@vibesdotdev/infra-core 0.0.1 → 1.0.0-rc.4

package/dist/web-app-projection.d.ts

@@ -0,0 +1,132 @@
+import * as z from 'zod/v4';
+import { type RuntimeRef } from '@vibesdotdev/kernel';
+import type { ArtifactOutput } from './kinds/artifact.kind.ts';
+import type { WebAppDescriptor } from './kinds/web-app.kind.ts';
+/** The formatter belongs to the declared project, never a global fallback. */
+export declare const WebAppFormatterSchema: z.ZodObject<{
+    projectRoot: z.ZodString;
+    bunExecutable: z.ZodString;
+    prettierExecutable: z.ZodString;
+}, z.core.$strict>;
+export declare const WebAppProjectionOptionsSchema: z.ZodObject<{
+    appRoot: z.ZodString;
+    target: z.ZodEnum<{
+        local: "local";
+        production: "production";
+    }>;
+    projectionEnvironment: z.ZodRecord<z.ZodString, z.ZodString>;
+    formatter: z.ZodOptional<z.ZodObject<{
+        projectRoot: z.ZodString;
+        bunExecutable: z.ZodString;
+        prettierExecutable: z.ZodString;
+    }, z.core.$strict>>;
+    signal: z.ZodOptional<z.ZodInstanceOf<AbortSignal>>;
+}, z.core.$strict>;
+export type WebAppProjectionOptions = z.infer<typeof WebAppProjectionOptionsSchema>;
+export declare const WebAppTextArtifactSchema: z.ZodObject<{
+    content: z.ZodString;
+    filename: z.ZodString;
+    path: z.ZodString;
+    metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+}, z.core.$strict>;
+export type WebAppTextArtifact = Omit<ArtifactOutput, 'content'> & {
+    content: string;
+};
+export declare const WebAppProjectionSchema: z.ZodObject<{
+    deployment: z.ZodObject<{
+        appId: z.ZodString;
+        appName: z.ZodString;
+        provider: z.ZodString;
+        providerPlugin: z.ZodOptional<z.ZodString>;
+        runtime: z.ZodEnum<{
+            browser: "browser";
+            worker: "worker";
+            edge: "edge";
+            node: "node";
+        }>;
+        build: z.ZodObject<{
+            workspaceRootDir: z.ZodDefault<z.ZodString>;
+            appDir: z.ZodString;
+            installCommand: z.ZodOptional<z.ZodString>;
+            buildCommand: z.ZodString;
+            outputDir: z.ZodString;
+        }, z.core.$strip>;
+        origins: z.ZodArray<z.ZodObject<{
+            hostname: z.ZodString;
+            origin: z.ZodString;
+            kind: z.ZodDefault<z.ZodEnum<{
+                internal: "internal";
+                primary: "primary";
+                redirect: "redirect";
+                preview: "preview";
+                alias: "alias";
+            }>>;
+            description: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+        env: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            name: z.ZodString;
+            public: z.ZodOptional<z.ZodBoolean>;
+            required: z.ZodOptional<z.ZodBoolean>;
+            value: z.ZodOptional<z.ZodString>;
+            secret: z.ZodOptional<z.ZodBoolean>;
+            description: z.ZodOptional<z.ZodString>;
+            storeKey: z.ZodOptional<z.ZodString>;
+            storeBinding: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strip>>>;
+        dependsOn: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            appId: z.ZodString;
+            reason: z.ZodString;
+            required: z.ZodDefault<z.ZodBoolean>;
+        }, z.core.$strip>>>;
+        upstreams: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            name: z.ZodString;
+            origin: z.ZodString;
+            purpose: z.ZodString;
+            originEnvVar: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>>;
+        tags: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        kvNamespaces: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            binding: z.ZodString;
+            id: z.ZodString;
+            preview_id: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>>;
+        preDeployCommands: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            command: z.ZodString;
+            description: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>>;
+        execution: z.ZodOptional<z.ZodObject<{
+            pty: z.ZodOptional<z.ZodBoolean>;
+            shell: z.ZodOptional<z.ZodBoolean>;
+            maxSessions: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strip>>;
+        migrations: z.ZodOptional<z.ZodObject<{
+            requiredForLocalDev: z.ZodDefault<z.ZodBoolean>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>;
+    provider: z.ZodString;
+    managed: z.ZodBoolean;
+    workerName: z.ZodNullable<z.ZodString>;
+    artifact: z.ZodNullable<z.ZodObject<{
+        content: z.ZodString;
+        filename: z.ZodString;
+        path: z.ZodString;
+        metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type WebAppProjection = z.infer<typeof WebAppProjectionSchema>;
+/** Implemented by the provider's per-descriptor runtime loader. */
+export interface WebAppProjectionImplementation {
+    readonly config: WebAppDescriptor;
+    project(options: WebAppProjectionOptions): Promise<WebAppProjection>;
+}
+/**
+ * Resolve one registered deployable through the handed runtime. Options are
+ * read once inside the untrusted-input guard (`INVALID_INPUT
+ * web-app-projection-options-invalid`); a provider without `project` refuses
+ * `UNAVAILABLE web-app-projection-provider-missing`; a provider's typed refusal
+ * passes through, any other throw is `INTERNAL web-app-projection-failed`
+ * carrying only its value-free facts; a result that does not read is
+ * `INTERNAL web-app-projection-invalid`.
+ */
+export declare function projectWebApp(runtime: RuntimeRef, id: string, options: WebAppProjectionOptions): Promise<WebAppProjection>;
+//# sourceMappingURL=web-app-projection.d.ts.map

