@vibesdotdev/infra-core 0.0.2 → 1.0.0-rc.11

package/dist/kinds/compute-source.kind.d.ts

@@ -0,0 +1,155 @@
+/**
+ * Kind: infra/compute-source
+ *
+ * One registered source we can lease a machine, container or sandbox from.
+ *
+ * Forge CI and build jobs should not own compute. They state what a job needs
+ * and the fleet leases a host; every place a host can come from — a Cloudflare
+ * sandbox, a DigitalOcean droplet, an AWS instance, or a machine the user
+ * brought themselves — is one descriptor of this kind. That is what keeps
+ * "bring your own provider" the same code path as ours rather than a second
+ * one, and it is why selection can stay a single policy instead of a branch
+ * per caller.
+ *
+ * Every field states what the source can ACTUALLY provide, mirroring
+ * `ci/executor`. A descriptor that overstates itself is how a
+ * `runsOn: windows` job quietly runs on linux, so selection filters on these
+ * and refuses rather than substitutes.
+ *
+ * Not to be confused with `infra/inventory`, which is read-only enumeration of
+ * existing provider resources. This kind is about where new compute comes from.
+ */
+import * as z from 'zod/v4';
+import type { RuntimeDescriptor } from '@vibesdotdev/kernel/schemas/descriptor';
+import type { KindContext } from '@vibesdotdev/kernel/schemas/kind';
+export declare const ComputeSourceOsSchema: z.ZodEnum<{
+    linux: "linux";
+    macos: "macos";
+    windows: "windows";
+}>;
+export type ComputeSourceOs = z.infer<typeof ComputeSourceOsSchema>;
+export declare const ComputeSourceArchSchema: z.ZodEnum<{
+    x64: "x64";
+    arm64: "arm64";
+}>;
+export type ComputeSourceArch = z.infer<typeof ComputeSourceArchSchema>;
+/**
+ * Who owns the hardware, which decides who pays for it.
+ *
+ * `vibes` — our inventory, billed to the requesting account in credits.
+ * `byo`   — the user's own provider. We facilitate; we do not bill compute.
+ *           Mirrors the `hardware: 'consumer'` path the billing rating engine
+ *           already short-circuits to zero credits.
+ */
+export declare const ComputeSourceOwnerScopeSchema: z.ZodEnum<{
+    vibes: "vibes";
+    byo: "byo";
+}>;
+export type ComputeSourceOwnerScope = z.infer<typeof ComputeSourceOwnerScopeSchema>;
+export declare const ComputeSourceCapabilitiesSchema: z.ZodObject<{
+    os: z.ZodArray<z.ZodEnum<{
+        linux: "linux";
+        macos: "macos";
+        windows: "windows";
+    }>>;
+    arch: z.ZodArray<z.ZodEnum<{
+        x64: "x64";
+        arm64: "arm64";
+    }>>;
+    labels: z.ZodDefault<z.ZodArray<z.ZodString>>;
+}, z.core.$strip>;
+export type ComputeSourceCapabilities = z.infer<typeof ComputeSourceCapabilitiesSchema>;
+export declare const ComputeSourceDescriptorSchema: z.ZodObject<{
+    id: z.ZodString;
+    name: z.ZodOptional<z.ZodString>;
+    description: z.ZodOptional<z.ZodString>;
+    tags: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    hardware: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    enabled: z.ZodOptional<z.ZodBoolean>;
+    priority: z.ZodOptional<z.ZodNumber>;
+    capabilityId: z.ZodOptional<z.ZodString>;
+    requiredContext: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    optionalContext: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    config: z.ZodOptional<z.ZodUnknown>;
+    retention: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+        maxAgeDays: z.ZodOptional<z.ZodNumber>;
+        maxEntries: z.ZodOptional<z.ZodNumber>;
+        maxBytes: z.ZodOptional<z.ZodNumber>;
+        cascadeFrom: z.ZodOptional<z.ZodString>;
+        ageField: z.ZodOptional<z.ZodString>;
+        reason: z.ZodString;
+        enforcedBy: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>]>>;
+    kind: z.ZodLiteral<"infra/compute-source">;
+    provides: z.ZodObject<{
+        os: z.ZodArray<z.ZodEnum<{
+            linux: "linux";
+            macos: "macos";
+            windows: "windows";
+        }>>;
+        arch: z.ZodArray<z.ZodEnum<{
+            x64: "x64";
+            arm64: "arm64";
+        }>>;
+        labels: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    }, z.core.$strip>;
+    ephemeral: z.ZodBoolean;
+    cost: z.ZodObject<{
+        usdPerSecond: z.ZodNumber;
+        usdPerSecondCpuActive: z.ZodOptional<z.ZodNumber>;
+        initialUsd: z.ZodOptional<z.ZodNumber>;
+        minimumUsd: z.ZodOptional<z.ZodNumber>;
+        source: z.ZodEnum<{
+            published: "published";
+            measured: "measured";
+            heuristic: "heuristic";
+            manual: "manual";
+        }>;
+        confidence: z.ZodEnum<{
+            high: "high";
+            medium: "medium";
+            low: "low";
+        }>;
+        effectiveAt: z.ZodString;
+        note: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+    ownerScope: z.ZodDefault<z.ZodEnum<{
+        vibes: "vibes";
+        byo: "byo";
+    }>>;
+    owner: z.ZodOptional<z.ZodObject<{
+        type: z.ZodString;
+        id: z.ZodString;
+    }, z.core.$strip>>;
+    warmPool: z.ZodDefault<z.ZodBoolean>;
+    maxLeaseSeconds: z.ZodNumber;
+    supportsCancellation: z.ZodDefault<z.ZodBoolean>;
+    sandbox: z.ZodOptional<z.ZodObject<{
+        adapter: z.ZodString;
+        size: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type ComputeSourceDescriptor = z.infer<typeof ComputeSourceDescriptorSchema>;
+/** What a resolved `infra/compute-source` exposes: its descriptor as the kind's schema reads it. */
+export interface ComputeSourceImplementation {
+    readonly config: ComputeSourceDescriptor;
+}
+declare class DefaultComputeSourceImplementation implements ComputeSourceImplementation {
+    readonly descriptor: RuntimeDescriptor;
+    readonly context: KindContext;
+    /** The descriptor as this kind's schema reads it. */
+    readonly config: ComputeSourceDescriptor;
+    constructor(descriptor: RuntimeDescriptor, context: KindContext);
+}
+export declare const computeSourceKind: import("@vibesdotdev/kernel").RuntimeKindDescriptorRecord<DefaultComputeSourceImplementation>;
+declare global {
+    /** A bare `runtime.query('infra/compute-source')` is typed by the kind's own contract. */
+    interface VibesKindTypeMap {
+        'infra/compute-source': {
+            descriptor: ComputeSourceDescriptor;
+            impl: ComputeSourceImplementation;
+        };
+    }
+}
+export {};
+//# sourceMappingURL=compute-source.kind.d.ts.map

