@vibesdotdev/infra-deploy 0.0.2 → 1.0.0-rc.5

package/dist/cli/workers/infra-workers-build.cli-command.descriptor.js

@@ -0,0 +1,32 @@
+import { createRuntimeAsset } from '@vibesdotdev/kernel';
+export default createRuntimeAsset({
+    id: 'infra-workers.build',
+    kind: 'cli/command',
+    name: 'build',
+    description: 'Plan or submit a source-revision-bound DOKS worker image build through the provider runtime',
+    group: 'infra-workers',
+    arguments: [
+        {
+            name: 'worker',
+            description: 'Worker image target id, for example pdf-ocr-drainer (run with --dry-run to see the rendered Job).',
+            required: true,
+            variadic: false
+        }
+    ],
+    options: [
+        {
+            flags: '--sha <sha>',
+            description: 'Exact 40-character git commit SHA to build (must already be pushed to origin).'
+        },
+        { flags: '--dry-run', description: 'Print the rendered Kaniko Job manifest without submitting.' },
+        { flags: '--timeout <ms>', description: 'Bounded wait for the image-build Job (default: 2700000).' },
+        {
+            flags: '--environment <name>',
+            description: 'Vibes secrets environment to use for build credentials'
+        }
+    ],
+    surfaces: ['cli'],
+    hardware: ['consumer', 'cloud'],
+    enabled: true
+});
+//# sourceMappingURL=infra-workers-build.cli-command.descriptor.js.map

package/dist/cli/workers/infra-workers-build.cli-command.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"infra-workers-build.cli-command.descriptor.js","sourceRoot":"","sources":["../../../src/cli/workers/infra-workers-build.cli-command.descriptor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAEzD,eAAe,kBAAkB,CAAC;IACjC,EAAE,EAAE,qBAAqB;IACzB,IAAI,EAAE,aAAa;IACnB,IAAI,EAAE,OAAO;IACb,WAAW,EACV,6FAA6F;IAC9F,KAAK,EAAE,eAAe;IACtB,SAAS,EAAE;QACV;YACC,IAAI,EAAE,QAAQ;YACd,WAAW,EACV,mGAAmG;YACpG,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE,KAAK;SACf;KACD;IACD,OAAO,EAAE;QACR;YACC,KAAK,EAAE,aAAa;YACpB,WAAW,EAAE,gFAAgF;SAC7F;QACD,EAAE,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,4DAA4D,EAAE;QACjG,EAAE,KAAK,EAAE,gBAAgB,EAAE,WAAW,EAAE,0DAA0D,EAAE;QACpG;YACC,KAAK,EAAE,sBAAsB;YAC7B,WAAW,EAAE,wDAAwD;SACrE;KACD;IACD,QAAQ,EAAE,CAAC,KAAK,CAAC;IACjB,QAAQ,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC;IAC/B,OAAO,EAAE,IAAI;CACb,CAAC,CAAC"}

package/dist/cli/workers/infra-workers-build.cli-command.impl.d.ts

@@ -0,0 +1,6 @@
+import type { CommandContext, CommandOptions } from '@vibesdotdev/cli';
+declare const _default: {
+    execute(args: CommandOptions, opts: CommandOptions, context: CommandContext): Promise<void>;
+};
+export default _default;
+//# sourceMappingURL=infra-workers-build.cli-command.impl.d.ts.map

package/dist/cli/workers/infra-workers-build.cli-command.impl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"infra-workers-build.cli-command.impl.d.ts","sourceRoot":"","sources":["../../../src/cli/workers/infra-workers-build.cli-command.impl.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;;kBAyBlD,cAAc,QAAQ,cAAc,WAAW,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;;AADlG,wBAyCE"}

