@vibesdotdev/infra-core 0.0.1 → 1.0.0-rc.4

package/dist/kinds/inventory.kind.d.ts

@@ -0,0 +1,326 @@
+/**
+ * Kind: infra/inventory
+ *
+ * Generic read-only inventory descriptor. Implementations enumerate provider
+ * resources without mutating them. Used by `vibes infra inventory` and
+ * provider-specific list/status commands.
+ */
+import * as z from 'zod/v4';
+import { CapabilityError, type ValueFreeFailure } from '@vibesdotdev/kernel';
+import type { RuntimeDescriptor } from '@vibesdotdev/kernel/schemas/descriptor';
+import type { KindContext } from '@vibesdotdev/kernel/schemas/kind';
+export declare const InventoryResourceSchema: z.ZodObject<{
+    id: z.ZodString;
+    kind: z.ZodString;
+    name: z.ZodOptional<z.ZodString>;
+    region: z.ZodOptional<z.ZodString>;
+    status: z.ZodOptional<z.ZodString>;
+    managedBy: z.ZodOptional<z.ZodString>;
+    tags: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    createdAt: z.ZodOptional<z.ZodString>;
+    raw: z.ZodOptional<z.ZodUnknown>;
+}, z.core.$strip>;
+export type InventoryResource = z.infer<typeof InventoryResourceSchema>;
+export declare const InfraProviderFailureSchema: z.ZodObject<{
+    code: z.ZodString;
+    message: z.ZodString;
+    retryable: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strip>;
+export type InfraProviderFailure = z.infer<typeof InfraProviderFailureSchema>;
+/**
+ * Provider-sanitized failure evidence as a typed `UNAVAILABLE
+ * infra-provider-failure`. The provider's own code stays on `failure.code`
+ * (and in details); the message is the provider's sanitized message.
+ */
+export declare class SanitizedInfraProviderError extends CapabilityError {
+    readonly failure: InfraProviderFailure;
+    constructor(failure: InfraProviderFailure, cause?: ValueFreeFailure);
+}
+export declare function createSanitizedInfraProviderError(failure: InfraProviderFailure, cause?: ValueFreeFailure): SanitizedInfraProviderError;
+export declare const InfraAuthorityFingerprintSchema: z.ZodObject<{
+    provider: z.ZodString;
+    requestedEnvironment: z.ZodString;
+    resolvedEnvironment: z.ZodString;
+    source: z.ZodString;
+    account: z.ZodString;
+    accountIdentity: z.ZodOptional<z.ZodString>;
+    capabilities: z.ZodArray<z.ZodString>;
+}, z.core.$strip>;
+export type InfraAuthorityFingerprint = z.infer<typeof InfraAuthorityFingerprintSchema>;
+/** Stable, provider-neutral text form for operator-facing inventory and audit output. */
+export declare function formatInfraAuthorityFingerprint(authority: InfraAuthorityFingerprint): string;
+/**
+ * Reconcile authority evidence emitted by several provider surfaces. Identity
+ * must be identical; capabilities are the honest union of operations actually
+ * requested by those surfaces.
+ */
+export declare function mergeInfraAuthorityFingerprints(authorities: readonly InfraAuthorityFingerprint[]): InfraAuthorityFingerprint | undefined;
+/**
+ * Convert arbitrary backend exceptions into bounded operator-safe evidence: a
+ * `SanitizedInfraProviderError` keeps its evidence; anything else is the fixed
+ * unreadable evidence (what it says is never repeated).
