@vibesdotdev/infra-core 0.0.2 → 1.0.0-rc.5

package/dist/kinds/compute-source.kind.d.ts

@@ -0,0 +1,138 @@
+/**
+ * Kind: infra/compute-source
+ *
+ * One registered source we can lease a machine, container or sandbox from.
+ *
+ * Forge CI and build jobs should not own compute. They state what a job needs
+ * and the fleet leases a host; every place a host can come from — a Cloudflare
+ * sandbox, a DigitalOcean droplet, an AWS instance, or a machine the user
+ * brought themselves — is one descriptor of this kind. That is what keeps
+ * "bring your own provider" the same code path as ours rather than a second
+ * one, and it is why selection can stay a single policy instead of a branch
+ * per caller.
+ *
+ * Every field states what the source can ACTUALLY provide, mirroring
+ * `ci/executor`. A descriptor that overstates itself is how a
+ * `runsOn: windows` job quietly runs on linux, so selection filters on these
+ * and refuses rather than substitutes.
+ *
+ * Not to be confused with `infra/inventory`, which is read-only enumeration of
+ * existing provider resources. This kind is about where new compute comes from.
+ */
+import * as z from 'zod/v4';
+import type { RuntimeDescriptor } from '@vibesdotdev/kernel/schemas/descriptor';
+import type { KindContext } from '@vibesdotdev/kernel/schemas/kind';
+export declare const ComputeSourceOsSchema: z.ZodEnum<{
+    linux: "linux";
+    macos: "macos";
+    windows: "windows";
+}>;
+export type ComputeSourceOs = z.infer<typeof ComputeSourceOsSchema>;
+export declare const ComputeSourceArchSchema: z.ZodEnum<{
+    x64: "x64";
+    arm64: "arm64";
+}>;
+export type ComputeSourceArch = z.infer<typeof ComputeSourceArchSchema>;
+/**
+ * Who owns the hardware, which decides who pays for it.
+ *
+ * `vibes` — our inventory, billed to the requesting account in credits.
+ * `byo`   — the user's own provider. We facilitate; we do not bill compute.
+ *           Mirrors the `hardware: 'consumer'` path the billing rating engine
+ *           already short-circuits to zero credits.
+ */
+export declare const ComputeSourceOwnerScopeSchema: z.ZodEnum<{
+    vibes: "vibes";
+    byo: "byo";
+}>;
+export type ComputeSourceOwnerScope = z.infer<typeof ComputeSourceOwnerScopeSchema>;
+export declare const ComputeSourceCapabilitiesSchema: z.ZodObject<{
+    os: z.ZodArray<z.ZodEnum<{
+        linux: "linux";
+        macos: "macos";
+        windows: "windows";
+    }>>;
+    arch: z.ZodArray<z.ZodEnum<{
+        x64: "x64";
+        arm64: "arm64";
+    }>>;
+    labels: z.ZodDefault<z.ZodArray<z.ZodString>>;
+}, z.core.$strip>;
+export type ComputeSourceCapabilities = z.infer<typeof ComputeSourceCapabilitiesSchema>;
+export declare const ComputeSourceDescriptorSchema: z.ZodObject<{
+    id: z.ZodString;
+    name: z.ZodOptional<z.ZodString>;
+    description: z.ZodOptional<z.ZodString>;
+    tags: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    hardware: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    enabled: z.ZodOptional<z.ZodBoolean>;
+    priority: z.ZodOptional<z.ZodNumber>;
+    capabilityId: z.ZodOptional<z.ZodString>;
+    requiredContext: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    optionalContext: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    config: z.ZodOptional<z.ZodUnknown>;
+    retention: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+        maxAgeDays: z.ZodOptional<z.ZodNumber>;
+        maxEntries: z.ZodOptional<z.ZodNumber>;
+        maxBytes: z.ZodOptional<z.ZodNumber>;
+        cascadeFrom: z.ZodOptional<z.ZodString>;
+        ageField: z.ZodOptional<z.ZodString>;
+        reason: z.ZodString;
+        enforcedBy: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>]>>;
+    kind: z.ZodLiteral<"infra/compute-source">;
+    provides: z.ZodObject<{
+        os: z.ZodArray<z.ZodEnum<{
+            linux: "linux";
+            macos: "macos";
+            windows: "windows";
+        }>>;
+        arch: z.ZodArray<z.ZodEnum<{
+            x64: "x64";
+            arm64: "arm64";
+        }>>;
+        labels: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    }, z.core.$strip>;
+    ephemeral: z.ZodBoolean;
+    cost: z.ZodObject<{
+        usdPerSecond: z.ZodNumber;
+        usdPerSecondCpuActive: z.ZodOptional<z.ZodNumber>;
+        initialUsd: z.ZodOptional<z.ZodNumber>;
+        minimumUsd: z.ZodOptional<z.ZodNumber>;
+        source: z.ZodEnum<{
+            published: "published";
+            manual: "manual";
+            measured: "measured";
+            heuristic: "heuristic";
+        }>;
+        confidence: z.ZodEnum<{
+            low: "low";
+            medium: "medium";
+            high: "high";
+        }>;
+        effectiveAt: z.ZodString;
+        note: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+    ownerScope: z.ZodDefault<z.ZodEnum<{
+        vibes: "vibes";
+        byo: "byo";
+    }>>;
+    owner: z.ZodOptional<z.ZodObject<{
+        type: z.ZodString;
+        id: z.ZodString;
+    }, z.core.$strip>>;
+    warmPool: z.ZodDefault<z.ZodBoolean>;
+    maxLeaseSeconds: z.ZodNumber;
+    supportsCancellation: z.ZodDefault<z.ZodBoolean>;
+}, z.core.$strip>;
+export type ComputeSourceDescriptor = z.infer<typeof ComputeSourceDescriptorSchema>;
+declare class DefaultComputeSourceImplementation {
+    readonly descriptor: RuntimeDescriptor;
+    readonly context: KindContext;
+    /** The descriptor as this kind's schema reads it. */
+    readonly config: ComputeSourceDescriptor;
+    constructor(descriptor: RuntimeDescriptor, context: KindContext);
+}
+export declare const computeSourceKind: import("@vibesdotdev/kernel").RuntimeKindDescriptorRecord<DefaultComputeSourceImplementation>;
+export {};
+//# sourceMappingURL=compute-source.kind.d.ts.map

