@vibesdotdev/integrations-digitalocean 0.0.0-stage → 1.0.0-rc.1

package/dist/config/digitalocean.config.descriptor.d.ts

@@ -0,0 +1,197 @@
+import { type RuntimeRef } from '@vibesdotdev/kernel';
+import { type DigitalOceanCredentialSettings } from '../schemas/control-plane.ts';
+import { type DoksServiceSettings } from '../schemas/service-settings.ts';
+export declare const digitalOceanServiceSettingsDescriptor: {
+    allowedAdapters: readonly ["storage.localdb", "storage.json"];
+    defaultAdapter: "storage.localdb";
+    scope: "auto";
+    customTables: false;
+    version: 1;
+    internal: false;
+    enabled: true;
+    kind: "config/manifest";
+    id: string;
+    name: string;
+    namespace: string;
+    description: string;
+    tier: string;
+    category: string;
+    schema: import("zod/v4").ZodObject<{
+        sourceBrokerOrigin: import("zod/v4").ZodOptional<import("zod/v4").ZodPipe<import("zod/v4").ZodURL, import("zod/v4").ZodTransform<string, string>>>;
+        packageRegistryOrigin: import("zod/v4").ZodOptional<import("zod/v4").ZodPipe<import("zod/v4").ZodURL, import("zod/v4").ZodTransform<string, string>>>;
+        packageScope: import("zod/v4").ZodOptional<import("zod/v4").ZodString>;
+    }, import("zod/v4/core").$strip>;
+    fields: {
+        sourceBrokerOrigin: {
+            ui: {
+                label: string;
+                component: string;
+            };
+        };
+        packageRegistryOrigin: {
+            ui: {
+                label: string;
+                component: string;
+            };
+        };
+        packageScope: {
+            ui: {
+                label: string;
+                component: string;
+            };
+        };
+    };
+};
+export declare const defaultDigitalOceanServiceSettings: {
+    sourceBrokerOrigin?: string | undefined;
+    packageRegistryOrigin?: string | undefined;
+    packageScope?: string | undefined;
+};
+export declare const digitalOceanCredentialSettingsDescriptor: {
+    allowedAdapters: readonly ["storage.localdb", "storage.json"];
+    defaultAdapter: "storage.localdb";
+    scope: "auto";
+    customTables: false;
+    version: 1;
+    internal: false;
+    enabled: true;
+    kind: "config/manifest";
+    id: string;
+    name: string;
+    namespace: string;
+    description: string;
+    tier: string;
+    category: string;
+    schema: import("zod/v4").ZodObject<{
+        modelAccessKeyCandidates: import("zod/v4").ZodDefault<import("zod/v4").ZodPipe<import("zod/v4").ZodPipe<import("zod/v4").ZodCustom<readonly {
+            source: "secret";
+            key: string;
+            store?: string | undefined;
+            operation?: object | undefined;
+        }[], readonly {
+            source: "secret";
+            key: string;
+            store?: string | undefined;
+            operation?: object | undefined;
+        }[]>, import("zod/v4").ZodArray<import("zod/v4").ZodDiscriminatedUnion<[import("zod/v4").ZodObject<{
+            source: import("zod/v4").ZodLiteral<"secret">;
+            key: import("zod/v4").ZodString;
+            store: import("zod/v4").ZodOptional<import("zod/v4").ZodString>;
+            operation: import("zod/v4").ZodOptional<import("zod/v4").ZodCustom<object, object>>;
+        }, import("zod/v4/core").$strict>], "source">>>, import("zod/v4").ZodTransform<readonly {
+            source: "secret";
+            key: string;
+            store?: string | undefined;
+            operation?: object | undefined;
+        }[], {
+            source: "secret";
+            key: string;
+            store?: string | undefined;
+            operation?: object | undefined;
+        }[]>>>;
+        spacesAccessKeyIdCandidates: import("zod/v4").ZodDefault<import("zod/v4").ZodPipe<import("zod/v4").ZodPipe<import("zod/v4").ZodCustom<readonly {
+            source: "secret";
+            key: string;
+            store?: string | undefined;
+            operation?: object | undefined;
+        }[], readonly {
+            source: "secret";
+            key: string;
+            store?: string | undefined;
+            operation?: object | undefined;
+        }[]>, import("zod/v4").ZodArray<import("zod/v4").ZodDiscriminatedUnion<[import("zod/v4").ZodObject<{
+            source: import("zod/v4").ZodLiteral<"secret">;
+            key: import("zod/v4").ZodString;
+            store: import("zod/v4").ZodOptional<import("zod/v4").ZodString>;
+            operation: import("zod/v4").ZodOptional<import("zod/v4").ZodCustom<object, object>>;
+        }, import("zod/v4/core").$strict>], "source">>>, import("zod/v4").ZodTransform<readonly {
+            source: "secret";
+            key: string;
+            store?: string | undefined;
+            operation?: object | undefined;
+        }[], {
+            source: "secret";
+            key: string;
+            store?: string | undefined;
+            operation?: object | undefined;
+        }[]>>>;
+        spacesSecretKeyCandidates: import("zod/v4").ZodDefault<import("zod/v4").ZodPipe<import("zod/v4").ZodPipe<import("zod/v4").ZodCustom<readonly {
+            source: "secret";
+            key: string;
+            store?: string | undefined;
+            operation?: object | undefined;
+        }[], readonly {
+            source: "secret";
+            key: string;
+            store?: string | undefined;
+            operation?: object | undefined;
+        }[]>, import("zod/v4").ZodArray<import("zod/v4").ZodDiscriminatedUnion<[import("zod/v4").ZodObject<{
+            source: import("zod/v4").ZodLiteral<"secret">;
+            key: import("zod/v4").ZodString;
+            store: import("zod/v4").ZodOptional<import("zod/v4").ZodString>;
+            operation: import("zod/v4").ZodOptional<import("zod/v4").ZodCustom<object, object>>;
+        }, import("zod/v4/core").$strict>], "source">>>, import("zod/v4").ZodTransform<readonly {
+            source: "secret";
+            key: string;
+            store?: string | undefined;
+            operation?: object | undefined;
+        }[], {
+            source: "secret";
+            key: string;
+            store?: string | undefined;
+            operation?: object | undefined;
+        }[]>>>;
+        apiTokenCandidates: import("zod/v4").ZodDefault<import("zod/v4").ZodPipe<import("zod/v4").ZodPipe<import("zod/v4").ZodCustom<readonly {
+            reference: {
+                source: "secret";
+                key: string;
+                store?: string | undefined;
+                operation?: object | undefined;
+            };
+            kind: "vibes-system" | "user-token" | "user-api-token" | "user-api-key" | "explicit";
+        }[], readonly {
+            reference: {
+                source: "secret";
+                key: string;
+                store?: string | undefined;
+                operation?: object | undefined;
+            };
+            kind: "vibes-system" | "user-token" | "user-api-token" | "user-api-key" | "explicit";
+        }[]>, import("zod/v4").ZodArray<import("zod/v4").ZodObject<{
+            reference: import("zod/v4").ZodDiscriminatedUnion<[import("zod/v4").ZodObject<{
+                source: import("zod/v4").ZodLiteral<"secret">;
+                key: import("zod/v4").ZodString;
+                store: import("zod/v4").ZodOptional<import("zod/v4").ZodString>;
+                operation: import("zod/v4").ZodOptional<import("zod/v4").ZodCustom<object, object>>;
+            }, import("zod/v4/core").$strict>], "source">;
+            kind: import("zod/v4").ZodEnum<{
+                "vibes-system": "vibes-system";
+                "user-token": "user-token";
+                "user-api-token": "user-api-token";
+                "user-api-key": "user-api-key";
+                explicit: "explicit";
+            }>;
+        }, import("zod/v4/core").$strict>>>, import("zod/v4").ZodTransform<readonly {
+            reference: {
+                source: "secret";
+                key: string;
+                store?: string | undefined;
+                operation?: object | undefined;
+            };
+            kind: "vibes-system" | "user-token" | "user-api-token" | "user-api-key" | "explicit";
+        }[], {
+            reference: {
+                source: "secret";
+                key: string;
+                store?: string | undefined;
+                operation?: object | undefined;
+            };
+            kind: "vibes-system" | "user-token" | "user-api-token" | "user-api-key" | "explicit";
+        }[]>>>;
+    }, import("zod/v4/core").$strict>;
+    fields: {};
+};
+export declare function loadDigitalOceanServiceSettings(runtime: RuntimeRef): Promise<DoksServiceSettings>;
+/** Settings default to the vendor's generic candidates; hosts can compose any ordered secret references. */
+export declare function loadDigitalOceanCredentialSettings(runtime: RuntimeRef): Promise<DigitalOceanCredentialSettings>;
+//# sourceMappingURL=digitalocean.config.descriptor.d.ts.map

