@vibesdotdev/infra-core 0.0.1 → 1.0.0-rc.4

package/dist/kinds/database.kind.js

@@ -3,17 +3,19 @@
  *
  * Describes a database instance.
  *
- * Schema shape: strict common base + `config` discriminated union.
+ * Schema shape: strict common base + an open, adapter-keyed `config`.
  *
  * - The base defines fields universal across adapters: id/kind/name +
  *   the database shape (engine, size, replicas, backups).
  * - Adapter-specific fields (namespace, storageSize, version, region, …)
- *   live under `config`. Each adapter package defines its own concrete schema.
+ *   live under an open `config` keyed by `adapter`. Each adapter package
+ *   defines and parses its own concrete schema.
  */
 import * as z from 'zod/v4';
-import { createRuntimeKind } from '@vibesdotdev/runtime/factory/kind';
-import { RuntimeDescriptorSchema } from '@vibesdotdev/runtime/schemas/descriptor';
-import { INFRA_DISCOVERY_PATTERN, extractStem } from "./discovery.js";
+import { createRuntimeKind } from '@vibesdotdev/kernel/factory/kind';
+import { RuntimeDescriptorSchema } from '@vibesdotdev/kernel/schemas/descriptor';
+import { readKindDescriptor } from "./read-descriptor.js";
+import { INFRA_DISCOVERY_PATTERNS } from "./discovery.js";
 export const DatabaseBackupSchema = z.object({
     enabled: z.boolean().default(false),
     schedule: z.string().optional(),
@@ -30,74 +32,111 @@ const DatabaseBaseSchema = RuntimeDescriptorSchema.extend({
     /** Backup configuration. */
     backups: DatabaseBackupSchema.optional()
 });
-export const DoksDatabaseConfigSchema = z.object({
-    /** Kubernetes namespace (default: vibes). */
-    namespace: z.string().min(1).default('vibes'),
-    /** Storage size for pgdata volume (default: 10Gi). */
-    storageSize: z.string().min(1).default('10Gi'),
-    /** Container resources. */
-    resources: z
+/** Range of source IPs/UUIDs that may reach the cluster. */
+export const TrustedSourceSchema = z.object({
+    /** Resource type (droplet, k8s, ip, tag, app). */
+    type: z.enum(['droplet', 'k8s', 'ip_addr', 'tag', 'app']),
+    /** Identifier — droplet id, cluster uuid, CIDR, tag name, or app id. */
+    value: z.string().min(1)
+});
+/** Storage autoscaling configuration. */
+export const StorageAutoscalingSchema = z.object({
+    enabled: z.boolean().default(true),
+    /** Trigger threshold as a percentage of provisioned storage. */
+    thresholdPercent: z.number().int().min(1).max(100).default(80),
+    /** Maximum disk size in GiB (0 = uncapped). */
+    maxSizeGib: z.number().int().nonnegative().default(0),
+    /** Step (percent of current size) to grow by. */
+    incrementPercent: z.number().int().min(1).max(100).default(20)
+});
+/** PgBouncer / direct pool configuration. */
+export const ConnectionPoolSchema = z.object({
+    name: z.string().min(1),
+    mode: z.enum(['transaction', 'session', 'statement']).default('transaction'),
+    size: z.number().int().positive(),
+    db: z.string().min(1),
+    user: z.string().min(1).optional()
+});
+/** Maintenance window — UTC day-of-week + HH:MM:SS. */
+export const MaintenanceWindowSchema = z.object({
+    day: z.enum([
+        'monday',
+        'tuesday',
+        'wednesday',
+        'thursday',
+        'friday',
+        'saturday',
+        'sunday'
+    ]),
+    hour: z
+        .string()
+        .regex(/^\d{2}:\d{2}(:\d{2})?$/, 'hour must be HH:MM or HH:MM:SS UTC')
+});
+/** Cluster-level metrics alert policy. */
+export const MetricsAlertSchema = z.object({
+    type: z.enum([
+        'cpu',
+        'memory',
+        'disk',
+        'load_15',
+        'load_5',
+        'load_1',
+        'replication_lag',
+        'kafka_disk',
+        'open_connections'
+    ]),
+    threshold: z.number(),
+    /** Comparator for threshold. */
+    compare: z.enum(['GreaterThan', 'LessThan']).default('GreaterThan'),
+    /** Sustained window before firing. */
+    window: z.enum(['5m', '10m', '30m', '1h']).default('10m'),
+    /** Notification channels — Slack webhook, email, or PagerDuty integration ids. */
