@vibesdotdev/infra-deploy 0.0.2 → 1.0.0-rc.4

package/dist/cli/alerts/infra-alerts-list.cli-command.impl.js

@@ -5,15 +5,14 @@
  * combined set of live policies on each provider. `--output json`
  * returns a structured payload for piping; default is a table.
  */
-import { getVibesRuntime } from '@vibesdotdev/runtime';
+import { settle } from '@vibesdotdev/kernel';
 import { requestCLIExit } from '@vibesdotdev/cli/providers';
-function readString(v) {
-    return typeof v === 'string' && v.length > 0 ? v : undefined;
-}
+import { sanitizeInfraProviderFailure } from '@vibesdotdev/infra-core';
+import { readString } from "../shared/option-strings.js";
 export default {
-    async execute(_args, opts) {
-        const runtime = await getVibesRuntime();
-        const ui = (await runtime.context('cli/ui'));
+    async execute(_args, opts, context) {
+        const runtime = context.runtime;
+        const ui = await runtime.context('cli/ui');
         const providerFilter = readString(opts.provider);
         const output = readString(opts.output) ?? 'text';
         if (!runtime.hasKind('infra/alerts')) {
@@ -33,20 +32,22 @@ export default {
         for (const d of descriptors) {
             if (providerFilter && d.adapter !== providerFilter && d.id !== providerFilter)
                 continue;
-            try {
-                const impl = (await runtime
+            const outcome = await settle(async () => {
+                const impl = await runtime
                     .query('infra/alerts')
                     .withId(d.id)
-                    .resolve());
-                const policies = await impl.listPolicies();
-                results.push({ providerId: d.adapter, descriptorId: d.id, policies });
+                    .resolve();
+                return impl.listPolicies();
+            });
+            if (outcome.ok) {
+                results.push({ providerId: d.adapter, descriptorId: d.id, policies: outcome.value });
             }
-            catch (err) {
+            else {
                 results.push({
                     providerId: d.adapter,
                     descriptorId: d.id,
                     policies: [],
-                    error: err instanceof Error ? err.message : String(err)
+                    error: sanitizeInfraProviderFailure(outcome.cause).message
                 });
             }
         }

