@vibesdotdev/infra-core 0.0.1

package/dist/credentials/resolve.js

@@ -0,0 +1,128 @@
+/**
+ * Provider-agnostic credential resolution for infra/* adapters.
+ *
+ * Routes through the `secrets/store` runtime kind so every adapter
+ * (alerts, RUM, observability, …) reads from the same credential chain
+ * the rest of the platform uses. The chain (highest precedence first):
+ *
+ *   1. process.env (CI / explicit overrides)
+ *   2. The tier-resolved secrets/store implementation
+ *      - local tier   → encrypted-local → env-file
+ *      - production   → cloudflare-secrets-store → cloudflare-api
+ *
+ * Adapters declare the secret KEY NAMES (e.g. CLOUDFLARE_API_TOKEN) on
+ * their descriptor's `adapterConfig` and use this helper to resolve
+ * the values. The helper supports `keyCandidates` for fallback chains
+ * (e.g. prefer a scoped CLOUDFLARE_NOTIFICATIONS_API_TOKEN, fall back
+ * to the broad CLOUDFLARE_API_TOKEN).
+ *
+ * Why a helper instead of inlining the secrets/store query: provider
+ * adapters live in different packages and shouldn't all duplicate the
+ * tier-walk + env-overlay logic. Keeping it in infra-core makes the
+ * abstraction explicit ("infra/* adapters route credentials through
+ * vibes secrets") and gives us one place to evolve the chain (e.g.
+ * adding 1Password CLI as a backend).
+ */
+import { getVibesRuntime } from '@vibesdotdev/runtime';
+/**
+ * Tier-aware backend selection. Mirrors the secrets/store kind's own
+ * resolver (`packages/secrets/src/kinds/store.kind.ts`) so callers
+ * don't need to import internal helpers.
+ */
+function pickBackend(descriptors, tier) {
+    if (descriptors.length === 0)
+        return undefined;
+    const matches = descriptors.filter((d) => (d.tiers ?? []).includes(tier));
+    const pool = matches.length > 0 ? matches : descriptors;
+    pool.sort((a, b) => (b.priority ?? 0) - (a.priority ?? 0));
+    return pool[0];
+}
+function inferTier(environment, override) {
+    if (override)
+        return override;
+    if (environment === 'local' || environment === 'dev' || environment === 'staging' || environment === 'production') {
+        return environment;
+    }
+    return 'local';
+}
+/**
+ * Resolve a single credential by walking the candidate keys against
+ * process.env then the active secrets store. Returns the first match.
+ *
+ * Throws when no candidate resolves — adapters should let this bubble
+ * up so the CLI surfaces a clean "missing credentials" message rather
+ * than a vague "401 Unauthorized" downstream.
+ */
+export async function resolveAdapterCredential(options) {
+    const env = options.environment ?? 'local';
+    const tier = inferTier(env, options.tier);
+    const includeEnv = options.includeProcessEnv ?? true;
+    // 1. process.env (CI / shell override)
+    if (includeEnv) {
+        for (const key of options.keyCandidates) {
+            const v = process.env[key];
+            if (v && v.length > 0) {
+                return { key, value: v, source: 'process.env' };
+            }
+        }
+    }
+    // 2. secrets/store runtime resolution (tier-aware, priority-ordered)
+    const runtime = getVibesRuntime();
+    if (!runtime.hasKind('secrets/store')) {
+        throw new Error(`No secrets/store kind registered; cannot resolve ${options.humanName ?? options.keyCandidates[0]}. ` +
+            'Load the secrets plugin (and a backend like encrypted-local) before calling this adapter.');
+    }
+    const descriptors = runtime
+        .assets('secrets/store')
+        .descriptors();
+    // `VIBES_DEBUG_SECRETS=1` dumps the visible descriptor pool when
+    // you're tracing why a credential is missing or getting misrouted.
+    if (process.env.VIBES_DEBUG_SECRETS === '1') {
+        console.error(`[secrets-debug] descriptors visible at tier=${tier}:`);
+        for (const d of descriptors) {
+            console.error(`  - id=${d.id} priority=${d.priority ?? '-'} tiers=${JSON.stringify(d.tiers)}`);
+        }
+    }
+    const target = pickBackend(descriptors, tier);
+    if (!target) {
+        throw new Error(`No secrets/store backend available for tier=${tier}. Register a backend ` +
+            '(encrypted-local for local, cloudflare-secrets-store for production) before calling this adapter.');
+    }
+    const store = (await runtime
+        .query('secrets/store')
+        .withId(target.id)
+        .resolve());
+    if (!store || typeof store.get !== 'function') {
+        throw new Error(`Resolved secrets/store '${target.id}' has no get() method for ${options.humanName ?? options.keyCandidates[0]}.`);
+    }
+    for (const key of options.keyCandidates) {
+        try {
+            const v = await store.get(env, key);
+            if (v && v.length > 0) {
+                return { key, value: v, source: target.id };
+            }
+        }
+        catch {
+            // next candidate
+        }
+    }
+    throw new Error(`Missing credential: none of [${options.keyCandidates.join(', ')}] resolved from process.env or ` +
+        `${target.id} (environment=${env}, tier=${tier}). ` +
+        `Set the value with \`vibes secrets set --environment ${env} ${options.keyCandidates[0]} <value>\`.`);
+}
+/**
+ * Convenience wrapper for resolving multiple credentials at once.
+ * Each key gets a candidate list of one (the key itself). Use the
+ * single-credential form when you need fallback chains.
+ */
+export async function resolveAdapterCredentials(keys, options) {
+    const out = {};
+    for (const key of keys) {
+        out[key] = await resolveAdapterCredential({
+            keyCandidates: [key],
+            ...(options ?? {})
+        });
+    }
+    return out;
+}
+//# sourceMappingURL=resolve.js.map