package/dist/kinds/compute-source.kind.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"compute-source.kind.d.ts","sourceRoot":"","sources":["../../src/kinds/compute-source.kind.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAG5B,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wCAAwC,CAAC;AAChF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AAQpE,eAAO,MAAM,qBAAqB;;;;EAAwC,CAAC;AAC3E,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE,eAAO,MAAM,uBAAuB;;;EAA2B,CAAC;AAChE,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE;;;;;;;GAOG;AACH,eAAO,MAAM,6BAA6B;;;EAA2B,CAAC;AACtE,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF,eAAO,MAAM,+BAA+B;;;;;;;;;;;iBAK1C,CAAC;AACH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AAExF,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAgGxC,CAAC;AAEH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF,oGAAoG;AACpG,MAAM,WAAW,2BAA2B;IAC3C,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAC;CACzC;AAED,cAAM,kCAAmC,YAAW,2BAA2B;aAI7D,UAAU,EAAE,iBAAiB;aAC7B,OAAO,EAAE,WAAW;IAJrC,qDAAqD;IACrD,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAC;gBAExB,UAAU,EAAE,iBAAiB,EAC7B,OAAO,EAAE,WAAW;CAKrC;AAED,eAAO,MAAM,iBAAiB,+FAQ5B,CAAC;AAEH,OAAO,CAAC,MAAM,CAAC;IACd,0FAA0F;IAC1F,UAAU,gBAAgB;QACzB,sBAAsB,EAAE;YAAE,UAAU,EAAE,uBAAuB,CAAC;YAAC,IAAI,EAAE,2BAA2B,CAAA;SAAE,CAAC;KACnG;CACD"}