package/dist/cli/workers/infra-workers-build.cli-command.impl.js

@@ -0,0 +1,67 @@
+import { CapabilityError, CaughtFailureSchema, getRuntimeStdio, valueFreeFailure } from '@vibesdotdev/kernel';
+import { admitWorkerPlan, applyAndWaitForDoksWorker, printWorkerPlan, resolveDoksWorkerClient, selectDoksWorkers } from "./doks-worker-runtime.js";
+import { z } from 'zod/v4';
+const NonEmptyStringSchema = z.string().trim().min(1);
+const FlagSchema = z.union([z.literal(true), z.literal('true')]);
+const PositiveFiniteNumberSchema = z.number().finite().positive();
+function readString(value) {
+    const parsed = NonEmptyStringSchema.safeParse(value);
+    return parsed.success ? parsed.data : undefined;
+}
+function readBoolean(value) {
+    return FlagSchema.safeParse(value).success;
+}
+function readTimeout(value, fallback) {
+    const coerced = z.coerce.number().safeParse(value);
+    if (coerced.success && PositiveFiniteNumberSchema.safeParse(coerced.data).success) {
+        return coerced.data;
+    }
+    return fallback;
+}
+export default {
+    async execute(args, opts, context) {
+        const workerId = readString(args.worker);
+        const sha = readString(opts.sha);
+        if (!workerId)
+            throw new CapabilityError('A worker id is required.', 'INVALID_INPUT');
+        if (!sha || !/^[a-f0-9]{40}$/.test(sha)) {
+            throw new CapabilityError('--sha must be an exact 40-character source revision.', 'INVALID_INPUT');
+        }
+        const runtime = context.runtime;
+        const workers = selectDoksWorkers(runtime, [workerId]);
+        const worker = workers[0];
+        if (!worker) {
+            throw new CapabilityError(`DOKS worker descriptor(s) not found: ${workerId}`, 'NOT_FOUND');
+        }
+        const dryRun = readBoolean(opts.dryRun);
+        const client = await resolveDoksWorkerClient(runtime, {
+            adapter: worker.config?.adapter,
+            environment: readString(opts.environment),
+            mutate: !dryRun
+        });
+        const planBuild = client.planBuild;
+        let plan;
+        try {
+            const rawPlan = await planBuild.call(client, worker, sha);
+            plan = admitWorkerPlan(rawPlan);
+        }
+        catch (error) {
+            if (error instanceof CapabilityError)
+                throw error;
+            throw new CapabilityError('DOKS worker planning failed.', 'INTERNAL', {
+                cause: valueFreeFailure(CaughtFailureSchema.parse(error))
+            });
+        }
+        const stdio = await getRuntimeStdio(runtime);
+        if (dryRun)
+            await printWorkerPlan(runtime, plan);
+        else {
+            await applyAndWaitForDoksWorker(client, plan, {
+                runtime,
+                timeoutMs: readTimeout(opts.timeout, 45 * 60_000),
+                onStatus: (status) => stdio.write('stdout', `[workers build] ${status.worker}: ${status.state} (${status.reason})\n`)
+            });
+        }
+    }
+};
+//# sourceMappingURL=infra-workers-build.cli-command.impl.js.map

package/dist/cli/workers/infra-workers-build.cli-command.impl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"infra-workers-build.cli-command.impl.js","sourceRoot":"","sources":["../../../src/cli/workers/infra-workers-build.cli-command.impl.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAC9G,OAAO,EACN,eAAe,EACf,yBAAyB,EACzB,eAAe,EACf,uBAAuB,EACvB,iBAAiB,EAEjB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAE3B,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AACtD,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AACjE,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC;AAElE,SAAS,UAAU,CAAC,KAA6B;IAChD,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACrD,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AACjD,CAAC;AAED,SAAS,WAAW,CAAC,KAA6B;IACjD,OAAO,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AAC5C,CAAC;AAED,SAAS,WAAW,CAAC,KAA6B,EAAE,QAAgB;IACnE,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACnD,IAAI,OAAO,CAAC,OAAO,IAAI,0BAA0B,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;QACnF,OAAO,OAAO,CAAC,IAAI,CAAC;IACrB,CAAC;IACD,OAAO,QAAQ,CAAC;AACjB,CAAC;AAED,eAAe;IACd,KAAK,CAAC,OAAO,CAAC,IAAoB,EAAE,IAAoB,EAAE,OAAuB;QAChF,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACzC,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,eAAe,CAAC,0BAA0B,EAAE,eAAe,CAAC,CAAC;QACtF,IAAI,CAAC,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACzC,MAAM,IAAI,eAAe,CAAC,sDAAsD,EAAE,eAAe,CAAC,CAAC;QACpG,CAAC;QACD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAChC,MAAM,OAAO,GAAG,iBAAiB,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;QACvD,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,MAAM,IAAI,eAAe,CAAC,wCAAwC,QAAQ,EAAE,EAAE,WAAW,CAAC,CAAC;QAC5F,CAAC;QACD,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAAC,OAAO,EAAE;YACrD,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO;YAC/B,WAAW,EAAE,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC;YACzC,MAAM,EAAE,CAAC,MAAM;SACf,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;QACnC,IAAI,IAAoB,CAAC;QACzB,IAAI,CAAC;YACJ,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;YAC1D,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,KAAK,YAAY,eAAe;gBAAE,MAAM,KAAK,CAAC;YAClD,MAAM,IAAI,eAAe,CAAC,8BAA8B,EAAE,UAAU,EAAE;gBACrE,KAAK,EAAE,gBAAgB,CAAC,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;aACzD,CAAC,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC;QAC7C,IAAI,MAAM;YAAE,MAAM,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;aAC5C,CAAC;YACL,MAAM,yBAAyB,CAAC,MAAM,EAAE,IAAI,EAAE;gBAC7C,OAAO;gBACP,SAAS,EAAE,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,GAAG,MAAM,CAAC;gBACjD,QAAQ,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,mBAAmB,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,KAAK,KAAK,MAAM,CAAC,MAAM,KAAK,CAAC;aACrH,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;CACD,CAAC"}

