@vibesdotdev/infra-core 0.0.1 → 1.0.0-rc.4

package/dist/kinds/node-pool.kind.js

@@ -0,0 +1,88 @@
+/**
+ * Kind: infra/node-pool
+ *
+ * Provider-neutral Kubernetes node-pool descriptor. Captures autoscaling,
+ * GPU shape, device plugin flags, and a workload class used by infra
+ * profile reconcilers.
+ *
+ * `config` is an open, adapter-keyed shape (DigitalOcean's Kubernetes node
+ * pool config lives in `@vibesdotdev/integrations-digitalocean`); this kind
+ * names no provider, so a config for any adapter parses here and the
+ * adapter validates its own grammar.
+ */
+import * as z from 'zod/v4';
+import { createRuntimeKind } from '@vibesdotdev/kernel/factory/kind';
+import { RuntimeDescriptorSchema } from '@vibesdotdev/kernel/schemas/descriptor';
+import { readKindDescriptor } from "./read-descriptor.js";
+import { INFRA_DISCOVERY_PATTERNS } from "./discovery.js";
+export const NodePoolTaintSchema = z.object({
+    key: z.string().min(1),
+    value: z.string(),
+    effect: z.enum(['NoSchedule', 'PreferNoSchedule', 'NoExecute'])
+});
+export const NodePoolGpuSchema = z.object({
+    vendor: z.enum(['nvidia', 'amd']),
+    model: z.string().min(1),
+    count: z.number().int().positive(),
+    vramGb: z.number().int().positive().optional()
+});
+export const NodePoolDevicePluginsSchema = z.object({
+    nvidia: z.boolean().optional(),
+    amd: z.boolean().optional(),
+    amdMetrics: z.boolean().optional()
+});
+export const NodePoolWorkloadClassSchema = z.enum([
+    'system',
+    'worker',
+    'build',
+    'exec',
+    'gpu-inference',
+    'gpu-training'
+]);
+const NodePoolBaseSchema = RuntimeDescriptorSchema.extend({
+    kind: z.literal('infra/node-pool'),
+    clusterRef: z.string().optional(),
+    size: z.string().min(1).optional(),
+    count: z.number().int().nonnegative().optional(),
+    autoScale: z.boolean().optional(),
+    minNodes: z.number().int().nonnegative().optional(),
+    maxNodes: z.number().int().nonnegative().optional(),
+    autoscaleToZero: z.boolean().optional(),
+    labels: z.record(z.string(), z.string()).optional(),
+    tags: z.array(z.string()).optional(),
+    taints: z.array(NodePoolTaintSchema).optional(),
+    gpu: NodePoolGpuSchema.optional(),
+    devicePlugins: NodePoolDevicePluginsSchema.optional(),
+    workloadClass: NodePoolWorkloadClassSchema.optional()
+});
+/**
+ * Adapter-specific configuration: the adapter id plus its own fields. Each
+ * adapter package defines and parses its own config schema; this kind names
+ * no provider, so a config for any adapter — including one contributed by a
+ * user plugin — parses here, and the adapter validates its own grammar.
+ */
+export const NodePoolConfigSchema = z.looseObject({
+    adapter: z.string().min(1)
+});
+export const NodePoolDescriptorSchema = NodePoolBaseSchema.extend({
+    /** Adapter-specific configuration, parsed by the adapter that owns it. */
+    config: NodePoolConfigSchema.optional()
+});
+class DefaultNodePoolImplementation {
+    descriptor;
+    context;
+    /** The descriptor as this kind's schema reads it. */
+    config;
+    constructor(descriptor, context) {
+        this.descriptor = descriptor;
+        this.context = context;
+        this.config = readKindDescriptor(NodePoolDescriptorSchema, descriptor);
+    }
+}
+export const nodePoolKind = createRuntimeKind({
+    id: 'infra/node-pool',
+    descriptorSchema: NodePoolDescriptorSchema,
+    defaultImplementation: DefaultNodePoolImplementation,
+    discoveryPatterns: INFRA_DISCOVERY_PATTERNS
+});
+//# sourceMappingURL=node-pool.kind.js.map

package/dist/kinds/node-pool.kind.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-pool.kind.js","sourceRoot":"","sources":["../../src/kinds/node-pool.kind.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AAGjF,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAE1D,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACtB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,kBAAkB,EAAE,WAAW,CAAC,CAAC;CAC/D,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACjC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAClC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAC9C,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC9B,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC3B,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAClC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,IAAI,CAAC;IACjD,QAAQ;IACR,QAAQ;IACR,OAAO;IACP,MAAM;IACN,eAAe;IACf,cAAc;CACd,CAAC,CAAC;AAGH,MAAM,kBAAkB,GAAG,uBAAuB,CAAC,MAAM,CAAC;IACzD,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC;IAClC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAClC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IAChD,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACjC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IACnD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IACnD,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACvC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACnD,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACpC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,QAAQ,EAAE;IAC/C,GAAG,EAAE,iBAAiB,CAAC,QAAQ,EAAE;IACjC,aAAa,EAAE,2BAA2B,CAAC,QAAQ,EAAE;IACrD,aAAa,EAAE,2BAA2B,CAAC,QAAQ,EAAE;CACrD,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,WAAW,CAAC;IACjD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC1B,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,wBAAwB,GAAG,kBAAkB,CAAC,MAAM,CAAC;IACjE,0EAA0E;IAC1E,MAAM,EAAE,oBAAoB,CAAC,QAAQ,EAAE;CACvC,CAAC,CAAC;AAIH,MAAM,6BAA6B;IAIjB;IACA;IAJjB,qDAAqD;IAC5C,MAAM,CAAqB;IACpC,YACiB,UAA6B,EAC7B,OAAoB;QADpB,eAAU,GAAV,UAAU,CAAmB;QAC7B,YAAO,GAAP,OAAO,CAAa;QAEpC,IAAI,CAAC,MAAM,GAAG,kBAAkB,CAAC,wBAAwB,EAAE,UAAU,CAAC,CAAC;IACxE,CAAC;CAED;AAED,MAAM,CAAC,MAAM,YAAY,GAAG,iBAAiB,CAAoD;IAChG,EAAE,EAAE,iBAAiB;IACrB,gBAAgB,EAAE,wBAAwB;IAC1C,qBAAqB,EAAE,6BAA6B;IACpD,iBAAiB,EAAE,wBAAwB;CAC3C,CAAC,CAAC"}

