@vibesdotdev/infra-core 0.0.1 → 1.0.0-rc.4

package/dist/deployment-environment.js

@@ -0,0 +1,53 @@
+/**
+ * The one selection of a deployment environment and of a provider config's
+ * environment block. Generic over every provider whose config nests named
+ * environments under `env` (wrangler's `env.<name>`, and any provider with the
+ * same shape): the deploy driver and each provider implementation select
+ * through these, so the environment that picks credentials, ledgers and
+ * provider bindings is always the same one.
+ */
+import { ProviderConfigSchema } from "./schemas/deployment-environment.js";
+export { ProviderConfigSchema, ResolvedProviderConfigSchema } from "./schemas/deployment-environment.js";
+/** The record view of an admitted value, parsed once at the boundary. */
+function asRecord(value) {
+    const parsed = ProviderConfigSchema.safeParse(value);
+    return parsed.success ? parsed.data : null;
+}
+/** `prod`/absent read as `production`, `dev` as `development`; every other name is kept, lower-cased. */
+export function normalizeDeploymentEnvironment(environment) {
+    const value = environment?.trim().toLowerCase();
+    if (!value || value === 'prod')
+        return 'production';
+    if (value === 'dev')
+        return 'development';
+    return value;
+}
+/**
+ * Select one semantic environment before any runtime, provider, secrets, or
+ * ledger work. `--wrangler-env` remains a compatibility spelling, but it no
+ * longer forms an independent provider-only selector that can drift from the
+ * environment used for credentials and deployment records.
+ */
+export function selectDeploymentEnvironment(input) {
+    return normalizeDeploymentEnvironment(input.environment ?? input.providerEnvironment);
+}
+/** Select a provider block without inheriting production bindings into named environments. */
+export function resolveDeploymentProviderConfig(generatedConfig, environment) {
+    const selected = selectDeploymentEnvironment({ environment });
+    if (selected === 'production')
+        return { config: generatedConfig, providerEnvironment: null };
+    const providerEnvironment = selected === 'local' ? 'development' : selected;
+    const environments = asRecord(generatedConfig.env) ?? {};
+    return {
+        config: asRecord(environments[providerEnvironment]),
+        providerEnvironment
+    };
+}
+/** Refuse a missing named block before callers resolve credentials or execute provider commands. */
+export function requireDeploymentProviderConfig(generatedConfig, environment) {
+    const selected = resolveDeploymentProviderConfig(generatedConfig, environment);
+    if (!selected.config)
+        throw new Error(`Missing explicit provider environment "${selected.providerEnvironment}"; refusing production fallback.`);
+    return { config: selected.config, providerEnvironment: selected.providerEnvironment };
+}
+//# sourceMappingURL=deployment-environment.js.map

package/dist/deployment-environment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deployment-environment.js","sourceRoot":"","sources":["../src/deployment-environment.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,oBAAoB,EAAoD,MAAM,qCAAqC,CAAC;AAC7H,OAAO,EACN,oBAAoB,EACpB,4BAA4B,EAG5B,MAAM,qCAAqC,CAAC;AAE7C,yEAAyE;AACzE,SAAS,QAAQ,CAAC,KAAc;IAC/B,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACrD,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5C,CAAC;AAED,yGAAyG;AACzG,MAAM,UAAU,8BAA8B,CAAC,WAA+B;IAC7E,MAAM,KAAK,GAAG,WAAW,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAChD,IAAI,CAAC,KAAK,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,YAAY,CAAC;IACpD,IAAI,KAAK,KAAK,KAAK;QAAE,OAAO,aAAa,CAAC;IAC1C,OAAO,KAAK,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,2BAA2B,CAAC,KAG3C;IACA,OAAO,8BAA8B,CAAC,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;AACvF,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,+BAA+B,CAC9C,eAA+B,EAC/B,WAAoB;IAEpB,MAAM,QAAQ,GAAG,2BAA2B,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC;IAC9D,IAAI,QAAQ,KAAK,YAAY;QAAE,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC;IAC7F,MAAM,mBAAmB,GAAG,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC5E,MAAM,YAAY,GAAG,QAAQ,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;IACzD,OAAO;QACN,MAAM,EAAE,QAAQ,CAAC,YAAY,CAAC,mBAAmB,CAAC,CAAC;QACnD,mBAAmB;KACnB,CAAC;AACH,CAAC;AAED,oGAAoG;AACpG,MAAM,UAAU,+BAA+B,CAAC,eAA+B,EAAE,WAAoB;IACpG,MAAM,QAAQ,GAAG,+BAA+B,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;IAC/E,IAAI,CAAC,QAAQ,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,QAAQ,CAAC,mBAAmB,kCAAkC,CAAC,CAAC;IAChJ,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,mBAAmB,EAAE,QAAQ,CAAC,mBAAmB,EAAE,CAAC;AACvF,CAAC"}

package/dist/deployment.d.ts

@@ -1,9 +1,13 @@
-import { type AppDeployment, type AppDeploymentInput, type DeploymentDependency, type DeploymentEnvRequirement, type DeploymentOrigin, type DeploymentUpstream } from './schemas.ts';
+import { type RuntimeRef } from '@vibesdotdev/kernel';
+import type * as z from 'zod/v4';
+import { deploymentDependencySchema, type AppDeployment, type AppDeploymentInput, type DeploymentDependency, type DeploymentEnvRequirement, type DeploymentOrigin, type DeploymentOriginEnv, type DeploymentUpstream } from './schemas.ts';
 export declare function createAppDeployment(input: AppDeploymentInput): AppDeployment;
+/** Validate admission using only capabilities selected in the caller's runtime. */
+export declare function validateAppDeployment(runtime: RuntimeRef, deployment: AppDeployment): void;
 export declare function createDeploymentOrigin(input: DeploymentOrigin): DeploymentOrigin;
 export declare function createDeploymentEnvRequirement(input: DeploymentEnvRequirement): DeploymentEnvRequirement;
-export declare function createDeploymentDependency(input: DeploymentDependency): DeploymentDependency;
+export declare function createDeploymentDependency(input: z.input<typeof deploymentDependencySchema>): DeploymentDependency;
 export declare function getPrimaryOrigin(deployment: AppDeployment): DeploymentOrigin;
-export declare function getUpstreamOriginEnv(upstream: DeploymentUpstream): Record<string, string>;
-export type { AppDeployment, AppDeploymentInput, DeploymentDependency, DeploymentEnvRequirement, DeploymentOrigin, DeploymentUpstream };
+export declare function getUpstreamOriginEnv(upstream: DeploymentUpstream): DeploymentOriginEnv;
+export type { AppDeployment, AppDeploymentInput, DeploymentDependency, DeploymentEnvRequirement, DeploymentOrigin, DeploymentOriginEnv, DeploymentUpstream };
 //# sourceMappingURL=deployment.d.ts.map

