@vibesdotdev/infra-core 0.0.2 → 1.0.0-rc.5

package/dist/kinds/billing.kind.js

@@ -0,0 +1,48 @@
+/** Provider-neutral read-only account economics. */
+import * as z from 'zod/v4';
+import { createRuntimeKind } from '@vibesdotdev/kernel/factory/kind';
+import { RuntimeDescriptorSchema } from '@vibesdotdev/kernel/schemas/descriptor';
+import { readKindDescriptor } from "./read-descriptor.js";
+import { INFRA_DISCOVERY_PATTERNS } from "./discovery.js";
+export const BillingMoneySchema = z.object({
+    currency: z.string().regex(/^[A-Z]{3}$/, 'currency must be an ISO 4217-style code'),
+    amount: z.string().regex(/^-?\d+(?:\.\d+)?$/, 'amount must be a decimal string')
+});
+export const BillingSummarySchema = z.object({
+    provider: z.string().min(1),
+    collectedAt: z.iso.datetime({ offset: true }),
+    accountBalance: BillingMoneySchema.optional(),
+    monthToDateUsage: BillingMoneySchema.optional(),
+    monthToDateBalance: BillingMoneySchema.optional(),
+    grossProductCharges: BillingMoneySchema.optional(),
+    invoiceCreditsAndAdjustments: BillingMoneySchema.optional(),
+    sponsorshipCredits: z.object({
+        status: z.enum(['available', 'unknown', 'unsupported']),
+        remaining: BillingMoneySchema.optional(),
+        expiresAt: z.iso.datetime({ offset: true }).optional(),
+        reason: z.string().optional()
+    }),
+    errors: z.array(z.object({ source: z.string(), message: z.string() }))
+});
+export const BillingDescriptorSchema = RuntimeDescriptorSchema.extend({
+    kind: z.literal('infra/billing'),
+    provider: z.string().min(1).optional()
+});
+class DefaultBillingImplementation {
+    descriptor;
+    context;
+    /** The descriptor as this kind's schema reads it. */
+    config;
+    constructor(descriptor, context) {
+        this.descriptor = descriptor;
+        this.context = context;
+        this.config = readKindDescriptor(BillingDescriptorSchema, descriptor);
+    }
+}
+export const billingKind = createRuntimeKind({
+    id: 'infra/billing',
+    descriptorSchema: BillingDescriptorSchema,
+    defaultImplementation: DefaultBillingImplementation,
+    discoveryPatterns: INFRA_DISCOVERY_PATTERNS
+});
+//# sourceMappingURL=billing.kind.js.map

package/dist/kinds/billing.kind.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"billing.kind.js","sourceRoot":"","sources":["../../src/kinds/billing.kind.ts"],"names":[],"mappings":"AAAA,oDAAoD;AACpD,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AAGjF,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAC1D,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,YAAY,EAAE,yCAAyC,CAAC;IACnF,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,mBAAmB,EAAE,iCAAiC,CAAC;CAChF,CAAC,CAAC;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,WAAW,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC7C,cAAc,EAAE,kBAAkB,CAAC,QAAQ,EAAE;IAC7C,gBAAgB,EAAE,kBAAkB,CAAC,QAAQ,EAAE;IAC/C,kBAAkB,EAAE,kBAAkB,CAAC,QAAQ,EAAE;IACjD,mBAAmB,EAAE,kBAAkB,CAAC,QAAQ,EAAE;IAClD,4BAA4B,EAAE,kBAAkB,CAAC,QAAQ,EAAE;IAC3D,kBAAkB,EAAE,CAAC,CAAC,MAAM,CAAC;QAC5B,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;QACvD,SAAS,EAAE,kBAAkB,CAAC,QAAQ,EAAE;QACxC,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE;QACtD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC7B,CAAC;IACF,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;CACtE,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,uBAAuB,GAAG,uBAAuB,CAAC,MAAM,CAAC;IACrE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC;IAChC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACtC,CAAC,CAAC;AAKH,MAAM,4BAA4B;IAIhB;IACA;IAJjB,qDAAqD;IAC5C,MAAM,CAAoB;IACnC,YACiB,UAA6B,EAC7B,OAAoB;QADpB,eAAU,GAAV,UAAU,CAAmB;QAC7B,YAAO,GAAP,OAAO,CAAa;QAEpC,IAAI,CAAC,MAAM,GAAG,kBAAkB,CAAC,uBAAuB,EAAE,UAAU,CAAC,CAAC;IACvE,CAAC;CACD;AACD,MAAM,CAAC,MAAM,WAAW,GAAG,iBAAiB,CAAkD;IAC7F,EAAE,EAAE,eAAe;IACnB,gBAAgB,EAAE,uBAAuB;IACzC,qBAAqB,EAAE,4BAA4B;IACnD,iBAAiB,EAAE,wBAAwB;CAC3C,CAAC,CAAC"}

package/dist/kinds/build-job.kind.d.ts

@@ -0,0 +1,381 @@
+/**
+ * Kind: infra/build-job
+ *
+ * Provider-neutral descriptor for reproducible release builds. Adapter
+ * packages map this shape onto DOKS Kubernetes Jobs, local Docker runs,
+ * Windows VM runners, or another execution substrate.
