@vibesdotdev/integrations-digitalocean 0.0.0-stage → 1.0.0-rc.1

package/dist/infra/doks/clients.d.ts

@@ -0,0 +1,183 @@
+/**
+ * The semantic runtime clients a host composes for DOKS.
+ *
+ * Planning and client construction are credential- and network-free: a control
+ * plane is assembled from the vendor clients it needs, and the operator token is
+ * acquired by the shared owner in `../credentials.ts` on the first request that
+ * actually needs it. Planning a release or a worker never resolves a credential.
+ */
+import type { DigitalOceanKubernetesServiceReleaseClient as ReleaseClient } from './service-release.ts';
+import { type VibesRuntime } from '@vibesdotdev/kernel';
+import { BaseRuntimeClient } from '@vibesdotdev/kernel/client';
+import { planDigitalOceanKubernetesServiceRelease } from './service-release.ts';
+import { planDigitalOceanDoksWorkerApply, planDigitalOceanDoksWorkerBuild } from './worker.ts';
+import type { DigitalOceanDoksWorkerCreateOptions, DigitalOceanDoksWorkerExecutionOwner } from '../../schemas/doks-worker.ts';
+export declare class DigitalOceanServiceReleaseRuntimeClient extends BaseRuntimeClient<VibesRuntime> {
+    plan(...args: Parameters<typeof planDigitalOceanKubernetesServiceRelease>): import("./service-release.ts").KubernetesServiceReleasePlan;
+    /** Compose existing typed vendor clients; HTTP/TLS remains owned by their transports. */
+    connect(...args: Tail<ConstructorParameters<typeof ReleaseClient>>): ReleaseClient;
+    create(): Promise<ReleaseClient>;
+}
+export declare class DigitalOceanDoksWorkerRuntimeClient extends BaseRuntimeClient<VibesRuntime> {
+    planApply(...args: Parameters<typeof planDigitalOceanDoksWorkerApply>): {
+        provider: "digitalocean-kubernetes";
+        operation: "build" | "apply";
+        fieldManager: "vibes-infra-doks-worker";
+        conflictPolicy: "fail";
+        cluster: {
+            id?: string | undefined;
+            name?: string | undefined;
+        };
+        worker: string;
+        namespace: string;
+        image: string;
+        resources: {
+            apiVersion: string;
+            kind: string;
+            name: string;
+            manifest: {
+                [x: string]: unknown;
+                apiVersion: string;
+                kind: string;
+                metadata: {
+                    [x: string]: unknown;
+                    name: string;
+                    namespace?: string | undefined;
+                };
+            };
+            namespace?: string | undefined;
+        }[];
+        sourceRevision?: string | undefined;
+        requiredSecrets?: {
+            namespace: string;
+            name: string;
+            keys: string[];
+        }[] | undefined;
+        credentialBindings?: ({
+            kind: "source-lease";
+            namespace: string;
+            name: string;
+            key: string;
+            repositoryId: string;
+            ref: string;
+            authority: {
+                key: string;
+                store?: string | undefined;
+                env?: string | undefined;
+            };
+        } | {
+            kind: "docr";
+            namespace: string;
+            name: string;
+            key: "config.json";
+            expirySeconds: number;
+        } | {
+            kind: "package-registry";
+            namespace: string;
+            name: string;
+            key: ".npmrc" | ".bunfig.toml";
+            authority: {
+                key: string;
+                store?: string | undefined;
+                env?: string | undefined;
+            };
+        })[] | undefined;
+        credentialLease?: {
+            operationId: string;
+            repositoryId: string;
+            ref: string;
+            namespace: string;
+            name: string;
+            authority: {
+                key: string;
+                store?: string | undefined;
+                env?: string | undefined;
+            };
+        } | undefined;
+    };
+    planBuild(...args: Parameters<typeof planDigitalOceanDoksWorkerBuild>): {
+        provider: "digitalocean-kubernetes";
+        operation: "build" | "apply";
+        fieldManager: "vibes-infra-doks-worker";
+        conflictPolicy: "fail";
+        cluster: {
+            id?: string | undefined;
+            name?: string | undefined;
+        };
+        worker: string;
+        namespace: string;
+        image: string;
+        resources: {
+            apiVersion: string;
+            kind: string;
+            name: string;
+            manifest: {
+                [x: string]: unknown;
+                apiVersion: string;
+                kind: string;
+                metadata: {
+                    [x: string]: unknown;
+                    name: string;
+                    namespace?: string | undefined;
+                };
+            };
+            namespace?: string | undefined;
+        }[];
+        sourceRevision?: string | undefined;
+        requiredSecrets?: {
+            namespace: string;
+            name: string;
+            keys: string[];
+        }[] | undefined;
+        credentialBindings?: ({
+            kind: "source-lease";
+            namespace: string;
+            name: string;
+            key: string;
+            repositoryId: string;
+            ref: string;
+            authority: {
+                key: string;
+                store?: string | undefined;
+                env?: string | undefined;
+            };
+        } | {
+            kind: "docr";
+            namespace: string;
+            name: string;
+            key: "config.json";
+            expirySeconds: number;
+        } | {
+            kind: "package-registry";
+            namespace: string;
+            name: string;
+            key: ".npmrc" | ".bunfig.toml";
+            authority: {
+                key: string;
+                store?: string | undefined;
+                env?: string | undefined;
+            };
+        })[] | undefined;
+        credentialLease?: {
+            operationId: string;
+            repositoryId: string;
+            ref: string;
+            namespace: string;
+            name: string;
+            authority: {
+                key: string;
+                store?: string | undefined;
+                env?: string | undefined;
+            };
+        } | undefined;
+    };
+    /**
+     * Return the plan-based adapter consumed by Infra Deploy. Each operation
+     * reduces the caller's plan to its identity and re-derives authorization
+     * from the descriptor selected by the runtime.