package/dist/deployment.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"deployment.d.ts","sourceRoot":"","sources":["../src/deployment.ts"],"names":[],"mappings":"AAAA,OAAO,EAKN,KAAK,aAAa,EAClB,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EACzB,KAAK,wBAAwB,EAC7B,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,MAAM,cAAc,CAAC;AAEtB,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,kBAAkB,GAAG,aAAa,CAE5E;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,gBAAgB,GAAG,gBAAgB,CAEhF;AAED,wBAAgB,8BAA8B,CAC7C,KAAK,EAAE,wBAAwB,GAC7B,wBAAwB,CAE1B;AAED,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,oBAAoB,GAAG,oBAAoB,CAE5F;AAED,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,aAAa,GAAG,gBAAgB,CAI5E;AAED,wBAAgB,oBAAoB,CACnC,QAAQ,EAAE,kBAAkB,GAC1B,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAQxB;AAED,YAAY,EACX,aAAa,EACb,kBAAkB,EAClB,oBAAoB,EACpB,wBAAwB,EACxB,gBAAgB,EAChB,kBAAkB,EAClB,CAAC"}
+{"version":3,"file":"deployment.d.ts","sourceRoot":"","sources":["../src/deployment.ts"],"names":[],"mappings":"AAAA,OAAO,EAAiC,KAAK,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAErF,OAAO,KAAK,KAAK,CAAC,MAAM,QAAQ,CAAC;AACjC,OAAO,EAEN,0BAA0B,EAG1B,KAAK,aAAa,EAClB,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EACzB,KAAK,wBAAwB,EAC7B,KAAK,gBAAgB,EACrB,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACvB,MAAM,cAAc,CAAC;AAEtB,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,kBAAkB,GAAG,aAAa,CAE5E;AAED,mFAAmF;AACnF,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,aAAa,GAAG,IAAI,CA0B1F;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,gBAAgB,GAAG,gBAAgB,CAEhF;AAED,wBAAgB,8BAA8B,CAC7C,KAAK,EAAE,wBAAwB,GAC7B,wBAAwB,CAE1B;AAED,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,GAAG,oBAAoB,CAElH;AAED,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,aAAa,GAAG,gBAAgB,CAI5E;AAED,wBAAgB,oBAAoB,CACnC,QAAQ,EAAE,kBAAkB,GAC1B,mBAAmB,CAQrB;AAED,YAAY,EACX,aAAa,EACb,kBAAkB,EAClB,oBAAoB,EACpB,wBAAwB,EACxB,gBAAgB,EAChB,mBAAmB,EACnB,kBAAkB,EAClB,CAAC"}

package/dist/deployment.js

@@ -1,7 +1,37 @@
+import { CapabilityError, matchesScope } from '@vibesdotdev/kernel';
+import { DeploymentProviderDescriptorSchema } from "./kinds/deployment-provider.kind.js";
 import { appDeploymentSchema, deploymentDependencySchema, deploymentEnvRequirementSchema, deploymentOriginSchema } from "./schemas.js";
 export function createAppDeployment(input) {
     return appDeploymentSchema.parse(input);
 }
+/** Validate admission using only capabilities selected in the caller's runtime. */
+export function validateAppDeployment(runtime, deployment) {
+    const candidates = runtime.hasKind('infra/deployment-provider')
+        ? runtime.query('infra/deployment-provider')
+            .withId(deployment.provider)
+            .enabled()
+            .filter((provider) => matchesScope(runtime.scope, { hardware: provider.hardware }))
+            .descriptors()
+        : [];
+    const descriptor = candidates[0];
+    if (!descriptor) {
+        throw new CapabilityError('The deployment provider is not registered.', 'UNAVAILABLE', {
+            reason: 'deployment-provider-unavailable', details: { provider: deployment.provider }
+        });
+    }
+    const capabilities = DeploymentProviderDescriptorSchema.parse(descriptor);
+    if (!capabilities.runtimes.includes(deployment.runtime)) {
+        throw new CapabilityError('The deployment provider does not support the requested runtime.', 'INVALID_INPUT', {
+            reason: 'deployment-runtime-unsupported',
+            details: { provider: deployment.provider, runtime: deployment.runtime }
+        });
+    }
+    if (deployment.execution?.pty === true && !capabilities.pty) {
+        throw new CapabilityError('The deployment provider does not support interactive PTY sessions.', 'INVALID_INPUT', {
+            reason: 'deployment-pty-unsupported', details: { provider: deployment.provider }
+        });
+    }
+}
 export function createDeploymentOrigin(input) {
     return deploymentOriginSchema.parse(input);
 }