+ */
+import * as z from 'zod/v4';
+import type { RuntimeDescriptor } from '@vibesdotdev/kernel/schemas/descriptor';
+import type { KindContext } from '@vibesdotdev/kernel/schemas/kind';
+export declare const BuildTargetOsSchema: z.ZodEnum<{
+    linux: "linux";
+    macos: "macos";
+    windows: "windows";
+}>;
+export declare const BuildTargetArchSchema: z.ZodEnum<{
+    x64: "x64";
+    arm64: "arm64";
+}>;
+export declare const BuildJobTargetSchema: z.ZodObject<{
+    os: z.ZodEnum<{
+        linux: "linux";
+        macos: "macos";
+        windows: "windows";
+    }>;
+    arch: z.ZodEnum<{
+        x64: "x64";
+        arm64: "arm64";
+    }>;
+    libc: z.ZodOptional<z.ZodEnum<{
+        glibc: "glibc";
+        musl: "musl";
+        msvc: "msvc";
+    }>>;
+    format: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type BuildJobTarget = z.infer<typeof BuildJobTargetSchema>;
+/**
+ * A build never carries a repository password/token. It carries only enough
+ * authority metadata for the execution adapter to ask the platform broker for
+ * one operation-scoped read credential at checkout time.
+ */
+export declare const BuildJobGitAuthenticationSchema: z.ZodObject<{
+    mode: z.ZodLiteral<"brokered">;
+    provider: z.ZodLiteral<"vibes-forge">;
+    repositoryId: z.ZodString;
+    brokerOrigin: z.ZodString;
+    serviceCredential: z.ZodObject<{
+        source: z.ZodLiteral<"secret">;
+        key: z.ZodString;
+    }, z.core.$strip>;
+}, z.core.$strict>;
+export type BuildJobGitAuthentication = z.infer<typeof BuildJobGitAuthenticationSchema>;
+export declare const BuildJobSourceSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    kind: z.ZodLiteral<"git">;
+    repository: z.ZodString;
+    ref: z.ZodOptional<z.ZodString>;
+    depth: z.ZodDefault<z.ZodNumber>;
+    checkoutDir: z.ZodDefault<z.ZodString>;
+    authentication: z.ZodOptional<z.ZodObject<{
+        mode: z.ZodLiteral<"brokered">;
+        provider: z.ZodLiteral<"vibes-forge">;
+        repositoryId: z.ZodString;
+        brokerOrigin: z.ZodString;
+        serviceCredential: z.ZodObject<{
+            source: z.ZodLiteral<"secret">;
+            key: z.ZodString;
+        }, z.core.$strip>;
+    }, z.core.$strict>>;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"workspace">;
+    path: z.ZodDefault<z.ZodString>;
+}, z.core.$strip>], "kind">;
+export type BuildJobSource = z.infer<typeof BuildJobSourceSchema>;
+export declare const BuildJobStepSchema: z.ZodObject<{
+    name: z.ZodString;
+    run: z.ZodString;
+    cwd: z.ZodOptional<z.ZodString>;
+    shell: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type BuildJobStep = z.infer<typeof BuildJobStepSchema>;
+export declare const BuildJobArtifactSchema: z.ZodObject<{
+    path: z.ZodString;
+    name: z.ZodOptional<z.ZodString>;
+    contentType: z.ZodOptional<z.ZodString>;
+    required: z.ZodDefault<z.ZodBoolean>;
+}, z.core.$strip>;
+export type BuildJobArtifact = z.infer<typeof BuildJobArtifactSchema>;
+export declare const BuildJobToolRequirementSchema: z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+    id: z.ZodString;
+    required: z.ZodDefault<z.ZodBoolean>;
+    labels: z.ZodDefault<z.ZodArray<z.ZodString>>;
+}, z.core.$strip>]>;
+export type BuildJobToolRequirement = z.infer<typeof BuildJobToolRequirementSchema>;
+export declare const BuildJobRequirementsSchema: z.ZodObject<{
+    hostPoolId: z.ZodOptional<z.ZodString>;
+    runnerLabel: z.ZodOptional<z.ZodString>;
+    labels: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    tools: z.ZodDefault<z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+        id: z.ZodString;
+        required: z.ZodDefault<z.ZodBoolean>;
+        labels: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    }, z.core.$strip>]>>>;
