@vibesdotdev/infra-deploy 0.0.1 → 1.0.0-rc.4

package/dist/storage/deployment-runs.storage.descriptor.js

@@ -0,0 +1,36 @@
+import { DeploymentRunsSchema } from "./deployment-runs.schema.js";
+export const deploymentRunsStorageDescriptor = {
+    kind: 'storage/manifest',
+    id: 'infra-deploy.deployment-runs',
+    name: 'Infra Deploy Run Ledger',
+    description: 'Append-only run ledger for canonical vibes infra deploy executions, with sanitized status and provider metadata.',
+    namespace: 'infra-deploy.deployment-runs',
+    schema: DeploymentRunsSchema,
+    dataType: 'records',
+    idField: 'runId',
+    allowedAdapters: ['storage.localdb', 'storage.json', 'storage.cloud-api'],
+    defaultAdapter: 'storage.localdb',
+    adapterConfig: {
+        'storage.localdb': {
+            dbName: 'infra-deploy',
+            tableName: 'deployment_runs'
+        },
+        'storage.json': {
+            filename: 'infra-deploy-runs.json'
+        },
+        'storage.cloud-api': {
+            ownerApp: 'system',
+            endpoint: '/api/internal/deploy/runs',
+            idField: 'runId'
+        }
+    },
+    scope: 'project',
+    sensitiveFields: [],
+    version: 1,
+    customTables: false,
+    internal: true,
+    enabled: true,
+    tags: ['infra', 'deploy', 'audit', 'operations']
+};
+export default deploymentRunsStorageDescriptor;
+//# sourceMappingURL=deployment-runs.storage.descriptor.js.map

package/dist/storage/deployment-runs.storage.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deployment-runs.storage.descriptor.js","sourceRoot":"","sources":["../../src/storage/deployment-runs.storage.descriptor.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAEnE,MAAM,CAAC,MAAM,+BAA+B,GAA8B;IACzE,IAAI,EAAE,kBAAkB;IACxB,EAAE,EAAE,8BAA8B;IAClC,IAAI,EAAE,yBAAyB;IAC/B,WAAW,EACV,kHAAkH;IACnH,SAAS,EAAE,8BAA8B;IACzC,MAAM,EAAE,oBAAoB;IAC5B,QAAQ,EAAE,SAAS;IACnB,OAAO,EAAE,OAAO;IAChB,eAAe,EAAE,CAAC,iBAAiB,EAAE,cAAc,EAAE,mBAAmB,CAAC;IACzE,cAAc,EAAE,iBAAiB;IACjC,aAAa,EAAE;QACd,iBAAiB,EAAE;YAClB,MAAM,EAAE,cAAc;YACtB,SAAS,EAAE,iBAAiB;SAC5B;QACD,cAAc,EAAE;YACf,QAAQ,EAAE,wBAAwB;SAClC;QACD,mBAAmB,EAAE;YACpB,QAAQ,EAAE,QAAQ;YAClB,QAAQ,EAAE,2BAA2B;YACrC,OAAO,EAAE,OAAO;SAChB;KACD;IACD,KAAK,EAAE,SAAS;IAChB,eAAe,EAAE,EAAE;IACnB,OAAO,EAAE,CAAC;IACV,YAAY,EAAE,KAAK;IACnB,QAAQ,EAAE,IAAI;IACd,OAAO,EAAE,IAAI;IACb,IAAI,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,YAAY,CAAC;CAChD,CAAC;AAEF,eAAe,+BAA+B,CAAC"}

package/package.json

@@ -1,73 +1,95 @@
 {
   "name": "@vibesdotdev/infra-deploy",
-  "version": "0.0.1",
-  "type": "module",
+  "version": "1.0.0-rc.4",
+  "dependencies": {
+    "@vibesdotdev/auth": "^1.0.0-rc.3",
+    "@vibesdotdev/config": "^1.0.0-rc.3",
+    "@vibesdotdev/crypto": "^1.0.0-rc.3",
+    "@vibesdotdev/filesystem": "^1.0.0-rc.2",
+    "@vibesdotdev/git-operations": "^1.0.0-rc.2",
+    "@vibesdotdev/infra-core": "^1.0.0-rc.4",
+    "@vibesdotdev/kernel": "^1.0.0-rc.6",
+    "@vibesdotdev/kernel-rpc": "^1.0.0-rc.2",
+    "@vibesdotdev/logging": "^1.0.0-rc.4",
+    "@vibesdotdev/paths": "^1.0.0-rc.3",