package/dist/cli/workers/infra-workers-logs.cli-command.descriptor.d.ts

@@ -0,0 +1,48 @@
+declare const _default: {
+    readonly id: "infra-workers.logs";
+    readonly kind: "cli/command";
+    readonly name: "logs";
+    readonly description: "Read shared DOKS worker logs through the infrastructure CLI surface";
+    readonly group: "infra-workers";
+    readonly arguments: [{
+        readonly name: "worker";
+        readonly description: "Worker deployment name, pod name, or kubectl resource ref (for example pdf-ocr-drainer)";
+        readonly required: true;
+        readonly variadic: false;
+    }];
+    readonly options: [{
+        readonly flags: "--namespace <name>";
+        readonly description: "Kubernetes namespace containing worker pods";
+        readonly default: "vibes-workers";
+    }, {
+        readonly flags: "--kubeconfig <path>";
+        readonly description: "Kubeconfig path to pass to kubectl (default from KUBECONFIG)";
+    }, {
+        readonly flags: "--tail <n>";
+        readonly description: "Number of log lines to read";
+        readonly default: "200";
+    }, {
+        readonly flags: "--since <duration>";
+        readonly description: "Only return logs newer than a relative duration, such as 15m or 2h";
+    }, {
+        readonly flags: "--container <name>";
+        readonly description: "Container name for multi-container pods";
+    }, {
+        readonly flags: "--timestamps";
+        readonly description: "Include Kubernetes log timestamps";
+        readonly default: false;
+    }, {
+        readonly flags: "--previous";
+        readonly description: "Read previous container logs";
+        readonly default: false;
+    }, {
+        readonly flags: "--follow";
+        readonly description: "Follow logs until interrupted";
+        readonly default: false;
+    }];
+    readonly surfaces: ["cli"];
+    readonly hardware: ["consumer", "cloud"];
+    readonly enabled: true;
+};
+export default _default;
+//# sourceMappingURL=infra-workers-logs.cli-command.descriptor.d.ts.map

package/dist/cli/workers/infra-workers-logs.cli-command.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"infra-workers-logs.cli-command.descriptor.d.ts","sourceRoot":"","sources":["../../../src/cli/workers/infra-workers-logs.cli-command.descriptor.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAGA,wBAwDG"}