+    actions: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    minCpuCores: z.ZodOptional<z.ZodNumber>;
+    minRamMb: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strip>;
+export type BuildJobRequirements = z.infer<typeof BuildJobRequirementsSchema>;
+export declare const BuildJobMountSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    kind: z.ZodLiteral<"git">;
+    name: z.ZodString;
+    repository: z.ZodString;
+    ref: z.ZodOptional<z.ZodString>;
+    path: z.ZodString;
+    mode: z.ZodDefault<z.ZodEnum<{
+        "read-only": "read-only";
+        "read-write": "read-write";
+    }>>;
+}, z.core.$strip>, z.ZodObject<{
+    kind: z.ZodLiteral<"filesystem">;
+    name: z.ZodString;
+    adapter: z.ZodString;
+    prefix: z.ZodOptional<z.ZodString>;
+    path: z.ZodString;
+    mode: z.ZodDefault<z.ZodEnum<{
+        "read-only": "read-only";
+        "read-write": "read-write";
+    }>>;
+    sync: z.ZodDefault<z.ZodEnum<{
+        push: "push";
+        none: "none";
+        bidirectional: "bidirectional";
+        pull: "pull";
+    }>>;
+}, z.core.$strip>, z.ZodObject<{
+    kind: z.ZodLiteral<"artifact">;
+    name: z.ZodString;
+    path: z.ZodString;
+    mode: z.ZodDefault<z.ZodEnum<{
+        "read-only": "read-only";
+        "read-write": "read-write";
+    }>>;
+}, z.core.$strip>, z.ZodObject<{
+    kind: z.ZodLiteral<"temp">;
+    name: z.ZodString;
+    path: z.ZodString;
+    sizeMb: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strip>], "kind">;
+export type BuildJobMount = z.infer<typeof BuildJobMountSchema>;
+/** Open publish target: the storage adapter package that owns `adapter` validates the rest. */
+export declare const BuildJobPublishTargetSchema: z.ZodObject<{
+    adapter: z.ZodString;
+}, z.core.$loose>;
+export type BuildJobPublishTarget = z.infer<typeof BuildJobPublishTargetSchema>;
+export declare const BuildJobResourceRequirementsSchema: z.ZodObject<{
+    requests: z.ZodOptional<z.ZodObject<{
+        cpu: z.ZodOptional<z.ZodString>;
+        memory: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    limits: z.ZodOptional<z.ZodObject<{
+        cpu: z.ZodOptional<z.ZodString>;
+        memory: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export declare const BuildJobTolerationSchema: z.ZodObject<{
+    key: z.ZodOptional<z.ZodString>;
+    operator: z.ZodOptional<z.ZodEnum<{
+        Exists: "Exists";
+        Equal: "Equal";
+    }>>;
+    value: z.ZodOptional<z.ZodString>;
+    effect: z.ZodOptional<z.ZodEnum<{
+        NoSchedule: "NoSchedule";
+        PreferNoSchedule: "PreferNoSchedule";
+        NoExecute: "NoExecute";
+    }>>;
+}, z.core.$strip>;
+export declare const LocalDockerBuildJobConfigSchema: z.ZodObject<{
+    adapter: z.ZodLiteral<"local-docker">;
+    image: z.ZodString;
+    outputDir: z.ZodDefault<z.ZodString>;
+}, z.core.$strip>;
+export declare const WindowsRunnerBuildJobConfigSchema: z.ZodObject<{
+    adapter: z.ZodLiteral<"windows-runner">;
+    provider: z.ZodDefault<z.ZodEnum<{
+        "azure-vm": "azure-vm";
+        "ec2-windows": "ec2-windows";
+        "self-hosted": "self-hosted";
+    }>>;
+    runnerLabel: z.ZodString;
+    image: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+/**
+ * Fleet adapter: dispatches the descriptor to the live vibes Host Action
+ * queue (`platform.hosts.createAction`) instead of provisioning its own
+ * compute. An enrolled fleet host (`fleet-daemon`) claims the
+ * resulting `host_action_runs` row and runs it via
+ * `executeBuildJobAction` — see `@vibesdotdev/platform/fleets/build-job` for the
+ * descriptor -> `CreateHostActionRunForm` translator. `hostPoolId` /
+ * `runnerLabel` here are adapter-level placement hints that the translator
+ * overlays onto the descriptor's adapter-neutral `requirements` (both use
+ * the identical shape as `BuildJobRequirementsSchema` below).
