@vibesdotdev/infra-deploy 0.0.1

package/package.json

@@ -0,0 +1,85 @@
+{
+  "name": "@vibesdotdev/infra-deploy",
+  "version": "0.0.1",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "bun": "./src/index.ts",
+      "import": "./dist/index.js",
+      "default": "./dist/index.js"
+    },
+    "./plugin": {
+      "types": "./dist/infra-deploy.plugin.d.ts",
+      "bun": "./src/infra-deploy.plugin.ts",
+      "import": "./dist/infra-deploy.plugin.js",
+      "default": "./dist/infra-deploy.plugin.js"
+    },
+    "./config-loader": {
+      "types": "./dist/config-loader.d.ts",
+      "bun": "./src/config-loader.ts",
+      "import": "./dist/config-loader.js",
+      "default": "./dist/config-loader.js"
+    },
+    "./regenerate": {
+      "types": "./dist/regenerate.d.ts",
+      "bun": "./src/regenerate.ts",
+      "import": "./dist/regenerate.js",
+      "default": "./dist/regenerate.js"
+    }
+  },
+  "publishConfig": {
+    "registry": "https://registry.npmjs.org",
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/vibesdotdev/monorepo.git",
+    "directory": "packages/infra-deploy"
+  },
+  "peerDependencies": {
+    "@vibesdotdev/runtime": "0.0.1",
+    "@vibesdotdev/cli": "0.0.1"
+  },
+  "dependencies": {
+    "@vibesdotdev/infra-core": "0.0.1",
+    "@vibesdotdev/connector-cloudflare": "0.0.1",
+    "@vibesdotdev/infra-doks": "0.0.1",
+    "@vibesdotdev/config": "0.0.1",
+    "@vibesdotdev/infra-cloudflare": "0.0.1"
+  },
+  "scripts": {
+    "check": "bun --bun tsc -p tsconfig.json --noEmit",
+    "build": "tsc -p tsconfig.json"
+  },
+  "license": "MIT",
+  "files": [
+    "dist",
+    "src",
+    "bin",
+    "README.md",
+    "SPEC.md",
+    "LICENSE",
+    "!src/**/__tests__/**",
+    "!src/**/__stubs__/**",
+    "!src/**/*.test.ts",
+    "!src/**/*.test.tsx",
+    "!src/**/*.spec.ts",
+    "!src/**/*.spec.tsx",
+    "!dist/**/__tests__/**",
+    "!dist/**/__stubs__/**",
+    "!dist/**/*.test.js",
+    "!dist/**/*.test.js.map",
+    "!dist/**/*.test.d.ts",
+    "!dist/**/*.test.d.ts.map",
+    "!dist/**/*.spec.js",
+    "!dist/**/*.spec.js.map",
+    "!dist/**/*.spec.d.ts",
+    "!dist/**/*.spec.d.ts.map"
+  ],
+  "vibes": {
+    "visibility": "public-framework"
+  }
+}