package/dist/web-app-projection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-app-projection.d.ts","sourceRoot":"","sources":["../src/web-app-projection.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAG5B,OAAO,EAA6E,KAAK,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjI,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAGhE,8EAA8E;AAC9E,eAAO,MAAM,qBAAqB;;;;kBAIhC,CAAC;AAEH,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;kBAOxC,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF,eAAO,MAAM,wBAAwB;;;;;kBAKnC,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,IAAI,CAAC,cAAc,EAAE,SAAS,CAAC,GAAG;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEvF,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAajC,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE,mEAAmE;AACnE,MAAM,WAAW,8BAA8B;IAC9C,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAClC,OAAO,CAAC,OAAO,EAAE,uBAAuB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;CACrE;AAwBD;;;;;;;;GAQG;AACH,wBAAsB,aAAa,CAClC,OAAO,EAAE,UAAU,EACnB,EAAE,EAAE,MAAM,EACV,OAAO,EAAE,uBAAuB,GAC9B,OAAO,CAAC,gBAAgB,CAAC,CAuB3B"}

package/dist/web-app-projection.js

@@ -0,0 +1,93 @@
+import * as z from 'zod/v4';
+import { validateAppDeployment } from "./deployment.js";
+import { readUntrusted } from '@vibesdotdev/config/manifest/read-untrusted';
+import { CapabilityError, CaughtFailureSchema, isCapabilityError, valueFreeFailure } from '@vibesdotdev/kernel';
+import { appDeploymentSchema, deploymentProviderSchema } from "./schemas.js";
+/** The formatter belongs to the declared project, never a global fallback. */
+export const WebAppFormatterSchema = z.strictObject({
+    projectRoot: z.string().min(1),
+    bunExecutable: z.string().min(1),
+    prettierExecutable: z.string().min(1)
+});
+export const WebAppProjectionOptionsSchema = z.strictObject({
+    /** Absolute app root supplied by the canonical runtime discovery/caller. */
+    appRoot: z.string().min(1),
+    target: z.enum(['production', 'local']),
+    projectionEnvironment: z.record(z.string(), z.string()),
+    formatter: WebAppFormatterSchema.optional(),
+    signal: z.instanceof(AbortSignal).optional()
+});
+export const WebAppTextArtifactSchema = z.strictObject({
+    content: z.string(),
+    filename: z.string().min(1),
+    path: z.string().min(1),
+    metadata: z.record(z.string(), z.unknown()).optional()
+});
+export const WebAppProjectionSchema = z.strictObject({
+    deployment: appDeploymentSchema,
+    provider: deploymentProviderSchema,
+    managed: z.boolean(),
+    workerName: z.string().min(1).nullable(),
+    artifact: WebAppTextArtifactSchema.nullable()
+}).superRefine((projection, context) => {
+    if (projection.provider !== projection.deployment.provider) {
+        context.addIssue({ code: 'custom', path: ['provider'], message: 'Projection provider must match its deployment.' });
+    }
+    if (projection.managed && projection.artifact === null) {
+        context.addIssue({ code: 'custom', path: ['artifact'], message: 'A managed projection must contain its artifact.' });
+    }
+});
+const OPTIONS_INVALID = {
+    code: 'INVALID_INPUT',
+    reason: 'web-app-projection-options-invalid',
+    message: () => 'Web app projection options are invalid.'
+};
+const PROJECTION_INVALID = {
+    code: 'INTERNAL',
+    reason: 'web-app-projection-invalid',
+    message: () => 'The provider returned an invalid web app projection.'
+};
+const PROVIDER_MISSING = {
+    code: 'UNAVAILABLE',
+    reason: 'web-app-projection-provider-missing',
+    message: () => 'The web app has no composed projection provider.'
+};
+/** A resolved provider offers `project`; kept as the original object (its method uses `this`). */
+const ProjectionOperationsSchema = z.object({ project: z.function() });
+const ProjectionProviderSchema = z.custom((value) => ProjectionOperationsSchema.safeParse(value).success);
+/**
+ * Resolve one registered deployable through the handed runtime. Options are
+ * read once inside the untrusted-input guard (`INVALID_INPUT
+ * web-app-projection-options-invalid`); a provider without `project` refuses
+ * `UNAVAILABLE web-app-projection-provider-missing`; a provider's typed refusal
+ * passes through, any other throw is `INTERNAL web-app-projection-failed`
+ * carrying only its value-free facts; a result that does not read is
+ * `INTERNAL web-app-projection-invalid`.
+ */
+export async function projectWebApp(runtime, id, options) {
+    const input = readUntrusted(WebAppProjectionOptionsSchema, () => options, OPTIONS_INVALID);
+    const resolved = await runtime
+        .query('infra/web-app')
+        .withId(id)
+        .enabled()
+        .resolve();
+    // A composed loader may be absent or stale; refuse unless the seam resolves to something callable.
+    const provider = readUntrusted(ProjectionProviderSchema, () => resolved, { ...PROVIDER_MISSING, details: { id } });
+    let projected;
+    try {
+        validateAppDeployment(runtime, provider.config.deployment);
+        projected = await provider.project(input);
+    }
+    catch (error) {
+        const caught = CaughtFailureSchema.parse(error);
+        if (caught instanceof Error && isCapabilityError(caught))
+            throw caught;
+        throw new CapabilityError('The web app projection provider failed.', 'INTERNAL', {
+            reason: 'web-app-projection-failed', details: { id }, cause: valueFreeFailure(caught)
+        });
+    }
+    const projection = readUntrusted(WebAppProjectionSchema, () => projected, PROJECTION_INVALID);
+    validateAppDeployment(runtime, projection.deployment);
+    return projection;
+}
+//# sourceMappingURL=web-app-projection.js.map