package/dist/kinds/compute-source.kind.js

@@ -0,0 +1,158 @@
+/**
+ * Kind: infra/compute-source
+ *
+ * One registered source we can lease a machine, container or sandbox from.
+ *
+ * Forge CI and build jobs should not own compute. They state what a job needs
+ * and the fleet leases a host; every place a host can come from — a Cloudflare
+ * sandbox, a DigitalOcean droplet, an AWS instance, or a machine the user
+ * brought themselves — is one descriptor of this kind. That is what keeps
+ * "bring your own provider" the same code path as ours rather than a second
+ * one, and it is why selection can stay a single policy instead of a branch
+ * per caller.
+ *
+ * Every field states what the source can ACTUALLY provide, mirroring
+ * `ci/executor`. A descriptor that overstates itself is how a
+ * `runsOn: windows` job quietly runs on linux, so selection filters on these
+ * and refuses rather than substitutes.
+ *
+ * Not to be confused with `infra/inventory`, which is read-only enumeration of
+ * existing provider resources. This kind is about where new compute comes from.
+ */
+import * as z from 'zod/v4';
+import { createRuntimeKind } from '@vibesdotdev/kernel/factory/kind';
+import { RuntimeDescriptorSchema } from '@vibesdotdev/kernel/schemas/descriptor';
+import { readKindDescriptor } from "./read-descriptor.js";
+import { costBasisConfidenceSchema, costBasisSourceSchema } from '@vibesdotdev/shared/billing/cost-basis';
+import { INFRA_DISCOVERY_PATTERNS } from "./discovery.js";
+export const ComputeSourceOsSchema = z.enum(['linux', 'macos', 'windows']);
+export const ComputeSourceArchSchema = z.enum(['x64', 'arm64']);
+/**
+ * Who owns the hardware, which decides who pays for it.
+ *
+ * `vibes` — our inventory, billed to the requesting account in credits.
+ * `byo`   — the user's own provider. We facilitate; we do not bill compute.
+ *           Mirrors the `hardware: 'consumer'` path the billing rating engine
+ *           already short-circuits to zero credits.
+ */
+export const ComputeSourceOwnerScopeSchema = z.enum(['vibes', 'byo']);
+export const ComputeSourceCapabilitiesSchema = z.object({
+    os: z.array(ComputeSourceOsSchema).min(1),
+    arch: z.array(ComputeSourceArchSchema).min(1),
+    /** Extra capabilities a job may demand, e.g. `gpu`, `docker`, `nested-virt`. */
+    labels: z.array(z.string().min(1)).default([])
+});
+export const ComputeSourceDescriptorSchema = RuntimeDescriptorSchema.extend({
+    kind: z.literal('infra/compute-source'),
+    /** What this source can actually provide. Selection filters on exactly this. */
+    provides: ComputeSourceCapabilitiesSchema,
+    /**
+     * Whether a lease is destroyed after a single job.
+     *
+     * Deliberately has NO default. Untrusted refs (fork PRs) may only land on
+     * ephemeral sources, so this field decides whether a source can run code
+     * nobody has reviewed. A default would silently answer that question for a
+     * descriptor author who never considered it; requiring it makes the author
+     * say so. Guessing either way is wrong — `true` wrongly admits a persistent
+     * host, `false` wrongly excludes a genuinely disposable one.
+     */
+    ephemeral: z.boolean(),
+    /**
+     * What this source costs us, quoted from the provider's own price list
+     * rather than assigned by hand.
+     *
+     * An earlier draft ranked on an integer `costTier` somebody picked. That is
+     * a guess dressed as a fact, and it drifts the moment a provider changes
+     * price. A real rate ranks correctly on its own and is the same number the
+     * rating engine bills from, so selection and the invoice can never disagree
+     * about which source was cheaper.
+     *
+     * The field set is dictated by how the two providers actually bill, learned
+     * by reading their price lists rather than assumed:
+     *
+     *   * `usdPerSecond` is charged for every second of the lease. On a
+     *     Cloudflare container that is the PROVISIONED memory and disk, which
+     *     bill whether or not the job is doing anything.