package/dist/cli/workers/infra-workers-logs.cli-command.descriptor.js

@@ -0,0 +1,60 @@
+import { createRuntimeAsset } from '@vibesdotdev/kernel';
+import { WORKER_LOG_DEFAULTS } from "../../schemas/worker-logs.js";
+export default createRuntimeAsset({
+    id: 'infra-workers.logs',
+    kind: 'cli/command',
+    name: 'logs',
+    description: 'Read shared DOKS worker logs through the infrastructure CLI surface',
+    group: 'infra-workers',
+    arguments: [
+        {
+            name: 'worker',
+            description: 'Worker deployment name, pod name, or kubectl resource ref (for example pdf-ocr-drainer)',
+            required: true,
+            variadic: false
+        }
+    ],
+    options: [
+        {
+            flags: '--namespace <name>',
+            description: 'Kubernetes namespace containing worker pods',
+            default: WORKER_LOG_DEFAULTS.namespace
+        },
+        {
+            flags: '--kubeconfig <path>',
+            description: 'Kubeconfig path to pass to kubectl (default from KUBECONFIG)'
+        },
+        {
+            flags: '--tail <n>',
+            description: 'Number of log lines to read',
+            default: WORKER_LOG_DEFAULTS.tail
+        },
+        {
+            flags: '--since <duration>',
+            description: 'Only return logs newer than a relative duration, such as 15m or 2h'
+        },
+        {
+            flags: '--container <name>',
+            description: 'Container name for multi-container pods'
+        },
+        {
+            flags: '--timestamps',
+            description: 'Include Kubernetes log timestamps',
+            default: WORKER_LOG_DEFAULTS.timestamps
+        },
+        {
+            flags: '--previous',
+            description: 'Read previous container logs',
+            default: WORKER_LOG_DEFAULTS.previous
+        },
+        {
+            flags: '--follow',
+            description: 'Follow logs until interrupted',
+            default: WORKER_LOG_DEFAULTS.follow
+        }
+    ],
+    surfaces: ['cli'],
+    hardware: ['consumer', 'cloud'],
+    enabled: true
+});
+//# sourceMappingURL=infra-workers-logs.cli-command.descriptor.js.map

package/dist/cli/workers/infra-workers-logs.cli-command.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"infra-workers-logs.cli-command.descriptor.js","sourceRoot":"","sources":["../../../src/cli/workers/infra-workers-logs.cli-command.descriptor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AAEnE,eAAe,kBAAkB,CAAC;IACjC,EAAE,EAAE,oBAAoB;IACxB,IAAI,EAAE,aAAa;IACnB,IAAI,EAAE,MAAM;IACZ,WAAW,EAAE,qEAAqE;IAClF,KAAK,EAAE,eAAe;IACtB,SAAS,EAAE;QACV;YACC,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,yFAAyF;YACtG,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE,KAAK;SACf;KACD;IACD,OAAO,EAAE;QACR;YACC,KAAK,EAAE,oBAAoB;YAC3B,WAAW,EAAE,6CAA6C;YAC1D,OAAO,EAAE,mBAAmB,CAAC,SAAS;SACtC;QACD;YACC,KAAK,EAAE,qBAAqB;YAC5B,WAAW,EAAE,8DAA8D;SAC3E;QACD;YACC,KAAK,EAAE,YAAY;YACnB,WAAW,EAAE,6BAA6B;YAC1C,OAAO,EAAE,mBAAmB,CAAC,IAAI;SACjC;QACD;YACC,KAAK,EAAE,oBAAoB;YAC3B,WAAW,EAAE,oEAAoE;SACjF;QACD;YACC,KAAK,EAAE,oBAAoB;YAC3B,WAAW,EAAE,yCAAyC;SACtD;QACD;YACC,KAAK,EAAE,cAAc;YACrB,WAAW,EAAE,mCAAmC;YAChD,OAAO,EAAE,mBAAmB,CAAC,UAAU;SACvC;QACD;YACC,KAAK,EAAE,YAAY;YACnB,WAAW,EAAE,8BAA8B;YAC3C,OAAO,EAAE,mBAAmB,CAAC,QAAQ;SACrC;QACD;YACC,KAAK,EAAE,UAAU;YACjB,WAAW,EAAE,+BAA+B;YAC5C,OAAO,EAAE,mBAAmB,CAAC,MAAM;SACnC;KACD;IACD,QAAQ,EAAE,CAAC,KAAK,CAAC;IACjB,QAAQ,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC;IAC/B,OAAO,EAAE,IAAI;CACb,CAAC,CAAC"}

package/dist/cli/workers/infra-workers-logs.cli-command.impl.d.ts

@@ -0,0 +1,6 @@
+import type { CommandContext, CommandOptions } from '@vibesdotdev/cli';
+declare const _default: {
+    execute(args: CommandOptions, opts: CommandOptions, context: CommandContext): Promise<void>;
+};
+export default _default;
+//# sourceMappingURL=infra-workers-logs.cli-command.impl.d.ts.map