+    "@vibesdotdev/secrets": "^1.0.0-rc.3",
+    "@vibesdotdev/shared": "^1.0.0-rc.4",
+    "@vibesdotdev/storage": "^1.0.0-rc.3",
+    "@vibesdotdev/workers": "^1.0.0-rc.2",
+    "@vibesdotdev/workspace-schemas": "^1.0.0-rc.2",
+    "semver": "^7.8.5",
+    "zod": "^4.6.7"
+  },
+  "peerDependencies": {
+    "@vibesdotdev/registry": "^1.0.0-rc.3",
+    "@vibesdotdev/kernel": "^1.0.0-rc.6",
+    "@vibesdotdev/cli": "^1.0.0-rc.2",
+    "@vibesdotdev/execution-local": "^1.0.0-rc.3",
+    "@vibesdotdev/integrations": "^1.0.0-rc.2",
+    "@vibesdotdev/surface-sveltekit": "^1.0.0-rc.3"
+  },
   "main": "./dist/index.js",
-  "types": "./dist/index.d.ts",
   "exports": {
     ".": {
+      "bun": "./dist/index.js",
       "types": "./dist/index.d.ts",
-      "bun": "./src/index.ts",
       "import": "./dist/index.js",
       "default": "./dist/index.js"
     },
     "./plugin": {
+      "bun": "./dist/infra-deploy.plugin.js",
       "types": "./dist/infra-deploy.plugin.d.ts",
-      "bun": "./src/infra-deploy.plugin.ts",
       "import": "./dist/infra-deploy.plugin.js",
       "default": "./dist/infra-deploy.plugin.js"
     },
+    "./cli/plugin": {
+      "bun": "./dist/cli/plugin.js",
+      "types": "./dist/cli/plugin.d.ts",
+      "import": "./dist/cli/plugin.js",
+      "default": "./dist/cli/plugin.js"
+    },
     "./config-loader": {
+      "bun": "./dist/config-loader.js",
       "types": "./dist/config-loader.d.ts",
-      "bun": "./src/config-loader.ts",
       "import": "./dist/config-loader.js",
       "default": "./dist/config-loader.js"
     },
     "./regenerate": {
+      "bun": "./dist/regenerate.js",
       "types": "./dist/regenerate.d.ts",
-      "bun": "./src/regenerate.ts",
       "import": "./dist/regenerate.js",
       "default": "./dist/regenerate.js"
+    },
+    "./release/latest-manifest": {
+      "bun": "./dist/cli/release/cli/latest-manifest.js",
+      "types": "./dist/cli/release/cli/latest-manifest.d.ts",
+      "import": "./dist/cli/release/cli/latest-manifest.js",
+      "default": "./dist/cli/release/cli/latest-manifest.js"
+    },
+    "./cli/node/repository-collection": {
+      "bun": "./dist/cli/shared/repository-collection.js",
+      "types": "./dist/cli/shared/repository-collection.d.ts",
+      "import": "./dist/cli/shared/repository-collection.js",
+      "default": "./dist/cli/shared/repository-collection.js"
+    },
+    "./cli/node/runtime-execution": {
+      "bun": "./dist/cli/shared/runtime-execution.js",
+      "types": "./dist/cli/shared/runtime-execution.d.ts",
+      "import": "./dist/cli/shared/runtime-execution.js",
+      "default": "./dist/cli/shared/runtime-execution.js"
+    },
+    "./cli/run/immutable-deployment-release.program": {
+      "bun": "./dist/cli/run/immutable-deployment-release.program.js",
+      "types": "./dist/cli/run/immutable-deployment-release.program.d.ts",
+      "import": "./dist/cli/run/immutable-deployment-release.program.js",
+      "default": "./dist/cli/run/immutable-deployment-release.program.js"
     }
   },
-  "publishConfig": {
-    "registry": "https://registry.npmjs.org",