package/dist/kinds/object-storage.kind.d.ts

@@ -3,16 +3,21 @@
  *
  * Describes object/blob storage.
  *
- * Schema shape: strict common base + `config` discriminated union.
+ * Schema shape: strict common base + an open, adapter-keyed `config`.
  *
  * - The base defines fields universal across adapters: id/kind/name +
  *   the storage shape (bucket, cors, lifecycle, publicAccess).
- * - Adapter-specific fields (region, acl, …) live under `config`.
- *   Each adapter package defines its own concrete schema.
+ * - Adapter-specific fields (region, acl, …) live under `config`, keyed by
+ *   a non-empty `adapter` discriminator. Each adapter package defines and
+ *   parses its own concrete schema (DigitalOcean Spaces' lives in
+ *   `@vibesdotdev/integrations-digitalocean`; Cloudflare R2's in
+ *   `@vibesdotdev/integrations-cloudflare`); this kind names no provider,
+ *   so a config for any adapter — including one contributed by a user
+ *   plugin — parses here, and the adapter validates its own grammar.
  */
 import * as z from 'zod/v4';
-import type { RuntimeKindDescriptorRecord } from '@vibesdotdev/runtime/schemas/kind';
-import type { RuntimeDescriptor } from '@vibesdotdev/runtime/schemas/descriptor';
+import type { RuntimeDescriptor } from '@vibesdotdev/kernel/schemas/descriptor';
+import type { KindContext } from '@vibesdotdev/kernel/schemas/kind';
 export declare const CorsRuleSchema: z.ZodObject<{
     allowedOrigins: z.ZodDefault<z.ZodArray<z.ZodString>>;
     allowedMethods: z.ZodDefault<z.ZodArray<z.ZodString>>;
@@ -23,22 +28,34 @@ export type CorsRule = z.infer<typeof CorsRuleSchema>;
 export declare const LifecycleRuleSchema: z.ZodObject<{
     prefix: z.ZodOptional<z.ZodString>;
     expiration: z.ZodOptional<z.ZodNumber>;
+    abortIncompleteMultipartUploadDays: z.ZodOptional<z.ZodNumber>;
     transition: z.ZodOptional<z.ZodObject<{
         days: z.ZodNumber;
         storageClass: z.ZodString;
     }, z.core.$strip>>;
 }, z.core.$strip>;
 export type LifecycleRule = z.infer<typeof LifecycleRuleSchema>;
-export declare const DOSpacesConfigSchema: z.ZodObject<{
-    region: z.ZodDefault<z.ZodString>;
+/**
+ * Reference to a credential or secret materialized at apply time. The shape
+ * is intentionally permissive — full validation lives in the credentials
+ * runtime. Keeping it inline keeps this kind decoupled from runtime/secrets.
+ */
+export declare const CredentialReferenceSchema: z.ZodObject<{
+    store: z.ZodOptional<z.ZodString>;
+    key: z.ZodString;
+    env: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
-export declare const CloudflareR2ConfigSchema: z.ZodObject<{}, z.core.$strip>;
-export declare const ObjectStorageConfigSchema: z.ZodUnion<readonly [z.ZodObject<{
-    region: z.ZodDefault<z.ZodString>;
-    adapter: z.ZodLiteral<"do-spaces">;
-}, z.core.$strip>, z.ZodObject<{
-    adapter: z.ZodLiteral<"cloudflare-r2">;
-}, z.core.$strip>]>;
+export type CredentialReference = z.infer<typeof CredentialReferenceSchema>;
+/**
+ * Adapter-specific configuration: the adapter id plus its own fields. Each
+ * adapter package defines and parses its own config schema; this kind names
+ * no provider, so a config for any adapter — including one contributed by a
+ * user plugin — parses here, and the adapter validates its own grammar.
+ */
+export declare const ObjectStorageConfigSchema: z.ZodObject<{
+    adapter: z.ZodString;
+}, z.core.$loose>;
+export type ObjectStorageConfig = z.infer<typeof ObjectStorageConfigSchema>;
 export declare const ObjectStorageDescriptorSchema: z.ZodObject<{
     id: z.ZodString;
     name: z.ZodOptional<z.ZodString>;
@@ -47,8 +64,18 @@ export declare const ObjectStorageDescriptorSchema: z.ZodObject<{
     hardware: z.ZodOptional<z.ZodArray<z.ZodString>>;
     enabled: z.ZodOptional<z.ZodBoolean>;
     priority: z.ZodOptional<z.ZodNumber>;
+    capabilityId: z.ZodOptional<z.ZodString>;
     requiredContext: z.ZodOptional<z.ZodArray<z.ZodString>>;
     optionalContext: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    retention: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+        maxAgeDays: z.ZodOptional<z.ZodNumber>;
+        maxEntries: z.ZodOptional<z.ZodNumber>;
+        maxBytes: z.ZodOptional<z.ZodNumber>;
+        cascadeFrom: z.ZodOptional<z.ZodString>;
+        ageField: z.ZodOptional<z.ZodString>;
+        reason: z.ZodString;
+        enforcedBy: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>]>>;
     kind: z.ZodLiteral<"infra/object-storage">;
     bucket: z.ZodOptional<z.ZodString>;
     cors: z.ZodOptional<z.ZodArray<z.ZodObject<{
@@ -60,26 +87,25 @@ export declare const ObjectStorageDescriptorSchema: z.ZodObject<{
     lifecycle: z.ZodOptional<z.ZodArray<z.ZodObject<{
         prefix: z.ZodOptional<z.ZodString>;
         expiration: z.ZodOptional<z.ZodNumber>;
+        abortIncompleteMultipartUploadDays: z.ZodOptional<z.ZodNumber>;
         transition: z.ZodOptional<z.ZodObject<{
             days: z.ZodNumber;
             storageClass: z.ZodString;
         }, z.core.$strip>>;
     }, z.core.$strip>>>;
     publicAccess: z.ZodOptional<z.ZodBoolean>;
-    config: z.ZodOptional<z.ZodUnion<readonly [z.ZodObject<{
-        region: z.ZodDefault<z.ZodString>;
-        adapter: z.ZodLiteral<"do-spaces">;
-    }, z.core.$strip>, z.ZodObject<{
-        adapter: z.ZodLiteral<"cloudflare-r2">;
-    }, z.core.$strip>]>>;
+    config: z.ZodOptional<z.ZodObject<{
+        adapter: z.ZodString;
+    }, z.core.$loose>>;
 }, z.core.$strip>;
 export type ObjectStorageDescriptor = z.infer<typeof ObjectStorageDescriptorSchema>;
 declare class DefaultObjectStorageImplementation {
     readonly descriptor: RuntimeDescriptor;
-    readonly context: unknown;
-    constructor(descriptor: RuntimeDescriptor, context: unknown);
-    get config(): ObjectStorageDescriptor;
+    readonly context: KindContext;
+    /** The descriptor as this kind's schema reads it. */
+    readonly config: ObjectStorageDescriptor;
+    constructor(descriptor: RuntimeDescriptor, context: KindContext);
 }
-export declare const objectStorageKind: RuntimeKindDescriptorRecord<DefaultObjectStorageImplementation>;
+export declare const objectStorageKind: import("@vibesdotdev/kernel").RuntimeKindDescriptorRecord<DefaultObjectStorageImplementation>;
 export {};
 //# sourceMappingURL=object-storage.kind.d.ts.map

