@vibesdotdev/infra-deploy 0.0.2 → 1.0.0-rc.5

package/dist/cli/run/infra-deploy.run.cli-command.descriptor.d.ts

@@ -1,27 +1,81 @@
 declare const _default: {
-    id: string;
-    kind: "cli/command";
-    name: string;
-    description: string;
-    group: string;
-    arguments: {
-        name: string;
-        description: string;
-        required: boolean;
-        variadic: boolean;
-    }[];
-    options: ({
-        flags: string;
-        description: string;
-        default?: undefined;
-    } | {
-        flags: string;
-        description: string;
-        default: string;
-    })[];
-    surfaces: string[];
-    hardware: string[];
-    enabled: true;
+    readonly id: "infra-deploy.run";
+    readonly kind: "cli/command";
+    readonly name: "run";
+    readonly description: "Build and deploy the app in <path> (defaults to cwd)";
+    readonly group: "infra-deploy";
+    readonly arguments: [{
+        readonly name: "path";
+        readonly description: "Path to app directory containing deployment.config.ts";
+        readonly required: false;
+        readonly variadic: false;
+    }];
+    readonly options: [{
+        readonly flags: "--skip-build";
+        readonly description: "Skip build step (deploy pre-built output)";
+    }, {
+        readonly flags: "--skip-d1-migrations";
+        readonly description: "Legacy option: refuses when the selected Worker declares required D1 migrations";
+    }, {
+        readonly flags: "--dry-run";
+        readonly description: "Show what would be deployed, without uploading";
+    }, {
+        readonly flags: "--no-smoke";
+        readonly description: "Skip the post-deploy live probe (default: probe the primary origin until it answers healthily, and fail the deploy if it never does)";
+    }, {
+        readonly flags: "--environment <name>";
+        readonly description: "Target Vibes environment for deploy credential resolution";
+    }, {
+        readonly flags: "--use-ambient-credentials";
+        readonly description: "Use CF_API_TOKEN/CF_ACCOUNT_ID from this shell. Operator default ignores ambient Cloudflare credentials and reads the secrets store.";
+    }, {
+        readonly flags: "--branch <name>";
+        readonly description: "Deploy branch (default: main)";
+        readonly default: "main";
+    }, {
+        readonly flags: "--wrangler-env <name>";
+        readonly description: "Wrangler environment name (Workers only)";
+    }, {
+        readonly flags: "--containers-rollout <mode>";
+        readonly description: "Container rollout mode passed to wrangler (none|gradual|immediate). \"none\" deploys Worker code without building/updating Containers — use when the image is unchanged and no Docker daemon is available (Workers only)";
+    }, {
+        readonly flags: "--do-app-id <id>";
+        readonly description: "Existing DigitalOcean App id (update instead of create) — overrides descriptor";
+    }, {
+        readonly flags: "--do-region <slug>";
+        readonly description: "DO region slug override (descriptor preferred; default: nyc)";
+    }, {
+        readonly flags: "--do-git-repo <url>";
+        readonly description: "DO App source git repo override (descriptor preferred)";
+    }, {
+        readonly flags: "--do-git-branch <name>";
+        readonly description: "DO App source branch override (descriptor preferred; default: main)";
+    }, {
+        readonly flags: "--do-dry-run-spec";
+        readonly description: "Print the normalized DigitalOcean App spec (JSON) without contacting the API. Implies --dry-run.";
+    }, {
+        readonly flags: "--do-wait";
+        readonly description: "Wait for the App Platform deployment to reach ACTIVE and report deployment log URLs.";
+    }, {
+        readonly flags: "--do-wait-timeout <ms>";
+        readonly description: "Override the --do-wait timeout in milliseconds (default: 900000)";
+    }, {
+        readonly flags: "--logs-ref <ref>";
+        readonly description: "Redacted deploy log artifact reference to attach to the run ledger";
+    }, {
+        readonly flags: "--provider-trace-ref <ref>";
+        readonly description: "Provider trace reference override to attach to the run ledger";
+    }, {
+        readonly flags: "--remediation-url <url>";
+        readonly description: "Runbook or remediation URL to attach to failed deploy evidence";
+    }, {
+        readonly flags: "-o, --output <format>";
+        readonly description: "Output format (text|json)";
+        readonly default: "text";
+    }];
+    readonly surfaces: ["cli"];
+    readonly hardware: ["consumer", "cloud"];
+    readonly enabled: true;
 };
 export default _default;
 //# sourceMappingURL=infra-deploy.run.cli-command.descriptor.d.ts.map

