
+import {
+	CloudflareObservabilityDescriptorSchema,
+	createCloudflareObservabilityImplementation,
+	type CloudflareObservabilityDescriptorInput
+} from './implementations/observability.impl';
+import {
+	CloudflareRumDescriptorSchema,
+	createCloudflareRumImplementation,
+	type CloudflareRumDescriptorInput
+} from './implementations/rum.impl';
+import cloudflareApiDescriptor from './secrets/cloudflare-api.descriptor';
+import cloudflareSecretsStoreDescriptor from './secrets/cloudflare-secrets-store.descriptor';
+import cloudflareAlertsDescriptor from './implementations/alerts.descriptor.ts';
+import cloudflareLogsDescriptor from './implementations/logs.descriptor';
+import cloudflareObservabilityDescriptor from './implementations/observability.descriptor.ts';
+import cloudflareRumDescriptor from './implementations/rum.descriptor.ts';
+
+function createWorkerImpl(input: CloudflareWorkerDescriptorInput) {
+	const descriptor = CloudflareWorkerDescriptorSchema.parse(input);
+	return createRuntimeImplementation({
+		id: 'cloudflare-workers',
+		kind: 'infra/worker',
+		priority: 10,
+		implementation: {
+			generateConfig: () => generateCloudflareWorkerConfig(descriptor)
+		}
+	});
+}
+
+function createQueueImpl(input: CloudflareQueueDescriptor) {
+	const descriptor = CloudflareQueueDescriptorSchema.parse(input);
+	return createRuntimeImplementation({
+		id: 'cloudflare-queues',
+		kind: 'infra/queue',
+		priority: 10,
+		implementation: {
+			generateConfig: () => generateCloudflareQueueConfig(descriptor)
+		}
+	});
+}
+
+function createR2Impl(input: CloudflareR2Descriptor) {
+	const descriptor = CloudflareR2DescriptorSchema.parse(input);
+	return createRuntimeImplementation({
+		id: 'cloudflare-r2',
+		kind: 'infra/object-storage',
+		priority: 10,
+		implementation: {
+			generateConfig: () => generateCloudflareR2Config(descriptor)
+		}
+	});
+}
+
+function createKVImpl(input: CloudflareKVDescriptor) {
+	const descriptor = CloudflareKVDescriptorSchema.parse(input);
+	return createRuntimeImplementation({
+		id: 'cloudflare-kv',
+		kind: 'infra/cache',
+		priority: 10,
+		implementation: {
+			generateConfig: () => generateCloudflareKVConfig(descriptor)
+		}
+	});
+}
+
+function createPagesImpl(input: CloudflarePagesDescriptor) {
+	const descriptor = CloudflarePagesDescriptorSchema.parse(input);
+	return createRuntimeImplementation({
+		id: 'cloudflare-pages',
+		kind: 'infra/web-app',
+		priority: 10,
+		implementation: {
+			generateConfig: () => descriptor,
+			getProjectName: () => descriptor.cfProjectName
+		}
+	});
+}
+
+function createWebAppImpl(input: CloudflareWebAppDescriptorInput) {
+	const descriptor = CloudflareWebAppDescriptorSchema.parse(input);
+	return createRuntimeImplementation({
+		id: 'cloudflare-web-app',
+		kind: 'infra/web-app',
+		priority: 20,
+		implementation: {
+			generateConfig: () => descriptor,
+			getWorkerName: () => descriptor.cfWorkerName
+		}
+	});
+}
+
+function createLogsImpl(input: CloudflareLogsDescriptorInput) {
+	const descriptor = CloudflareLogsDescriptorSchema.parse(input);
+	const impl = createCloudflareLogsImplementation(descriptor);
+	return createRuntimeImplementation({
+		id: 'cloudflare-logs',
+		kind: 'infra/logs',
+		priority: 10,
+		implementation: impl
+	});
+}
+
+function createAlertsImpl(input: CloudflareAlertsDescriptorInput) {
+	const descriptor = CloudflareAlertsDescriptorSchema.parse(input);
+	const impl = createCloudflareAlertsImplementation(descriptor);
+	return createRuntimeImplementation({
+		id: 'cloudflare-alerts',