package/dist/kinds/object-storage.kind.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"object-storage.kind.d.ts","sourceRoot":"","sources":["../../src/kinds/object-storage.kind.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,mCAAmC,CAAC;AAErF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yCAAyC,CAAC;AAGjF,eAAO,MAAM,cAAc;;;;;iBAKzB,CAAC;AACH,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAEtD,eAAO,MAAM,mBAAmB;;;;;;;iBAY9B,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAkBhE,eAAO,MAAM,oBAAoB;;iBAG/B,CAAC;AAEH,eAAO,MAAM,wBAAwB,gCAAe,CAAC;AAErD,eAAO,MAAM,yBAAyB;;;;;mBAGpC,CAAC;AAEH,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAMxC,CAAC;AAEH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF,cAAM,kCAAkC;aAEtB,UAAU,EAAE,iBAAiB;aAC7B,OAAO,EAAE,OAAO;gBADhB,UAAU,EAAE,iBAAiB,EAC7B,OAAO,EAAE,OAAO;IAGjC,IAAI,MAAM,IAAI,uBAAuB,CAEpC;CACD;AAED,eAAO,MAAM,iBAAiB,iEAS5B,CAAC"}
+{"version":3,"file":"object-storage.kind.d.ts","sourceRoot":"","sources":["../../src/kinds/object-storage.kind.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAG5B,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wCAAwC,CAAC;AAChF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AAIpE,eAAO,MAAM,cAAc;;;;;iBAKzB,CAAC;AACH,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAEtD,eAAO,MAAM,mBAAmB;;;;;;;;iBAiB9B,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE;;;;GAIG;AACH,eAAO,MAAM,yBAAyB;;;;iBAIpC,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAkB5E;;;;;GAKG;AACH,eAAO,MAAM,yBAAyB;;iBAEpC,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAGxC,CAAC;AAEH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF,cAAM,kCAAkC;aAItB,UAAU,EAAE,iBAAiB;aAC7B,OAAO,EAAE,WAAW;IAJrC,qDAAqD;IACrD,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAC;gBAExB,UAAU,EAAE,iBAAiB,EAC7B,OAAO,EAAE,WAAW;CAKrC;AAED,eAAO,MAAM,iBAAiB,+FAQ5B,CAAC"}