+ */
+export declare const FleetBuildJobConfigSchema: z.ZodObject<{
+    adapter: z.ZodLiteral<"fleet-build-job">;
+    hostPoolId: z.ZodOptional<z.ZodString>;
+    runnerLabel: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+/** Open adapter config: the adapter package that owns `adapter` validates the rest. */
+export declare const BuildJobConfigSchema: z.ZodObject<{
+    adapter: z.ZodString;
+}, z.core.$loose>;
+export type BuildJobConfig = z.infer<typeof BuildJobConfigSchema>;
+export type FleetBuildJobConfig = z.infer<typeof FleetBuildJobConfigSchema>;
+export declare const BuildJobDescriptorSchema: z.ZodObject<{
+    id: z.ZodString;
+    name: z.ZodOptional<z.ZodString>;
+    description: z.ZodOptional<z.ZodString>;
+    tags: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    hardware: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    enabled: z.ZodOptional<z.ZodBoolean>;
+    priority: z.ZodOptional<z.ZodNumber>;
+    capabilityId: z.ZodOptional<z.ZodString>;
+    requiredContext: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    optionalContext: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    retention: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+        maxAgeDays: z.ZodOptional<z.ZodNumber>;
+        maxEntries: z.ZodOptional<z.ZodNumber>;
+        maxBytes: z.ZodOptional<z.ZodNumber>;
+        cascadeFrom: z.ZodOptional<z.ZodString>;
+        ageField: z.ZodOptional<z.ZodString>;
+        reason: z.ZodString;
+        enforcedBy: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>]>>;
+    kind: z.ZodLiteral<"infra/build-job">;
+    source: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"git">;
+        repository: z.ZodString;
+        ref: z.ZodOptional<z.ZodString>;
+        depth: z.ZodDefault<z.ZodNumber>;
+        checkoutDir: z.ZodDefault<z.ZodString>;
+        authentication: z.ZodOptional<z.ZodObject<{
+            mode: z.ZodLiteral<"brokered">;
+            provider: z.ZodLiteral<"vibes-forge">;
+            repositoryId: z.ZodString;
+            brokerOrigin: z.ZodString;
+            serviceCredential: z.ZodObject<{
+                source: z.ZodLiteral<"secret">;
+                key: z.ZodString;
+            }, z.core.$strip>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"workspace">;
+        path: z.ZodDefault<z.ZodString>;
+    }, z.core.$strip>], "kind">;
+    target: z.ZodObject<{
+        os: z.ZodEnum<{
+            linux: "linux";
+            macos: "macos";
+            windows: "windows";
+        }>;
+        arch: z.ZodEnum<{
+            x64: "x64";
+            arm64: "arm64";
+        }>;
+        libc: z.ZodOptional<z.ZodEnum<{
+            glibc: "glibc";
+            musl: "musl";
+            msvc: "msvc";
+        }>>;
+        format: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+    steps: z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        run: z.ZodString;
+        cwd: z.ZodOptional<z.ZodString>;
+        shell: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    artifacts: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        path: z.ZodString;
+        name: z.ZodOptional<z.ZodString>;
+        contentType: z.ZodOptional<z.ZodString>;
+        required: z.ZodDefault<z.ZodBoolean>;
+    }, z.core.$strip>>>;
+    requirements: z.ZodOptional<z.ZodObject<{
+        hostPoolId: z.ZodOptional<z.ZodString>;
+        runnerLabel: z.ZodOptional<z.ZodString>;