package/dist/deployment.js.map

@@ -1 +1 @@
-{"version":3,"file":"deployment.js","sourceRoot":"","sources":["../src/deployment.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,mBAAmB,EACnB,0BAA0B,EAC1B,8BAA8B,EAC9B,sBAAsB,EAOtB,MAAM,cAAc,CAAC;AAEtB,MAAM,UAAU,mBAAmB,CAAC,KAAyB;IAC5D,OAAO,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAAuB;IAC7D,OAAO,sBAAsB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC7C,KAA+B;IAE/B,OAAO,8BAA8B,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,KAA2B;IACrE,OAAO,0BAA0B,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,UAAyB;IACzD,OAAO,CACN,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CACvF,CAAC;AACH,CAAC;AAED,MAAM,UAAU,oBAAoB,CACnC,QAA4B;IAE5B,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC;QAC5B,OAAO,EAAE,CAAC;IACX,CAAC;IAED,OAAO;QACN,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,QAAQ,CAAC,MAAM;KACxC,CAAC;AACH,CAAC"}
+{"version":3,"file":"deployment.js","sourceRoot":"","sources":["../src/deployment.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,YAAY,EAAmB,MAAM,qBAAqB,CAAC;AACrF,OAAO,EAAE,kCAAkC,EAAqC,MAAM,qCAAqC,CAAC;AAE5H,OAAO,EACN,mBAAmB,EACnB,0BAA0B,EAC1B,8BAA8B,EAC9B,sBAAsB,EAQtB,MAAM,cAAc,CAAC;AAEtB,MAAM,UAAU,mBAAmB,CAAC,KAAyB;IAC5D,OAAO,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AACzC,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,qBAAqB,CAAC,OAAmB,EAAE,UAAyB;IACnF,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,2BAA2B,CAAC;QAC9D,CAAC,CAAC,OAAO,CAAC,KAAK,CAA+B,2BAA2B,CAAC;aACxE,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC;aAC3B,OAAO,EAAE;aACT,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC;aAClF,WAAW,EAAE;QACf,CAAC,CAAC,EAAE,CAAC;IACN,MAAM,UAAU,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;IACjC,IAAI,CAAC,UAAU,EAAE,CAAC;QACjB,MAAM,IAAI,eAAe,CAAC,4CAA4C,EAAE,aAAa,EAAE;YACtF,MAAM,EAAE,iCAAiC,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,UAAU,CAAC,QAAQ,EAAE;SACrF,CAAC,CAAC;IACJ,CAAC;IACD,MAAM,YAAY,GAAG,kCAAkC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC1E,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,eAAe,CAAC,iEAAiE,EAAE,eAAe,EAAE;YAC7G,MAAM,EAAE,gCAAgC;YACxC,OAAO,EAAE,EAAE,QAAQ,EAAE,UAAU,CAAC,QAAQ,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE;SACvE,CAAC,CAAC;IACJ,CAAC;IACD,IAAI,UAAU,CAAC,SAAS,EAAE,GAAG,KAAK,IAAI,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC;QAC7D,MAAM,IAAI,eAAe,CAAC,oEAAoE,EAAE,eAAe,EAAE;YAChH,MAAM,EAAE,4BAA4B,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,UAAU,CAAC,QAAQ,EAAE;SAChF,CAAC,CAAC;IACJ,CAAC;AACF,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAAuB;IAC7D,OAAO,sBAAsB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC7C,KAA+B;IAE/B,OAAO,8BAA8B,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,KAAiD;IAC3F,OAAO,0BAA0B,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,UAAyB;IACzD,OAAO,CACN,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CACvF,CAAC;AACH,CAAC;AAED,MAAM,UAAU,oBAAoB,CACnC,QAA4B;IAE5B,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC;QAC5B,OAAO,EAAE,CAAC;IACX,CAAC;IAED,OAAO;QACN,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,QAAQ,CAAC,MAAM;KACxC,CAAC;AACH,CAAC"}

package/dist/doks/cloud/base.d.ts

@@ -0,0 +1,49 @@
+import type { CloudProvider, CloudInstance, CloudProviderErrorDetails, InstanceConfig, InstanceFilters, CloudVolume, VolumeConfig, VolumeFilters, SSHKey } from '../types.ts';
+import { CapabilityError, type CapabilityErrorDetails, type VibesRuntime } from '@vibesdotdev/kernel';
+/**
+ * A provider failure in the `CapabilityError` taxonomy: `code` is the mapped
+ * taxonomy code (`TIMEOUT`, `NOT_FOUND` for `*_NOT_FOUND`, else
+ * `UNAVAILABLE`), `reason` is `cloud-provider-<providerCode>`, and the
+ * provider's own code stays on `providerCode`. Message and text details are
+ * redacted (credential shapes and control characters removed, bounded).
+ */
+export declare class CloudProviderError extends CapabilityError {
+    readonly provider: string;
+    readonly providerCode: string;
+    constructor(message: string, providerCode: string, provider: string, details?: CloudProviderErrorDetails, options?: {
+        readonly cause?: Error | CapabilityErrorDetails;
+    });
+}
+/** Shared mechanics for provider-owned compute and volume implementations. */
+export declare abstract class BaseCloudProvider implements CloudProvider {
+    #private;
+    protected defaultRegion?: string | undefined;
+    abstract name: string;
+    constructor(runtime: Pick<VibesRuntime, 'lifecycle'>, credentials: string, defaultRegion?: string | undefined);
+    /** Keep runtime internals out of serialization while preserving provider access. */
+    protected get runtime(): Pick<VibesRuntime, 'lifecycle'>;
+    protected set runtime(runtime: Pick<VibesRuntime, 'lifecycle'>);
+    /** The credential the provider was constructed with, for its own requests. */
+    protected get credentials(): string;
+    abstract createInstance(config: InstanceConfig): Promise<CloudInstance>;
+    abstract deleteInstance(instanceId: string): Promise<void>;
+    abstract getInstance(instanceId: string): Promise<CloudInstance | null>;
+    abstract listInstances(filters?: InstanceFilters): Promise<CloudInstance[]>;
+    abstract createVolume(config: VolumeConfig): Promise<CloudVolume>;
+    abstract attachVolume(volumeId: string, instanceId: string): Promise<void>;
+    abstract detachVolume(volumeId: string): Promise<void>;
+    abstract deleteVolume(volumeId: string): Promise<void>;
+    abstract listVolumes(filters?: VolumeFilters): Promise<CloudVolume[]>;
+    abstract getOrCreateVPC(name: string): Promise<string>;
+    abstract addSSHKey(name: string, publicKey: string): Promise<string>;
+    abstract listSSHKeys(): Promise<SSHKey[]>;
+    protected waitForInstanceStatus(instanceId: string, targetStatus: string, timeoutMs?: number, pollIntervalMs?: number): Promise<CloudInstance>;
+    protected waitForVolumeStatus(volumeId: string, targetStatus: string, timeoutMs?: number, pollIntervalMs?: number): Promise<CloudVolume>;
+    /** A typed provider failure; `cause` is the failure it replaces, kept for `-v` and logs. */
+    protected createError(message: string, code: string, details?: CloudProviderErrorDetails, cause?: Error): CloudProviderError;
+    protected buildTags(tags: Record<string, string>, additionalTags?: Record<string, string>): {
+        'managed-by': string;
+        provider: string;
+    };
+}
+//# sourceMappingURL=base.d.ts.map