+ */
+export declare function sanitizeInfraProviderFailure<Caught>(error: Caught): InfraProviderFailure;
+export declare const InventoryDeclaredResourceSchema: z.ZodObject<{
+    kind: z.ZodString;
+    id: z.ZodString;
+    name: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type InventoryDeclaredResource = z.infer<typeof InventoryDeclaredResourceSchema>;
+export declare const InventorySnapshotSchema: z.ZodObject<{
+    provider: z.ZodString;
+    collectedAt: z.ZodString;
+    resources: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        kind: z.ZodString;
+        name: z.ZodOptional<z.ZodString>;
+        region: z.ZodOptional<z.ZodString>;
+        status: z.ZodOptional<z.ZodString>;
+        managedBy: z.ZodOptional<z.ZodString>;
+        tags: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        createdAt: z.ZodOptional<z.ZodString>;
+        raw: z.ZodOptional<z.ZodUnknown>;
+    }, z.core.$strip>>;
+    declarations: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        kind: z.ZodString;
+        id: z.ZodString;
+        name: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>>;
+    authority: z.ZodOptional<z.ZodObject<{
+        provider: z.ZodString;
+        requestedEnvironment: z.ZodString;
+        resolvedEnvironment: z.ZodString;
+        source: z.ZodString;
+        account: z.ZodString;
+        accountIdentity: z.ZodOptional<z.ZodString>;
+        capabilities: z.ZodArray<z.ZodString>;
+    }, z.core.$strip>>;
+    credentialPath: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type InventorySnapshot = z.infer<typeof InventorySnapshotSchema>;
+export declare const InventoryWorkspaceSourcesSchema: z.ZodObject<{
+    deploymentProviders: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    workerAdapters: z.ZodDefault<z.ZodArray<z.ZodString>>;
+}, z.core.$strip>;
+export type InventoryWorkspaceSources = z.infer<typeof InventoryWorkspaceSourcesSchema>;
+export declare const InventoryWorkspaceSchema: z.ZodObject<{
+    deployments: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        provider: z.ZodString;
+        unitName: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>>>;
+    workers: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        name: z.ZodOptional<z.ZodString>;
+        description: z.ZodOptional<z.ZodString>;
+        tags: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        hardware: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        enabled: z.ZodOptional<z.ZodBoolean>;
+        priority: z.ZodOptional<z.ZodNumber>;
+        capabilityId: z.ZodOptional<z.ZodString>;
+        requiredContext: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        optionalContext: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        retention: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+            maxAgeDays: z.ZodOptional<z.ZodNumber>;
+            maxEntries: z.ZodOptional<z.ZodNumber>;
+            maxBytes: z.ZodOptional<z.ZodNumber>;
+            cascadeFrom: z.ZodOptional<z.ZodString>;
+            ageField: z.ZodOptional<z.ZodString>;
+            reason: z.ZodString;
+            enforcedBy: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>]>>;
+        kind: z.ZodLiteral<"infra/worker">;
+        entrypoint: z.ZodOptional<z.ZodString>;
+        queues: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        concurrency: z.ZodOptional<z.ZodNumber>;
+        scaling: z.ZodOptional<z.ZodObject<{
+            min: z.ZodDefault<z.ZodNumber>;
+            max: z.ZodDefault<z.ZodNumber>;
+            cpu: z.ZodOptional<z.ZodString>;
+            memory: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+        runtime: z.ZodOptional<z.ZodObject<{
+            scope: z.ZodObject<{
+                surface: z.ZodEnum<{
+                    agent: "agent";
+                    browser: "browser";
+                    ssr: "ssr";
+                    cli: "cli";
+                    tui: "tui";
+                    worker: "worker";
+                    mcp: "mcp";
+                    bridge: "bridge";
+                }>;
+                hardware: z.ZodEnum<{
+                    consumer: "consumer";
+                    cloud: "cloud";
+                }>;
+                purpose: z.ZodEnum<{
+                    agent: "agent";
+                    worker: "worker";
+                    mcp: "mcp";
+                    direct: "direct";
+                    projection: "projection";
+                }>;
+                lifecycle: z.ZodEnum<{
+                    finite: "finite";
+                    persistent: "persistent";
+                }>;
+                hosting: z.ZodObject<{
+                    mode: z.ZodUnion<readonly [z.ZodEnum<{
+                        local: "local";
+                        hosted: "hosted";
+                        "managed-cloud": "managed-cloud";
+                    }>, z.ZodString]>;
+                    owner: z.ZodUnion<readonly [z.ZodEnum<{
+                        consumer: "consumer";
+                        customer: "customer";
+                        vibes: "vibes";
+                    }>, z.ZodString]>;
+                    venue: z.ZodOptional<z.ZodUnion<readonly [z.ZodEnum<{
+                        "user-device": "user-device";
+                        "ipc-worker": "ipc-worker";
+                        doks: "doks";
+                        "cloudflare-workers": "cloudflare-workers";