package/dist/credentials/resolve.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve.js","sourceRoot":"","sources":["../../src/credentials/resolve.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAuDvD;;;;GAIG;AACH,SAAS,WAAW,CACnB,WAA0C,EAC1C,IAAqB;IAErB,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC/C,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1E,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC;IACxD,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3D,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC;AAChB,CAAC;AAED,SAAS,SAAS,CAAC,WAAmB,EAAE,QAA0B;IACjE,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,IAAI,WAAW,KAAK,OAAO,IAAI,WAAW,KAAK,KAAK,IAAI,WAAW,KAAK,SAAS,IAAI,WAAW,KAAK,YAAY,EAAE,CAAC;QACnH,OAAO,WAAW,CAAC;IACpB,CAAC;IACD,OAAO,OAAO,CAAC;AAChB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC7C,OAAwC;IAExC,MAAM,GAAG,GAAG,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC;IAC3C,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,UAAU,GAAG,OAAO,CAAC,iBAAiB,IAAI,IAAI,CAAC;IAErD,uCAAuC;IACvC,IAAI,UAAU,EAAE,CAAC;QAChB,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;YACzC,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC3B,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvB,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;YACjD,CAAC;QACF,CAAC;IACF,CAAC;IAED,qEAAqE;IACrE,MAAM,OAAO,GAAG,eAAe,EAAE,CAAC;IAClC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CACd,oDAAoD,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI;YACpG,2FAA2F,CAC5F,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAG,OAAO;SACzB,MAAM,CAAC,eAAe,CAAC;SACvB,WAAW,EAAmC,CAAC;IACjD,iEAAiE;IACjE,mEAAmE;IACnE,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,KAAK,GAAG,EAAE,CAAC;QAC7C,OAAO,CAAC,KAAK,CAAC,+CAA+C,IAAI,GAAG,CAAC,CAAC;QACtE,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;YAC7B,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,QAAQ,IAAI,GAAG,UAAU,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAChG,CAAC;IACF,CAAC;IACD,MAAM,MAAM,GAAG,WAAW,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;IAC9C,IAAI,CAAC,MAAM,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACd,+CAA+C,IAAI,uBAAuB;YACzE,mGAAmG,CACpG,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAG,CAAC,MAAM,OAAO;SAC1B,KAAK,CAAC,eAAe,CAAC;SACtB,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;SACjB,OAAO,EAAE,CAA0B,CAAC;IAEtC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,CAAC,GAAG,KAAK,UAAU,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CACd,2BAA2B,MAAM,CAAC,EAAE,6BAA6B,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CACjH,CAAC;IACH,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;QACzC,IAAI,CAAC;YACJ,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACpC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvB,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC;YAC7C,CAAC;QACF,CAAC;QAAC,MAAM,CAAC;YACR,iBAAiB;QAClB,CAAC;IACF,CAAC;IAED,MAAM,IAAI,KAAK,CACd,gCAAgC,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,iCAAiC;QAChG,GAAG,MAAM,CAAC,EAAE,iBAAiB,GAAG,UAAU,IAAI,KAAK;QACnD,wDAAwD,GAAG,IAAI,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,aAAa,CACrG,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC9C,IAAuB,EACvB,OAA8E;IAE9E,MAAM,GAAG,GAA8C,EAAE,CAAC;IAC1D,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACxB,GAAG,CAAC,GAAG,CAAC,GAAG,MAAM,wBAAwB,CAAC;YACzC,aAAa,EAAE,CAAC,GAAG,CAAC;YACpB,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC;SAClB,CAAC,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACZ,CAAC"}

package/dist/deployment.d.ts

@@ -0,0 +1,9 @@
+import { type AppDeployment, type AppDeploymentInput, type DeploymentDependency, type DeploymentEnvRequirement, type DeploymentOrigin, type DeploymentUpstream } from './schemas.ts';
+export declare function createAppDeployment(input: AppDeploymentInput): AppDeployment;
+export declare function createDeploymentOrigin(input: DeploymentOrigin): DeploymentOrigin;
+export declare function createDeploymentEnvRequirement(input: DeploymentEnvRequirement): DeploymentEnvRequirement;
+export declare function createDeploymentDependency(input: DeploymentDependency): DeploymentDependency;
+export declare function getPrimaryOrigin(deployment: AppDeployment): DeploymentOrigin;
+export declare function getUpstreamOriginEnv(upstream: DeploymentUpstream): Record<string, string>;
+export type { AppDeployment, AppDeploymentInput, DeploymentDependency, DeploymentEnvRequirement, DeploymentOrigin, DeploymentUpstream };
+//# sourceMappingURL=deployment.d.ts.map

package/dist/deployment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deployment.d.ts","sourceRoot":"","sources":["../src/deployment.ts"],"names":[],"mappings":"AAAA,OAAO,EAKN,KAAK,aAAa,EAClB,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EACzB,KAAK,wBAAwB,EAC7B,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,MAAM,cAAc,CAAC;AAEtB,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,kBAAkB,GAAG,aAAa,CAE5E;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,gBAAgB,GAAG,gBAAgB,CAEhF;AAED,wBAAgB,8BAA8B,CAC7C,KAAK,EAAE,wBAAwB,GAC7B,wBAAwB,CAE1B;AAED,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,oBAAoB,GAAG,oBAAoB,CAE5F;AAED,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,aAAa,GAAG,gBAAgB,CAI5E;AAED,wBAAgB,oBAAoB,CACnC,QAAQ,EAAE,kBAAkB,GAC1B,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAQxB;AAED,YAAY,EACX,aAAa,EACb,kBAAkB,EAClB,oBAAoB,EACpB,wBAAwB,EACxB,gBAAgB,EAChB,kBAAkB,EAClB,CAAC"}