package/dist/kinds/object-storage.kind.js

@@ -3,17 +3,23 @@
  *
  * Describes object/blob storage.
  *
- * Schema shape: strict common base + `config` discriminated union.
+ * Schema shape: strict common base + an open, adapter-keyed `config`.
  *
  * - The base defines fields universal across adapters: id/kind/name +
  *   the storage shape (bucket, cors, lifecycle, publicAccess).
- * - Adapter-specific fields (region, acl, …) live under `config`.
- *   Each adapter package defines its own concrete schema.
+ * - Adapter-specific fields (region, acl, …) live under `config`, keyed by
+ *   a non-empty `adapter` discriminator. Each adapter package defines and
+ *   parses its own concrete schema (DigitalOcean Spaces' lives in
+ *   `@vibesdotdev/integrations-digitalocean`; Cloudflare R2's in
+ *   `@vibesdotdev/integrations-cloudflare`); this kind names no provider,
+ *   so a config for any adapter — including one contributed by a user
+ *   plugin — parses here, and the adapter validates its own grammar.
  */
 import * as z from 'zod/v4';
-import { createRuntimeKind } from '@vibesdotdev/runtime/factory/kind';
-import { RuntimeDescriptorSchema } from '@vibesdotdev/runtime/schemas/descriptor';
-import { INFRA_DISCOVERY_PATTERN, extractStem } from "./discovery.js";
+import { createRuntimeKind } from '@vibesdotdev/kernel/factory/kind';
+import { RuntimeDescriptorSchema } from '@vibesdotdev/kernel/schemas/descriptor';
+import { readKindDescriptor } from "./read-descriptor.js";
+import { INFRA_DISCOVERY_PATTERNS } from "./discovery.js";
 export const CorsRuleSchema = z.object({
     allowedOrigins: z.array(z.string()).default(['*']),
     allowedMethods: z.array(z.string()).default(['GET']),
@@ -25,6 +31,11 @@ export const LifecycleRuleSchema = z.object({
     prefix: z.string().optional(),
     /** Days until expiration */
     expiration: z.number().int().positive().optional(),
+    /**
+     * Days after which incomplete multipart uploads are aborted.
+     * Maps to S3-compatible `AbortIncompleteMultipartUpload`.
+     */
+    abortIncompleteMultipartUploadDays: z.number().int().positive().optional(),
     /** Storage class transition */
     transition: z
         .object({
@@ -33,6 +44,16 @@ export const LifecycleRuleSchema = z.object({
     })
         .optional()
 });
+/**
+ * Reference to a credential or secret materialized at apply time. The shape
+ * is intentionally permissive — full validation lives in the credentials
+ * runtime. Keeping it inline keeps this kind decoupled from runtime/secrets.
+ */
+export const CredentialReferenceSchema = z.object({
+    store: z.string().min(1).optional(),
+    key: z.string().min(1),
+    env: z.string().min(1).optional()
+});
 const ObjectStorageBaseSchema = RuntimeDescriptorSchema.extend({
     kind: z.literal('infra/object-storage'),
     /** Bucket name (defaults to descriptor id when omitted). */
@@ -44,38 +65,34 @@ const ObjectStorageBaseSchema = RuntimeDescriptorSchema.extend({
     /** Whether the bucket is publicly readable. */
     publicAccess: z.boolean().optional()
 });
-export const DOSpacesConfigSchema = z.object({
-    /** DO region (default: nyc3). */
-    region: z.string().min(1).default('nyc3')
+/**
+ * Adapter-specific configuration: the adapter id plus its own fields. Each
+ * adapter package defines and parses its own config schema; this kind names
+ * no provider, so a config for any adapter — including one contributed by a
+ * user plugin — parses here, and the adapter validates its own grammar.
+ */
+export const ObjectStorageConfigSchema = z.looseObject({
+    adapter: z.string().min(1)
 });
-export const CloudflareR2ConfigSchema = z.object({});
-export const ObjectStorageConfigSchema = z.union([
-    DOSpacesConfigSchema.extend({ adapter: z.literal('do-spaces') }),
-    CloudflareR2ConfigSchema.extend({ adapter: z.literal('cloudflare-r2') })
-]);
 export const ObjectStorageDescriptorSchema = ObjectStorageBaseSchema.extend({
-    /**
-     * Adapter-specific configuration. Discriminated union — each adapter
-     * package defines its own config schema under its discriminator key.
-     */
+    /** Adapter-specific configuration, parsed by the adapter that owns it. */
     config: ObjectStorageConfigSchema.optional()
 });
 class DefaultObjectStorageImplementation {
     descriptor;
     context;
+    /** The descriptor as this kind's schema reads it. */
+    config;
     constructor(descriptor, context) {
         this.descriptor = descriptor;
         this.context = context;
-    }
-    get config() {
-        return this.descriptor;
+        this.config = readKindDescriptor(ObjectStorageDescriptorSchema, descriptor);
     }
 }
 export const objectStorageKind = createRuntimeKind({
     id: 'infra/object-storage',
     descriptorSchema: ObjectStorageDescriptorSchema,
     defaultImplementation: DefaultObjectStorageImplementation,
-    discoveryPattern: INFRA_DISCOVERY_PATTERN,
-    extractStem
+    discoveryPatterns: INFRA_DISCOVERY_PATTERNS
 });
 //# sourceMappingURL=object-storage.kind.js.map