+		kind: 'infra/alerts',
+		priority: 10,
+		implementation: impl
+	});
+}
+
+function createObservabilityImpl(input: CloudflareObservabilityDescriptorInput) {
+	const descriptor = CloudflareObservabilityDescriptorSchema.parse(input);
+	const impl = createCloudflareObservabilityImplementation(descriptor);
+	return createRuntimeImplementation({
+		id: 'cloudflare-workers-observability',
+		kind: 'infra/observability',
+		priority: 10,
+		implementation: impl
+	});
+}
+
+function createRumImpl(input: CloudflareRumDescriptorInput) {
+	const descriptor = CloudflareRumDescriptorSchema.parse(input);
+	const impl = createCloudflareRumImplementation(descriptor);
+	return createRuntimeImplementation({
+		id: 'cloudflare-web-analytics',
+		kind: 'infra/rum',
+		priority: 10,
+		implementation: impl
+	});
+}
+
+export {
+	createWorkerImpl,
+	createQueueImpl,
+	createR2Impl,
+	createKVImpl,
+	createPagesImpl,
+	createWebAppImpl,
+	createLogsImpl,
+	createAlertsImpl,
+	createObservabilityImpl,
+	createRumImpl
+};
+
+export default createRuntimePlugin({
+	id: 'infra-cloudflare',
+	name: 'Cloudflare Infrastructure',
+	description: 'Cloudflare provider implementations for infra kinds (Workers, Queues, R2, KV, Pages)',
+	dependencies: ['infra'],
+
+	// Surface the secrets/store descriptors at the asset level so the secrets
+	// CLI (`vibes secrets push/pull/list`) can enumerate available remotes
+	// alongside the loaders below. Loader-only registration leaves the
+	// descriptors invisible to `runtime.assets('secrets/store').descriptors()`.
+	descriptors: [
+		cloudflareApiDescriptor,
+		cloudflareSecretsStoreDescriptor,
+		cloudflareAlertsDescriptor,
+		cloudflareLogsDescriptor,
+		cloudflareObservabilityDescriptor,
+		cloudflareRumDescriptor
+	],
+
+	onActivate: async (runtime) => {
+		runtime.registerLoader(
+			'infra/worker',
+			'cloudflare-workers',
+			async () => {
+				return createWorkerImpl({
+					kind: 'infra/worker',
+					id: 'cloudflare-workers',
+					name: 'Cloudflare Workers',
+					adapter: 'cloudflare-workers',
+					workerName: 'default-worker',
+					main: 'src/worker.ts'
+				});
+			},
+			{ priority: 10, origin: 'infra-cloudflare' }
+		);
+
+		runtime.registerLoader(
+			'infra/queue',
+			'cloudflare-queues',
+			async () => {
+				return createQueueImpl({
+					kind: 'infra/queue',
+					id: 'cloudflare-queues',
+					name: 'Cloudflare Queues',
+					engine: 'cloudflare-queues',
+					queueName: 'default',
+					binding: 'DEFAULT_QUEUE'
+				});
+			},
+			{ priority: 10, origin: 'infra-cloudflare' }
+		);
+
+		runtime.registerLoader(
+			'infra/object-storage',
+			'cloudflare-r2',
+			async () => {
+				return createR2Impl({
+					kind: 'infra/object-storage',
+					id: 'cloudflare-r2',
+					name: 'Cloudflare R2',
+					adapter: 'cloudflare-r2',
+					binding: 'STORAGE',
+					bucketName: 'default'
+				});
+			},
+			{ priority: 10, origin: 'infra-cloudflare' }
+		);
+
+		runtime.registerLoader(
+			'infra/cache',
+			'cloudflare-kv',
+			async () => {
+				return createKVImpl({
+					kind: 'infra/cache',
+					id: 'cloudflare-kv',
+					name: 'Cloudflare KV',
+					engine: 'cloudflare-kv',
+					binding: 'CACHE',
+					namespaceId: 'default'
+				});
+			},
+			{ priority: 10, origin: 'infra-cloudflare' }
+		);
+
+		runtime.registerLoader(
+			'infra/alerts',
+			'cloudflare-alerts',
+			async () => {
+				return createAlertsImpl({
+					kind: 'infra/alerts',
+					id: 'cloudflare-alerts',
+					name: 'Cloudflare Alerts',
+					adapter: 'cloudflare-alerts',