package/dist/deployment.js

@@ -0,0 +1,25 @@
+import { appDeploymentSchema, deploymentDependencySchema, deploymentEnvRequirementSchema, deploymentOriginSchema } from "./schemas.js";
+export function createAppDeployment(input) {
+    return appDeploymentSchema.parse(input);
+}
+export function createDeploymentOrigin(input) {
+    return deploymentOriginSchema.parse(input);
+}
+export function createDeploymentEnvRequirement(input) {
+    return deploymentEnvRequirementSchema.parse(input);
+}
+export function createDeploymentDependency(input) {
+    return deploymentDependencySchema.parse(input);
+}
+export function getPrimaryOrigin(deployment) {
+    return (deployment.origins.find((origin) => origin.kind === 'primary') ?? deployment.origins[0]);
+}
+export function getUpstreamOriginEnv(upstream) {
+    if (!upstream.originEnvVar) {
+        return {};
+    }
+    return {
+        [upstream.originEnvVar]: upstream.origin
+    };
+}
+//# sourceMappingURL=deployment.js.map

package/dist/deployment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deployment.js","sourceRoot":"","sources":["../src/deployment.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,mBAAmB,EACnB,0BAA0B,EAC1B,8BAA8B,EAC9B,sBAAsB,EAOtB,MAAM,cAAc,CAAC;AAEtB,MAAM,UAAU,mBAAmB,CAAC,KAAyB;IAC5D,OAAO,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAAuB;IAC7D,OAAO,sBAAsB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC7C,KAA+B;IAE/B,OAAO,8BAA8B,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,KAA2B;IACrE,OAAO,0BAA0B,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,UAAyB;IACzD,OAAO,CACN,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CACvF,CAAC;AACH,CAAC;AAED,MAAM,UAAU,oBAAoB,CACnC,QAA4B;IAE5B,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC;QAC5B,OAAO,EAAE,CAAC;IACX,CAAC;IAED,OAAO;QACN,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,QAAQ,CAAC,MAAM;KACxC,CAAC;AACH,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,32 @@
+export { createAppDeployment, createDeploymentOrigin, createDeploymentEnvRequirement, createDeploymentDependency, getPrimaryOrigin, getUpstreamOriginEnv } from './deployment.ts';
+export type { AppDeployment, AppDeploymentInput, DeploymentDependency, DeploymentEnvRequirement, DeploymentOrigin, DeploymentUpstream } from './deployment.ts';
+export { deploymentProviderSchema, appRuntimeSchema, deploymentOriginSchema, deploymentBuildSchema, deploymentEnvRequirementSchema, deploymentDependencySchema, deploymentUpstreamSchema, appDeploymentSchema } from './schemas.ts';
+export type { DeploymentProvider, AppRuntime, DeploymentOrigin as DeploymentOriginType, DeploymentBuild, DeploymentEnvRequirement as DeploymentEnvRequirementType, DeploymentDependency as DeploymentDependencyType, DeploymentUpstream as DeploymentUpstreamType, AppDeploymentInput as AppDeploymentInputType, AppDeployment as AppDeploymentType } from './schemas.ts';
+export { webAppKind, WebAppDescriptorSchema, WebAppConfigSchema, CloudflareWorkersWebAppConfigSchema, DigitalOceanAppWebAppConfigSchema } from './kinds/index.ts';
+export type { WebAppDescriptor, WebAppDependency } from './kinds/index.ts';
+export { workerKind, WorkerDescriptorSchema, WorkerConfigSchema, DoksDeploymentWorkerConfigSchema, WorkerScalingSchema } from './kinds/index.ts';
+export type { WorkerDescriptor, WorkerScaling } from './kinds/index.ts';
+export { databaseKind, DatabaseDescriptorSchema, DatabaseConfigSchema, DoksDatabaseConfigSchema, DOManagedPostgresConfigSchema, TursoDatabaseConfigSchema, CloudflareD1ConfigSchema, DatabaseBackupSchema } from './kinds/index.ts';
+export type { DatabaseDescriptor, DatabaseBackup } from './kinds/index.ts';
+export { queueKind, QueueDescriptorSchema, QueueConfigSchema, DoksQueueConfigSchema, QueueTopicSchema } from './kinds/index.ts';
+export type { QueueDescriptor, QueueTopic } from './kinds/index.ts';
+export { cacheKind, CacheDescriptorSchema, CacheConfigSchema, DOManagedRedisConfigSchema } from './kinds/index.ts';
+export type { CacheDescriptor } from './kinds/index.ts';
+export { objectStorageKind, ObjectStorageDescriptorSchema, ObjectStorageConfigSchema, DOSpacesConfigSchema, CorsRuleSchema, LifecycleRuleSchema } from './kinds/index.ts';
+export type { ObjectStorageDescriptor, CorsRule, LifecycleRule } from './kinds/index.ts';
+export { sandboxKind, SandboxDescriptorSchema, SandboxConfigSchema, CloudflareSandboxConfigSchema, DockerSandboxConfigSchema, DigitalOceanDropletSandboxConfigSchema, SandboxOutboundProxySchema, SandboxResourceLimitsSchema } from './kinds/index.ts';
+export type { SandboxDescriptor, SandboxOutboundProxy, SandboxResourceLimits } from './kinds/index.ts';
+export { gitHostingKind, GitHostingDescriptorSchema, GitHostingConfigSchema, GiteaDoksGitHostingConfigSchema, GitHostingTypeSchema, GitHostingAuthMethodSchema } from './kinds/index.ts';
+export type { GitHostingDescriptor, GitHostingType, GitHostingAuthMethod } from './kinds/index.ts';
+export { packageRegistryKind, PackageRegistryDescriptorSchema, PackageRegistryConfigSchema, VerdaccioDoksPackageRegistryConfigSchema, PackageRegistryTypeSchema } from './kinds/index.ts';
+export type { PackageRegistryDescriptor, PackageRegistryType } from './kinds/index.ts';
+export { logsKind, InfraLogsDescriptorSchema, type InfraLogsDescriptor, type InfraLogsDescriptorInput, type InfraLogsKind, type InfraLogsKindInput, type LogsImplementation } from './kinds/index.ts';
+export { artifactKind, ArtifactDescriptorSchema, type ArtifactDescriptor, type ArtifactGenerator, type ArtifactOutput } from './kinds/index.ts';