package/dist/kinds/object-storage.kind.js.map

@@ -1 +1 @@
-{"version":3,"file":"object-storage.kind.js","sourceRoot":"","sources":["../../src/kinds/object-storage.kind.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAC;AAEtE,OAAO,EAAE,uBAAuB,EAAE,MAAM,yCAAyC,CAAC;AAElF,OAAO,EAAE,uBAAuB,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAEtE,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC;IAClD,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC;IACpD,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC9C,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;CACxD,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,yCAAyC;IACzC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,4BAA4B;IAC5B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAClD,+BAA+B;IAC/B,UAAU,EAAE,CAAC;SACX,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;QACjC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;KAC/B,CAAC;SACD,QAAQ,EAAE;CACZ,CAAC,CAAC;AAGH,MAAM,uBAAuB,GAAG,uBAAuB,CAAC,MAAM,CAAC;IAC9D,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC;IAEvC,4DAA4D;IAC5D,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAEpC,kBAAkB;IAClB,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,QAAQ,EAAE;IAExC,uBAAuB;IACvB,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,QAAQ,EAAE;IAElD,+CAA+C;IAC/C,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CACpC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,iCAAiC;IACjC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;CACzC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAErD,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC;IAChD,oBAAoB,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;IAChE,wBAAwB,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;CACxE,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,6BAA6B,GAAG,uBAAuB,CAAC,MAAM,CAAC;IAC3E;;;OAGG;IACH,MAAM,EAAE,yBAAyB,CAAC,QAAQ,EAAE;CAC5C,CAAC,CAAC;AAIH,MAAM,kCAAkC;IAEtB;IACA;IAFjB,YACiB,UAA6B,EAC7B,OAAgB;QADhB,eAAU,GAAV,UAAU,CAAmB;QAC7B,YAAO,GAAP,OAAO,CAAS;IAC9B,CAAC;IAEJ,IAAI,MAAM;QACT,OAAO,IAAI,CAAC,UAAqC,CAAC;IACnD,CAAC;CACD;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAG,iBAAiB,CAGhD;IACD,EAAE,EAAE,sBAAsB;IAC1B,gBAAgB,EAAE,6BAA6B;IAC/C,qBAAqB,EAAE,kCAAkC;IACzD,gBAAgB,EAAE,uBAAuB;IACzC,WAAW;CACX,CAAC,CAAC"}
+{"version":3,"file":"object-storage.kind.js","sourceRoot":"","sources":["../../src/kinds/object-storage.kind.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AAGjF,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAE1D,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC;IAClD,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC;IACpD,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC9C,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;CACxD,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,yCAAyC;IACzC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,4BAA4B;IAC5B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAClD;;;OAGG;IACH,kCAAkC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC1E,+BAA+B;IAC/B,UAAU,EAAE,CAAC;SACX,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;QACjC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;KAC/B,CAAC;SACD,QAAQ,EAAE;CACZ,CAAC,CAAC;AAGH;;;;GAIG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACnC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACtB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC;AAGH,MAAM,uBAAuB,GAAG,uBAAuB,CAAC,MAAM,CAAC;IAC9D,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC;IAEvC,4DAA4D;IAC5D,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAEpC,kBAAkB;IAClB,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,QAAQ,EAAE;IAExC,uBAAuB;IACvB,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,QAAQ,EAAE;IAElD,+CAA+C;IAC/C,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CACpC,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,WAAW,CAAC;IACtD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC1B,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,6BAA6B,GAAG,uBAAuB,CAAC,MAAM,CAAC;IAC3E,0EAA0E;IAC1E,MAAM,EAAE,yBAAyB,CAAC,QAAQ,EAAE;CAC5C,CAAC,CAAC;AAIH,MAAM,kCAAkC;IAItB;IACA;IAJjB,qDAAqD;IAC5C,MAAM,CAA0B;IACzC,YACiB,UAA6B,EAC7B,OAAoB;QADpB,eAAU,GAAV,UAAU,CAAmB;QAC7B,YAAO,GAAP,OAAO,CAAa;QAEpC,IAAI,CAAC,MAAM,GAAG,kBAAkB,CAAC,6BAA6B,EAAE,UAAU,CAAC,CAAC;IAC7E,CAAC;CAED;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAG,iBAAiB,CAGhD;IACD,EAAE,EAAE,sBAAsB;IAC1B,gBAAgB,EAAE,6BAA6B;IAC/C,qBAAqB,EAAE,kCAAkC;IACzD,iBAAiB,EAAE,wBAAwB;CAC3C,CAAC,CAAC"}