+     *   * `usdPerSecondCpuActive` is charged ON TOP, but only while the vCPUs
+     *     are actually busy. Cloudflare priced CPU on active usage in November
+     *     2025; before that it was provisioned like memory. A source that bills
+     *     CPU as part of a flat rate — a DigitalOcean droplet — omits this.
+     *   * `initialUsd` is a genuine one-time additive charge for getting the
+     *     machine at all. Absent means there is none, not that nobody filled it
+     *     in.
+     *   * `minimumUsd` is a FLOOR on the whole lease, not a fee added to it.
+     *     DigitalOcean bills per second but never less than 60 seconds or $0.01,
+     *     whichever is higher. Modelling that as `initialUsd` would have
+     *     overcharged every lease by the floor, because setup is additive and a
+     *     minimum is not. The distinction is the reason both fields exist.
+     *
+     * A bring-your-own source sets `usdPerSecond: 0`. It costs us nothing
+     * because it is not our hardware.
+     */
+    cost: z.object({
+        usdPerSecond: z.number().nonnegative(),
+        usdPerSecondCpuActive: z.number().nonnegative().optional(),
+        initialUsd: z.number().nonnegative().optional(),
+        minimumUsd: z.number().nonnegative().optional(),
+        /**
+         * Where this quote came from and how much to trust it. Reuses the
+         * billing vocabulary the AI model descriptors already quote prices in,
+         * so "published" means the same thing about a droplet as about a token.
+         */
+        source: costBasisSourceSchema,
+        confidence: costBasisConfidenceSchema,
+        /** ISO-8601 instant this quote was read from the provider. */
+        effectiveAt: z.string().min(1),
+        /** How the number was derived, for whoever has to re-check it later. */
+        note: z.string().min(1).optional()
+    }),
+    ownerScope: ComputeSourceOwnerScopeSchema.default('vibes'),
+    /**
+     * Billing subject for a `byo` source. Required when `ownerScope` is `byo`:
+     * a bring-your-own machine must only be selectable by the scope that
+     * brought it, never by another tenant's run.
+     */
+    owner: z
+        .object({ type: z.string().min(1), id: z.string().min(1) })
+        .optional(),
+    /** Whether this source can hold idle capacity, making a lease warm. */
+    warmPool: z.boolean().default(false),
+    /** Longest single lease this source will grant, in seconds. */
+    maxLeaseSeconds: z.number().int().positive(),
+    /** Whether an in-flight lease can be torn down. */
+    supportsCancellation: z.boolean().default(false),
+    /**
+     * The `infra/sandbox` adapter (and, when the source prices one size, that
+     * size) a provisioned host of this source runs on. A provisioned host is
+     * matched to the source that prices it by querying this field, never by an
+     * id table. Absent on a source no sandbox adapter provisions (a Cloudflare
+     * CI container, a bring-your-own machine).
+     */
+    sandbox: z
+        .object({
+        adapter: z.string().min(1),
+        size: z.string().min(1).optional()
+    })
+        .optional()
+}).refine((d) => d.ownerScope !== 'byo' || d.owner !== undefined, {
+    message: "a 'byo' compute source must declare its owner, otherwise it could be selected by another tenant's run",
+    path: ['owner']
+});
+class DefaultComputeSourceImplementation {
+    descriptor;
+    context;
+    /** The descriptor as this kind's schema reads it. */
+    config;
+    constructor(descriptor, context) {
+        this.descriptor = descriptor;
+        this.context = context;
+        this.config = readKindDescriptor(ComputeSourceDescriptorSchema, descriptor);
+    }
+}
+export const computeSourceKind = createRuntimeKind({
+    id: 'infra/compute-source',
+    descriptorSchema: ComputeSourceDescriptorSchema,
+    defaultImplementation: DefaultComputeSourceImplementation,
+    discoveryPatterns: INFRA_DISCOVERY_PATTERNS
+});
+//# sourceMappingURL=compute-source.kind.js.map