+        labels: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        tools: z.ZodDefault<z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+            id: z.ZodString;
+            required: z.ZodDefault<z.ZodBoolean>;
+            labels: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        }, z.core.$strip>]>>>;
+        actions: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        minCpuCores: z.ZodOptional<z.ZodNumber>;
+        minRamMb: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>>;
+    mounts: z.ZodDefault<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"git">;
+        name: z.ZodString;
+        repository: z.ZodString;
+        ref: z.ZodOptional<z.ZodString>;
+        path: z.ZodString;
+        mode: z.ZodDefault<z.ZodEnum<{
+            "read-only": "read-only";
+            "read-write": "read-write";
+        }>>;
+    }, z.core.$strip>, z.ZodObject<{
+        kind: z.ZodLiteral<"filesystem">;
+        name: z.ZodString;
+        adapter: z.ZodString;
+        prefix: z.ZodOptional<z.ZodString>;
+        path: z.ZodString;
+        mode: z.ZodDefault<z.ZodEnum<{
+            "read-only": "read-only";
+            "read-write": "read-write";
+        }>>;
+        sync: z.ZodDefault<z.ZodEnum<{
+            push: "push";
+            none: "none";
+            bidirectional: "bidirectional";
+            pull: "pull";
+        }>>;
+    }, z.core.$strip>, z.ZodObject<{
+        kind: z.ZodLiteral<"artifact">;
+        name: z.ZodString;
+        path: z.ZodString;
+        mode: z.ZodDefault<z.ZodEnum<{
+            "read-only": "read-only";
+            "read-write": "read-write";
+        }>>;
+    }, z.core.$strip>, z.ZodObject<{
+        kind: z.ZodLiteral<"temp">;
+        name: z.ZodString;
+        path: z.ZodString;
+        sizeMb: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>], "kind">>>;
+    publish: z.ZodOptional<z.ZodObject<{
+        adapter: z.ZodString;
+    }, z.core.$loose>>;
+    env: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        public: z.ZodOptional<z.ZodBoolean>;
+        required: z.ZodOptional<z.ZodBoolean>;
+        value: z.ZodOptional<z.ZodString>;
+        secret: z.ZodOptional<z.ZodBoolean>;
+        description: z.ZodOptional<z.ZodString>;
+        storeKey: z.ZodOptional<z.ZodString>;
+        storeBinding: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strip>>>;
+    config: z.ZodOptional<z.ZodObject<{
+        adapter: z.ZodString;
+    }, z.core.$loose>>;
+}, z.core.$strip>;
+export type BuildJobDescriptor = z.infer<typeof BuildJobDescriptorSchema>;
+export type BuildJobDescriptorInput = z.input<typeof BuildJobDescriptorSchema>;
+/** Facts a build-job run reports: JSON values only. */
+export declare const BuildJobRunMetadataSchema: z.ZodRecord<z.ZodString, z.ZodType<import("@vibesdotdev/kernel/bootstrap").JsonValue, import("@vibesdotdev/kernel/bootstrap").JsonValue, z.core.$ZodTypeInternals<import("@vibesdotdev/kernel/bootstrap").JsonValue, import("@vibesdotdev/kernel/bootstrap").JsonValue>>>;
+export type BuildJobRunMetadata = z.infer<typeof BuildJobRunMetadataSchema>;
+export interface BuildJobRunResult {
+    id: string;
+    status: 'queued' | 'running' | 'succeeded' | 'failed';
+    artifacts?: BuildJobArtifact[];
+    logsUrl?: string;
+    metadata?: BuildJobRunMetadata;
+}
+export interface BuildJobImplementation {
+    generateConfig?(descriptor?: BuildJobDescriptor): BuildJobConfig | undefined;
+    run?(descriptor: BuildJobDescriptor): Promise<BuildJobRunResult>;