+     */
+    create(options?: DigitalOceanDoksWorkerCreateOptions): Promise<DigitalOceanDoksWorkerExecutionOwner>;
+}
+type Tail<T extends unknown[]> = T extends [unknown, ...infer Rest] ? Rest : never;
+export {};
+//# sourceMappingURL=clients.d.ts.map

package/dist/infra/doks/clients.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"clients.d.ts","sourceRoot":"","sources":["../../../src/infra/doks/clients.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,KAAK,EAAE,0CAA0C,IAAI,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACxG,OAAO,EAAmB,KAAK,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEzE,OAAO,EAAE,iBAAiB,EAAkB,MAAM,4BAA4B,CAAC;AAO/E,OAAO,EAEN,wCAAwC,EACxC,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACN,+BAA+B,EAC/B,+BAA+B,EAC/B,MAAM,aAAa,CAAC;AAOrB,OAAO,KAAK,EACX,mCAAmC,EAEnC,oCAAoC,EAEpC,MAAM,8BAA8B,CAAC;AAsFtC,qBAAa,uCAAwC,SAAQ,iBAAiB,CAAC,YAAY,CAAC;IAC3F,IAAI,CAAC,GAAG,IAAI,EAAE,UAAU,CAAC,OAAO,wCAAwC,CAAC;IAIzE,yFAAyF;IACzF,OAAO,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC,qBAAqB,CAAC,OAAO,aAAa,CAAC,CAAC;IAI5D,MAAM;CAQZ;AAED,qBAAa,mCAAoC,SAAQ,iBAAiB,CAAC,YAAY,CAAC;IACvF,SAAS,CAAC,GAAG,IAAI,EAAE,UAAU,CAAC,OAAO,+BAA+B,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAIrE,SAAS,CAAC,GAAG,IAAI,EAAE,UAAU,CAAC,OAAO,+BAA+B,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAIrE;;;;OAIG;IACG,MAAM,CACX,OAAO,CAAC,EAAE,mCAAmC,GAC3C,OAAO,CAAC,oCAAoC,CAAC;CA6DhD;AAED,KAAK,IAAI,CAAC,CAAC,SAAS,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,GAAG,IAAI,GAAG,KAAK,CAAC"}

package/dist/infra/doks/clients.js

@@ -0,0 +1,172 @@
+import { CapabilityError } from '@vibesdotdev/kernel';
+import { BaseRuntimeClient, getVibesClient } from '@vibesdotdev/kernel/client';
+import { createDigitalOceanProviderControlPlaneClient } from "../credentials.js";
+import { DigitalOceanKubernetesClient } from "../../kubernetes/index.js";
+import { DigitalOceanSpacesKeysClient } from "../../storage/spaces-keys.js";
+import { DigitalOceanKubernetesServiceReleaseClient, planDigitalOceanKubernetesServiceRelease } from "./service-release.js";
+import { planDigitalOceanDoksWorkerApply, planDigitalOceanDoksWorkerBuild } from "./worker.js";
+import { DigitalOceanDoksWorkerCreateOptionsSchema, DigitalOceanDoksWorkerExecutionInputSchema, DigitalOceanDoksWorkerExecutionOwnerSchema, DigitalOceanDoksWorkerPlanSchema } from "../../schemas/doks-worker.js";
+/**
+ * A control plane whose authority is acquired on the first request.
+ *
+ * The vendor clients hold this object and call its named methods, so nothing
+ * resolves a credential until a request is actually made. Each method acquires
+ * inside its own body, so the acquisition promise is never handed to a callback
+ * that expects a client, and a failed acquisition is not cached: the next
+ * request retries it and sees the original failure.