+    notify: z
         .object({
-        requests: z.object({ cpu: z.string().min(1), memory: z.string().min(1) }).optional(),
-        limits: z.object({ cpu: z.string().min(1), memory: z.string().min(1) }).optional()
+        email: z.array(z.string().email()).optional(),
+        slackWebhook: z.string().url().optional(),
+        pagerdutyServiceId: z.string().min(1).optional()
     })
-        .optional(),
-    /** Postgres version tag (default: 16-alpine). */
-    version: z.string().min(1).default('16-alpine')
+        .optional()
 });
-export const DOManagedPostgresConfigSchema = z.object({
-    /** Database size tier (default: db-s-1vcpu-1gb). */
-    size: z.string().min(1).default('db-s-1vcpu-1gb'),
-    /** DO region (default: nyc1). */
-    region: z.string().min(1).default('nyc1'),
-    /** Postgres version (default: 16). */
-    version: z.string().min(1).default('16')
+/** Postgres extension to enable on the cluster (e.g., pgvector, postgis). */
+export const PostgresExtensionSchema = z.object({
+    name: z.string().min(1),
+    version: z.string().min(1).optional(),
+    schema: z.string().min(1).optional()
 });
-export const TursoDatabaseConfigSchema = z.object({
-    /** Turso database name (defaults to descriptor id). */
-    database: z.string().min(1).optional(),
-    /** Edge region for replication (default: aws:iad1). */
-    region: z.string().min(1).default('aws:iad1')
-});
-export const CloudflareD1ConfigSchema = z.object({
-    /** D1 adapter name (always 'cloudflare-d1'). */
-    adapter: z.literal('cloudflare-d1'),
-    /** Binding name for D1 in Cloudflare Workers (default: 'DB'). */
-    binding: z.string().min(1).default('DB'),
-    /** D1 database name. */
-    databaseName: z.string().min(1),
-    /** ID of the consuming app (for wrangler.jsonc generation). */
-    consumerAppId: z.string().min(1)
+/** Behavior when the cluster's major Postgres version reaches EOL. */
+export const MajorVersionUpgradePolicySchema = z.enum(['manual', 'auto']);
+/**
+ * Adapter-specific configuration: the adapter id plus its own fields. Each
+ * adapter package defines and parses its own config schema (Cloudflare D1's is
+ * `CloudflareD1DatabaseConfigSchema` in `@vibesdotdev/integrations-cloudflare`;
+ * DigitalOcean's DOKS/managed-postgres configs live in
+ * `@vibesdotdev/integrations-digitalocean`; a Turso adapter owns its config
+ * in its own integrations package); this kind names no provider.
+ */
+export const DatabaseConfigSchema = z.looseObject({
+    adapter: z.string().min(1)
 });
-export const DatabaseConfigSchema = z.union([
-    DoksDatabaseConfigSchema.extend({ adapter: z.literal('doks-statefulset') }),
-    DOManagedPostgresConfigSchema.extend({ adapter: z.literal('do-managed-postgres') }),
-    TursoDatabaseConfigSchema.extend({ adapter: z.literal('turso') }),
-    CloudflareD1ConfigSchema
-]);
 export const DatabaseDescriptorSchema = DatabaseBaseSchema.extend({
-    /**
-     * Adapter-specific configuration. Discriminated union — each adapter
-     * package defines its own config schema under its discriminator key.
-     */
+    /** Adapter-specific configuration, parsed by the adapter that owns it. */
     config: DatabaseConfigSchema.optional()
 });
 class DefaultDatabaseImplementation {
     descriptor;
     context;
+    /** The descriptor as this kind's schema reads it. */
+    config;
     constructor(descriptor, context) {
         this.descriptor = descriptor;
         this.context = context;
-    }
-    get config() {
-        return this.descriptor;
+        this.config = readKindDescriptor(DatabaseDescriptorSchema, descriptor);
     }
 }
 export const databaseKind = createRuntimeKind({
     id: 'infra/database',
     descriptorSchema: DatabaseDescriptorSchema,
     defaultImplementation: DefaultDatabaseImplementation,
-    discoveryPattern: INFRA_DISCOVERY_PATTERN,
-    extractStem
+    discoveryPatterns: INFRA_DISCOVERY_PATTERNS
 });
 //# sourceMappingURL=database.kind.js.map

