@vibesdotdev/infra-core 0.0.1 → 1.0.0-rc.4

package/dist/schemas/deployment-provider.d.ts

@@ -0,0 +1,336 @@
+/**
+ * Contracts of the `infra/deployment-provider` kind: the capabilities a
+ * provider declares, and the implementation every provider registers to
+ * resolve its environment, render, check and release one app's deployment.
+ *
+ * The deploy driver (`vibes infra deploy run`) owns every provider-neutral
+ * step: the run ledger, readiness, the workspace build, pre-deploy commands,
+ * database migrations, the smoke probe and the deployment marker. It hands the
+ * provider those steps as {@link DeploymentReleaseHost} callbacks; the provider
+ * calls the ones its release uses, in its own order (Cloudflare migrates inside
+ * its staged config; a provider that builds remotely never calls `build`).
+ */
+import * as z from 'zod/v4';
+import { type JsonObject } from '@vibesdotdev/kernel/schemas/json';
+import { type AppDeployment } from '../schemas.ts';
+import type { DatabaseMigrationCredentialSource, DatabaseMigrationLog } from './database-migration.ts';
+import type { WebAppDescriptor } from '../kinds/web-app.kind.ts';
+import type { WebAppProjection, WebAppProjectionOptions } from '../web-app-projection.ts';
+/** Provider-owned deployment capabilities, admitted by the host's plugin selection. */
+export declare const DeploymentProviderDescriptorSchema: z.ZodObject<{
+    id: z.ZodString;
+    name: z.ZodOptional<z.ZodString>;
+    description: z.ZodOptional<z.ZodString>;
+    tags: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    enabled: z.ZodOptional<z.ZodBoolean>;
+    priority: z.ZodOptional<z.ZodNumber>;
+    capabilityId: z.ZodOptional<z.ZodString>;
+    requiredContext: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    optionalContext: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    config: z.ZodOptional<z.ZodUnknown>;
+    retention: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+        maxAgeDays: z.ZodOptional<z.ZodNumber>;
+        maxEntries: z.ZodOptional<z.ZodNumber>;
+        maxBytes: z.ZodOptional<z.ZodNumber>;
+        cascadeFrom: z.ZodOptional<z.ZodString>;
+        ageField: z.ZodOptional<z.ZodString>;
+        reason: z.ZodString;
+        enforcedBy: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>]>>;
+    kind: z.ZodLiteral<"infra/deployment-provider">;
+    hardware: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+        consumer: "consumer";
+        cloud: "cloud";
+    }>>>;
+    runtimes: z.ZodArray<z.ZodEnum<{
+        browser: "browser";
+        worker: "worker";
+        edge: "edge";
+        node: "node";
+    }>>;
+    pty: z.ZodBoolean;
+    projectionKeys: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    renderer: z.ZodOptional<z.ZodObject<{
+        module: z.ZodString;
+        export: z.ZodString;
+    }, z.core.$strip>>;
+    declarations: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    vendor: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type DeploymentProviderDescriptor = z.infer<typeof DeploymentProviderDescriptorSchema>;
+/** A line of provider tooling output. */
+export type DeploymentOutputLine = (stream: 'stdout' | 'stderr', line: string) => void;
+/** The environment variables a provider's tooling and the app's render run under. */
+export declare const DeploymentProviderEnvironmentSchema: z.ZodObject<{
+    variables: z.ZodRecord<z.ZodString, z.ZodString>;
+    projected: z.ZodBoolean;
+}, z.core.$strip>;
+export type DeploymentProviderEnvironment = z.infer<typeof DeploymentProviderEnvironmentSchema>;
+export declare const DeploymentProviderEnvironmentRequestSchema: z.ZodObject<{
+    environment: z.ZodOptional<z.ZodString>;
+    credentialSource: z.ZodDefault<z.ZodEnum<{
+        "secrets-store": "secrets-store";
+        ambient: "ambient";
+    }>>;
+}, z.core.$strip>;
+export type DeploymentProviderEnvironmentRequest = z.infer<typeof DeploymentProviderEnvironmentRequestSchema>;
+export interface DeploymentProviderEnvironmentOptions extends DeploymentProviderEnvironmentRequest {
+    readonly credentialSource: DatabaseMigrationCredentialSource;
+    readonly log: DatabaseMigrationLog;
+}
+/**
+ * What a provider's renderer answers for one evaluated deployment module. The
+ * artifacts are serialized text so the answer crosses a process boundary.
+ */
+export declare const DeploymentModuleRenderSchema: z.ZodObject<{
+    managed: z.ZodBoolean;
+    renders: z.ZodBoolean;
+    rendered: z.ZodNullable<z.ZodString>;
+    localRendered: z.ZodNullable<z.ZodString>;
+    unitName: z.ZodNullable<z.ZodString>;
+}, z.core.$strip>;
+export type DeploymentModuleRender = z.infer<typeof DeploymentModuleRenderSchema>;
+/** A callable a deployment module exports for its provider's renderer to invoke (e.g. a config generator). */
+export type DeploymentModuleCallable = (...args: never[]) => DeploymentModuleValue;
+/** One value of an evaluated deployment module's export: data, or a callable its renderer invokes. */
+export type DeploymentModuleValue = string | number | boolean | null | undefined | DeploymentModuleCallable | DeploymentModuleValue[] | {
+    [field: string]: DeploymentModuleValue;
+};
+export declare const DeploymentModuleValueSchema: z.ZodType<DeploymentModuleValue>;
+/** An evaluated deployment module's default export, admitted by the loader before any renderer reads it. */
+export declare const DeploymentModuleExportSchema: z.ZodRecord<z.ZodString, z.ZodType<DeploymentModuleValue, unknown, z.core.$ZodTypeInternals<DeploymentModuleValue, unknown>>>;
+export type DeploymentModuleExport = z.infer<typeof DeploymentModuleExportSchema>;
+/**
+ * The provider export a descriptor's `renderer` names; it reads the export's
+ * provider vocabulary with its own schema.