package/dist/cli/alerts/infra-alerts-list.cli-command.impl.js.map

@@ -1 +1 @@
-{"version":3,"file":"infra-alerts-list.cli-command.impl.js","sourceRoot":"","sources":["../../../src/cli/alerts/infra-alerts-list.cli-command.impl.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,cAAc,EAAkB,MAAM,4BAA4B,CAAC;AAG5E,SAAS,UAAU,CAAC,CAAU;IAC7B,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9D,CAAC;AASD,eAAe;IACd,KAAK,CAAC,OAAO,CAAC,KAA8B,EAAE,IAA6B;QAC1E,MAAM,OAAO,GAAG,MAAM,eAAe,EAAE,CAAC;QACxC,MAAM,EAAE,GAAG,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAc,CAAC;QAE1D,MAAM,cAAc,GAAG,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACjD,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC;QAEjD,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;YACtC,EAAE,CAAC,IAAI,CAAC,gGAAgG,CAAC,CAAC;YAC1G,cAAc,CAAC,CAAC,CAAC,CAAC;YAClB,OAAO;QACR,CAAC;QAED,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,WAAW,EAA6B,CAAC;QAC5F,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9B,IAAI,MAAM,KAAK,MAAM;gBAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;;gBAC9B,EAAE,CAAC,IAAI,CAAC,wFAAwF,CAAC,CAAC;YACvG,OAAO;QACR,CAAC;QAED,MAAM,OAAO,GAAqB,EAAE,CAAC;QACrC,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;YAC7B,IAAI,cAAc,IAAI,CAAC,CAAC,OAAO,KAAK,cAAc,IAAI,CAAC,CAAC,EAAE,KAAK,cAAc;gBAAE,SAAS;YACxF,IAAI,CAAC;gBACJ,MAAM,IAAI,GAAG,CAAC,MAAM,OAAO;qBACzB,KAAK,CAAC,cAAc,CAAC;qBACrB,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;qBACZ,OAAO,EAAE,CAAyB,CAAC;gBACrC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;gBAC3C,OAAO,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;YACvE,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACd,OAAO,CAAC,IAAI,CAAC;oBACZ,UAAU,EAAE,CAAC,CAAC,OAAO;oBACrB,YAAY,EAAE,CAAC,CAAC,EAAE;oBAClB,QAAQ,EAAE,EAAE;oBACZ,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;iBACvD,CAAC,CAAC;YACJ,CAAC;QACF,CAAC;QAED,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACvB,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACjB,OAAO;QACR,CAAC;QAED,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACzB,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,UAAU,MAAM,CAAC,CAAC,YAAY,GAAG,CAAC,CAAC;YACnD,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;gBACb,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;gBACzB,SAAS;YACV,CAAC;YACD,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC7B,EAAE,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;gBACtC,SAAS;YACV,CAAC;YACD,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;gBAC5B,MAAM,IAAI,GAAG,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACzE,EAAE,CAAC,IAAI,CACN,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC,SAAS,MAAM,IAAI,EAAE,CAC3G,CAAC;YACH,CAAC;QACF,CAAC;IACF,CAAC;CACD,CAAC"}
+{"version":3,"file":"infra-alerts-list.cli-command.impl.js","sourceRoot":"","sources":["../../../src/cli/alerts/infra-alerts-list.cli-command.impl.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAkB,MAAM,4BAA4B,CAAC;AAE5E,OAAO,EAAE,4BAA4B,EAAE,MAAM,yBAAyB,CAAC;AAEvE,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AASzD,eAAe;IACd,KAAK,CAAC,OAAO,CAAC,KAAqB,EAAE,IAAoB,EAAE,OAAuB;QACjF,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAChC,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,OAAO,CAAY,QAAQ,CAAC,CAAC;QAEtD,MAAM,cAAc,GAAG,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACjD,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC;QAEjD,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;YACtC,EAAE,CAAC,IAAI,CAAC,gGAAgG,CAAC,CAAC;YAC1G,cAAc,CAAC,CAAC,CAAC,CAAC;YAClB,OAAO;QACR,CAAC;QAED,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAiC,cAAc,CAAC,CAAC,WAAW,EAAE,CAAC;QACjG,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9B,IAAI,MAAM,KAAK,MAAM;gBAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;;gBAC9B,EAAE,CAAC,IAAI,CAAC,wFAAwF,CAAC,CAAC;YACvG,OAAO;QACR,CAAC;QAED,MAAM,OAAO,GAA2B,EAAE,CAAC;QAC3C,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;YAC7B,IAAI,cAAc,IAAI,CAAC,CAAC,OAAO,KAAK,cAAc,IAAI,CAAC,CAAC,EAAE,KAAK,cAAc;gBAAE,SAAS;YACxF,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,KAAK,IAAI,EAAE;gBACvC,MAAM,IAAI,GAAG,MAAM,OAAO;qBACxB,KAAK,CAA8C,cAAc,CAAC;qBAClE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;qBACZ,OAAO,EAAE,CAAC;gBACZ,OAAO,IAAI,CAAC,YAAY,EAAE,CAAC;YAC5B,CAAC,CAAC,CAAC;YACH,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC;gBAChB,OAAO,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;YACtF,CAAC;iBAAM,CAAC;gBACP,OAAO,CAAC,IAAI,CAAC;oBACZ,UAAU,EAAE,CAAC,CAAC,OAAO;oBACrB,YAAY,EAAE,CAAC,CAAC,EAAE;oBAClB,QAAQ,EAAE,EAAE;oBACZ,KAAK,EAAE,4BAA4B,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,OAAO;iBAC1D,CAAC,CAAC;YACJ,CAAC;QACF,CAAC;QAED,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACvB,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACjB,OAAO;QACR,CAAC;QAED,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACzB,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,UAAU,MAAM,CAAC,CAAC,YAAY,GAAG,CAAC,CAAC;YACnD,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;gBACb,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;gBACzB,SAAS;YACV,CAAC;YACD,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC7B,EAAE,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;gBACtC,SAAS;YACV,CAAC;YACD,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;gBAC5B,MAAM,IAAI,GAAG,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACzE,EAAE,CAAC,IAAI,CACN,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC,SAAS,MAAM,IAAI,EAAE,CAC3G,CAAC;YACH,CAAC;QACF,CAAC;IACF,CAAC;CACD,CAAC"}

