@vibesdotdev/infra-deploy 0.0.2 → 1.0.0-rc.4

package/dist/cli/inventory/infra-inventory.cli-command.impl.js

@@ -0,0 +1,204 @@
+import { writeJson } from '@vibesdotdev/cli/output';
+import { requestCLIExit } from '@vibesdotdev/cli/providers';
+import { getRuntimeStdio, settle, valueFreeFailure } from '@vibesdotdev/kernel';
+import { JsonValueSchema } from '@vibesdotdev/kernel/schemas/json';
+import { formatInfraAuthorityFingerprint, InventoryDescriptorSchema, InventorySnapshotSchema, sanitizeInfraProviderFailure } from '@vibesdotdev/infra-core/kinds';
+import { z } from 'zod/v4';
+import { discoverInventoryWorkspace } from "../shared/discover-deployments.js";
+function parseKinds(raw) {
+    const parsed = z.string().safeParse(raw);
+    if (!parsed.success)
+        return undefined;
+    const kinds = parsed.data
+        .split(',')
+        .map((value) => value.trim())
+        .filter(Boolean);
+    return kinds.length > 0 ? kinds : undefined;
+}
+function renderFact(value) {
+    const text = z.string().safeParse(value);
+    if (text.success)
+        return text.data;
+    return JSON.stringify(value) ?? '';
+}
+export async function collectInventoryReport(runtime, opts) {
+    const requested = z.string().safeParse(opts.provider);
+    const requestedProvider = requested.success ? requested.data : undefined;
+    const kinds = parseKinds(opts.include);
+    const listed = runtime.assets('infra/inventory').descriptors();
+    const providers = [];
+    let matched = 0;
+    for (const candidate of listed) {
+        const parsed = InventoryDescriptorSchema.safeParse(candidate);
+        if (!parsed.success) {
+            providers.push({
+                descriptorId: 'unreadable-inventory-descriptor',
+                error: sanitizeInfraProviderFailure(valueFreeFailure(parsed.error)).message
+            });
+            continue;
+        }
+        if (requestedProvider !== undefined && parsed.data.id !== requestedProvider)
+            continue;
+        matched += 1;
+        const descriptor = parsed.data;
+        const finished = await settle(async () => {
+            const resolved = await runtime
+                .query('infra/inventory')
+                .withId(descriptor.id)
+                .resolve();
+            const workspace = await discoverInventoryWorkspace(runtime, descriptor);
+            const implementation = 'collect' in resolved
+                ? resolved
+                : await resolved.create({ environment: opts.environment });
+            if (!implementation.collect)
+                throw new Error('resolved implementation does not expose collect()');
+            return InventorySnapshotSchema.parse(await implementation.collect({ kinds, workspace }));
+        });
+        if (!finished.ok) {
+            providers.push({
+                descriptorId: descriptor.id,
+                error: sanitizeInfraProviderFailure(finished.cause).message
+            });
+            continue;
+        }
+        providers.push({ descriptorId: descriptor.id, snapshot: finished.value });
+    }
+    if (requestedProvider !== undefined && matched === 0) {
+        throw new Error(`No infra/inventory provider registered with id "${requestedProvider}".`);
+    }
+    return { collectedAt: new Date().toISOString(), providers };
+}
+/**
+ * Human-readable cause for one degraded probe.
+ *
+ * Not every `infra/inventory-error` comes from `errorResource()`. The Cloudflare
+ * account-verification probe hand-builds its resource with assertion fields
+ * (`expectedAccountMatches`, `observedAccountId`, …) and no `message` at all, so
+ * a message-only renderer printed "no message reported" — technically true and
+ * operationally useless. Fall back to the discriminating fields the resource
+ * actually carries.
+ */
+function describeDegradedProbe(raw) {
+    const message = z.string().safeParse(raw.message);
+    if (message.success && message.data.length > 0)
+        return message.data;
+    // Identifier-shaped values are elided the same way the authority line elides
+    // the account id (`account=414b...a7bb`). This renderer must not become the
+    // one place a full account/token/key id gets printed in the clear just
+    // because it arrived inside a probe payload.
+    const elide = (key, value) => {
+        const text = renderFact(value);
+        // Case-insensitive: the field that actually leaked was `observedAccountId`,
+        // whose `Id` suffix a case-sensitive pattern silently skipped. Short values
+        // (booleans, enums like `standard`) fall through the length guard below and
+        // stay readable.
+        const looksIdentifying = /(id|token|key|secret|account|arn|uuid)/i.test(key);
+        if (!looksIdentifying || text.length <= 12)
+            return text;
+        return `${text.slice(0, 4)}...${text.slice(-4)}`;
+    };
+    const facts = Object.entries(raw).flatMap(([key, value]) => {
+        if (key === 'probeKind' || key === 'code')
+            return [];
+        if (value === null || value === undefined || value === '')
+            return [];
+        return [`${key}=${elide(key, value)}`];
+    });
+    return facts.length > 0 ? facts.join(' ') : 'degraded, and the probe reported no detail';
+}
+export function renderInventoryText(report) {
+    const lines = [];