+ */
+export type DeploymentModuleRenderer = (exported: DeploymentModuleExport, projectionEnvironment: Readonly<Record<string, string>> | undefined) => DeploymentModuleRender;
+/** The app's deployment module as one evaluation saw it. */
+export interface DeploymentModuleEvaluation {
+    /** The module's default export as data (callables dropped), read by the provider's own schema. */
+    readonly exported: JsonObject;
+    /** The module opts into a generated, committed provider artifact. */
+    readonly managed: boolean;
+    /** Whether the module renders a provider artifact under an environment. */
+    readonly renders: boolean;
+    /** The provider artifact the module rendered under the evaluation's environment (e.g. a wrangler config), when it renders one. */
+    readonly rendered: JsonObject | null;
+    /** The artifact local development reads, when the module renders one. */
+    readonly localRendered: JsonObject | null;
+    /** The provider's name for the deployed unit (e.g. a Worker name), when the module declares one. */
+    readonly unitName: string | null;
+}
+/** The provider-neutral data of one release, parsed at the driver's boundary. */
+export declare const DeploymentReleaseRequestSchema: z.ZodObject<{
+    appDir: z.ZodString;
+    workspaceRoot: z.ZodString;
+    repositoryRoot: z.ZodOptional<z.ZodString>;
+    environment: z.ZodString;
+    providerEnvironment: z.ZodNullable<z.ZodString>;
+    dryRun: z.ZodBoolean;
+    skipBuild: z.ZodBoolean;
+    source: z.ZodObject<{
+        commit: z.ZodOptional<z.ZodString>;
+        branch: z.ZodOptional<z.ZodString>;
+        compositionDigest: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+    options: z.ZodType<JsonObject, JsonObject, z.core.$ZodTypeInternals<JsonObject, JsonObject>>;
+}, z.core.$strip>;
+export type DeploymentReleaseRequest = z.infer<typeof DeploymentReleaseRequestSchema>;
+/** Outputs prepared by the selected provider before the first final artifact seal. */
+export declare const DeploymentArtifactPreparationSchema: z.ZodObject<{
+    paths: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    references: z.ZodDefault<z.ZodArray<z.ZodString>>;
+}, z.core.$strip>;
+export type DeploymentArtifactPreparation = z.infer<typeof DeploymentArtifactPreparationSchema>;
+/** Evidence of the workspace build and its preflight. */
+export declare const DeploymentBuildEvidenceSchema: z.ZodObject<{
+    warnings: z.ZodArray<z.ZodString>;
+    artifact: z.ZodOptional<z.ZodObject<{
+        compositionDigest: z.ZodString;
+        sourceCommit: z.ZodString;
+        artifactDigest: z.ZodString;
+        references: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type DeploymentBuildEvidence = z.infer<typeof DeploymentBuildEvidenceSchema>;
+/**
+ * The driver-owned steps a provider's release calls. Each refuses with a typed
+ * CapabilityError; a provider propagates the refusal unchanged.
+ */
+export interface DeploymentReleaseHost {
+    /** Preflight the workspace, build the app's artifacts unless skipped, and preflight again. */
+    build(options?: {
+        /** After app build, before the first final seal. Runs once in the retained provider invocation; never after release effects. */
+        prepareArtifacts?: () => Promise<DeploymentArtifactPreparation>;
+    }): Promise<DeploymentBuildEvidence>;
+    /** Verify the held source independently of where this provider builds its artifact. */
+    assertSource?(): Promise<void>;
+    /** Revalidate the held source, composition, installed locks and emitted bytes before an external effect. */
+    assertArtifacts?(): Promise<void>;
+    /** Run the deployment's declared pre-deploy commands under `variables`. */
+    runPreDeployCommands(variables: Readonly<Record<string, string>>): Promise<void>;
+    /**
+     * Apply the app's pending remote migrations, reading the databases from
+     * `configFile` (relative to the app directory) under `variables`. Declared
+     * migrations no registered engine applies are a refusal.
+     */
+    migrate(input: {
+        configFile: string;
+        variables: Readonly<Record<string, string>>;
+    }): Promise<void>;
+    /** Evaluate the app's deployment module in a fresh process under `variables`. */
+    evaluate(variables: Readonly<Record<string, string>>): Promise<DeploymentModuleEvaluation>;
+}
+export interface DeploymentReleaseOptions extends DeploymentReleaseRequest {
+    readonly deployment: AppDeployment;
+    /** The identity evaluation the driver loaded the deployment from. */
+    readonly module: DeploymentModuleEvaluation;
+    /** The provider environment plus the driver's build identity (`VIBES_BUILD_VERSION`). */
+    readonly variables: Readonly<Record<string, string>>;
+    readonly host: DeploymentReleaseHost;
+    readonly log: DatabaseMigrationLog;
+    readonly onLine: DeploymentOutputLine;
+}
+export declare const DeploymentReleaseResultSchema: z.ZodObject<{
+    status: z.ZodEnum<{
+        released: "released";
+        "dry-run": "dry-run";
+    }>;
+    deployedUrl: z.ZodOptional<z.ZodString>;
+    externalDeploymentId: z.ZodOptional<z.ZodString>;
+    providerTraceRef: z.ZodOptional<z.ZodString>;
+    probe: z.ZodBoolean;
+    notes: z.ZodOptional<z.ZodString>;
+    summary: z.ZodOptional<z.ZodString>;
+    result: z.ZodType<JsonObject, JsonObject, z.core.$ZodTypeInternals<JsonObject, JsonObject>>;
+}, z.core.$strip>;
+export type DeploymentReleaseResult = z.infer<typeof DeploymentReleaseResultSchema>;
+/** One readiness finding. `fail` refuses a deploy; `warn` and `unknown` are reported. */
+export declare const DeploymentReadinessCheckSchema: z.ZodObject<{
+    id: z.ZodString;
+    label: z.ZodString;
+    status: z.ZodEnum<{
+        unknown: "unknown";
+        warn: "warn";
+        pass: "pass";
+        fail: "fail";
+    }>;
+    summary: z.ZodString;
+    evidence: z.ZodArray<z.ZodString>;
+    action: z.ZodNullable<z.ZodString>;
+}, z.core.$strip>;
+export type DeploymentReadinessCheck = z.infer<typeof DeploymentReadinessCheckSchema>;
+/**
+ * What a provider's artifact says about one selected environment: names only,
+ * never values. The driver judges routes and secrets against the deployment
+ * and the runtime's environment catalog from these facts.