package/dist/cli/alerts/infra-alerts.cli-group.descriptor.d.ts

@@ -1,12 +1,12 @@
 declare const _default: {
-    id: string;
-    kind: "cli/group";
-    name: string;
-    description: string;
-    parent: string;
-    surfaces: string[];
-    hardware: string[];
-    enabled: true;
+    readonly id: "infra-alerts";
+    readonly kind: "cli/group";
+    readonly name: "alerts";
+    readonly description: "Provider-agnostic alerting / notification policies (CF Notifications, DO Monitoring, …)";
+    readonly parent: "infra";
+    readonly surfaces: ["cli"];
+    readonly hardware: ["consumer", "cloud"];
+    readonly enabled: true;
 };
 export default _default;
 //# sourceMappingURL=infra-alerts.cli-group.descriptor.d.ts.map

package/dist/cli/alerts/infra-alerts.cli-group.descriptor.js

@@ -1,4 +1,4 @@
-import { createRuntimeAsset } from '@vibesdotdev/runtime';
+import { createRuntimeAsset } from '@vibesdotdev/kernel';
 export default createRuntimeAsset({
     id: 'infra-alerts',
     kind: 'cli/group',

package/dist/cli/alerts/infra-alerts.cli-group.descriptor.js.map

@@ -1 +1 @@
-{"version":3,"file":"infra-alerts.cli-group.descriptor.js","sourceRoot":"","sources":["../../../src/cli/alerts/infra-alerts.cli-group.descriptor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAE1D,eAAe,kBAAkB,CAAC;IACjC,EAAE,EAAE,cAAc;IAClB,IAAI,EAAE,WAAW;IACjB,IAAI,EAAE,QAAQ;IACd,WAAW,EAAE,yFAAyF;IACtG,MAAM,EAAE,OAAO;IACf,QAAQ,EAAE,CAAC,KAAK,CAAC;IACjB,QAAQ,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC;IAC/B,OAAO,EAAE,IAAI;CACb,CAAC,CAAC"}
+{"version":3,"file":"infra-alerts.cli-group.descriptor.js","sourceRoot":"","sources":["../../../src/cli/alerts/infra-alerts.cli-group.descriptor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAEzD,eAAe,kBAAkB,CAAC;IACjC,EAAE,EAAE,cAAc;IAClB,IAAI,EAAE,WAAW;IACjB,IAAI,EAAE,QAAQ;IACd,WAAW,EAAE,yFAAyF;IACtG,MAAM,EAAE,OAAO;IACf,QAAQ,EAAE,CAAC,KAAK,CAAC;IACjB,QAAQ,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC;IAC/B,OAAO,EAAE,IAAI;CACb,CAAC,CAAC"}