package/src/cli/alerts/infra-alerts-create.cli-command.descriptor.ts

@@ -0,0 +1,61 @@
+import { createRuntimeAsset } from '@vibesdotdev/runtime';
+
+export default createRuntimeAsset({
+	id: 'infra-alerts.create',
+	kind: 'cli/command',
+	name: 'create',
+	description: 'Create a new alert policy on the active provider',
+	group: 'infra-alerts',
+	arguments: [
+		{
+			name: 'type',
+			description: 'Alert type: budget | usage | error-rate | latency | custom',
+			required: true,
+			variadic: false
+		}
+	],
+	options: [
+		{ flags: '--name <name>', description: 'Policy name (defaults to "<type> alert: <threshold>")' },
+		{
+			flags: '--threshold <n>',
+			description: 'Threshold value (USD for budget; events/req/% per usage/error-rate)',
+			default: '50'
+		},
+		{
+			flags: '--window <window>',
+			description: 'Rolling window for usage/error-rate/latency (5m, 15m, 1h, 6h, 24h, 7d, 30d)'
+		},
+		{
+			flags: '--filter <k=v>',
+			description: 'Adapter-specific filter (repeatable, e.g. --filter product=workers_observability_paid_events)',
+			variadic: true
+		},
+		{
+			flags: '--email <addr>',
+			description: 'Email destination (repeatable)',
+			variadic: true
+		},
+		{
+			flags: '--webhook <url>',
+			description: 'Webhook destination (repeatable)',
+			variadic: true
+		},
+		{
+			flags: '--provider <id>',
+			description: 'Provider impl id (default: cloudflare-alerts when available)'
+		},
+		{
+			flags: '--disabled',
+			description: 'Create the policy in disabled state',
+			default: false
+		},
+		{
+			flags: '-o, --output <format>',
+			description: 'Output format (text|json)',
+			default: 'text'
+		}
+	],
+	surfaces: ['cli'],
+	hardware: ['consumer', 'cloud'],
+	enabled: true
+});

package/src/cli/alerts/infra-alerts-create.cli-command.impl.ts

@@ -0,0 +1,131 @@
+/**
+ * `vibes infra alerts create <type> --threshold ... --email ...`
+ *
+ * Creates one policy on the chosen provider. Resolves the impl via the
+ * runtime, builds an `AlertPolicy` from CLI flags, and calls
+ * `impl.createPolicy(policy)`. Reports the provider-assigned id on
+ * success.
+ */
+
+import { getVibesRuntime } from '@vibesdotdev/runtime';
+import { requestCLIExit, type UIContext } from '@vibesdotdev/cli/providers';
+import type {
+	AlertsImplementation,
+	AlertPolicy,
+	AlertMechanism,
+	AlertType,
+	InfraAlertsDescriptor
+} from '@vibesdotdev/infra-core/kinds';
+
+function readString(v: unknown): string | undefined {
+	return typeof v === 'string' && v.length > 0 ? v : undefined;
+}
+
+function readStringArray(v: unknown): string[] {
+	if (Array.isArray(v)) return v.filter((x): x is string => typeof x === 'string');
+	if (typeof v === 'string') return [v];
+	return [];
+}
+
+const VALID_TYPES = new Set<AlertType>(['budget', 'usage', 'error-rate', 'latency', 'custom']);
+
+function parseFilters(raw: string[]): Record<string, string> {
+	const out: Record<string, string> = {};
+	for (const entry of raw) {
+		const idx = entry.indexOf('=');
+		if (idx <= 0) continue;