+                        "digitalocean-functions": "digitalocean-functions";
+                    }>, z.ZodString]>>;
+                    provider: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>;
+                qualifiers: z.ZodObject<{
+                    dev: z.ZodBoolean;
+                    building: z.ZodOptional<z.ZodBoolean>;
+                    environmentTier: z.ZodOptional<z.ZodEnum<{
+                        local: "local";
+                        dev: "dev";
+                        staging: "staging";
+                        production: "production";
+                    }>>;
+                    profile: z.ZodOptional<z.ZodString>;
+                    os: z.ZodOptional<z.ZodString>;
+                    cef: z.ZodOptional<z.ZodBoolean>;
+                    trustedOrigin: z.ZodOptional<z.ZodString>;
+                    rendererGeneration: z.ZodOptional<z.ZodNumber>;
+                    filesystem: z.ZodOptional<z.ZodString>;
+                    browserBackend: z.ZodOptional<z.ZodString>;
+                    workspaceSessionId: z.ZodOptional<z.ZodString>;
+                    workspaceTarget: z.ZodOptional<z.ZodString>;
+                    repositoryId: z.ZodOptional<z.ZodString>;
+                    remoteHostId: z.ZodOptional<z.ZodString>;
+                    connectionMode: z.ZodOptional<z.ZodString>;
+                    outreachExportsDir: z.ZodOptional<z.ZodString>;
+                    serve: z.ZodOptional<z.ZodString>;
+                    hotReload: z.ZodOptional<z.ZodEnum<{
+                        on: "on";
+                        off: "off";
+                    }>>;
+                    loaderTimeoutMs: z.ZodOptional<z.ZodNumber>;
+                }, z.core.$strict>;
+                capabilities: z.ZodOptional<z.ZodObject<{
+                    requestPrincipals: z.ZodOptional<z.ZodBoolean>;
+                    interactiveSession: z.ZodOptional<z.ZodBoolean>;
+                    hostCredentials: z.ZodOptional<z.ZodBoolean>;
+                    sharedHost: z.ZodOptional<z.ZodBoolean>;
+                }, z.core.$strict>>;
+                workspace: z.ZodOptional<z.ZodObject<{
+                    root: z.ZodOptional<z.ZodString>;
+                    access: z.ZodOptional<z.ZodEnum<{
+                        read: "read";
+                        write: "write";
+                    }>>;
+                }, z.core.$strict>>;
+                tenancy: z.ZodOptional<z.ZodObject<{
+                    ownerType: z.ZodEnum<{
+                        user: "user";
+                        organization: "organization";
+                        team: "team";
+                        system: "system";
+                    }>;
+                    ownerId: z.ZodString;
+                    teamId: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>>;
+                actor: z.ZodOptional<z.ZodObject<{
+                    agentId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                    harness: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                    agentSystemId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                    harnessSessionId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                    userId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                    orgId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                    projectId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                    teamId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                    home: z.ZodOptional<z.ZodEnum<{
+                        user: "user";
+                        organization: "organization";
+                        team: "team";
+                    }>>;
+                    projectIds: z.ZodOptional<z.ZodReadonly<z.ZodArray<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>>>;
+                    participantId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                    sessionId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                }, z.core.$strip>>;
+            }, z.core.$strip>;
+            adapter: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+        env: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            name: z.ZodString;
+            public: z.ZodOptional<z.ZodBoolean>;
+            required: z.ZodOptional<z.ZodBoolean>;
+            value: z.ZodOptional<z.ZodString>;
+            secret: z.ZodOptional<z.ZodBoolean>;
+            description: z.ZodOptional<z.ZodString>;
+            storeKey: z.ZodOptional<z.ZodString>;
+            storeBinding: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strip>>>;
+        config: z.ZodOptional<z.ZodObject<{
+            adapter: z.ZodString;
+        }, z.core.$loose>>;
+    }, z.core.$strip>>>;
+}, z.core.$strip>;
+export type InventoryWorkspace = z.infer<typeof InventoryWorkspaceSchema>;
+export declare const InventoryDescriptorSchema: z.ZodObject<{
+    id: z.ZodString;
+    name: z.ZodOptional<z.ZodString>;
+    description: z.ZodOptional<z.ZodString>;
+    tags: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    hardware: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    enabled: z.ZodOptional<z.ZodBoolean>;
+    priority: z.ZodOptional<z.ZodNumber>;
+    capabilityId: z.ZodOptional<z.ZodString>;
+    requiredContext: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    optionalContext: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    config: z.ZodOptional<z.ZodUnknown>;