package/dist/cli/audit/infra-audit.cli-command.descriptor.d.ts

@@ -1,21 +1,28 @@
 declare const _default: {
-    id: string;
-    kind: "cli/command";
-    name: string;
-    description: string;
-    group: string;
-    options: ({
-        flags: string;
-        description: string;
-        default?: undefined;
-    } | {
-        flags: string;
-        description: string;
-        default: string;
-    })[];
-    surfaces: string[];
-    hardware: string[];
-    enabled: true;
+    readonly id: "infra-audit";
+    readonly kind: "cli/command";
+    readonly name: "audit";
+    readonly description: "Read-only sweep: workers/logs/alerts/RUM status across all registered providers";
+    readonly group: "infra";
+    readonly options: [{
+        readonly flags: "--provider <id>";
+        readonly description: "Restrict to a provider family or implementation id (for example, cloudflare or cloudflare-alerts)";
+    }, {
+        readonly flags: "--environment <name>";
+        readonly description: "Secrets environment used by live provider adapters";
+        readonly default: "local";
+    }, {
+        readonly flags: "--include <kinds>";
+        readonly description: "Comma-separated subset of kinds to audit (alerts,logs,observability,workers)";
+        readonly default: "alerts,logs,observability";
+    }, {
+        readonly flags: "-o, --output <format>";
+        readonly description: "Output format (text|json)";
+        readonly default: "text";
+    }];
+    readonly surfaces: ["cli"];
+    readonly hardware: ["consumer", "cloud"];
+    readonly enabled: true;
 };
 export default _default;
 //# sourceMappingURL=infra-audit.cli-command.descriptor.d.ts.map

package/dist/cli/audit/infra-audit.cli-command.descriptor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"infra-audit.cli-command.descriptor.d.ts","sourceRoot":"","sources":["../../../src/cli/audit/infra-audit.cli-command.descriptor.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;AAEA,wBAyBG"}
+{"version":3,"file":"infra-audit.cli-command.descriptor.d.ts","sourceRoot":"","sources":["../../../src/cli/audit/infra-audit.cli-command.descriptor.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAEA,wBA+BG"}

package/dist/cli/audit/infra-audit.cli-command.descriptor.js

@@ -1,4 +1,4 @@
-import { createRuntimeAsset } from '@vibesdotdev/runtime';
+import { createRuntimeAsset } from '@vibesdotdev/kernel';
 export default createRuntimeAsset({
     id: 'infra-audit',
     kind: 'cli/command',
@@ -8,11 +8,16 @@ export default createRuntimeAsset({
     options: [
         {
             flags: '--provider <id>',
-            description: 'Restrict to a single provider impl id'
+            description: 'Restrict to a provider family or implementation id (for example, cloudflare or cloudflare-alerts)'
+        },
+        {
+            flags: '--environment <name>',
+            description: 'Secrets environment used by live provider adapters',
+            default: 'local'
         },
         {
             flags: '--include <kinds>',
-            description: 'Comma-separated subset of kinds to audit (alerts,logs,observability,workers,rum)',
+            description: 'Comma-separated subset of kinds to audit (alerts,logs,observability,workers)',
             default: 'alerts,logs,observability'
         },
         {