+		out[entry.slice(0, idx)] = entry.slice(idx + 1);
+	}
+	return out;
+}
+
+export default {
+	async execute(args: Record<string, unknown>, opts: Record<string, unknown>): Promise<void> {
+		const runtime = await getVibesRuntime();
+		const ui = (await runtime.context('cli/ui')) as UIContext;
+
+		const typeArg = readString(args.type);
+		if (!typeArg || !VALID_TYPES.has(typeArg as AlertType)) {
+			ui.error(
+				`Invalid alert type. Got "${typeArg ?? '(missing)'}". Expected one of: ${Array.from(VALID_TYPES).join(', ')}`
+			);
+			requestCLIExit(1);
+			return;
+		}
+		const type = typeArg as AlertType;
+
+		const thresholdRaw = readString(opts.threshold) ?? '50';
+		const threshold = Number(thresholdRaw);
+		if (!Number.isFinite(threshold) || threshold < 0) {
+			ui.error(`Invalid --threshold "${thresholdRaw}"; must be a non-negative number.`);
+			requestCLIExit(1);
+			return;
+		}
+
+		const emails = readStringArray(opts.email);
+		const webhooks = readStringArray(opts.webhook);
+		const mechanisms: AlertMechanism[] = [
+			...emails.map((target): AlertMechanism => ({ kind: 'email', target })),
+			...webhooks.map((target): AlertMechanism => ({ kind: 'webhook', target }))
+		];
+		if (mechanisms.length === 0) {
+			ui.error('At least one --email or --webhook destination is required.');
+			requestCLIExit(1);
+			return;
+		}
+
+		const filters = parseFilters(readStringArray(opts.filter));
+		const name = readString(opts.name) ?? `${type} alert: ${threshold}`;
+		const window = readString(opts.window) as AlertPolicy['window'] | undefined;
+		const enabled = !(opts.disabled === true || opts.disabled === 'true');
+		const output = readString(opts.output) ?? 'text';
+		const providerFilter = readString(opts.provider);
+
+		const policy: AlertPolicy = {
+			name,
+			type,
+			threshold,
+			window,
+			filters,
+			mechanisms,
+			enabled
+		};
+
+		if (!runtime.hasKind('infra/alerts')) {
+			ui.error('infra/alerts kind not registered. Load a provider plugin (e.g. infra-cloudflare).');
+			requestCLIExit(1);
+			return;
+		}
+		const descriptors = runtime.assets('infra/alerts').descriptors() as InfraAlertsDescriptor[];
+		const target = providerFilter
+			? descriptors.find((d) => d.adapter === providerFilter || d.id === providerFilter)
+			: descriptors[0];
+
+		if (!target) {
+			ui.error(
+				`No matching alerts provider${providerFilter ? ` for --provider "${providerFilter}"` : ''}.`
+			);
+			requestCLIExit(1);
+			return;
+		}
+
+		try {
+			const impl = (await runtime
+				.query('infra/alerts')
+				.withId(target.id)
+				.resolve()) as AlertsImplementation;
+			const { providerId } = await impl.createPolicy(policy);
+
+			if (output === 'json') {
+				ui.json({ provider: target.adapter, providerId, policy });
+			} else {
+				ui.success(
+					`Created ${type} policy "${name}" on ${target.adapter} → providerId=${providerId}`
+				);
+			}
+		} catch (err) {
+			ui.error(`Failed to create policy: ${err instanceof Error ? err.message : String(err)}`);
+			requestCLIExit(1);
+		}
+	}
+};