package/dist/config/digitalocean.config.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"digitalocean.config.descriptor.d.ts","sourceRoot":"","sources":["../../src/config/digitalocean.config.descriptor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsB,KAAK,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAE1E,OAAO,EAEN,KAAK,8BAA8B,EACnC,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAEN,KAAK,mBAAmB,EACxB,MAAM,gCAAgC,CAAC;AAYxC,eAAO,MAAM,qCAAqC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAiBhD,CAAC;AAEH,eAAO,MAAM,kCAAkC;;;;CACQ,CAAC;AAExD,eAAO,MAAM,wCAAwC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAWnD,CAAC;AAEH,wBAAsB,+BAA+B,CACpD,OAAO,EAAE,UAAU,GACjB,OAAO,CAAC,mBAAmB,CAAC,CAQ9B;AAED,4GAA4G;AAC5G,wBAAsB,kCAAkC,CACvD,OAAO,EAAE,UAAU,GACjB,OAAO,CAAC,8BAA8B,CAAC,CAWzC"}

package/dist/config/digitalocean.config.descriptor.js

@@ -0,0 +1,59 @@
+import { createRuntimeAsset } from '@vibesdotdev/kernel';
+import { ConfigManifest } from '@vibesdotdev/config';
+import { DigitalOceanCredentialSettingsSchema } from "../schemas/control-plane.js";
+import { DoksServiceSettingsSchema } from "../schemas/service-settings.js";
+const configManifestDefaults = {
+    allowedAdapters: ['storage.localdb', 'storage.json'],
+    defaultAdapter: 'storage.localdb',
+    scope: 'auto',
+    customTables: false,
+    version: 1,
+    internal: false,
+    enabled: true
+};
+export const digitalOceanServiceSettingsDescriptor = createRuntimeAsset({
+    kind: 'config/manifest',
+    id: 'integrations.digitalocean.services',
+    name: 'DigitalOcean service authority',
+    // The namespace is the manifest's storage address; one per manifest id, so
+    // sibling DigitalOcean manifests never overwrite each other's stored layer.
+    namespace: 'integrations.digitalocean.services',
+    description: 'Source credential broker and package registry used by declared DOKS workers.',
+    tier: 'user',
+    category: 'integrations',
+    schema: DoksServiceSettingsSchema,
+    fields: {
+        sourceBrokerOrigin: { ui: { label: 'Source credential broker origin', component: 'text' } },
+        packageRegistryOrigin: { ui: { label: 'Package registry origin', component: 'text' } },
+        packageScope: { ui: { label: 'Package registry scope', component: 'text' } }
+    },
+    ...configManifestDefaults
+});
+export const defaultDigitalOceanServiceSettings = digitalOceanServiceSettingsDescriptor.schema.parse({});
+export const digitalOceanCredentialSettingsDescriptor = createRuntimeAsset({
+    kind: 'config/manifest',
+    id: 'integrations.digitalocean.credentials',
+    name: 'DigitalOcean credential references',
+    namespace: 'integrations.digitalocean.credentials',
+    description: 'Ordered complete secret references for DigitalOcean API, model, and Spaces credential use.',
+    tier: 'user',
+    category: 'integrations',
+    schema: DigitalOceanCredentialSettingsSchema,
+    fields: {},
+    ...configManifestDefaults
+});
+export async function loadDigitalOceanServiceSettings(runtime) {
+    if (!runtime.hasKind('config/manifest')) {
+        return defaultDigitalOceanServiceSettings;
+    }
+    return ConfigManifest.forRuntime(runtime, digitalOceanServiceSettingsDescriptor.id).load();
+}
+/** Settings default to the vendor's generic candidates; hosts can compose any ordered secret references. */
+export async function loadDigitalOceanCredentialSettings(runtime) {
+    if (!runtime.hasKind('config/manifest') ||
+        !runtime.query('config/manifest').withId(digitalOceanCredentialSettingsDescriptor.id).descriptors().length) {
+        return DigitalOceanCredentialSettingsSchema.parse({});
+    }
+    return ConfigManifest.forRuntime(runtime, digitalOceanCredentialSettingsDescriptor.id).load();
+}
+//# sourceMappingURL=digitalocean.config.descriptor.js.map