package/dist/kinds/compute-source.kind.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"compute-source.kind.d.ts","sourceRoot":"","sources":["../../src/kinds/compute-source.kind.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAG5B,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wCAAwC,CAAC;AAChF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AAQpE,eAAO,MAAM,qBAAqB;;;;EAAwC,CAAC;AAC3E,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE,eAAO,MAAM,uBAAuB;;;EAA2B,CAAC;AAChE,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE;;;;;;;GAOG;AACH,eAAO,MAAM,6BAA6B;;;EAA2B,CAAC;AACtE,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF,eAAO,MAAM,+BAA+B;;;;;;;;;;;iBAK1C,CAAC;AACH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AAExF,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAmFxC,CAAC;AAEH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF,cAAM,kCAAkC;aAItB,UAAU,EAAE,iBAAiB;aAC7B,OAAO,EAAE,WAAW;IAJrC,qDAAqD;IACrD,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAC;gBAExB,UAAU,EAAE,iBAAiB,EAC7B,OAAO,EAAE,WAAW;CAKrC;AAED,eAAO,MAAM,iBAAiB,+FAQ5B,CAAC"}

package/dist/kinds/compute-source.kind.js

@@ -0,0 +1,145 @@
+/**
+ * Kind: infra/compute-source
+ *
+ * One registered source we can lease a machine, container or sandbox from.
+ *
+ * Forge CI and build jobs should not own compute. They state what a job needs
+ * and the fleet leases a host; every place a host can come from — a Cloudflare
+ * sandbox, a DigitalOcean droplet, an AWS instance, or a machine the user
+ * brought themselves — is one descriptor of this kind. That is what keeps
+ * "bring your own provider" the same code path as ours rather than a second
+ * one, and it is why selection can stay a single policy instead of a branch
+ * per caller.
+ *
+ * Every field states what the source can ACTUALLY provide, mirroring
+ * `ci/executor`. A descriptor that overstates itself is how a
+ * `runsOn: windows` job quietly runs on linux, so selection filters on these
+ * and refuses rather than substitutes.
+ *
+ * Not to be confused with `infra/inventory`, which is read-only enumeration of
+ * existing provider resources. This kind is about where new compute comes from.
+ */
+import * as z from 'zod/v4';
+import { createRuntimeKind } from '@vibesdotdev/kernel/factory/kind';
+import { RuntimeDescriptorSchema } from '@vibesdotdev/kernel/schemas/descriptor';
+import { readKindDescriptor } from "./read-descriptor.js";
+import { costBasisConfidenceSchema, costBasisSourceSchema } from '@vibesdotdev/shared/billing/cost-basis';
+import { INFRA_DISCOVERY_PATTERNS } from "./discovery.js";
+export const ComputeSourceOsSchema = z.enum(['linux', 'macos', 'windows']);
+export const ComputeSourceArchSchema = z.enum(['x64', 'arm64']);
+/**
+ * Who owns the hardware, which decides who pays for it.
+ *
+ * `vibes` — our inventory, billed to the requesting account in credits.
+ * `byo`   — the user's own provider. We facilitate; we do not bill compute.
+ *           Mirrors the `hardware: 'consumer'` path the billing rating engine
+ *           already short-circuits to zero credits.
+ */
+export const ComputeSourceOwnerScopeSchema = z.enum(['vibes', 'byo']);
+export const ComputeSourceCapabilitiesSchema = z.object({
+    os: z.array(ComputeSourceOsSchema).min(1),
+    arch: z.array(ComputeSourceArchSchema).min(1),
+    /** Extra capabilities a job may demand, e.g. `gpu`, `docker`, `nested-virt`. */
+    labels: z.array(z.string().min(1)).default([])
+});
+export const ComputeSourceDescriptorSchema = RuntimeDescriptorSchema.extend({
+    kind: z.literal('infra/compute-source'),
+    /** What this source can actually provide. Selection filters on exactly this. */
+    provides: ComputeSourceCapabilitiesSchema,
+    /**
+     * Whether a lease is destroyed after a single job.
+     *
+     * Deliberately has NO default. Untrusted refs (fork PRs) may only land on
+     * ephemeral sources, so this field decides whether a source can run code
+     * nobody has reviewed. A default would silently answer that question for a
+     * descriptor author who never considered it; requiring it makes the author
+     * say so. Guessing either way is wrong — `true` wrongly admits a persistent
+     * host, `false` wrongly excludes a genuinely disposable one.
+     */
+    ephemeral: z.boolean(),
+    /**