-    "access": "public"
-  },
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/vibesdotdev/monorepo.git",
-    "directory": "packages/infra-deploy"
-  },
-  "peerDependencies": {
-    "@vibesdotdev/runtime": "0.0.1",
-    "@vibesdotdev/cli": "0.0.1"
-  },
-  "dependencies": {
-    "@vibesdotdev/infra-core": "0.0.1",
-    "@vibesdotdev/connector-cloudflare": "0.0.1",
-    "@vibesdotdev/infra-doks": "0.0.1",
-    "@vibesdotdev/config": "0.0.1",
-    "@vibesdotdev/infra-cloudflare": "0.0.1"
-  },
-  "scripts": {
-    "check": "bun --bun tsc -p tsconfig.json --noEmit",
-    "build": "tsc -p tsconfig.json"
-  },
-  "license": "MIT",
   "files": [
     "dist",
-    "src",
-    "bin",
     "README.md",
-    "SPEC.md",
     "LICENSE",
-    "!src/**/__tests__/**",
-    "!src/**/__stubs__/**",
-    "!src/**/*.test.ts",
-    "!src/**/*.test.tsx",
-    "!src/**/*.spec.ts",
-    "!src/**/*.spec.tsx",
+    "bin",
     "!dist/**/__tests__/**",
     "!dist/**/__stubs__/**",
     "!dist/**/*.test.js",
@@ -79,7 +101,53 @@
     "!dist/**/*.spec.d.ts",
     "!dist/**/*.spec.d.ts.map"
   ],
+  "scripts": {
+    "lint": "node ../node_modules/@vibesdotdev/internal-oxlint-toolchain/ratchet.mjs .",
+    "prebuild": "rm -rf dist",
+    "test": "${BUN:-bun} test src",
+    "check": "${BUN:-bun} --bun tsc -p tsconfig.json --noEmit",
+    "build": "tsc -p tsconfig.build.json"
+  },
+  "repository": {
+    "type": "git",
+    "url": "ssh://git@git.vibes.dev/vibesdotdev/framework.git",
+    "directory": "infra-deploy"
+  },
+  "publishConfig": {
+    "registry": "https://packages.vibes.dev",
+    "access": "public"
+  },
   "vibes": {
-    "visibility": "public-framework"
+    "visibility": "public",
+    "registry": {
+      "repositoryId": "4b1374d4-6830-4bfd-98e3-de66416368a8",
+      "directory": "infra-deploy"
+    },
+    "handedRuntimeLogging": true
+  },
+  "type": "module",
+  "types": "./dist/index.d.ts",
+  "license": "MIT",
+  "description": "Deployment orchestration and CLI commands for Vibes infrastructure packages.",
+  "homepage": "https://docs.vibes.dev/infra-deploy",
+  "bugs": {
+    "url": "https://docs.vibes.dev/infra-deploy#support"
+  },
+  "peerDependenciesMeta": {
+    "@vibesdotdev/execution-local": {
+      "optional": true
+    },
+    "@vibesdotdev/integrations": {
+      "optional": true
+    },
+    "@vibesdotdev/surface-sveltekit": {
+      "optional": true
+    }
+  },
+  "gitHead": "6c90364649d9a94d238d81180ebb03adf5017263",
+  "_vibes_source": {
+    "repo": "ssh://git@git.vibes.dev/vibesdotdev/framework.git",
+    "sha": "6c90364649d9a94d238d81180ebb03adf5017263",
+    "workspaceDigest": "sha256:bf7d81191ab34adf86649e8a54051d2d896a2ff346cda7cc4ae6c5c0a23152fa"
   }
 }

package/SPEC.md

@@ -1,181 +0,0 @@
-# `@vibesdotdev/infra-deploy`
-
-User-facing infra-deploy surface for the vibes CLI. Anyone running `vibes` can
-declare a `deployment.config.ts` for their own app and ship it to their own
-cloud account — the package loads the config, **resolves the right
-`runtime/client` for the declared provider**, and asks it to run the deploy.