package/dist/kinds/compute-source.kind.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compute-source.kind.js","sourceRoot":"","sources":["../../src/kinds/compute-source.kind.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AAGjF,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EACN,yBAAyB,EACzB,qBAAqB,EACrB,MAAM,wCAAwC,CAAC;AAChD,OAAO,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAE1D,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;AAG3E,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;AAGhE;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;AAGtE,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC,MAAM,CAAC;IACvD,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACzC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7C,gFAAgF;IAChF,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CAC9C,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,6BAA6B,GAAG,uBAAuB,CAAC,MAAM,CAAC;IAC3E,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC;IACvC,gFAAgF;IAChF,QAAQ,EAAE,+BAA+B;IACzC;;;;;;;;;OASG;IACH,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;IACtB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA+BG;IACH,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;QACd,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE;QACtC,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;QAC1D,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;QAC/C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;QAC/C;;;;WAIG;QACH,MAAM,EAAE,qBAAqB;QAC7B,UAAU,EAAE,yBAAyB;QACrC,8DAA8D;QAC9D,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9B,wEAAwE;QACxE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;KAClC,CAAC;IACF,UAAU,EAAE,6BAA6B,CAAC,OAAO,CAAC,OAAO,CAAC;IAC1D;;;;OAIG;IACH,KAAK,EAAE,CAAC;SACN,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1D,QAAQ,EAAE;IACZ,uEAAuE;IACvE,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACpC,+DAA+D;IAC/D,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC5C,mDAAmD;IACnD,oBAAoB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAChD;;;;;;OAMG;IACH,OAAO,EAAE,CAAC;SACR,MAAM,CAAC;QACP,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;KAClC,CAAC;SACD,QAAQ,EAAE;CACZ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,KAAK,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,EAAE;IACjE,OAAO,EACN,uGAAuG;IACxG,IAAI,EAAE,CAAC,OAAO,CAAC;CACf,CAAC,CAAC;AASH,MAAM,kCAAkC;IAItB;IACA;IAJjB,qDAAqD;IAC5C,MAAM,CAA0B;IACzC,YACiB,UAA6B,EAC7B,OAAoB;QADpB,eAAU,GAAV,UAAU,CAAmB;QAC7B,YAAO,GAAP,OAAO,CAAa;QAEpC,IAAI,CAAC,MAAM,GAAG,kBAAkB,CAAC,6BAA6B,EAAE,UAAU,CAAC,CAAC;IAC7E,CAAC;CAED;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAG,iBAAiB,CAGhD;IACD,EAAE,EAAE,sBAAsB;IAC1B,gBAAgB,EAAE,6BAA6B;IAC/C,qBAAqB,EAAE,kCAAkC;IACzD,iBAAiB,EAAE,wBAAwB;CAC3C,CAAC,CAAC"}