package/dist/doks/cloud/base.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"base.d.ts","sourceRoot":"","sources":["../../../src/doks/cloud/base.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACX,aAAa,EACb,aAAa,EACb,yBAAyB,EACzB,cAAc,EACd,eAAe,EACf,WAAW,EACX,YAAY,EACZ,aAAa,EACb,MAAM,EACN,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,eAAe,EAA4B,KAAK,sBAAsB,EAAE,KAAK,YAAY,EAAqB,MAAM,qBAAqB,CAAC;AA2BnJ;;;;;;GAMG;AACH,qBAAa,kBAAmB,SAAQ,eAAe;IACtD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;gBAG7B,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,EACpB,QAAQ,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE,yBAAyB,EACnC,OAAO,GAAE;QAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,GAAG,sBAAsB,CAAA;KAAO;CAWlE;AAED,8EAA8E;AAC9E,8BAAsB,iBAAkB,YAAW,aAAa;;IAS9D,SAAS,CAAC,aAAa,CAAC,EAAE,MAAM;IARjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;gBAMrB,OAAO,EAAE,IAAI,CAAC,YAAY,EAAE,WAAW,CAAC,EACxC,WAAW,EAAE,MAAM,EACT,aAAa,CAAC,EAAE,MAAM,YAAA;IAMjC,oFAAoF;IACpF,SAAS,KAAK,OAAO,IAAI,IAAI,CAAC,YAAY,EAAE,WAAW,CAAC,CAEvD;IAED,SAAS,KAAK,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,YAAY,EAAE,WAAW,CAAC,EAE7D;IAED,8EAA8E;IAC9E,SAAS,KAAK,WAAW,IAAI,MAAM,CAElC;IAED,QAAQ,CAAC,cAAc,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC;IACvE,QAAQ,CAAC,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAC1D,QAAQ,CAAC,WAAW,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;IACvE,QAAQ,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IAC3E,QAAQ,CAAC,YAAY,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC;IACjE,QAAQ,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAC1E,QAAQ,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IACtD,QAAQ,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IACtD,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IACrE,QAAQ,CAAC,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IACtD,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IACpE,QAAQ,CAAC,WAAW,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;cAEzB,qBAAqB,CACpC,UAAU,EAAE,MAAM,EAClB,YAAY,EAAE,MAAM,EACpB,SAAS,SAAU,EACnB,cAAc,SAAQ,GACpB,OAAO,CAAC,aAAa,CAAC;cA+BT,mBAAmB,CAClC,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,EACpB,SAAS,SAAU,EACnB,cAAc,SAAQ,GACpB,OAAO,CAAC,WAAW,CAAC;IA+BvB,4FAA4F;IAC5F,SAAS,CAAC,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,yBAAyB,EAAE,KAAK,CAAC,EAAE,KAAK,GAAG,kBAAkB;IAI5H,SAAS,CAAC,SAAS,CAClB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC5B,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;;;;CAIxC"}

package/dist/doks/cloud/base.js

@@ -0,0 +1,138 @@
+import * as z from 'zod/v4';
+import { CapabilityError, isCapabilityError } from '@vibesdotdev/kernel';
+import { redactedExcerpt } from '@vibesdotdev/shared/utils';
+/** The taxonomy code a provider's own failure code maps to. */
+function capabilityCodeOf(providerCode) {
+    if (providerCode === 'TIMEOUT')
+        return 'TIMEOUT';
+    if (providerCode.endsWith('_NOT_FOUND'))
+        return 'NOT_FOUND';
+    return 'UNAVAILABLE';
+}
+/** `cloud-provider-<provider code in kebab form>`, bounded. */
+function reasonOf(providerCode) {
+    const slug = providerCode.toLowerCase().replace(/[^a-z0-9]+/g, '-').replace(/^-+|-+$/g, '').slice(0, 40);
+    return `cloud-provider-${slug || 'failure'}`;
+}
+/** One detail value as carried: text redacted, scalars as given. */
+const DetailValueSchema = z.union([z.string().transform((text) => redactedExcerpt(text)), z.number(), z.boolean(), z.null()]);
+function redactedDetails(provider, providerCode, details) {
+    const redacted = {};
+    for (const [key, value] of Object.entries(details ?? {})) {
+        if (value !== undefined)
+            redacted[key] = DetailValueSchema.parse(value);
+    }
+    return { ...redacted, provider, providerCode };
+}
+/**
+ * A provider failure in the `CapabilityError` taxonomy: `code` is the mapped
+ * taxonomy code (`TIMEOUT`, `NOT_FOUND` for `*_NOT_FOUND`, else
+ * `UNAVAILABLE`), `reason` is `cloud-provider-<providerCode>`, and the
+ * provider's own code stays on `providerCode`. Message and text details are
+ * redacted (credential shapes and control characters removed, bounded).
+ */
+export class CloudProviderError extends CapabilityError {
+    provider;
+    providerCode;
+    constructor(message, providerCode, provider, details, options = {}) {
+        super(redactedExcerpt(message), capabilityCodeOf(providerCode), {
+            reason: reasonOf(providerCode),
+            details: redactedDetails(provider, providerCode, details),
+            cause: options.cause
+        });
+        this.name = 'CloudProviderError';
+        this.provider = provider;
+        this.providerCode = providerCode;
+    }
+}
+/** Shared mechanics for provider-owned compute and volume implementations. */
+export class BaseCloudProvider {
+    defaultRegion;
+    /** The provider credential, private to this class: never an enumerable field that JSON or inspect would print. */
+    #credentials;
+    #runtime;
+    constructor(runtime, credentials, defaultRegion) {
+        this.defaultRegion = defaultRegion;
+        this.#credentials = credentials;
+        this.#runtime = runtime;
+    }
+    /** Keep runtime internals out of serialization while preserving provider access. */
+    get runtime() {
+        return this.#runtime;
+    }
+    set runtime(runtime) {
+        this.#runtime = runtime;
+    }
+    /** The credential the provider was constructed with, for its own requests. */
+    get credentials() {
+        return this.#credentials;
+    }
+    async waitForInstanceStatus(instanceId, targetStatus, timeoutMs = 300_000, pollIntervalMs = 5_000) {
+        try {
+            return await this.runtime.lifecycle.wait(async (signal) => {
+                while (true) {
+                    const instance = await this.getInstance(instanceId);
+                    if (!instance)
+                        throw this.createError('Instance not found', 'INSTANCE_NOT_FOUND', { instanceId });
+                    if (instance.status === targetStatus)
+                        return instance;
+                    if (instance.status === 'error' || instance.status === 'terminated') {
+                        throw this.createError(`Instance entered error state: ${instance.status}`, 'INSTANCE_ERROR', {
+                            instanceId,
+                            status: instance.status
+                        });
+                    }
+                    await this.runtime.lifecycle.delay(pollIntervalMs, signal);
+                }
+            }, { timeoutMs, reason: `waiting-for-instance-status-${targetStatus}` });
+        }
+        catch (err) {
+            if (err instanceof Error && isCapabilityError(err) && err.reason === 'wait-timeout') {
+                throw new CloudProviderError(`Timeout waiting for instance status: ${targetStatus}`, 'TIMEOUT', this.name, {
+                    instanceId,
+                    targetStatus,
+                    timeoutMs
+                }, { cause: err });
+            }
+            throw err;
+        }
+    }
+    async waitForVolumeStatus(volumeId, targetStatus, timeoutMs = 120_000, pollIntervalMs = 3_000) {
+        try {
+            return await this.runtime.lifecycle.wait(async (signal) => {
+                while (true) {
+                    const volume = (await this.listVolumes()).find((candidate) => candidate.id === volumeId);
+                    if (!volume)
+                        throw this.createError('Volume not found', 'VOLUME_NOT_FOUND', { volumeId });
+                    if (volume.status === targetStatus)
+                        return volume;
+                    if (volume.status === 'error' || volume.status === 'deleted') {
+                        throw this.createError(`Volume entered error state: ${volume.status}`, 'VOLUME_ERROR', {
+                            volumeId,
+                            status: volume.status
+                        });
+                    }
+                    await this.runtime.lifecycle.delay(pollIntervalMs, signal);
+                }
+            }, { timeoutMs, reason: `waiting-for-volume-status-${targetStatus}` });
+        }
+        catch (err) {
+            if (err instanceof Error && isCapabilityError(err) && err.reason === 'wait-timeout') {
+                throw new CloudProviderError(`Timeout waiting for volume status: ${targetStatus}`, 'TIMEOUT', this.name, {
+                    volumeId,
+                    targetStatus,
+                    timeoutMs
+                }, { cause: err });
+            }
+            throw err;
+        }
+    }
+    /** A typed provider failure; `cause` is the failure it replaces, kept for `-v` and logs. */
+    createError(message, code, details, cause) {
+        return new CloudProviderError(message, code, this.name, details, { cause });
+    }
+    buildTags(tags, additionalTags) {
+        return { 'managed-by': 'vibes', provider: this.name, ...tags, ...additionalTags };
+    }
+}
+//# sourceMappingURL=base.js.map