+export { INFRA_DISCOVERY_PATTERN, extractStem } from './kinds/index.ts';
+export { alertsKind, InfraAlertsDescriptorSchema, AlertPolicySchema, AlertMechanismSchema, AlertTypeSchema, AlertWindowSchema, type InfraAlertsDescriptor, type InfraAlertsDescriptorInput, type InfraAlertsKind, type InfraAlertsKindInput, type AlertsImplementation, type AlertPolicy, type AlertMechanism, type AlertType } from './kinds/index.ts';
+export { observabilityKind, InfraObservabilityDescriptorSchema, ObservabilityScopeSchema, ObservabilitySettingsSchema, type InfraObservabilityDescriptor, type InfraObservabilityDescriptorInput, type InfraObservabilityKind, type InfraObservabilityKindInput, type ObservabilityImplementation, type ObservabilityScope, type ObservabilitySettings, type ObservabilitySnapshot, type SetObservabilityInput, type SetObservabilityResult } from './kinds/index.ts';
+export { rumKind, InfraRumDescriptorSchema, RumPrivacySchema, RumInjectionSchema, type InfraRumDescriptor, type InfraRumDescriptorInput, type InfraRumKind, type InfraRumKindInput, type RumImplementation, type RumSiteSnapshot, type RumPrivacy, type RumInjection } from './kinds/index.ts';
+export { resolveAdapterCredential, resolveAdapterCredentials, type EnvironmentTier, type ResolveAdapterCredentialOptions, type ResolvedAdapterCredential } from './credentials/resolve.ts';
+export { bootstrapSeedKind, bootstrapSeedConditionSchema, bootstrapSeedDescriptorSchema, bootstrapSeedModeSchema, runBootstrapSeeds, type BootstrapSeedCondition, type BootstrapSeedDescriptor, type BootstrapSeedImpl, type BootstrapSeedMode, type BootstrapSeedRunOptions, type BootstrapSeedRunResult } from './bootstrap/index.ts';
+export { default as infraPlugin } from './infra.plugin';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,mBAAmB,EACnB,sBAAsB,EACtB,8BAA8B,EAC9B,0BAA0B,EAC1B,gBAAgB,EAChB,oBAAoB,EACpB,MAAM,iBAAiB,CAAC;AACzB,YAAY,EACX,aAAa,EACb,kBAAkB,EAClB,oBAAoB,EACpB,wBAAwB,EACxB,gBAAgB,EAChB,kBAAkB,EAClB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACN,wBAAwB,EACxB,gBAAgB,EAChB,sBAAsB,EACtB,qBAAqB,EACrB,8BAA8B,EAC9B,0BAA0B,EAC1B,wBAAwB,EACxB,mBAAmB,EACnB,MAAM,cAAc,CAAC;AACtB,YAAY,EACX,kBAAkB,EAClB,UAAU,EACV,gBAAgB,IAAI,oBAAoB,EACxC,eAAe,EACf,wBAAwB,IAAI,4BAA4B,EACxD,oBAAoB,IAAI,wBAAwB,EAChD,kBAAkB,IAAI,sBAAsB,EAC5C,kBAAkB,IAAI,sBAAsB,EAC5C,aAAa,IAAI,iBAAiB,EAClC,MAAM,cAAc,CAAC;AACtB,OAAO,EACN,UAAU,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,mCAAmC,EAAE,iCAAiC,EAC9H,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAC3E,OAAO,EACN,UAAU,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,gCAAgC,EAAE,mBAAmB,EAC7G,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACxE,OAAO,EACN,YAAY,EAAE,wBAAwB,EAAE,oBAAoB,EAAE,wBAAwB,EAAE,6BAA6B,EAAE,yBAAyB,EAAE,wBAAwB,EAAE,oBAAoB,EAChM,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAC3E,OAAO,EACN,SAAS,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,gBAAgB,EAC5F,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACpE,OAAO,EAAE,SAAS,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,0BAA0B,EAAE,MAAM,kBAAkB,CAAC;AACnH,YAAY,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EACN,iBAAiB,EAAE,6BAA6B,EAAE,yBAAyB,EAAE,oBAAoB,EAAE,cAAc,EAAE,mBAAmB,EACtI,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EAAE,uBAAuB,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACzF,OAAO,EACN,WAAW,EAAE,uBAAuB,EAAE,mBAAmB,EAAE,6BAA6B,EAAE,yBAAyB,EAAE,sCAAsC,EAAE,0BAA0B,EAAE,2BAA2B,EACpN,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AACvG,OAAO,EACN,cAAc,EAAE,0BAA0B,EAAE,sBAAsB,EAAE,+BAA+B,EAAE,oBAAoB,EAAE,0BAA0B,EACrJ,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EAAE,oBAAoB,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AACnG,OAAO,EACN,mBAAmB,EAAE,+BAA+B,EAAE,2BAA2B,EAAE,wCAAwC,EAAE,yBAAyB,EACtJ,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EAAE,yBAAyB,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvF,OAAO,EACN,QAAQ,EAAE,yBAAyB,EAAE,KAAK,mBAAmB,EAAE,KAAK,wBAAwB,EAAE,KAAK,aAAa,EAAE,KAAK,kBAAkB,EAAE,KAAK,kBAAkB,EAClK,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACN,YAAY,EACZ,wBAAwB,EACxB,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACtB,KAAK,cAAc,EACnB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,uBAAuB,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACxE,OAAO,EACN,UAAU,EACV,2BAA2B,EAC3B,iBAAiB,EACjB,oBAAoB,EACpB,eAAe,EACf,iBAAiB,EACjB,KAAK,qBAAqB,EAC1B,KAAK,0BAA0B,EAC/B,KAAK,eAAe,EACpB,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,EACzB,KAAK,WAAW,EAChB,KAAK,cAAc,EACnB,KAAK,SAAS,EACd,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACN,iBAAiB,EACjB,kCAAkC,EAClC,wBAAwB,EACxB,2BAA2B,EAC3B,KAAK,4BAA4B,EACjC,KAAK,iCAAiC,EACtC,KAAK,sBAAsB,EAC3B,KAAK,2BAA2B,EAChC,KAAK,2BAA2B,EAChC,KAAK,kBAAkB,EACvB,KAAK,qBAAqB,EAC1B,KAAK,qBAAqB,EAC1B,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAC3B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACN,OAAO,EACP,wBAAwB,EACxB,gBAAgB,EAChB,kBAAkB,EAClB,KAAK,kBAAkB,EACvB,KAAK,uBAAuB,EAC5B,KAAK,YAAY,EACjB,KAAK,iBAAiB,EACtB,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACpB,KAAK,UAAU,EACf,KAAK,YAAY,EACjB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACN,wBAAwB,EACxB,yBAAyB,EACzB,KAAK,eAAe,EACpB,KAAK,+BAA+B,EACpC,KAAK,yBAAyB,EAC9B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACN,iBAAiB,EACjB,4BAA4B,EAC5B,6BAA6B,EAC7B,uBAAuB,EACvB,iBAAiB,EACjB,KAAK,sBAAsB,EAC3B,KAAK,uBAAuB,EAC5B,KAAK,iBAAiB,EACtB,KAAK,iBAAiB,EACtB,KAAK,uBAAuB,EAC5B,KAAK,sBAAsB,EAC3B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/index.js