+ */
+function lazyControlPlane(runtime) {
+    let pending;
+    const acquire = async () => {
+        if (!pending) {
+            const opening = createDigitalOceanProviderControlPlaneClient(runtime);
+            pending = opening;
+            try {
+                return await opening;
+            }
+            catch (cause) {
+                if (pending === opening)
+                    pending = undefined;
+                throw cause;
+            }
+        }
+        return await pending;
+    };
+    // Every member acquires inside its own body at the request boundary, so the
+    // acquisition promise is never handed to a callback expecting a client. Each
+    // call reads the method off the resolved client and invokes it as a method
+    // of that client, so the real client's receiver — and its `context` — is
+    // preserved, and the overloaded signatures are the client's own.
+    return {
+        // The context belongs to the resolved client and is not fabricated. The
+        // vendor clients that hold this control plane never read it — they call
+        // the named methods, which acquire first. This accessor refuses a member
+        // that no reachable caller can resolve instead of inventing a context.
+        get context() {
+            throw new Error('The lazy DigitalOcean control plane has no context before acquisition; ' +
+                'request through its methods, which acquire first.');
+        },
+        async request(...args) {
+            const client = await acquire();
+            return client.request(...args);
+        },
+        async get(...args) {
+            const client = await acquire();
+            return client.get(...args);
+        },
+        async post(...args) {
+            const client = await acquire();
+            return client.post(...args);
+        },
+        async put(...args) {
+            const client = await acquire();
+            return client.put(...args);
+        },
+        async patch(...args) {
+            const client = await acquire();
+            return client.patch(...args);
+        },
+        async delete(...args) {
+            const client = await acquire();
+            return client.delete(...args);
+        },
+        async getOrNull(...args) {
+            const client = await acquire();
+            return client.getOrNull(...args);
+        },
+        // `paginate` returns an AsyncGenerator; awaiting it would lose the
+        // iterator contract the vendor clients iterate, so pages are yielded.
+        paginate: async function* (options) {
+            const client = await acquire();
+            for await (const page of client.paginate(options))
+                yield page;
+        },
+        async collect(options) {
+            const client = await acquire();
+            return client.collect(options);
+        }
+    };
+}
+export class DigitalOceanServiceReleaseRuntimeClient extends BaseRuntimeClient {
+    plan(...args) {
+        return planDigitalOceanKubernetesServiceRelease(...args);
+    }
+    /** Compose existing typed vendor clients; HTTP/TLS remains owned by their transports. */
+    connect(...args) {
+        return new DigitalOceanKubernetesServiceReleaseClient(this.runtime, ...args);
+    }
+    async create() {
+        const controlPlane = lazyControlPlane(this.runtime);
+        return this.connect(new DigitalOceanKubernetesClient(controlPlane), undefined, new DigitalOceanSpacesKeysClient(controlPlane));
+    }
+}
+export class DigitalOceanDoksWorkerRuntimeClient extends BaseRuntimeClient {
+    planApply(...args) {
+        return planDigitalOceanDoksWorkerApply(...args);
+    }
+    planBuild(...args) {
+        return planDigitalOceanDoksWorkerBuild(...args);
+    }
+    /**
+     * Return the plan-based adapter consumed by Infra Deploy. Each operation
+     * reduces the caller's plan to its identity and re-derives authorization
+     * from the descriptor selected by the runtime.
+     */
+    async create(options) {
+        const parsedOptions = DigitalOceanDoksWorkerCreateOptionsSchema.safeParse(options ?? {});
+        if (!parsedOptions.success) {
+            throw new CapabilityError('DOKS worker create options are invalid.', 'INVALID_INPUT', {