+    for (const provider of report.providers) {
+        lines.push(`# ${provider.descriptorId}`);
+        if (provider.error) {
+            lines.push(`  error\t${provider.error}`);
+            continue;
+        }
+        const byKind = new Map();
+        for (const resource of provider.snapshot?.resources ?? [])
+            byKind.set(resource.kind, (byKind.get(resource.kind) ?? 0) + 1);
+        lines.push(`  collected\t${provider.snapshot?.collectedAt ?? 'unknown'}`);
+        if (provider.snapshot?.authority) {
+            lines.push(`  authority\t${formatInfraAuthorityFingerprint(provider.snapshot.authority)}`);
+        }
+        lines.push(`  resources\t${provider.snapshot?.resources.length ?? 0}`);
+        const degraded = provider.snapshot?.resources.filter((resource) => resource.kind === 'infra/inventory-error') ?? [];
+        if (degraded.length > 0) {
+            lines.push(`  degraded-probes\t${degraded.length}`);
+            // Print WHY, not just how many. `errorResource()` already carries a
+            // sanitized probeKind/code/message (and httpStatus/cfCode when the
+            // provider gave them) — the renderer was dropping all of it, so the
+            // command exited 2 saying "7 degraded probes" and gave the operator no
+            // way to learn what failed short of reading the provider source. A
+            // read-only audit surface that reports a fault count and withholds every
+            // fault is barely better than silence.
+            for (const resource of degraded) {
+                const raw = {};
+                const loose = z.record(z.string(), z.unknown()).safeParse(resource.raw);
+                if (loose.success) {
+                    for (const [key, value] of Object.entries(loose.data)) {
+                        const admitted = JsonValueSchema.safeParse(value);
+                        if (admitted.success)
+                            raw[key] = admitted.data;
+                    }
+                }
+                const probe = raw.probeKind === undefined || raw.probeKind === null
+                    ? (resource.name ?? 'unknown')
+                    : renderFact(raw.probeKind);
+                const bits = [];
+                if (raw.code !== undefined)
+                    bits.push(`code=${renderFact(raw.code)}`);
+                if (raw.httpStatus !== undefined)
+                    bits.push(`http=${renderFact(raw.httpStatus)}`);
+                if (raw.cfCode !== undefined)
+                    bits.push(`cf=${renderFact(raw.cfCode)}`);
+                if (raw.retryable === true)
+                    bits.push('retryable');
+                const suffix = bits.length > 0 ? ` (${bits.join(' ')})` : '';
+                lines.push(`    ! ${probe}${suffix}\t${describeDegradedProbe(raw)}`);
+            }
+            // A degraded inventory is usually a credential-scope story, not an outage.
+            // Bare `infra inventory` resolves `operator-default` policy, which permits
+            // ambient process.env credentials by design — on a workstation that token
+            // is typically narrower than the audit needs, so the obvious command
+            // reports a picture that looks broken (9 resources / 7 capability errors)
+            // where `--environment production` reports 179 / 1 from the secrets store.
+            // Say so, rather than letting the operator conclude the account is on fire.
+            if (provider.snapshot?.authority?.source === 'process.env') {
+                lines.push(`  hint\tcredentials came from process.env (operator-default policy); rerun with --environment <name> to resolve the configured secrets store`);
+            }
+        }
+        const classifications = new Map();
+        for (const resource of provider.snapshot?.resources ?? []) {
+            if (resource.kind === 'infra/worker' && resource.status) {
+                classifications.set(resource.status, (classifications.get(resource.status) ?? 0) + 1);
+            }
+        }
+        for (const [classification, count] of [...classifications].sort(([a], [b]) => a.localeCompare(b))) {
+            lines.push(`  workers.${classification}\t${count}`);
+        }
+        const recommendations = provider.snapshot?.resources.filter((resource) => resource.kind === 'infra/recommendation') ??
+            [];
+        if (recommendations.length > 0)
+            lines.push(`  recommendations\t${recommendations.length}`);
+        for (const [kind, count] of [...byKind].sort(([a], [b]) => a.localeCompare(b)))
+            lines.push(`  ${kind}\t${count}`);
+    }
+    return lines.join('\n');
+}
+export default {
+    async execute(_args, opts, context) {
+        const report = await collectInventoryReport(context.runtime, opts);
+        if (opts.output === 'json')
+            await writeJson(context.runtime, report);
+        else {
+            const stdio = await getRuntimeStdio(context.runtime);
+            stdio.write('stdout', `${renderInventoryText(report)}\n`);
+        }
+        if (report.providers.some((provider) => provider.error ||
+            provider.snapshot?.resources.some((resource) => resource.kind === 'infra/inventory-error'))) {
+            requestCLIExit(2);
+        }
+    }
+};
+//# sourceMappingURL=infra-inventory.cli-command.impl.js.map