-Registered as a `runtime/plugin` consumed by
-[`apps/cli-bin`](../../apps/cli-bin/SPEC.md). Vibes uses the same surface to
-dogfood its own deploys. Commands are available under `vibes infra deploy …`.
-npm publishing support is available under `vibes infra npm …`.
-
-## Owns
-
-- `runtime/plugin` (`infra-deploy`): registers `cli/group` `infra-deploy` and `cli/command`
-  descriptors `infra-deploy.run`, `infra-deploy.list`, `infra-deploy.regenerate`,
-  `infra-logs`, plus `cli/group` `infra-npm` and `cli/command`
-  `infra-npm.publish`
-- **Config loader** (`./config-loader`): resolves
-  `deployment.config.{ts,js,mjs}` from an app dir, validates the exported
-  `AppDeployment`, returns
-  `{ configPath, appDir, deployment, provider, raw, managed, wranglerJsoncString, workerName }`
-- **wrangler.jsonc regen orchestrator** (`./regenerate`): `regenerateApp`,
-  `regenerateAll`, `regenExitCode`. Used by the CLI's
-  `vibes infra deploy regenerate` command and as the pre-deploy drift gate
-  in the CLI run handler. Comparison is read-only by default; `--write`
-  rewrites the on-disk file.
-- **CLI dispatch** (`./cli/run`): translates an `AppDeployment` plus operator
-  flags into the right `runtime/client` call. The dispatch knows the
-  provider → client-id map and nothing about provider internals:
-  - `provider: 'cloudflare-workers'` →
-    `getCloudflareWorkersDeployClient()` (from
-    `@vibesdotdev/connector-cloudflare/client`, runtime-client id
-    `cloudflare-workers-deploy`)
-  - `provider: 'digitalocean-app'` →
-    `getDigitalOceanAppDeployClient()` (from
-    `@vibesdotdev/infra-doks/client`, runtime-client id
-    `digitalocean-app-deploy`)
-- **Deployment-run records** (`storage/manifest<DeploymentRun>` id `infra-deploy.deployment-runs`): both
-  provider dispatch arms write a `DeploymentRun` row on dispatch — `{ appId,
-  provider, status: 'started' | 'succeeded' | 'failed', startedAt, finishedAt,
-  actorScope, deploymentConfigHash, providerResourceId, logsRef }`. Reads via
-  `runtime.query('storage/manifest').withId('infra-deploy.deployment-runs')`.
-  The manifest is registered by this package's plugin so any consumer (admin
-  UI, `vibes infra deploy list`, MCP) resolves it through runtime.
-- **npm publish command** (`./cli/npm`): packs package directories, resolves an
-  npm token through `secrets/store`, writes a temporary npm config outside the
-  repo, publishes the tarball with npm, and deletes the temporary config.
-
-## Does not own
-
-- `AppDeployment` schema → [`infra-core`](../infra-core/SPEC.md)
-  (`@vibesdotdev/infra-core/deployment`)
-- Per-app `deployment.config.ts` files — each app (vibes-internal or
-  end-user) authors its own
-- **The actual wrangler invocation** —
-  [`@vibesdotdev/connector-cloudflare`](../connector-cloudflare) owns the
-  `CloudflareWorkersDeployClient` (`runtime/client` id
-  `cloudflare-workers-deploy`). `infra-deploy` resolves it via
-  `getCloudflareWorkersDeployClient()`; it never imports
-  `node:child_process` or shells out to `wrangler` directly.