+                reason: 'doks-worker-create-options-invalid',
+                cause: parsedOptions.error
+            });
+        }
+        const factory = await getVibesClient('digitalocean-kubernetes-service-release', this.runtime);
+        const client = await factory.create();
+        const executionInput = (candidate) => {
+            const parsedPlan = DigitalOceanDoksWorkerPlanSchema.safeParse(candidate);
+            if (!parsedPlan.success) {
+                throw new CapabilityError('DOKS worker plan is invalid.', 'INVALID_INPUT', {
+                    reason: 'doks-worker-plan-invalid',
+                    cause: parsedPlan.error
+                });
+            }
+            const plan = parsedPlan.data;
+            const input = plan.operation === 'build'
+                ? plan.sourceRevision
+                    ? { operation: 'build', worker: plan.worker, sourceRevision: plan.sourceRevision }
+                    : undefined
+                : { operation: 'apply', worker: plan.worker };
+            if (!input) {
+                throw new CapabilityError('DOKS build plan has no source revision.', 'INVALID_INPUT', {
+                    reason: 'doks-worker-plan-invalid'
+                });
+            }
+            const parsedInput = DigitalOceanDoksWorkerExecutionInputSchema.safeParse(input);
+            if (!parsedInput.success) {
+                throw new CapabilityError('DOKS worker execution input is invalid.', 'INVALID_INPUT', {
+                    reason: 'doks-worker-execution-invalid',
+                    cause: parsedInput.error
+                });
+            }
+            return DigitalOceanDoksWorkerExecutionInputSchema.parse({
+                ...parsedInput.data,
+                environment: parsedOptions.data.environment ?? parsedInput.data.environment
+            });
+        };
+        const adapter = {
+            planApply: planDigitalOceanDoksWorkerApply,
+            planBuild: planDigitalOceanDoksWorkerBuild,
+            apply: (plan) => client.applyWorkerPlan(executionInput(plan)),
+            status: (plan) => client.getWorkerPlanStatus(executionInput(plan))
+        };
+        const parsedAdapter = DigitalOceanDoksWorkerExecutionOwnerSchema.safeParse(adapter);
+        if (!parsedAdapter.success) {
+            throw new CapabilityError('DOKS worker adapter is invalid.', 'INTERNAL', {
+                reason: 'doks-worker-adapter-invalid',
+                cause: parsedAdapter.error
+            });
+        }
+        return adapter;
+    }
+}
+//# sourceMappingURL=clients.js.map

package/dist/infra/doks/clients.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"clients.js","sourceRoot":"","sources":["../../../src/infra/doks/clients.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,eAAe,EAAqB,MAAM,qBAAqB,CAAC;AAEzE,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAE/E,OAAO,EAAE,4CAA4C,EAAE,MAAM,mBAAmB,CAAC;AAGjF,OAAO,EAAE,4BAA4B,EAAE,MAAM,2BAA2B,CAAC;AACzE,OAAO,EAAE,4BAA4B,EAAE,MAAM,8BAA8B,CAAC;AAC5E,OAAO,EACN,0CAA0C,EAC1C,wCAAwC,EACxC,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACN,+BAA+B,EAC/B,+BAA+B,EAC/B,MAAM,aAAa,CAAC;AACrB,OAAO,EACN,yCAAyC,EACzC,0CAA0C,EAC1C,0CAA0C,EAC1C,gCAAgC,EAChC,MAAM,8BAA8B,CAAC;AAQtC;;;;;;;;GAQG;AACH,SAAS,gBAAgB,CAAC,OAAqB;IAC9C,IAAI,OAA4D,CAAC;IACjE,MAAM,OAAO,GAAG,KAAK,IAA6C,EAAE;QACnE,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,MAAM,OAAO,GAAG,4CAA4C,CAAC,OAAO,CAAC,CAAC;YACtE,OAAO,GAAG,OAAO,CAAC;YAClB,IAAI,CAAC;gBACJ,OAAO,MAAM,OAAO,CAAC;YACtB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,IAAI,OAAO,KAAK,OAAO;oBAAE,OAAO,GAAG,SAAS,CAAC;gBAC7C,MAAM,KAAK,CAAC;YACb,CAAC;QACF,CAAC;QACD,OAAO,MAAM,OAAO,CAAC;IACtB,CAAC,CAAC;IAEF,4EAA4E;IAC5E,6EAA6E;IAC7E,2EAA2E;IAC3E,yEAAyE;IACzE,iEAAiE;IACjE,OAAO;QACN,wEAAwE;QACxE,wEAAwE;QACxE,yEAAyE;QACzE,uEAAuE;QACvE,IAAI,OAAO;YACV,MAAM,IAAI,KAAK,CACd,yEAAyE;gBACxE,mDAAmD,CACpD,CAAC;QACH,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,GAAG,IAA2D;YAC3E,MAAM,MAAM,GAAG,MAAM,OAAO,EAAE,CAAC;YAC/B,OAAO,MAAM,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;QAChC,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,GAAG,IAAuD;YACnE,MAAM,MAAM,GAAG,MAAM,OAAO,EAAE,CAAC;YAC/B,OAAO,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;QAC5B,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