+}
+declare class DefaultBuildJobImplementation implements BuildJobImplementation {
+    readonly descriptor: RuntimeDescriptor;
+    readonly context: KindContext;
+    /** The descriptor as this kind's schema reads it. */
+    readonly config: BuildJobDescriptor;
+    constructor(descriptor: RuntimeDescriptor, context: KindContext);
+    generateConfig(descriptor?: BuildJobDescriptor): BuildJobConfig | undefined;
+}
+export declare const buildJobKind: import("@vibesdotdev/kernel").RuntimeKindDescriptorRecord<DefaultBuildJobImplementation>;
+export {};
+//# sourceMappingURL=build-job.kind.d.ts.map

package/dist/kinds/build-job.kind.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-job.kind.d.ts","sourceRoot":"","sources":["../../src/kinds/build-job.kind.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAI5B,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wCAAwC,CAAC;AAChF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AAKpE,eAAO,MAAM,mBAAmB;;;;EAAwC,CAAC;AACzE,eAAO,MAAM,qBAAqB;;;EAA2B,CAAC;AAE9D,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;iBAK/B,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE;;;;GAIG;AACH,eAAO,MAAM,+BAA+B;;;;;;;;;kBAWlC,CAAC;AACX,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AA2BxF,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;2BAM/B,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,eAAO,MAAM,kBAAkB;;;;;iBAK7B,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,eAAO,MAAM,sBAAsB;;;;;iBAKjC,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE,eAAO,MAAM,6BAA6B;;;;mBAOxC,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF,eAAO,MAAM,0BAA0B;;;;;;;;;;;;iBAQrC,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2BA8B9B,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE,+FAA+F;AAC/F,eAAO,MAAM,2BAA2B;;iBAAgD,CAAC;AACzF,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEhF,eAAO,MAAM,kCAAkC;;;;;;;;;iBAa7C,CAAC;AAEH,eAAO,MAAM,wBAAwB;;;;;;;;;;;;iBAKnC,CAAC;AAEH,eAAO,MAAM,+BAA+B;;;;iBAI1C,CAAC;AAEH,eAAO,MAAM,iCAAiC;;;;;;;;;iBAK5C,CAAC;AAEH;;;;;;;;;;GAUG;AACH,eAAO,MAAM,yBAAyB;;;;iBAIpC,CAAC;AAEH,uFAAuF;AACvF,eAAO,MAAM,oBAAoB;;iBAAgD,CAAC;AAClF,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAClE,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAWnC,CAAC;AAEH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAC1E,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE/E,uDAAuD;AACvD,eAAO,MAAM,yBAAyB,2QAAwC,CAAC;AAC/E,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E,MAAM,WAAW,iBAAiB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,QAAQ,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,CAAC;IACtD,SAAS,CAAC,EAAE,gBAAgB,EAAE,CAAC;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,mBAAmB,CAAC;CAC/B;AAED,MAAM,WAAW,sBAAsB;IACtC,cAAc,CAAC,CAAC,UAAU,CAAC,EAAE,kBAAkB,GAAG,cAAc,GAAG,SAAS,CAAC;IAC7E,GAAG,CAAC,CAAC,UAAU,EAAE,kBAAkB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;CACjE;AAED,cAAM,6BAA8B,YAAW,sBAAsB;aAInD,UAAU,EAAE,iBAAiB;aAC7B,OAAO,EAAE,WAAW;IAJrC,qDAAqD;IACrD,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;gBAEnB,UAAU,EAAE,iBAAiB,EAC7B,OAAO,EAAE,WAAW;IAKrC,cAAc,CAAC,UAAU,GAAE,kBAAgC,GAAG,cAAc,GAAG,SAAS;CAGxF;AAED,eAAO,MAAM,YAAY,0FAKvB,CAAC"}

package/dist/kinds/build-job.kind.js

@@ -0,0 +1,216 @@
+/**
+ * Kind: infra/build-job
+ *
+ * Provider-neutral descriptor for reproducible release builds. Adapter
+ * packages map this shape onto DOKS Kubernetes Jobs, local Docker runs,
+ * Windows VM runners, or another execution substrate.