-- **The actual DigitalOcean App Platform API call** —
-  [`@vibesdotdev/infra-doks`](../infra-doks/SPEC.md) owns the
-  `DigitalOceanAppDeployClient` (`runtime/client` id
-  `digitalocean-app-deploy`). `infra-deploy` resolves it via
-  `getDigitalOceanAppDeployClient()`; it never calls
-  `https://api.digitalocean.com` directly.
-- Cloudflare runtime + tooling primitives →
-  [`infra-cloudflare`](../infra-cloudflare/SPEC.md)
-- DigitalOcean infrastructure primitives →
-  [`infra-doks`](../infra-doks/SPEC.md)
-- App build pipelines — the resolved deploy client runs each app's
-  `deployment.build.buildCommand` (or skips it when `skipBuild` is set)
-- Long-lived cloud-account credentials → end-state pulls from
-  [`packages/secrets`](../secrets/SPEC.md) (see migration debt)
-- CI/CD orchestration — this is a developer-local / ops-local CLI, not a
-  workflow runner
-- Long-lived npm token files. `vibes infra npm publish` may create an
-  ephemeral npm config in the OS temp directory for the duration of a publish,
-  but it must not write a token to the workspace or user-level npm config.
-
-## Hard rules
-
-- Provider dispatch is driven by `deployment.provider` from the loaded config.
-  The CLI never branches on `hardware` / `connectionMode` / `isCloud`.
-- Unsupported `provider` values are a hard failure: `ui.error` +
-  `process.exitCode = 1`. No silent default.
-- Provider work resolves via `runtime/client` lookups. The CLI does not
-  import provider adapter code directly. Adding a new provider means:
-  (1) the owning package registers a `runtime/client` descriptor + loader,
-  (2) the owning package exposes a typed `getXyzDeployClient()` helper, and
-  (3) the CLI dispatch case calls that helper. No new `./providers/<name>.ts`
-  in this package.
-- `loadDeploymentConfig` requires the resolved object to carry `appId` and a
-  string `provider`. Either missing is a hard failure.
-- Pre-deploy regen gate is mandatory for Cloudflare: the CLI run handler
-  calls `regenerateApp(appDir, { mode: 'check' })` and refuses to deploy on
-  `drift` or `error`. The gate is opt-in (`managed: true`) per app until
-  every app is migrated.
-- The package never redefines the `AppDeployment` schema. It imports the
-  type from `@vibesdotdev/infra-core/deployment`.
-- Both provider dispatch arms MUST write a `DeploymentRun` row through the
-  `infra-deploy.deployment-runs` manifest before invoking the resolved
-  client (status `started`) and on return (status `succeeded` or `failed`).
-  A dispatch arm that runs without recording a run is a hard violation —
-  there is no second history store, and downstream surfaces
-  (`/admin/deployments`, `vibes infra deploy list`) read from this
-  manifest only.
-- npm publish MUST pack first and publish the generated tarball from outside
-  the workspace so repo-level `.npmrc` settings cannot redirect public npm
-  packages to a private registry.
-- npm publish MUST require `--yes` for real publishes. `--dry-run` is allowed
-  without a token.
-- npm publish token remote sync, when needed, should use `vibes secrets push`
-  or `vibes secrets pull` with an explicit `--key NPM_TOKEN` filter and a
-  dry-run first. Cloudflare secrets backends are write-only and cannot be used
-  as pull sources for secret values.
-
-## Migration debt (not yet executed)
-
-- [x] **Rename.** `packages/deploy` → `packages/infra-deploy`;
-  `@vibesdotdev/deploy` → `@vibesdotdev/infra-deploy`.