package/dist/config/digitalocean.config.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"digitalocean.config.descriptor.js","sourceRoot":"","sources":["../../src/config/digitalocean.config.descriptor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAmB,MAAM,qBAAqB,CAAC;AAC1E,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EACN,oCAAoC,EAEpC,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACN,yBAAyB,EAEzB,MAAM,gCAAgC,CAAC;AAExC,MAAM,sBAAsB,GAAG;IAC9B,eAAe,EAAE,CAAC,iBAAiB,EAAE,cAAc,CAAC;IACpD,cAAc,EAAE,iBAAiB;IACjC,KAAK,EAAE,MAAM;IACb,YAAY,EAAE,KAAK;IACnB,OAAO,EAAE,CAAC;IACV,QAAQ,EAAE,KAAK;IACf,OAAO,EAAE,IAAI;CACJ,CAAC;AAEX,MAAM,CAAC,MAAM,qCAAqC,GAAG,kBAAkB,CAAC;IACvE,IAAI,EAAE,iBAAiB;IACvB,EAAE,EAAE,oCAAoC;IACxC,IAAI,EAAE,gCAAgC;IACtC,2EAA2E;IAC3E,4EAA4E;IAC5E,SAAS,EAAE,oCAAoC;IAC/C,WAAW,EAAE,8EAA8E;IAC3F,IAAI,EAAE,MAAM;IACZ,QAAQ,EAAE,cAAc;IACxB,MAAM,EAAE,yBAAyB;IACjC,MAAM,EAAE;QACP,kBAAkB,EAAE,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,iCAAiC,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE;QAC3F,qBAAqB,EAAE,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,yBAAyB,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE;QACtF,YAAY,EAAE,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,wBAAwB,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE;KAC5E;IACD,GAAG,sBAAsB;CACzB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,kCAAkC,GAC9C,qCAAqC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AAExD,MAAM,CAAC,MAAM,wCAAwC,GAAG,kBAAkB,CAAC;IAC1E,IAAI,EAAE,iBAAiB;IACvB,EAAE,EAAE,uCAAuC;IAC3C,IAAI,EAAE,oCAAoC;IAC1C,SAAS,EAAE,uCAAuC;IAClD,WAAW,EAAE,4FAA4F;IACzG,IAAI,EAAE,MAAM;IACZ,QAAQ,EAAE,cAAc;IACxB,MAAM,EAAE,oCAAoC;IAC5C,MAAM,EAAE,EAAE;IACV,GAAG,sBAAsB;CACzB,CAAC,CAAC;AAEH,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACpD,OAAmB;IAEnB,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACzC,OAAO,kCAAkC,CAAC;IAC3C,CAAC;IACD,OAAO,cAAc,CAAC,UAAU,CAC/B,OAAO,EACP,qCAAqC,CAAC,EAAE,CACxC,CAAC,IAAI,EAAE,CAAC;AACV,CAAC;AAED,4GAA4G;AAC5G,MAAM,CAAC,KAAK,UAAU,kCAAkC,CACvD,OAAmB;IAEnB,IACC,CAAC,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC;QACnC,CAAC,OAAO,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,MAAM,CAAC,wCAAwC,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,MAAM,EACzG,CAAC;QACF,OAAO,oCAAoC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,cAAc,CAAC,UAAU,CAC/B,OAAO,EACP,wCAAwC,CAAC,EAAE,CAC3C,CAAC,IAAI,EAAE,CAAC;AACV,CAAC"}

