@vibesdotdev/infra-doks 0.0.1

package/dist/implementations/droplet.impl.js

@@ -0,0 +1,113 @@
+/**
+ * Implementation: infra/sandbox → digitalocean-droplet
+ *
+ * Wires the existing `DigitalOceanProvider` (./cloud/digitalocean.ts) into
+ * the runtime kind resolution path. The resolved impl exposes a
+ * `provision(descriptor)` method that creates a DigitalOcean droplet via
+ * the v2 API, waits for `status: 'active'`, and returns the platform-side
+ * `SandboxProvisionResult` shape that
+ * `apps/platform-web/src/lib/hosts/server/queries/host-provision.ts`
+ * consumes.
+ *
+ * The DO API token resolves in this order:
+ *   1. `descriptor.config.apiToken` (explicit override; tests use this).
+ *   2. `process.env.DIGITALOCEAN_API_TOKEN` (the existing dev fallback,
+ *      matching the `DigitalOceanAppDeployClient` in `./client/`).
+ *   3. `packages/secrets` `cloud-credentials.digitalocean.token` —
+ *      brokerage path, currently DEFERRED to the migration debt entry
+ *      in `infra-deploy/SPEC.md`. When that lands, this impl resolves
+ *      the same secret per actor scope.
+ */
+import * as z from 'zod/v4';
+import { DigitalOceanDropletSandboxConfigSchema } from '@vibesdotdev/infra-core/kinds';
+import { DigitalOceanProvider } from "../cloud/digitalocean.js";
+export const DoDropletConfigSchema = DigitalOceanDropletSandboxConfigSchema.extend({
+    adapter: z.literal('digitalocean-droplet'),
+    region: z.string().default('nyc3'),
+    image: z.string().default('ubuntu-24-04-x64'),
+    tags: z.array(z.string()).default([]),
+    sshKeyIds: z.array(z.string()).default([]),
+    apiToken: z.string().optional()
+});
+export const DoDropletDescriptorSchema = z.object({
+    kind: z.literal('infra/sandbox'),
+    id: z.string().min(1),
+    name: z.string().optional(),
+    description: z.string().optional(),
+    config: DoDropletConfigSchema,
+    cloudInitScript: z.string().optional()
+});
+function resolveApiToken(config) {
+    if (config.apiToken)
+        return config.apiToken;
+    const envToken = (typeof process !== 'undefined' && process.env?.DIGITALOCEAN_API_TOKEN) || '';
+    if (envToken)
+        return envToken;
+    throw new Error('digitalocean-droplet provision failed: no API token. Pass config.apiToken or set DIGITALOCEAN_API_TOKEN.');
+}
+function tagsArrayToRecord(tags) {
+    const record = {};
+    for (const tag of tags)
+        record[tag] = '';
+    return record;
+}
+/**
+ * `DoDropletSandbox` is a singleton-friendly impl: a single instance is
+ * registered per worker and serves every `provision(descriptor)` call.
+ * Per-call descriptors carry their own API token + region, so multi-tenant
+ * use is safe — the impl holds no per-tenant state.
+ *
+ * For unit tests, pass `providerFactory` to swap in a mock
+ * `DigitalOceanProvider`.
+ */
+export class DoDropletSandbox {
+    providerFactory;
+    constructor(providerFactory = (token, region) => new DigitalOceanProvider(token, region)) {
+        this.providerFactory = providerFactory;
+    }
+    async provision(descriptorInput) {
+        const descriptor = DoDropletDescriptorSchema.parse(descriptorInput);
+        const cfg = descriptor.config;
+        const provider = this.providerFactory(resolveApiToken(cfg), cfg.region);
+        const resourceTag = `vibes:resourceId=${descriptor.id}`;
+        // Idempotency: list existing droplets carrying our resource tag.
+        // Returning early prevents double-create on retry / restart while
+        // the upstream DB row still tracks the provisioning intent (per
+        // SPEC §Hard rule "Droplet creation is idempotent against the
+        // descriptor id").
+        const existing = await provider.listInstances({ tags: { vibes: resourceTag.replace('vibes:', '') } });
+        if (existing.length > 0) {
+            const instance = existing[0];
+            return {
+                instanceId: instance.id,
+                publicIp: instance.publicIp,
+                privateIp: instance.privateIp,
+                region: instance.region,
+                createdAt: instance.createdAt
+            };
+        }
+        // Inject the resource tag onto user-supplied tags. Duplicates are
+        // harmless — Record dedupes by key.
+        const tags = tagsArrayToRecord([...cfg.tags, resourceTag]);
+        const instance = await provider.createInstance({
+            name: descriptor.name ?? `vibes-${descriptor.id}`,
+            type: cfg.dropletSize,
+            region: cfg.region,
+            image: cfg.image,
+            sshKeys: cfg.sshKeyIds,
+            userData: descriptor.cloudInitScript,
+            tags
+        });
+        return {
+            instanceId: instance.id,
+            publicIp: instance.publicIp,
+            privateIp: instance.privateIp,
+            region: instance.region,
+            createdAt: instance.createdAt
+        };
+    }
+}
+export function createDoDropletImpl(providerFactory) {
+    return new DoDropletSandbox(providerFactory);
+}
+//# sourceMappingURL=droplet.impl.js.map