package/dist/cli/audit/infra-audit.cli-command.descriptor.js.map

@@ -1 +1 @@
-{"version":3,"file":"infra-audit.cli-command.descriptor.js","sourceRoot":"","sources":["../../../src/cli/audit/infra-audit.cli-command.descriptor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAE1D,eAAe,kBAAkB,CAAC;IACjC,EAAE,EAAE,aAAa;IACjB,IAAI,EAAE,aAAa;IACnB,IAAI,EAAE,OAAO;IACb,WAAW,EAAE,iFAAiF;IAC9F,KAAK,EAAE,OAAO;IACd,OAAO,EAAE;QACR;YACC,KAAK,EAAE,iBAAiB;YACxB,WAAW,EAAE,uCAAuC;SACpD;QACD;YACC,KAAK,EAAE,mBAAmB;YAC1B,WAAW,EAAE,kFAAkF;YAC/F,OAAO,EAAE,2BAA2B;SACpC;QACD;YACC,KAAK,EAAE,uBAAuB;YAC9B,WAAW,EAAE,2BAA2B;YACxC,OAAO,EAAE,MAAM;SACf;KACD;IACD,QAAQ,EAAE,CAAC,KAAK,CAAC;IACjB,QAAQ,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC;IAC/B,OAAO,EAAE,IAAI;CACb,CAAC,CAAC"}
+{"version":3,"file":"infra-audit.cli-command.descriptor.js","sourceRoot":"","sources":["../../../src/cli/audit/infra-audit.cli-command.descriptor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAEzD,eAAe,kBAAkB,CAAC;IACjC,EAAE,EAAE,aAAa;IACjB,IAAI,EAAE,aAAa;IACnB,IAAI,EAAE,OAAO;IACb,WAAW,EAAE,iFAAiF;IAC9F,KAAK,EAAE,OAAO;IACd,OAAO,EAAE;QACR;YACC,KAAK,EAAE,iBAAiB;YACxB,WAAW,EACV,mGAAmG;SACpG;QACD;YACC,KAAK,EAAE,sBAAsB;YAC7B,WAAW,EAAE,oDAAoD;YACjE,OAAO,EAAE,OAAO;SAChB;QACD;YACC,KAAK,EAAE,mBAAmB;YAC1B,WAAW,EAAE,8EAA8E;YAC3F,OAAO,EAAE,2BAA2B;SACpC;QACD;YACC,KAAK,EAAE,uBAAuB;YAC9B,WAAW,EAAE,2BAA2B;YACxC,OAAO,EAAE,MAAM;SACf;KACD;IACD,QAAQ,EAAE,CAAC,KAAK,CAAC;IACjB,QAAQ,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC;IAC/B,OAAO,EAAE,IAAI;CACb,CAAC,CAAC"}