package/dist/web-app-projection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-app-projection.js","sourceRoot":"","sources":["../src/web-app-projection.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EAAE,aAAa,EAA6B,MAAM,6CAA6C,CAAC;AACvG,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,gBAAgB,EAAmB,MAAM,qBAAqB,CAAC;AAGjI,OAAO,EAAE,mBAAmB,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AAE7E,8EAA8E;AAC9E,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,YAAY,CAAC;IACnD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAChC,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACrC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,YAAY,CAAC;IAC3D,4EAA4E;IAC5E,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IACvC,qBAAqB,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;IACvD,SAAS,EAAE,qBAAqB,CAAC,QAAQ,EAAE;IAC3C,MAAM,EAAE,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,QAAQ,EAAE;CAC5C,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,YAAY,CAAC;IACtD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;CACtD,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,YAAY,CAAC;IACpD,UAAU,EAAE,mBAAmB;IAC/B,QAAQ,EAAE,wBAAwB;IAClC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACxC,QAAQ,EAAE,wBAAwB,CAAC,QAAQ,EAAE;CAC7C,CAAC,CAAC,WAAW,CAAC,CAAC,UAAU,EAAE,OAAO,EAAE,EAAE;IACtC,IAAI,UAAU,CAAC,QAAQ,KAAK,UAAU,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAC5D,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,gDAAgD,EAAE,CAAC,CAAC;IACrH,CAAC;IACD,IAAI,UAAU,CAAC,OAAO,IAAI,UAAU,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;QACxD,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,iDAAiD,EAAE,CAAC,CAAC;IACtH,CAAC;AACF,CAAC,CAAC,CAAC;AASH,MAAM,eAAe,GAAyB;IAC7C,IAAI,EAAE,eAAe;IACrB,MAAM,EAAE,oCAAoC;IAC5C,OAAO,EAAE,GAAG,EAAE,CAAC,yCAAyC;CACxD,CAAC;AAEF,MAAM,kBAAkB,GAAyB;IAChD,IAAI,EAAE,UAAU;IAChB,MAAM,EAAE,4BAA4B;IACpC,OAAO,EAAE,GAAG,EAAE,CAAC,sDAAsD;CACrE,CAAC;AAEF,MAAM,gBAAgB,GAAyB;IAC9C,IAAI,EAAE,aAAa;IACnB,MAAM,EAAE,qCAAqC;IAC7C,OAAO,EAAE,GAAG,EAAE,CAAC,kDAAkD;CACjE,CAAC;AAEF,kGAAkG;AAClG,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AACvE,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAiC,CAAC,KAAK,EAAE,EAAE,CAAC,0BAA0B,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC;AAE1I;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAClC,OAAmB,EACnB,EAAU,EACV,OAAgC;IAEhC,MAAM,KAAK,GAAG,aAAa,CAAC,6BAA6B,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IAC3F,MAAM,QAAQ,GAAG,MAAM,OAAO;SAC5B,KAAK,CAAmD,eAAe,CAAC;SACxE,MAAM,CAAC,EAAE,CAAC;SACV,OAAO,EAAE;SACT,OAAO,EAAE,CAAC;IACZ,mGAAmG;IACnG,MAAM,QAAQ,GAAG,aAAa,CAAC,wBAAwB,EAAE,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAE,GAAG,gBAAgB,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACnH,IAAI,SAA2B,CAAC;IAChC,IAAI,CAAC;QACJ,qBAAqB,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC3D,SAAS,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC3C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,MAAM,GAAG,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAChD,IAAI,MAAM,YAAY,KAAK,IAAI,iBAAiB,CAAC,MAAM,CAAC;YAAE,MAAM,MAAM,CAAC;QACvE,MAAM,IAAI,eAAe,CAAC,yCAAyC,EAAE,UAAU,EAAE;YAChF,MAAM,EAAE,2BAA2B,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,gBAAgB,CAAC,MAAM,CAAC;SACrF,CAAC,CAAC;IACJ,CAAC;IACD,MAAM,UAAU,GAAG,aAAa,CAAC,sBAAsB,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;IAC9F,qBAAqB,CAAC,OAAO,EAAE,UAAU,CAAC,UAAU,CAAC,CAAC;IACtD,OAAO,UAAU,CAAC;AACnB,CAAC"}