package/dist/kinds/database.kind.js.map

@@ -1 +1 @@
-{"version":3,"file":"database.kind.js","sourceRoot":"","sources":["../../src/kinds/database.kind.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAC;AAEtE,OAAO,EAAE,uBAAuB,EAAE,MAAM,yCAAyC,CAAC;AAElF,OAAO,EAAE,uBAAuB,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAEtE,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACnC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAChC,CAAC,CAAC;AAGH,MAAM,kBAAkB,GAAG,uBAAuB,CAAC,MAAM,CAAC;IACzD,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC;IAEjC,mDAAmD;IACnD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAEpC,0BAA0B;IAC1B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAE3B,qBAAqB;IACrB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IAEnD,4BAA4B;IAC5B,OAAO,EAAE,oBAAoB,CAAC,QAAQ,EAAE;CACxC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,6CAA6C;IAC7C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IAC7C,sDAAsD;IACtD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IAC9C,2BAA2B;IAC3B,SAAS,EAAE,CAAC;SACV,MAAM,CAAC;QACP,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;QACpF,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;KAClF,CAAC;SACD,QAAQ,EAAE;IACZ,iDAAiD;IACjD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;CAC/C,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACrD,oDAAoD;IACpD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC;IACjD,iCAAiC;IACjC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IACzC,sCAAsC;IACtC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;CACxC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,uDAAuD;IACvD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACtC,uDAAuD;IACvD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;CAC7C,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,gDAAgD;IAChD,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC;IACnC,iEAAiE;IACjE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IACxC,wBAAwB;IACxB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,+DAA+D;IAC/D,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAChC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC;IAC3C,wBAAwB,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE,CAAC;IAC3E,6BAA6B,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC,EAAE,CAAC;IACnF,yBAAyB,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;IACjE,wBAAwB;CACxB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAG,kBAAkB,CAAC,MAAM,CAAC;IACjE;;;OAGG;IACH,MAAM,EAAE,oBAAoB,CAAC,QAAQ,EAAE;CACvC,CAAC,CAAC;AAIH,MAAM,6BAA6B;IAEjB;IACA;IAFjB,YACiB,UAA6B,EAC7B,OAAgB;QADhB,eAAU,GAAV,UAAU,CAAmB;QAC7B,YAAO,GAAP,OAAO,CAAS;IAC9B,CAAC;IAEJ,IAAI,MAAM;QACT,OAAO,IAAI,CAAC,UAAgC,CAAC;IAC9C,CAAC;CACD;AAED,MAAM,CAAC,MAAM,YAAY,GAAG,iBAAiB,CAAoD;IAChG,EAAE,EAAE,gBAAgB;IACpB,gBAAgB,EAAE,wBAAwB;IAC1C,qBAAqB,EAAE,6BAA6B;IACpD,gBAAgB,EAAE,uBAAuB;IACzC,WAAW;CACX,CAAC,CAAC"}
+{"version":3,"file":"database.kind.js","sourceRoot":"","sources":["../../src/kinds/database.kind.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AAGjF,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAE1D,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACnC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAChC,CAAC,CAAC;AAGH,MAAM,kBAAkB,GAAG,uBAAuB,CAAC,MAAM,CAAC;IACzD,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC;IAEjC,mDAAmD;IACnD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAEpC,0BAA0B;IAC1B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAE3B,qBAAqB;IACrB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IAEnD,4BAA4B;IAC5B,OAAO,EAAE,oBAAoB,CAAC,QAAQ,EAAE;CACxC,CAAC,CAAC;AAEH,4DAA4D;AAC5D,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,kDAAkD;IAClD,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IACzD,wEAAwE;IACxE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACxB,CAAC,CAAC;AAGH,yCAAyC;AACzC,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAClC,gEAAgE;IAChE,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC9D,+CAA+C;IAC/C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IACrD,iDAAiD;IACjD,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CAC9D,CAAC,CAAC;AAEH,6CAA6C;AAC7C,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;IAC5E,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACjC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAClC,CAAC,CAAC;AAEH,uDAAuD;AACvD,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC;QACX,QAAQ;QACR,SAAS;QACT,WAAW;QACX,UAAU;QACV,QAAQ;QACR,UAAU;QACV,QAAQ;KACR,CAAC;IACF,IAAI,EAAE,CAAC;SACL,MAAM,EAAE;SACR,KAAK,CAAC,wBAAwB,EAAE,oCAAoC,CAAC;CACvE,CAAC,CAAC;AAEH,0CAA0C;AAC1C,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;QACZ,KAAK;QACL,QAAQ;QACR,MAAM;QACN,SAAS;QACT,QAAQ;QACR,QAAQ;QACR,iBAAiB;QACjB,YAAY;QACZ,kBAAkB;KAClB,CAAC;IACF,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,gCAAgC;IAChC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;IACnE,sCAAsC;IACtC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IACzD,kFAAkF;IAClF,MAAM,EAAE,CAAC;SACP,MAAM,CAAC;QACP,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,QAAQ,EAAE;QAC7C,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;QACzC,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;KAChD,CAAC;SACD,QAAQ,EAAE;CACZ,CAAC,CAAC;AAEH,6EAA6E;AAC7E,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACrC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACpC,CAAC,CAAC;AAEH,sEAAsE;AACtE,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;AAE1E;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,WAAW,CAAC;IACjD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC1B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAG,kBAAkB,CAAC,MAAM,CAAC;IACjE,0EAA0E;IAC1E,MAAM,EAAE,oBAAoB,CAAC,QAAQ,EAAE;CACvC,CAAC,CAAC;AAIH,MAAM,6BAA6B;IAIjB;IACA;IAJjB,qDAAqD;IAC5C,MAAM,CAAqB;IACpC,YACiB,UAA6B,EAC7B,OAAoB;QADpB,eAAU,GAAV,UAAU,CAAmB;QAC7B,YAAO,GAAP,OAAO,CAAa;QAEpC,IAAI,CAAC,MAAM,GAAG,kBAAkB,CAAC,wBAAwB,EAAE,UAAU,CAAC,CAAC;IACxE,CAAC;CAED;AAED,MAAM,CAAC,MAAM,YAAY,GAAG,iBAAiB,CAAoD;IAChG,EAAE,EAAE,gBAAgB;IACpB,gBAAgB,EAAE,wBAAwB;IAC1C,qBAAqB,EAAE,6BAA6B;IACpD,iBAAiB,EAAE,wBAAwB;CAC3C,CAAC,CAAC"}