package/dist/cli/run/infra-deploy.run.cli-command.descriptor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"infra-deploy.run.cli-command.descriptor.d.ts","sourceRoot":"","sources":["../../../src/cli/run/infra-deploy.run.cli-command.descriptor.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAEA,wBA8CG"}
+{"version":3,"file":"infra-deploy.run.cli-command.descriptor.d.ts","sourceRoot":"","sources":["../../../src/cli/run/infra-deploy.run.cli-command.descriptor.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEA,wBA6FG"}

package/dist/cli/run/infra-deploy.run.cli-command.descriptor.js

@@ -1,4 +1,4 @@
-import { createRuntimeAsset } from '@vibesdotdev/runtime';
+import { createRuntimeAsset } from '@vibesdotdev/kernel';
 export default createRuntimeAsset({
     id: 'infra-deploy.run',
     kind: 'cli/command',
@@ -17,29 +17,70 @@ export default createRuntimeAsset({
         { flags: '--skip-build', description: 'Skip build step (deploy pre-built output)' },
         {
             flags: '--skip-d1-migrations',
-            description: 'Skip D1 migration replay for this deploy (Workers only)'
+            description: 'Legacy option: refuses when the selected Worker declares required D1 migrations'
         },
         { flags: '--dry-run', description: 'Show what would be deployed, without uploading' },
         {
-            flags: '--workspace-root <dir>',
-            description: 'Override workspace root (default: process.cwd())'
+            flags: '--no-smoke',
+            description: 'Skip the post-deploy live probe (default: probe the primary origin until it answers healthily, and fail the deploy if it never does)'
         },
         {
             flags: '--environment <name>',
             description: 'Target Vibes environment for deploy credential resolution'
         },
+        {
+            flags: '--use-ambient-credentials',
+            description: 'Use CF_API_TOKEN/CF_ACCOUNT_ID from this shell. Operator default ignores ambient Cloudflare credentials and reads the secrets store.'
+        },
         { flags: '--branch <name>', description: 'Deploy branch (default: main)', default: 'main' },
         {
             flags: '--wrangler-env <name>',
             description: 'Wrangler environment name (Workers only)'
         },
+        {
+            flags: '--containers-rollout <mode>',
+            description: 'Container rollout mode passed to wrangler (none|gradual|immediate). "none" deploys Worker code without building/updating Containers — use when the image is unchanged and no Docker daemon is available (Workers only)'
+        },
         {
             flags: '--do-app-id <id>',
-            description: 'Existing DigitalOcean App id (update instead of create)'
+            description: 'Existing DigitalOcean App id (update instead of create) — overrides descriptor'
+        },
+        {
+            flags: '--do-region <slug>',
+            description: 'DO region slug override (descriptor preferred; default: nyc)'
+        },
+        {
+            flags: '--do-git-repo <url>',
+            description: 'DO App source git repo override (descriptor preferred)'
+        },
+        {
+            flags: '--do-git-branch <name>',
+            description: 'DO App source branch override (descriptor preferred; default: main)'
+        },
+        {
+            flags: '--do-dry-run-spec',
+            description: 'Print the normalized DigitalOcean App spec (JSON) without contacting the API. Implies --dry-run.'
+        },
+        {
+            flags: '--do-wait',
+            description: 'Wait for the App Platform deployment to reach ACTIVE and report deployment log URLs.'
+        },
+        {
+            flags: '--do-wait-timeout <ms>',
+            description: 'Override the --do-wait timeout in milliseconds (default: 900000)'
+        },
+        {
+            flags: '--logs-ref <ref>',
+            description: 'Redacted deploy log artifact reference to attach to the run ledger'
+        },
+        {
+            flags: '--provider-trace-ref <ref>',
+            description: 'Provider trace reference override to attach to the run ledger'
+        },
+        {
+            flags: '--remediation-url <url>',
+            description: 'Runbook or remediation URL to attach to failed deploy evidence'
         },
-        { flags: '--do-region <slug>', description: 'DO region slug (default: nyc)' },
-        { flags: '--do-git-repo <url>', description: 'DO App source git repo URL' },
-        { flags: '--do-git-branch <name>', description: 'DO App source branch (default: main)' },
         { flags: '-o, --output <format>', description: 'Output format (text|json)', default: 'text' }
     ],
     surfaces: ['cli'],