package/package.json

@@ -1,80 +1,96 @@
 {
   "name": "@vibesdotdev/infra-core",
-  "version": "0.0.1",
-  "type": "module",
+  "version": "1.0.0-rc.4",
+  "dependencies": {
+    "@vibesdotdev/infra-contracts": "^1.0.0-rc.4",
+    "@vibesdotdev/config": "^1.0.0-rc.3",
+    "@vibesdotdev/filesystem": "^1.0.0-rc.2",
+    "@vibesdotdev/logging": "^1.0.0-rc.4",
+    "@vibesdotdev/kernel": "^1.0.0-rc.6",
+    "@vibesdotdev/shared": "^1.0.0-rc.4",
+    "zod": "^4.6.7"
+  },
+  "peerDependencies": {},
   "main": "./dist/index.js",
-  "types": "./dist/index.d.ts",
   "exports": {
+    "./service": {
+      "bun": "./dist/service.js",
+      "types": "./dist/service.d.ts",
+      "import": "./dist/service.js",
+      "default": "./dist/service.js"
+    },
     ".": {
+      "bun": "./dist/index.js",
       "types": "./dist/index.d.ts",
-      "bun": "./src/index.ts",
       "import": "./dist/index.js",
       "default": "./dist/index.js"
     },
     "./deployment": {
+      "bun": "./dist/deployment.js",
       "types": "./dist/deployment.d.ts",
-      "bun": "./src/deployment.ts",
       "import": "./dist/deployment.js",
       "default": "./dist/deployment.js"
     },
+    "./deployment-environment": {
+      "bun": "./dist/deployment-environment.js",
+      "types": "./dist/deployment-environment.d.ts",
+      "import": "./dist/deployment-environment.js",
+      "default": "./dist/deployment-environment.js"
+    },
     "./schemas": {
+      "bun": "./dist/schemas.js",
       "types": "./dist/schemas.d.ts",
-      "bun": "./src/schemas.ts",
       "import": "./dist/schemas.js",
       "default": "./dist/schemas.js"
     },
     "./kinds": {
+      "bun": "./dist/kinds/index.js",
       "types": "./dist/kinds/index.d.ts",
-      "bun": "./src/kinds/index.ts",
       "import": "./dist/kinds/index.js",
       "default": "./dist/kinds/index.js"
     },
     "./plugin": {
+      "bun": "./dist/infra.plugin.js",
       "types": "./dist/infra.plugin.d.ts",
-      "bun": "./src/infra.plugin.ts",
       "import": "./dist/infra.plugin.js",
       "default": "./dist/infra.plugin.js"
     },
     "./bootstrap": {
+      "bun": "./dist/bootstrap/index.js",
       "types": "./dist/bootstrap/index.d.ts",
-      "bun": "./src/bootstrap/index.ts",
       "import": "./dist/bootstrap/index.js",
       "default": "./dist/bootstrap/index.js"
+    },
+    "./generate": {
+      "bun": "./dist/generate/index.js",
+      "types": "./dist/generate/index.d.ts",
+      "import": "./dist/generate/index.js",
+      "default": "./dist/generate/index.js"
+    },
+    "./generate/plugin": {
+      "bun": "./dist/generate/plugin.js",
+      "types": "./dist/generate/plugin.d.ts",
+      "import": "./dist/generate/plugin.js",
+      "default": "./dist/generate/plugin.js"