+     * What this source costs us, quoted from the provider's own price list
+     * rather than assigned by hand.
+     *
+     * An earlier draft ranked on an integer `costTier` somebody picked. That is
+     * a guess dressed as a fact, and it drifts the moment a provider changes
+     * price. A real rate ranks correctly on its own and is the same number the
+     * rating engine bills from, so selection and the invoice can never disagree
+     * about which source was cheaper.
+     *
+     * The field set is dictated by how the two providers actually bill, learned
+     * by reading their price lists rather than assumed:
+     *
+     *   * `usdPerSecond` is charged for every second of the lease. On a
+     *     Cloudflare container that is the PROVISIONED memory and disk, which
+     *     bill whether or not the job is doing anything.
+     *   * `usdPerSecondCpuActive` is charged ON TOP, but only while the vCPUs
+     *     are actually busy. Cloudflare priced CPU on active usage in November
+     *     2025; before that it was provisioned like memory. A source that bills
+     *     CPU as part of a flat rate — a DigitalOcean droplet — omits this.
+     *   * `initialUsd` is a genuine one-time additive charge for getting the
+     *     machine at all. Absent means there is none, not that nobody filled it
+     *     in.
+     *   * `minimumUsd` is a FLOOR on the whole lease, not a fee added to it.
+     *     DigitalOcean bills per second but never less than 60 seconds or $0.01,
+     *     whichever is higher. Modelling that as `initialUsd` would have
+     *     overcharged every lease by the floor, because setup is additive and a
+     *     minimum is not. The distinction is the reason both fields exist.
+     *
+     * A bring-your-own source sets `usdPerSecond: 0`. It costs us nothing
+     * because it is not our hardware.
+     */
+    cost: z.object({
+        usdPerSecond: z.number().nonnegative(),
+        usdPerSecondCpuActive: z.number().nonnegative().optional(),
+        initialUsd: z.number().nonnegative().optional(),
+        minimumUsd: z.number().nonnegative().optional(),
+        /**
+         * Where this quote came from and how much to trust it. Reuses the
+         * billing vocabulary the AI model descriptors already quote prices in,
+         * so "published" means the same thing about a droplet as about a token.
+         */
+        source: costBasisSourceSchema,
+        confidence: costBasisConfidenceSchema,
+        /** ISO-8601 instant this quote was read from the provider. */
+        effectiveAt: z.string().min(1),
+        /** How the number was derived, for whoever has to re-check it later. */
+        note: z.string().min(1).optional()
+    }),
+    ownerScope: ComputeSourceOwnerScopeSchema.default('vibes'),
+    /**
+     * Billing subject for a `byo` source. Required when `ownerScope` is `byo`:
+     * a bring-your-own machine must only be selectable by the scope that
+     * brought it, never by another tenant's run.
+     */
+    owner: z
+        .object({ type: z.string().min(1), id: z.string().min(1) })
+        .optional(),
+    /** Whether this source can hold idle capacity, making a lease warm. */
+    warmPool: z.boolean().default(false),
+    /** Longest single lease this source will grant, in seconds. */
+    maxLeaseSeconds: z.number().int().positive(),
+    /** Whether an in-flight lease can be torn down. */
+    supportsCancellation: z.boolean().default(false)
+}).refine((d) => d.ownerScope !== 'byo' || d.owner !== undefined, {
+    message: "a 'byo' compute source must declare its owner, otherwise it could be selected by another tenant's run",
+    path: ['owner']
+});
+class DefaultComputeSourceImplementation {
+    descriptor;
+    context;
+    /** The descriptor as this kind's schema reads it. */
+    config;
+    constructor(descriptor, context) {
+        this.descriptor = descriptor;
+        this.context = context;
+        this.config = readKindDescriptor(ComputeSourceDescriptorSchema, descriptor);
+    }
+}
+export const computeSourceKind = createRuntimeKind({
+    id: 'infra/compute-source',
+    descriptorSchema: ComputeSourceDescriptorSchema,
+    defaultImplementation: DefaultComputeSourceImplementation,
+    discoveryPatterns: INFRA_DISCOVERY_PATTERNS
+});
+//# sourceMappingURL=compute-source.kind.js.map