+					policies: []
+				});
+			},
+			{ priority: 10, origin: 'infra-cloudflare' }
+		);
+
+		runtime.registerLoader(
+			'infra/observability',
+			'cloudflare-workers-observability',
+			async () => {
+				return createObservabilityImpl({
+					kind: 'infra/observability',
+					id: 'cloudflare-workers-observability',
+					name: 'Cloudflare Workers Observability',
+					adapter: 'cloudflare-workers-observability'
+				});
+			},
+			{ priority: 10, origin: 'infra-cloudflare' }
+		);
+
+		runtime.registerLoader(
+			'infra/rum',
+			'cloudflare-web-analytics',
+			async () => {
+				return createRumImpl({
+					kind: 'infra/rum',
+					id: 'cloudflare-web-analytics',
+					name: 'Cloudflare Web Analytics',
+					adapter: 'cloudflare-web-analytics',
+					siteToken: '96bb815cb0bc4afc87a793e6f34652b2'
+				});
+			},
+			{ priority: 10, origin: 'infra-cloudflare' }
+		);
+
+		runtime.registerLoader(
+			'secrets/store',
+			'cloudflare-api',
+			async () => {
+				const { createCloudflareApiStore } = await import('./secrets/cloudflare-api.impl');
+				// Pass a resolver that derives project names from runtime-resolved infra/web-app
+				// descriptors. CF-specific fields live under the kind's `adapterConfig` escape
+				// hatch (see infra-core/kinds/web-app.kind.ts). When `adapterConfig.cfProjectName`
+				// is set, it wins; otherwise the project name is derived from the descriptor id.
+				const resolver = () => {
+					if (runtime.hasKind('infra/web-app')) {
+						const apps = runtime.query('infra/web-app').descriptors() as Array<{
+							id: string;
+							config?: { cfProjectName?: string };
+						}>;
+						return apps.map((a) => {
+							const explicit = a.config?.cfProjectName;
+							return explicit ?? `vibes-${a.id.replace(/-app$/, '')}`;
+						});
+					}
+					return [];
+				};
+				return createCloudflareApiStore(resolver);
+			},
+			{ priority: 20, origin: 'infra-cloudflare' }
+		);
+
+		runtime.registerLoader(
+			'secrets/store',
+			'cloudflare-secrets-store',
+			async () => {
+				const { createCloudflareSecretsStore } = await import('./secrets/cloudflare-secrets-store.impl');
+				return createCloudflareSecretsStore();
+			},
+			{ priority: 30, origin: 'infra-cloudflare' }
+		);
+
+		runtime.registerLoader(
+			'infra/web-app',
+			'cloudflare-pages',
+			async () => {
+				return createPagesImpl({
+					kind: 'infra/web-app',
+					id: 'cloudflare-pages',
+					name: 'Cloudflare Pages',
+					adapter: 'cloudflare-workers',
+					cfProjectName: 'default-project',
+					outputDir: '.svelte-kit/cloudflare',
+					compatibilityFlags: ['nodejs_compat'],
+					env: {}
+				});
+			},
+			{ priority: 10, origin: 'infra-cloudflare' }
+		);
+
+		runtime.registerLoader(
+			'infra/web-app',
+			'cloudflare-web-app',
+			async () => {
+				return createWebAppImpl({
+					kind: 'infra/web-app',
+					id: 'cloudflare-web-app',
+					name: 'Cloudflare Workers + Static Assets',
+					adapter: 'cloudflare-workers',
+					cfWorkerName: 'default-worker',
+					outputDir: '.svelte-kit/cloudflare',
+					compatibilityFlags: ['nodejs_compat'],
+					env: {}
+				});
+			},
+			{ priority: 20, origin: 'infra-cloudflare' }
+		);
+
+		// Framework-level Cloudflare Logs descriptor. The list of workers to
+		// observe is *not* hardcoded here — that's app inventory, owned by
+		// each consumer's `deployment.config.ts`. CLI surfaces (e.g.
+		// `vibes infra logs`) discover sources from those configs and pass
+		// the requested worker name into the connector at call time.