package/dist/cli/run/infra-deploy.run.cli-command.descriptor.js.map

@@ -1 +1 @@
-{"version":3,"file":"infra-deploy.run.cli-command.descriptor.js","sourceRoot":"","sources":["../../../src/cli/run/infra-deploy.run.cli-command.descriptor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAE1D,eAAe,kBAAkB,CAAC;IACjC,EAAE,EAAE,kBAAkB;IACtB,IAAI,EAAE,aAAa;IACnB,IAAI,EAAE,KAAK;IACX,WAAW,EAAE,sDAAsD;IACnE,KAAK,EAAE,cAAc;IACrB,SAAS,EAAE;QACV;YACC,IAAI,EAAE,MAAM;YACZ,WAAW,EAAE,uDAAuD;YACpE,QAAQ,EAAE,KAAK;YACf,QAAQ,EAAE,KAAK;SACf;KACD;IACD,OAAO,EAAE;QACR,EAAE,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,2CAA2C,EAAE;QACnF;YACC,KAAK,EAAE,sBAAsB;YAC7B,WAAW,EAAE,yDAAyD;SACtE;QACD,EAAE,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,gDAAgD,EAAE;QACrF;YACC,KAAK,EAAE,wBAAwB;YAC/B,WAAW,EAAE,kDAAkD;SAC/D;QACD;YACC,KAAK,EAAE,sBAAsB;YAC7B,WAAW,EAAE,2DAA2D;SACxE;QACD,EAAE,KAAK,EAAE,iBAAiB,EAAE,WAAW,EAAE,+BAA+B,EAAE,OAAO,EAAE,MAAM,EAAE;QAC3F;YACC,KAAK,EAAE,uBAAuB;YAC9B,WAAW,EAAE,0CAA0C;SACvD;QACD;YACC,KAAK,EAAE,kBAAkB;YACzB,WAAW,EAAE,yDAAyD;SACtE;QACD,EAAE,KAAK,EAAE,oBAAoB,EAAE,WAAW,EAAE,+BAA+B,EAAE;QAC7E,EAAE,KAAK,EAAE,qBAAqB,EAAE,WAAW,EAAE,4BAA4B,EAAE;QAC3E,EAAE,KAAK,EAAE,wBAAwB,EAAE,WAAW,EAAE,sCAAsC,EAAE;QACxF,EAAE,KAAK,EAAE,uBAAuB,EAAE,WAAW,EAAE,2BAA2B,EAAE,OAAO,EAAE,MAAM,EAAE;KAC7F;IACD,QAAQ,EAAE,CAAC,KAAK,CAAC;IACjB,QAAQ,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC;IAC/B,OAAO,EAAE,IAAI;CACb,CAAC,CAAC"}
+{"version":3,"file":"infra-deploy.run.cli-command.descriptor.js","sourceRoot":"","sources":["../../../src/cli/run/infra-deploy.run.cli-command.descriptor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAEzD,eAAe,kBAAkB,CAAC;IACjC,EAAE,EAAE,kBAAkB;IACtB,IAAI,EAAE,aAAa;IACnB,IAAI,EAAE,KAAK;IACX,WAAW,EAAE,sDAAsD;IACnE,KAAK,EAAE,cAAc;IACrB,SAAS,EAAE;QACV;YACC,IAAI,EAAE,MAAM;YACZ,WAAW,EAAE,uDAAuD;YACpE,QAAQ,EAAE,KAAK;YACf,QAAQ,EAAE,KAAK;SACf;KACD;IACD,OAAO,EAAE;QACR,EAAE,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,2CAA2C,EAAE;QACnF;YACC,KAAK,EAAE,sBAAsB;YAC7B,WAAW,EAAE,iFAAiF;SAC9F;QACD,EAAE,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,gDAAgD,EAAE;QACrF;YACC,KAAK,EAAE,YAAY;YACnB,WAAW,EACV,sIAAsI;SACvI;QACD;YACC,KAAK,EAAE,sBAAsB;YAC7B,WAAW,EAAE,2DAA2D;SACxE;QACD;YACC,KAAK,EAAE,2BAA2B;YAClC,WAAW,EACV,sIAAsI;SACvI;QACD,EAAE,KAAK,EAAE,iBAAiB,EAAE,WAAW,EAAE,+BAA+B,EAAE,OAAO,EAAE,MAAM,EAAE;QAC3F;YACC,KAAK,EAAE,uBAAuB;YAC9B,WAAW,EAAE,0CAA0C;SACvD;QACD;YACC,KAAK,EAAE,6BAA6B;YACpC,WAAW,EACV,wNAAwN;SACzN;QACD;YACC,KAAK,EAAE,kBAAkB;YACzB,WAAW,EACV,gFAAgF;SACjF;QACD;YACC,KAAK,EAAE,oBAAoB;YAC3B,WAAW,EAAE,8DAA8D;SAC3E;QACD;YACC,KAAK,EAAE,qBAAqB;YAC5B,WAAW,EAAE,wDAAwD;SACrE;QACD;YACC,KAAK,EAAE,wBAAwB;YAC/B,WAAW,EAAE,qEAAqE;SAClF;QACD;YACC,KAAK,EAAE,mBAAmB;YAC1B,WAAW,EACV,kGAAkG;SACnG;QACD;YACC,KAAK,EAAE,WAAW;YAClB,WAAW,EACV,sFAAsF;SACvF;QACD;YACC,KAAK,EAAE,wBAAwB;YAC/B,WAAW,EAAE,kEAAkE;SAC/E;QACD;YACC,KAAK,EAAE,kBAAkB;YACzB,WAAW,EAAE,oEAAoE;SACjF;QACD;YACC,KAAK,EAAE,4BAA4B;YACnC,WAAW,EAAE,+DAA+D;SAC5E;QACD;YACC,KAAK,EAAE,yBAAyB;YAChC,WAAW,EAAE,gEAAgE;SAC7E;QACD,EAAE,KAAK,EAAE,uBAAuB,EAAE,WAAW,EAAE,2BAA2B,EAAE,OAAO,EAAE,MAAM,EAAE;KAC7F;IACD,QAAQ,EAAE,CAAC,KAAK,CAAC;IACjB,QAAQ,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC;IAC/B,OAAO,EAAE,IAAI;CACb,CAAC,CAAC"}