package/dist/credentials/index.d.ts

@@ -0,0 +1,38 @@
+/**
+ * DigitalOcean credential references and explicit caller-supplied credentials.
+ *
+ * API tokens use the registered digitalocean-client-factory and the Secrets
+ * authenticated-request operation; model calls use the AI connection's secret
+ * reference. This module only constructs references. Spaces candidates are
+ * configurable, but no Spaces request-signing operation consumes them yet;
+ * hosts declare alternative names in composition rather than relying on a
+ * package compatibility list.
+ */
+import type { CredentialReference } from '@vibesdotdev/kernel/credentials';
+import { type DigitalOceanApiToken } from '../schemas/control-plane.ts';
+export type { DigitalOceanTokenKind, DigitalOceanApiToken, DigitalOceanTokenCredentialCandidate, DigitalOceanCredentialSettings, DigitalOceanCredentialUseSettings, DigitalOceanCredentialUseOutcome, DigitalOceanSpacesCredentialUseOutcome } from '../schemas/control-plane.ts';
+export { DigitalOceanCredentialSettingsSchema, DigitalOceanCredentialUseSettingsSchema, DigitalOceanTokenCredentialCandidateSchema, DigitalOceanTokenCredentialCandidatesSchema, DigitalOceanCredentialUseOutcomeSchema, DigitalOceanSpacesCredentialUseOutcomeSchema } from '../schemas/control-plane.ts';
+/** Generic references; application composition may replace or reorder them. */
+export declare const DIGITALOCEAN_TOKEN_CREDENTIAL_CANDIDATES: readonly {
+    reference: {
+        source: "secret";
+        key: string;
+        store?: string | undefined;
+        operation?: object | undefined;
+    };
+    kind: "vibes-system" | "user-token" | "user-api-token" | "user-api-key" | "explicit";
+}[];
+export declare const DIGITALOCEAN_TOKEN_CREDENTIAL_KEYS: {
+    key: string;
+    kind: "vibes-system" | "user-token" | "user-api-token" | "user-api-key" | "explicit";
+}[];
+/** Credential references for declaring a DigitalOcean credential in a descriptor. */
+export declare const digitalOceanCredentialReferences: {
+    readonly apiToken: (key?: string, store?: string) => CredentialReference;
+    readonly spacesAccessKeyId: (key?: string, store?: string) => CredentialReference;
+    readonly spacesSecretKey: (key?: string, store?: string) => CredentialReference;
+    readonly modelAccessKey: (key?: string, store?: string) => CredentialReference;
+};
+/** Validate an API token explicitly supplied by the caller. */
+export declare function requireApiToken(token: DigitalOceanApiToken | undefined): DigitalOceanApiToken;
+//# sourceMappingURL=index.d.ts.map

package/dist/credentials/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/credentials/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAE3E,OAAO,EAGN,KAAK,oBAAoB,EACzB,MAAM,6BAA6B,CAAC;AACrC,YAAY,EACX,qBAAqB,EACrB,oBAAoB,EACpB,oCAAoC,EACpC,8BAA8B,EAC9B,iCAAiC,EACjC,gCAAgC,EAChC,sCAAsC,EACtC,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACN,oCAAoC,EACpC,uCAAuC,EACvC,0CAA0C,EAC1C,2CAA2C,EAC3C,sCAAsC,EACtC,4CAA4C,EAC5C,MAAM,6BAA6B,CAAC;AAErC,+EAA+E;AAC/E,eAAO,MAAM,wCAAwC;;;;;;;;GAA+C,CAAC;AACrG,eAAO,MAAM,kCAAkC;;;GAE9C,CAAC;AAQF,qFAAqF;AACrF,eAAO,MAAM,gCAAgC;8CACK,MAAM,KAAG,mBAAmB;uDAGR,MAAM,KAAG,mBAAmB;qDAGjC,MAAM,KAAG,mBAAmB;oDAG9B,MAAM,KAAG,mBAAmB;CAGjF,CAAC;AAEX,+DAA+D;AAC/D,wBAAgB,eAAe,CAAC,KAAK,EAAE,oBAAoB,GAAG,SAAS,GAAG,oBAAoB,CAgB7F"}

package/dist/credentials/index.js

@@ -0,0 +1,56 @@
+/**
+ * DigitalOcean credential references and explicit caller-supplied credentials.
+ *
+ * API tokens use the registered digitalocean-client-factory and the Secrets
+ * authenticated-request operation; model calls use the AI connection's secret
+ * reference. This module only constructs references. Spaces candidates are
+ * configurable, but no Spaces request-signing operation consumes them yet;
+ * hosts declare alternative names in composition rather than relying on a
+ * package compatibility list.
+ */
+import { CapabilityError } from '@vibesdotdev/kernel';
+import { DigitalOceanTokenSchema, DigitalOceanDefaultTokenCredentialCandidates } from "../schemas/control-plane.js";
+export { DigitalOceanCredentialSettingsSchema, DigitalOceanCredentialUseSettingsSchema, DigitalOceanTokenCredentialCandidateSchema, DigitalOceanTokenCredentialCandidatesSchema, DigitalOceanCredentialUseOutcomeSchema, DigitalOceanSpacesCredentialUseOutcomeSchema } from "../schemas/control-plane.js";
+/** Generic references; application composition may replace or reorder them. */
+export const DIGITALOCEAN_TOKEN_CREDENTIAL_CANDIDATES = DigitalOceanDefaultTokenCredentialCandidates;
+export const DIGITALOCEAN_TOKEN_CREDENTIAL_KEYS = DIGITALOCEAN_TOKEN_CREDENTIAL_CANDIDATES.map(({ reference, kind }) => ({ key: reference.key, kind }));
+function secretReference(key, store) {
+    const reference = { source: 'secret', key };
+    if (store)
+        return { ...reference, store };
+    return reference;
+}
+/** Credential references for declaring a DigitalOcean credential in a descriptor. */
+export const digitalOceanCredentialReferences = {
+    apiToken(key = 'DIGITALOCEAN_API_TOKEN', store) {
+        return secretReference(key, store);
+    },
+    spacesAccessKeyId(key = 'DIGITALOCEAN_SPACES_ACCESS_KEY_ID', store) {
+        return secretReference(key, store);
+    },
+    spacesSecretKey(key = 'DIGITALOCEAN_SPACES_SECRET_KEY', store) {
+        return secretReference(key, store);
+    },
+    modelAccessKey(key = 'DIGITALOCEAN_MODEL_ACCESS_KEY', store) {
+        return secretReference(key, store);
+    }
+};
+/** Validate an API token explicitly supplied by the caller. */
+export function requireApiToken(token) {
+    if (!token) {
+        throw new CapabilityError('No DigitalOcean API token was supplied.', 'AUTH_REQUIRED', {
+            reason: 'digitalocean-credential-missing',
+            recoveryHint: 'Compose DigitalOcean credential references or supply caller authority.',
+            details: { candidates: DIGITALOCEAN_TOKEN_CREDENTIAL_KEYS.map((candidate) => candidate.key) }
+        });
+    }
+    const parsed = DigitalOceanTokenSchema.safeParse(token);
+    if (!parsed.success) {
+        throw new CapabilityError('DigitalOcean credential is invalid.', 'AUTH_REQUIRED', {
+            reason: 'digitalocean-credential-invalid',
+            cause: parsed.error
+        });
+    }
+    return parsed.data;
+}
+//# sourceMappingURL=index.js.map