package/dist/kinds/container-registry.kind.d.ts

@@ -0,0 +1,62 @@
+/**
+ * Kind: infra/container-registry
+ *
+ * Provider-neutral container image registry descriptor.
+ */
+import * as z from 'zod/v4';
+import type { RuntimeDescriptor } from '@vibesdotdev/kernel/schemas/descriptor';
+import type { KindContext } from '@vibesdotdev/kernel/schemas/kind';
+/**
+ * Adapter-specific configuration: the adapter id plus its own fields. Each
+ * adapter package defines and parses its own config schema (DigitalOcean's
+ * container registry config lives in
+ * `@vibesdotdev/integrations-digitalocean`); this kind names no provider,
+ * so a config for any adapter — including one contributed by a user
+ * plugin — parses here, and the adapter validates its own grammar.
+ */
+export declare const ContainerRegistryConfigSchema: z.ZodObject<{
+    adapter: z.ZodString;
+}, z.core.$loose>;
+export type ContainerRegistryConfig = z.infer<typeof ContainerRegistryConfigSchema>;
+export declare const ContainerRegistryDescriptorSchema: z.ZodObject<{
+    id: z.ZodString;
+    name: z.ZodOptional<z.ZodString>;
+    description: z.ZodOptional<z.ZodString>;
+    tags: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    hardware: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    enabled: z.ZodOptional<z.ZodBoolean>;
+    priority: z.ZodOptional<z.ZodNumber>;
+    capabilityId: z.ZodOptional<z.ZodString>;
+    requiredContext: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    optionalContext: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    retention: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+        maxAgeDays: z.ZodOptional<z.ZodNumber>;
+        maxEntries: z.ZodOptional<z.ZodNumber>;
+        maxBytes: z.ZodOptional<z.ZodNumber>;
+        cascadeFrom: z.ZodOptional<z.ZodString>;
+        ageField: z.ZodOptional<z.ZodString>;
+        reason: z.ZodString;
+        enforcedBy: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>]>>;
+    kind: z.ZodLiteral<"infra/container-registry">;
+    region: z.ZodOptional<z.ZodString>;
+    tier: z.ZodOptional<z.ZodEnum<{
+        starter: "starter";
+        basic: "basic";
+        professional: "professional";
+    }>>;
+    config: z.ZodOptional<z.ZodObject<{
+        adapter: z.ZodString;
+    }, z.core.$loose>>;
+}, z.core.$strip>;
+export type ContainerRegistryDescriptor = z.infer<typeof ContainerRegistryDescriptorSchema>;
+declare class DefaultContainerRegistryImplementation {
+    readonly descriptor: RuntimeDescriptor;
+    readonly context: KindContext;
+    /** The descriptor as this kind's schema reads it. */
+    readonly config: ContainerRegistryDescriptor;
+    constructor(descriptor: RuntimeDescriptor, context: KindContext);
+}
+export declare const containerRegistryKind: import("@vibesdotdev/kernel").RuntimeKindDescriptorRecord<DefaultContainerRegistryImplementation>;
+export {};
+//# sourceMappingURL=container-registry.kind.d.ts.map

package/dist/kinds/container-registry.kind.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"container-registry.kind.d.ts","sourceRoot":"","sources":["../../src/kinds/container-registry.kind.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAG5B,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wCAAwC,CAAC;AAChF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AAUpE;;;;;;;GAOG;AACH,eAAO,MAAM,6BAA6B;;iBAExC,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF,eAAO,MAAM,iCAAiC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAE5C,CAAC;AAEH,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iCAAiC,CAAC,CAAC;AAE5F,cAAM,sCAAsC;aAI1B,UAAU,EAAE,iBAAiB;aAC7B,OAAO,EAAE,WAAW;IAJrC,qDAAqD;IACrD,QAAQ,CAAC,MAAM,EAAE,2BAA2B,CAAC;gBAE5B,UAAU,EAAE,iBAAiB,EAC7B,OAAO,EAAE,WAAW;CAKrC;AAED,eAAO,MAAM,qBAAqB,mGAQhC,CAAC"}