package/dist/implementations/droplet.impl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"droplet.impl.js","sourceRoot":"","sources":["../../src/implementations/droplet.impl.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,sCAAsC,EAAE,MAAM,+BAA+B,CAAC;AACvF,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAGhE,MAAM,CAAC,MAAM,qBAAqB,GAAG,sCAAsC,CAAC,MAAM,CAAC;IAClF,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC;IAC1C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;IAClC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,kBAAkB,CAAC;IAC7C,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACrC,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC1C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC/B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC;IAChC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,MAAM,EAAE,qBAAqB;IAC7B,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACtC,CAAC,CAAC;AA+BH,SAAS,eAAe,CAAC,MAA6C;IACrE,IAAI,MAAM,CAAC,QAAQ;QAAE,OAAO,MAAM,CAAC,QAAQ,CAAC;IAC5C,MAAM,QAAQ,GACb,CAAC,OAAO,OAAO,KAAK,WAAW,IAAI,OAAO,CAAC,GAAG,EAAE,sBAAsB,CAAC,IAAI,EAAE,CAAC;IAC/E,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,MAAM,IAAI,KAAK,CACd,0GAA0G,CAC1G,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAc;IACxC,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,GAAG,IAAI,IAAI;QAAE,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;IACzC,OAAO,MAAM,CAAC;AACf,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,OAAO,gBAAgB;IACX,eAAe,CAAkB;IAElD,YACC,kBAAmC,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,IAAI,oBAAoB,CAAC,KAAK,EAAE,MAAM,CAAC;QAE7F,IAAI,CAAC,eAAe,GAAG,eAAe,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,eAAyC;QACxD,MAAM,UAAU,GAAG,yBAAyB,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QACpE,MAAM,GAAG,GAAG,UAAU,CAAC,MAAM,CAAC;QAC9B,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QACxE,MAAM,WAAW,GAAG,oBAAoB,UAAU,CAAC,EAAE,EAAE,CAAC;QAExD,iEAAiE;QACjE,kEAAkE;QAClE,gEAAgE;QAChE,8DAA8D;QAC9D,mBAAmB;QACnB,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,WAAW,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QACtG,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,MAAM,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;YAC7B,OAAO;gBACN,UAAU,EAAE,QAAQ,CAAC,EAAE;gBACvB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;gBAC3B,SAAS,EAAE,QAAQ,CAAC,SAAS;gBAC7B,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,SAAS,EAAE,QAAQ,CAAC,SAAS;aAC7B,CAAC;QACH,CAAC;QAED,kEAAkE;QAClE,oCAAoC;QACpC,MAAM,IAAI,GAAG,iBAAiB,CAAC,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC;QAC3D,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,cAAc,CAAC;YAC9C,IAAI,EAAE,UAAU,CAAC,IAAI,IAAI,SAAS,UAAU,CAAC,EAAE,EAAE;YACjD,IAAI,EAAE,GAAG,CAAC,WAAW;YACrB,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,OAAO,EAAE,GAAG,CAAC,SAAS;YACtB,QAAQ,EAAE,UAAU,CAAC,eAAe;YACpC,IAAI;SACJ,CAAC,CAAC;QACH,OAAO;YACN,UAAU,EAAE,QAAQ,CAAC,EAAE;YACvB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,SAAS,EAAE,QAAQ,CAAC,SAAS;SAC7B,CAAC;IACH,CAAC;CACD;AAED,MAAM,UAAU,mBAAmB,CAClC,eAAiC;IAEjC,OAAO,IAAI,gBAAgB,CAAC,eAAe,CAAC,CAAC;AAC9C,CAAC"}

package/dist/implementations/gitea.impl.d.ts

@@ -0,0 +1,68 @@
+import * as z from 'zod/v4';
+import type { K8sDeployment, K8sService } from '../types.ts';
+export declare const GiteaDoksDescriptorSchema: z.ZodObject<{
+    kind: z.ZodLiteral<"infra/git-hosting">;
+    id: z.ZodString;
+    name: z.ZodOptional<z.ZodString>;
+    description: z.ZodOptional<z.ZodString>;
+    url: z.ZodString;
+    hostname: z.ZodString;
+    type: z.ZodEnum<{
+        gitea: "gitea";
+        forgejo: "forgejo";
+    }>;
+    storagePath: z.ZodDefault<z.ZodString>;
+    authMethod: z.ZodDefault<z.ZodEnum<{
+        local: "local";
+        oauth: "oauth";
+        token: "token";
+    }>>;
+    ssl: z.ZodDefault<z.ZodBoolean>;
+    env: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        public: z.ZodDefault<z.ZodBoolean>;
+        required: z.ZodDefault<z.ZodBoolean>;
+        value: z.ZodOptional<z.ZodString>;
+        secret: z.ZodDefault<z.ZodBoolean>;
+        description: z.ZodOptional<z.ZodString>;
+        storeKey: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>>;
+    config: z.ZodObject<{
+        dropletSize: z.ZodDefault<z.ZodString>;
+        dockerImage: z.ZodDefault<z.ZodString>;
+        volumeSizeGb: z.ZodDefault<z.ZodNumber>;
+        domain: z.ZodString;
+        sshPort: z.ZodDefault<z.ZodNumber>;
+        httpPort: z.ZodDefault<z.ZodNumber>;
+        adapter: z.ZodLiteral<"gitea-doks">;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export type GiteaDoksDescriptorInput = z.input<typeof GiteaDoksDescriptorSchema>;
+export type GiteaDoksDescriptor = z.infer<typeof GiteaDoksDescriptorSchema>;
+export interface GiteaManifest {
+    deployment: K8sDeployment;
+    service: K8sService;
+    pvc: {
+        apiVersion: string;
+        kind: string;
+        metadata: Record<string, unknown>;
+        spec: Record<string, unknown>;
+    };
+    themeConfigMap: {
+        apiVersion: string;
+        kind: string;
+        metadata: Record<string, unknown>;
+        data: Record<string, string>;
+    };
+    ingress: {
+        apiVersion: string;
+        kind: string;
+        metadata: Record<string, unknown>;
+        spec: Record<string, unknown>;
+    };
+}
+export declare function generateGiteaManifest(input: GiteaDoksDescriptorInput): GiteaManifest;
+export declare function createGiteaImpl(input: GiteaDoksDescriptorInput): import("@vibesdotdev/runtime").RuntimeImplementationWrapper<{
+    generateConfig: () => GiteaManifest;
+}>;
+//# sourceMappingURL=gitea.impl.d.ts.map

package/dist/implementations/gitea.impl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gitea.impl.d.ts","sourceRoot":"","sources":["../../src/implementations/gitea.impl.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAI5B,OAAO,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAE7D,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAuBpC,CAAC;AAEH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AACjF,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E,MAAM,WAAW,aAAa;IAC7B,UAAU,EAAE,aAAa,CAAC;IAC1B,OAAO,EAAE,UAAU,CAAC;IACpB,GAAG,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC;IAC5G,cAAc,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,CAAC;IACtH,OAAO,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC;CAChH;AA4BD,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,wBAAwB,GAAG,aAAa,CAwOpF;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,wBAAwB;;GAU9D"}