package/src/cli/alerts/infra-alerts-delete.cli-command.descriptor.ts

@@ -0,0 +1,36 @@
+import { createRuntimeAsset } from '@vibesdotdev/runtime';
+
+export default createRuntimeAsset({
+	id: 'infra-alerts.delete',
+	kind: 'cli/command',
+	name: 'delete',
+	description: 'Delete an alert policy by provider id',
+	group: 'infra-alerts',
+	arguments: [
+		{
+			name: 'providerId',
+			description: 'Policy id on the provider (from `vibes infra alerts list`)',
+			required: true,
+			variadic: false
+		}
+	],
+	options: [
+		{
+			flags: '--provider <id>',
+			description: 'Provider impl id (default: cloudflare-alerts when available)'
+		},
+		{
+			flags: '-y, --yes',
+			description: 'Skip confirmation prompt',
+			default: false
+		},
+		{
+			flags: '-o, --output <format>',
+			description: 'Output format (text|json)',
+			default: 'text'
+		}
+	],
+	surfaces: ['cli'],
+	hardware: ['consumer', 'cloud'],
+	enabled: true
+});

package/src/cli/alerts/infra-alerts-delete.cli-command.impl.ts

@@ -0,0 +1,75 @@
+/**
+ * `vibes infra alerts delete <providerId>`
+ *
+ * Deletes a policy on the chosen provider. Requires explicit
+ * confirmation unless `--yes` is passed.
+ */
+
+import { getVibesRuntime } from '@vibesdotdev/runtime';
+import { requestCLIExit, type UIContext } from '@vibesdotdev/cli/providers';
+import type { AlertsImplementation, InfraAlertsDescriptor } from '@vibesdotdev/infra-core/kinds';
+
+function readString(v: unknown): string | undefined {
+	return typeof v === 'string' && v.length > 0 ? v : undefined;
+}
+
+function readBoolean(v: unknown): boolean {
+	return v === true || v === 'true';
+}
+
+export default {
+	async execute(args: Record<string, unknown>, opts: Record<string, unknown>): Promise<void> {
+		const runtime = await getVibesRuntime();
+		const ui = (await runtime.context('cli/ui')) as UIContext;
+
+		const providerId = readString(args.providerId);
+		if (!providerId) {
+			ui.error('A providerId is required. List policies with `vibes infra alerts list` first.');
+			requestCLIExit(1);
+			return;
+		}
+		const providerFilter = readString(opts.provider);
+		const yes = readBoolean(opts.yes);
+		const output = readString(opts.output) ?? 'text';
+
+		if (!runtime.hasKind('infra/alerts')) {
+			ui.error('infra/alerts kind not registered.');
+			requestCLIExit(1);
+			return;
+		}
+		const descriptors = runtime.assets('infra/alerts').descriptors() as InfraAlertsDescriptor[];
+		const target = providerFilter
+			? descriptors.find((d) => d.adapter === providerFilter || d.id === providerFilter)
+			: descriptors[0];
+		if (!target) {
+			ui.error('No matching alerts provider.');
+			requestCLIExit(1);
+			return;
+		}
+
+		if (!yes) {
+			ui.warn(
+				`About to delete alert policy "${providerId}" on ${target.adapter}. ` +
+					'Re-run with --yes to confirm.'
+			);
+			requestCLIExit(0);
+			return;
+		}
+
+		try {
+			const impl = (await runtime
+				.query('infra/alerts')
+				.withId(target.id)
+				.resolve()) as AlertsImplementation;
+			await impl.deletePolicy(providerId);
+			if (output === 'json') {
+				ui.json({ deleted: providerId, provider: target.adapter });
+			} else {
+				ui.success(`Deleted policy ${providerId} on ${target.adapter}`);
+			}
+		} catch (err) {
+			ui.error(`Delete failed: ${err instanceof Error ? err.message : String(err)}`);
+			requestCLIExit(1);
+		}
+	}
+};

package/src/cli/alerts/infra-alerts-list.cli-command.descriptor.ts

@@ -0,0 +1,27 @@
+import { createRuntimeAsset } from '@vibesdotdev/runtime';
+
+export default createRuntimeAsset({
+	id: 'infra-alerts.list',
+	kind: 'cli/command',
+	name: 'list',
+	description: 'List configured alert policies across providers',
+	group: 'infra-alerts',
+	options: [
+		{
+			flags: '--provider <id>',
+			description: 'Restrict to a single provider impl id (e.g. cloudflare-alerts)'
+		},
+		{
+			flags: '--environment <name>',
+			description: 'Vibes environment for secret resolution (local|dev|staging|production)'
+		},
+		{
+			flags: '-o, --output <format>',
+			description: 'Output format (text|json)',
+			default: 'text'
+		}
+	],
+	surfaces: ['cli'],
+	hardware: ['consumer', 'cloud'],
+	enabled: true
+});