package/dist/doks/cloud/base.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"base.js","sourceRoot":"","sources":["../../../src/doks/cloud/base.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,eAAe,EAA4E,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACnJ,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAE5D,+DAA+D;AAC/D,SAAS,gBAAgB,CAAC,YAAoB;IAC7C,IAAI,YAAY,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACjD,IAAI,YAAY,CAAC,QAAQ,CAAC,YAAY,CAAC;QAAE,OAAO,WAAW,CAAC;IAC5D,OAAO,aAAa,CAAC;AACtB,CAAC;AAED,+DAA+D;AAC/D,SAAS,QAAQ,CAAC,YAAoB;IACrC,MAAM,IAAI,GAAG,YAAY,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACzG,OAAO,kBAAkB,IAAI,IAAI,SAAS,EAAE,CAAC;AAC9C,CAAC;AAED,oEAAoE;AACpE,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;AAE9H,SAAS,eAAe,CAAC,QAAgB,EAAE,YAAoB,EAAE,OAA8C;IAC9G,MAAM,QAAQ,GAAqD,EAAE,CAAC;IACtE,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;QAC1D,IAAI,KAAK,KAAK,SAAS;YAAE,QAAQ,CAAC,GAAG,CAAC,GAAG,iBAAiB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,EAAE,GAAG,QAAQ,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;AAChD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,OAAO,kBAAmB,SAAQ,eAAe;IAC7C,QAAQ,CAAS;IACjB,YAAY,CAAS;IAE9B,YACC,OAAe,EACf,YAAoB,EACpB,QAAgB,EAChB,OAAmC,EACnC,UAA+D,EAAE;QAEjE,KAAK,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,gBAAgB,CAAC,YAAY,CAAC,EAAE;YAC/D,MAAM,EAAE,QAAQ,CAAC,YAAY,CAAC;YAC9B,OAAO,EAAE,eAAe,CAAC,QAAQ,EAAE,YAAY,EAAE,OAAO,CAAC;YACzD,KAAK,EAAE,OAAO,CAAC,KAAK;SACpB,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;QACjC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;IAClC,CAAC;CACD;AAED,8EAA8E;AAC9E,MAAM,OAAgB,iBAAiB;IAS3B;IAPX,kHAAkH;IACzG,YAAY,CAAS;IAC9B,QAAQ,CAAkC;IAE1C,YACC,OAAwC,EACxC,WAAmB,EACT,aAAsB;QAAtB,kBAAa,GAAb,aAAa,CAAS;QAEhC,IAAI,CAAC,YAAY,GAAG,WAAW,CAAC;QAChC,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;IACzB,CAAC;IAED,oFAAoF;IACpF,IAAc,OAAO;QACpB,OAAO,IAAI,CAAC,QAAQ,CAAC;IACtB,CAAC;IAED,IAAc,OAAO,CAAC,OAAwC;QAC7D,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;IACzB,CAAC;IAED,8EAA8E;IAC9E,IAAc,WAAW;QACxB,OAAO,IAAI,CAAC,YAAY,CAAC;IAC1B,CAAC;IAeS,KAAK,CAAC,qBAAqB,CACpC,UAAkB,EAClB,YAAoB,EACpB,SAAS,GAAG,OAAO,EACnB,cAAc,GAAG,KAAK;QAEtB,IAAI,CAAC;YACJ,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CACvC,KAAK,EAAE,MAAM,EAAE,EAAE;gBAChB,OAAO,IAAI,EAAE,CAAC;oBACb,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;oBACpD,IAAI,CAAC,QAAQ;wBAAE,MAAM,IAAI,CAAC,WAAW,CAAC,oBAAoB,EAAE,oBAAoB,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;oBAClG,IAAI,QAAQ,CAAC,MAAM,KAAK,YAAY;wBAAE,OAAO,QAAQ,CAAC;oBACtD,IAAI,QAAQ,CAAC,MAAM,KAAK,OAAO,IAAI,QAAQ,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;wBACrE,MAAM,IAAI,CAAC,WAAW,CAAC,iCAAiC,QAAQ,CAAC,MAAM,EAAE,EAAE,gBAAgB,EAAE;4BAC5F,UAAU;4BACV,MAAM,EAAE,QAAQ,CAAC,MAAM;yBACvB,CAAC,CAAC;oBACJ,CAAC;oBACD,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;gBAC5D,CAAC;YACF,CAAC,EACD,EAAE,SAAS,EAAE,MAAM,EAAE,+BAA+B,YAAY,EAAE,EAAE,CACpE,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,IAAI,GAAG,YAAY,KAAK,IAAI,iBAAiB,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;gBACrF,MAAM,IAAI,kBAAkB,CAAC,wCAAwC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE;oBAC1G,UAAU;oBACV,YAAY;oBACZ,SAAS;iBACT,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;YACpB,CAAC;YACD,MAAM,GAAG,CAAC;QACX,CAAC;IACF,CAAC;IAES,KAAK,CAAC,mBAAmB,CAClC,QAAgB,EAChB,YAAoB,EACpB,SAAS,GAAG,OAAO,EACnB,cAAc,GAAG,KAAK;QAEtB,IAAI,CAAC;YACJ,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CACvC,KAAK,EAAE,MAAM,EAAE,EAAE;gBAChB,OAAO,IAAI,EAAE,CAAC;oBACb,MAAM,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC;oBACzF,IAAI,CAAC,MAAM;wBAAE,MAAM,IAAI,CAAC,WAAW,CAAC,kBAAkB,EAAE,kBAAkB,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;oBAC1F,IAAI,MAAM,CAAC,MAAM,KAAK,YAAY;wBAAE,OAAO,MAAM,CAAC;oBAClD,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;wBAC9D,MAAM,IAAI,CAAC,WAAW,CAAC,+BAA+B,MAAM,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE;4BACtF,QAAQ;4BACR,MAAM,EAAE,MAAM,CAAC,MAAM;yBACrB,CAAC,CAAC;oBACJ,CAAC;oBACD,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;gBAC5D,CAAC;YACF,CAAC,EACD,EAAE,SAAS,EAAE,MAAM,EAAE,6BAA6B,YAAY,EAAE,EAAE,CAClE,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,IAAI,GAAG,YAAY,KAAK,IAAI,iBAAiB,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;gBACrF,MAAM,IAAI,kBAAkB,CAAC,sCAAsC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE;oBACxG,QAAQ;oBACR,YAAY;oBACZ,SAAS;iBACT,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;YACpB,CAAC;YACD,MAAM,GAAG,CAAC;QACX,CAAC;IACF,CAAC;IAED,4FAA4F;IAClF,WAAW,CAAC,OAAe,EAAE,IAAY,EAAE,OAAmC,EAAE,KAAa;QACtG,OAAO,IAAI,kBAAkB,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7E,CAAC;IAES,SAAS,CAClB,IAA4B,EAC5B,cAAuC;QAEvC,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,EAAE,GAAG,cAAc,EAAmC,CAAC;IACpH,CAAC;CACD"}