package/dist/implementations/gitea.impl.js

@@ -0,0 +1,295 @@
+/**
+ * Implementation: infra/git-hosting -> gitea-doks
+ *
+ * Generates K8s manifests for a Gitea git hosting service on DOKS.
+ */
+import { createHash } from 'node:crypto';
+import * as z from 'zod/v4';
+import { createRuntimeImplementation } from '@vibesdotdev/runtime';
+import { GiteaDoksGitHostingConfigSchema, GitHostingTypeSchema } from '@vibesdotdev/infra-core/kinds';
+import { loadGiteaThemeAssets } from '@vibesdotdev/registry-theme';
+export const GiteaDoksDescriptorSchema = z.object({
+    kind: z.literal('infra/git-hosting'),
+    id: z.string().min(1),
+    name: z.string().optional(),
+    description: z.string().optional(),
+    url: z.string().url(),
+    hostname: z.string().min(1),
+    type: GitHostingTypeSchema,
+    storagePath: z.string().min(1).default('/data'),
+    authMethod: z.enum(['local', 'oauth', 'token']).default('token'),
+    ssl: z.boolean().default(true),
+    env: z.array(z.object({
+        name: z.string().regex(/^[_A-Z0-9]+$/),
+        public: z.boolean().default(false),
+        required: z.boolean().default(true),
+        value: z.string().optional(),
+        secret: z.boolean().default(false),
+        description: z.string().optional(),
+        storeKey: z.string().min(1).optional()
+    })).optional(),
+    config: GiteaDoksGitHostingConfigSchema.extend({
+        adapter: z.literal('gitea-doks')
+    })
+});
+/**
+ * ConfigMap keys → relative paths under the staging mount. The install-theme
+ * initContainer copies these into the PVC's gitea/custom/ tree where Gitea
+ * picks them up at runtime. Keys are dot-separated because K8s ConfigMap keys
+ * cannot contain slashes; the volume `items[].path` translation produces the
+ * final on-disk layout.
+ */
+const THEME_FILES = {
+    'public.css.vibes-tokens.css': 'public/css/vibes-tokens.css',
+    'public.css.vibes-overlay.css': 'public/css/vibes-overlay.css',
+    'public.img.logo.svg': 'public/img/logo.svg',
+    'public.img.favicon.svg': 'public/img/favicon.svg',
+    'templates.custom.header.tmpl': 'templates/custom/header.tmpl',
+    'templates.custom.body_outer_pre.tmpl': 'templates/custom/body_outer_pre.tmpl',
+    'templates.custom.extra_links_footer.tmpl': 'templates/custom/extra_links_footer.tmpl',
+    // home.tmpl REPLACES the stock home page (not under custom/) — go-template
+    // resolution checks templates/home.tmpl first, then falls back to embedded.
+    'templates.home.tmpl': 'templates/home.tmpl',
+    // head_navbar.tmpl REPLACES the stock <nav id="navbar">. We render the
+    // vibes-brand-bar inline here instead of duplicating chrome via body_outer_pre.
+    'templates.base.head_navbar.tmpl': 'templates/base/head_navbar.tmpl'
+};
+const ELEMENTS_KEY = 'public.js.elements.js';
+const ELEMENTS_PATH = 'public/js/elements.js';
+export function generateGiteaManifest(input) {
+    const d = GiteaDoksDescriptorSchema.parse(input);
+    const ns = 'vibes';
+    const name = `vibes-${d.id}`;
+    const pvcName = `${name}-data`;
+    const themeCmName = `${name}-theme`;
+    const themeStagingPath = '/etc/gitea-theme';
+    // The official gitea/gitea image sets GITEA_CUSTOM=${GITEA_WORK_DIR}, where
+    // GITEA_WORK_DIR defaults to /data/gitea (NOT /data/gitea/custom). So
+    // custom templates and static assets live directly under /data/gitea/.
+    const giteaCustomPath = `${d.storagePath}/gitea`;
+    const cfg = d.config;
+    const port = cfg.httpPort;
+    const secretName = 'gitea-secrets';
+    const themeAssets = loadGiteaThemeAssets();
+    const themeData = {
+        'public.css.vibes-tokens.css': themeAssets.tokensCss,
+        'public.css.vibes-overlay.css': themeAssets.overlayCss,
+        'public.img.logo.svg': themeAssets.logoSvg,
+        'public.img.favicon.svg': themeAssets.faviconSvg,
+        'templates.custom.header.tmpl': themeAssets.headerTmpl,
+        'templates.custom.body_outer_pre.tmpl': themeAssets.bodyOuterPreTmpl,
+        'templates.custom.extra_links_footer.tmpl': themeAssets.extraLinksFooterTmpl,
+        'templates.home.tmpl': themeAssets.homeTmpl,
+        'templates.base.head_navbar.tmpl': themeAssets.headNavbarTmpl
+    };
+    const themeItems = Object.entries(THEME_FILES).map(([key, path]) => ({ key, path }));
+    if (themeAssets.elementsBundle) {
+        themeData[ELEMENTS_KEY] = themeAssets.elementsBundle;
+        themeItems.push({ key: ELEMENTS_KEY, path: ELEMENTS_PATH });
+    }
+    // Hash of theme content so any change causes a rollout (otherwise a
+    // ConfigMap-only diff leaves pods with stale assets in their PVC).
+    const themeChecksum = createHash('sha256')
+        .update(Object.entries(themeData).sort().map(([k, v]) => `${k}:${v}`).join('\n'))
+        .digest('hex')
+        .slice(0, 16);
+    // NOTE: the previous Gitea bootstrap container has been removed. It tried to
+    // curl localhost:3000 from inside an *init* container — but Gitea hadn't
+    // started yet (init containers run first), so it could never have worked.
+    // Admin user creation and OAuth provider registration should run as a
+    // separate Job (or via `gitea admin user create` exec) post-Ready.
+    const deployment = {
+        apiVersion: 'apps/v1',
+        kind: 'Deployment',
+        metadata: {
+            name,
+            namespace: ns,
+            labels: { app: d.id, 'app.kubernetes.io/part-of': 'vibes' },
+            annotations: {
+                'secrets.hashicorp.com/rollout-restart': 'true'
+            }
+        },
+        spec: {
+            replicas: 1,
+            // PVC is ReadWriteOnce — RollingUpdate would Multi-Attach-deadlock.
+            // Recreate stops the old pod, then starts the new one with the freed volume.
+            strategy: { type: 'Recreate' },
+            selector: { matchLabels: { app: d.id } },
+            template: {
+                metadata: {
+                    labels: { app: d.id },
+                    annotations: { 'vibes.dev/theme-checksum': themeChecksum }
+                },
+                spec: {
+                    initContainers: [
+                        {
+                            name: 'chown',
+                            image: 'busybox:1.36',
+                            command: ['sh', '-c', `chown -R 1000:1000 ${d.storagePath}`],
+                            volumeMounts: [{ name: 'data', mountPath: d.storagePath }],
+                            resources: { requests: { cpu: '50m', memory: '32Mi' }, limits: { memory: '128Mi' } }
+                        },
+                        {
+                            name: 'install-theme',
+                            image: 'busybox:1.36',
+                            command: ['sh', '-c', [
+                                    // Gitea v1.21 expects custom static assets under `public/assets/<type>/`
+                                    // (NOT `public/<type>/` — that's a legacy layout it now rejects).
+                                    `mkdir -p ${giteaCustomPath}/public/assets/css`,
+                                    `mkdir -p ${giteaCustomPath}/public/assets/img`,
+                                    `mkdir -p ${giteaCustomPath}/public/assets/js`,
+                                    `mkdir -p ${giteaCustomPath}/templates/custom`,
+                                    // Versioned filenames (.v5.) sidestep Cloudflare negative-cache on the unversioned URLs.
+                                    // Bump the version when bytes change to invalidate browser/edge caches.
+                                    `cp -f ${themeStagingPath}/public/css/vibes-tokens.css ${giteaCustomPath}/public/assets/css/vibes-tokens.v5.css`,
+                                    `cp -f ${themeStagingPath}/public/css/vibes-overlay.css ${giteaCustomPath}/public/assets/css/vibes-overlay.v5.css`,
+                                    `cp -f ${themeStagingPath}/public/img/logo.svg ${giteaCustomPath}/public/assets/img/logo.v5.svg`,
+                                    `cp -f ${themeStagingPath}/public/img/favicon.svg ${giteaCustomPath}/public/assets/img/favicon.v5.svg`,
+                                    `cp -f ${themeStagingPath}/templates/custom/header.tmpl ${giteaCustomPath}/templates/custom/header.tmpl`,