package/dist/credentials/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/credentials/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAGtD,OAAO,EACN,uBAAuB,EACvB,4CAA4C,EAE5C,MAAM,6BAA6B,CAAC;AAUrC,OAAO,EACN,oCAAoC,EACpC,uCAAuC,EACvC,0CAA0C,EAC1C,2CAA2C,EAC3C,sCAAsC,EACtC,4CAA4C,EAC5C,MAAM,6BAA6B,CAAC;AAErC,+EAA+E;AAC/E,MAAM,CAAC,MAAM,wCAAwC,GAAG,4CAA4C,CAAC;AACrG,MAAM,CAAC,MAAM,kCAAkC,GAAG,wCAAwC,CAAC,GAAG,CAC7F,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CACvD,CAAC;AAEF,SAAS,eAAe,CAAC,GAAW,EAAE,KAAc;IACnD,MAAM,SAAS,GAAwB,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC;IACjE,IAAI,KAAK;QAAE,OAAO,EAAE,GAAG,SAAS,EAAE,KAAK,EAAE,CAAC;IAC1C,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,qFAAqF;AACrF,MAAM,CAAC,MAAM,gCAAgC,GAAG;IAC/C,QAAQ,CAAC,GAAG,GAAG,wBAAwB,EAAE,KAAc;QACtD,OAAO,eAAe,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACpC,CAAC;IACD,iBAAiB,CAAC,GAAG,GAAG,mCAAmC,EAAE,KAAc;QAC1E,OAAO,eAAe,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACpC,CAAC;IACD,eAAe,CAAC,GAAG,GAAG,gCAAgC,EAAE,KAAc;QACrE,OAAO,eAAe,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACpC,CAAC;IACD,cAAc,CAAC,GAAG,GAAG,+BAA+B,EAAE,KAAc;QACnE,OAAO,eAAe,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACpC,CAAC;CACQ,CAAC;AAEX,+DAA+D;AAC/D,MAAM,UAAU,eAAe,CAAC,KAAuC;IACtE,IAAI,CAAC,KAAK,EAAE,CAAC;QACZ,MAAM,IAAI,eAAe,CAAC,yCAAyC,EAAE,eAAe,EAAE;YACrF,MAAM,EAAE,iCAAiC;YACzC,YAAY,EAAE,wEAAwE;YACtF,OAAO,EAAE,EAAE,UAAU,EAAE,kCAAkC,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE;SAC7F,CAAC,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,uBAAuB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACxD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACrB,MAAM,IAAI,eAAe,CAAC,qCAAqC,EAAE,eAAe,EAAE;YACjF,MAAM,EAAE,iCAAiC;YACzC,KAAK,EAAE,MAAM,CAAC,KAAK;SACnB,CAAC,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACpB,CAAC"}

package/dist/databases/index.d.ts

@@ -0,0 +1,82 @@
+import { TopicsResponseSchema, IndexesResponseSchema } from '../schemas/http.ts';
+/**
+ * DigitalOcean Managed Databases: Postgres, Valkey/Redis, Kafka, OpenSearch,
+ * MySQL/MongoDB (passthrough).
+ *
+ * The v2 API uses a single `/databases` family of endpoints with an `engine`
+ * field that determines which subresources (connection pools, topics,
+ * indexes) are available. We expose typed methods only for the operations
+ * the roadmap explicitly calls out; everything else can use the underlying
+ * `client` for arbitrary control-plane requests.
+ */
+import type { DigitalOceanControlPlaneClient } from '../client/control-plane.ts';
+export type DoDatabaseEngine = 'pg' | 'mysql' | 'redis' | 'valkey' | 'kafka' | 'mongodb' | 'opensearch';
+export interface DoDatabaseConnection {
+    uri: string;
+    database?: string;
+    host: string;
+    port: number;
+    user: string;
+    password?: string;
+    ssl: boolean;
+}
+export interface DoDatabaseMaintenance {
+    day: string;
+    hour: string;
+    pending?: boolean;
+    description?: string[];
+}
+export type DoDatabaseCluster = import('zod/v4').infer<typeof import('../schemas/http.ts').DoDatabaseClusterSchema>;
+export interface CreateDatabaseClusterOptions {
+    name: string;
+    engine: DoDatabaseEngine;
+    version?: string;
+    size: string;
+    region: string;
+    num_nodes: number;
+    tags?: string[];
+    private_network_uuid?: string;
+    backup_restore?: {
+        database_name: string;
+        backup_created_at?: string;
+    };
+    storage_size_mib?: number;
+}
+export interface DoConnectionPool {
+    name: string;
+    mode: 'transaction' | 'session' | 'statement';
+    size: number;
+    db: string;
+    user: string;
+    connection?: DoDatabaseConnection;
+    private_connection?: DoDatabaseConnection;
+}
+export declare class DigitalOceanDatabasesClient {
+    private readonly client;
+    constructor(client: DigitalOceanControlPlaneClient);
+    list(filters?: {
+        tag?: string;
+    }): Promise<DoDatabaseCluster[]>;
+    get(databaseId: string): Promise<DoDatabaseCluster>;
+    getOrNull(databaseId: string): Promise<DoDatabaseCluster | null>;
+    create(options: CreateDatabaseClusterOptions): Promise<DoDatabaseCluster>;
+    delete(databaseId: string): Promise<void>;
+    resize(databaseId: string, options: {
+        size?: string;
+        num_nodes?: number;
+        storage_size_mib?: number;
+    }): Promise<void>;
+    listConnectionPools(databaseId: string): Promise<DoConnectionPool[]>;
+    createConnectionPool(databaseId: string, pool: DoConnectionPool): Promise<DoConnectionPool>;
+    updateTrustedSources(databaseId: string, sources: Array<{
+        type: string;
+        value: string;
+    }>): Promise<void>;
+    updateStorageAutoscaling(databaseId: string, policy: {
+        enabled: boolean;
+        increase_amount_percent?: number;
+    }): Promise<void>;
+    listKafkaTopics(databaseId: string): Promise<import('zod/v4').infer<typeof TopicsResponseSchema>['topics']>;
+    listOpenSearchIndexes(databaseId: string): Promise<import('zod/v4').infer<typeof IndexesResponseSchema>['indexes']>;
+}
+//# sourceMappingURL=index.d.ts.map