,GAAG,IAAwD;YACrE,MAAM,MAAM,GAAG,MAAM,OAAO,EAAE,CAAC;YAC/B,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;QAC7B,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,GAAG,IAAuD;YACnE,MAAM,MAAM,GAAG,MAAM,OAAO,EAAE,CAAC;YAC/B,OAAO,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;QAC5B,CAAC;QACD,KAAK,CAAC,KAAK,CAAC,GAAG,IAAyD;YACvE,MAAM,MAAM,GAAG,MAAM,OAAO,EAAE,CAAC;YAC/B,OAAO,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC;QAC9B,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,GAAG,IAA0D;YACzE,MAAM,MAAM,GAAG,MAAM,OAAO,EAAE,CAAC;YAC/B,OAAO,MAAM,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC;QAC/B,CAAC;QACD,KAAK,CAAC,SAAS,CAAC,GAAG,IAA6D;YAC/E,MAAM,MAAM,GAAG,MAAM,OAAO,EAAE,CAAC;YAC/B,OAAO,MAAM,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC;QAClC,CAAC;QACD,mEAAmE;QACnE,sEAAsE;QACtE,QAAQ,EAAE,KAAK,SAAS,CAAC,EACxB,OAA2B;YAE3B,MAAM,MAAM,GAAG,MAAM,OAAO,EAAE,CAAC;YAC/B,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAAE,MAAM,IAAI,CAAC;QAC/D,CAAC;QACD,KAAK,CAAC,OAAO,CAAiC,OAAgC;YAC7E,MAAM,MAAM,GAAG,MAAM,OAAO,EAAE,CAAC;YAC/B,OAAO,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAChC,CAAC;KACD,CAAC;AACH,CAAC;AAED,MAAM,OAAO,uCAAwC,SAAQ,iBAA+B;IAC3F,IAAI,CAAC,GAAG,IAAiE;QACxE,OAAO,wCAAwC,CAAC,GAAG,IAAI,CAAC,CAAC;IAC1D,CAAC;IAED,yFAAyF;IACzF,OAAO,CAAC,GAAG,IAAuD;QACjE,OAAO,IAAI,0CAA0C,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;IAC9E,CAAC;IAED,KAAK,CAAC,MAAM;QACX,MAAM,YAAY,GAAG,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpD,OAAO,IAAI,CAAC,OAAO,CAClB,IAAI,4BAA4B,CAAC,YAAY,CAAC,EAC9C,SAAS,EACT,IAAI,4BAA4B,CAAC,YAAY,CAAC,CAC9C,CAAC;IACH,CAAC;CACD;AAED,MAAM,OAAO,mCAAoC,SAAQ,iBAA+B;IACvF,SAAS,CAAC,GAAG,IAAwD;QACpE,OAAO,+BAA+B,CAAC,GAAG,IAAI,CAAC,CAAC;IACjD,CAAC;IAED,SAAS,CAAC,GAAG,IAAwD;QACpE,OAAO,+BAA+B,CAAC,GAAG,IAAI,CAAC,CAAC;IACjD,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,MAAM,CACX,OAA6C;QAE7C,MAAM,aAAa,GAAG,yCAAyC,CAAC,SAAS,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;QACzF,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;YAC5B,MAAM,IAAI,eAAe,CAAC,yCAAyC,EAAE,eAAe,EAAE;gBACrF,MAAM,EAAE,oCAAoC;gBAC5C,KAAK,EAAE,aAAa,CAAC,KAAK;aAC1B,CAAC,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,cAAc,CACnC,yCAAyC,EACzC,IAAI,CAAC,OAAO,CACZ,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC;QACtC,MAAM,cAAc,GAAG,CAAC,SAAqC,EAAwC,EAAE;YACtG,MAAM,UAAU,GAAG,gCAAgC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;YACzE,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;gBACzB,MAAM,IAAI,eAAe,CAAC,8BAA8B,EAAE,eAAe,EAAE;oBAC1E,MAAM,EAAE,0BAA0B;oBAClC,KAAK,EAAE,UAAU,CAAC,KAAK;iBACvB,CAAC,CAAC;YACJ,CAAC;YAED,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC;YAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,KAAK,OAAO;gBACvC,CAAC,CAAC,IAAI,CAAC,cAAc;oBACpB,CAAC,CAAC,EAAE,SAAS,EAAE,OAAgB,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE;oBAC3F,CAAC,CAAC,SAAS;gBACZ,CAAC,CAAC,EAAE,SAAS,EAAE,OAAgB,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;YACxD,IAAI,CAAC,KAAK,EAAE,CAAC;gBACZ,MAAM,IAAI,eAAe,CAAC,yCAAyC,EAAE,eAAe,EAAE;oBACrF,MAAM,EAAE,0BAA0B;iBAClC,CAAC,CAAC;YACJ,CAAC;YAED,MAAM,WAAW,GAAG,0CAA0C,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YAChF,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;gBAC1B,MAAM,IAAI,eAAe,CAAC,yCAAyC,EAAE,eAAe,EAAE;oBACrF,MAAM,EAAE,+BAA+B;oBACvC,KAAK,EAAE,WAAW,CAAC,KAAK;iBACxB,CAAC,CAAC;YACJ,CAAC;YACD,OAAO,0CAA0C,CAAC,KAAK,CAAC;gBACvD,GAAG,WAAW,CAAC,IAAI;gBACnB,WAAW,EAAE,aAAa,CAAC,IAAI,CAAC,WAAW,IAAI,WAAW,CAAC,IAAI,CAAC,WAAW;aAC3E,CAAC,CAAC;QACJ,CAAC,CAAC;QACF,MAAM,OAAO,GAAG;YACf,SAAS,EAAE,+BAA+B;YAC1C,SAAS,EAAE,+BAA+B;YAC1C,KAAK,EAAE,CAAC,IAAgC,EAAE,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;YACzF,MAAM,EAAE,CAAC,IAAgC,EAAE,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;SAC9F,CAAC;QACF,MAAM,aAAa,GAAG,0CAA0C,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACpF,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;YAC5B,MAAM,IAAI,eAAe,CAAC,iCAAiC,EAAE,UAAU,EAAE;gBACxE,MAAM,EAAE,6BAA6B;gBACrC,KAAK,EAAE,aAAa,CAAC,KAAK;aAC1B,CAAC,CAAC;QACJ,CAAC;QACD,OAAO,OAAO,CAAC;IAChB,CAAC;CACD"}

package/dist/infra/doks/digitalocean.d.ts

@@ -0,0 +1,34 @@
+/**
+ * DigitalOcean Cloud Provider Implementation
+ *
+ * Implements the CloudProvider interface for DigitalOcean.