@@ -0,0 +1,21 @@
+export { createAppDeployment, createDeploymentOrigin, createDeploymentEnvRequirement, createDeploymentDependency, getPrimaryOrigin, getUpstreamOriginEnv } from "./deployment.js";
+export { deploymentProviderSchema, appRuntimeSchema, deploymentOriginSchema, deploymentBuildSchema, deploymentEnvRequirementSchema, deploymentDependencySchema, deploymentUpstreamSchema, appDeploymentSchema } from "./schemas.js";
+export { webAppKind, WebAppDescriptorSchema, WebAppConfigSchema, CloudflareWorkersWebAppConfigSchema, DigitalOceanAppWebAppConfigSchema } from "./kinds/index.js";
+export { workerKind, WorkerDescriptorSchema, WorkerConfigSchema, DoksDeploymentWorkerConfigSchema, WorkerScalingSchema } from "./kinds/index.js";
+export { databaseKind, DatabaseDescriptorSchema, DatabaseConfigSchema, DoksDatabaseConfigSchema, DOManagedPostgresConfigSchema, TursoDatabaseConfigSchema, CloudflareD1ConfigSchema, DatabaseBackupSchema } from "./kinds/index.js";
+export { queueKind, QueueDescriptorSchema, QueueConfigSchema, DoksQueueConfigSchema, QueueTopicSchema } from "./kinds/index.js";
+export { cacheKind, CacheDescriptorSchema, CacheConfigSchema, DOManagedRedisConfigSchema } from "./kinds/index.js";
+export { objectStorageKind, ObjectStorageDescriptorSchema, ObjectStorageConfigSchema, DOSpacesConfigSchema, CorsRuleSchema, LifecycleRuleSchema } from "./kinds/index.js";
+export { sandboxKind, SandboxDescriptorSchema, SandboxConfigSchema, CloudflareSandboxConfigSchema, DockerSandboxConfigSchema, DigitalOceanDropletSandboxConfigSchema, SandboxOutboundProxySchema, SandboxResourceLimitsSchema } from "./kinds/index.js";
+export { gitHostingKind, GitHostingDescriptorSchema, GitHostingConfigSchema, GiteaDoksGitHostingConfigSchema, GitHostingTypeSchema, GitHostingAuthMethodSchema } from "./kinds/index.js";
+export { packageRegistryKind, PackageRegistryDescriptorSchema, PackageRegistryConfigSchema, VerdaccioDoksPackageRegistryConfigSchema, PackageRegistryTypeSchema } from "./kinds/index.js";
+export { logsKind, InfraLogsDescriptorSchema } from "./kinds/index.js";
+export { artifactKind, ArtifactDescriptorSchema } from "./kinds/index.js";
+export { INFRA_DISCOVERY_PATTERN, extractStem } from "./kinds/index.js";
+export { alertsKind, InfraAlertsDescriptorSchema, AlertPolicySchema, AlertMechanismSchema, AlertTypeSchema, AlertWindowSchema } from "./kinds/index.js";
+export { observabilityKind, InfraObservabilityDescriptorSchema, ObservabilityScopeSchema, ObservabilitySettingsSchema } from "./kinds/index.js";
+export { rumKind, InfraRumDescriptorSchema, RumPrivacySchema, RumInjectionSchema } from "./kinds/index.js";
+export { resolveAdapterCredential, resolveAdapterCredentials } from "./credentials/resolve.js";
+export { bootstrapSeedKind, bootstrapSeedConditionSchema, bootstrapSeedDescriptorSchema, bootstrapSeedModeSchema, runBootstrapSeeds } from "./bootstrap/index.js";
+export { default as infraPlugin } from './infra.plugin';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,mBAAmB,EACnB,sBAAsB,EACtB,8BAA8B,EAC9B,0BAA0B,EAC1B,gBAAgB,EAChB,oBAAoB,EACpB,MAAM,iBAAiB,CAAC;AASzB,OAAO,EACN,wBAAwB,EACxB,gBAAgB,EAChB,sBAAsB,EACtB,qBAAqB,EACrB,8BAA8B,EAC9B,0BAA0B,EAC1B,wBAAwB,EACxB,mBAAmB,EACnB,MAAM,cAAc,CAAC;AAYtB,OAAO,EACN,UAAU,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,mCAAmC,EAAE,iCAAiC,EAC9H,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACN,UAAU,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,gCAAgC,EAAE,mBAAmB,EAC7G,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACN,YAAY,EAAE,wBAAwB,EAAE,oBAAoB,EAAE,wBAAwB,EAAE,6BAA6B,EAAE,yBAAyB,EAAE,wBAAwB,EAAE,oBAAoB,EAChM,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACN,SAAS,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,gBAAgB,EAC5F,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,SAAS,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,0BAA0B,EAAE,MAAM,kBAAkB,CAAC;AAEnH,OAAO,EACN,iBAAiB,EAAE,6BAA6B,EAAE,yBAAyB,EAAE,oBAAoB,EAAE,cAAc,EAAE,mBAAmB,EACtI,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACN,WAAW,EAAE,uBAAuB,EAAE,mBAAmB,EAAE,6BAA6B,EAAE,yBAAyB,EAAE,sCAAsC,EAAE,0BAA0B,EAAE,2BAA2B,EACpN,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACN,cAAc,EAAE,0BAA0B,EAAE,sBAAsB,EAAE,+BAA+B,EAAE,oBAAoB,EAAE,0BAA0B,EACrJ,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACN,mBAAmB,EAAE,+BAA+B,EAAE,2BAA2B,EAAE,wCAAwC,EAAE,yBAAyB,EACtJ,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACN,QAAQ,EAAE,yBAAyB,EACnC,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACN,YAAY,EACZ,wBAAwB,EAIxB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,uBAAuB,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACxE,OAAO,EACN,UAAU,EACV,2BAA2B,EAC3B,iBAAiB,EACjB,oBAAoB,EACpB,eAAe,EACf,iBAAiB,EASjB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACN,iBAAiB,EACjB,kCAAkC,EAClC,wBAAwB,EACxB,2BAA2B,EAW3B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACN,OAAO,EACP,wBAAwB,EACxB,gBAAgB,EAChB,kBAAkB,EASlB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACN,wBAAwB,EACxB,yBAAyB,EAIzB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACN,iBAAiB,EACjB,4BAA4B,EAC5B,6BAA6B,EAC7B,uBAAuB,EACvB,iBAAiB,EAOjB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/infra.plugin.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Infrastructure Runtime Plugin
+ *
+ * Registers all infra resource kinds with the runtime.
+ */
+/**
+ * Note on layering: inference is an apps/ai domain concern, not an infra kind.
+ * Existing runtime kinds `ai/provider`, `ai/adapter`, `ai/model`, and
+ * `ai/generation` already express "who/how/where inference runs", and the
+ * runtime's hardware scope + connectionMode qualifier + priority already
+ * select between consumer-direct, consumer-worker, cloud-worker, and
+ * cloud-via-API strategies. New strategies (CF Unified Inference, Agents
+ * Week bindings) should be added as new `ai/provider` descriptors + adapters,
+ * not as a parallel `infra/inference` kind.
+ */
+declare const _default: import("@vibesdotdev/runtime").RuntimePlugin;
+export default _default;
+//# sourceMappingURL=infra.plugin.d.ts.map