package/dist/cli/run/infra-deploy.run.cli-command.impl.d.ts

@@ -1,5 +1,50 @@
+import { CapabilityError, type VibesRuntime } from '@vibesdotdev/kernel';
+import type { CommandContext, CommandOptions } from '@vibesdotdev/cli';
+import type { DatabaseMigrationLog, DeploymentProviderEnvironment, DeploymentProviderImplementation } from '@vibesdotdev/infra-core/kinds';
+import type { UIContext } from '@vibesdotdev/cli/providers';
+import { type RuntimePath } from '@vibesdotdev/paths';
+import { collectDeployReadinessReport } from '../readiness/infra-deploy.readiness.cli-command.impl.ts';
+export declare function failedDeploymentConfigLoad(err: unknown): CapabilityError;
+export declare function emitDeployOutputLine(ui: Pick<UIContext, 'log' | 'error'>, stream: 'stdout' | 'stderr', line: string): void;
+export declare function deployWorkspaceRoot(paths: RuntimePath, workspaceRootDir: string | undefined, appDir: string, boundWorkspace: string): string;
+/**
+ * The fail-closed deploy prologue, extracted as one owner-level seam so the
+ * ordering guarantee is testable via dependency injection (resolver + readiness).
+ *
+ * Resolves the provider environment FIRST, runs readiness UNDER that same
+ * environment when the provider renders under it (so the deployment module
+ * projects post-resolution bindings), then runs the environment gate. If the
+ * projection is a strip (required secrets declared but unbound), it THROWS the
+ * refusal here — before the caller records any ledger entry or dispatches to a
+ * provider. The returned `envOverrides` is the SAME object the provider's
+ * release receives, so nothing downstream reads pre-resolution state.
+ */
+export declare function prepareDeployProjection(input: {
+    provider: string;
+    /** The resolved provider; it answers the environment its tooling runs under. */
+    implementation: Pick<DeploymentProviderImplementation, 'environment'>;
+    appDir: string;
+    workspaceRoot: string;
+    /** The directory readiness paths are shown relative to: the invocation cwd. */
+    displayBase: string;
+    selectedEnvironment: string;
+    targetEnvironment?: string;
+    wranglerEnvironmentOverride?: string;
+    credentialSource: 'secrets-store' | 'ambient';
+    runtime: VibesRuntime;
+    execution: NonNullable<Parameters<typeof collectDeployReadinessReport>[0]>['execution'];
+    ui: DatabaseMigrationLog;
+    emitEnvironmentLine?: boolean;
+}, deps?: {
+    resolveEnvironment?: () => Promise<DeploymentProviderEnvironment>;
+    collectReadiness?: typeof collectDeployReadinessReport;
+}): Promise<{
+    envOverrides: Record<string, string>;
+    readinessReport: Awaited<ReturnType<typeof collectDeployReadinessReport>>;
+    environmentResolution: Awaited<ReturnType<typeof collectDeployReadinessReport>>['environmentResolution'];
+}>;
 declare const _default: {
-    execute(args: Record<string, unknown>, opts: Record<string, unknown>): Promise<void>;
+    execute(args: CommandOptions, opts: CommandOptions, context: CommandContext): Promise<void>;
 };
 export default _default;
 //# sourceMappingURL=infra-deploy.run.cli-command.impl.d.ts.map