+ */
+export declare const DeploymentEnvironmentFactsSchema: z.ZodObject<{
+    generated: z.ZodBoolean;
+    resolved: z.ZodBoolean;
+    providerEnvironment: z.ZodNullable<z.ZodString>;
+    explicitEnvironment: z.ZodBoolean;
+    routesInherited: z.ZodBoolean;
+    routes: z.ZodArray<z.ZodString>;
+    boundSecrets: z.ZodArray<z.ZodString>;
+    declaredRequirements: z.ZodArray<z.ZodString>;
+}, z.core.$strip>;
+export type DeploymentEnvironmentFacts = z.infer<typeof DeploymentEnvironmentFactsSchema>;
+export interface DeploymentInspectionOptions {
+    readonly appDir: string;
+    /** The deployment module's path, for evidence. */
+    readonly configPath: string;
+    /** The directory evidence paths are shown relative to. */
+    readonly displayBase: string;
+    readonly deployment: AppDeployment;
+    /** The module rendered under the readiness environment. */
+    readonly module: DeploymentModuleEvaluation;
+    /** The selected Vibes deployment environment. */
+    readonly environment: string;
+    /** The deployed-unit name of every app in the collection, by app id. */
+    readonly units: ReadonlyMap<string, string>;
+    readonly log: DatabaseMigrationLog;
+}
+export interface DeploymentInspection {
+    readonly facts: DeploymentEnvironmentFacts;
+    /** This provider's readiness checks (its artifact, its stores, its topology). */
+    readonly checks: readonly DeploymentReadinessCheck[];
+}
+export declare const DeploymentArtifactResultSchema: z.ZodObject<{
+    status: z.ZodEnum<{
+        error: "error";
+        skipped: "skipped";
+        updated: "updated";
+        unchanged: "unchanged";
+        drift: "drift";
+    }>;
+    path: z.ZodString;
+    unitName: z.ZodOptional<z.ZodString>;
+    reason: z.ZodOptional<z.ZodString>;
+    diff: z.ZodOptional<z.ZodString>;
+    note: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type DeploymentArtifactResult = z.infer<typeof DeploymentArtifactResultSchema>;
+export interface DeploymentArtifactOptions {
+    readonly appDir: string;
+    readonly deployment: AppDeployment;
+    readonly module: DeploymentModuleEvaluation;
+    /** Render the local-development artifact instead of the deployed one. */
+    readonly local: boolean;
+    /** `check` reads only; `write` rewrites a drifted artifact. */
+    readonly mode: 'check' | 'write';
+    readonly log: DatabaseMigrationLog;
+}
+export declare const DeploymentRollbackOutcomeSchema: z.ZodObject<{
+    unit: z.ZodString;
+    retained: z.ZodArray<z.ZodString>;
+    serving: z.ZodArray<z.ZodObject<{
+        versionId: z.ZodString;
+        percentage: z.ZodNumber;
+    }, z.core.$strip>>;
+    versions: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        createdOn: z.ZodOptional<z.ZodString>;
+        message: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    target: z.ZodOptional<z.ZodString>;
+    command: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    dryRun: z.ZodBoolean;
+    rolledBack: z.ZodBoolean;
+}, z.core.$strip>;
+export type DeploymentRollbackOutcome = z.infer<typeof DeploymentRollbackOutcomeSchema>;
+export interface DeploymentRollbackOptions {
+    readonly appDir: string;
+    readonly deployment: AppDeployment;
+    readonly module: DeploymentModuleEvaluation;
+    /** The selected Vibes deployment environment. */
+    readonly environment: string;
+    readonly credentialSource: DatabaseMigrationCredentialSource;
+    /** The version to serve; absent lists versions (dry run only). */
+    readonly to?: string;
+    readonly message?: string;
+    readonly dryRun: boolean;
+    /** The operator's write gate. */
+    readonly yes: boolean;
+    /** Provider-specific command options, read by the provider's own schema. */
+    readonly options: JsonObject;
+    readonly log: DatabaseMigrationLog;
+}
+export interface DeploymentProviderImplementation {
+    /** Project a registered web app's declared data without evaluating a deployment module. */
+    projectWebApp?(descriptor: WebAppDescriptor, options: WebAppProjectionOptions): Promise<WebAppProjection>;
+    /** Refuse provider options this provider cannot honour (`INVALID_INPUT`), before the driver records the run. */
+    validateOptions(options: JsonObject): void;
+    /** The environment this provider's tooling and the app's render run under, resolved once per deploy. */
+    environment(options: DeploymentProviderEnvironmentOptions): Promise<DeploymentProviderEnvironment>;
+    /** Release one app. Refuses with a typed CapabilityError; a provider failure is never reported as a release. */
+    release(options: DeploymentReleaseOptions): Promise<DeploymentReleaseResult>;
+    /** The environment facts and provider readiness checks for one app. */
+    inspect(options: DeploymentInspectionOptions): Promise<DeploymentInspection>;