+    },
+    "./doks/cloud": {
+      "bun": "./dist/doks/cloud/index.js",
+      "types": "./dist/doks/cloud/index.d.ts",
+      "import": "./dist/doks/cloud/index.js",
+      "default": "./dist/doks/cloud/index.js"
+    },
+    "./doks/types": {
+      "bun": "./dist/doks/types.js",
+      "types": "./dist/doks/types.d.ts",
+      "import": "./dist/doks/types.js",
+      "default": "./dist/doks/types.js"
     }
   },
-  "publishConfig": {
-    "registry": "https://registry.npmjs.org",
-    "access": "public"
-  },
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/vibesdotdev/monorepo.git",
-    "directory": "packages/infra-core"
-  },
-  "dependencies": {
-    "@vibesdotdev/logging": "0.0.1",
-    "@vibesdotdev/runtime": "0.0.1",
-    "zod": "^4.3.6"
-  },
-  "scripts": {
-    "test": "bun test",
-    "check": "bun --bun tsc -p tsconfig.json --noEmit",
-    "build": "tsc -p tsconfig.json"
-  },
-  "license": "MIT",
   "files": [
     "dist",
-    "src",
-    "bin",
     "README.md",
-    "SPEC.md",
     "LICENSE",
-    "!src/**/__tests__/**",
-    "!src/**/__stubs__/**",
-    "!src/**/*.test.ts",
-    "!src/**/*.test.tsx",
-    "!src/**/*.spec.ts",
-    "!src/**/*.spec.tsx",
+    "!dist/**/*.tsbuildinfo",
     "!dist/**/__tests__/**",
     "!dist/**/__stubs__/**",
     "!dist/**/*.test.js",
@@ -86,7 +102,41 @@
     "!dist/**/*.spec.d.ts",
     "!dist/**/*.spec.d.ts.map"
   ],
+  "scripts": {
+    "lint": "node ../node_modules/@vibesdotdev/internal-oxlint-toolchain/ratchet.mjs .",
+    "test": "${BUN:-bun} test",
+    "check": "${BUN:-bun} --bun tsc -p tsconfig.json",
+    "build": "rm -rf dist && tsc -p tsconfig.build.json"
+  },
+  "repository": {
+    "type": "git",
+    "url": "ssh://git@git.vibes.dev/vibesdotdev/framework.git",
+    "directory": "infra-core"
+  },
+  "publishConfig": {
+    "registry": "https://packages.vibes.dev",
+    "access": "public"
+  },
   "vibes": {
-    "visibility": "public-framework"
+    "visibility": "public",
+    "registry": {
+      "repositoryId": "4b1374d4-6830-4bfd-98e3-de66416368a8",
+      "directory": "infra-core"
+    },
+    "handedRuntimeLogging": true
+  },
+  "type": "module",
+  "types": "./dist/index.d.ts",
+  "license": "MIT",
+  "description": "Infrastructure manifest schemas, runtime kinds and deployment primitives shared by infra adapters.",
+  "homepage": "https://docs.vibes.dev/infra-core",
+  "bugs": {
+    "url": "https://docs.vibes.dev/infra-core#support"
+  },
+  "gitHead": "6c90364649d9a94d238d81180ebb03adf5017263",
+  "_vibes_source": {
+    "repo": "ssh://git@git.vibes.dev/vibesdotdev/framework.git",
+    "sha": "6c90364649d9a94d238d81180ebb03adf5017263",
+    "workspaceDigest": "sha256:18ee5d2b7916bcedc3b3e799a54423aef984af6c6b2a633112cf851adf0e9c00"
   }
 }