package/dist/kinds/compute-source.kind.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compute-source.kind.js","sourceRoot":"","sources":["../../src/kinds/compute-source.kind.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AAGjF,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EACN,yBAAyB,EACzB,qBAAqB,EACrB,MAAM,wCAAwC,CAAC;AAChD,OAAO,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAE1D,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;AAG3E,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;AAGhE;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;AAGtE,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC,MAAM,CAAC;IACvD,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACzC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7C,gFAAgF;IAChF,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CAC9C,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,6BAA6B,GAAG,uBAAuB,CAAC,MAAM,CAAC;IAC3E,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC;IACvC,gFAAgF;IAChF,QAAQ,EAAE,+BAA+B;IACzC;;;;;;;;;OASG;IACH,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;IACtB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA+BG;IACH,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;QACd,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE;QACtC,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;QAC1D,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;QAC/C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;QAC/C;;;;WAIG;QACH,MAAM,EAAE,qBAAqB;QAC7B,UAAU,EAAE,yBAAyB;QACrC,8DAA8D;QAC9D,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9B,wEAAwE;QACxE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;KAClC,CAAC;IACF,UAAU,EAAE,6BAA6B,CAAC,OAAO,CAAC,OAAO,CAAC;IAC1D;;;;OAIG;IACH,KAAK,EAAE,CAAC;SACN,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1D,QAAQ,EAAE;IACZ,uEAAuE;IACvE,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACpC,+DAA+D;IAC/D,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC5C,mDAAmD;IACnD,oBAAoB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CAChD,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,KAAK,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,EAAE;IACjE,OAAO,EACN,uGAAuG;IACxG,IAAI,EAAE,CAAC,OAAO,CAAC;CACf,CAAC,CAAC;AAIH,MAAM,kCAAkC;IAItB;IACA;IAJjB,qDAAqD;IAC5C,MAAM,CAA0B;IACzC,YACiB,UAA6B,EAC7B,OAAoB;QADpB,eAAU,GAAV,UAAU,CAAmB;QAC7B,YAAO,GAAP,OAAO,CAAa;QAEpC,IAAI,CAAC,MAAM,GAAG,kBAAkB,CAAC,6BAA6B,EAAE,UAAU,CAAC,CAAC;IAC7E,CAAC;CAED;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAG,iBAAiB,CAGhD;IACD,EAAE,EAAE,sBAAsB;IAC1B,gBAAgB,EAAE,6BAA6B;IAC/C,qBAAqB,EAAE,kCAAkC;IACzD,iBAAiB,EAAE,wBAAwB;CAC3C,CAAC,CAAC"}

package/dist/kinds/compute-sources.descriptors.d.ts

@@ -0,0 +1,45 @@
+/**
+ * The compute sources we actually own, priced from the providers' own lists.
+ *
+ * These are data, like `training/executor`'s reference descriptors. They exist
+ * so `infra/compute-source` stops being a schema with no rows: selection can
+ * only be honest about which machine is cheaper if somebody has written down
+ * what the machines cost.
+ *
+ * Every rate here was read from the provider on 2026-09-08 rather than
+ * estimated, and the arithmetic is left in the source so the next person can
+ * re-derive it instead of trusting a decimal. Deriving DigitalOcean's rate by
+ * hand as `$24/month ÷ 730h ÷ 3600s` gives $0.00000913/s, which is 8% under
+ * what DigitalOcean actually charges — the monthly price is a cap, not the
+ * basis for the hourly rate. That is exactly the kind of quiet error a
+ * hand-typed number produces, and the reason `source` and `effectiveAt` are
+ * required fields.
+ *
+ * Capability claims are deliberately conservative. `labels` is empty on both:
+ * an overstated capability is how a job that demands `docker` silently lands
+ * somewhere without it, and the kind refuses rather than substitutes. Add a
+ * label when someone has verified it, not because it is probably true.
+ */
+import type { ComputeSourceDescriptor } from './compute-source.kind.ts';
+/**
+ * Cloudflare Containers `standard-4` — what `forge-ci-worker` runs on today
+ * (`wrangler.jsonc`, `instance_type: "standard-4"`): 4 vCPU, 12 GiB memory,
+ * 20 GB disk.
+ *
+ * Cloudflare bills memory and disk on PROVISIONED resources and CPU on ACTIVE
+ * usage only (a November 2025 pricing change), so the two rates are split.
+ * A CI job is CPU-bound almost by definition, so its real cost sits near
+ * `usdPerSecond + usdPerSecondCpuActive`; an idle container costs the floor.
+ */
+export declare const cfContainerStandard4: ComputeSourceDescriptor;
+/**
+ * DigitalOcean droplet `s-2vcpu-4gb`: 2 vCPU, 4 GiB memory, 80 GB disk.
+ *
+ * Billed per second with a floor of 60 seconds or $0.01, whichever is higher.
+ * At this size 60 seconds is $0.000595, so $0.01 is always the binding floor —
+ * which means a 10-second lease and a 16-minute lease cost the same.
+ */
+export declare const doDropletS2vcpu4gb: ComputeSourceDescriptor;
+/** Every compute source we own, cheapest-first ordering left to the selector. */
+export declare const vibesComputeSources: readonly ComputeSourceDescriptor[];
+//# sourceMappingURL=compute-sources.descriptors.d.ts.map

package/dist/kinds/compute-sources.descriptors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"compute-sources.descriptors.d.ts","sourceRoot":"","sources":["../../src/kinds/compute-sources.descriptors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AAexE;;;;;;;;;GASG;AACH,eAAO,MAAM,oBAAoB,EAAE,uBA4BlC,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,kBAAkB,EAAE,uBA6BhC,CAAC;AAEF,iFAAiF;AACjF,eAAO,MAAM,mBAAmB,EAAE,SAAS,uBAAuB,EAGjE,CAAC"}