package/dist/doks/cloud/factory.d.ts

@@ -0,0 +1,18 @@
+import type { VibesRuntime } from '@vibesdotdev/kernel';
+import type { CloudProvider } from '../types.ts';
+export type CloudProviderFactory = (runtime: Pick<VibesRuntime, 'lifecycle'>, credentials: string, region: string) => CloudProvider;
+export interface CloudProviderFactoryImplementation {
+    create: CloudProviderFactory;
+}
+export interface CloudProviderFactoryRuntime {
+    resolve<T>(kind: string, id: string): Promise<T>;
+    readonly lifecycle: VibesRuntime['lifecycle'];
+}
+/**
+ * Resolve and construct the vendor implementation selected by the active
+ * runtime. A resolved implementation without `create` refuses
+ * `INVALID_INPUT cloud-provider-factory-invalid`; a resolution failure passes
+ * through as the runtime raised it.
+ */
+export declare function createRegisteredCloudProvider(runtime: CloudProviderFactoryRuntime, type: string, credentials: string, region: string): Promise<CloudProvider>;
+//# sourceMappingURL=factory.d.ts.map

package/dist/doks/cloud/factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"factory.d.ts","sourceRoot":"","sources":["../../../src/doks/cloud/factory.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAEjD,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,YAAY,EAAE,WAAW,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,aAAa,CAAC;AAEpI,MAAM,WAAW,kCAAkC;IAClD,MAAM,EAAE,oBAAoB,CAAC;CAC7B;AAED,MAAM,WAAW,2BAA2B;IAC3C,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACjD,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAC,WAAW,CAAC,CAAC;CAC9C;AAYD;;;;;GAKG;AACH,wBAAsB,6BAA6B,CAClD,OAAO,EAAE,2BAA2B,EACpC,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,GACZ,OAAO,CAAC,aAAa,CAAC,CAOxB"}

package/dist/doks/cloud/factory.js

@@ -0,0 +1,22 @@
+import * as z from 'zod/v4';
+import { readUntrusted } from '@vibesdotdev/config/manifest/read-untrusted';
+/** A registered factory offers `create`; kept as the original object (its method may use `this`). */
+const FactoryOperationsSchema = z.object({ create: z.function() });
+const FactorySchema = z.custom((value) => FactoryOperationsSchema.safeParse(value).success);
+const FACTORY_INVALID = {
+    code: 'INVALID_INPUT',
+    reason: 'cloud-provider-factory-invalid',
+    message: () => 'The registered infra/cloud-provider implementation offers no create().'
+};
+/**
+ * Resolve and construct the vendor implementation selected by the active
+ * runtime. A resolved implementation without `create` refuses
+ * `INVALID_INPUT cloud-provider-factory-invalid`; a resolution failure passes
+ * through as the runtime raised it.
+ */
+export async function createRegisteredCloudProvider(runtime, type, credentials, region) {
+    const resolved = await runtime.resolve('infra/cloud-provider', type);
+    const factory = readUntrusted(FactorySchema, () => resolved, FACTORY_INVALID);
+    return factory.create(runtime, credentials, region);
+}
+//# sourceMappingURL=factory.js.map