+ */
+import * as z from 'zod/v4';
+import { JsonValueSchema } from '@vibesdotdev/kernel/schemas/json';
+import { createRuntimeKind } from '@vibesdotdev/kernel/factory/kind';
+import { RuntimeDescriptorSchema } from '@vibesdotdev/kernel/schemas/descriptor';
+import { readKindDescriptor } from "./read-descriptor.js";
+import { deploymentEnvRequirementSchema } from "../schemas.js";
+import { INFRA_DISCOVERY_PATTERNS } from "./discovery.js";
+export const BuildTargetOsSchema = z.enum(['linux', 'macos', 'windows']);
+export const BuildTargetArchSchema = z.enum(['x64', 'arm64']);
+export const BuildJobTargetSchema = z.object({
+    os: BuildTargetOsSchema,
+    arch: BuildTargetArchSchema,
+    libc: z.enum(['glibc', 'musl', 'msvc']).optional(),
+    format: z.string().min(1).optional()
+});
+/**
+ * A build never carries a repository password/token. It carries only enough
+ * authority metadata for the execution adapter to ask the platform broker for
+ * one operation-scoped read credential at checkout time.
+ */
+export const BuildJobGitAuthenticationSchema = z
+    .object({
+    mode: z.literal('brokered'),
+    provider: z.literal('vibes-forge'),
+    repositoryId: z.string().uuid(),
+    brokerOrigin: z.string().url(),
+    serviceCredential: z.object({
+        source: z.literal('secret'),
+        key: z.string().regex(/^[_A-Z0-9]+$/)
+    })
+})
+    .strict();
+const BuildJobGitSourceSchema = z
+    .object({
+    kind: z.literal('git'),
+    repository: z.string().min(1),
+    ref: z.string().min(1).optional(),
+    depth: z.number().int().positive().default(1),
+    checkoutDir: z.string().min(1).default('/workspace/source'),
+    authentication: BuildJobGitAuthenticationSchema.optional()
+})
+    .strict()
+    .superRefine((source, ctx) => {
+    // SCP-style SSH repositories (`git@host:path`) are not URLs and carry no userinfo password.
+    if (!URL.canParse(source.repository))
+        return;
+    const repository = new URL(source.repository);
+    const sshTransport = repository.protocol === 'ssh:';
+    if (repository.password || (repository.username && !sshTransport)) {
+        ctx.addIssue({
+            code: 'custom',
+            path: ['repository'],
+            message: 'git source URLs must never embed credentials; SSH transport may carry only its public login name'
+        });
+    }
+});
+export const BuildJobSourceSchema = z.discriminatedUnion('kind', [
+    BuildJobGitSourceSchema,
+    z.object({
+        kind: z.literal('workspace'),
+        path: z.string().min(1).default('.')
+    })
+]);
+export const BuildJobStepSchema = z.object({
+    name: z.string().min(1),
+    run: z.string().min(1),
+    cwd: z.string().min(1).optional(),
+    shell: z.string().min(1).optional()
+});
+export const BuildJobArtifactSchema = z.object({
+    path: z.string().min(1),
+    name: z.string().min(1).optional(),
+    contentType: z.string().min(1).optional(),
+    required: z.boolean().default(true)
+});
+export const BuildJobToolRequirementSchema = z.union([
+    z.string().min(1),
+    z.object({
+        id: z.string().min(1),
+        required: z.boolean().default(true),
+        labels: z.array(z.string().min(1)).default([])
+    })
+]);
+export const BuildJobRequirementsSchema = z.object({
+    hostPoolId: z.string().min(1).optional(),
+    runnerLabel: z.string().min(1).optional(),
+    labels: z.array(z.string().min(1)).default([]),
+    tools: z.array(BuildJobToolRequirementSchema).default([]),
+    actions: z.array(z.string().min(1)).default([]),
+    minCpuCores: z.number().int().positive().optional(),
+    minRamMb: z.number().int().positive().optional()
+});
+export const BuildJobMountSchema = z.discriminatedUnion('kind', [
+    z.object({
+        kind: z.literal('git'),
+        name: z.string().min(1),
+        repository: z.string().min(1),
+        ref: z.string().min(1).optional(),
+        path: z.string().min(1),
+        mode: z.enum(['read-only', 'read-write']).default('read-only')
+    }),
+    z.object({
+        kind: z.literal('filesystem'),
+        name: z.string().min(1),
+        adapter: z.string().min(1),
+        prefix: z.string().optional(),
+        path: z.string().min(1),
+        mode: z.enum(['read-only', 'read-write']).default('read-write'),