+                                    `cp -f ${themeStagingPath}/templates/custom/body_outer_pre.tmpl ${giteaCustomPath}/templates/custom/body_outer_pre.tmpl`,
+                                    `cp -f ${themeStagingPath}/templates/custom/extra_links_footer.tmpl ${giteaCustomPath}/templates/custom/extra_links_footer.tmpl`,
+                                    `cp -f ${themeStagingPath}/templates/home.tmpl ${giteaCustomPath}/templates/home.tmpl`,
+                                    `mkdir -p ${giteaCustomPath}/templates/base`,
+                                    `cp -f ${themeStagingPath}/templates/base/head_navbar.tmpl ${giteaCustomPath}/templates/base/head_navbar.tmpl`,
+                                    // elements.js is optional — copy only if the staging volume includes it (i.e. the @vibesdotdev/elements bundle was built before manifest generation).
+                                    `if [ -f ${themeStagingPath}/public/js/elements.js ]; then cp -f ${themeStagingPath}/public/js/elements.js ${giteaCustomPath}/public/assets/js/elements.v5.js; fi`,
+                                    // Clean up files from the previous wrong layouts so they don't confuse Gitea's legacy detection.
+                                    `rm -rf ${giteaCustomPath}/public/css ${giteaCustomPath}/public/img ${giteaCustomPath}/public/js ${giteaCustomPath}/custom 2>/dev/null || true`,
+                                    // Update APP_NAME in app.ini directly. Gitea v1.21 doesn't have
+                                    // `environment-to-ini`, so GITEA__DEFAULT__APP_NAME never reaches
+                                    // the running config. sed is idempotent: if the line already
+                                    // matches we no-op.
+                                    `if [ -f ${giteaCustomPath}/conf/app.ini ]; then sed -i 's|^APP_NAME = .*$|APP_NAME = Vibes Git|' ${giteaCustomPath}/conf/app.ini || true; fi`,
+                                    `chown -R 1000:1000 ${giteaCustomPath}`,
+                                    'echo "vibes theme installed"'
+                                ].join(' && ')],
+                            volumeMounts: [
+                                { name: 'data', mountPath: d.storagePath },
+                                { name: 'theme', mountPath: themeStagingPath, readOnly: true }
+                            ],
+                            resources: { requests: { cpu: '50m', memory: '32Mi' }, limits: { memory: '128Mi' } }
+                        }
+                    ],
+                    containers: [{
+                            name: d.id,
+                            image: cfg.dockerImage,
+                            ports: [
+                                { name: 'http', containerPort: port },
+                                { name: 'ssh', containerPort: cfg.sshPort, protocol: 'TCP' }
+                            ],
+                            envFrom: [{ secretRef: { name: secretName } }],
+                            env: [
+                                { name: 'USER_UID', value: '1000' },
+                                { name: 'USER_GID', value: '1000' },
+                                { name: 'GITEA__server__PROTOCOL', value: 'http' },
+                                { name: 'GITEA__server__DOMAIN', value: cfg.domain },
+                                { name: 'GITEA__server__ROOT_URL', value: `https://${cfg.domain}` },
+                                { name: 'GITEA__server__HTTP_PORT', value: String(port) },
+                                { name: 'GITEA__server__SSH_PORT', value: String(cfg.sshPort) },
+                                { name: 'GITEA__DEFAULT__APP_NAME', value: 'Vibes Git' },
+                                { name: 'GITEA__ui__THEMES', value: 'auto,gitea,arc-green' },
+                                { name: 'GITEA__ui__DEFAULT_THEME', value: 'auto' },
+                                { name: 'GITEA__security__INSTALL_LOCK', value: 'true' },
+                                { name: 'GITEA__oauth2__CLIENT_ID', valueFrom: { secretKeyRef: { name: secretName, key: 'oauth2-client-id' } } },
+                                { name: 'GITEA__oauth2__CLIENT_SECRET', valueFrom: { secretKeyRef: { name: secretName, key: 'oauth2-client-secret' } } },
+                                { name: 'GITEA__security__JWT_SECRET', valueFrom: { secretKeyRef: { name: secretName, key: 'jwt-secret' } } },
+                                { name: 'GITEA__mailer__FROM', valueFrom: { secretKeyRef: { name: 'shared-secrets', key: 'smtp-from' } } },
+                                { name: 'GITEA__mailer__PASSWD', valueFrom: { secretKeyRef: { name: secretName, key: 'smtp-password' } } }
+                            ],
+                            volumeMounts: [{ name: 'data', mountPath: d.storagePath }],
+                            livenessProbe: {
+                                httpGet: { path: '/', port },
+                                initialDelaySeconds: 60,
+                                periodSeconds: 30
+                            },
+                            readinessProbe: {
+                                httpGet: { path: '/api/healthz', port },
+                                periodSeconds: 10
+                            },
+                            resources: {
+                                requests: { cpu: '100m', memory: '128Mi' },
+                                limits: { cpu: '1', memory: '1Gi' }
+                            }
+                        }],
+                    volumes: [
+                        { name: 'data', persistentVolumeClaim: { claimName: pvcName } },
+                        {
+                            name: 'theme',
+                            configMap: {
+                                name: themeCmName,
+                                items: themeItems
+                            }
+                        }
+                    ]
+                }
+            }
+        }
+    };
+    const service = {
+        apiVersion: 'v1',
+        kind: 'Service',
+        metadata: { name, namespace: ns },
+        spec: {
+            type: 'ClusterIP',
+            selector: { app: d.id },
+            ports: [
+                { name: 'http', port, targetPort: port },
+                { name: 'ssh', port: cfg.sshPort, targetPort: cfg.sshPort }
+            ]
+        }
+    };
+    const pvc = {
+        apiVersion: 'v1',
+        kind: 'PersistentVolumeClaim',
+        metadata: { name: pvcName, namespace: ns, labels: { app: d.id } },
+        spec: {
+            accessModes: ['ReadWriteOnce'],
+            resources: { requests: { storage: `${cfg.volumeSizeGb}Gi` } }
+        }
+    };
+    const themeConfigMap = {
+        apiVersion: 'v1',
+        kind: 'ConfigMap',
+        metadata: { name: themeCmName, namespace: ns, labels: { app: d.id } },
+        data: themeData
+    };
+    const ingress = {
+        apiVersion: 'networking.k8s.io/v1',
+        kind: 'Ingress',
+        metadata: {
+            name,
+            namespace: ns,
+            labels: { app: d.id },
+            annotations: {
+                'cert-manager.io/cluster-issuer': 'letsencrypt-prod',
+                'nginx.ingress.kubernetes.io/proxy-body-size': '100m'
+            }
+        },
+        spec: {
+            tls: [{ hosts: [cfg.domain], secretName: `${name}-tls` }],
+            rules: [{
+                    host: cfg.domain,
+                    http: {
+                        paths: [{
+                                path: '/',
+                                pathType: 'Prefix',
+                                backend: { service: { name, port: { number: port } } }
+                            }]
+                    }
+                }]
+        }
+    };
+    return { deployment, service, pvc, themeConfigMap, ingress };
+}
+export function createGiteaImpl(input) {
+    const descriptor = GiteaDoksDescriptorSchema.parse(input);
+    return createRuntimeImplementation({
+        id: 'gitea-doks',
+        kind: 'infra/git-hosting',
+        priority: 20,
+        implementation: {
+            generateConfig: () => generateGiteaManifest(descriptor)
+        }
+    });
+}
+//# sourceMappingURL=gitea.impl.js.map