+    /** Check or rewrite the app's committed provider artifact. */
+    regenerate(options: DeploymentArtifactOptions): Promise<DeploymentArtifactResult>;
+    /** Return the app to a deployed version; a provider without versions refuses `UNAVAILABLE`. */
+    rollback(options: DeploymentRollbackOptions): Promise<DeploymentRollbackOutcome>;
+}
+//# sourceMappingURL=deployment-provider.d.ts.map

package/dist/schemas/deployment-provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deployment-provider.d.ts","sourceRoot":"","sources":["../../src/schemas/deployment-provider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,OAAO,EAAoB,KAAK,UAAU,EAAE,MAAM,kCAAkC,CAAC;AACrF,OAAO,EAAoB,KAAK,aAAa,EAAE,MAAM,eAAe,CAAC;AACrE,OAAO,KAAK,EAAE,iCAAiC,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AACvG,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,KAAK,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AAE1F,uFAAuF;AACvF,eAAO,MAAM,kCAAkC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAwB7C,CAAC;AACH,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kCAAkC,CAAC,CAAC;AAE9F,yCAAyC;AACzC,MAAM,MAAM,oBAAoB,GAAG,CAAC,MAAM,EAAE,QAAQ,GAAG,QAAQ,EAAE,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;AAEvF,qFAAqF;AACrF,eAAO,MAAM,mCAAmC;;;iBAI9C,CAAC;AACH,MAAM,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mCAAmC,CAAC,CAAC;AAEhG,eAAO,MAAM,0CAA0C;;;;;;iBAQrD,CAAC;AACH,MAAM,MAAM,oCAAoC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0CAA0C,CAAC,CAAC;AAE9G,MAAM,WAAW,oCAAqC,SAAQ,oCAAoC;IACjG,QAAQ,CAAC,gBAAgB,EAAE,iCAAiC,CAAC;IAC7D,QAAQ,CAAC,GAAG,EAAE,oBAAoB,CAAC;CACnC;AAED;;;GAGG;AACH,eAAO,MAAM,4BAA4B;;;;;;iBAWvC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAElF,8GAA8G;AAC9G,MAAM,MAAM,wBAAwB,GAAG,CAAC,GAAG,IAAI,EAAE,KAAK,EAAE,KAAK,qBAAqB,CAAC;AAEnF,sGAAsG;AACtG,MAAM,MAAM,qBAAqB,GAC9B,MAAM,GACN,MAAM,GACN,OAAO,GACP,IAAI,GACJ,SAAS,GACT,wBAAwB,GACxB,qBAAqB,EAAE,GACvB;IAAE,CAAC,KAAK,EAAE,MAAM,GAAG,qBAAqB,CAAA;CAAE,CAAC;AAE9C,eAAO,MAAM,2BAA2B,EAAE,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAWxE,CAAC;AAEF,4GAA4G;AAC5G,eAAO,MAAM,4BAA4B,+HAAoD,CAAC;AAC9F,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAElF;;;GAGG;AACH,MAAM,MAAM,wBAAwB,GAAG,CACtC,QAAQ,EAAE,sBAAsB,EAChC,qBAAqB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,KAC/D,sBAAsB,CAAC;AAE5B,4DAA4D;AAC5D,MAAM,WAAW,0BAA0B;IAC1C,kGAAkG;IAClG,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC;IAC9B,qEAAqE;IACrE,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,2EAA2E;IAC3E,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,kIAAkI;IAClI,QAAQ,CAAC,QAAQ,EAAE,UAAU,GAAG,IAAI,CAAC;IACrC,yEAAyE;IACzE,QAAQ,CAAC,aAAa,EAAE,UAAU,GAAG,IAAI,CAAC;IAC1C,oGAAoG;IACpG,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC;AAED,iFAAiF;AACjF,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;iBAmBzC,CAAC;AACH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAEtF,sFAAsF;AACtF,eAAO,MAAM,mCAAmC;;;iBAK9C,CAAC;AACH,MAAM,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mCAAmC,CAAC,CAAC;AAEhG,yDAAyD;AACzD,eAAO,MAAM,6BAA6B;;;;;;;;iBAUxC,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACrC,8FAA8F;IAC9F,KAAK,CAAC,OAAO,CAAC,EAAE;QACf,gIAAgI;QAChI,gBAAgB,CAAC,EAAE,MAAM,OAAO,CAAC,6BAA6B,CAAC,CAAC;KAChE,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACrC,uFAAuF;IACvF,YAAY,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/B,4GAA4G;IAC5G,eAAe,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAClC,2EAA2E;IAC3E,oBAAoB,CAAC,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjF;;;;OAIG;IACH,OAAO,CAAC,KAAK,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnG,iFAAiF;IACjF,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAAC;CAC3F;AAED,MAAM,WAAW,wBAAyB,SAAQ,wBAAwB;IACzE,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAC;IACnC,qEAAqE;IACrE,QAAQ,CAAC,MAAM,EAAE,0BAA0B,CAAC;IAC5C,yFAAyF;IACzF,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACrD,QAAQ,CAAC,IAAI,EAAE,qBAAqB,CAAC;IACrC,QAAQ,CAAC,GAAG,EAAE,oBAAoB,CAAC;IACnC,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;CACtC;AAED,eAAO,MAAM,6BAA6B;;;;;;;;;;;;iBAaxC,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF,yFAAyF;AACzF,eAAO,MAAM,8BAA8B;;;;;;;;;;;;iBAOzC,CAAC;AACH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAEtF;;;;GAIG;AACH,eAAO,MAAM,gCAAgC;;;;;;;;;iBAiB3C,CAAC;AACH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC;AAE1F,MAAM,WAAW,2BAA2B;IAC3C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,kDAAkD;IAClD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,0DAA0D;IAC1D,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAC;IACnC,2DAA2D;IAC3D,QAAQ,CAAC,MAAM,EAAE,0BAA0B,CAAC;IAC5C,iDAAiD;IACjD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,wEAAwE;IACxE,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5C,QAAQ,CAAC,GAAG,EAAE,oBAAoB,CAAC;CACnC;AAED,MAAM,WAAW,oBAAoB;IACpC,QAAQ,CAAC,KAAK,EAAE,0BAA0B,CAAC;IAC3C,iFAAiF;IACjF,QAAQ,CAAC,MAAM,EAAE,SAAS,wBAAwB,EAAE,CAAC;CACrD;AAED,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;iBAWzC,CAAC;AACH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAEtF,MAAM,WAAW,yBAAyB;IACzC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAC;IACnC,QAAQ,CAAC,MAAM,EAAE,0BAA0B,CAAC;IAC5C,yEAAyE;IACzE,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,+DAA+D;IAC/D,QAAQ,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC;IACjC,QAAQ,CAAC,GAAG,EAAE,oBAAoB,CAAC;CACnC;AAED,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;;iBAa1C,CAAC;AACH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AAExF,MAAM,WAAW,yBAAyB;IACzC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAC;IACnC,QAAQ,CAAC,MAAM,EAAE,0BAA0B,CAAC;IAC5C,iDAAiD;IACjD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,gBAAgB,EAAE,iCAAiC,CAAC;IAC7D,kEAAkE;IAClE,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,iCAAiC;IACjC,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC;IACtB,4EAA4E;IAC5E,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;IAC7B,QAAQ,CAAC,GAAG,EAAE,oBAAoB,CAAC;CACnC;AAED,MAAM,WAAW,gCAAgC;IAChD,2FAA2F;IAC3F,aAAa,CAAC,CAAC,UAAU,EAAE,gBAAgB,EAAE,OAAO,EAAE,uBAAuB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC1G,gHAAgH;IAChH,eAAe,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI,CAAC;IAC3C,wGAAwG;IACxG,WAAW,CAAC,OAAO,EAAE,oCAAoC,GAAG,OAAO,CAAC,6BAA6B,CAAC,CAAC;IACnG,gHAAgH;IAChH,OAAO,CAAC,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;IAC7E,uEAAuE;IACvE,OAAO,CAAC,OAAO,EAAE,2BAA2B,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAC7E,8DAA8D;IAC9D,UAAU,CAAC,OAAO,EAAE,yBAAyB,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;IAClF,+FAA+F;IAC/F,QAAQ,CAAC,OAAO,EAAE,yBAAyB,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAAC;CACjF"}

package/dist/schemas/deployment-provider.js

@@ -0,0 +1,198 @@
+/**
+ * Contracts of the `infra/deployment-provider` kind: the capabilities a
+ * provider declares, and the implementation every provider registers to
+ * resolve its environment, render, check and release one app's deployment.
+ *
+ * The deploy driver (`vibes infra deploy run`) owns every provider-neutral
+ * step: the run ledger, readiness, the workspace build, pre-deploy commands,
+ * database migrations, the smoke probe and the deployment marker. It hands the
+ * provider those steps as {@link DeploymentReleaseHost} callbacks; the provider
+ * calls the ones its release uses, in its own order (Cloudflare migrates inside
+ * its staged config; a provider that builds remotely never calls `build`).
+ */
+import * as z from 'zod/v4';
+import { RuntimeDescriptorSchema, ScopeConstraintSchema } from '@vibesdotdev/kernel';
+import { JsonObjectSchema } from '@vibesdotdev/kernel/schemas/json';
+import { appRuntimeSchema } from "../schemas.js";
+/** Provider-owned deployment capabilities, admitted by the host's plugin selection. */
+export const DeploymentProviderDescriptorSchema = RuntimeDescriptorSchema.extend({
+    kind: z.literal('infra/deployment-provider'),
+    hardware: ScopeConstraintSchema.shape.hardware,
+    runtimes: z.array(appRuntimeSchema).min(1),
+    pty: z.boolean(),
+    /**
+     * Environment keys a deployment module reads while rendering (metadata
+     * identifiers such as an account id, never secret values). A fresh
+     * evaluation receives exactly these keys of the provider environment.
+     */
+    projectionKeys: z.array(z.string().regex(/^[_A-Z0-9]+$/)).default([]),
+    /**
+     * The module export that renders this provider's deployment modules, as a
+     * specifier a fresh process can import (`DeploymentModuleRenderer`). Absent
+     * when the provider's deployment modules render no provider artifact.
+     */
+    renderer: z.object({ module: z.string().min(1), export: z.string().min(1) }).optional(),
+    /**
+     * Deployment-module fields only this provider consumes. An app declaring
+     * another provider's fields is reported by readiness.
+     */
+    declarations: z.array(z.string().min(1)).default([]),
+    /** The vendor deployment records attribute this provider's releases to (`cloudflare`, `digitalocean`, ...). */
+    vendor: z.string().min(1).optional()
+});
+/** The environment variables a provider's tooling and the app's render run under. */
+export const DeploymentProviderEnvironmentSchema = z.object({
+    variables: z.record(z.string(), z.string()),
+    /** Whether the app's deployment module renders differently under `variables`, so readiness re-renders under them. */
+    projected: z.boolean()
+});
+export const DeploymentProviderEnvironmentRequestSchema = z.object({
+    /**
+     * The selected Vibes deployment environment (`production`, `staging`,
+     * `local`, ...); absent selects the runtime's current environment, as the
+     * provider's secrets resolution reads it.