+		runtime.registerLoader(
+			'infra/logs',
+			'cloudflare-logs',
+			async () => {
+				return createLogsImpl({
+					kind: 'infra/logs',
+					id: 'cloudflare-logs',
+					name: 'Cloudflare Logs',
+					adapter: 'cloudflare-logs',
+					adapterConfig: {
+						accountId: { source: 'secret', key: 'CLOUDFLARE_ACCOUNT_ID' },
+						apiToken: { source: 'secret', key: 'CLOUDFLARE_API_TOKEN' }
+					},
+					sources: [],
+					retention: {
+						hotDays: 7,
+						coldDays: 30
+					}
+				});
+			},
+			{ priority: 10, origin: 'infra-cloudflare' }
+		);
+
+		// infra/artifact: Cloudflare Worker wrangler.jsonc generator
+		runtime.registerDescriptor('infra/artifact', {
+			id: 'wrangler-jsonc',
+			kind: 'infra/artifact',
+			description: 'Generates wrangler.jsonc configuration from infra/worker descriptors'
+		});
+		runtime.registerLoader('infra/artifact', 'wrangler-jsonc', async () => {
+			return createRuntimeImplementation({
+				id: 'wrangler-toml',
+				kind: 'infra/artifact',
+				priority: 10,
+				implementation: {
+					async generate(context?: any) {
+						const resources = context?.resources || [];
+						const outputDir = context?.outputDir || './infra/generated';
+						const workerDescriptors = resources.filter((r: any) => r.kind === 'infra/worker');
+
+						if (workerDescriptors.length === 0) {
+							return {
+								content: '# No infra/worker descriptors found\n',
+								filename: 'wrangler.toml',
+								path: `${outputDir}/cloudflare/wrangler.toml`,
+								metadata: { sourceKind: 'infra/worker', format: 'toml', generator: 'wrangler-toml' }
+							};
+						}
+
+						const configs: string[] = [];
+						for (const descriptor of workerDescriptors) {
+							const parsed = CloudflareWorkerDescriptorSchema.parse(descriptor);
+							const config: WranglerWorkerConfig = generateCloudflareWorkerConfig(parsed);
+							const jsonContent = JSON.stringify(config, null, 2);
+							configs.push(`// Worker: ${descriptor.id}\n${jsonContent}`);
+						}
+
+						return {
+							content: configs.join('\n\n'),
+							filename: 'wrangler.jsonc',
+							path: `${outputDir}/cloudflare/wrangler.jsonc`,
+							metadata: { sourceKind: 'infra/worker', format: 'jsonc', generator: 'wrangler-jsonc' }
+						};
+					}
+				}
+			});
+		});
+	}
+});

package/src/implementations/alerts.descriptor.ts

@@ -0,0 +1,33 @@
+/**
+ * Default Cloudflare Alerts descriptor — registered at plugin load
+ * time so `runtime.assets('infra/alerts').descriptors()` returns at
+ * least one entry the moment the infra-cloudflare plugin is loaded.
+ *
+ * The descriptor only carries adapter identity + credential pointers;
+ * actual policy bodies live either on the provider (created via the
+ * CLI / dashboard) or in a sibling `account.config.ts` declarative file.
+ */
+
+import type { InfraAlertsDescriptor } from '@vibesdotdev/infra-core/kinds';
+
+const descriptor: InfraAlertsDescriptor = {
+	kind: 'infra/alerts',
+	id: 'cloudflare-alerts',
+	name: 'Cloudflare Alerts',
+	description: 'Cloudflare Notifications policies (billing, usage, error-rate)',
+	adapter: 'cloudflare-alerts',
+	adapterConfig: {
+		apiTokenEnvVar: 'CLOUDFLARE_NOTIFICATIONS_API_TOKEN',
+		apiTokenFallbackEnvVar: 'CLOUDFLARE_API_TOKEN',
+		accountIdEnvVar: 'CLOUDFLARE_ACCOUNT_ID'
+	},
+	// CLI ops resolve credentials from the LOCAL secrets vault by
+	// default. Production Workers that consume this adapter set the
+	// values via Cloudflare Secrets Store bindings — they never go
+	// through vibes secrets at runtime. CLI commands can pass
+	// `--environment` to read from a different vault.
+	environment: 'local',
+	policies: []
+};
+
+export default descriptor;