package/dist/infra.plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"infra.plugin.d.ts","sourceRoot":"","sources":["../src/infra.plugin.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAkBH;;;;;;;;;GASG;;AAEH,wBAoBG"}

package/dist/infra.plugin.js

@@ -0,0 +1,52 @@
+/**
+ * Infrastructure Runtime Plugin
+ *
+ * Registers all infra resource kinds with the runtime.
+ */
+import { createRuntimePlugin } from '@vibesdotdev/runtime/factory/plugin';
+import { webAppKind } from './kinds/web-app.kind';
+import { workerKind } from './kinds/worker.kind';
+import { databaseKind } from './kinds/database.kind';
+import { queueKind } from './kinds/queue.kind';
+import { cacheKind } from './kinds/cache.kind';
+import { objectStorageKind } from './kinds/object-storage.kind';
+import { sandboxKind } from './kinds/sandbox.kind';
+import { gitHostingKind } from './kinds/git-hosting.kind';
+import { packageRegistryKind } from './kinds/package-registry.kind';
+import { logsKind } from './kinds/logs.kind';
+import { alertsKind } from "./kinds/alerts.kind.js";
+import { observabilityKind } from "./kinds/observability.kind.js";
+import { rumKind } from "./kinds/rum.kind.js";
+import { bootstrapSeedKind } from "./bootstrap/index.js";
+/**
+ * Note on layering: inference is an apps/ai domain concern, not an infra kind.
+ * Existing runtime kinds `ai/provider`, `ai/adapter`, `ai/model`, and
+ * `ai/generation` already express "who/how/where inference runs", and the
+ * runtime's hardware scope + connectionMode qualifier + priority already
+ * select between consumer-direct, consumer-worker, cloud-worker, and
+ * cloud-via-API strategies. New strategies (CF Unified Inference, Agents
+ * Week bindings) should be added as new `ai/provider` descriptors + adapters,
+ * not as a parallel `infra/inference` kind.
+ */
+export default createRuntimePlugin({
+    id: 'infra',
+    name: 'Infrastructure',
+    description: 'Resource kinds for deployable infrastructure',
+    kinds: [
+        webAppKind,
+        workerKind,
+        databaseKind,
+        queueKind,
+        cacheKind,
+        objectStorageKind,
+        sandboxKind,
+        gitHostingKind,
+        packageRegistryKind,
+        logsKind,
+        alertsKind,
+        observabilityKind,
+        rumKind,
+        bootstrapSeedKind
+    ]
+});
+//# sourceMappingURL=infra.plugin.js.map

package/dist/infra.plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"infra.plugin.js","sourceRoot":"","sources":["../src/infra.plugin.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC1E,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AACpE,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAEzD;;;;;;;;;GASG;AAEH,eAAe,mBAAmB,CAAC;IAClC,EAAE,EAAE,OAAO;IACX,IAAI,EAAE,gBAAgB;IACtB,WAAW,EAAE,8CAA8C;IAC3D,KAAK,EAAE;QACN,UAAU;QACV,UAAU;QACV,YAAY;QACZ,SAAS;QACT,SAAS;QACT,iBAAiB;QACjB,WAAW;QACX,cAAc;QACd,mBAAmB;QACnB,QAAQ;QACR,UAAU;QACV,iBAAiB;QACjB,OAAO;QACP,iBAAiB;KACjB;CACD,CAAC,CAAC"}