+        sync: z.enum(['none', 'pull', 'push', 'bidirectional']).default('none')
+    }),
+    z.object({
+        kind: z.literal('artifact'),
+        name: z.string().min(1),
+        path: z.string().min(1),
+        mode: z.enum(['read-only', 'read-write']).default('read-write')
+    }),
+    z.object({
+        kind: z.literal('temp'),
+        name: z.string().min(1),
+        path: z.string().min(1),
+        sizeMb: z.number().int().positive().optional()
+    })
+]);
+/** Open publish target: the storage adapter package that owns `adapter` validates the rest. */
+export const BuildJobPublishTargetSchema = z.looseObject({ adapter: z.string().min(1) });
+export const BuildJobResourceRequirementsSchema = z.object({
+    requests: z
+        .object({
+        cpu: z.string().min(1).optional(),
+        memory: z.string().min(1).optional()
+    })
+        .optional(),
+    limits: z
+        .object({
+        cpu: z.string().min(1).optional(),
+        memory: z.string().min(1).optional()
+    })
+        .optional()
+});
+export const BuildJobTolerationSchema = z.object({
+    key: z.string().min(1).optional(),
+    operator: z.enum(['Exists', 'Equal']).optional(),
+    value: z.string().optional(),
+    effect: z.enum(['NoSchedule', 'PreferNoSchedule', 'NoExecute']).optional()
+});
+export const LocalDockerBuildJobConfigSchema = z.object({
+    adapter: z.literal('local-docker'),
+    image: z.string().min(1),
+    outputDir: z.string().min(1).default('artifacts/build-jobs')
+});
+export const WindowsRunnerBuildJobConfigSchema = z.object({
+    adapter: z.literal('windows-runner'),
+    provider: z.enum(['azure-vm', 'ec2-windows', 'self-hosted']).default('self-hosted'),
+    runnerLabel: z.string().min(1),
+    image: z.string().min(1).optional()
+});
+/**
+ * Fleet adapter: dispatches the descriptor to the live vibes Host Action
+ * queue (`platform.hosts.createAction`) instead of provisioning its own
+ * compute. An enrolled fleet host (`fleet-daemon`) claims the
+ * resulting `host_action_runs` row and runs it via
+ * `executeBuildJobAction` — see `@vibesdotdev/platform/fleets/build-job` for the
+ * descriptor -> `CreateHostActionRunForm` translator. `hostPoolId` /
+ * `runnerLabel` here are adapter-level placement hints that the translator
+ * overlays onto the descriptor's adapter-neutral `requirements` (both use
+ * the identical shape as `BuildJobRequirementsSchema` below).
+ */
+export const FleetBuildJobConfigSchema = z.object({
+    adapter: z.literal('fleet-build-job'),
+    hostPoolId: z.string().min(1).optional(),
+    runnerLabel: z.string().min(1).optional()
+});
+/** Open adapter config: the adapter package that owns `adapter` validates the rest. */
+export const BuildJobConfigSchema = z.looseObject({ adapter: z.string().min(1) });
+export const BuildJobDescriptorSchema = RuntimeDescriptorSchema.extend({
+    kind: z.literal('infra/build-job'),
+    source: BuildJobSourceSchema,
+    target: BuildJobTargetSchema,
+    steps: z.array(BuildJobStepSchema).min(1),
+    artifacts: z.array(BuildJobArtifactSchema).default([]),
+    requirements: BuildJobRequirementsSchema.optional(),
+    mounts: z.array(BuildJobMountSchema).default([]),
+    publish: BuildJobPublishTargetSchema.optional(),
+    env: z.array(deploymentEnvRequirementSchema).optional(),
+    config: BuildJobConfigSchema.optional()
+});
+/** Facts a build-job run reports: JSON values only. */
+export const BuildJobRunMetadataSchema = z.record(z.string(), JsonValueSchema);
+class DefaultBuildJobImplementation {
+    descriptor;
+    context;
+    /** The descriptor as this kind's schema reads it. */
+    config;
+    constructor(descriptor, context) {
+        this.descriptor = descriptor;
+        this.context = context;
+        this.config = readKindDescriptor(BuildJobDescriptorSchema, descriptor);
+    }
+    generateConfig(descriptor = this.config) {
+        return descriptor.config;
+    }
+}
+export const buildJobKind = createRuntimeKind({
+    id: 'infra/build-job',
+    descriptorSchema: BuildJobDescriptorSchema,
+    defaultImplementation: DefaultBuildJobImplementation,
+    discoveryPatterns: INFRA_DISCOVERY_PATTERNS
+});
+//# sourceMappingURL=build-job.kind.js.map