package/SPEC.md

@@ -1,169 +0,0 @@
-# @vibesdotdev/infra-core
-
-Provider-agnostic contract for deployable infrastructure. Defines the runtime
-kinds, descriptor schemas, and deployment factories that adapter packages and
-consuming apps share. Adapter packages
-([`infra-cloudflare`](../infra-cloudflare/SPEC.md),
-[`infra-doks`](../infra-doks/SPEC.md)) implement provider-specific behavior
-against these kinds; consumed by per-app `deployment.config.ts` files, by
-`*.infra.ts` resource declarations under workspace `infra/`, by
-[`secrets`](../secrets/SPEC.md) for env-requirement resolution, and by
-[`deploy`](../deploy/SPEC.md) for orchestration.
-
-## Owns
-
-- **Runtime kinds:** `infra/web-app`, `infra/worker`, `infra/database`,
-  `infra/queue`, `infra/cache`, `infra/object-storage`, `infra/sandbox`,
-  `infra/git-hosting`, `infra/package-registry`.
-- **Plugin descriptors registered by the plugin:** `infraPlugin` (id `infra`)
-  registers all 9 kinds with `discoveryPattern: "**/*.infra.ts"` and
-  pass-through default implementations exposing the validated descriptor as
-  `config`.
-- **Schemas** (`./schemas`): atomic Zod schemas — provider enum, runtime enum,
-  origin, build, env requirement, dependency, upstream — and the assembled
-  `appDeploymentSchema`. Single source of truth for cross-cutting shapes;
-  kind descriptor schemas compose from these primitives.
-- **Kind descriptors** (`./kinds`): one file per kind, each defining a Zod
-  descriptor schema (composed from `./schemas`) and a pass-through default
-  `Implementation` class wired through `createRuntimeKind`.
-- **Deployment factories** (`./deployment`): `createAppDeployment`,
-  `createDeploymentOrigin`, `createDeploymentEnvRequirement`,
-  `createDeploymentDependency`, `getPrimaryOrigin`, `getUpstreamOriginEnv`.
-  These produce the validated objects authored in per-app
-  `deployment.config.ts` files.
-
-## Does not own
-
-- Cloudflare Workers / Workers / Queues / R2 / KV implementations →
-  [`infra-cloudflare`](../infra-cloudflare/SPEC.md).
-- DigitalOcean App Platform / DOKS / Spaces / Managed DB / Managed Redis
-  implementations → [`infra-doks`](../infra-doks/SPEC.md).
-- Standalone Kubernetes / Docker / DO Droplet implementations — no adapter
-  package exists yet (see migration debt).
-- Deployment orchestration, manifest generation, env materialization, and the
-  `infra/` workspace tree (`infra/manifest.ts`, `infra/generate.ts`,
-  `infra/resources/`) → [`deploy`](../deploy/SPEC.md). Per-app
-  `deployment.config.ts` files live in `apps/<app>-web/`.
-- Env-requirement resolution against descriptors →
-  [`secrets`](../secrets/SPEC.md).
-- AI inference selection. Inference is an `ai/provider` + `ai/adapter`
-  concern — see [`ai`](../ai/SPEC.md) and
-  [`ai-providers`](../ai-providers/SPEC.md). No `infra/inference` kind exists
-  or should be added.
-
-## Hard rules
-
-- Core never imports adapter packages. Dependencies are exactly
-  `@vibesdotdev/runtime` + `zod`.
-- Shared shapes live in `./schemas`. Kind descriptor schemas compose from
-  `./schemas`. Do not redeclare an env-requirement schema or any other
-  primitive inside a kind file.
-- New deployable resource types are added as new kinds in `src/kinds/`.
-  Provider-specific concepts (Wrangler bindings, Helm values, Spaces CORS,
-  CF Sandbox outbound proxy specifics, etc.) belong in adapter packages
-  registering implementations against the existing kinds.
-- Inference is not an infra kind. New inference strategies (CF Unified
-  Inference, Agents bindings, etc.) are added as `ai/provider` descriptors +
-  adapters in [`ai-providers`](../ai-providers/SPEC.md).
-- Default implementations are inert pass-throughs that expose the validated
-  descriptor as `config`. Real provider behavior must come from an adapter
-  package registering an implementation for the same kind.
-- Kind discovery pattern is `**/*.infra.ts` for every kind. Apps and the
-  `infra/` workspace declare concrete resources in `*.infra.ts` files; do
-  not change the pattern per kind.
-- Pure TypeScript only. No `$env`, `$server`, `$app`, `@sveltejs/kit`,
-  Svelte, Drizzle, or filesystem APIs in this package.
-- `deploymentProviderSchema` enumerates exactly the providers backed by an
-  active adapter package. Adding a provider value without a corresponding
-  adapter is a contract lie — add the adapter or omit the value.
-- `appDeploymentSchema` cross-validates provider against runtime and origin
-  hostnames (e.g. `cloudflare-workers` requires `edge`; `digitalocean-app`
-  requires `node` or `worker`). Nonsense combinations fail at parse time,