+     */
+    environment: z.string().min(1).optional(),
+    credentialSource: z.enum(['secrets-store', 'ambient']).default('secrets-store')
+});
+/**
+ * What a provider's renderer answers for one evaluated deployment module. The
+ * artifacts are serialized text so the answer crosses a process boundary.
+ */
+export const DeploymentModuleRenderSchema = z.object({
+    /** The module opts into a generated, committed provider artifact. */
+    managed: z.boolean(),
+    /** The module renders a provider artifact under an environment. */
+    renders: z.boolean(),
+    /** The provider artifact rendered under the evaluation's environment; null when the module renders none. */
+    rendered: z.string().nullable(),
+    /** The artifact local development reads, when the module renders one. */
+    localRendered: z.string().nullable(),
+    /** The provider's name for the deployed unit (e.g. a Worker name), when the module declares one. */
+    unitName: z.string().nullable()
+});
+export const DeploymentModuleValueSchema = z.lazy(() => z.union([
+    z.string(),
+    z.number(),
+    z.boolean(),
+    z.null(),
+    z.undefined(),
+    z.custom((value) => value instanceof Function),
+    z.array(DeploymentModuleValueSchema),
+    z.record(z.string(), DeploymentModuleValueSchema)
+]));
+/** An evaluated deployment module's default export, admitted by the loader before any renderer reads it. */
+export const DeploymentModuleExportSchema = z.record(z.string(), DeploymentModuleValueSchema);
+/** The provider-neutral data of one release, parsed at the driver's boundary. */
+export const DeploymentReleaseRequestSchema = z.object({
+    appDir: z.string().min(1),
+    workspaceRoot: z.string().min(1),
+    /** The git repository that holds the app, when one does. */
+    repositoryRoot: z.string().min(1).optional(),
+    /** The selected Vibes deployment environment. */
+    environment: z.string().min(1),
+    /** The provider's own name for the selected environment block; null for its top level. */
+    providerEnvironment: z.string().nullable(),
+    dryRun: z.boolean(),
+    skipBuild: z.boolean(),
+    source: z.object({
+        commit: z.string().optional(),
+        branch: z.string().optional(),
+        /** Immutable parent/source/build-input identity for locally or remotely produced artifacts. */
+        compositionDigest: z.string().regex(/^[a-f0-9]{64}$/).optional()
+    }),
+    /** Provider-specific command options, read by the provider's own schema. */
+    options: JsonObjectSchema
+});
+/** Outputs prepared by the selected provider before the first final artifact seal. */
+export const DeploymentArtifactPreparationSchema = z.object({
+    /** Additional owned files or directories, absolute or relative to the held workspace root. No source-write admission is granted. */
+    paths: z.array(z.string().min(1)).default([]),
+    /** Exact immutable references already validated by the owning producer, never mutable tags. */
+    references: z.array(z.string().min(1)).default([])
+});
+/** Evidence of the workspace build and its preflight. */
+export const DeploymentBuildEvidenceSchema = z.object({
+    warnings: z.array(z.string()),
+    /** Present only after the complete app build has a validated immutable output receipt. */
+    artifact: z.object({
+        compositionDigest: z.string().regex(/^[a-f0-9]{64}$/),
+        sourceCommit: z.string().regex(/^[a-f0-9]{40,64}$/),
+        artifactDigest: z.string().regex(/^[a-f0-9]{64}$/),
+        /** Producer-verified immutable identities included in artifactDigest. */
+        references: z.array(z.string().min(1)).optional()
+    }).optional()
+});
+export const DeploymentReleaseResultSchema = z.object({
+    /** `dry-run` when nothing was released (a plan, a printed spec). */
+    status: z.enum(['released', 'dry-run']),
+    deployedUrl: z.string().optional(),
+    externalDeploymentId: z.string().optional(),
+    providerTraceRef: z.string().optional(),
+    /** Whether the driver probes the deployment's primary origin after this release. */
+    probe: z.boolean(),
+    notes: z.string().optional(),
+    /** The line the driver prints on success, when the release has one. */
+    summary: z.string().optional(),
+    /** Provider fields of the JSON result, placed after `provider`. */
+    result: JsonObjectSchema
+});
+/** One readiness finding. `fail` refuses a deploy; `warn` and `unknown` are reported. */
+export const DeploymentReadinessCheckSchema = z.object({
+    id: z.string().min(1),
+    label: z.string().min(1),
+    status: z.enum(['pass', 'warn', 'fail', 'unknown']),
+    summary: z.string(),
+    evidence: z.array(z.string()),
+    action: z.string().nullable()
+});
+/**
+ * What a provider's artifact says about one selected environment: names only,
+ * never values. The driver judges routes and secrets against the deployment
+ * and the runtime's environment catalog from these facts.