package/dist/cli/inventory/infra-inventory.cli-command.impl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"infra-inventory.cli-command.impl.js","sourceRoot":"","sources":["../../../src/cli/inventory/infra-inventory.cli-command.impl.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AAEpD,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,gBAAgB,EAAqB,MAAM,qBAAqB,CAAC;AACnG,OAAO,EAAE,eAAe,EAAmC,MAAM,kCAAkC,CAAC;AAMpG,OAAO,EACN,+BAA+B,EAC/B,yBAAyB,EACzB,uBAAuB,EACvB,4BAA4B,EAC5B,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAC3B,OAAO,EAAE,0BAA0B,EAAE,MAAM,mCAAmC,CAAC;AAe/E,SAAS,UAAU,CAAC,GAA2B;IAC9C,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACzC,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IACtC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI;SACvB,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;SAC5B,MAAM,CAAC,OAAO,CAAC,CAAC;IAClB,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7C,CAAC;AAED,SAAS,UAAU,CAAC,KAAgB;IACnC,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACzC,IAAI,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC;IACnC,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;AACpC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC3C,OAAqB,EACrB,IAAoB;IAEpB,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACtD,MAAM,iBAAiB,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IACzE,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,WAAW,EAAE,CAAC;IAC/D,MAAM,SAAS,GAAiC,EAAE,CAAC;IACnD,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,SAAS,IAAI,MAAM,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,yBAAyB,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAC9D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACrB,SAAS,CAAC,IAAI,CAAC;gBACd,YAAY,EAAE,iCAAiC;gBAC/C,KAAK,EAAE,4BAA4B,CAAC,gBAAgB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO;aAC3E,CAAC,CAAC;YACH,SAAS;QACV,CAAC;QACD,IAAI,iBAAiB,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,iBAAiB;YAAE,SAAS;QACtF,OAAO,IAAI,CAAC,CAAC;QACb,MAAM,UAAU,GAAwB,MAAM,CAAC,IAAI,CAAC;QACpD,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,KAAK,IAAI,EAAE;YACxC,MAAM,QAAQ,GAAG,MAAM,OAAO;iBAC5B,KAAK,CAA6C,iBAAiB,CAAC;iBACpE,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;iBACrB,OAAO,EAAE,CAAC;YACZ,MAAM,SAAS,GAAG,MAAM,0BAA0B,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;YACxE,MAAM,cAAc,GACnB,SAAS,IAAI,QAAQ;gBACpB,CAAC,CAAC,QAAQ;gBACV,CAAC,CAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;YAC7D,IAAI,CAAC,cAAc,CAAC,OAAO;gBAC1B,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;YACtE,OAAO,uBAAuB,CAAC,KAAK,CAAC,MAAM,cAAc,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;QAC1F,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YAClB,SAAS,CAAC,IAAI,CAAC;gBACd,YAAY,EAAE,UAAU,CAAC,EAAE;gBAC3B,KAAK,EAAE,4BAA4B,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,OAAO;aAC3D,CAAC,CAAC;YACH,SAAS;QACV,CAAC;QACD,SAAS,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,UAAU,CAAC,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,iBAAiB,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,mDAAmD,iBAAiB,IAAI,CAAC,CAAC;IAC3F,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,CAAC;AAC7D,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,qBAAqB,CAAC,GAAe;IAC7C,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAClD,IAAI,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,OAAO,CAAC,IAAI,CAAC;IAEpE,6EAA6E;IAC7E,4EAA4E;IAC5E,uEAAuE;IACvE,6CAA6C;IAC7C,MAAM,KAAK,GAAG,CAAC,GAAW,EAAE,KAAgB,EAAU,EAAE;QACvD,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;QAC/B,4EAA4E;QAC5E,4EAA4E;QAC5E,4EAA4E;QAC5E,iBAAiB;QACjB,MAAM,gBAAgB,GAAG,yCAAyC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7E,IAAI,CAAC,gBAAgB,IAAI,IAAI,CAAC,MAAM,IAAI,EAAE;YAAE,OAAO,IAAI,CAAC;QACxD,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAClD,CAAC,CAAC;IAEF,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE;QAC1D,IAAI,GAAG,KAAK,WAAW,IAAI,GAAG,KAAK,MAAM;YAAE,OAAO,EAAE,CAAC;QACrD,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE;YAAE,OAAO,EAAE,CAAC;QACrE,OAAO,CAAC,GAAG,GAAG,IAAI,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,4CAA4C,CAAC;AAC1F,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAAuB;IAC1D,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QACzC,KAAK,CAAC,IAAI,CAAC,KAAK,QAAQ,CAAC,YAAY,EAAE,CAAC,CAAC;QACzC,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;YACpB,KAAK,CAAC,IAAI,CAAC,YAAY,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;YACzC,SAAS;QACV,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;QACzC,KAAK,MAAM,QAAQ,IAAI,QAAQ,CAAC,QAAQ,EAAE,SAAS,IAAI,EAAE;YACxD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACjE,KAAK,CAAC,IAAI,CAAC,gBAAgB,QAAQ,CAAC,QAAQ,EAAE,WAAW,IAAI,SAAS,EAAE,CAAC,CAAC;QAC1E,IAAI,QAAQ,CAAC,QAAQ,EAAE,SAAS,EAAE,CAAC;YAClC,KAAK,CAAC,IAAI,CAAC,gBAAgB,+BAA+B,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAC5F,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,gBAAgB,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC,CAAC;QACvE,MAAM,QAAQ,GACb,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC,MAAM,CAClC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,KAAK,uBAAuB,CACvD,IAAI,EAAE,CAAC;QACT,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,KAAK,CAAC,IAAI,CAAC,sBAAsB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YACpD,oEAAoE;YACpE,mEAAmE;YACnE,oEAAoE;YACpE,uEAAuE;YACvE,mEAAmE;YACnE,yEAAyE;YACzE,uCAAuC;YACvC,KAAK,MAAM,QAAQ,IAAI,QAAQ,EAAE,CAAC;gBACjC,MAAM,GAAG,GAAe,EAAE,CAAC;gBAC3B,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;gBACxE,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;oBACnB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;wBACvD,MAAM,QAAQ,GAAG,eAAe,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;wBAClD,IAAI,QAAQ,CAAC,OAAO;4BAAE,GAAG,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC;oBAChD,CAAC;gBACF,CAAC;gBACD,MAAM,KAAK,GACV,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,GAAG,CAAC,SAAS,KAAK,IAAI;oBACpD,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,IAAI,SAAS,CAAC;oBAC9B,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBAC9B,MAAM,IAAI,GAAa,EAAE,CAAC;gBAC1B,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS;oBAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACtE,IAAI,GAAG,CAAC,UAAU,KAAK,SAAS;oBAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;gBAClF,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS;oBAAE,IAAI,CAAC,IAAI,CAAC,MAAM,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACxE,IAAI,GAAG,CAAC,SAAS,KAAK,IAAI;oBAAE,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBACnD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7D,KAAK,CAAC,IAAI,CAAC,SAAS,KAAK,GAAG,MAAM,KAAK,qBAAqB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACtE,CAAC;YACD,2EAA2E;YAC3E,2EAA2E;YAC3E,0EAA0E;YAC1E,qEAAqE;YACrE,0EAA0E;YAC1E,2EAA2E;YAC3E,4EAA4E;YAC5E,IAAI,QAAQ,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,KAAK,aAAa,EAAE,CAAC;gBAC5D,KAAK,CAAC,IAAI,CACT,8IAA8I,CAC9I,CAAC;YACH,CAAC;QACF,CAAC;QACD,MAAM,eAAe,GAAG,IAAI,GAAG,EAAkB,CAAC;QAClD,KAAK,MAAM,QAAQ,IAAI,QAAQ,CAAC,QAAQ,EAAE,SAAS,IAAI,EAAE,EAAE,CAAC;YAC3D,IAAI,QAAQ,CAAC,IAAI,KAAK,cAAc,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;gBACzD,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACvF,CAAC;QACF,CAAC;QACD,KAAK,MAAM,CAAC,cAAc,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAC5E,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAClB,EAAE,CAAC;YACH,KAAK,CAAC,IAAI,CAAC,aAAa,cAAc,KAAK,KAAK,EAAE,CAAC,CAAC;QACrD,CAAC;QACD,MAAM,eAAe,GACpB,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,KAAK,sBAAsB,CAAC;YAC3F,EAAE,CAAC;QACJ,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,sBAAsB,eAAe,CAAC,MAAM,EAAE,CAAC,CAAC;QAC3F,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;YAC7E,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,KAAK,KAAK,EAAE,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACzB,CAAC;AAED,eAAe;IACd,KAAK,CAAC,OAAO,CAAC,KAAqB,EAAE,IAAoB,EAAE,OAAuB;QACjF,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACnE,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM;YAAE,MAAM,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;aAChE,CAAC;YACL,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACrD,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,mBAAmB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3D,CAAC;QACD,IACC,MAAM,CAAC,SAAS,CAAC,IAAI,CACpB,CAAC,QAAQ,EAAE,EAAE,CACZ,QAAQ,CAAC,KAAK;YACd,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,KAAK,uBAAuB,CAAC,CAC3F,EACA,CAAC;YACF,cAAc,CAAC,CAAC,CAAC,CAAC;QACnB,CAAC;IACF,CAAC;CACD,CAAC"}