package/dist/databases/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/databases/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAMN,oBAAoB,EACpB,qBAAqB,EACrB,MAAM,oBAAoB,CAAC;AAC5B;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,4BAA4B,CAAC;AAEjF,MAAM,MAAM,gBAAgB,GAC3B,IAAI,GAAG,OAAO,GAAG,OAAO,GAAG,QAAQ,GAAG,OAAO,GAAG,SAAS,GAAG,YAAY,CAAC;AAE1E,MAAM,WAAW,oBAAoB;IACpC,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,OAAO,CAAC;CACb;AAED,MAAM,WAAW,qBAAqB;IACrC,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,MAAM,MAAM,iBAAiB,GAAG,OAAO,QAAQ,EAAE,KAAK,CACrD,cAAc,oBAAoB,EAAE,uBAAuB,CAC3D,CAAC;AAEF,MAAM,WAAW,4BAA4B;IAC5C,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,gBAAgB,CAAC;IACzB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,cAAc,CAAC,EAAE;QAAE,aAAa,EAAE,MAAM,CAAC;QAAC,iBAAiB,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACvE,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,gBAAgB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,aAAa,GAAG,SAAS,GAAG,WAAW,CAAC;IAC9C,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,oBAAoB,CAAC;IAClC,kBAAkB,CAAC,EAAE,oBAAoB,CAAC;CAC1C;AAED,qBAAa,2BAA2B;IAC3B,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,8BAA8B;IAE7D,IAAI,CAAC,OAAO,GAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC;IAUlE,GAAG,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;IASnD,SAAS,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAShE,MAAM,CAAC,OAAO,EAAE,4BAA4B,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAUzE,MAAM,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIzC,MAAM,CACX,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;KAAE,GACvE,OAAO,CAAC,IAAI,CAAC;IAIV,mBAAmB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;IASpE,oBAAoB,CACzB,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,gBAAgB,GACpB,OAAO,CAAC,gBAAgB,CAAC;IAUtB,oBAAoB,CACzB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,GAC7C,OAAO,CAAC,IAAI,CAAC;IAIV,wBAAwB,CAC7B,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,uBAAuB,CAAC,EAAE,MAAM,CAAA;KAAE,GAC5D,OAAO,CAAC,IAAI,CAAC;IAIV,eAAe,CACpB,UAAU,EAAE,MAAM,GAChB,OAAO,CAAC,OAAO,QAAQ,EAAE,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC,QAAQ,CAAC,CAAC;IAKnE,qBAAqB,CAC1B,UAAU,EAAE,MAAM,GAChB,OAAO,CAAC,OAAO,QAAQ,EAAE,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC,SAAS,CAAC,CAAC;CAQ3E"}