package/dist/doks/cloud/factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"factory.js","sourceRoot":"","sources":["../../../src/doks/cloud/factory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,aAAa,EAA6B,MAAM,6CAA6C,CAAC;AAevG,qGAAqG;AACrG,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AACnE,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAqC,CAAC,KAAK,EAAE,EAAE,CAAC,uBAAuB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC;AAEhI,MAAM,eAAe,GAAyB;IAC7C,IAAI,EAAE,eAAe;IACrB,MAAM,EAAE,gCAAgC;IACxC,OAAO,EAAE,GAAG,EAAE,CAAC,wEAAwE;CACvF,CAAC;AAEF;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAClD,OAAoC,EACpC,IAAY,EACZ,WAAmB,EACnB,MAAc;IAEd,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,OAAO,CACrC,sBAAsB,EACtB,IAAI,CACJ,CAAC;IACF,MAAM,OAAO,GAAG,aAAa,CAAC,aAAa,EAAE,GAAG,EAAE,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;IAC9E,OAAO,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;AACrD,CAAC"}

package/dist/doks/cloud/index.d.ts

@@ -0,0 +1,5 @@
+export type { CloudProvider, InstanceConfig, CloudInstance, InstanceFilters, VolumeConfig, CloudVolume, VolumeFilters, SSHKey, CloudProviderConfig, CloudProviderErrorDetails, CloudInstanceMetadata, InstanceStatus, VolumeStatus } from '../types.ts';
+export { CloudProviderError, CloudProviderConfigSchema } from '../types.ts';
+export { BaseCloudProvider } from './base.ts';
+export { createRegisteredCloudProvider, type CloudProviderFactory, type CloudProviderFactoryImplementation, type CloudProviderFactoryRuntime } from './factory.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/doks/cloud/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/doks/cloud/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACX,aAAa,EACb,cAAc,EACd,aAAa,EACb,eAAe,EACf,YAAY,EACZ,WAAW,EACX,aAAa,EACb,MAAM,EACN,mBAAmB,EACnB,yBAAyB,EACzB,qBAAqB,EACrB,cAAc,EACd,YAAY,EACZ,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,kBAAkB,EAAE,yBAAyB,EAAE,MAAM,aAAa,CAAC;AAC5E,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EACN,6BAA6B,EAC7B,KAAK,oBAAoB,EACzB,KAAK,kCAAkC,EACvC,KAAK,2BAA2B,EAChC,MAAM,cAAc,CAAC"}

package/dist/doks/cloud/index.js

@@ -0,0 +1,4 @@
+export { CloudProviderError, CloudProviderConfigSchema } from "../types.js";
+export { BaseCloudProvider } from "./base.js";
+export { createRegisteredCloudProvider } from "./factory.js";
+//# sourceMappingURL=index.js.map

package/dist/doks/cloud/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/doks/cloud/index.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,kBAAkB,EAAE,yBAAyB,EAAE,MAAM,aAAa,CAAC;AAC5E,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EACN,6BAA6B,EAI7B,MAAM,cAAc,CAAC"}

package/dist/doks/types.d.ts

@@ -0,0 +1,95 @@
+/** Provider-neutral cloud compute and volume contracts. */
+import * as z from 'zod/v4';
+import type { CapabilityErrorDetails } from '@vibesdotdev/kernel';
+export type InstanceStatus = 'pending' | 'running' | 'stopping' | 'stopped' | 'terminating' | 'terminated' | 'error';
+export type VolumeStatus = 'creating' | 'available' | 'in-use' | 'deleting' | 'deleted' | 'error';
+export interface CloudProvider {
+    name: string;
+    createInstance(config: InstanceConfig): Promise<CloudInstance>;
+    deleteInstance(instanceId: string): Promise<void>;
+    getInstance(instanceId: string): Promise<CloudInstance | null>;
+    listInstances(filters?: InstanceFilters): Promise<CloudInstance[]>;
+    createVolume(config: VolumeConfig): Promise<CloudVolume>;
+    attachVolume(volumeId: string, instanceId: string): Promise<void>;
+    detachVolume(volumeId: string): Promise<void>;
+    deleteVolume(volumeId: string): Promise<void>;
+    listVolumes(filters?: VolumeFilters): Promise<CloudVolume[]>;
+    getOrCreateVPC(name: string): Promise<string>;
+    addSSHKey(name: string, publicKey: string): Promise<string>;
+    listSSHKeys(): Promise<SSHKey[]>;
+}
+export interface InstanceConfig {
+    name: string;
+    type: string;
+    region: string;
+    image: string;
+    sshKeys?: string[];
+    vpcId?: string;
+    userData?: string;
+    tags: Record<string, string>;
+}
+export interface CloudInstance {
+    id: string;
+    name: string;
+    type: string;
+    region: string;
+    status: InstanceStatus;
+    publicIp?: string;
+    privateIp?: string;
+    createdAt: Date;
+    tags: Record<string, string>;
+    metadata?: CloudInstanceMetadata;
+}
+/** Provider-reported instance facts: JSON values only. */
+export type CloudInstanceMetadata = CapabilityErrorDetails;
+export interface InstanceFilters {
+    status?: InstanceStatus[];
+    tags?: Record<string, string>;
+    region?: string;
+}
+export interface VolumeConfig {
+    name: string;
+    size: number;
+    region: string;
+    tags?: Record<string, string>;
+}
+export interface CloudVolume {
+    id: string;
+    name: string;
+    size: number;
+    region: string;
+    status: VolumeStatus;
+    attachedTo?: string;
+    createdAt: Date;
+    tags?: Record<string, string>;
+}
+export interface VolumeFilters {
+    status?: VolumeStatus[];
+    region?: string;
+    attachedTo?: string;
+}
+export interface SSHKey {
+    id: string;
+    name: string;
+    fingerprint: string;
+    publicKey: string;
+}
+/**
+ * Provider-neutral cloud provider config. `type` is the open provider id,
+ * resolved through the registered cloud provider factory — never a closed
+ * provider enum.
+ */
+export declare const CloudProviderConfigSchema: z.ZodObject<{
+    type: z.ZodString;
+    credentials: z.ZodString;
+    region: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type CloudProviderConfig = z.infer<typeof CloudProviderConfigSchema>;
+/**
+ * What a provider attaches to a failure: scalar facts (ids, statuses, HTTP
+ * codes). Text values are redacted at construction, so a provider that hands
+ * over a raw API body or an echoed token never carries it further.
+ */
+export type CloudProviderErrorDetails = Readonly<Record<string, string | number | boolean | null | undefined>>;
+export { CloudProviderError } from './cloud/base.ts';
+//# sourceMappingURL=types.d.ts.map