-  not deploy time.
-
-## Migration debt (completed)
-
-- [x] `envRequirementSchema` is locally redeclared in
-  `src/kinds/web-app.kind.ts`, `src/kinds/worker.kind.ts`, and
-  `src/kinds/sandbox.kind.ts` instead of imported from `./schemas`.
-  **Resolution:** Kinds now import `deploymentEnvRequirementSchema` from `./schemas`.
-  All kind files use `import { z } from 'zod/v4'` style for consistency.
-- [x] `package.json#exports` includes `"./kinds/*": "./src/kinds/*.ts"`.
-  **Resolution:** Wildcard removed. All 26 consumers updated to use `./kinds`
-  aggregate subpath instead of deep imports.
-- [x] `deploymentProviderSchema` declares `digitalocean-droplet`,
-  `digitalocean-kubernetes`, `kubernetes`, and `docker`, but only
-  `digitalocean-app` (via `infra-doks`) and `cloudflare-workers` (via
-  `infra-cloudflare`) have active adapter implementations.
-  **Resolution:** Trimmed to only `cloudflare-workers` and `digitalocean-app`.
-- [x] `appDeploymentSchema` does not cross-validate provider against runtime.
-  **Resolution:** Added `.refine()` enforcing provider × runtime matrix:
-  - `cloudflare-workers`: `edge`, `worker`
-  - `digitalocean-app`: `node`, `worker`
-- [x] `discoveryPattern` and `extractStem` are duplicated identically across all
-  9 kind files.
-  **Resolution:** Extracted shared helper in `src/kinds/discovery.ts` with
-  `INFRA_DISCOVERY_PATTERN` constant and `extractStem()` function. All 7
-  kind files now import and reuse.
-- [x] `WebAppDescriptor` and `appDeploymentSchema` describe overlapping concepts
-  (`appDir`, `outputDir`, `runtime`, `env`).
-  **Resolution:** The parallel surfaces are **intentional**:
-  - `WebAppDescriptor` (runtime-discovered resource) lives at `infra/web-app`
-    kind with `adapter`, `domain`, `env`, etc. Used by runtime discovery.
-  - `appDeploymentSchema` (authored deployment config) lives in `./schemas` and
-    is used by `deployment.config.ts` files with `provider`, `build`, `origins`,
-    etc. Both shapes reference similar fields but serve different consumers.
-  No merging; keep parallel with potential future composition via shared
-  fragment schemas if divergence becomes problematic.
-
-## Migration debt
-
-- [x] **`adapter` discriminator → `config` field migration.** All 7 original
-  infra kinds declare `adapter: z.string()` as a top-level discriminator field.
-  This field is not in `RuntimeDescriptorSchema` and `createRuntimeAsset` could not
-  validate it. Every infra kind has moved `adapter` and all adapter-specific
-  fields into a `config` object validated against the kind's registered
-  `descriptorSchema`. **Affected kinds:** `infra/web-app`, `infra/worker`,
-  `infra/database`, `infra/queue`, `infra/cache`, `infra/object-storage`,
-  `infra/sandbox`, `infra/git-hosting`, `infra/package-registry`.
-  - [x] `infra/web-app`: added `WebAppConfigSchema` union
-    (cloudflare-workers, digitalocean-apps)
-  - [x] `infra/worker`: added `WorkerConfigSchema` union
-    (doks-deployment, cloudflare-workers)
-  - [x] `infra/database`: added `DatabaseConfigSchema` union
-    (doks-statefulset, do-managed-postgres, turso)
-  - [x] `infra/queue`: added `QueueConfigSchema` union
-    (doks-statefulset, cloudflare-queues)
-  - [x] `infra/cache`: added `CacheConfigSchema` union
-    (do-managed-redis, cloudflare-kv, doks-redis)
-  - [x] `infra/object-storage`: added `ObjectStorageConfigSchema` union
-    (do-spaces, cloudflare-r2)
-  - [x] `infra/sandbox`: already had all variants (cloudflare-sandbox, docker,
-    digitalocean-droplet)
-  - [x] `infra/git-hosting`: added `GitHostingConfigSchema` union (gitea-doks)
-  - [x] `infra/package-registry`: added `PackageRegistryConfigSchema` union
-    (verdaccio-doks)
-
-## Public entrypoints
-
-`.`, `./schemas`, `./kinds`, `./deployment`, `./plugin`.
-
-Wildcard / migration-era subpaths: `./kinds/*` — do not normalize new code
-against this.
-
-## Verification
-
-`bun test` from `packages/infra-core`. Covers all 9 schemas (accept-valid +
-reject-invalid), all 9 kind descriptor structures, plugin registration shape
-(id, kinds count, kind IDs, discovery pattern, no dependencies, no lifecycle
-hooks), and all 6 factory functions. `bun --bun tsc -p tsconfig.json
---noEmit` is the type gate.
-
-## Links
-
-- [infra-cloudflare/SPEC.md](../infra-cloudflare/SPEC.md)
-- [infra-doks/SPEC.md](../infra-doks/SPEC.md)
-- [deploy/SPEC.md](../deploy/SPEC.md)
-- [secrets/SPEC.md](../secrets/SPEC.md)
-- [runtime/SPEC.md](../runtime/SPEC.md)
-- [ai/SPEC.md](../ai/SPEC.md), [ai-providers/SPEC.md](../ai-providers/SPEC.md)