package/dist/cli/audit/infra-audit.cli-command.impl.d.ts

@@ -11,8 +11,171 @@
  * Read-only. Never modifies provider state. `--output json` emits a
  * structured payload for piping into ops dashboards.
  */
+import { type CaughtFailure, type VibesRuntime } from '@vibesdotdev/kernel';
+import type { CommandContext, CommandOptions } from '@vibesdotdev/cli';
+import { type InfraAuthorityFingerprint } from '@vibesdotdev/infra-core';
+import type { AlertPolicy, AlertType, InfraLogsDescriptor } from '@vibesdotdev/infra-core/kinds';
+export declare function assertAuditEnvironment(environment: string): void;
+interface AlertsSection {
+    providers: Array<{
+        descriptorId: string;
+        adapter: string;
+        /** Live policies on the provider (empty when listing failed/unavailable). */
+        policies: Array<AlertPolicy & {
+            providerId: string;
+        }>;
+        /** Count of policies declared in code (descriptor + account.config). */
+        declaredCount: number;
+        /** Set when the live policy listing failed (e.g. missing creds). */
+        liveError?: string;
+        /** Declared-vs-live drift notes. */
+        driftNotes: string[];
+        authority?: InfraAuthorityFingerprint;
+        error?: string;
+    }>;
+    gaps: string[];
+    notes: string[];
+}
+/**
+ * Pure coverage analysis: diff DECLARED alert policies (from
+ * `infra/account.config.ts` + the registered descriptor) against what is LIVE
+ * on the provider. Returns gaps + drift notes.
+ *
+ * Key behavior the prior audit lacked:
+ *   - "zero policies configured" fires ONLY when nothing is declared AND
+ *     nothing is live (and live was actually readable) — declaring policies in
+ *     account.config.ts now changes the verdict.
+ *   - Each critical category (budget/usage/error-rate) is checked
+ *     independently, so a fleet with budget+usage but no error-rate is still
+ *     flagged (that is the dead-cron detection gap).
+ *   - Declared-but-not-applied and live-but-not-declared both surface as drift.
+ *
+ * `live === null` means the live listing failed (e.g. no creds); coverage then
+ * falls back to the declared set and skips drift.
+ */
+export interface AlertCoverageEvaluation {
+    gaps: string[];
+    driftNotes: string[];
+}
+export declare function evaluateAlertCoverage(input: {
+    adapter: string;
+    declared: AlertPolicy[];
+    live: Array<AlertPolicy & {
+        providerId: string;
+    }> | null;
+    categoryDiagnostics?: Readonly<Record<string, string>>;
+    unrepresentedCategories?: readonly AlertType[];
+}): AlertCoverageEvaluation;
+interface LogsSection {
+    providers: Array<{
+        descriptorId: string;
+        adapter: string;
+        sources: InfraLogsDescriptor['sources'];
+        logRetention?: InfraLogsDescriptor['logRetention'];
+        alertsConfigured: number;
+        error?: string;
+    }>;
+}
+interface ObservabilitySection {
+    providers: Array<{
+        descriptorId: string;
+        adapter: string;
+        workerCount: number;
+        minSampling?: number;
+        maxSampling?: number;
+        avgSampling?: number;
+        /** Workers whose logs miss invocations: logs off or sampled below 100%. */
+        blindSpotWorkers: string[];
+        failedWorkers: Array<{
+            workerName: string;
+            code: string;
+            message: string;
+        }>;
+        authority?: InfraAuthorityFingerprint;
+        error?: string;
+    }>;
+    gaps: string[];
+}
+interface WorkersSection {
+    authority?: InfraAuthorityFingerprint;
+    providers: Array<{
+        descriptorId: string;
+        adapter: string;
+        accountId: string;
+        liveWorkerCount: number;
+        declaredWorkerCount: number;
+        liveWorkers: Array<{
+            workerName: string;
+            lastDeployed?: string;
+            usageModel?: string;
+            handlers: string[];
+            declared: boolean;
+        }>;
+        declaredWorkers: string[];
+        missingLiveWorkers: string[];
+        unmanagedLiveWorkers: string[];
+        /** Live workers that expose a `scheduled` (cron) handler. */
+        scheduledWorkers: string[];
+        error?: string;
+        /** Safe credential-route evidence: canonical-config, env-fallback-dev-only, or unavailable. */
+        credentialPath?: string;
+        diagnostic?: string;
+    }>;
+    gaps: string[];
+}
+export interface AuditReport {
+    timestamp: string;
+    requestedProvider?: string;
+    environment: string;
+    authority?: InfraAuthorityFingerprint;
+    alerts?: AlertsSection;
+    logs?: LogsSection;
+    observability?: ObservabilitySection;
+    workers?: WorkersSection;
+    notes: string[];
+}
+export interface InfraAuditCollectionOptions {
+    provider?: string;
+    environment?: string;
+}
+/**
+ * Provider filters accept either one exact implementation id or a provider
+ * family prefix. Thus `cloudflare` selects every Cloudflare audit adapter,
+ * while `cloudflare-alerts` selects only that implementation.
+ */
+export declare function auditProviderMatches(requestedProvider: string | undefined, candidates: readonly string[]): boolean;
+export declare function renderAuditProviderFailureText(error: CaughtFailure | Error | string): string;
+/**
+ * Live workers that expose a `scheduled` (cron) handler. A worker that runs a
+ * cron but has no error-rate / scheduled-event-missing alert is exactly how a
+ * dead cron stays invisible — gatherWorkers cross-checks coverage for these.
+ */
+export declare function detectScheduledWorkers(liveWorkers: Array<{
+    workerName: string;
+    handlers?: string[];
+}>): string[];
+export declare function buildWorkersProviderAudit(input: {
+    descriptorId: string;
+    adapter: string;
+    account: string;
+    declaredWorkers: string[];
+    liveWorkers: Array<{
+        workerName: string;
+        lastDeployed?: string;
+        usageModel?: string;
+        handlers: string[];
+    }>;
+}): WorkersSection['providers'][number];
+export interface WorkerAuditInfo {
+    workerName: string;
+    lastDeployed?: string;
+    usageModel?: string;
+    handlers: string[];
+}
+export declare function collectInfraAuditReport(runtime: VibesRuntime, include: string[], now?: Date, options?: InfraAuditCollectionOptions): Promise<AuditReport>;
+export declare function renderAuditAuthorityText(report: AuditReport): string | undefined;
 declare const _default: {
-    execute(_args: Record<string, unknown>, opts: Record<string, unknown>): Promise<void>;
+    execute(_args: CommandOptions, opts: CommandOptions, context: CommandContext): Promise<void>;
 };
 export default _default;
 //# sourceMappingURL=infra-audit.cli-command.impl.d.ts.map