package/dist/kinds/observability.kind.d.ts

@@ -7,15 +7,16 @@
  *
  *   1. The CLI can introspect + write settings across the entire fleet
  *      without going through deploy.
- *   2. Cross-cutting policies (e.g. "10% sampling on every customer-facing
- *      Worker") have a single declarative shape.
+ *   2. Cross-cutting policies (e.g. "full log capture on every Worker")
+ *      have a single declarative shape.
  *   3. Provider impls map onto the native control plane (CF Workers
  *      Observability, DO Monitoring, Datadog, etc.).
  *
  * CLI surface (`vibes infra observability …`):
  *   status [--worker]                      read current settings
- *   set    [--worker] --sampling 0.1       write new settings
- *   exports list|add|remove                (Phase 2.5; not yet wired)
+ *   set    [--worker] --sampling 1         write new settings
+ *   exports list                         read safe export inventory
+ *   exports add|remove                   (not yet wired)
  *
  * Production Workers consume settings via their wrangler.jsonc; the CLI
  * writes directly to the provider API for immediate effect. To avoid
@@ -23,6 +24,7 @@
  * path — the CLI here is for ops-time tuning between deploys.
  */
 import * as z from 'zod/v4';
+import { type InfraAuthorityFingerprint, type InfraProviderFailure } from './inventory.kind.ts';
 declare const ObservabilityScopeSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     kind: z.ZodLiteral<"worker">;
     workerName: z.ZodString;
@@ -72,6 +74,33 @@ declare const ObservabilitySettingsSchema: z.ZodObject<{
     }, z.core.$strip>], "kind">>>;
 }, z.core.$strip>;
 export type ObservabilitySettings = z.infer<typeof ObservabilitySettingsSchema>;
+/**
+ * Provider-neutral queue health evidence collected from an adapter's live
+ * control plane. `oldestMessageAgeMs` is an age, rather than a provider
+ * timestamp, so consumers can compare it directly to a declared retention
+ * window.
+ */
+export declare const QueueBacklogSchema: z.ZodObject<{
+    queueName: z.ZodString;
+    backlogCount: z.ZodNumber;
+    backlogBytes: z.ZodNumber;
+    oldestMessageAgeMs: z.ZodNumber;
+    capturedAt: z.ZodString;
+}, z.core.$strip>;
+export type QueueBacklog = z.infer<typeof QueueBacklogSchema>;
+export interface QueueBacklogAlert {
+    alerting: boolean;
+    thresholdMs: number;
+}
+/**
+ * A queue is alerting only after its oldest message has consumed more than
+ * half of its retention window. Equality is deliberately healthy: the
+ * policy is strictly `age > retention / 2`.
+ */
+export declare function evaluateQueueBacklogAlert(queueBacklog: QueueBacklog, retentionMs: number): QueueBacklogAlert;
+export interface QueueBacklogImplementation {
+    listQueueBacklogs(): Promise<QueueBacklog[]>;
+}
 declare const ObservabilityBaseSchema: z.ZodObject<{
     id: z.ZodString;
     name: z.ZodOptional<z.ZodString>;
@@ -80,9 +109,19 @@ declare const ObservabilityBaseSchema: z.ZodObject<{
     hardware: z.ZodOptional<z.ZodArray<z.ZodString>>;
     enabled: z.ZodOptional<z.ZodBoolean>;
     priority: z.ZodOptional<z.ZodNumber>;
+    capabilityId: z.ZodOptional<z.ZodString>;
     requiredContext: z.ZodOptional<z.ZodArray<z.ZodString>>;
     optionalContext: z.ZodOptional<z.ZodArray<z.ZodString>>;
-    config: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    config: z.ZodOptional<z.ZodUnknown>;
+    retention: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+        maxAgeDays: z.ZodOptional<z.ZodNumber>;
+        maxEntries: z.ZodOptional<z.ZodNumber>;
+        maxBytes: z.ZodOptional<z.ZodNumber>;
+        cascadeFrom: z.ZodOptional<z.ZodString>;
+        ageField: z.ZodOptional<z.ZodString>;
+        reason: z.ZodString;
+        enforcedBy: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>]>>;
     kind: z.ZodLiteral<"infra/observability">;
     adapter: z.ZodString;
     adapterConfig: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
@@ -141,7 +180,62 @@ export interface ObservabilitySnapshot {
     settings: ObservabilitySettings;
     /** Last-modified timestamp from the provider, when available. */
     modifiedAt?: string;
+    /** Bounded provider-safe evidence when this worker could not be read. */
+    failure?: InfraProviderFailure;
 }
+/** Public inventory deliberately excludes destination credentials and URL paths. */
+export declare const ObservabilityExportDestinationSchema: z.ZodObject<{
+    id: z.ZodString;
+    name: z.ZodString;
+    signal: z.ZodEnum<{
+        unknown: "unknown";
+        logs: "logs";
+        traces: "traces";
+    }>;
+    enabled: z.ZodBoolean;
+    endpointOrigin: z.ZodOptional<z.ZodPipe<z.ZodURL, z.ZodTransform<string, string>>>;
+    transport: z.ZodEnum<{
+        unknown: "unknown";
+        http: "http";
+        https: "https";
+    }>;
+    headerNames: z.ZodArray<z.ZodString>;
+    lastDeliveredAt: z.ZodOptional<z.ZodISODateTime>;
+    lastErrorAt: z.ZodOptional<z.ZodISODateTime>;
+}, z.core.$strip>;
+export type ObservabilityExportDestination = z.infer<typeof ObservabilityExportDestinationSchema>;
+export declare const ObservabilityExportInventorySchema: z.ZodObject<{
+    destinations: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        name: z.ZodString;
+        signal: z.ZodEnum<{
+            unknown: "unknown";
+            logs: "logs";
+            traces: "traces";
+        }>;
+        enabled: z.ZodBoolean;
+        endpointOrigin: z.ZodOptional<z.ZodPipe<z.ZodURL, z.ZodTransform<string, string>>>;
+        transport: z.ZodEnum<{
+            unknown: "unknown";
+            http: "http";
+            https: "https";
+        }>;
+        headerNames: z.ZodArray<z.ZodString>;
+        lastDeliveredAt: z.ZodOptional<z.ZodISODateTime>;
+        lastErrorAt: z.ZodOptional<z.ZodISODateTime>;
+    }, z.core.$strip>>;
+    workers: z.ZodArray<z.ZodObject<{
+        workerName: z.ZodString;
+        logs: z.ZodArray<z.ZodString>;
+        traces: z.ZodArray<z.ZodString>;
+        failure: z.ZodOptional<z.ZodObject<{
+            code: z.ZodString;
+            message: z.ZodString;
+            retryable: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type ObservabilityExportInventory = z.infer<typeof ObservabilityExportInventorySchema>;
 export interface SetObservabilityInput {
     scope: ObservabilityScope;
     settings: ObservabilitySettings;
@@ -164,12 +258,16 @@ export interface SetObservabilityResult {
  * Implementation contract every provider implements.
  */
 export interface ObservabilityImplementation {
+    /** Redacted authority used by the latest provider request, when applicable. */
+    getAuthority?(): Promise<InfraAuthorityFingerprint>;
     /** Read current settings for a scope. account-wide → one snapshot per Worker. */
     getStatus(scope: ObservabilityScope): Promise<ObservabilitySnapshot[]>;
+    /** Read export destinations and worker bindings without proving collector delivery. */
+    listExports?(scope: ObservabilityScope): Promise<ObservabilityExportInventory>;
     /** Apply settings to a scope. Returns per-Worker outcome. */
     set(input: SetObservabilityInput): Promise<SetObservabilityResult>;
 }
-export declare const observabilityKind: import("@vibesdotdev/runtime").RuntimeKindDescriptorRecord<ObservabilityImplementation>;
+export declare const observabilityKind: import("@vibesdotdev/kernel").RuntimeKindDescriptorRecord<ObservabilityImplementation>;
 export type InfraObservabilityKind = InfraObservabilityDescriptor;
 export type InfraObservabilityKindInput = InfraObservabilityDescriptorInput;
 export { ObservabilityBaseSchema as InfraObservabilityDescriptorSchema, ObservabilityScopeSchema, ObservabilitySettingsSchema };