package/dist/kinds/compute-sources.descriptors.js

@@ -0,0 +1,93 @@
+/** When these quotes were read from the providers. */
+const QUOTED_AT = '2026-09-08T00:00:00.000Z';
+/**
+ * The Forge job contract caps a whole job at 7 days
+ * (`MAX_FORGE_ACTIONS_JOB_TIMEOUT_MINUTES`), and neither source imposes a
+ * shorter limit of its own that we have measured. This is that contract
+ * ceiling, not a provider limit — if a provider turns out to cap a lease
+ * sooner, the real number belongs here and selection will start refusing jobs
+ * that ask for longer, which is the correct outcome.
+ */
+const FORGE_JOB_CONTRACT_CEILING_SECONDS = 7 * 24 * 60 * 60;
+/**
+ * Cloudflare Containers `standard-4` — what `forge-ci-worker` runs on today
+ * (`wrangler.jsonc`, `instance_type: "standard-4"`): 4 vCPU, 12 GiB memory,
+ * 20 GB disk.
+ *
+ * Cloudflare bills memory and disk on PROVISIONED resources and CPU on ACTIVE
+ * usage only (a November 2025 pricing change), so the two rates are split.
+ * A CI job is CPU-bound almost by definition, so its real cost sits near
+ * `usdPerSecond + usdPerSecondCpuActive`; an idle container costs the floor.
+ */
+export const cfContainerStandard4 = {
+    kind: 'infra/compute-source',
+    id: 'cf-container-standard-4',
+    name: 'Cloudflare Containers standard-4',
+    description: '4 vCPU / 12 GiB / 20 GB Cloudflare container, the current Forge CI executor',
+    provides: { os: ['linux'], arch: ['x64'], labels: [] },
+    ephemeral: true,
+    cost: {
+        // Provisioned floor: memory + disk bill for the whole lease.
+        //   12 GiB × $0.0000025/GiB-s  +  20 GB × $0.00000007/GB-s
+        usdPerSecond: 12 * 0.0000025 + 20 * 0.00000007,
+        // Charged on top, only while the vCPUs are busy.
+        //   4 vCPU × $0.000020/vCPU-s
+        usdPerSecondCpuActive: 4 * 0.00002,
+        source: 'published',
+        confidence: 'high',
+        effectiveAt: QUOTED_AT,
+        note: 'developers.cloudflare.com/containers/pricing, read 2026-09-08. Excludes the $5/mo Workers Paid plan and the included monthly allotment (25 GiB-hours memory, 375 vCPU-minutes, 200 GB-hours disk), which are account-level and not attributable to one lease.'
+    },
+    ownerScope: 'vibes',
+    // Conservative: a Durable Object container sleeps on inactivity rather than
+    // holding reserved warm capacity we can hand to the next job.
+    warmPool: false,
+    maxLeaseSeconds: FORGE_JOB_CONTRACT_CEILING_SECONDS,
+    // Left false pending someone verifying an in-flight container can actually
+    // be torn down mid-job. False under-sells the source; a wrong true would
+    // have the allocator promise a cancellation it cannot perform.
+    supportsCancellation: false
+};
+/**
+ * DigitalOcean droplet `s-2vcpu-4gb`: 2 vCPU, 4 GiB memory, 80 GB disk.
+ *
+ * Billed per second with a floor of 60 seconds or $0.01, whichever is higher.
+ * At this size 60 seconds is $0.000595, so $0.01 is always the binding floor —
+ * which means a 10-second lease and a 16-minute lease cost the same.
+ */
+export const doDropletS2vcpu4gb = {
+    kind: 'infra/compute-source',
+    id: 'do-droplet-s-2vcpu-4gb',
+    name: 'DigitalOcean droplet s-2vcpu-4gb',
+    description: '2 vCPU / 4 GiB / 80 GB DigitalOcean droplet',
+    // No arm64: the account's own /v2/sizes listing returns no arm slugs at all,
+    // so claiming arm64 here would be a capability we cannot provision.
+    provides: { os: ['linux'], arch: ['x64'], labels: [] },
+    // A fleet host outlives the job it was leased for, which is precisely why
+    // it must not be handed unreviewed code.
+    ephemeral: false,
+    cost: {
+        // DigitalOcean's own published hourly rate for this slug, per second.
+        // Read live from GET /v2/sizes rather than divided out of the monthly price.
+        usdPerSecond: 0.03571 / 3600,
+        // "billed per second with a minimum charge of 60 seconds or $0.01,
+        // whichever is higher" — a floor on the lease, never added to it.
+        minimumUsd: 0.01,
+        source: 'published',
+        confidence: 'high',
+        effectiveAt: QUOTED_AT,
+        note: 'DigitalOcean GET /v2/sizes price_hourly=0.03571 for s-2vcpu-4gb, read 2026-09-08; minimum charge from docs.digitalocean.com/products/droplets/details/pricing. Bundled-plan usage is capped at 672h/month, which caps a long-lived host but not a single lease.'
+    },
+    ownerScope: 'vibes',
+    // A persistent host is reusable capacity by construction.
+    warmPool: true,
+    maxLeaseSeconds: FORGE_JOB_CONTRACT_CEILING_SECONDS,
+    // `vibes fleet destroy` exists and does this.
+    supportsCancellation: true
+};
+/** Every compute source we own, cheapest-first ordering left to the selector. */
+export const vibesComputeSources = [
+    cfContainerStandard4,
+    doDropletS2vcpu4gb
+];
+//# sourceMappingURL=compute-sources.descriptors.js.map