package/dist/cli/list/infra-deploy.list.cli-command.descriptor.d.ts

@@ -1,34 +1,44 @@
 declare const _default: {
-    id: string;
-    kind: "cli/command";
-    name: string;
-    description: string;
-    group: string;
-    arguments: {
-        name: string;
-        description: string;
-        required: boolean;
-        variadic: boolean;
-    }[];
-    options: ({
-        flags: string;
-        description: string;
-        default: string;
-        type?: undefined;
-    } | {
-        flags: string;
-        description: string;
-        default: string;
-        type: string;
-    } | {
-        flags: string;
-        description: string;
-        default?: undefined;
-        type?: undefined;
-    })[];
-    surfaces: string[];
-    hardware: string[];
-    enabled: true;
+    readonly id: "infra-deploy.list";
+    readonly kind: "cli/command";
+    readonly name: "list";
+    readonly description: "List deployable apps under <root> (scans for deployment.config.ts)";
+    readonly group: "infra-deploy";
+    readonly arguments: [{
+        readonly name: "root";
+        readonly description: "Root directory to scan (defaults to cwd)";
+        readonly required: false;
+        readonly variadic: false;
+    }];
+    readonly options: [{
+        readonly flags: "-o, --output <format>";
+        readonly description: "Output format (text|json|table)";
+        readonly default: "table";
+    }, {
+        readonly flags: "--max-depth <n>";
+        readonly description: "Maximum directory depth to scan (default: all nested directories)";
+        readonly type: "number";
+    }, {
+        readonly flags: "--order, --graph";
+        readonly description: "Show suggested deploy order based on dependsOn (topological)";
+    }, {
+        readonly flags: "--runs";
+        readonly description: "List recorded infra deploy run ledger entries";
+    }, {
+        readonly flags: "--app <id>";
+        readonly description: "Filter deploy run ledger entries by app id";
+    }, {
+        readonly flags: "--status <status>";
+        readonly description: "Filter deploy run ledger entries by status";
+    }, {
+        readonly flags: "--limit <n>";
+        readonly description: "Maximum deploy run ledger rows to show";
+        readonly default: "50";
+        readonly type: "number";
+    }];
+    readonly surfaces: ["cli"];
+    readonly hardware: ["consumer", "cloud"];
+    readonly enabled: true;
 };
 export default _default;
 //# sourceMappingURL=infra-deploy.list.cli-command.descriptor.d.ts.map