package/dist/cli/audit/infra-audit.cli-command.impl.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"infra-audit.cli-command.impl.d.ts","sourceRoot":"","sources":["../../../src/cli/audit/infra-audit.cli-command.impl.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;;mBAgLmB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;;AAD5F,wBAyGE"}
+{"version":3,"file":"infra-audit.cli-command.impl.d.ts","sourceRoot":"","sources":["../../../src/cli/audit/infra-audit.cli-command.impl.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,EAA6E,KAAK,aAAa,EAA0B,KAAK,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAI/K,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAEvE,OAAO,EAKN,KAAK,yBAAyB,EAC9B,MAAM,yBAAyB,CAAC;AAEjC,OAAO,KAAK,EAEX,WAAW,EACX,SAAS,EAET,mBAAmB,EAMnB,MAAM,+BAA+B,CAAC;AAmBvC,wBAAgB,sBAAsB,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAMhE;AAED,UAAU,aAAa;IACtB,SAAS,EAAE,KAAK,CAAC;QAChB,YAAY,EAAE,MAAM,CAAC;QACrB,OAAO,EAAE,MAAM,CAAC;QAChB,6EAA6E;QAC7E,QAAQ,EAAE,KAAK,CAAC,WAAW,GAAG;YAAE,UAAU,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QACtD,wEAAwE;QACxE,aAAa,EAAE,MAAM,CAAC;QACtB,oEAAoE;QACpE,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,oCAAoC;QACpC,UAAU,EAAE,MAAM,EAAE,CAAC;QACrB,SAAS,CAAC,EAAE,yBAAyB,CAAC;QACtC,KAAK,CAAC,EAAE,MAAM,CAAC;KACf,CAAC,CAAC;IACH,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,KAAK,EAAE,MAAM,EAAE,CAAC;CAChB;AA6BD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,WAAW,uBAAuB;IACvC,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,UAAU,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE;IAC5C,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,WAAW,EAAE,CAAC;IACxB,IAAI,EAAE,KAAK,CAAC,WAAW,GAAG;QAAE,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC,GAAG,IAAI,CAAC;IACzD,mBAAmB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACvD,uBAAuB,CAAC,EAAE,SAAS,SAAS,EAAE,CAAC;CAC/C,GAAG,uBAAuB,CA2E1B;AAkDD,UAAU,WAAW;IACpB,SAAS,EAAE,KAAK,CAAC;QAChB,YAAY,EAAE,MAAM,CAAC;QACrB,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,mBAAmB,CAAC,SAAS,CAAC,CAAC;QACxC,YAAY,CAAC,EAAE,mBAAmB,CAAC,cAAc,CAAC,CAAC;QACnD,gBAAgB,EAAE,MAAM,CAAC;QACzB,KAAK,CAAC,EAAE,MAAM,CAAC;KACf,CAAC,CAAC;CACH;AAED,UAAU,oBAAoB;IAC7B,SAAS,EAAE,KAAK,CAAC;QAChB,YAAY,EAAE,MAAM,CAAC;QACrB,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,EAAE,MAAM,CAAC;QACpB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,2EAA2E