package/dist/kinds/compute-sources.descriptors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compute-sources.descriptors.js","sourceRoot":"","sources":["../../src/kinds/compute-sources.descriptors.ts"],"names":[],"mappings":"AAwBA,sDAAsD;AACtD,MAAM,SAAS,GAAG,0BAA0B,CAAC;AAE7C;;;;;;;GAOG;AACH,MAAM,kCAAkC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;AAE5D;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA4B;IAC5D,IAAI,EAAE,sBAAsB;IAC5B,EAAE,EAAE,yBAAyB;IAC7B,IAAI,EAAE,kCAAkC;IACxC,WAAW,EAAE,6EAA6E;IAC1F,QAAQ,EAAE,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE;IACtD,SAAS,EAAE,IAAI;IACf,IAAI,EAAE;QACL,6DAA6D;QAC7D,2DAA2D;QAC3D,YAAY,EAAE,EAAE,GAAG,SAAS,GAAG,EAAE,GAAG,UAAU;QAC9C,iDAAiD;QACjD,8BAA8B;QAC9B,qBAAqB,EAAE,CAAC,GAAG,OAAO;QAClC,MAAM,EAAE,WAAW;QACnB,UAAU,EAAE,MAAM;QAClB,WAAW,EAAE,SAAS;QACtB,IAAI,EAAE,+PAA+P;KACrQ;IACD,UAAU,EAAE,OAAO;IACnB,4EAA4E;IAC5E,8DAA8D;IAC9D,QAAQ,EAAE,KAAK;IACf,eAAe,EAAE,kCAAkC;IACnD,2EAA2E;IAC3E,yEAAyE;IACzE,+DAA+D;IAC/D,oBAAoB,EAAE,KAAK;CAC3B,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAA4B;IAC1D,IAAI,EAAE,sBAAsB;IAC5B,EAAE,EAAE,wBAAwB;IAC5B,IAAI,EAAE,kCAAkC;IACxC,WAAW,EAAE,6CAA6C;IAC1D,6EAA6E;IAC7E,oEAAoE;IACpE,QAAQ,EAAE,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE;IACtD,0EAA0E;IAC1E,yCAAyC;IACzC,SAAS,EAAE,KAAK;IAChB,IAAI,EAAE;QACL,sEAAsE;QACtE,6EAA6E;QAC7E,YAAY,EAAE,OAAO,GAAG,IAAI;QAC5B,mEAAmE;QACnE,kEAAkE;QAClE,UAAU,EAAE,IAAI;QAChB,MAAM,EAAE,WAAW;QACnB,UAAU,EAAE,MAAM;QAClB,WAAW,EAAE,SAAS;QACtB,IAAI,EAAE,iQAAiQ;KACvQ;IACD,UAAU,EAAE,OAAO;IACnB,0DAA0D;IAC1D,QAAQ,EAAE,IAAI;IACd,eAAe,EAAE,kCAAkC;IACnD,8CAA8C;IAC9C,oBAAoB,EAAE,IAAI;CAC1B,CAAC;AAEF,iFAAiF;AACjF,MAAM,CAAC,MAAM,mBAAmB,GAAuC;IACtE,oBAAoB;IACpB,kBAAkB;CAClB,CAAC"}