package/dist/kinds/container-registry.kind.js

@@ -0,0 +1,47 @@
+/**
+ * Kind: infra/container-registry
+ *
+ * Provider-neutral container image registry descriptor.
+ */
+import * as z from 'zod/v4';
+import { createRuntimeKind } from '@vibesdotdev/kernel/factory/kind';
+import { RuntimeDescriptorSchema } from '@vibesdotdev/kernel/schemas/descriptor';
+import { readKindDescriptor } from "./read-descriptor.js";
+import { INFRA_DISCOVERY_PATTERNS } from "./discovery.js";
+const ContainerRegistryBaseSchema = RuntimeDescriptorSchema.extend({
+    kind: z.literal('infra/container-registry'),
+    region: z.string().min(1).optional(),
+    tier: z.enum(['starter', 'basic', 'professional']).optional()
+});
+/**
+ * Adapter-specific configuration: the adapter id plus its own fields. Each
+ * adapter package defines and parses its own config schema (DigitalOcean's
+ * container registry config lives in
+ * `@vibesdotdev/integrations-digitalocean`); this kind names no provider,
+ * so a config for any adapter — including one contributed by a user
+ * plugin — parses here, and the adapter validates its own grammar.
+ */
+export const ContainerRegistryConfigSchema = z.looseObject({
+    adapter: z.string().min(1)
+});
+export const ContainerRegistryDescriptorSchema = ContainerRegistryBaseSchema.extend({
+    config: ContainerRegistryConfigSchema.optional()
+});
+class DefaultContainerRegistryImplementation {
+    descriptor;
+    context;
+    /** The descriptor as this kind's schema reads it. */
+    config;
+    constructor(descriptor, context) {
+        this.descriptor = descriptor;
+        this.context = context;
+        this.config = readKindDescriptor(ContainerRegistryDescriptorSchema, descriptor);
+    }
+}
+export const containerRegistryKind = createRuntimeKind({
+    id: 'infra/container-registry',
+    descriptorSchema: ContainerRegistryDescriptorSchema,
+    defaultImplementation: DefaultContainerRegistryImplementation,
+    discoveryPatterns: INFRA_DISCOVERY_PATTERNS
+});
+//# sourceMappingURL=container-registry.kind.js.map

package/dist/kinds/container-registry.kind.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"container-registry.kind.js","sourceRoot":"","sources":["../../src/kinds/container-registry.kind.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AAGjF,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAE1D,MAAM,2BAA2B,GAAG,uBAAuB,CAAC,MAAM,CAAC;IAClE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC;IAC3C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACpC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC7D,CAAC,CAAC;AAEH;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,WAAW,CAAC;IAC1D,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC1B,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,iCAAiC,GAAG,2BAA2B,CAAC,MAAM,CAAC;IACnF,MAAM,EAAE,6BAA6B,CAAC,QAAQ,EAAE;CAChD,CAAC,CAAC;AAIH,MAAM,sCAAsC;IAI1B;IACA;IAJjB,qDAAqD;IAC5C,MAAM,CAA8B;IAC7C,YACiB,UAA6B,EAC7B,OAAoB;QADpB,eAAU,GAAV,UAAU,CAAmB;QAC7B,YAAO,GAAP,OAAO,CAAa;QAEpC,IAAI,CAAC,MAAM,GAAG,kBAAkB,CAAC,iCAAiC,EAAE,UAAU,CAAC,CAAC;IACjF,CAAC;CAED;AAED,MAAM,CAAC,MAAM,qBAAqB,GAAG,iBAAiB,CAGpD;IACD,EAAE,EAAE,0BAA0B;IAC9B,gBAAgB,EAAE,iCAAiC;IACnD,qBAAqB,EAAE,sCAAsC;IAC7D,iBAAiB,EAAE,wBAAwB;CAC3C,CAAC,CAAC"}