package/dist/cli/workers/infra-workers-logs.cli-command.impl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"infra-workers-logs.cli-command.impl.d.ts","sourceRoot":"","sources":["../../../src/cli/workers/infra-workers-logs.cli-command.impl.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;;kBAKlD,cAAc,QAAQ,cAAc,WAAW,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;;AADlG,wBAgEE"}

package/dist/cli/workers/infra-workers-logs.cli-command.impl.js

@@ -0,0 +1,74 @@
+import { CapabilityError, getRuntimeStdio, isCapabilityError, settle } from '@vibesdotdev/kernel';
+import { createCLIActionLifetime } from '@vibesdotdev/cli/providers';
+import { WorkerLogsInputSchema } from "../../schemas/worker-logs.js";
+export default {
+    async execute(args, opts, context) {
+        const runtime = context.runtime;
+        const admitted = WorkerLogsInputSchema.safeParse({
+            ...opts,
+            worker: args.worker,
+            namespace: opts.namespace ?? runtime.getEnv('VIBES_K8S_NAMESPACE')
+        });
+        if (!admitted.success) {
+            throw new CapabilityError('Invalid worker log arguments.', 'INVALID_INPUT', {
+                reason: 'worker-logs-input-invalid', cause: admitted.error
+            });
+        }
+        const { worker, resource, namespace, tail, kubeconfig, since, container, timestamps, previous, follow } = admitted.data;
+        const selected = await runtime.query('infra/logs')
+            .filter(descriptor => descriptor.tags?.includes('worker-logs') === true).select();
+        const logs = selected?.impl;
+        const streamLogs = logs?.streamLogs;
+        if (!logs || !streamLogs) {
+            throw new CapabilityError('The selected log provider cannot stream workload logs.', 'UNAVAILABLE', {
+                reason: 'worker-log-stream-unavailable'
+            });
+        }
+        const stdio = await getRuntimeStdio(runtime);
+        const cancel = new AbortController();
+        const lifetime = await createCLIActionLifetime(runtime, () => cancel.abort());
+        let stream;
+        const operation = await settle(async () => {
+            lifetime.bindProcessSignals();
+            stream = await streamLogs.call(logs, {
+                resource, namespace, kubeconfig, tail: Number(tail), since, container,
+                timestamps, previous, follow,
+                signal: AbortSignal.any([cancel.signal, runtime.lifecycle.signal])
+            });
+            const active = stream;
+            const output = (async () => {
+                const decoder = new TextDecoder();
+                for await (const chunk of active.output)
+                    await stdio.write('stdout', decoder.decode(chunk, { stream: true }));
+                const remaining = decoder.decode();
+                if (remaining)
+                    await stdio.write('stdout', remaining);
+            })();
+            await Promise.all([output, active.completion]);
+        });
+        const cleanup = await settle(async () => {
+            try {
+                await lifetime.request('worker-logs-ended');
+                await stream?.cancel();
+            }
+            finally {
+                await lifetime.wait();
+            }
+        });
+        if (!operation.ok && !cleanup.ok && operation.cause !== cleanup.cause)
+            throw new AggregateError([operation.cause, cleanup.cause], 'Worker logs and cleanup failed.');
+        if (!operation.ok) {
+            if (isCapabilityError(operation.cause)) {
+                throw new CapabilityError(operation.cause.message, operation.cause.code, {
+                    reason: operation.cause.reason,
+                    details: { ...operation.cause.details, worker, namespace, resource },
+                    cause: operation.cause
+                });
+            }
+            throw operation.cause;
+        }
+        if (!cleanup.ok)
+            throw cleanup.cause;
+    }
+};
+//# sourceMappingURL=infra-workers-logs.cli-command.impl.js.map