+    retention: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+        maxAgeDays: z.ZodOptional<z.ZodNumber>;
+        maxEntries: z.ZodOptional<z.ZodNumber>;
+        maxBytes: z.ZodOptional<z.ZodNumber>;
+        cascadeFrom: z.ZodOptional<z.ZodString>;
+        ageField: z.ZodOptional<z.ZodString>;
+        reason: z.ZodString;
+        enforcedBy: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>]>>;
+    kind: z.ZodLiteral<"infra/inventory">;
+    provider: z.ZodOptional<z.ZodString>;
+    providerAliases: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    resourceKinds: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    workspaceSources: z.ZodOptional<z.ZodObject<{
+        deploymentProviders: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        workerAdapters: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type InventoryDescriptor = z.infer<typeof InventoryDescriptorSchema>;
+export interface InventoryImplementation {
+    /** Enumerate resources for one or all configured resource kinds. */
+    collect(opts?: {
+        kinds?: string[];
+        workspace?: InventoryWorkspace;
+    }): Promise<InventorySnapshot>;
+    /** Optional owner-provided audit advice for a sanitized failure message. */
+    auditDiagnostic?(message: string): string;
+}
+declare class DefaultInventoryImplementation {
+    readonly descriptor: RuntimeDescriptor;
+    readonly context: KindContext;
+    /** The descriptor as this kind's schema reads it. */
+    readonly config: InventoryDescriptor;
+    constructor(descriptor: RuntimeDescriptor, context: KindContext);
+}
+export declare const inventoryKind: import("@vibesdotdev/kernel").RuntimeKindDescriptorRecord<DefaultInventoryImplementation>;
+export {};
+//# sourceMappingURL=inventory.kind.d.ts.map

package/dist/kinds/inventory.kind.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inventory.kind.d.ts","sourceRoot":"","sources":["../../src/kinds/inventory.kind.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,OAAO,EACL,eAAe,EAGf,KAAK,gBAAgB,EACtB,MAAM,qBAAqB,CAAC;AAG7B,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wCAAwC,CAAC;AAChF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AAKpE,eAAO,MAAM,uBAAuB;;;;;;;;;;iBAUlC,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE,eAAO,MAAM,0BAA0B;;;;iBAIrC,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAoB9E;;;;GAIG;AACH,qBAAa,2BAA4B,SAAQ,eAAe;IAC/D,QAAQ,CAAC,OAAO,EAAE,oBAAoB,CAAC;gBAE3B,OAAO,EAAE,oBAAoB,EAAE,KAAK,CAAC,EAAE,gBAAgB;CAYnE;AAED,wBAAgB,iCAAiC,CAChD,OAAO,EAAE,oBAAoB,EAC7B,KAAK,CAAC,EAAE,gBAAgB,GACtB,2BAA2B,CAE7B;AAED,eAAO,MAAM,+BAA+B;;;;;;;;iBAS1C,CAAC;AACH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AAExF,yFAAyF;AACzF,wBAAgB,+BAA+B,CAAC,SAAS,EAAE,yBAAyB,GAAG,MAAM,CAU5F;AAED;;;;GAIG;AACH,wBAAgB,+BAA+B,CAC9C,WAAW,EAAE,SAAS,yBAAyB,EAAE,GAC/C,yBAAyB,GAAG,SAAS,CA+BvC;AAED;;;;GAIG;AACH,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,oBAAoB,CAGxF;AAED,eAAO,MAAM,+BAA+B;;;;iBAI1C,CAAC;AACH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AAExF,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAQlC,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE,eAAO,MAAM,+BAA+B;;;iBAG1C,CAAC;AACH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AAExF,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAMnC,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAU1E,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAAsB,CAAC;AAC7D,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E,MAAM,WAAW,uBAAuB;IACvC,oEAAoE;IACpE,OAAO,CAAC,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,SAAS,CAAC,EAAE,kBAAkB,CAAA;KAAE,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACjG,4EAA4E;IAC5E,eAAe,CAAC,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC;CAC1C;AAED,cAAM,8BAA8B;aAIlB,UAAU,EAAE,iBAAiB;aAC7B,OAAO,EAAE,WAAW;IAJrC,qDAAqD;IACrD,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;gBAEpB,UAAU,EAAE,iBAAiB,EAC7B,OAAO,EAAE,WAAW;CAKrC;AAED,eAAO,MAAM,aAAa,2FAOzB,CAAC"}

package/dist/kinds/inventory.kind.js

@@ -0,0 +1,188 @@
+/**
+ * Kind: infra/inventory
+ *
+ * Generic read-only inventory descriptor. Implementations enumerate provider
+ * resources without mutating them. Used by `vibes infra inventory` and
+ * provider-specific list/status commands.
+ */
+import * as z from 'zod/v4';
+import { settleUntrusted } from '@vibesdotdev/config/manifest/read-untrusted';
+import { CapabilityError, CaughtFailureSchema } from '@vibesdotdev/kernel';
+import { createRuntimeKind } from '@vibesdotdev/kernel/factory/kind';
+import { RuntimeDescriptorSchema } from '@vibesdotdev/kernel/schemas/descriptor';
+import { readKindDescriptor } from "./read-descriptor.js";
+import { INFRA_DISCOVERY_PATTERNS } from "./discovery.js";
+import { WorkerDescriptorSchema } from "./worker.kind.js";
+export const InventoryResourceSchema = z.object({
+    id: z.string(),
+    kind: z.string(),
+    name: z.string().optional(),
+    region: z.string().optional(),
+    status: z.string().optional(),
+    managedBy: z.string().optional(),
+    tags: z.array(z.string()).optional(),
+    createdAt: z.string().optional(),
+    raw: z.unknown().optional()
+});
+export const InfraProviderFailureSchema = z.object({
+    code: z.string(),
+    message: z.string(),
+    retryable: z.boolean().optional()
+});
+const FAILURE_UNREADABLE = {
+    code: 'INVALID_INPUT',
+    reason: 'infra-provider-failure-unreadable',
+    message: () => 'Provider failure evidence does not read.'