package/dist/cli/list/infra-deploy.list.cli-command.descriptor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"infra-deploy.list.cli-command.descriptor.d.ts","sourceRoot":"","sources":["../../../src/cli/list/infra-deploy.list.cli-command.descriptor.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEA,wBA0BG"}
+{"version":3,"file":"infra-deploy.list.cli-command.descriptor.d.ts","sourceRoot":"","sources":["../../../src/cli/list/infra-deploy.list.cli-command.descriptor.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEA,wBA8BG"}

package/dist/cli/list/infra-deploy.list.cli-command.descriptor.js

@@ -1,4 +1,4 @@
-import { createRuntimeAsset } from '@vibesdotdev/runtime';
+import { createRuntimeAsset } from '@vibesdotdev/kernel';
 export default createRuntimeAsset({
     id: 'infra-deploy.list',
     kind: 'cli/command',
@@ -19,8 +19,12 @@ export default createRuntimeAsset({
             description: 'Output format (text|json|table)',
             default: 'table'
         },
-        { flags: '--max-depth <n>', description: 'Maximum directory depth to scan', default: '4', type: 'number' },
-        { flags: '--order, --graph', description: 'Show suggested deploy order based on dependsOn (topological)' }
+        { flags: '--max-depth <n>', description: 'Maximum directory depth to scan (default: all nested directories)', type: 'number' },
+        { flags: '--order, --graph', description: 'Show suggested deploy order based on dependsOn (topological)' },
+        { flags: '--runs', description: 'List recorded infra deploy run ledger entries' },
+        { flags: '--app <id>', description: 'Filter deploy run ledger entries by app id' },
+        { flags: '--status <status>', description: 'Filter deploy run ledger entries by status' },
+        { flags: '--limit <n>', description: 'Maximum deploy run ledger rows to show', default: '50', type: 'number' }
     ],
     surfaces: ['cli'],
     hardware: ['consumer', 'cloud'],