package/dist/kinds/alerts.kind.d.ts

@@ -0,0 +1,192 @@
+/**
+ * Infra Alerts Kind
+ *
+ * Provider-agnostic schema for alerting / notification policies that
+ * span billing (budget + per-product usage), reliability (error rate,
+ * latency), and operational lifecycle (deploys, subscription changes).
+ *
+ * Per-provider implementations (cloudflare-alerts, do-monitoring,
+ * cloudwatch-alarms) map this shape onto the native API. Where a
+ * provider doesn't support a `type`, the impl rejects with a clear
+ * "unsupported" error rather than silently falling back.
+ *
+ * Configuration is declarative — typically encoded in an
+ * `infra/account.config.ts` or `infra/alerts.infra.ts` file alongside
+ * `infra/dns.ts`. The CLI (`vibes infra alerts list|create|delete`)
+ * wraps the same primitive for one-off ops and drift detection.
+ */
+import * as z from 'zod/v4';
+/**
+ * Delivery channel for an alert. Provider impls translate these to
+ * native delivery slots (e.g. CF's `mechanisms.email[]`).
+ */
+declare const AlertMechanismSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    kind: z.ZodLiteral<"email">;
+    target: z.ZodEmail;
+}, z.core.$strip>, z.ZodObject<{
+    kind: z.ZodLiteral<"webhook">;
+    target: z.ZodString;
+    secretRef: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, z.ZodObject<{
+    kind: z.ZodLiteral<"pagerduty">;
+    target: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+    kind: z.ZodLiteral<"slack">;
+    target: z.ZodString;
+}, z.core.$strip>], "kind">;
+export type AlertMechanism = z.infer<typeof AlertMechanismSchema>;
+/**
+ * Cross-provider alert categories. Each maps to one or more native
+ * alert types per provider.
+ */
+declare const AlertTypeSchema: z.ZodEnum<{
+    custom: "custom";
+    budget: "budget";
+    usage: "usage";
+    "error-rate": "error-rate";
+    latency: "latency";
+}>;
+export type AlertType = z.infer<typeof AlertTypeSchema>;
+declare const AlertWindowSchema: z.ZodEnum<{
+    "5m": "5m";
+    "15m": "15m";
+    "1h": "1h";
+    "6h": "6h";
+    "24h": "24h";
+    "7d": "7d";
+    "30d": "30d";
+}>;
+declare const AlertPolicySchema: z.ZodObject<{
+    id: z.ZodOptional<z.ZodString>;
+    name: z.ZodString;
+    type: z.ZodEnum<{
+        custom: "custom";
+        budget: "budget";
+        usage: "usage";
+        "error-rate": "error-rate";
+        latency: "latency";
+    }>;
+    threshold: z.ZodNumber;
+    warningThreshold: z.ZodOptional<z.ZodNumber>;
+    window: z.ZodOptional<z.ZodEnum<{
+        "5m": "5m";
+        "15m": "15m";
+        "1h": "1h";
+        "6h": "6h";
+        "24h": "24h";
+        "7d": "7d";
+        "30d": "30d";
+    }>>;
+    filters: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+    mechanisms: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"email">;
+        target: z.ZodEmail;
+    }, z.core.$strip>, z.ZodObject<{
+        kind: z.ZodLiteral<"webhook">;
+        target: z.ZodString;
+        secretRef: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>, z.ZodObject<{
+        kind: z.ZodLiteral<"pagerduty">;
+        target: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        kind: z.ZodLiteral<"slack">;
+        target: z.ZodString;
+    }, z.core.$strip>], "kind">>;
+    enabled: z.ZodDefault<z.ZodBoolean>;
+    description: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type AlertPolicy = z.infer<typeof AlertPolicySchema>;
+declare const AlertsBaseSchema: z.ZodObject<{
+    id: z.ZodString;
+    name: z.ZodOptional<z.ZodString>;
+    description: z.ZodOptional<z.ZodString>;
+    tags: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    hardware: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    enabled: z.ZodOptional<z.ZodBoolean>;
+    priority: z.ZodOptional<z.ZodNumber>;
+    requiredContext: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    optionalContext: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    config: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    kind: z.ZodLiteral<"infra/alerts">;
+    adapter: z.ZodString;
+    adapterConfig: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    environment: z.ZodDefault<z.ZodString>;
+    policies: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        id: z.ZodOptional<z.ZodString>;
+        name: z.ZodString;
+        type: z.ZodEnum<{
+            custom: "custom";
+            budget: "budget";
+            usage: "usage";
+            "error-rate": "error-rate";
+            latency: "latency";