+};
+/** The evidence a failure that does not read as `InfraProviderFailure` is carried as. */
+const UNREADABLE_FAILURE = {
+    code: 'PROVIDER_UNAVAILABLE',
+    message: 'Provider operation failed; inspect the provider-specific sanitized diagnostics.'
+};
+/** `failure` as the schema reads it; one that does not read (or throws when read) is the fixed unreadable evidence. */
+function readFailure(failure) {
+    const read = settleUntrusted(InfraProviderFailureSchema, () => failure, FAILURE_UNREADABLE);
+    return read.ok ? read.data : UNREADABLE_FAILURE;
+}
+/**
+ * Provider-sanitized failure evidence as a typed `UNAVAILABLE
+ * infra-provider-failure`. The provider's own code stays on `failure.code`
+ * (and in details); the message is the provider's sanitized message.
+ */
+export class SanitizedInfraProviderError extends CapabilityError {
+    failure;
+    constructor(failure, cause) {
+        const parsed = readFailure(failure);
+        const options = {
+            reason: 'infra-provider-failure',
+            retryable: parsed.retryable,
+            details: { providerCode: parsed.code }
+        };
+        if (cause !== undefined)
+            options.cause = cause;
+        super(parsed.message, 'UNAVAILABLE', options);
+        this.name = 'SanitizedInfraProviderError';
+        this.failure = parsed;
+    }
+}
+export function createSanitizedInfraProviderError(failure, cause) {
+    return new SanitizedInfraProviderError(failure, cause);
+}
+export const InfraAuthorityFingerprintSchema = z.object({
+    provider: z.string().min(1),
+    requestedEnvironment: z.string().min(1),
+    resolvedEnvironment: z.string().min(1),
+    source: z.string().min(1),
+    account: z.string().min(1),
+    /** Stable, non-display digest used to compare identities hidden by redaction. */
+    accountIdentity: z.string().regex(/^sha256:[a-f0-9]{64}$/).optional(),
+    capabilities: z.array(z.string().min(1))
+});
+/** Stable, provider-neutral text form for operator-facing inventory and audit output. */
+export function formatInfraAuthorityFingerprint(authority) {
+    const parsed = InfraAuthorityFingerprintSchema.parse(authority);
+    return [
+        `provider=${parsed.provider}`,
+        `requested=${parsed.requestedEnvironment}`,
+        `resolved=${parsed.resolvedEnvironment}`,
+        `source=${parsed.source}`,
+        `account=${parsed.account}`,
+        `capabilities=${[...parsed.capabilities].sort().join(',')}`
+    ].join(' ');
+}
+/**
+ * Reconcile authority evidence emitted by several provider surfaces. Identity
+ * must be identical; capabilities are the honest union of operations actually
+ * requested by those surfaces.
+ */
+export function mergeInfraAuthorityFingerprints(authorities) {
+    if (authorities.length === 0)
+        return undefined;
+    const parsed = authorities.map((authority) => InfraAuthorityFingerprintSchema.parse(authority));
+    const [first, ...rest] = parsed;
+    if (parsed.length > 1 && parsed.some((authority) => !authority.accountIdentity)) {
+        throw createSanitizedInfraProviderError({
+            code: 'INFRA_AUTHORITY_DIVERGENCE',
+            message: 'Infrastructure provider surfaces resolved different operator authorities.',
+            retryable: false
+        });
+    }
+    for (const authority of rest) {
+        if (authority.provider !== first.provider ||
+            authority.requestedEnvironment !== first.requestedEnvironment ||
+            authority.resolvedEnvironment !== first.resolvedEnvironment ||
+            authority.source !== first.source ||
+            authority.account !== first.account ||
+            authority.accountIdentity !== first.accountIdentity) {
+            throw createSanitizedInfraProviderError({
+                code: 'INFRA_AUTHORITY_DIVERGENCE',
+                message: 'Infrastructure provider surfaces resolved different operator authorities.',
+                retryable: false
+            });
+        }
+    }
+    return InfraAuthorityFingerprintSchema.parse({
+        ...first,
+        capabilities: [...new Set(parsed.flatMap((authority) => authority.capabilities))].sort()
+    });
+}
+/**
+ * Convert arbitrary backend exceptions into bounded operator-safe evidence: a
+ * `SanitizedInfraProviderError` keeps its evidence; anything else is the fixed
+ * unreadable evidence (what it says is never repeated).