package/dist/databases/index.js

@@ -0,0 +1,57 @@
+import { DatabaseListResponseSchema, DoDatabaseClusterSchema, DatabaseResponseSchema, ConnectionPoolsResponseSchema, ConnectionPoolResponseSchema, TopicsResponseSchema, IndexesResponseSchema } from "../schemas/http.js";
+export class DigitalOceanDatabasesClient {
+    client;
+    constructor(client) {
+        this.client = client;
+    }
+    async list(filters = {}) {
+        return this.client.collect({
+            path: '/databases',
+            request: { query: { tag_name: filters.tag } },
+            extract: (page) => page.databases ?? [],
+            schema: DatabaseListResponseSchema,
+            itemSchema: DoDatabaseClusterSchema
+        });
+    }
+    async get(databaseId) {
+        const res = await this.client.get(`/databases/${databaseId}`, {}, DatabaseResponseSchema);
+        return res.database;
+    }
+    async getOrNull(databaseId) {
+        const res = await this.client.getOrNull(`/databases/${databaseId}`, {}, DatabaseResponseSchema);
+        return res?.database ?? null;
+    }
+    async create(options) {
+        const res = await this.client.post('/databases', options, {}, DatabaseResponseSchema);
+        return res.database;
+    }
+    async delete(databaseId) {
+        await this.client.delete(`/databases/${databaseId}`);
+    }
+    async resize(databaseId, options) {
+        await this.client.put(`/databases/${databaseId}/resize`, options);
+    }
+    async listConnectionPools(databaseId) {
+        const res = await this.client.get(`/databases/${databaseId}/pools`, {}, ConnectionPoolsResponseSchema);
+        return res.pools;
+    }
+    async createConnectionPool(databaseId, pool) {
+        const res = await this.client.post(`/databases/${databaseId}/pools`, pool, {}, ConnectionPoolResponseSchema);
+        return res.pool;
+    }
+    async updateTrustedSources(databaseId, sources) {
+        await this.client.put(`/databases/${databaseId}/firewall`, { rules: sources });
+    }
+    async updateStorageAutoscaling(databaseId, policy) {
+        await this.client.put(`/databases/${databaseId}/storage_autoscaling`, policy);
+    }
+    async listKafkaTopics(databaseId) {
+        const res = await this.client.get(`/databases/${databaseId}/topics`, {}, TopicsResponseSchema);
+        return res.topics;
+    }
+    async listOpenSearchIndexes(databaseId) {
+        const res = await this.client.get(`/databases/${databaseId}/indexes`, {}, IndexesResponseSchema);
+        return res.indexes;
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/databases/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/databases/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,0BAA0B,EAC1B,uBAAuB,EACvB,sBAAsB,EACtB,6BAA6B,EAC7B,4BAA4B,EAC5B,oBAAoB,EACpB,qBAAqB,EACrB,MAAM,oBAAoB,CAAC;AA6D5B,MAAM,OAAO,2BAA2B;IACV;IAA7B,YAA6B,MAAsC;QAAtC,WAAM,GAAN,MAAM,CAAgC;IAAG,CAAC;IAEvE,KAAK,CAAC,IAAI,CAAC,UAA4B,EAAE;QACxC,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;YAC1B,IAAI,EAAE,YAAY;YAClB,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE;YAC7C,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE;YACvC,MAAM,EAAE,0BAA0B;YAClC,UAAU,EAAE,uBAAuB;SACnC,CAAC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,UAAkB;QAC3B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAChC,cAAc,UAAU,EAAE,EAC1B,EAAE,EACF,sBAAsB,CACtB,CAAC;QACF,OAAO,GAAG,CAAC,QAAQ,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,UAAkB;QACjC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CACtC,cAAc,UAAU,EAAE,EAC1B,EAAE,EACF,sBAAsB,CACtB,CAAC;QACF,OAAO,GAAG,EAAE,QAAQ,IAAI,IAAI,CAAC;IAC9B,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAAqC;QACjD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CACjC,YAAY,EACZ,OAAO,EACP,EAAE,EACF,sBAAsB,CACtB,CAAC;QACF,OAAO,GAAG,CAAC,QAAQ,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,UAAkB;QAC9B,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,UAAU,EAAE,CAAC,CAAC;IACtD,CAAC;IAED,KAAK,CAAC,MAAM,CACX,UAAkB,EAClB,OAAyE;QAEzE,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,UAAU,SAAS,EAAE,OAAO,CAAC,CAAC;IACnE,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,UAAkB;QAC3C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAChC,cAAc,UAAU,QAAQ,EAChC,EAAE,EACF,6BAA6B,CAC7B,CAAC;QACF,OAAO,GAAG,CAAC,KAAK,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,oBAAoB,CACzB,UAAkB,EAClB,IAAsB;QAEtB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CACjC,cAAc,UAAU,QAAQ,EAChC,IAAI,EACJ,EAAE,EACF,4BAA4B,CAC5B,CAAC;QACF,OAAO,GAAG,CAAC,IAAI,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,oBAAoB,CACzB,UAAkB,EAClB,OAA+C;QAE/C,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,UAAU,WAAW,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IAChF,CAAC;IAED,KAAK,CAAC,wBAAwB,CAC7B,UAAkB,EAClB,MAA8D;QAE9D,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,UAAU,sBAAsB,EAAE,MAAM,CAAC,CAAC;IAC/E,CAAC;IAED,KAAK,CAAC,eAAe,CACpB,UAAkB;QAElB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,UAAU,SAAS,EAAE,EAAE,EAAE,oBAAoB,CAAC,CAAC;QAC/F,OAAO,GAAG,CAAC,MAAM,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,qBAAqB,CAC1B,UAAkB;QAElB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAChC,cAAc,UAAU,UAAU,EAClC,EAAE,EACF,qBAAqB,CACrB,CAAC;QACF,OAAO,GAAG,CAAC,OAAO,CAAC;IACpB,CAAC;CACD"}

package/dist/digitalocean-friction.policy.d.ts

@@ -0,0 +1,29 @@
+export declare const digitalOceanFrictionPolicy: {
+    readonly id: "digitalocean.friction";
+    readonly kind: "friction/policy";
+    readonly name: "DigitalOcean bright lines";
+    readonly description: "DigitalOcean mutations run through the integration clients, never a direct doctl invocation.";
+    readonly paths: [];
+    readonly commands: [{
+        readonly pattern: "doctl";
+        readonly kind: "exact";
+        readonly reason: "DigitalOcean mutation";
+    }];
+    readonly args: [];
+    readonly argExemptions: [];
+};
+export declare const digitalOceanKubernetesFrictionPolicy: {
+    readonly id: "digitalocean.kubernetes.friction";
+    readonly kind: "friction/policy";
+    readonly name: "Kubernetes bright lines";
+    readonly description: "Kubernetes mutations run through the managed-Kubernetes client, never a direct kubectl invocation.";
+    readonly paths: [];
+    readonly commands: [{
+        readonly pattern: "kubectl";
+        readonly kind: "exact";
+        readonly reason: "kubernetes mutation";
+    }];
+    readonly args: [];
+    readonly argExemptions: [];
+};
+//# sourceMappingURL=digitalocean-friction.policy.d.ts.map

package/dist/digitalocean-friction.policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"digitalocean-friction.policy.d.ts","sourceRoot":"","sources":["../src/digitalocean-friction.policy.ts"],"names":[],"mappings":"AAWA,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;CASM,CAAC;AAE9C,eAAO,MAAM,oCAAoC;;;;;;;;;;;;;CASJ,CAAC"}