+        }>;
+        threshold: z.ZodNumber;
+        warningThreshold: z.ZodOptional<z.ZodNumber>;
+        window: z.ZodOptional<z.ZodEnum<{
+            "5m": "5m";
+            "15m": "15m";
+            "1h": "1h";
+            "6h": "6h";
+            "24h": "24h";
+            "7d": "7d";
+            "30d": "30d";
+        }>>;
+        filters: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+        mechanisms: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"email">;
+            target: z.ZodEmail;
+        }, z.core.$strip>, z.ZodObject<{
+            kind: z.ZodLiteral<"webhook">;
+            target: z.ZodString;
+            secretRef: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>, z.ZodObject<{
+            kind: z.ZodLiteral<"pagerduty">;
+            target: z.ZodString;
+        }, z.core.$strip>, z.ZodObject<{
+            kind: z.ZodLiteral<"slack">;
+            target: z.ZodString;
+        }, z.core.$strip>], "kind">>;
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        description: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>>;
+}, z.core.$strip>;
+export type InfraAlertsDescriptor = z.infer<typeof AlertsBaseSchema>;
+export type InfraAlertsDescriptorInput = z.input<typeof AlertsBaseSchema>;
+/**
+ * Implementation contract every provider implements. Operations are
+ * idempotent: `applyPolicies` reconciles the live policy set to the
+ * desired set without trampling unrelated policies on the provider.
+ */
+export interface AlertsImplementation {
+    /** List policies currently configured on the provider. */
+    listPolicies(): Promise<Array<AlertPolicy & {
+        providerId: string;
+    }>>;
+    /** Create a single policy. Returns the provider-assigned id. */
+    createPolicy(policy: AlertPolicy): Promise<{
+        providerId: string;
+    }>;
+    /** Delete a policy by provider id. */
+    deletePolicy(providerId: string): Promise<void>;
+    /**
+     * Diff desired (descriptor) against live; return the set of policies
+     * that need create/update/delete. Empty arrays = in sync.
+     */
+    diff(desired: AlertPolicy[]): Promise<{
+        create: AlertPolicy[];
+        update: Array<{
+            providerId: string;
+            policy: AlertPolicy;
+        }>;
+        delete: Array<{
+            providerId: string;
+            name: string;
+        }>;
+    }>;
+}
+export declare const alertsKind: import("@vibesdotdev/runtime").RuntimeKindDescriptorRecord<AlertsImplementation>;
+export type InfraAlertsKind = InfraAlertsDescriptor;
+export type InfraAlertsKindInput = InfraAlertsDescriptorInput;
+export { AlertsBaseSchema as InfraAlertsDescriptorSchema, AlertPolicySchema, AlertMechanismSchema, AlertTypeSchema, AlertWindowSchema };
+//# sourceMappingURL=alerts.kind.d.ts.map

package/dist/kinds/alerts.kind.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"alerts.kind.d.ts","sourceRoot":"","sources":["../../src/kinds/alerts.kind.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAK5B;;;GAGG;AACH,QAAA,MAAM,oBAAoB;;;;;;;;;;;;;2BAuBxB,CAAC;AAEH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE;;;GAGG;AACH,QAAA,MAAM,eAAe;;;;;;EAWnB,CAAC;AAEH,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAExD,QAAA,MAAM,iBAAiB;;;;;;;;EAAwD,CAAC;AAEhF,QAAA,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA0BrB,CAAC;AAEH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D,QAAA,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAcpB,CAAC;AAEH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AACrE,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1E;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACpC,0DAA0D;IAC1D,YAAY,IAAI,OAAO,CAAC,KAAK,CAAC,WAAW,GAAG;QAAE,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC,CAAC;IACrE,gEAAgE;IAChE,YAAY,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC;QAAE,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACnE,sCAAsC;IACtC,YAAY,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChD;;;OAGG;IACH,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC;QACrC,MAAM,EAAE,WAAW,EAAE,CAAC;QACtB,MAAM,EAAE,KAAK,CAAC;YAAE,UAAU,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,WAAW,CAAA;SAAE,CAAC,CAAC;QAC3D,MAAM,EAAE,KAAK,CAAC;YAAE,UAAU,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;KACpD,CAAC,CAAC;CACH;AAED,eAAO,MAAM,UAAU,kFAKrB,CAAC;AAEH,MAAM,MAAM,eAAe,GAAG,qBAAqB,CAAC;AACpD,MAAM,MAAM,oBAAoB,GAAG,0BAA0B,CAAC;AAE9D,OAAO,EACN,gBAAgB,IAAI,2BAA2B,EAC/C,iBAAiB,EACjB,oBAAoB,EACpB,eAAe,EACf,iBAAiB,EACjB,CAAC"}