package/dist/kinds/observability.kind.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"observability.kind.d.ts","sourceRoot":"","sources":["../../src/kinds/observability.kind.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAK5B,QAAA,MAAM,wBAAwB;;;;;;2BAU5B,CAAC;AAEH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E;;;;GAIG;AACH,QAAA,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAmD/B,CAAC;AAEH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEhF,QAAA,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAiB3B,CAAC;AAEH,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AACnF,MAAM,MAAM,iCAAiC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExF;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACrC,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,qBAAqB,CAAC;IAChC,iEAAiE;IACjE,UAAU,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,qBAAqB;IACrC,KAAK,EAAE,kBAAkB,CAAC;IAC1B,QAAQ,EAAE,qBAAqB,CAAC;IAChC,uEAAuE;IACvE,aAAa,CAAC,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,sBAAsB;IACtC,OAAO,EAAE,KAAK,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,qBAAqB,CAAC;QAAC,KAAK,EAAE,qBAAqB,CAAA;KAAE,CAAC,CAAC;IACpG,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,MAAM,EAAE,KAAK,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACrD;AAED;;GAEG;AACH,MAAM,WAAW,2BAA2B;IAC3C,iFAAiF;IACjF,SAAS,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,qBAAqB,EAAE,CAAC,CAAC;IACvE,6DAA6D;IAC7D,GAAG,CAAC,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;CACnE;AAED,eAAO,MAAM,iBAAiB,yFAQ5B,CAAC;AAEH,MAAM,MAAM,sBAAsB,GAAG,4BAA4B,CAAC;AAClE,MAAM,MAAM,2BAA2B,GAAG,iCAAiC,CAAC;AAE5E,OAAO,EACN,uBAAuB,IAAI,kCAAkC,EAC7D,wBAAwB,EACxB,2BAA2B,EAC3B,CAAC"}
+{"version":3,"file":"observability.kind.d.ts","sourceRoot":"","sources":["../../src/kinds/observability.kind.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAI5B,OAAO,EAEN,KAAK,yBAAyB,EAC9B,KAAK,oBAAoB,EACzB,MAAM,qBAAqB,CAAC;AAG7B,QAAA,MAAM,wBAAwB;;;;;;2BAU5B,CAAC;AAEH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E;;;;GAIG;AACH,QAAA,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAmD/B,CAAC;AAEH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEhF;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB;;;;;;iBAM7B,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,MAAM,WAAW,iBAAiB;IACjC,QAAQ,EAAE,OAAO,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;CACpB;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,CACxC,YAAY,EAAE,YAAY,EAC1B,WAAW,EAAE,MAAM,GACjB,iBAAiB,CAWnB;AAED,MAAM,WAAW,0BAA0B;IAC1C,iBAAiB,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC;CAC7C;AAED,QAAA,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAiB3B,CAAC;AAEH,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AACnF,MAAM,MAAM,iCAAiC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExF;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACrC,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,qBAAqB,CAAC;IAChC,iEAAiE;IACjE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,yEAAyE;IACzE,OAAO,CAAC,EAAE,oBAAoB,CAAC;CAC/B;AAED,oFAAoF;AACpF,eAAO,MAAM,oCAAoC;;;;;;;;;;;;;;;;;;iBAc/C,CAAC;AACH,MAAM,MAAM,8BAA8B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oCAAoC,CAAC,CAAC;AAElG,eAAO,MAAM,kCAAkC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAW7C,CAAC;AACH,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kCAAkC,CAAC,CAAC;AAE9F,MAAM,WAAW,qBAAqB;IACrC,KAAK,EAAE,kBAAkB,CAAC;IAC1B,QAAQ,EAAE,qBAAqB,CAAC;IAChC,uEAAuE;IACvE,aAAa,CAAC,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,sBAAsB;IACtC,OAAO,EAAE,KAAK,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,qBAAqB,CAAC;QAAC,KAAK,EAAE,qBAAqB,CAAA;KAAE,CAAC,CAAC;IACpG,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,MAAM,EAAE,KAAK,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACrD;AAED;;GAEG;AACH,MAAM,WAAW,2BAA2B;IAC3C,+EAA+E;IAC/E,YAAY,CAAC,IAAI,OAAO,CAAC,yBAAyB,CAAC,CAAC;IACpD,iFAAiF;IACjF,SAAS,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,qBAAqB,EAAE,CAAC,CAAC;IACvE,uFAAuF;IACvF,WAAW,CAAC,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,4BAA4B,CAAC,CAAC;IAC/E,6DAA6D;IAC7D,GAAG,CAAC,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;CACnE;AAED,eAAO,MAAM,iBAAiB,wFAO5B,CAAC;AAEH,MAAM,MAAM,sBAAsB,GAAG,4BAA4B,CAAC;AAClE,MAAM,MAAM,2BAA2B,GAAG,iCAAiC,CAAC;AAE5E,OAAO,EACN,uBAAuB,IAAI,kCAAkC,EAC7D,wBAAwB,EACxB,2BAA2B,EAC3B,CAAC"}