-- [x] **CLI re-parent.** Commands now live under
-  `vibes infra deploy run` / `vibes infra deploy list` /
-  `vibes infra deploy regenerate`.
-- [x] **Dead flag.** `--commit-dirty` removed (was Pages-only; Pages provider
-  was removed).
-- [x] **Wildcard subpath.** `./providers/*` removed from `package.json#exports`.
-- [x] **Provider relocation.** `src/providers/*` deleted. Wrangler-invocation
-  logic moved to
-  `@vibesdotdev/connector-cloudflare/client/CloudflareWorkersDeployClient`;
-  DO App Platform logic moved to
-  `@vibesdotdev/infra-doks/client/DigitalOceanAppDeployClient`. Each is a
-  `runtime/client` descriptor registered by its owning plugin. The CLI run
-  handler resolves both via published helpers.
-- **MCP / agent tool surface.** Provider operations (deploy, list, plus future
-  `link-cloud-account`) should also register as `tools/tool` descriptors with
-  `purpose: ['direct', 'mcp', 'agent']` per the pattern in
-  [`packages/tools`](../tools/SPEC.md)
-  (`tool-help.descriptor.ts:11-17`), so end-users and agents can invoke
-  deploys via MCP. Zero `tools/tool` descriptors exist in this package today.
-- **Secrets integration.** `deployment.env` items marked `secret: true` are
-  forwarded as inline string values today by the DO client and ignored
-  entirely by the Cloudflare client. End-state: pull values via
-  [`packages/secrets`](../secrets/SPEC.md) and push them to provider secret
-  stores (`wrangler secret put` for Workers, `SECRET`-typed env on DO Apps).
-  Inline `value` should be the dev-only fallback, not the default. Lives
-  in the runtime-client implementations now.
-- **Cloud-account credential brokerage.** `DigitalOceanAppDeployClient`
-  reads `process.env.DIGITALOCEAN_API_TOKEN` directly
-  (`packages/infra-doks/src/client/digitalocean-app-deploy.client.ts`).
-  The `digitalocean-droplet` impl in
-  [`infra-doks`](../infra-doks/SPEC.md) faces the identical problem (same
-  env fallback). End-state: end-users connect their own Cloudflare /
-  DigitalOcean accounts through vibes auth +
-  [`packages/secrets`](../secrets/SPEC.md); both `DigitalOceanAppDeployClient`
-  and `do-droplet` resolve a shared
-  `cloud-credentials.digitalocean.token` secret key per actor scope. The
-  Cloudflare path inherits whatever `wrangler` finds — same shape, same
-  problem.
-
-## Public entrypoints
-
-`.`, `./plugin`, `./config-loader`, `./regenerate`.
-
-## Verification
-
-`bun --bun tsc -p tsconfig.json --noEmit` (the package's `check` script).
-Type-check only — no automated tests on disk; see
-PROD-CHECKLIST.md for the gap list.