package/dist/implementations/gitea.impl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gitea.impl.js","sourceRoot":"","sources":["../../src/implementations/gitea.impl.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,2BAA2B,EAAE,MAAM,sBAAsB,CAAC;AACnE,OAAO,EAAE,+BAA+B,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AACtG,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAGnE,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC;IACpC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACrB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,IAAI,EAAE,oBAAoB;IAC1B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IAC/C,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IAChE,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAC9B,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QACrB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC;QACtC,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;QAClC,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;QACnC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC5B,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;QAClC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAClC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;KACtC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACd,MAAM,EAAE,+BAA+B,CAAC,MAAM,CAAC;QAC9C,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC;KAChC,CAAC;CACF,CAAC,CAAC;AAaH;;;;;;GAMG;AACH,MAAM,WAAW,GAAqC;IACrD,6BAA6B,EAAE,6BAA6B;IAC5D,8BAA8B,EAAE,8BAA8B;IAC9D,qBAAqB,EAAE,qBAAqB;IAC5C,wBAAwB,EAAE,wBAAwB;IAClD,8BAA8B,EAAE,8BAA8B;IAC9D,sCAAsC,EAAE,sCAAsC;IAC9E,0CAA0C,EAAE,0CAA0C;IACtF,2EAA2E;IAC3E,4EAA4E;IAC5E,qBAAqB,EAAE,qBAAqB;IAC5C,uEAAuE;IACvE,gFAAgF;IAChF,iCAAiC,EAAE,iCAAiC;CACpE,CAAC;AAEF,MAAM,YAAY,GAAG,uBAAuB,CAAC;AAC7C,MAAM,aAAa,GAAG,uBAAuB,CAAC;AAE9C,MAAM,UAAU,qBAAqB,CAAC,KAA+B;IACpE,MAAM,CAAC,GAAG,yBAAyB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACjD,MAAM,EAAE,GAAG,OAAO,CAAC;IACnB,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAG,GAAG,IAAI,OAAO,CAAC;IAC/B,MAAM,WAAW,GAAG,GAAG,IAAI,QAAQ,CAAC;IACpC,MAAM,gBAAgB,GAAG,kBAAkB,CAAC;IAC5C,4EAA4E;IAC5E,sEAAsE;IACtE,uEAAuE;IACvE,MAAM,eAAe,GAAG,GAAG,CAAC,CAAC,WAAW,QAAQ,CAAC;IACjD,MAAM,GAAG,GAAG,CAAC,CAAC,MAAO,CAAC;IACtB,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC;IAC1B,MAAM,UAAU,GAAG,eAAe,CAAC;IAEnC,MAAM,WAAW,GAAG,oBAAoB,EAAE,CAAC;IAC3C,MAAM,SAAS,GAA2B;QACzC,6BAA6B,EAAE,WAAW,CAAC,SAAS;QACpD,8BAA8B,EAAE,WAAW,CAAC,UAAU;QACtD,qBAAqB,EAAE,WAAW,CAAC,OAAO;QAC1C,wBAAwB,EAAE,WAAW,CAAC,UAAU;QAChD,8BAA8B,EAAE,WAAW,CAAC,UAAU;QACtD,sCAAsC,EAAE,WAAW,CAAC,gBAAgB;QACpE,0CAA0C,EAAE,WAAW,CAAC,oBAAoB;QAC5E,qBAAqB,EAAE,WAAW,CAAC,QAAQ;QAC3C,iCAAiC,EAAE,WAAW,CAAC,cAAc;KAC7D,CAAC;IACF,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACrF,IAAI,WAAW,CAAC,cAAc,EAAE,CAAC;QAChC,SAAS,CAAC,YAAY,CAAC,GAAG,WAAW,CAAC,cAAc,CAAC;QACrD,UAAU,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC;IAC7D,CAAC;IACD,oEAAoE;IACpE,mEAAmE;IACnE,MAAM,aAAa,GAAG,UAAU,CAAC,QAAQ,CAAC;SACxC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;SAChF,MAAM,CAAC,KAAK,CAAC;SACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAEf,6EAA6E;IAC7E,yEAAyE;IACzE,0EAA0E;IAC1E,sEAAsE;IACtE,mEAAmE;IAEnE,MAAM,UAAU,GAAkB;QACjC,UAAU,EAAE,SAAS;QACrB,IAAI,EAAE,YAAY;QAClB,QAAQ,EAAE;YACT,IAAI;YACJ,SAAS,EAAE,EAAE;YACb,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,2BAA2B,EAAE,OAAO,EAAE;YAC3D,WAAW,EAAE;gBACZ,uCAAuC,EAAE,MAAM;aAC/C;SACD;QACD,IAAI,EAAE;YACL,QAAQ,EAAE,CAAC;YACX,oEAAoE;YACpE,6EAA6E;YAC7E,QAAQ,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;YAC9B,QAAQ,EAAE,EAAE,WAAW,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE;YACxC,QAAQ,EAAE;gBACT,QAAQ,EAAE;oBACT,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE;oBACrB,WAAW,EAAE,EAAE,0BAA0B,EAAE,aAAa,EAAE;iBAC1D;gBACD,IAAI,EAAE;oBACL,cAAc,EAAE;wBACf;4BACC,IAAI,EAAE,OAAO;4BACb,KAAK,EAAE,cAAc;4BACrB,OAAO,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,sBAAsB,CAAC,CAAC,WAAW,EAAE,CAAC;4BAC5D,YAAY,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;4BAC1D,SAAS,EAAE,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE;yBACpF;wBACD;4BACC,IAAI,EAAE,eAAe;4BACrB,KAAK,EAAE,cAAc;4BACrB,OAAO,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE;oCACrB,yEAAyE;oCACzE,kEAAkE;oCAClE,YAAY,eAAe,oBAAoB;oCAC/C,YAAY,eAAe,oBAAoB;oCAC/C,YAAY,eAAe,mBAAmB;oCAC9C,YAAY,eAAe,mBAAmB;oCAC9C,yFAAyF;oCACzF,wEAAwE;oCACxE,SAAS,gBAAgB,gCAAgC,eAAe,wCAAwC;oCAChH,SAAS,gBAAgB,iCAAiC,eAAe,yCAAyC;oCAClH,SAAS,gBAAgB,wBAAwB,eAAe,gCAAgC;oCAChG,SAAS,gBAAgB,2BAA2B,eAAe,mCAAmC;oCACtG,SAAS,gBAAgB,iCAAiC,eAAe,+BAA+B;oCACxG,SAAS,gBAAgB,yCAAyC,eAAe,uCAAuC;oCACxH,SAAS,gBAAgB,6CAA6C,eAAe,2CAA2C;oCAChI,SAAS,gBAAgB,wBAAwB,eAAe,sBAAsB;oCACtF,YAAY,eAAe,iBAAiB;oCAC5C,SAAS,gBAAgB,oCAAoC,eAAe,kCAAkC;oCAC9G,