+ */
+import { BaseCloudProvider } from '@vibesdotdev/infra-core/doks/cloud';
+import { type VibesRuntime } from '@vibesdotdev/kernel';
+import type { CloudInstance, InstanceConfig, InstanceFilters, CloudVolume, VolumeConfig, VolumeFilters, SSHKey } from '@vibesdotdev/infra-core/doks/types';
+export declare class DigitalOceanProvider extends BaseCloudProvider {
+    name: string;
+    private readonly client;
+    constructor(runtime: Pick<VibesRuntime, 'lifecycle'>, apiToken: string, defaultRegion?: string);
+    private doRequest;
+    createInstance(config: InstanceConfig): Promise<CloudInstance>;
+    deleteInstance(instanceId: string): Promise<void>;
+    getInstance(instanceId: string): Promise<CloudInstance | null>;
+    listInstances(filters?: InstanceFilters): Promise<CloudInstance[]>;
+    createVolume(config: VolumeConfig): Promise<CloudVolume>;
+    attachVolume(volumeId: string, instanceId: string): Promise<void>;
+    detachVolume(volumeId: string): Promise<void>;
+    deleteVolume(volumeId: string): Promise<void>;
+    listVolumes(filters?: VolumeFilters): Promise<CloudVolume[]>;
+    getOrCreateVPC(name: string): Promise<string>;
+    addSSHKey(name: string, publicKey: string): Promise<string>;
+    listSSHKeys(): Promise<SSHKey[]>;
+    private waitForDropletReady;
+    private mapDropletToInstance;
+    private mapDropletStatus;
+    private mapVolumeToCloudVolume;
+    private extractDropletId;
+    private formatTags;
+    private parseTags;
+}
+//# sourceMappingURL=digitalocean.d.ts.map

package/dist/infra/doks/digitalocean.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"digitalocean.d.ts","sourceRoot":"","sources":["../../../src/infra/doks/digitalocean.ts"],"names":[],"mappings":"AAaA;;;;GAIG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AACvE,OAAO,EAA8C,KAAK,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEpG,OAAO,KAAK,EACX,aAAa,EACb,cAAc,EACd,eAAe,EACf,WAAW,EACX,YAAY,EACZ,aAAa,EACb,MAAM,EAEN,MAAM,oCAAoC,CAAC;AAiC5C,qBAAa,oBAAqB,SAAQ,iBAAiB;IAC1D,IAAI,SAAkB;IACtB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAiC;gBAGvD,OAAO,EAAE,IAAI,CAAC,YAAY,EAAE,WAAW,CAAC,EACxC,QAAQ,EAAE,MAAM,EAChB,aAAa,GAAE,MAAe;YASjB,SAAS;IAiBjB,cAAc,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC;IA6B9D,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAYjD,WAAW,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;IAgB9D,aAAa,CAAC,OAAO,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IA2BlE,YAAY,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC;IAoBxD,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAmBjE,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAgB7C,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAU7C,WAAW,CAAC,OAAO,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IAgB5D,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAkC7C,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAgB3D,WAAW,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YAiBxB,mBAAmB;IAiDjC,OAAO,CAAC,oBAAoB;IAiB5B,OAAO,CAAC,gBAAgB;IAYxB,OAAO,CAAC,sBAAsB;IAa9B,OAAO,CAAC,gBAAgB;IAOxB,OAAO,CAAC,UAAU;IAIlB,OAAO,CAAC,SAAS;CAYjB"}

package/dist/infra/doks/digitalocean.js

@@ -0,0 +1,267 @@
+import * as z from 'zod/v4';
+import { digitalOceanHttpStatus } from "../../client/errors.js";
+import { DigitalOceanResponseSchema } from "../../schemas/control-plane.js";
+import { ProviderDropletResponseSchema, ProviderDropletsResponseSchema, ProviderVolumeResponseSchema, ProviderVolumesResponseSchema, VpcsResponseSchema, VpcResponseSchema, ProviderSshKeyResponseSchema, ProviderSshKeysResponseSchema } from "../../schemas/http.js";
+/**
+ * DigitalOcean Cloud Provider Implementation
+ *
+ * Implements the CloudProvider interface for DigitalOcean.