-
-## Links
-
-- [infra-core/SPEC.md](../infra-core/SPEC.md)
-- [infra-cloudflare/SPEC.md](../infra-cloudflare/SPEC.md)
-- [infra-doks/SPEC.md](../infra-doks/SPEC.md)
-- [connector-cloudflare](../connector-cloudflare)
-- [secrets/SPEC.md](../secrets/SPEC.md)
-- [tools/SPEC.md](../tools/SPEC.md)
-- [runtime/SPEC.md](../runtime/SPEC.md)
-- [cli/SPEC.md](../cli/SPEC.md)
-- [cli-bin/SPEC.md](../../apps/cli-bin/SPEC.md)

package/src/cli/alerts/infra-alerts-create.cli-command.descriptor.ts

@@ -1,61 +0,0 @@
-import { createRuntimeAsset } from '@vibesdotdev/runtime';
-
-export default createRuntimeAsset({
-	id: 'infra-alerts.create',
-	kind: 'cli/command',
-	name: 'create',
-	description: 'Create a new alert policy on the active provider',
-	group: 'infra-alerts',
-	arguments: [
-		{
-			name: 'type',
-			description: 'Alert type: budget | usage | error-rate | latency | custom',
-			required: true,
-			variadic: false
-		}
-	],
-	options: [
-		{ flags: '--name <name>', description: 'Policy name (defaults to "<type> alert: <threshold>")' },
-		{
-			flags: '--threshold <n>',
-			description: 'Threshold value (USD for budget; events/req/% per usage/error-rate)',
-			default: '50'
-		},
-		{
-			flags: '--window <window>',
-			description: 'Rolling window for usage/error-rate/latency (5m, 15m, 1h, 6h, 24h, 7d, 30d)'
-		},
-		{
-			flags: '--filter <k=v>',
-			description: 'Adapter-specific filter (repeatable, e.g. --filter product=workers_observability_paid_events)',
-			variadic: true
-		},
-		{
-			flags: '--email <addr>',
-			description: 'Email destination (repeatable)',
-			variadic: true
-		},
-		{
-			flags: '--webhook <url>',
-			description: 'Webhook destination (repeatable)',
-			variadic: true
-		},
-		{
-			flags: '--provider <id>',
-			description: 'Provider impl id (default: cloudflare-alerts when available)'
-		},
-		{
-			flags: '--disabled',
-			description: 'Create the policy in disabled state',
-			default: false
-		},
-		{
-			flags: '-o, --output <format>',
-			description: 'Output format (text|json)',
-			default: 'text'
-		}
-	],
-	surfaces: ['cli'],
-	hardware: ['consumer', 'cloud'],
-	enabled: true
-});

package/src/cli/alerts/infra-alerts-create.cli-command.impl.ts

@@ -1,131 +0,0 @@
-/**
- * `vibes infra alerts create <type> --threshold ... --email ...`
- *
- * Creates one policy on the chosen provider. Resolves the impl via the
- * runtime, builds an `AlertPolicy` from CLI flags, and calls
- * `impl.createPolicy(policy)`. Reports the provider-assigned id on
- * success.
- */
-
-import { getVibesRuntime } from '@vibesdotdev/runtime';
-import { requestCLIExit, type UIContext } from '@vibesdotdev/cli/providers';
-import type {
-	AlertsImplementation,
-	AlertPolicy,
-	AlertMechanism,
-	AlertType,
-	InfraAlertsDescriptor
-} from '@vibesdotdev/infra-core/kinds';
-
-function readString(v: unknown): string | undefined {
-	return typeof v === 'string' && v.length > 0 ? v : undefined;
-}
-
-function readStringArray(v: unknown): string[] {
-	if (Array.isArray(v)) return v.filter((x): x is string => typeof x === 'string');
-	if (typeof v === 'string') return [v];
-	return [];
-}
-
-const VALID_TYPES = new Set<AlertType>(['budget', 'usage', 'error-rate', 'latency', 'custom']);
-
-function parseFilters(raw: string[]): Record<string, string> {
-	const out: Record<string, string> = {};
-	for (const entry of raw) {
-		const idx = entry.indexOf('=');
-		if (idx <= 0) continue;
-		out[entry.slice(0, idx)] = entry.slice(idx + 1);
-	}
-	return out;
-}
-
-export default {
-	async execute(args: Record<string, unknown>, opts: Record<string, unknown>): Promise<void> {
-		const runtime = await getVibesRuntime();
-		const ui = (await runtime.context('cli/ui')) as UIContext;