package/dist/kinds/observability.kind.js

@@ -7,15 +7,16 @@
  *
  *   1. The CLI can introspect + write settings across the entire fleet
  *      without going through deploy.
- *   2. Cross-cutting policies (e.g. "10% sampling on every customer-facing
- *      Worker") have a single declarative shape.
+ *   2. Cross-cutting policies (e.g. "full log capture on every Worker")
+ *      have a single declarative shape.
  *   3. Provider impls map onto the native control plane (CF Workers
  *      Observability, DO Monitoring, Datadog, etc.).
  *
  * CLI surface (`vibes infra observability …`):
  *   status [--worker]                      read current settings
- *   set    [--worker] --sampling 0.1       write new settings
- *   exports list|add|remove                (Phase 2.5; not yet wired)
+ *   set    [--worker] --sampling 1         write new settings
+ *   exports list                         read safe export inventory
+ *   exports add|remove                   (not yet wired)
  *
  * Production Workers consume settings via their wrangler.jsonc; the CLI
  * writes directly to the provider API for immediate effect. To avoid
@@ -23,9 +24,11 @@
  * path — the CLI here is for ops-time tuning between deploys.
  */
 import * as z from 'zod/v4';
-import { createRuntimeKind } from '@vibesdotdev/runtime/factory/kind';
-import { RuntimeDescriptorSchema } from '@vibesdotdev/runtime/schemas/descriptor';
-import { INFRA_DISCOVERY_PATTERN, extractStem } from "./discovery.js";
+import { CapabilityError } from '@vibesdotdev/kernel';
+import { createRuntimeKind } from '@vibesdotdev/kernel/factory/kind';
+import { RuntimeDescriptorSchema } from '@vibesdotdev/kernel/schemas/descriptor';
+import { InfraProviderFailureSchema } from "./inventory.kind.js";
+import { INFRA_DISCOVERY_PATTERNS } from "./discovery.js";
 const ObservabilityScopeSchema = z.discriminatedUnion('kind', [
     z.object({
         kind: z.literal('worker'),
@@ -92,6 +95,36 @@ const ObservabilitySettingsSchema = z.object({
     ]))
         .optional()
 });
+/**
+ * Provider-neutral queue health evidence collected from an adapter's live
+ * control plane. `oldestMessageAgeMs` is an age, rather than a provider
+ * timestamp, so consumers can compare it directly to a declared retention
+ * window.
+ */
+export const QueueBacklogSchema = z.object({
+    queueName: z.string().min(1),
+    backlogCount: z.number().int().nonnegative(),
+    backlogBytes: z.number().int().nonnegative(),
+    oldestMessageAgeMs: z.number().int().nonnegative(),
+    capturedAt: z.string().datetime()
+});
+/**
+ * A queue is alerting only after its oldest message has consumed more than
+ * half of its retention window. Equality is deliberately healthy: the
+ * policy is strictly `age > retention / 2`.
+ */
+export function evaluateQueueBacklogAlert(queueBacklog, retentionMs) {
+    if (!Number.isFinite(retentionMs) || retentionMs <= 0) {
+        throw new CapabilityError('Queue backlog retention must be a positive finite number of milliseconds.', 'INVALID_INPUT', {
+            reason: 'queue-backlog-retention-invalid'
+        });
+    }
+    const thresholdMs = retentionMs / 2;
+    return {
+        alerting: queueBacklog.oldestMessageAgeMs > thresholdMs,
+        thresholdMs
+    };
+}
 const ObservabilityBaseSchema = RuntimeDescriptorSchema.extend({
     kind: z.literal('infra/observability'),
     adapter: z.string().min(1),
@@ -110,11 +143,36 @@ const ObservabilityBaseSchema = RuntimeDescriptorSchema.extend({
      */
     settings: ObservabilitySettingsSchema.optional()
 });
+/** Public inventory deliberately excludes destination credentials and URL paths. */
+export const ObservabilityExportDestinationSchema = z.object({
+    id: z.string().min(1),
+    name: z.string(),
+    signal: z.enum(['logs', 'traces', 'unknown']),
+    enabled: z.boolean(),
+    endpointOrigin: z
+        .url({ protocol: /^https?$/ })
+        .transform((value) => new URL(value).origin)
+        .optional(),
+    /** URL scheme only; does not certify an OTLP encoding or collector. */
+    transport: z.enum(['http', 'https', 'unknown']),
+    headerNames: z.array(z.string().regex(/^[!#$%&'*+.^_`|~0-9A-Za-z-]+$/)),
+    lastDeliveredAt: z.iso.datetime().optional(),
+    lastErrorAt: z.iso.datetime().optional()
+});
+export const ObservabilityExportInventorySchema = z.object({
+    destinations: z.array(ObservabilityExportDestinationSchema),
+    workers: z.array(z.object({
+        workerName: z.string().min(1),
+        logs: z.array(z.string()),
+        traces: z.array(z.string()),
+        /** When present, empty lists mean unreadable, not confirmed unconfigured. */
+        failure: InfraProviderFailureSchema.optional()
+    }))
+});
 export const observabilityKind = createRuntimeKind({
     id: 'infra/observability',
     descriptorSchema: ObservabilityBaseSchema,
-    discoveryPattern: INFRA_DISCOVERY_PATTERN,
-    extractStem
+    discoveryPatterns: INFRA_DISCOVERY_PATTERNS
 });
 export { ObservabilityBaseSchema as InfraObservabilityDescriptorSchema, ObservabilityScopeSchema, ObservabilitySettingsSchema };
 //# sourceMappingURL=observability.kind.js.map