+ */
+import { BaseCloudProvider } from '@vibesdotdev/infra-core/doks/cloud';
+import { CapabilityError, settle, isCapabilityError } from '@vibesdotdev/kernel';
+import { DigitalOceanControlPlaneClient } from "../../client/index.js";
+export class DigitalOceanProvider extends BaseCloudProvider {
+    name = 'digitalocean';
+    client;
+    constructor(runtime, apiToken, defaultRegion = 'nyc3') {
+        super(runtime, apiToken, defaultRegion);
+        this.client = new DigitalOceanControlPlaneClient({
+            runtime,
+            token: { value: apiToken, kind: 'explicit' }
+        });
+    }
+    async doRequest(path, options, schema) {
+        const result = await settle(() => this.client.request(path, options, schema));
+        if (result.ok)
+            return result.value;
+        const error = result.cause;
+        if (error instanceof CapabilityError && error.reason === 'digitalocean-http-failed') {
+            throw this.createError(`DigitalOcean API error: ${error.details?.status}`, 'API_ERROR', {
+                status: digitalOceanHttpStatus(error)
+            }, error);
+        }
+        throw error;
+    }
+    async createInstance(config) {
+        const dropletData = {
+            name: config.name,
+            region: config.region || this.defaultRegion,
+            size: config.type,
+            image: config.image,
+            ssh_keys: config.sshKeys || [],
+            vpc_uuid: config.vpcId,
+            tags: this.formatTags(this.buildTags(config.tags)),
+            user_data: config.userData
+        };
+        const response = await this.doRequest('/droplets', {
+            method: 'POST',
+            body: JSON.stringify(dropletData)
+        }, ProviderDropletResponseSchema);
+        const droplet = response.droplet;
+        // Wait for droplet to be ready
+        const readyDroplet = await this.waitForDropletReady(droplet.id);
+        return this.mapDropletToInstance(readyDroplet);
+    }
+    async deleteInstance(instanceId) {
+        const numericId = this.extractDropletId(instanceId);
+        await this.doRequest(`/droplets/${numericId}`, {
+            method: 'DELETE'
+        }, DigitalOceanResponseSchema);
+    }
+    async getInstance(instanceId) {
+        const numericId = this.extractDropletId(instanceId);
+        const result = await settle(() => this.doRequest(`/droplets/${numericId}`, {}, ProviderDropletResponseSchema));
+        if (result.ok)
+            return this.mapDropletToInstance(result.value.droplet);
+        const error = result.cause;
+        if (error instanceof CapabilityError &&
+            error.reason === 'cloud-provider-api-error' &&
+            error.details?.status === 404)
+            return null;
+        throw error;
+    }
+    async listInstances(filters) {
+        const params = new URLSearchParams();
+        if (filters?.tags) {
+            params.append('tag_name', this.formatTags(filters.tags).join(','));
+        }
+        const response = await this.doRequest(`/droplets?${params.toString()}`, {}, ProviderDropletsResponseSchema);
+        const droplets = response.droplets;
+        let instances = droplets.map((d) => this.mapDropletToInstance(d));
+        // Apply additional filters
+        if (filters?.status) {
+            instances = instances.filter((i) => filters.status.includes(i.status));
+        }
+        if (filters?.region) {
+            instances = instances.filter((i) => i.region === filters.region);
+        }
+        return instances;
+    }
+    async createVolume(config) {
+        const volumeData = {
+            name: config.name,
+            size_gigabytes: config.size,
+            region: config.region || this.defaultRegion,
+            tags: config.tags ? this.formatTags(config.tags) : []
+        };
+        const response = await this.doRequest('/volumes', {
+            method: 'POST',
+            body: JSON.stringify(volumeData)
+        }, ProviderVolumeResponseSchema);
+        return this.mapVolumeToCloudVolume(response.volume);
+    }
+    async attachVolume(volumeId, instanceId) {
+        const numericId = this.extractDropletId(instanceId);
+        await this.doRequest(`/volumes/${volumeId}/actions`, {
+            method: 'POST',
+            body: JSON.stringify({
+                type: 'attach',
+                droplet_id: numericId
+            })
+        }, DigitalOceanResponseSchema);
+        // Wait for volume to be attached
+        await this.waitForVolumeStatus(volumeId, 'in-use');
+    }
+    async detachVolume(volumeId) {
+        await this.doRequest(`/volumes/${volumeId}/actions`, {
+            method: 'POST',
+            body: JSON.stringify({
+                type: 'detach'
+            })
+        }, DigitalOceanResponseSchema);
+        // Wait for volume to be available
+        await this.waitForVolumeStatus(volumeId, 'available');
+    }
+    async deleteVolume(volumeId) {
+        await this.doRequest(`/volumes/${volumeId}`, {
+            method: 'DELETE'
+        }, DigitalOceanResponseSchema);
+    }
+    async listVolumes(filters) {
+        const params = new URLSearchParams();
+        if (filters?.region) {
+            params.append('region', filters.region);