package/dist/cli/list/infra-deploy.list.cli-command.descriptor.js.map

@@ -1 +1 @@
-{"version":3,"file":"infra-deploy.list.cli-command.descriptor.js","sourceRoot":"","sources":["../../../src/cli/list/infra-deploy.list.cli-command.descriptor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAE1D,eAAe,kBAAkB,CAAC;IACjC,EAAE,EAAE,mBAAmB;IACvB,IAAI,EAAE,aAAa;IACnB,IAAI,EAAE,MAAM;IACZ,WAAW,EAAE,oEAAoE;IACjF,KAAK,EAAE,cAAc;IACrB,SAAS,EAAE;QACV;YACC,IAAI,EAAE,MAAM;YACZ,WAAW,EAAE,0CAA0C;YACvD,QAAQ,EAAE,KAAK;YACf,QAAQ,EAAE,KAAK;SACf;KACD;IACD,OAAO,EAAE;QACR;YACC,KAAK,EAAE,uBAAuB;YAC9B,WAAW,EAAE,iCAAiC;YAC9C,OAAO,EAAE,OAAO;SAChB;QACD,EAAE,KAAK,EAAE,iBAAiB,EAAE,WAAW,EAAE,iCAAiC,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC1G,EAAE,KAAK,EAAE,kBAAkB,EAAE,WAAW,EAAE,8DAA8D,EAAE;KAC1G;IACD,QAAQ,EAAE,CAAC,KAAK,CAAC;IACjB,QAAQ,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC;IAC/B,OAAO,EAAE,IAAI;CACb,CAAC,CAAC"}
+{"version":3,"file":"infra-deploy.list.cli-command.descriptor.js","sourceRoot":"","sources":["../../../src/cli/list/infra-deploy.list.cli-command.descriptor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAEzD,eAAe,kBAAkB,CAAC;IACjC,EAAE,EAAE,mBAAmB;IACvB,IAAI,EAAE,aAAa;IACnB,IAAI,EAAE,MAAM;IACZ,WAAW,EAAE,oEAAoE;IACjF,KAAK,EAAE,cAAc;IACrB,SAAS,EAAE;QACV;YACC,IAAI,EAAE,MAAM;YACZ,WAAW,EAAE,0CAA0C;YACvD,QAAQ,EAAE,KAAK;YACf,QAAQ,EAAE,KAAK;SACf;KACD;IACD,OAAO,EAAE;QACR;YACC,KAAK,EAAE,uBAAuB;YAC9B,WAAW,EAAE,iCAAiC;YAC9C,OAAO,EAAE,OAAO;SAChB;QACD,EAAE,KAAK,EAAE,iBAAiB,EAAE,WAAW,EAAE,mEAAmE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC9H,EAAE,KAAK,EAAE,kBAAkB,EAAE,WAAW,EAAE,8DAA8D,EAAE;QAC1G,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,+CAA+C,EAAE;QACjF,EAAE,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,4CAA4C,EAAE;QAClF,EAAE,KAAK,EAAE,mBAAmB,EAAE,WAAW,EAAE,4CAA4C,EAAE;QACzF,EAAE,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,wCAAwC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE;KAC9G;IACD,QAAQ,EAAE,CAAC,KAAK,CAAC;IACjB,QAAQ,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC;IAC/B,OAAO,EAAE,IAAI;CACb,CAAC,CAAC"}

package/dist/cli/list/infra-deploy.list.cli-command.impl.d.ts

@@ -1,5 +1,39 @@
+import type { CommandContext, CommandOptions } from '@vibesdotdev/cli';
+import { type RuntimePath } from '@vibesdotdev/paths';
+/**
+ * An operator-supplied inventory root, resolved against the invocation cwd
+ * (`requireRuntimeCwd(runtime)`), which is also the base listed paths
+ * are shown relative to.
+ */
+export declare function resolveDeployListRoot(paths: RuntimePath, rootInput: string, cwd: string): {
+    root: string;
+    displayBase: string;
+};
+/**
+ * Simple topological order for deploy (earlier = must deploy first).
+ * Apps with no dependsOn come first. Uses Kahn's algorithm.
+ */
+export declare function computeDeployOrder(apps: Array<{
+    appId: string;
+    dependsOn: Array<{
+        appId: string;
+        reason?: string;
+        required?: boolean;
+    }>;
+}>): {
+    order: string[];
+    missingDependencies: {
+        appId: string;
+        requiredBy: string[];
+    }[];
+    optionalMissingDependencies: {
+        appId: string;
+        referencedBy: string[];
+        reasons: string[];
+    }[];
+};
 declare const _default: {
-    execute(args: Record<string, unknown>, opts: Record<string, unknown>): Promise<void>;
+    execute(args: CommandOptions, opts: CommandOptions, context: CommandContext): Promise<void>;
 };
 export default _default;
 //# sourceMappingURL=infra-deploy.list.cli-command.impl.d.ts.map

package/dist/cli/list/infra-deploy.list.cli-command.impl.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"infra-deploy.list.cli-command.impl.d.ts","sourceRoot":"","sources":["../../../src/cli/list/infra-deploy.list.cli-command.impl.ts"],"names":[],"mappings":";kBAiDqB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;;AAD3F,wBA4EE"}
+{"version":3,"file":"infra-deploy.list.cli-command.impl.d.ts","sourceRoot":"","sources":["../../../src/cli/list/infra-deploy.list.cli-command.impl.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AACvE,OAAO,EAAkB,KAAK,WAAW,EAAE,MAAM,oBAAoB,CAAC;AA8DtE;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM;;;EAMvF;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CACjC,IAAI,EAAE,KAAK,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CACzE,CAAC;;;;;;;;;;;EA8DF;;kBAGoB,cAAc,QAAQ,cAAc,WAAW,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;;AADlG,wBAoLE"}