package/dist/kinds/deployment-provider.kind.d.ts

@@ -0,0 +1,5 @@
+import { type DeploymentProviderImplementation } from '../schemas/deployment-provider.ts';
+export { DeploymentProviderDescriptorSchema, type DeploymentProviderDescriptor } from '../schemas/deployment-provider.ts';
+/** Schema-only: every provider registers its own implementation, constructed with the resolving runtime. */
+export declare const deploymentProviderKind: import("@vibesdotdev/kernel").RuntimeKindDescriptorRecord<DeploymentProviderImplementation>;
+//# sourceMappingURL=deployment-provider.kind.d.ts.map

package/dist/kinds/deployment-provider.kind.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deployment-provider.kind.d.ts","sourceRoot":"","sources":["../../src/kinds/deployment-provider.kind.ts"],"names":[],"mappings":"AAEA,OAAO,EAGN,KAAK,gCAAgC,EACrC,MAAM,mCAAmC,CAAC;AAE3C,OAAO,EAAE,kCAAkC,EAAE,KAAK,4BAA4B,EAAE,MAAM,mCAAmC,CAAC;AAE1H,4GAA4G;AAC5G,eAAO,MAAM,sBAAsB,6FAIjC,CAAC"}

package/dist/kinds/deployment-provider.kind.js

@@ -0,0 +1,11 @@
+import { createRuntimeKind } from '@vibesdotdev/kernel';
+import { DeploymentProviderDescriptorSchema } from "../schemas/deployment-provider.js";
+import { INFRA_DISCOVERY_PATTERNS } from "./discovery.js";
+export { DeploymentProviderDescriptorSchema } from "../schemas/deployment-provider.js";
+/** Schema-only: every provider registers its own implementation, constructed with the resolving runtime. */
+export const deploymentProviderKind = createRuntimeKind({
+    id: 'infra/deployment-provider',
+    descriptorSchema: DeploymentProviderDescriptorSchema,
+    discoveryPatterns: INFRA_DISCOVERY_PATTERNS
+});
+//# sourceMappingURL=deployment-provider.kind.js.map

package/dist/kinds/deployment-provider.kind.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deployment-provider.kind.js","sourceRoot":"","sources":["../../src/kinds/deployment-provider.kind.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAqB,MAAM,qBAAqB,CAAC;AAE3E,OAAO,EACN,kCAAkC,EAGlC,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAC1D,OAAO,EAAE,kCAAkC,EAAqC,MAAM,mCAAmC,CAAC;AAE1H,4GAA4G;AAC5G,MAAM,CAAC,MAAM,sBAAsB,GAAG,iBAAiB,CAA4F;IAClJ,EAAE,EAAE,2BAA2B;IAC/B,gBAAgB,EAAE,kCAAkC;IACpD,iBAAiB,EAAE,wBAAwB;CAC3C,CAAC,CAAC"}