package/dist/doks/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/doks/types.ts"],"names":[],"mappings":"AAAA,2DAA2D;AAC3D,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAElE,MAAM,MAAM,cAAc,GACvB,SAAS,GACT,SAAS,GACT,UAAU,GACV,SAAS,GACT,aAAa,GACb,YAAY,GACZ,OAAO,CAAC;AAEX,MAAM,MAAM,YAAY,GAAG,UAAU,GAAG,WAAW,GAAG,QAAQ,GAAG,UAAU,GAAG,SAAS,GAAG,OAAO,CAAC;AAElG,MAAM,WAAW,aAAa;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAC/D,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClD,WAAW,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC;IAC/D,aAAa,CAAC,OAAO,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC;IACnE,YAAY,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACzD,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClE,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C,WAAW,CAAC,OAAO,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IAC7D,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9C,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5D,WAAW,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;CACjC;AAED,MAAM,WAAW,cAAc;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC7B;AAED,MAAM,WAAW,aAAa;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,cAAc,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,IAAI,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,QAAQ,CAAC,EAAE,qBAAqB,CAAC;CACjC;AAED,0DAA0D;AAC1D,MAAM,MAAM,qBAAqB,GAAG,sBAAsB,CAAC;AAE3D,MAAM,WAAW,eAAe;IAC/B,MAAM,CAAC,EAAE,cAAc,EAAE,CAAC;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,YAAY;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC9B;AAED,MAAM,WAAW,WAAW;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,YAAY,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,IAAI,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC9B;AAED,MAAM,WAAW,aAAa;IAC7B,MAAM,CAAC,EAAE,YAAY,EAAE,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,MAAM;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CAClB;AAED;;;;GAIG;AACH,eAAO,MAAM,yBAAyB;;;;iBAIpC,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E;;;;GAIG;AACH,MAAM,MAAM,yBAAyB,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC;AAE/G,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC"}

package/dist/doks/types.js

@@ -0,0 +1,14 @@
+/** Provider-neutral cloud compute and volume contracts. */
+import * as z from 'zod/v4';
+/**
+ * Provider-neutral cloud provider config. `type` is the open provider id,
+ * resolved through the registered cloud provider factory — never a closed
+ * provider enum.
+ */
+export const CloudProviderConfigSchema = z.object({
+    type: z.string().min(1),
+    credentials: z.string(),
+    region: z.string().min(1).optional()
+});
+export { CloudProviderError } from "./cloud/base.js";
+//# sourceMappingURL=types.js.map

package/dist/doks/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/doks/types.ts"],"names":[],"mappings":"AAAA,2DAA2D;AAC3D,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AA8F5B;;;;GAIG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACpC,CAAC,CAAC;AAUH,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC"}

package/dist/generate/index.d.ts

@@ -0,0 +1,29 @@
+/**
+ * @vibesdotdev/infra-core/generate
+ *
+ * Infrastructure artifact generation package.
+ *
+ * Provides CLI commands and runtime plugin for generating infrastructure
+ * artifacts (K8s manifests, Helm charts, wrangler configs, etc.) from
+ * resource descriptors.
+ *
+ * @example
+ * ```bash
+ * # Generate all artifacts
+ * vibes infra generate
+ *
+ * # Generate specific artifact types
+ * vibes infra generate --target kubernetes-manifest
+ * vibes infra generate --target helm-chart
+ *
+ * # Dry-run (print to stdout)
+ * vibes infra generate --dry-run
+ *
+ * # Generate to specific output directory
+ * vibes infra generate --output ./infra/generated
+ * ```
+ */
+export { default as infraGeneratePlugin } from './infra-generate.plugin.ts';
+export { generateArtifacts, type GenerateOptions, type GenerateResult } from '../cli/generate/generate-core.ts';
+export type { ArtifactGenerator, ArtifactOutput, ArtifactDescriptor } from '@vibesdotdev/infra-core/kinds';
+//# sourceMappingURL=index.d.ts.map

package/dist/generate/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/generate/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EAAE,OAAO,IAAI,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAC5E,OAAO,EAAE,iBAAiB,EAAE,KAAK,eAAe,EAAE,KAAK,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAChH,YAAY,EAAE,iBAAiB,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC"}

package/dist/generate/index.js

@@ -0,0 +1,28 @@
+/**
+ * @vibesdotdev/infra-core/generate
+ *
+ * Infrastructure artifact generation package.
+ *
+ * Provides CLI commands and runtime plugin for generating infrastructure
+ * artifacts (K8s manifests, Helm charts, wrangler configs, etc.) from
+ * resource descriptors.
+ *
+ * @example
+ * ```bash
+ * # Generate all artifacts
+ * vibes infra generate
+ *
+ * # Generate specific artifact types
+ * vibes infra generate --target kubernetes-manifest
+ * vibes infra generate --target helm-chart
+ *
+ * # Dry-run (print to stdout)
+ * vibes infra generate --dry-run
+ *
+ * # Generate to specific output directory
+ * vibes infra generate --output ./infra/generated
+ * ```
+ */
+export { default as infraGeneratePlugin } from "./infra-generate.plugin.js";
+export { generateArtifacts } from "../cli/generate/generate-core.js";
+//# sourceMappingURL=index.js.map

package/dist/generate/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/generate/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EAAE,OAAO,IAAI,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAC5E,OAAO,EAAE,iBAAiB,EAA6C,MAAM,kCAAkC,CAAC"}

package/dist/generate/infra-generate.plugin.d.ts

@@ -0,0 +1,3 @@
+declare const defaultExport: import("@vibesdotdev/kernel").RuntimePlugin;
+export default defaultExport;
+//# sourceMappingURL=infra-generate.plugin.d.ts.map

package/dist/generate/infra-generate.plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"infra-generate.plugin.d.ts","sourceRoot":"","sources":["../../src/generate/infra-generate.plugin.ts"],"names":[],"mappings":"AAaA,QAAA,MAAM,aAAa,6CAWjB,CAAC;AAEH,eAAe,aAAa,CAAC"}