package/dist/cli/workers/infra-workers-logs.cli-command.impl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"infra-workers-logs.cli-command.impl.js","sourceRoot":"","sources":["../../../src/cli/workers/infra-workers-logs.cli-command.impl.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAGlG,OAAO,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AACrE,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AAErE,eAAe;IACd,KAAK,CAAC,OAAO,CAAC,IAAoB,EAAE,IAAoB,EAAE,OAAuB;QAChF,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAChC,MAAM,QAAQ,GAAG,qBAAqB,CAAC,SAAS,CAAC;YAChD,GAAG,IAAI;YACP,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,OAAO,CAAC,MAAM,CAAC,qBAAqB,CAAC;SAClE,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;YACvB,MAAM,IAAI,eAAe,CAAC,+BAA+B,EAAE,eAAe,EAAE;gBAC3E,MAAM,EAAE,2BAA2B,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK;aAC1D,CAAC,CAAC;QACJ,CAAC;QACD,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC;QACxH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,KAAK,CAA0C,YAAY,CAAC;aACzF,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,QAAQ,CAAC,aAAa,CAAC,KAAK,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;QACnF,MAAM,IAAI,GAAG,QAAQ,EAAE,IAAI,CAAC;QAC5B,MAAM,UAAU,GAAG,IAAI,EAAE,UAAU,CAAC;QACpC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YAC1B,MAAM,IAAI,eAAe,CAAC,wDAAwD,EAAE,aAAa,EAAE;gBAClG,MAAM,EAAE,+BAA+B;aACvC,CAAC,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC;QAC7C,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,MAAM,uBAAuB,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QAC9E,IAAI,MAAmC,CAAC;QACxC,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,KAAK,IAAI,EAAE;YACzC,QAAQ,CAAC,kBAAkB,EAAE,CAAC;YAC9B,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE;gBACpC,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS;gBACrE,UAAU,EAAE,QAAQ,EAAE,MAAM;gBAC5B,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;aAClE,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,CAAC;YACtB,MAAM,MAAM,GAAG,CAAC,KAAK,IAAI,EAAE;gBAC1B,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;gBAClC,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM;oBAAE,MAAM,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;gBAC9G,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;gBACnC,IAAI,SAAS;oBAAE,MAAM,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;YACvD,CAAC,CAAC,EAAE,CAAC;YACL,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,KAAK,IAAI,EAAE;YACvC,IAAI,CAAC;gBACJ,MAAM,QAAQ,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;gBAC5C,MAAM,MAAM,EAAE,MAAM,EAAE,CAAC;YACxB,CAAC;oBAAS,CAAC;gBACV,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACvB,CAAC;QACF,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,SAAS,CAAC,KAAK,KAAK,OAAO,CAAC,KAAK;YAAE,MAAM,IAAI,cAAc,CAAC,CAAC,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,iCAAiC,CAAC,CAAC;QACrK,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;YACnB,IAAI,iBAAiB,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;gBACxC,MAAM,IAAI,eAAe,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE;oBACxE,MAAM,EAAE,SAAS,CAAC,KAAK,CAAC,MAAM;oBAC9B,OAAO,EAAE,EAAE,GAAG,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE;oBACpE,KAAK,EAAE,SAAS,CAAC,KAAK;iBACtB,CAAC,CAAC;YACJ,CAAC;YACD,MAAM,SAAS,CAAC,KAAK,CAAC;QACvB,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,MAAM,OAAO,CAAC,KAAK,CAAC;IACtC,CAAC;CACD,CAAC"}

package/dist/cli/workers/infra-workers.cli-group.descriptor.d.ts

@@ -0,0 +1,12 @@
+declare const _default: {
+    readonly id: "infra-workers";
+    readonly kind: "cli/group";
+    readonly name: "workers";
+    readonly description: "Deploy and inspect shared infrastructure worker processes";
+    readonly parent: "infra";
+    readonly surfaces: ["cli"];
+    readonly hardware: ["consumer", "cloud"];
+    readonly enabled: true;
+};
+export default _default;
+//# sourceMappingURL=infra-workers.cli-group.descriptor.d.ts.map

package/dist/cli/workers/infra-workers.cli-group.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"infra-workers.cli-group.descriptor.d.ts","sourceRoot":"","sources":["../../../src/cli/workers/infra-workers.cli-group.descriptor.ts"],"names":[],"mappings":";;;;;;;;;;AAEA,wBASG"}