package/dist/kinds/discovery.d.ts

@@ -4,17 +4,10 @@
  * All infra kinds use the same discovery pattern for *.infra.ts files.
  */
 /**
- * Glob pattern for discovering infra resource declaration files.
+ * Package-relative discovery patterns for infra resource declaration files
+ * (rc02-rc03 §2.5): a package's own `*.infra.ts`, and `infra/*.infra.ts`. The
+ * kernel's one discovery pass matches them in every declared package of the
+ * bound workspace; nothing recurses and nothing binds by filename stem.
  */
-export declare const INFRA_DISCOVERY_PATTERN = "**/*.infra.ts";
-/**
- * Extract the stem (base name without extension) from an infra file.
- * Matches both .infra.ts and .infra.tsx extensions.
- *
- * @example
- * extractStem('auth.infra.ts') // 'auth'
- * extractStem('my-service.infra.tsx') // 'my-service'
- * extractStem('not-infra.ts') // null
- */
-export declare function extractStem(filename: string): string | null;
+export declare const INFRA_DISCOVERY_PATTERNS: readonly ["*.infra.ts", "infra/*.infra.ts"];
 //# sourceMappingURL=discovery.d.ts.map

package/dist/kinds/discovery.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"discovery.d.ts","sourceRoot":"","sources":["../../src/kinds/discovery.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;GAEG;AACH,eAAO,MAAM,uBAAuB,kBAAkB,CAAC;AAEvD;;;;;;;;GAQG;AACH,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAK3D"}
+{"version":3,"file":"discovery.d.ts","sourceRoot":"","sources":["../../src/kinds/discovery.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;;;;GAKG;AACH,eAAO,MAAM,wBAAwB,6CAA8C,CAAC"}

package/dist/kinds/discovery.js

@@ -4,22 +4,10 @@
  * All infra kinds use the same discovery pattern for *.infra.ts files.
  */
 /**
- * Glob pattern for discovering infra resource declaration files.
+ * Package-relative discovery patterns for infra resource declaration files
+ * (rc02-rc03 §2.5): a package's own `*.infra.ts`, and `infra/*.infra.ts`. The
+ * kernel's one discovery pass matches them in every declared package of the
+ * bound workspace; nothing recurses and nothing binds by filename stem.
  */
-export const INFRA_DISCOVERY_PATTERN = '**/*.infra.ts';
-/**
- * Extract the stem (base name without extension) from an infra file.
- * Matches both .infra.ts and .infra.tsx extensions.
- *
- * @example
- * extractStem('auth.infra.ts') // 'auth'
- * extractStem('my-service.infra.tsx') // 'my-service'
- * extractStem('not-infra.ts') // null
- */
-export function extractStem(filename) {
-    const match = filename.match(/^(.+)\.infra\.tsx?$/);
-    const stem = match ? match[1] : null;
-    // Return null for empty stem (e.g., '.infra.ts')
-    return stem && stem.length > 0 ? stem : null;
-}
+export const INFRA_DISCOVERY_PATTERNS = ['*.infra.ts', 'infra/*.infra.ts'];
 //# sourceMappingURL=discovery.js.map

package/dist/kinds/discovery.js.map

@@ -1 +1 @@
-{"version":3,"file":"discovery.js","sourceRoot":"","sources":["../../src/kinds/discovery.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,eAAe,CAAC;AAEvD;;;;;;;;GAQG;AACH,MAAM,UAAU,WAAW,CAAC,QAAgB;IAC3C,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACtC,iDAAiD;IACjD,OAAO,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AAC9C,CAAC"}
+{"version":3,"file":"discovery.js","sourceRoot":"","sources":["../../src/kinds/discovery.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,YAAY,EAAE,kBAAkB,CAAU,CAAC"}