-
-		const typeArg = readString(args.type);
-		if (!typeArg || !VALID_TYPES.has(typeArg as AlertType)) {
-			ui.error(
-				`Invalid alert type. Got "${typeArg ?? '(missing)'}". Expected one of: ${Array.from(VALID_TYPES).join(', ')}`
-			);
-			requestCLIExit(1);
-			return;
-		}
-		const type = typeArg as AlertType;
-
-		const thresholdRaw = readString(opts.threshold) ?? '50';
-		const threshold = Number(thresholdRaw);
-		if (!Number.isFinite(threshold) || threshold < 0) {
-			ui.error(`Invalid --threshold "${thresholdRaw}"; must be a non-negative number.`);
-			requestCLIExit(1);
-			return;
-		}
-
-		const emails = readStringArray(opts.email);
-		const webhooks = readStringArray(opts.webhook);
-		const mechanisms: AlertMechanism[] = [
-			...emails.map((target): AlertMechanism => ({ kind: 'email', target })),
-			...webhooks.map((target): AlertMechanism => ({ kind: 'webhook', target }))
-		];
-		if (mechanisms.length === 0) {
-			ui.error('At least one --email or --webhook destination is required.');
-			requestCLIExit(1);
-			return;
-		}
-
-		const filters = parseFilters(readStringArray(opts.filter));
-		const name = readString(opts.name) ?? `${type} alert: ${threshold}`;
-		const window = readString(opts.window) as AlertPolicy['window'] | undefined;
-		const enabled = !(opts.disabled === true || opts.disabled === 'true');
-		const output = readString(opts.output) ?? 'text';
-		const providerFilter = readString(opts.provider);
-
-		const policy: AlertPolicy = {
-			name,
-			type,
-			threshold,
-			window,
-			filters,
-			mechanisms,
-			enabled
-		};
-
-		if (!runtime.hasKind('infra/alerts')) {
-			ui.error('infra/alerts kind not registered. Load a provider plugin (e.g. infra-cloudflare).');
-			requestCLIExit(1);
-			return;
-		}
-		const descriptors = runtime.assets('infra/alerts').descriptors() as InfraAlertsDescriptor[];
-		const target = providerFilter
-			? descriptors.find((d) => d.adapter === providerFilter || d.id === providerFilter)
-			: descriptors[0];
-
-		if (!target) {
-			ui.error(
-				`No matching alerts provider${providerFilter ? ` for --provider "${providerFilter}"` : ''}.`
-			);
-			requestCLIExit(1);
-			return;
-		}
-
-		try {
-			const impl = (await runtime
-				.query('infra/alerts')
-				.withId(target.id)
-				.resolve()) as AlertsImplementation;
-			const { providerId } = await impl.createPolicy(policy);
-
-			if (output === 'json') {
-				ui.json({ provider: target.adapter, providerId, policy });
-			} else {
-				ui.success(
-					`Created ${type} policy "${name}" on ${target.adapter} → providerId=${providerId}`
-				);
-			}
-		} catch (err) {
-			ui.error(`Failed to create policy: ${err instanceof Error ? err.message : String(err)}`);
-			requestCLIExit(1);
-		}
-	}
-};

package/src/cli/alerts/infra-alerts-delete.cli-command.descriptor.ts

@@ -1,36 +0,0 @@
-import { createRuntimeAsset } from '@vibesdotdev/runtime';
-
-export default createRuntimeAsset({
-	id: 'infra-alerts.delete',
-	kind: 'cli/command',
-	name: 'delete',
-	description: 'Delete an alert policy by provider id',
-	group: 'infra-alerts',
-	arguments: [
-		{
-			name: 'providerId',
-			description: 'Policy id on the provider (from `vibes infra alerts list`)',
-			required: true,
-			variadic: false
-		}
-	],
-	options: [
-		{
-			flags: '--provider <id>',
-			description: 'Provider impl id (default: cloudflare-alerts when available)'
-		},
-		{
-			flags: '-y, --yes',
-			description: 'Skip confirmation prompt',
-			default: false
-		},
-		{
-			flags: '-o, --output <format>',
-			description: 'Output format (text|json)',
-			default: 'text'
-		}
-	],
-	surfaces: ['cli'],
-	hardware: ['consumer', 'cloud'],
-	enabled: true
-});