package/dist/kinds/database-migrator.kind.d.ts

@@ -0,0 +1,6 @@
+import { type DatabaseMigratorImplementation } from '../schemas/database-migration.ts';
+export declare const DATABASE_MIGRATOR_KIND = "infra/database-migrator";
+/** Schema-only: every engine registers its own implementation. */
+/** Engines are constructed with the resolving runtime itself: they reach its secrets, execution and filesystem. */
+export declare const databaseMigratorKind: import("@vibesdotdev/kernel").RuntimeKindDescriptorRecord<DatabaseMigratorImplementation>;
+//# sourceMappingURL=database-migrator.kind.d.ts.map

package/dist/kinds/database-migrator.kind.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"database-migrator.kind.d.ts","sourceRoot":"","sources":["../../src/kinds/database-migrator.kind.ts"],"names":[],"mappings":"AAoBA,OAAO,EAGN,KAAK,8BAA8B,EACnC,MAAM,kCAAkC,CAAC;AAE1C,eAAO,MAAM,sBAAsB,4BAA4B,CAAC;AAEhE,kEAAkE;AAClE,mHAAmH;AACnH,eAAO,MAAM,oBAAoB,2FAI/B,CAAC"}

package/dist/kinds/database-migrator.kind.js

@@ -0,0 +1,28 @@
+/**
+ * Kind: infra/database-migrator
+ *
+ * Applies an app's schema migrations to the databases it declares. One
+ * implementation per database engine and provider (Cloudflare D1 through
+ * wrangler, Postgres, Turso, ...) registers against this kind; the deploy
+ * driver resolves every registered migrator at call time and asks each which
+ * of the app's databases it serves. Nothing here names a provider.
+ *
+ * The migration files come from a migration format (`storage/migration-format`,
+ * e.g. a drizzle journal), named by id on each target. The driver owns the
+ * ledger semantics every engine shares: pending = journal minus ledger, apply
+ * one file then record it, never record a failure, adopt exact receipts from an
+ * older ledger by intersection with the current journal. The engine owns how
+ * statements run and how its ledger is spelled. Contracts: `../schemas/database-migration.ts`.
+ */
+import { createRuntimeKind } from '@vibesdotdev/kernel/factory/kind';
+import { INFRA_DISCOVERY_PATTERNS } from "./discovery.js";
+import { DatabaseMigratorDescriptorSchema } from "../schemas/database-migration.js";
+export const DATABASE_MIGRATOR_KIND = 'infra/database-migrator';
+/** Schema-only: every engine registers its own implementation. */
+/** Engines are constructed with the resolving runtime itself: they reach its secrets, execution and filesystem. */
+export const databaseMigratorKind = createRuntimeKind({
+    id: DATABASE_MIGRATOR_KIND,
+    descriptorSchema: DatabaseMigratorDescriptorSchema,
+    discoveryPatterns: INFRA_DISCOVERY_PATTERNS
+});
+//# sourceMappingURL=database-migrator.kind.js.map

package/dist/kinds/database-migrator.kind.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"database-migrator.kind.js","sourceRoot":"","sources":["../../src/kinds/database-migrator.kind.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAGrE,OAAO,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAC1D,OAAO,EACN,gCAAgC,EAGhC,MAAM,kCAAkC,CAAC;AAE1C,MAAM,CAAC,MAAM,sBAAsB,GAAG,yBAAyB,CAAC;AAEhE,kEAAkE;AAClE,mHAAmH;AACnH,MAAM,CAAC,MAAM,oBAAoB,GAAG,iBAAiB,CAAwF;IAC5I,EAAE,EAAE,sBAAsB;IAC1B,gBAAgB,EAAE,gCAAgC;IAClD,iBAAiB,EAAE,wBAAwB;CAC3C,CAAC,CAAC"}