package/dist/cli/workers/infra-workers.cli-group.descriptor.js

@@ -0,0 +1,12 @@
+import { createRuntimeAsset } from '@vibesdotdev/kernel';
+export default createRuntimeAsset({
+    id: 'infra-workers',
+    kind: 'cli/group',
+    name: 'workers',
+    description: 'Deploy and inspect shared infrastructure worker processes',
+    parent: 'infra',
+    surfaces: ['cli'],
+    hardware: ['consumer', 'cloud'],
+    enabled: true
+});
+//# sourceMappingURL=infra-workers.cli-group.descriptor.js.map

package/dist/cli/workers/infra-workers.cli-group.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"infra-workers.cli-group.descriptor.js","sourceRoot":"","sources":["../../../src/cli/workers/infra-workers.cli-group.descriptor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAEzD,eAAe,kBAAkB,CAAC;IACjC,EAAE,EAAE,eAAe;IACnB,IAAI,EAAE,WAAW;IACjB,IAAI,EAAE,SAAS;IACf,WAAW,EAAE,2DAA2D;IACxE,MAAM,EAAE,OAAO;IACf,QAAQ,EAAE,CAAC,KAAK,CAAC;IACjB,QAAQ,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC;IAC/B,OAAO,EAAE,IAAI;CACb,CAAC,CAAC"}

package/dist/config-loader.d.ts

@@ -1,4 +1,11 @@
-import type { AppDeployment } from '@vibesdotdev/infra-core/deployment';
+import { type RuntimePath } from '@vibesdotdev/paths';
+import type { FileSystemAdapterInterface } from '@vibesdotdev/filesystem/interfaces/adapter';
+import { type AppDeployment } from '@vibesdotdev/infra-core/deployment';
+import { CapabilityError, composeChildEnv, type RuntimeRef } from '@vibesdotdev/kernel';
+import type { RuntimeExecution } from '@vibesdotdev/kernel/execution';
+import { findConfigFile } from './deployment-settings.ts';
+/** What evaluating a deployment config reads from the runtime it is handed. */
+export type ConfigEvaluationRuntime = Parameters<typeof composeChildEnv>[0] & Pick<RuntimeRef, 'query' | 'hasKind'>;
 export interface LoadedDeployment {
     configPath: string;
     appDir: string;
@@ -6,19 +13,59 @@ export interface LoadedDeployment {
     provider: string;
     raw: unknown;
     /**
-     * Canonical wrangler.jsonc render output, when the default export is a
-     * managed Cloudflare web-app deployment (see
-     * `@vibesdotdev/infra-cloudflare/regen`). `null` when the export isn't
-     * a managed deployment — used by the regen orchestrator to gate writes
-     * and the CI drift check.
+     * The provider artifact the deployment module rendered, through the
+     * renderer its provider's descriptor names; `null` when the provider renders
+     * none or no plugin registers it.
      */
-    wranglerJsoncString: string | null;
-    /** Mirrors `webAppDeployment.managed`; `false` when not a managed export. */
+    rendered: string | null;
+    /** The artifact local development reads, when the module renders one. */
+    localRendered: string | null;
+    /** The module opts into a generated, committed provider artifact. */
     managed: boolean;
-    /** Cloudflare Workers script name, when emitted by the managed export. */
-    workerName: string | null;
+    /** Whether the module renders a provider artifact under an environment. */
+    renders: boolean;
+    /** The provider's name for the deployed unit, when the module declares one. */
+    unitName: string | null;
 }
-export declare function resolveAppDir(input: string): string;
-export declare function findConfigFile(appDir: string): string;
-export declare function loadDeploymentConfig(appDir: string): Promise<LoadedDeployment>;
+/** The host I/O one load resolves once: host-owned path probes plus path mechanics. */
+export interface ConfigLoadHost {
+    readonly files: FileSystemAdapterInterface;
+    readonly paths: RuntimePath;
+}
+export declare function resolveConfigLoadHost(runtime: RuntimeRef): Promise<ConfigLoadHost>;
+export declare class NonDeployableDeploymentConfigError extends CapabilityError {
+    readonly appId: string | undefined;
+    /** The marker's own human-readable reason, overriding the taxonomy code. */
+    readonly reason: string;
+    constructor(input: {
+        appId?: string;
+        reason: string;
+        configPath?: string;
+    });
+}
+/**
+ * The app directory a deployment config is loaded from. Callers resolve an
+ * operator's relative argument against the invocation cwd first
+ * (`requireRuntimeCwd(runtime)`); a relative path here is a caller
+ * error, never resolved against the process cwd or an environment variable.
+ */
+export declare function resolveAppDir(host: ConfigLoadHost, input: string): Promise<string>;
+export { findConfigFile };
+/**
+ * The keys a deployment module reads while rendering (metadata identifiers,
+ * never secret values): every registered deployment provider's declared
+ * `projectionKeys`, so the loader names no provider.
+ */
+export declare function deploymentProjectionKeys(runtime: Pick<RuntimeRef, 'hasKind' | 'query'>): string[];
+export declare function loadDeploymentConfig(appDir: string, options: {
+    /** The runtime a fallback or fresh-process evaluation runs a child of. */
+    runtime: RuntimeRef;
+    freshProcess?: boolean;
+    execution?: RuntimeExecution;
+    /**
+     * The resolved Cloudflare projection, as data, for a fresh-process
+     * evaluation. The child sees exactly these projection keys.
+     */
+    projectionEnvironment?: Readonly<Record<string, string>>;
+}): Promise<LoadedDeployment>;
 //# sourceMappingURL=config-loader.d.ts.map