package/dist/kinds/dns.kind.d.ts

@@ -0,0 +1,162 @@
+/**
+ * Infra DNS Kind
+ *
+ * Provider-agnostic schema for authoritative DNS records. Per-provider
+ * implementations (cloudflare-dns, do-domains, route53) map this shape
+ * onto the native API.
+ *
+ * `proxied` is modeled here rather than in the Cloudflare adapter because
+ * whether a hostname is served through a reverse proxy is a product
+ * decision with protocol consequences, not a vendor detail. Git over HTTP
+ * requires a direct origin; a proxied record silently breaks smart-HTTP
+ * pack negotiation. Providers without a proxy layer reject `proxied: true`
+ * as unsupported rather than accepting and ignoring it.
+ */
+import * as z from 'zod/v4';
+import type { InfraAuthorityFingerprint } from './inventory.kind.ts';
+declare const DnsRecordTypeSchema: z.ZodEnum<{
+    A: "A";
+    AAAA: "AAAA";
+    CNAME: "CNAME";
+    TXT: "TXT";
+    MX: "MX";
+    SRV: "SRV";
+    CAA: "CAA";
+    NS: "NS";
+}>;
+export type DnsRecordType = z.infer<typeof DnsRecordTypeSchema>;
+declare const DnsRecordSchema: z.ZodObject<{
+    name: z.ZodString;
+    type: z.ZodEnum<{
+        A: "A";
+        AAAA: "AAAA";
+        CNAME: "CNAME";
+        TXT: "TXT";
+        MX: "MX";
+        SRV: "SRV";
+        CAA: "CAA";
+        NS: "NS";
+    }>;
+    content: z.ZodString;
+    ttl: z.ZodDefault<z.ZodNumber>;
+    proxied: z.ZodDefault<z.ZodBoolean>;
+    priority: z.ZodOptional<z.ZodNumber>;
+    comment: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type DnsRecord = z.infer<typeof DnsRecordSchema>;
+export type DnsRecordInput = z.input<typeof DnsRecordSchema>;
+declare const DnsBaseSchema: z.ZodObject<{
+    id: z.ZodString;
+    name: z.ZodOptional<z.ZodString>;
+    description: z.ZodOptional<z.ZodString>;
+    tags: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    hardware: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    enabled: z.ZodOptional<z.ZodBoolean>;
+    priority: z.ZodOptional<z.ZodNumber>;
+    capabilityId: z.ZodOptional<z.ZodString>;
+    requiredContext: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    optionalContext: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    config: z.ZodOptional<z.ZodUnknown>;
+    retention: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+        maxAgeDays: z.ZodOptional<z.ZodNumber>;
+        maxEntries: z.ZodOptional<z.ZodNumber>;
+        maxBytes: z.ZodOptional<z.ZodNumber>;
+        cascadeFrom: z.ZodOptional<z.ZodString>;
+        ageField: z.ZodOptional<z.ZodString>;
+        reason: z.ZodString;
+        enforcedBy: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>]>>;
+    kind: z.ZodLiteral<"infra/dns">;
+    adapter: z.ZodString;
+    adapterConfig: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    zone: z.ZodOptional<z.ZodString>;
+    environment: z.ZodDefault<z.ZodString>;
+    records: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        type: z.ZodEnum<{
+            A: "A";
+            AAAA: "AAAA";
+            CNAME: "CNAME";
+            TXT: "TXT";
+            MX: "MX";
+            SRV: "SRV";
+            CAA: "CAA";
+            NS: "NS";
+        }>;
+        content: z.ZodString;
+        ttl: z.ZodDefault<z.ZodNumber>;
+        proxied: z.ZodDefault<z.ZodBoolean>;
+        priority: z.ZodOptional<z.ZodNumber>;
+        comment: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>>;
+}, z.core.$strip>;
+export type InfraDnsDescriptor = z.infer<typeof DnsBaseSchema>;
+export type InfraDnsDescriptorInput = z.input<typeof DnsBaseSchema>;
+/** A record as it exists on the provider, carrying the provider-assigned id. */
+export type LiveDnsRecord = DnsRecord & {
+    providerId: string;
+    zone: string;
+};
+export interface DnsZoneStatus {
+    zone: string;
+    status: string;
+    nameservers: string[];
+    activatedOn?: string;
+    modifiedOn?: string;
+}
+export interface DnsZoneActivationResult {
+    requested: boolean;
+    status: DnsZoneStatus;
+}
+/**
+ * Implementation contract every provider implements. `upsertRecord` is
+ * idempotent on (name, type): it updates the existing record in place
+ * rather than creating a duplicate RRset entry. Opt-in matchContent selects by
+ * exact content as well, creating a sibling when that value is absent. Callers
+ * must check supportsContentMatch before using this mode.
+ */
+export interface DnsImplementation {
+    /** Whether diff/upsert support preserving siblings by matching exact content. */
+    supportsContentMatch?: boolean;
+    /** Redacted authority used by the latest provider request. */
+    getAuthority?(): Promise<InfraAuthorityFingerprint>;
+    /** List records, optionally narrowed by exact name and/or type. */
+    listRecords(filter?: {
+        name?: string;
+        type?: DnsRecordType;
+    }): Promise<LiveDnsRecord[]>;
+    /** Create or update a record by (name, type). Returns the provider id. */
+    upsertRecord(record: DnsRecordInput, options?: {
+        matchContent?: boolean;
+    }): Promise<{
+        providerId: string;
+        created: boolean;
+    }>;
+    /** Delete by provider id. Absence is not an error. */
+    deleteRecord(providerId: string): Promise<boolean>;
+    /**
+     * Diff desired against live for the names in `desired`. Records outside
+     * that set are never reported for deletion — this kind is additive by
+     * default so it can coexist with records owned elsewhere.
+     */
+    diff(desired: DnsRecordInput[], options?: {
+        matchContent?: boolean;
+    }): Promise<{
+        create: DnsRecord[];
+        update: Array<{
+            providerId: string;
+            from: LiveDnsRecord;
+            to: DnsRecord;
+        }>;
+        unchanged: LiveDnsRecord[];
+    }>;
+    /** Read the authoritative zone's provider activation state. */
+    getZoneStatus?(): Promise<DnsZoneStatus>;
+    /** Request an immediate provider activation check for a pending zone. */
+    requestZoneActivation?(): Promise<DnsZoneActivationResult>;
+}
+export declare const dnsKind: import("@vibesdotdev/kernel").RuntimeKindDescriptorRecord<DnsImplementation>;
+export type InfraDnsKind = InfraDnsDescriptor;
+export type InfraDnsKindInput = InfraDnsDescriptorInput;
+export { DnsBaseSchema as InfraDnsDescriptorSchema, DnsRecordSchema, DnsRecordTypeSchema };
+//# sourceMappingURL=dns.kind.d.ts.map