+        }
+        const response = await this.doRequest(`/volumes?${params.toString()}`, {}, ProviderVolumesResponseSchema);
+        const volumes = response.volumes;
+        return volumes.map((v) => this.mapVolumeToCloudVolume(v));
+    }
+    async getOrCreateVPC(name) {
+        // List existing VPCs
+        const response = await this.doRequest('/vpcs', {}, VpcsResponseSchema);
+        const vpcs = response.vpcs || [];
+        // Check if VPC with this name exists
+        const existingVpc = vpcs.find((vpc) => vpc.name === name);
+        if (existingVpc) {
+            return existingVpc.id;
+        }
+        // Create new VPC
+        const vpcData = {
+            name,
+            region: this.defaultRegion,
+            ip_range: '10.0.0.0/16'
+        };
+        const createResponse = await this.doRequest('/vpcs', {
+            method: 'POST',
+            body: JSON.stringify(vpcData)
+        }, VpcResponseSchema);
+        return createResponse.vpc.id;
+    }
+    async addSSHKey(name, publicKey) {
+        const response = await this.doRequest('/account/keys', {
+            method: 'POST',
+            body: JSON.stringify({
+                name,
+                public_key: publicKey
+            })
+        }, ProviderSshKeyResponseSchema);
+        return response.ssh_key.fingerprint;
+    }
+    async listSSHKeys() {
+        const response = await this.doRequest('/account/keys', {}, ProviderSshKeysResponseSchema);
+        const keys = response.ssh_keys;
+        return keys.map((key) => ({
+            id: key.fingerprint,
+            name: key.name,
+            fingerprint: key.fingerprint,
+            publicKey: key.public_key
+        }));
+    }
+    // Helper methods
+    async waitForDropletReady(dropletId) {
+        const timeout = 300000;
+        const pollInterval = 5000;
+        const result = await settle(async () => {
+            return await this.runtime.lifecycle.wait(async (signal) => {
+                while (true) {
+                    const response = await this.doRequest(`/droplets/${dropletId}`, {}, ProviderDropletResponseSchema);
+                    const droplet = response.droplet;
+                    if (droplet.status === 'active') {
+                        return droplet;
+                    }
+                    if (droplet.status === 'error' || droplet.status === 'archive') {
+                        throw this.createError(`Droplet entered error state: ${droplet.status}`, 'DROPLET_ERROR', { dropletId, status: droplet.status });
+                    }
+                    await this.runtime.lifecycle.delay(pollInterval, signal);
+                }
+            }, { timeoutMs: timeout, reason: 'waiting-for-droplet-active' });
+        });
+        if (result.ok)
+            return result.value;
+        const err = result.cause;
+        if (err instanceof Error && isCapabilityError(err) && err.reason === 'wait-timeout') {
+            throw this.createError('Timeout waiting for droplet to be ready', 'TIMEOUT', {
+                dropletId,
+                timeout
+            }, err);
+        }
+        throw err;
+    }
+    mapDropletToInstance(droplet) {
+        const publicIp = droplet.networks.v4.find((n) => n.type === 'public')?.ip_address;
+        const privateIp = droplet.networks.v4.find((n) => n.type === 'private')?.ip_address;
+        return {
+            id: `do-${droplet.id}`,
+            name: droplet.name,
+            type: droplet.size.slug,
+            region: droplet.region.slug,
+            status: this.mapDropletStatus(droplet.status),
+            publicIp,
+            privateIp,
+            createdAt: new Date(droplet.created_at),
+            tags: this.parseTags(droplet.tags)
+        };
+    }
+    mapDropletStatus(doStatus) {
+        const statusMap = {
+            new: 'pending',
+            active: 'running',
+            off: 'stopped',
+            archive: 'terminated',
+            error: 'error'
+        };
+        return Object.entries(statusMap).find(([status]) => status === doStatus)?.[1] ?? 'pending';
+    }
+    mapVolumeToCloudVolume(volume) {
+        return {
+            id: volume.id,
+            name: volume.name,
+            size: volume.size_gigabytes,
+            region: volume.region.slug,
+            status: volume.droplet_ids.length > 0 ? 'in-use' : 'available',
+            attachedTo: volume.droplet_ids.length > 0 ? `do-${volume.droplet_ids[0]}` : undefined,
+            createdAt: new Date(volume.created_at),
+            tags: this.parseTags(volume.tags)
+        };
+    }
+    extractDropletId(instanceId) {
+        if (instanceId.startsWith('do-')) {
+            return parseInt(instanceId.substring(3), 10);
+        }
+        return parseInt(instanceId, 10);
+    }
+    formatTags(tags) {
+        return Object.entries(tags).map(([key, value]) => `${key}:${value}`);
+    }
+    parseTags(tags) {
+        const result = {};
+        for (const tag of tags) {
+            const [key, value] = tag.split(':');
+            if (key && value) {
+                result[key] = value;
+            }
+        }
+        return result;
+    }
+}
+//# sourceMappingURL=digitalocean.js.map