;QAC3E,gBAAgB,EAAE,MAAM,EAAE,CAAC;QAC3B,aAAa,EAAE,KAAK,CAAC;YAAE,UAAU,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QAC5E,SAAS,CAAC,EAAE,yBAAyB,CAAC;QACtC,KAAK,CAAC,EAAE,MAAM,CAAC;KACf,CAAC,CAAC;IACH,IAAI,EAAE,MAAM,EAAE,CAAC;CACf;AAED,UAAU,cAAc;IACvB,SAAS,CAAC,EAAE,yBAAyB,CAAC;IACtC,SAAS,EAAE,KAAK,CAAC;QAChB,YAAY,EAAE,MAAM,CAAC;QACrB,OAAO,EAAE,MAAM,CAAC;QAChB,SAAS,EAAE,MAAM,CAAC;QAClB,eAAe,EAAE,MAAM,CAAC;QACxB,mBAAmB,EAAE,MAAM,CAAC;QAC5B,WAAW,EAAE,KAAK,CAAC;YAClB,UAAU,EAAE,MAAM,CAAC;YACnB,YAAY,CAAC,EAAE,MAAM,CAAC;YACtB,UAAU,CAAC,EAAE,MAAM,CAAC;YACpB,QAAQ,EAAE,MAAM,EAAE,CAAC;YACnB,QAAQ,EAAE,OAAO,CAAC;SAClB,CAAC,CAAC;QACH,eAAe,EAAE,MAAM,EAAE,CAAC;QAC1B,kBAAkB,EAAE,MAAM,EAAE,CAAC;QAC7B,oBAAoB,EAAE,MAAM,EAAE,CAAC;QAC/B,6DAA6D;QAC7D,gBAAgB,EAAE,MAAM,EAAE,CAAC;QAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,+FAA+F;QAC/F,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,UAAU,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC,CAAC;IACH,IAAI,EAAE,MAAM,EAAE,CAAC;CACf;AAED,MAAM,WAAW,WAAW;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,yBAAyB,CAAC;IACtC,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB,IAAI,CAAC,EAAE,WAAW,CAAC;IACnB,aAAa,CAAC,EAAE,oBAAoB,CAAC;IACrC,OAAO,CAAC,EAAE,cAAc,CAAC;IACzB,KAAK,EAAE,MAAM,EAAE,CAAC;CAChB;AAED,MAAM,WAAW,2BAA2B;IAC3C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;CACrB;AAMD;;;;GAIG;AACH,wBAAgB,oBAAoB,CACnC,iBAAiB,EAAE,MAAM,GAAG,SAAS,EACrC,UAAU,EAAE,SAAS,MAAM,EAAE,GAC3B,OAAO,CAaT;AA0OD,wBAAgB,8BAA8B,CAAC,KAAK,EAAE,aAAa,GAAG,KAAK,GAAG,MAAM,GAAG,MAAM,CAE5F;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CACrC,WAAW,EAAE,KAAK,CAAC;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,GAC7D,MAAM,EAAE,CAKV;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE;IAChD,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,WAAW,EAAE,KAAK,CAAC;QAClB,UAAU,EAAE,MAAM,CAAC;QACnB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,QAAQ,EAAE,MAAM,EAAE,CAAC;KACnB,CAAC,CAAC;CACH,GAAG,cAAc,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,CA4BtC;AAED,MAAM,WAAW,eAAe;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACnB;AAgJD,wBAAsB,uBAAuB,CAC5C,OAAO,EAAE,YAAY,EACrB,OAAO,EAAE,MAAM,EAAE,EACjB,GAAG,GAAE,IAAiB,EACtB,OAAO,GAAE,2BAAgC,GACvC,OAAO,CAAC,WAAW,CAAC,CAqCtB;AAED,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,GAAG,SAAS,CAIhF;;mBAIQ,cAAc,QACf,cAAc,WACX,cAAc,GACrB,OAAO,CAAC,IAAI,CAAC;;AALjB,wBAmJE"}