sJAAsJ;oCACtJ,WAAW,gBAAgB,wCAAwC,gBAAgB,0BAA0B,eAAe,sCAAsC;oCAClK,iGAAiG;oCACjG,UAAU,eAAe,eAAe,eAAe,eAAe,eAAe,cAAc,eAAe,6BAA6B;oCAC/I,gEAAgE;oCAChE,kEAAkE;oCAClE,6DAA6D;oCAC7D,oBAAoB;oCACpB,WAAW,eAAe,0EAA0E,eAAe,2BAA2B;oCAC9I,sBAAsB,eAAe,EAAE;oCACvC,8BAA8B;iCAC9B,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;4BACf,YAAY,EAAE;gCACb,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,WAAW,EAAE;gCAC1C,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,QAAQ,EAAE,IAAI,EAAE;6BAC9D;4BACD,SAAS,EAAE,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE;yBACpF;qBACD;oBACD,UAAU,EAAE,CAAC;4BACZ,IAAI,EAAE,CAAC,CAAC,EAAE;4BACV,KAAK,EAAE,GAAG,CAAC,WAAW;4BACtB,KAAK,EAAE;gCACN,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE;gCACrC,EAAE,IAAI,EAAE,KAAK,EAAE,aAAa,EAAE,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE;6BAC5D;4BACD,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,CAAC;4BAC9C,GAAG,EAAE;gCACJ,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE;gCACnC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE;gCACnC,EAAE,IAAI,EAAE,yBAAyB,EAAE,KAAK,EAAE,MAAM,EAAE;gCAClD,EAAE,IAAI,EAAE,uBAAuB,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE;gCACpD,EAAE,IAAI,EAAE,yBAAyB,EAAE,KAAK,EAAE,WAAW,GAAG,CAAC,MAAM,EAAE,EAAE;gCACnE,EAAE,IAAI,EAAE,0BAA0B,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE;gCACzD,EAAE,IAAI,EAAE,yBAAyB,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE;gCAC/D,EAAE,IAAI,EAAE,0BAA0B,EAAE,KAAK,EAAE,WAAW,EAAE;gCACxD,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,sBAAsB,EAAE;gCAC5D,EAAE,IAAI,EAAE,0BAA0B,EAAE,KAAK,EAAE,MAAM,EAAE;gCACnD,EAAE,IAAI,EAAE,+BAA+B,EAAE,KAAK,EAAE,MAAM,EAAE;gCACxD,EAAE,IAAI,EAAE,0BAA0B,EAAE,SAAS,EAAE,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,kBAAkB,EAAE,EAAE,EAAE;gCAChH,EAAE,IAAI,EAAE,8BAA8B,EAAE,SAAS,EAAE,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,sBAAsB,EAAE,EAAE,EAAE;gCACxH,EAAE,IAAI,EAAE,6BAA6B,EAAE,SAAS,EAAE,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,YAAY,EAAE,EAAE,EAAE;gCAC7G,EAAE,IAAI,EAAE,qBAAqB,EAAE,SAAS,EAAE,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,GAAG,EAAE,WAAW,EAAE,EAAE,EAAE;gCAC1G,EAAE,IAAI,EAAE,uBAAuB,EAAE,SAAS,EAAE,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,eAAe,EAAE,EAAE,EAAE;6BAC1G;4BACD,YAAY,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;4BAC1D,aAAa,EAAE;gCACd,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE;gCAC5B,mBAAmB,EAAE,EAAE;gCACvB,aAAa,EAAE,EAAE;6BACjB;4BACD,cAAc,EAAE;gCACf,OAAO,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE;gCACvC,aAAa,EAAE,EAAE;6BACjB;4BACD,SAAS,EAAE;gCACV,QAAQ,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE;gCAC1C,MAAM,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE;6BACnC;yBACD,CAAC;oBACF,OAAO,EAAE;wBACR,EAAE,IAAI,EAAE,MAAM,EAAE,qBAAqB,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE;wBAC/D;4BACC,IAAI,EAAE,OAAO;4BACb,SAAS,EAAE;gCACV,IAAI,EAAE,WAAW;gCACjB,KAAK,EAAE,UAAU;6BACjB;yBACD;qBACD;iBACD;aACD;SACD;KACD,CAAC;IAEF,MAAM,OAAO,GAAe;QAC3B,UAAU,EAAE,IAAI;QAChB,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE;QACjC,IAAI,EAAE;YACL,IAAI,EAAE,WAAW;YACjB,QAAQ,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE;YACvB,KAAK,EAAE;gBACN,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE;gBACxC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,CAAC,OAAO,EAAE;aAC3D;SACD;KACD,CAAC;IAEF,MAAM,GAAG,GAAG;QACX,UAAU,EAAE,IAAI;QAChB,IAAI,EAAE,uBAAuB;QAC7B,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE;QACjE,IAAI,EAAE;YACL,WAAW,EAAE,CAAC,eAAe,CAAC;YAC9B,SAAS,EAAE,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC,YAAY,IAAI,EAAE,EAAE;SAC7D;KACD,CAAC;IAEF,MAAM,cAAc,GAAG;QACtB,UAAU,EAAE,IAAI;QAChB,IAAI,EAAE,WAAW;QACjB,QAAQ,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE;QACrE,IAAI,EAAE,SAAS;KACf,CAAC;IAEF,MAAM,OAAO,GAAG;QACf,UAAU,EAAE,sBAAsB;QAClC,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE;YACT,IAAI;YACJ,SAAS,EAAE,EAAE;YACb,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE;YACrB,WAAW,EAAE;gBACZ,gCAAgC,EAAE,kBAAkB;gBACpD,6CAA6C,EAAE,MAAM;aACrD;SACD;QACD,IAAI,EAAE;YACL,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,GAAG,IAAI,MAAM,EAAE,CAAC;YACzD,KAAK,EAAE,CAAC;oBACP,IAAI,EAAE,GAAG,CAAC,MAAM;oBAChB,IAAI,EAAE;wBACL,KAAK,EAAE,CAAC;gCACP,IAAI,EAAE,GAAG;gCACT,QAAQ,EAAE,QAAiB;gCAC3B,OAAO,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE;6BACtD,CAAC;qBACF;iBACD,CAAC;SACF;KACD,CAAC;IAEF,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAA+B;IAC9D,MAAM,UAAU,GAAG,yBAAyB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC1D,OAAO,2BAA2B,CAAC;QAClC,EAAE,EAAE,YAAY;QAChB,IAAI,EAAE,mBAAmB;QACzB,QAAQ,EAAE,EAAE;QACZ,cAAc,EAAE;YACf,cAAc,EAAE,GAAG,EAAE,CAAC,qBAAqB,CAAC,UAAU,CAAC;SACvD;KACD,CAAC,CAAC;AACJ,CAAC"}