package/dist/kinds/container-registry.kind.d.ts

@@ -0,0 +1,62 @@
+/**
+ * Kind: infra/container-registry
+ *
+ * Provider-neutral container image registry descriptor.
+ */
+import * as z from 'zod/v4';
+import type { RuntimeDescriptor } from '@vibesdotdev/kernel/schemas/descriptor';
+import type { KindContext } from '@vibesdotdev/kernel/schemas/kind';
+/**
+ * Adapter-specific configuration: the adapter id plus its own fields. Each
+ * adapter package defines and parses its own config schema (DigitalOcean's
+ * container registry config lives in
+ * `@vibesdotdev/integrations-digitalocean`); this kind names no provider,
+ * so a config for any adapter — including one contributed by a user
+ * plugin — parses here, and the adapter validates its own grammar.
+ */
+export declare const ContainerRegistryConfigSchema: z.ZodObject<{
+    adapter: z.ZodString;
+}, z.core.$loose>;
+export type ContainerRegistryConfig = z.infer<typeof ContainerRegistryConfigSchema>;
+export declare const ContainerRegistryDescriptorSchema: z.ZodObject<{
+    id: z.ZodString;
+    name: z.ZodOptional<z.ZodString>;
+    description: z.ZodOptional<z.ZodString>;
+    tags: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    hardware: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    enabled: z.ZodOptional<z.ZodBoolean>;
+    priority: z.ZodOptional<z.ZodNumber>;
+    capabilityId: z.ZodOptional<z.ZodString>;
+    requiredContext: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    optionalContext: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    retention: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+        maxAgeDays: z.ZodOptional<z.ZodNumber>;
+        maxEntries: z.ZodOptional<z.ZodNumber>;
+        maxBytes: z.ZodOptional<z.ZodNumber>;
+        cascadeFrom: z.ZodOptional<z.ZodString>;
+        ageField: z.ZodOptional<z.ZodString>;
+        reason: z.ZodString;
+        enforcedBy: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>]>>;
+    kind: z.ZodLiteral<"infra/container-registry">;
+    region: z.ZodOptional<z.ZodString>;
+    tier: z.ZodOptional<z.ZodEnum<{
+        starter: "starter";
+        basic: "basic";
+        professional: "professional";
+    }>>;
+    config: z.ZodOptional<z.ZodObject<{
+        adapter: z.ZodString;
+    }, z.core.$loose>>;
+}, z.core.$strip>;
+export type ContainerRegistryDescriptor = z.infer<typeof ContainerRegistryDescriptorSchema>;
+declare class DefaultContainerRegistryImplementation {
+    readonly descriptor: RuntimeDescriptor;
+    readonly context: KindContext;
+    /** The descriptor as this kind's schema reads it. */
+    readonly config: ContainerRegistryDescriptor;
+    constructor(descriptor: RuntimeDescriptor, context: KindContext);
+}
+export declare const containerRegistryKind: import("@vibesdotdev/kernel").RuntimeKindDescriptorRecord<DefaultContainerRegistryImplementation>;
+export {};
+//# sourceMappingURL=container-registry.kind.d.ts.map

package/dist/kinds/container-registry.kind.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"container-registry.kind.d.ts","sourceRoot":"","sources":["../../src/kinds/container-registry.kind.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAG5B,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wCAAwC,CAAC;AAChF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AAUpE;;;;;;;GAOG;AACH,eAAO,MAAM,6BAA6B;;iBAExC,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF,eAAO,MAAM,iCAAiC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAE5C,CAAC;AAEH,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iCAAiC,CAAC,CAAC;AAE5F,cAAM,sCAAsC;aAI1B,UAAU,EAAE,iBAAiB;aAC7B,OAAO,EAAE,WAAW;IAJrC,qDAAqD;IACrD,QAAQ,CAAC,MAAM,EAAE,2BAA2B,CAAC;gBAE5B,UAAU,EAAE,iBAAiB,EAC7B,OAAO,EAAE,WAAW;CAKrC;AAED,eAAO,MAAM,qBAAqB,mGAQhC,CAAC"}

package/dist/kinds/container-registry.kind.js

@@ -0,0 +1,47 @@
+/**
+ * Kind: infra/container-registry
+ *
+ * Provider-neutral container image registry descriptor.
+ */
+import * as z from 'zod/v4';
+import { createRuntimeKind } from '@vibesdotdev/kernel/factory/kind';
+import { RuntimeDescriptorSchema } from '@vibesdotdev/kernel/schemas/descriptor';
+import { readKindDescriptor } from "./read-descriptor.js";
+import { INFRA_DISCOVERY_PATTERNS } from "./discovery.js";
+const ContainerRegistryBaseSchema = RuntimeDescriptorSchema.extend({
+    kind: z.literal('infra/container-registry'),
+    region: z.string().min(1).optional(),
+    tier: z.enum(['starter', 'basic', 'professional']).optional()
+});
+/**
+ * Adapter-specific configuration: the adapter id plus its own fields. Each
+ * adapter package defines and parses its own config schema (DigitalOcean's
+ * container registry config lives in
+ * `@vibesdotdev/integrations-digitalocean`); this kind names no provider,
+ * so a config for any adapter — including one contributed by a user
+ * plugin — parses here, and the adapter validates its own grammar.
+ */
+export const ContainerRegistryConfigSchema = z.looseObject({
+    adapter: z.string().min(1)
+});
+export const ContainerRegistryDescriptorSchema = ContainerRegistryBaseSchema.extend({
+    config: ContainerRegistryConfigSchema.optional()
+});
+class DefaultContainerRegistryImplementation {
+    descriptor;
+    context;
+    /** The descriptor as this kind's schema reads it. */
+    config;
+    constructor(descriptor, context) {
+        this.descriptor = descriptor;
+        this.context = context;
+        this.config = readKindDescriptor(ContainerRegistryDescriptorSchema, descriptor);
+    }
+}
+export const containerRegistryKind = createRuntimeKind({
+    id: 'infra/container-registry',
+    descriptorSchema: ContainerRegistryDescriptorSchema,
+    defaultImplementation: DefaultContainerRegistryImplementation,
+    discoveryPatterns: INFRA_DISCOVERY_PATTERNS
+});
+//# sourceMappingURL=container-registry.kind.js.map