package/src/bootstrap/index.ts

@@ -1,15 +0,0 @@
-export { bootstrapSeedKind } from './seed.kind.ts';
-export {
-	bootstrapSeedConditionSchema,
-	bootstrapSeedDescriptorSchema,
-	bootstrapSeedModeSchema,
-	type BootstrapSeedCondition,
-	type BootstrapSeedDescriptor,
-	type BootstrapSeedMode
-} from './seed.descriptor.ts';
-export type { BootstrapSeedImpl } from './seed.impl-shape.ts';
-export {
-	runBootstrapSeeds,
-	type BootstrapSeedRunOptions,
-	type BootstrapSeedRunResult
-} from './seed.runner.ts';

package/src/bootstrap/seed.descriptor.ts

@@ -1,24 +0,0 @@
-import { z } from 'zod';
-
-export const bootstrapSeedModeSchema = z.enum(['cold-start', 'deploy']);
-export type BootstrapSeedMode = z.infer<typeof bootstrapSeedModeSchema>;
-
-export const bootstrapSeedConditionSchema = z.discriminatedUnion('kind', [
-	z.object({ kind: z.literal('always') }),
-	z.object({
-		kind: z.literal('env-keys-present'),
-		keys: z.array(z.string().min(1)).min(1)
-	})
-]);
-export type BootstrapSeedCondition = z.infer<typeof bootstrapSeedConditionSchema>;
-
-export const bootstrapSeedDescriptorSchema = z.object({
-	kind: z.literal('bootstrap/seed'),
-	id: z.string().min(1),
-	description: z.string().optional(),
-	executeOn: z.array(bootstrapSeedModeSchema).min(1),
-	condition: bootstrapSeedConditionSchema.optional(),
-	priority: z.number().int().optional()
-});
-
-export type BootstrapSeedDescriptor = z.infer<typeof bootstrapSeedDescriptorSchema>;

package/src/bootstrap/seed.impl-shape.ts

@@ -1,5 +0,0 @@
-import type { VibesRuntime } from '@vibesdotdev/runtime';
-
-export interface BootstrapSeedImpl {
-	run(runtime: VibesRuntime, env: Record<string, string | undefined>): Promise<void>;
-}

package/src/bootstrap/seed.kind.ts

@@ -1,26 +0,0 @@
-import type { RuntimeDescriptor, RuntimeKindDescriptor } from '@vibesdotdev/runtime/schemas/kind';
-import {
-	bootstrapSeedDescriptorSchema,
-	type BootstrapSeedDescriptor
-} from './seed.descriptor.ts';
-import type { BootstrapSeedImpl } from './seed.impl-shape.ts';
-
-class UnregisteredBootstrapSeed implements BootstrapSeedImpl {
-	constructor(_descriptor: RuntimeDescriptor) {}
-	async run(): Promise<void> {
-		// No-op when no impl loader is registered for this descriptor id.
-	}
-}
-
-export const bootstrapSeedKind: RuntimeKindDescriptor<
-	BootstrapSeedDescriptor,
-	BootstrapSeedImpl,
-	never
-> = {
-	id: 'bootstrap/seed',
-	descriptorSchema: bootstrapSeedDescriptorSchema,
-	defaultImplementation: UnregisteredBootstrapSeed as unknown as new (
-		descriptor: RuntimeDescriptor
-	) => BootstrapSeedImpl,
-	contexts: []
-};