package/dist/cli/run/infra-deploy.run.cli-command.impl.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"infra-deploy.run.cli-command.impl.d.ts","sourceRoot":"","sources":["../../../src/cli/run/infra-deploy.run.cli-command.impl.ts"],"names":[],"mappings":";kBAmHqB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;;AAD3F,wBAuNE"}
+{"version":3,"file":"infra-deploy.run.cli-command.impl.d.ts","sourceRoot":"","sources":["../../../src/cli/run/infra-deploy.run.cli-command.impl.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAsE,KAAK,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAC7I,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AACvE,OAAO,KAAK,EACX,oBAAoB,EACpB,6BAA6B,EAC7B,gCAAgC,EAEhC,MAAM,+BAA+B,CAAC;AAKvC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAkB,KAAK,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEtE,OAAO,EAAE,4BAA4B,EAAE,MAAM,yDAAyD,CAAC;AA8CvG,wBAAgB,0BAA0B,CAAC,GAAG,EAAE,OAAO,GAAG,eAAe,CAQxE;AAED,wBAAgB,oBAAoB,CACnC,EAAE,EAAE,IAAI,CAAC,SAAS,EAAE,KAAK,GAAG,OAAO,CAAC,EACpC,MAAM,EAAE,QAAQ,GAAG,QAAQ,EAC3B,IAAI,EAAE,MAAM,GACV,IAAI,CAGN;AAoCD,wBAAgB,mBAAmB,CAClC,KAAK,EAAE,WAAW,EAClB,gBAAgB,EAAE,MAAM,GAAG,SAAS,EACpC,MAAM,EAAE,MAAM,EACd,cAAc,EAAE,MAAM,GACpB,MAAM,CAeR;AAiCD;;;;;;;;;;;GAWG;AACH,wBAAsB,uBAAuB,CAC5C,KAAK,EAAE;IACN,QAAQ,EAAE,MAAM,CAAC;IACjB,gFAAgF;IAChF,cAAc,EAAE,IAAI,CAAC,gCAAgC,EAAE,aAAa,CAAC,CAAC;IACtE,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,+EAA+E;IAC/E,WAAW,EAAE,MAAM,CAAC;IACpB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,2BAA2B,CAAC,EAAE,MAAM,CAAC;IACrC,gBAAgB,EAAE,eAAe,GAAG,SAAS,CAAC;IAC9C,OAAO,EAAE,YAAY,CAAC;IACtB,SAAS,EAAE,WAAW,CAAC,UAAU,CAAC,OAAO,4BAA4B,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;IACxF,EAAE,EAAE,oBAAoB,CAAC;IACzB,mBAAmB,CAAC,EAAE,OAAO,CAAC;CAC9B,EACD,IAAI,GAAE;IACL,kBAAkB,CAAC,EAAE,MAAM,OAAO,CAAC,6BAA6B,CAAC,CAAC;IAClE,gBAAgB,CAAC,EAAE,OAAO,4BAA4B,CAAC;CAClD,GACJ,OAAO,CAAC;IACV,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,eAAe,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,4BAA4B,CAAC,CAAC,CAAC;IAC1E,qBAAqB,EAAE,OAAO,CAC7B,UAAU,CAAC,OAAO,4BAA4B,CAAC,CAC/C,CAAC,uBAAuB,CAAC,CAAC;CAC3B,CAAC,CA0CD;;kBAaO,cAAc,QACd,cAAc,WACX,cAAc,GACrB,OAAO,CAAC,IAAI,CAAC;;AALjB,wBAwVE"}