+ */
+export function sanitizeInfraProviderFailure(error) {
+    const caught = CaughtFailureSchema.parse(error);
+    return caught instanceof SanitizedInfraProviderError ? caught.failure : UNREADABLE_FAILURE;
+}
+export const InventoryDeclaredResourceSchema = z.object({
+    kind: z.string().min(1),
+    id: z.string().min(1),
+    name: z.string().min(1).optional()
+});
+export const InventorySnapshotSchema = z.object({
+    provider: z.string(),
+    collectedAt: z.string(),
+    resources: z.array(InventoryResourceSchema),
+    declarations: z.array(InventoryDeclaredResourceSchema).optional(),
+    authority: InfraAuthorityFingerprintSchema.optional(),
+    /** Credential-route evidence only; never includes a credential value or key material. */
+    credentialPath: z.string().min(1).optional()
+});
+export const InventoryWorkspaceSourcesSchema = z.object({
+    deploymentProviders: z.array(z.string().min(1)).default([]),
+    workerAdapters: z.array(z.string().min(1)).default([])
+});
+export const InventoryWorkspaceSchema = z.object({
+    deployments: z.array(z.object({
+        provider: z.string().min(1),
+        unitName: z.string().nullable()
+    })).default([]),
+    workers: z.array(WorkerDescriptorSchema).default([])
+});
+const InventoryBaseSchema = RuntimeDescriptorSchema.extend({
+    kind: z.literal('infra/inventory'),
+    provider: z.string().min(1).optional(),
+    providerAliases: z.array(z.string().min(1)).optional(),
+    resourceKinds: z.array(z.string()).optional(),
+    workspaceSources: InventoryWorkspaceSourcesSchema.optional()
+});
+export const InventoryDescriptorSchema = InventoryBaseSchema;
+class DefaultInventoryImplementation {
+    descriptor;
+    context;
+    /** The descriptor as this kind's schema reads it. */
+    config;
+    constructor(descriptor, context) {
+        this.descriptor = descriptor;
+        this.context = context;
+        this.config = readKindDescriptor(InventoryDescriptorSchema, descriptor);
+    }
+}
+export const inventoryKind = createRuntimeKind({
+    id: 'infra/inventory',
+    descriptorSchema: InventoryDescriptorSchema,
+    defaultImplementation: DefaultInventoryImplementation,
+    discoveryPatterns: INFRA_DISCOVERY_PATTERNS
+});
+//# sourceMappingURL=inventory.kind.js.map

package/dist/kinds/inventory.kind.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inventory.kind.js","sourceRoot":"","sources":["../../src/kinds/inventory.kind.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,eAAe,EAA6B,MAAM,6CAA6C,CAAC;AACzG,OAAO,EACL,eAAe,EACf,mBAAmB,EAGpB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AAGjF,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAC1D,OAAO,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAE1D,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACpC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAC3B,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC;AAGH,MAAM,kBAAkB,GAAyB;IAChD,IAAI,EAAE,eAAe;IACrB,MAAM,EAAE,mCAAmC;IAC3C,OAAO,EAAE,GAAG,EAAE,CAAC,0CAA0C;CACzD,CAAC;AAEF,yFAAyF;AACzF,MAAM,kBAAkB,GAAyB;IAChD,IAAI,EAAE,sBAAsB;IAC5B,OAAO,EAAE,iFAAiF;CAC1F,CAAC;AAEF,uHAAuH;AACvH,SAAS,WAAW,CAAC,OAA6B;IACjD,MAAM,IAAI,GAAG,eAAe,CAAC,0BAA0B,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;IAC5F,OAAO,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,kBAAkB,CAAC;AACjD,CAAC;AAED;;;;GAIG;AACH,MAAM,OAAO,2BAA4B,SAAQ,eAAe;IACtD,OAAO,CAAuB;IAEvC,YAAY,OAA6B,EAAE,KAAwB;QAClE,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;QACpC,MAAM,OAAO,GAA2B;YACvC,MAAM,EAAE,wBAAwB;YAChC,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,OAAO,EAAE,EAAE,YAAY,EAAE,MAAM,CAAC,IAAI,EAAE;SACtC,CAAC;QACF,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC;QAC/C,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,EAAE,OAAO,CAAC,CAAC;QAC9C,IAAI,CAAC,IAAI,GAAG,6BAA6B,CAAC;QAC1C,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;IACvB,CAAC;CACD;AAED,MAAM,UAAU,iCAAiC,CAChD,OAA6B,EAC7B,KAAwB;IAExB,OAAO,IAAI,2BAA2B,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC,MAAM,CAAC;IACvD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvC,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACtC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,iFAAiF;IACjF,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,QAAQ,EAAE;IACrE,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;CACxC,CAAC,CAAC;AAGH,yFAAyF;AACzF,MAAM,UAAU,+BAA+B,CAAC,SAAoC;IACnF,MAAM,MAAM,GAAG,+BAA+B,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAChE,OAAO;QACN,YAAY,MAAM,CAAC,QAAQ,EAAE;QAC7B,aAAa,MAAM,CAAC,oBAAoB,EAAE;QAC1C,YAAY,MAAM,CAAC,mBAAmB,EAAE;QACxC,UAAU,MAAM,CAAC,MAAM,EAAE;QACzB,WAAW,MAAM,CAAC,OAAO,EAAE;QAC3B,gBAAgB,CAAC,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;KAC3D,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,+BAA+B,CAC9C,WAAiD;IAEjD,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC/C,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,+BAA+B,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;IAChG,MAAM,CAAC,KAAK,EAAE,GAAG,IAAI,CAAC,GAAG,MAAM,CAAC;IAChC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,EAAE,CAAC;QACjF,MAAM,iCAAiC,CAAC;YACvC,IAAI,EAAE,4BAA4B;YAClC,OAAO,EAAE,2EAA2E;YACpF,SAAS,EAAE,KAAK;SAChB,CAAC,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,SAAS,IAAI,IAAI,EAAE,CAAC;QAC9B,IACC,SAAS,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ;YACrC,SAAS,CAAC,oBAAoB,KAAK,KAAK,CAAC,oBAAoB;YAC7D,SAAS,CAAC,mBAAmB,KAAK,KAAK,CAAC,mBAAmB;YAC3D,SAAS,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;YACjC,SAAS,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;YACnC,SAAS,CAAC,eAAe,KAAK,KAAK,CAAC,eAAe,EAClD,CAAC;YACF,MAAM,iCAAiC,CAAC;gBACvC,IAAI,EAAE,4BAA4B;gBAClC,OAAO,EAAE,2EAA2E;gBACpF,SAAS,EAAE,KAAK;aAChB,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;IACD,OAAO,+BAA+B,CAAC,KAAK,CAAC;QAC5C,GAAG,KAAK;QACR,YAAY,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE;KACxF,CAAC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,4BAA4B,CAAS,KAAa;IACjE,MAAM,MAAM,GAAG,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAChD,OAAO,MAAM,YAAY,2BAA2B,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,kBAAkB,CAAC;AAC5F,CAAC;AAED,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC,MAAM,CAAC;IACvD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAClC,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC;IAC3C,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC,QAAQ,EAAE;IACjE,SAAS,EAAE,+BAA+B,CAAC,QAAQ,EAAE;IACrD,yFAAyF;IACzF,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC5C,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC,MAAM,CAAC;IACvD,mBAAmB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC3D,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACtD,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QAC7B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC/B,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACf,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACpD,CAAC,CAAC;AAGH,MAAM,mBAAmB,GAAG,uBAAuB,CAAC,MAAM,CAAC;IAC1D,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC;IAClC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACtC,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACtD,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC7C,gBAAgB,EAAE,+BAA+B,CAAC,QAAQ,EAAE;CAC5D,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,yBAAyB,GAAG,mBAAmB,CAAC;AAU7D,MAAM,8BAA8B;IAIlB;IACA;IAJjB,qDAAqD;IAC5C,MAAM,CAAsB;IACrC,YACiB,UAA6B,EAC7B,OAAoB;QADpB,eAAU,GAAV,UAAU,CAAmB;QAC7B,YAAO,GAAP,OAAO,CAAa;QAEpC,IAAI,CAAC,MAAM,GAAG,kBAAkB,CAAC,yBAAyB,EAAE,UAAU,CAAC,CAAC;IACzE,CAAC;CAED;AAED,MAAM,CAAC,MAAM,aAAa,GAAG,iBAAiB,CAC7C;IACC,EAAE,EAAE,iBAAiB;IACrB,gBAAgB,EAAE,yBAAyB;IAC3C,qBAAqB,EAAE,8BAA8B;IACrD,iBAAiB,EAAE,wBAAwB;CAC3C,CACD,CAAC"}

package/dist/kinds/load-balancer.kind.d.ts

@@ -0,0 +1,135 @@
+/**
+ * Kind: infra/load-balancer
+ *
+ * Provider-neutral load balancer descriptor.
+ *
+ * `config` is an open, adapter-keyed shape (DigitalOcean's load balancer
+ * config lives in `@vibesdotdev/integrations-digitalocean`); this kind
+ * names no provider, so a config for any adapter parses here and the
+ * adapter validates its own grammar.