+ */
+export const DeploymentEnvironmentFactsSchema = z.object({
+    /** The provider renders its own environment blocks, so the driver holds it to an explicit route policy. */
+    generated: z.boolean(),
+    /** The provider artifact the facts come from could be rendered. */
+    resolved: z.boolean(),
+    /** The provider's own name for the selected environment block; null for its top level. */
+    providerEnvironment: z.string().nullable(),
+    /** The selected environment has its own block in the artifact. */
+    explicitEnvironment: z.boolean(),
+    /** The selected block inherits the top-level routes instead of declaring its own. */
+    routesInherited: z.boolean(),
+    /** Route patterns the selected environment serves. */
+    routes: z.array(z.string()),
+    /** Secret names the selected environment binds to a store. */
+    boundSecrets: z.array(z.string()),
+    /** Secret names the artifact declares as required without binding them. */
+    declaredRequirements: z.array(z.string())
+});
+export const DeploymentArtifactResultSchema = z.object({
+    status: z.enum(['updated', 'unchanged', 'drift', 'skipped', 'error']),
+    /** The committed artifact's path. */
+    path: z.string().min(1),
+    unitName: z.string().optional(),
+    /** Why the artifact was skipped or refused. */
+    reason: z.string().optional(),
+    /** A unified diff snippet on drift. */
+    diff: z.string().optional(),
+    /** A value-free note about what shaped the render. */
+    note: z.string().optional()
+});
+export const DeploymentRollbackOutcomeSchema = z.object({
+    /** The provider's name for the deployed unit. */
+    unit: z.string().min(1),
+    /** Parts of the unit a rollback leaves at their current version (for example a container image). */
+    retained: z.array(z.string().min(1)),
+    /** Versions serving before the rollback, with their traffic share. */
+    serving: z.array(z.object({ versionId: z.string(), percentage: z.number() })),
+    versions: z.array(z.object({ id: z.string(), createdOn: z.string().optional(), message: z.string().optional() })),
+    target: z.string().optional(),
+    /** The provider command the rollback runs (or would run, on a dry run). */
+    command: z.array(z.string()).optional(),
+    dryRun: z.boolean(),
+    rolledBack: z.boolean()
+});
+//# sourceMappingURL=deployment-provider.js.map

package/dist/schemas/deployment-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deployment-provider.js","sourceRoot":"","sources":["../../src/schemas/deployment-provider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,uBAAuB,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AACrF,OAAO,EAAE,gBAAgB,EAAmB,MAAM,kCAAkC,CAAC;AACrF,OAAO,EAAE,gBAAgB,EAAsB,MAAM,eAAe,CAAC;AAKrE,uFAAuF;AACvF,MAAM,CAAC,MAAM,kCAAkC,GAAG,uBAAuB,CAAC,MAAM,CAAC;IAChF,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,2BAA2B,CAAC;IAC5C,QAAQ,EAAE,qBAAqB,CAAC,KAAK,CAAC,QAAQ;IAC9C,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1C,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE;IAChB;;;;OAIG;IACH,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACrE;;;;OAIG;IACH,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IACvF;;;OAGG;IACH,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACpD,+GAA+G;IAC/G,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACpC,CAAC,CAAC;AAMH,qFAAqF;AACrF,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3D,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;IAC3C,qHAAqH;IACrH,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;CACtB,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,0CAA0C,GAAG,CAAC,CAAC,MAAM,CAAC;IAClE;;;;OAIG;IACH,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACzC,gBAAgB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC;CAC/E,CAAC,CAAC;AAQH;;;GAGG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,qEAAqE;IACrE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,mEAAmE;IACnE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,4GAA4G;IAC5G,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,yEAAyE;IACzE,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACpC,oGAAoG;IACpG,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC/B,CAAC,CAAC;AAiBH,MAAM,CAAC,MAAM,2BAA2B,GAAqC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CACxF,CAAC,CAAC,KAAK,CAAC;IACP,CAAC,CAAC,MAAM,EAAE;IACV,CAAC,CAAC,MAAM,EAAE;IACV,CAAC,CAAC,OAAO,EAAE;IACX,CAAC,CAAC,IAAI,EAAE;IACR,CAAC,CAAC,SAAS,EAAE;IACb,CAAC,CAAC,MAAM,CAA2B,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,YAAY,QAAQ,CAAC;IACxE,CAAC,CAAC,KAAK,CAAC,2BAA2B,CAAC;IACpC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,2BAA2B,CAAC;CACjD,CAAC,CACF,CAAC;AAEF,4GAA4G;AAC5G,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,2BAA2B,CAAC,CAAC;AA4B9F,iFAAiF;AACjF,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC;IACtD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAChC,4DAA4D;IAC5D,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC5C,iDAAiD;IACjD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,0FAA0F;IAC1F,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1C,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE;IACnB,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;IACtB,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QAChB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC7B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC7B,+FAA+F;QAC/F,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,QAAQ,EAAE;KAChE,CAAC;IACF,4EAA4E;IAC5E,OAAO,EAAE,gBAAgB;CACzB,CAAC,CAAC;AAGH,sFAAsF;AACtF,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3D,oIAAoI;IACpI,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC7C,+FAA+F;IAC/F,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CAClD,CAAC,CAAC;AAGH,yDAAyD;AACzD,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACrD,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC7B,0FAA0F;IAC1F,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC;QAClB,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC;QACrD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC;QACnD,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC;QAClD,yEAAyE;QACzE,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;KACjD,CAAC,CAAC,QAAQ,EAAE;CACb,CAAC,CAAC;AAwCH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACrD,oEAAoE;IACpE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IACvC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3C,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACvC,oFAAoF;IACpF,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE;IAClB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,uEAAuE;IACvE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,mEAAmE;IACnE,MAAM,EAAE,gBAAgB;CACxB,CAAC,CAAC;AAGH,yFAAyF;AACzF,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC;IACtD,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;IACnD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC7B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC7B,CAAC,CAAC;AAGH;;;;GAIG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,CAAC,MAAM,CAAC;IACxD,2GAA2G;IAC3G,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;IACtB,mEAAmE;IACnE,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;IACrB,0FAA0F;IAC1F,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1C,kEAAkE;IAClE,mBAAmB,EAAE,CAAC,CAAC,OAAO,EAAE;IAChC,qFAAqF;IACrF,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE;IAC5B,sDAAsD;IACtD,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC3B,8DAA8D;IAC9D,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACjC,2EAA2E;IAC3E,oBAAoB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;CACzC,CAAC,CAAC;AAyBH,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC;IACtD,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IACrE,qCAAqC;IACrC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,+CAA+C;IAC/C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,uCAAuC;IACvC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,sDAAsD;IACtD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC3B,CAAC,CAAC;AAcH,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC,MAAM,CAAC;IACvD,iDAAiD;IACjD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,oGAAoG;IACpG,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACpC,sEAAsE;IACtE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC7E,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACjH,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,2EAA2E;IAC3E,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACvC,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE;IACnB,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE;CACvB,CAAC,CAAC"}

package/dist/schemas/log-stream.d.ts

@@ -0,0 +1,27 @@
+import { z } from 'zod/v4';
+export declare const WorkerLogRequestSchema: z.ZodObject<{
+    namespace: z.ZodString;
+    kubeconfig: z.ZodOptional<z.ZodString>;
+    resource: z.ZodString;
+    tail: z.ZodOptional<z.ZodNumber>;
+    since: z.ZodOptional<z.ZodString>;
+    container: z.ZodOptional<z.ZodString>;
+    timestamps: z.ZodOptional<z.ZodBoolean>;
+    previous: z.ZodOptional<z.ZodBoolean>;
+    follow: z.ZodOptional<z.ZodBoolean>;
+    signal: z.ZodOptional<z.ZodInstanceOf<AbortSignal>>;
+}, z.core.$strip>;
+export type WorkerLogRequest = z.infer<typeof WorkerLogRequestSchema>;
+/**
+ * Provider-owned active operation. Completion settles only after provider resources
+ * are released: resolves on EOF or requested cancellation, rejects on failure.
+ * cancel is idempotent, works while output is locked, and awaits cleanup.
+ * The provider must also honor request.signal and output consumer cancellation.
+ */
+export declare const ActiveLogStreamSchema: z.ZodObject<{
+    output: z.ZodInstanceOf<ReadableStream<Uint8Array<ArrayBufferLike>>>;
+    completion: z.ZodInstanceOf<Promise<void>>;
+    cancel: z.ZodFunction<z.ZodTuple<readonly [z.ZodOptional<z.ZodUnknown>], null>, z.ZodPromise<z.ZodVoid>>;
+}, z.core.$strip>;
+export type ActiveLogStream = z.infer<typeof ActiveLogStreamSchema>;
+//# sourceMappingURL=log-stream.d.ts.map

package/dist/schemas/log-stream.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"log-stream.d.ts","sourceRoot":"","sources":["../../src/schemas/log-stream.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAK3B,eAAO,MAAM,sBAAsB;;;;;;;;;;;iBAcjC,CAAC;AAEH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB;;;;iBAKhC,CAAC;AAEH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC"}

package/dist/schemas/log-stream.js

@@ -0,0 +1,31 @@
+import { z } from 'zod/v4';
+// Kubernetes durations use Go's duration units, including compound and fractional values.
+const durationPart = String.raw `(?:\d+(?:\.\d*)?|\.\d+)(?:ns|us|µs|μs|ms|s|m|h)`;
+export const WorkerLogRequestSchema = z.object({
+    namespace: z.string().min(1),
+    /** Provider-owned kubeconfig reference; Core never reads it. */
+    kubeconfig: z.string().min(1).optional(),
+    /** Explicit Kubernetes resource reference, e.g. deployment/api or pod/api-123. */
+    resource: z.string().regex(/^[^/\s]+\/[^/\s]+$/),
+    /** -1 requests all available lines. Omission preserves the provider's default. */
+    tail: z.number().int().min(-1).optional(),
+    since: z.string().regex(new RegExp(`^(?:0|(?:${durationPart})+)$`)).optional(),
+    container: z.string().min(1).optional(),
+    timestamps: z.boolean().optional(),
+    previous: z.boolean().optional(),
+    follow: z.boolean().optional(),
+    signal: z.instanceof(AbortSignal).optional()
+});
+/**
+ * Provider-owned active operation. Completion settles only after provider resources
+ * are released: resolves on EOF or requested cancellation, rejects on failure.
+ * cancel is idempotent, works while output is locked, and awaits cleanup.
+ * The provider must also honor request.signal and output consumer cancellation.
+ */
+export const ActiveLogStreamSchema = z.object({
+    output: z.instanceof((ReadableStream)),
+    // Validate the active handle without awaiting the operation's completion.
+    completion: z.instanceof((Promise)),
+    cancel: z.function({ input: [z.unknown().optional()], output: z.promise(z.void()) })
+});
+//# sourceMappingURL=log-stream.js.map

package/dist/schemas/log-stream.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"log-stream.js","sourceRoot":"","sources":["../../src/schemas/log-stream.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAE3B,0FAA0F;AAC1F,MAAM,YAAY,GAAG,MAAM,CAAC,GAAG,CAAA,iDAAiD,CAAC;AAEjF,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,gEAAgE;IAChE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACxC,kFAAkF;IAClF,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,oBAAoB,CAAC;IAChD,kFAAkF;IAClF,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACzC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,YAAY,YAAY,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC9E,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACvC,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAClC,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAChC,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC9B,MAAM,EAAE,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,QAAQ,EAAE;CAC5C,CAAC,CAAC;AAIH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,MAAM,EAAE,CAAC,CAAC,UAAU,CAAC,CAAA,cAA0B,CAAA,CAAC;IAChD,0EAA0E;IAC1E,UAAU,EAAE,CAAC,CAAC,UAAU,CAAC,CAAA,OAAa,CAAA,CAAC;IACvC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;CACpF,CAAC,CAAC"}