package/dist/kinds/dns.kind.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dns.kind.d.ts","sourceRoot":"","sources":["../../src/kinds/dns.kind.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAI5B,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AAErE,QAAA,MAAM,mBAAmB;;;;;;;;;EAAkE,CAAC;AAE5F,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE,QAAA,MAAM,eAAe;;;;;;;;;;;;;;;;;iBAgBnB,CAAC;AAEH,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AACxD,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE7D,QAAA,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAUjB,CAAC;AAEH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAC/D,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAEpE,gFAAgF;AAChF,MAAM,MAAM,aAAa,GAAG,SAAS,GAAG;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAE7E,MAAM,WAAW,aAAa;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,uBAAuB;IACvC,SAAS,EAAE,OAAO,CAAC;IACnB,MAAM,EAAE,aAAa,CAAC;CACtB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,iBAAiB;IACjC,iFAAiF;IACjF,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,8DAA8D;IAC9D,YAAY,CAAC,IAAI,OAAO,CAAC,yBAAyB,CAAC,CAAC;IACpD,mEAAmE;IACnE,WAAW,CAAC,MAAM,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,aAAa,CAAA;KAAE,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC;IACxF,0EAA0E;IAC1E,YAAY,CAAC,MAAM,EAAE,cAAc,EAAE,OAAO,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAC9H,sDAAsD;IACtD,YAAY,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACnD;;;;OAIG;IACH,IAAI,CAAC,OAAO,EAAE,cAAc,EAAE,EAAE,OAAO,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC;QAC9E,MAAM,EAAE,SAAS,EAAE,CAAC;QACpB,MAAM,EAAE,KAAK,CAAC;YAAE,UAAU,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,aAAa,CAAC;YAAC,EAAE,EAAE,SAAS,CAAA;SAAE,CAAC,CAAC;QAC1E,SAAS,EAAE,aAAa,EAAE,CAAC;KAC3B,CAAC,CAAC;IACH,+DAA+D;IAC/D,aAAa,CAAC,IAAI,OAAO,CAAC,aAAa,CAAC,CAAC;IACzC,yEAAyE;IACzE,qBAAqB,CAAC,IAAI,OAAO,CAAC,uBAAuB,CAAC,CAAC;CAC3D;AAED,eAAO,MAAM,OAAO,8EAIlB,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,kBAAkB,CAAC;AAC9C,MAAM,MAAM,iBAAiB,GAAG,uBAAuB,CAAC;AAExD,OAAO,EAAE,aAAa,IAAI,wBAAwB,EAAE,eAAe,EAAE,mBAAmB,EAAE,CAAC"}