package/dist/digitalocean-friction.policy.js

@@ -0,0 +1,21 @@
+export const digitalOceanFrictionPolicy = {
+    id: 'digitalocean.friction',
+    kind: 'friction/policy',
+    name: 'DigitalOcean bright lines',
+    description: 'DigitalOcean mutations run through the integration clients, never a direct doctl invocation.',
+    paths: [],
+    commands: [{ pattern: 'doctl', kind: 'exact', reason: 'DigitalOcean mutation' }],
+    args: [],
+    argExemptions: []
+};
+export const digitalOceanKubernetesFrictionPolicy = {
+    id: 'digitalocean.kubernetes.friction',
+    kind: 'friction/policy',
+    name: 'Kubernetes bright lines',
+    description: 'Kubernetes mutations run through the managed-Kubernetes client, never a direct kubectl invocation.',
+    paths: [],
+    commands: [{ pattern: 'kubectl', kind: 'exact', reason: 'kubernetes mutation' }],
+    args: [],
+    argExemptions: []
+};
+//# sourceMappingURL=digitalocean-friction.policy.js.map

package/dist/digitalocean-friction.policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"digitalocean-friction.policy.js","sourceRoot":"","sources":["../src/digitalocean-friction.policy.ts"],"names":[],"mappings":"AAWA,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACzC,EAAE,EAAE,uBAAuB;IAC3B,IAAI,EAAE,iBAAiB;IACvB,IAAI,EAAE,2BAA2B;IACjC,WAAW,EAAE,8FAA8F;IAC3G,KAAK,EAAE,EAAE;IACT,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;IAChF,IAAI,EAAE,EAAE;IACR,aAAa,EAAE,EAAE;CAC2B,CAAC;AAE9C,MAAM,CAAC,MAAM,oCAAoC,GAAG;IACnD,EAAE,EAAE,kCAAkC;IACtC,IAAI,EAAE,iBAAiB;IACvB,IAAI,EAAE,yBAAyB;IAC/B,WAAW,EAAE,oGAAoG;IACjH,KAAK,EAAE,EAAE;IACT,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;IAChF,IAAI,EAAE,EAAE;IACR,aAAa,EAAE,EAAE;CAC2B,CAAC"}

package/dist/digitalocean.plugin.d.ts

@@ -0,0 +1,3 @@
+export declare const digitalOceanConnectorPlugin: import("@vibesdotdev/kernel").RuntimePlugin;
+export default digitalOceanConnectorPlugin;
+//# sourceMappingURL=digitalocean.plugin.d.ts.map

package/dist/digitalocean.plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"digitalocean.plugin.d.ts","sourceRoot":"","sources":["../src/digitalocean.plugin.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,2BAA2B,6CAyBtC,CAAC;AAEH,eAAe,2BAA2B,CAAC"}

package/dist/digitalocean.plugin.js

@@ -0,0 +1,27 @@
+import { createRuntimePlugin, loader } from '@vibesdotdev/kernel';
+import { digitalOceanFrictionPolicy, digitalOceanKubernetesFrictionPolicy } from "./digitalocean-friction.policy.js";
+import { DIGITALOCEAN_APP_CREDENTIALS_CLIENT_ID } from "./schemas/app-deployment.js";
+export const digitalOceanConnectorPlugin = createRuntimePlugin({
+    id: 'integrations-digitalocean',
+    name: 'Connector DigitalOcean',
+    description: 'DigitalOcean control-plane and deploy client constructors.',
+    dependencies: ['integrations/base'],
+    descriptors: [
+        digitalOceanFrictionPolicy, digitalOceanKubernetesFrictionPolicy,
+        {
+            id: 'digitalocean-client-factory', kind: 'runtime/client',
+            description: 'Runtime-owned DigitalOcean client constructors.'
+        },
+        {
+            id: DIGITALOCEAN_APP_CREDENTIALS_CLIENT_ID,
+            kind: 'runtime/client',
+            description: 'Resolves DigitalOcean App credentials through the canonical runtime owners.'
+        }
+    ],
+    loaders: [
+        loader('digitalocean-client-factory', { kind: 'runtime/client' }, async () => ({ impl: (await import("./client/factory.js")).DigitalOceanClientFactory })),
+        loader(DIGITALOCEAN_APP_CREDENTIALS_CLIENT_ID, { kind: 'runtime/client' }, async () => ({ impl: (await import("./secrets/app-platform/app-credentials.impl.js")).DigitalOceanAppCredentialsClient }))
+    ]
+});
+export default digitalOceanConnectorPlugin;
+//# sourceMappingURL=digitalocean.plugin.js.map

package/dist/digitalocean.plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"digitalocean.plugin.js","sourceRoot":"","sources":["../src/digitalocean.plugin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAAE,0BAA0B,EAAE,oCAAoC,EAAE,MAAM,mCAAmC,CAAC;AACrH,OAAO,EAAE,sCAAsC,EAAE,MAAM,6BAA6B,CAAC;AAErF,MAAM,CAAC,MAAM,2BAA2B,GAAG,mBAAmB,CAAC;IAC9D,EAAE,EAAE,2BAA2B;IAC/B,IAAI,EAAE,wBAAwB;IAC9B,WAAW,EAAE,4DAA4D;IACzE,YAAY,EAAE,CAAC,mBAAmB,CAAC;IACnC,WAAW,EAAE;QACZ,0BAA0B,EAAE,oCAAoC;QAChE;YACC,EAAE,EAAE,6BAA6B,EAAE,IAAI,EAAE,gBAAgB;YACzD,WAAW,EAAE,iDAAiD;SAC9D;QACD;YACC,EAAE,EAAE,sCAAsC;YAC1C,IAAI,EAAE,gBAAgB;YACtB,WAAW,EAAE,6EAA6E;SAC1F;KACD;IACD,OAAO,EAAE;QACR,MAAM,CAAC,6BAA6B,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAC/D,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC,CAAC,yBAAyB,EAAE,CAAC,CACvF;QACD,MAAM,CAAC,sCAAsC,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,EACxE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,MAAM,MAAM,CAAC,gDAAgD,CAAC,CAAC,CAAC,gCAAgC,EAAE,CAAC,CACzH;KACD;CACD,CAAC,CAAC;AAEH,eAAe,2BAA2B,CAAC"}