package/dist/implementations/managed-db.impl.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Implementation: infra/database -> do-managed-postgres
+ *
+ * Generates a DigitalOcean API-compatible managed database specification.
+ */
+import * as z from 'zod/v4';
+import type { DOManagedDBSpec } from '../types.ts';
+export declare const DOManagedPostgresDescriptorSchema: z.ZodObject<{
+    kind: z.ZodLiteral<"infra/database">;
+    id: z.ZodString;
+    name: z.ZodOptional<z.ZodString>;
+    description: z.ZodOptional<z.ZodString>;
+    engine: z.ZodLiteral<"postgres">;
+    replicas: z.ZodDefault<z.ZodNumber>;
+    config: z.ZodObject<{
+        size: z.ZodDefault<z.ZodString>;
+        region: z.ZodDefault<z.ZodString>;
+        version: z.ZodDefault<z.ZodString>;
+        adapter: z.ZodLiteral<"do-managed-postgres">;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export type DOManagedPostgresDescriptorInput = z.input<typeof DOManagedPostgresDescriptorSchema>;
+export type DOManagedPostgresDescriptor = z.infer<typeof DOManagedPostgresDescriptorSchema>;
+export declare function generateDOManagedDB(descriptor: DOManagedPostgresDescriptor): DOManagedDBSpec;
+//# sourceMappingURL=managed-db.impl.d.ts.map