package/src/cli/alerts/infra-alerts-list.cli-command.impl.ts

@@ -0,0 +1,88 @@
+/**
+ * `vibes infra alerts list`
+ *
+ * Walks all registered `infra/alerts` implementations and prints the
+ * combined set of live policies on each provider. `--output json`
+ * returns a structured payload for piping; default is a table.
+ */
+
+import { getVibesRuntime } from '@vibesdotdev/runtime';
+import { requestCLIExit, type UIContext } from '@vibesdotdev/cli/providers';
+import type { AlertsImplementation, AlertPolicy, InfraAlertsDescriptor } from '@vibesdotdev/infra-core/kinds';
+
+function readString(v: unknown): string | undefined {
+	return typeof v === 'string' && v.length > 0 ? v : undefined;
+}
+
+interface ProviderResult {
+	providerId: string;
+	descriptorId: string;
+	policies: Array<AlertPolicy & { providerId: string }>;
+	error?: string;
+}
+
+export default {
+	async execute(_args: Record<string, unknown>, opts: Record<string, unknown>): Promise<void> {
+		const runtime = await getVibesRuntime();
+		const ui = (await runtime.context('cli/ui')) as UIContext;
+
+		const providerFilter = readString(opts.provider);
+		const output = readString(opts.output) ?? 'text';
+
+		if (!runtime.hasKind('infra/alerts')) {
+			ui.warn('No infra/alerts kind registered. Ensure infra-cloudflare or sibling provider plugin is loaded.');
+			requestCLIExit(0);
+			return;
+		}
+
+		const descriptors = runtime.assets('infra/alerts').descriptors() as InfraAlertsDescriptor[];
+		if (descriptors.length === 0) {
+			if (output === 'json') ui.json([]);
+			else ui.info('No infra/alerts descriptors registered. Add a provider plugin (e.g. infra-cloudflare).');
+			return;
+		}
+
+		const results: ProviderResult[] = [];
+		for (const d of descriptors) {
+			if (providerFilter && d.adapter !== providerFilter && d.id !== providerFilter) continue;
+			try {
+				const impl = (await runtime
+					.query('infra/alerts')
+					.withId(d.id)
+					.resolve()) as AlertsImplementation;
+				const policies = await impl.listPolicies();
+				results.push({ providerId: d.adapter, descriptorId: d.id, policies });
+			} catch (err) {
+				results.push({
+					providerId: d.adapter,
+					descriptorId: d.id,
+					policies: [],
+					error: err instanceof Error ? err.message : String(err)
+				});
+			}
+		}
+
+		if (output === 'json') {
+			ui.json(results);
+			return;
+		}
+
+		for (const r of results) {
+			ui.info(`\n[${r.providerId}] (${r.descriptorId})`);
+			if (r.error) {
+				ui.error(`  ${r.error}`);
+				continue;
+			}
+			if (r.policies.length === 0) {
+				ui.info('  (no policies configured)');
+				continue;
+			}
+			for (const p of r.policies) {
+				const mech = p.mechanisms.map((m) => `${m.kind}:${m.target}`).join(', ');
+				ui.info(
+					`  ${(p.enabled ? '✓' : '✗')} ${p.type.padEnd(12)} ${p.name.padEnd(40)} threshold=${p.threshold} → ${mech}`
+				);
+			}
+		}
+	}
+};

package/src/cli/alerts/infra-alerts.cli-group.descriptor.ts

@@ -0,0 +1,12 @@
+import { createRuntimeAsset } from '@vibesdotdev/runtime';
+
+export default createRuntimeAsset({
+	id: 'infra-alerts',
+	kind: 'cli/group',
+	name: 'alerts',
+	description: 'Provider-agnostic alerting / notification policies (CF Notifications, DO Monitoring, …)',
+	parent: 'infra',
+	surfaces: ['cli'],
+	hardware: ['consumer', 'cloud'],
+	enabled: true
+});

package/src/cli/audit/infra-audit.cli-command.descriptor.ts

@@ -0,0 +1,28 @@
+import { createRuntimeAsset } from '@vibesdotdev/runtime';
+
+export default createRuntimeAsset({
+	id: 'infra-audit',
+	kind: 'cli/command',
+	name: 'audit',
+	description: 'Read-only sweep: workers/logs/alerts/RUM status across all registered providers',
+	group: 'infra',
+	options: [
+		{
+			flags: '--provider <id>',
+			description: 'Restrict to a single provider impl id'
+		},
+		{
+			flags: '--include <kinds>',
+			description: 'Comma-separated subset of kinds to audit (alerts,logs,observability,workers,rum)',
+			default: 'alerts,logs,observability'
+		},
+		{
+			flags: '-o, --output <format>',
+			description: 'Output format (text|json)',
+			default: 'text'
+		}
+	],
+	surfaces: ['cli'],
+	hardware: ['consumer', 'cloud'],
+	enabled: true
+});