package/dist/kinds/dns.kind.js

@@ -0,0 +1,54 @@
+/**
+ * Infra DNS Kind
+ *
+ * Provider-agnostic schema for authoritative DNS records. Per-provider
+ * implementations (cloudflare-dns, do-domains, route53) map this shape
+ * onto the native API.
+ *
+ * `proxied` is modeled here rather than in the Cloudflare adapter because
+ * whether a hostname is served through a reverse proxy is a product
+ * decision with protocol consequences, not a vendor detail. Git over HTTP
+ * requires a direct origin; a proxied record silently breaks smart-HTTP
+ * pack negotiation. Providers without a proxy layer reject `proxied: true`
+ * as unsupported rather than accepting and ignoring it.
+ */
+import * as z from 'zod/v4';
+import { createRuntimeKind } from '@vibesdotdev/kernel/factory/kind';
+import { RuntimeDescriptorSchema } from '@vibesdotdev/kernel/schemas/descriptor';
+import { INFRA_DISCOVERY_PATTERNS } from "./discovery.js";
+const DnsRecordTypeSchema = z.enum(['A', 'AAAA', 'CNAME', 'TXT', 'MX', 'SRV', 'CAA', 'NS']);
+const DnsRecordSchema = z.object({
+    /** Fully-qualified record name (e.g. `git.vibes.dev`). */
+    name: z.string().min(1),
+    type: DnsRecordTypeSchema,
+    /** Record value: IP for A/AAAA, target for CNAME, payload for TXT. */
+    content: z.string().min(1),
+    /** TTL in seconds. `1` means "provider automatic" where supported. */
+    ttl: z.number().int().positive().default(1),
+    /**
+     * Serve through the provider's reverse proxy when true. Must be false
+     * for protocols the proxy cannot carry (git smart-HTTP, raw SSH).
+     */
+    proxied: z.boolean().default(false),
+    /** Priority for MX/SRV. */
+    priority: z.number().int().nonnegative().optional(),
+    comment: z.string().optional()
+});
+const DnsBaseSchema = RuntimeDescriptorSchema.extend({
+    kind: z.literal('infra/dns'),
+    /** Adapter id (e.g. 'cloudflare-dns', 'do-domains'). */
+    adapter: z.string().min(1),
+    adapterConfig: z.record(z.string(), z.unknown()).optional(),
+    /** Apex zone this descriptor is authoritative for (e.g. `vibes.dev`). */
+    zone: z.string().min(1).optional(),
+    /** Environment name for credential resolution via `vibes secrets`. */
+    environment: z.string().default('local'),
+    records: z.array(DnsRecordSchema).default([])
+});
+export const dnsKind = createRuntimeKind({
+    id: 'infra/dns',
+    descriptorSchema: DnsBaseSchema,
+    discoveryPatterns: INFRA_DISCOVERY_PATTERNS
+});
+export { DnsBaseSchema as InfraDnsDescriptorSchema, DnsRecordSchema, DnsRecordTypeSchema };
+//# sourceMappingURL=dns.kind.js.map

package/dist/kinds/dns.kind.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dns.kind.js","sourceRoot":"","sources":["../../src/kinds/dns.kind.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AACjF,OAAO,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAG1D,MAAM,mBAAmB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;AAI5F,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,0DAA0D;IAC1D,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,IAAI,EAAE,mBAAmB;IACzB,sEAAsE;IACtE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,sEAAsE;IACtE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3C;;;OAGG;IACH,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACnC,2BAA2B;IAC3B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IACnD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC9B,CAAC,CAAC;AAKH,MAAM,aAAa,GAAG,uBAAuB,CAAC,MAAM,CAAC;IACpD,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;IAC5B,wDAAwD;IACxD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,aAAa,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC3D,yEAAyE;IACzE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAClC,sEAAsE;IACtE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC;IACxC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CAC7C,CAAC,CAAC;AAuDH,MAAM,CAAC,MAAM,OAAO,GAAG,iBAAiB,CAAwC;IAC/E,EAAE,EAAE,WAAW;IACf,gBAAgB,EAAE,aAAa;IAC/B,iBAAiB,EAAE,wBAAwB;CAC3C,CAAC,CAAC;AAKH,OAAO,EAAE,aAAa,IAAI,wBAAwB,EAAE,eAAe,EAAE,mBAAmB,EAAE,CAAC"}