package/dist/kinds/container-registry.kind.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"container-registry.kind.js","sourceRoot":"","sources":["../../src/kinds/container-registry.kind.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AAGjF,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAE1D,MAAM,2BAA2B,GAAG,uBAAuB,CAAC,MAAM,CAAC;IAClE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC;IAC3C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACpC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC7D,CAAC,CAAC;AAEH;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,WAAW,CAAC;IAC1D,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC1B,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,iCAAiC,GAAG,2BAA2B,CAAC,MAAM,CAAC;IACnF,MAAM,EAAE,6BAA6B,CAAC,QAAQ,EAAE;CAChD,CAAC,CAAC;AAIH,MAAM,sCAAsC;IAI1B;IACA;IAJjB,qDAAqD;IAC5C,MAAM,CAA8B;IAC7C,YACiB,UAA6B,EAC7B,OAAoB;QADpB,eAAU,GAAV,UAAU,CAAmB;QAC7B,YAAO,GAAP,OAAO,CAAa;QAEpC,IAAI,CAAC,MAAM,GAAG,kBAAkB,CAAC,iCAAiC,EAAE,UAAU,CAAC,CAAC;IACjF,CAAC;CAED;AAED,MAAM,CAAC,MAAM,qBAAqB,GAAG,iBAAiB,CAGpD;IACD,EAAE,EAAE,0BAA0B;IAC9B,gBAAgB,EAAE,iCAAiC;IACnD,qBAAqB,EAAE,sCAAsC;IAC7D,iBAAiB,EAAE,wBAAwB;CAC3C,CAAC,CAAC"}

package/dist/kinds/database-migrator.kind.d.ts

@@ -0,0 +1,6 @@
+import { type DatabaseMigratorImplementation } from '../schemas/database-migration.ts';
+export declare const DATABASE_MIGRATOR_KIND = "infra/database-migrator";
+/** Schema-only: every engine registers its own implementation. */
+/** Engines are constructed with the resolving runtime itself: they reach its secrets, execution and filesystem. */
+export declare const databaseMigratorKind: import("@vibesdotdev/kernel").RuntimeKindDescriptorRecord<DatabaseMigratorImplementation>;
+//# sourceMappingURL=database-migrator.kind.d.ts.map

package/dist/kinds/database-migrator.kind.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"database-migrator.kind.d.ts","sourceRoot":"","sources":["../../src/kinds/database-migrator.kind.ts"],"names":[],"mappings":"AAoBA,OAAO,EAGN,KAAK,8BAA8B,EACnC,MAAM,kCAAkC,CAAC;AAE1C,eAAO,MAAM,sBAAsB,4BAA4B,CAAC;AAEhE,kEAAkE;AAClE,mHAAmH;AACnH,eAAO,MAAM,oBAAoB,2FAI/B,CAAC"}

package/dist/kinds/database-migrator.kind.js

@@ -0,0 +1,28 @@
+/**
+ * Kind: infra/database-migrator
+ *
+ * Applies an app's schema migrations to the databases it declares. One
+ * implementation per database engine and provider (Cloudflare D1 through
+ * wrangler, Postgres, Turso, ...) registers against this kind; the deploy
+ * driver resolves every registered migrator at call time and asks each which
+ * of the app's databases it serves. Nothing here names a provider.
+ *
+ * The migration files come from a migration format (`storage/migration-format`,
+ * e.g. a drizzle journal), named by id on each target. The driver owns the
+ * ledger semantics every engine shares: pending = journal minus ledger, apply
+ * one file then record it, never record a failure, adopt exact receipts from an
+ * older ledger by intersection with the current journal. The engine owns how
+ * statements run and how its ledger is spelled. Contracts: `../schemas/database-migration.ts`.
+ */
+import { createRuntimeKind } from '@vibesdotdev/kernel/factory/kind';
+import { INFRA_DISCOVERY_PATTERNS } from "./discovery.js";
+import { DatabaseMigratorDescriptorSchema } from "../schemas/database-migration.js";
+export const DATABASE_MIGRATOR_KIND = 'infra/database-migrator';
+/** Schema-only: every engine registers its own implementation. */
+/** Engines are constructed with the resolving runtime itself: they reach its secrets, execution and filesystem. */
+export const databaseMigratorKind = createRuntimeKind({
+    id: DATABASE_MIGRATOR_KIND,
+    descriptorSchema: DatabaseMigratorDescriptorSchema,
+    discoveryPatterns: INFRA_DISCOVERY_PATTERNS
+});
+//# sourceMappingURL=database-migrator.kind.js.map

package/dist/kinds/database-migrator.kind.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"database-migrator.kind.js","sourceRoot":"","sources":["../../src/kinds/database-migrator.kind.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAGrE,OAAO,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAC1D,OAAO,EACN,gCAAgC,EAGhC,MAAM,kCAAkC,CAAC;AAE1C,MAAM,CAAC,MAAM,sBAAsB,GAAG,yBAAyB,CAAC;AAEhE,kEAAkE;AAClE,mHAAmH;AACnH,MAAM,CAAC,MAAM,oBAAoB,GAAG,iBAAiB,CAAwF;IAC5I,EAAE,EAAE,sBAAsB;IAC1B,gBAAgB,EAAE,gCAAgC;IAClD,iBAAiB,EAAE,wBAAwB;CAC3C,CAAC,CAAC"}