+ */
+import * as z from 'zod/v4';
+import type { RuntimeDescriptor } from '@vibesdotdev/kernel/schemas/descriptor';
+import type { KindContext } from '@vibesdotdev/kernel/schemas/kind';
+export declare const LoadBalancerForwardingRuleSchema: z.ZodObject<{
+    entryProtocol: z.ZodEnum<{
+        tcp: "tcp";
+        http: "http";
+        udp: "udp";
+        https: "https";
+        http2: "http2";
+        http3: "http3";
+    }>;
+    entryPort: z.ZodNumber;
+    targetProtocol: z.ZodEnum<{
+        tcp: "tcp";
+        http: "http";
+        udp: "udp";
+        https: "https";
+        http2: "http2";
+    }>;
+    targetPort: z.ZodNumber;
+    certificateId: z.ZodOptional<z.ZodString>;
+    tlsPassthrough: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strip>;
+export type LoadBalancerForwardingRule = z.infer<typeof LoadBalancerForwardingRuleSchema>;
+export declare const LoadBalancerHealthCheckSchema: z.ZodObject<{
+    protocol: z.ZodEnum<{
+        tcp: "tcp";
+        http: "http";
+        https: "https";
+    }>;
+    port: z.ZodOptional<z.ZodNumber>;
+    path: z.ZodOptional<z.ZodString>;
+    checkIntervalSeconds: z.ZodOptional<z.ZodNumber>;
+    responseTimeoutSeconds: z.ZodOptional<z.ZodNumber>;
+    unhealthyThreshold: z.ZodOptional<z.ZodNumber>;
+    healthyThreshold: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strip>;
+export type LoadBalancerHealthCheck = z.infer<typeof LoadBalancerHealthCheckSchema>;
+/**
+ * Adapter-specific configuration: the adapter id plus its own fields. Each
+ * adapter package defines and parses its own config schema; this kind names
+ * no provider, so a config for any adapter — including one contributed by a
+ * user plugin — parses here, and the adapter validates its own grammar.
+ */
+export declare const LoadBalancerConfigSchema: z.ZodObject<{
+    adapter: z.ZodString;
+}, z.core.$loose>;
+export type LoadBalancerConfig = z.infer<typeof LoadBalancerConfigSchema>;
+export declare const LoadBalancerDescriptorSchema: z.ZodObject<{
+    id: z.ZodString;
+    name: z.ZodOptional<z.ZodString>;
+    description: z.ZodOptional<z.ZodString>;
+    tags: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    hardware: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    enabled: z.ZodOptional<z.ZodBoolean>;
+    priority: z.ZodOptional<z.ZodNumber>;
+    capabilityId: z.ZodOptional<z.ZodString>;
+    requiredContext: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    optionalContext: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    retention: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+        maxAgeDays: z.ZodOptional<z.ZodNumber>;
+        maxEntries: z.ZodOptional<z.ZodNumber>;
+        maxBytes: z.ZodOptional<z.ZodNumber>;
+        cascadeFrom: z.ZodOptional<z.ZodString>;
+        ageField: z.ZodOptional<z.ZodString>;
+        reason: z.ZodString;
+        enforcedBy: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>]>>;
+    kind: z.ZodLiteral<"infra/load-balancer">;
+    region: z.ZodOptional<z.ZodString>;
+    forwardingRules: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        entryProtocol: z.ZodEnum<{
+            tcp: "tcp";
+            http: "http";
+            udp: "udp";
+            https: "https";
+            http2: "http2";
+            http3: "http3";
+        }>;
+        entryPort: z.ZodNumber;
+        targetProtocol: z.ZodEnum<{
+            tcp: "tcp";
+            http: "http";
+            udp: "udp";
+            https: "https";
+            http2: "http2";
+        }>;
+        targetPort: z.ZodNumber;
+        certificateId: z.ZodOptional<z.ZodString>;
+        tlsPassthrough: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strip>>>;
+    healthCheck: z.ZodOptional<z.ZodObject<{
+        protocol: z.ZodEnum<{
+            tcp: "tcp";
+            http: "http";
+            https: "https";
+        }>;
+        port: z.ZodOptional<z.ZodNumber>;
+        path: z.ZodOptional<z.ZodString>;
+        checkIntervalSeconds: z.ZodOptional<z.ZodNumber>;
+        responseTimeoutSeconds: z.ZodOptional<z.ZodNumber>;
+        unhealthyThreshold: z.ZodOptional<z.ZodNumber>;
+        healthyThreshold: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>>;
+    algorithm: z.ZodOptional<z.ZodEnum<{
+        round_robin: "round_robin";
+        least_connections: "least_connections";
+    }>>;
+    redirectHttpToHttps: z.ZodOptional<z.ZodBoolean>;
+    config: z.ZodOptional<z.ZodObject<{
+        adapter: z.ZodString;
+    }, z.core.$loose>>;
+}, z.core.$strip>;
+export type LoadBalancerDescriptor = z.infer<typeof LoadBalancerDescriptorSchema>;
+declare class DefaultLoadBalancerImplementation {
+    readonly descriptor: RuntimeDescriptor;
+    readonly context: KindContext;
+    /** The descriptor as this kind's schema reads it. */
+    readonly config: LoadBalancerDescriptor;
+    constructor(descriptor: RuntimeDescriptor, context: KindContext);
+}
+export declare const loadBalancerKind: import("@vibesdotdev/kernel").RuntimeKindDescriptorRecord<DefaultLoadBalancerImplementation>;
+export {};
+//# sourceMappingURL=load-balancer.kind.d.ts.map