package/dist/config-loader.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config-loader.d.ts","sourceRoot":"","sources":["../src/config-loader.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oCAAoC,CAAC;AAExE,MAAM,WAAW,gBAAgB;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,aAAa,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,OAAO,CAAC;IACb;;;;;;OAMG;IACH,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,6EAA6E;IAC7E,OAAO,EAAE,OAAO,CAAC;IACjB,0EAA0E;IAC1E,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAID,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAUnD;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAQrD;AAmHD,wBAAsB,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAgBpF"}
+{"version":3,"file":"config-loader.d.ts","sourceRoot":"","sources":["../src/config-loader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAkB,KAAK,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEtE,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAE7F,OAAO,EAAyB,KAAK,aAAa,EAAE,MAAM,oCAAoC,CAAC;AAS/F,OAAO,EAAE,eAAe,EAAE,eAAe,EAAyC,KAAK,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAC/H,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AAGtE,OAAO,EAAE,cAAc,EAA4C,MAAM,0BAA0B,CAAC;AAOpG,+EAA+E;AAC/E,MAAM,MAAM,uBAAuB,GAAG,UAAU,CAAC,OAAO,eAAe,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,UAAU,EAAE,OAAO,GAAG,SAAS,CAAC,CAAC;AAEpH,MAAM,WAAW,gBAAgB;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,aAAa,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,OAAO,CAAC;IACb;;;;OAIG;IACH,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,yEAAyE;IACzE,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,qEAAqE;IACrE,OAAO,EAAE,OAAO,CAAC;IACjB,2EAA2E;IAC3E,OAAO,EAAE,OAAO,CAAC;IACjB,+EAA+E;IAC/E,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED,uFAAuF;AACvF,MAAM,WAAW,cAAc;IAC9B,QAAQ,CAAC,KAAK,EAAE,0BAA0B,CAAC;IAC3C,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;CAC5B;AAED,wBAAsB,qBAAqB,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,cAAc,CAAC,CAOxF;AAED,qBAAa,kCAAmC,SAAQ,eAAe;IACtE,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,4EAA4E;IAC5E,SAAkB,MAAM,EAAE,MAAM,CAAC;gBAErB,KAAK,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE;CAY1E;AAED;;;;;GAKG;AACH,wBAAsB,aAAa,CAAC,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAgBxF;AAED,OAAO,EAAE,cAAc,EAAE,CAAC;AAwN1B;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,IAAI,CAAC,UAAU,EAAE,SAAS,GAAG,OAAO,CAAC,GAAG,MAAM,EAAE,CAOjG;AAqGD,wBAAsB,oBAAoB,CACzC,MAAM,EAAE,MAAM,EACd,OAAO,EAAE;IACR,0EAA0E;IAC1E,OAAO,EAAE,UAAU,CAAC;IACpB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,SAAS,CAAC,EAAE,gBAAgB,CAAC;IAC7B;;;OAGG;IACH,qBAAqB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACzD,GACC,OAAO,CAAC,gBAAgB,CAAC,CAqF3B"}