package/dist/implementations/managed-db.impl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"managed-db.impl.d.ts","sourceRoot":"","sources":["../../src/implementations/managed-db.impl.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEnD,eAAO,MAAM,iCAAiC;;;;;;;;;;;;;iBAU5C,CAAC;AAEH,MAAM,MAAM,gCAAgC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iCAAiC,CAAC,CAAC;AACjG,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iCAAiC,CAAC,CAAC;AAE5F,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,2BAA2B,GAAG,eAAe,CAW5F"}

package/dist/implementations/managed-db.impl.js

@@ -0,0 +1,31 @@
+/**
+ * Implementation: infra/database -> do-managed-postgres
+ *
+ * Generates a DigitalOcean API-compatible managed database specification.
+ */
+import * as z from 'zod/v4';
+import { DOManagedPostgresConfigSchema } from '@vibesdotdev/infra-core/kinds';
+export const DOManagedPostgresDescriptorSchema = z.object({
+    kind: z.literal('infra/database'),
+    id: z.string().min(1),
+    name: z.string().optional(),
+    description: z.string().optional(),
+    engine: z.literal('postgres'),
+    replicas: z.number().int().nonnegative().default(0),
+    config: DOManagedPostgresConfigSchema.extend({
+        adapter: z.literal('do-managed-postgres')
+    })
+});
+export function generateDOManagedDB(descriptor) {
+    const parsed = DOManagedPostgresDescriptorSchema.parse(descriptor);
+    const cfg = parsed.config;
+    return {
+        name: `vibes-${parsed.id}`,
+        engine: 'pg',
+        version: cfg.version,
+        size: cfg.size,
+        region: cfg.region,
+        num_nodes: (parsed.replicas ?? 0) + 1
+    };
+}
+//# sourceMappingURL=managed-db.impl.js.map

package/dist/implementations/managed-db.impl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"managed-db.impl.js","sourceRoot":"","sources":["../../src/implementations/managed-db.impl.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,6BAA6B,EAAE,MAAM,+BAA+B,CAAC;AAG9E,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC,CAAC,MAAM,CAAC;IACzD,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC;IACjC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;IAC7B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IACnD,MAAM,EAAE,6BAA6B,CAAC,MAAM,CAAC;QAC5C,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC;KACzC,CAAC;CACF,CAAC,CAAC;AAKH,MAAM,UAAU,mBAAmB,CAAC,UAAuC;IAC1E,MAAM,MAAM,GAAG,iCAAiC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACnE,MAAM,GAAG,GAAG,MAAM,CAAC,MAAO,CAAC;IAC3B,OAAO;QACN,IAAI,EAAE,SAAS,MAAM,CAAC,EAAE,EAAE;QAC1B,MAAM,EAAE,IAAI;QACZ,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,SAAS,EAAE,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC;KACrC,CAAC;AACH,CAAC"}

package/dist/implementations/managed-redis.impl.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Implementation: infra/cache -> do-managed-redis
+ *
+ * Generates a DigitalOcean API-compatible managed Redis specification.
+ */
+import * as z from 'zod/v4';
+import type { DOManagedRedisSpec } from '../types.ts';
+export declare const DOManagedRedisDescriptorSchema: z.ZodObject<{
+    kind: z.ZodLiteral<"infra/cache">;
+    id: z.ZodString;
+    name: z.ZodOptional<z.ZodString>;
+    description: z.ZodOptional<z.ZodString>;
+    engine: z.ZodLiteral<"redis">;
+    maxMemory: z.ZodOptional<z.ZodString>;
+    eviction: z.ZodOptional<z.ZodEnum<{
+        lru: "lru";
+        lfu: "lfu";
+        ttl: "ttl";
+    }>>;
+    config: z.ZodObject<{
+        maxMemory: z.ZodOptional<z.ZodString>;
+        eviction: z.ZodOptional<z.ZodEnum<{
+            lru: "lru";
+            lfu: "lfu";
+            ttl: "ttl";
+        }>>;
+        region: z.ZodDefault<z.ZodString>;
+        version: z.ZodDefault<z.ZodString>;
+        numNodes: z.ZodDefault<z.ZodNumber>;
+        size: z.ZodOptional<z.ZodString>;
+        adapter: z.ZodLiteral<"do-managed-redis">;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export type DOManagedRedisDescriptorInput = z.input<typeof DOManagedRedisDescriptorSchema>;
+export type DOManagedRedisDescriptor = z.infer<typeof DOManagedRedisDescriptorSchema>;
+export declare function generateDOManagedRedis(descriptor: DOManagedRedisDescriptor): DOManagedRedisSpec;
+//# sourceMappingURL=managed-redis.impl.d.ts.map

package/dist/implementations/managed-redis.impl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"managed-redis.impl.d.ts","sourceRoot":"","sources":["../../src/implementations/managed-redis.impl.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAQtD,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;;;;;;;;;;iBAWzC,CAAC;AAEH,MAAM,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAC3F,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAEtF,wBAAgB,sBAAsB,CAAC,UAAU,EAAE,wBAAwB,GAAG,kBAAkB,CAgB/F"}