@vibesdotdev/integrations-digitalocean 0.0.0-stage → 1.0.0-rc.2

package/dist/infra/functions.impl.d.ts

@@ -0,0 +1,123 @@
+/**
+ * Implementation: infra/worker -> digitalocean-functions
+ *
+ * Provider that reconciles DigitalOcean Functions for a worker descriptor.
+ * Two delivery modes are supported (selected via the descriptor's
+ * `config.mode`):
+ *
+ *   - `app-platform`: attach the function as a `functions[]` component on
+ *     an App Platform App. This is the recommended path because it shares
+ *     the App's region, env, secrets, alerts, log destinations, and
+ *     deploy lifecycle with the rest of the application. The reconciler
+ *     calls into `@vibesdotdev/integrations-digitalocean/apps` to read the
+ *     existing App spec and produce an updated spec containing the
+ *     function component. Applying the spec is delegated to the App
+ *     Platform deploy client (the same one that handles services/workers/
+ *     jobs), so this impl never mutates the App directly — it returns a
+ *     plan + an `apply()` that the runtime can drive.
+ *
+ *   - `namespace`: a standalone Functions namespace package. The DO
+ *     Functions namespace API surface lives outside the App Platform
+ *     control plane; we model the descriptor here but the reconciler
+ *     leaves namespace mutation as a TODO (returns `unsupported`) until
+ *     the connector-side namespace client lands. This keeps the runtime
+ *     contract stable — descriptors are valid today, with a clear error
+ *     surface if you try to apply the standalone path.
+ *
+ * Inventory + status reads use the App Platform read client
+ * (`DigitalOceanAppsClient`) and surface the function-component summary
+ * via the same `runtime/inventory` path as other DO resources.
+ */
+import * as z from 'zod/v4';
+import { type FunctionComponent } from '../schemas/functions.ts';
+import type { DigitalOceanAppsClient, DoApp, DoAppSpec } from '../apps/index.ts';
+export declare const DigitalOceanFunctionsDescriptorSchema: z.ZodObject<{
+    kind: z.ZodLiteral<"infra/worker">;
+    id: z.ZodString;
+    name: z.ZodOptional<z.ZodString>;
+    description: z.ZodOptional<z.ZodString>;
+    entrypoint: z.ZodOptional<z.ZodString>;
+    queues: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    concurrency: z.ZodOptional<z.ZodNumber>;
+    env: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        value: z.ZodOptional<z.ZodString>;
+        secret: z.ZodOptional<z.ZodBoolean>;
+        storeKey: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>>;
+    config: z.ZodObject<{
+        namespace: z.ZodOptional<z.ZodString>;
+        mode: z.ZodDefault<z.ZodEnum<{
+            namespace: "namespace";
+            "app-platform": "app-platform";
+        }>>;
+        region: z.ZodOptional<z.ZodString>;
+        appName: z.ZodOptional<z.ZodString>;
+        sourceDir: z.ZodOptional<z.ZodString>;
+        github: z.ZodOptional<z.ZodObject<{
+            repo: z.ZodString;
+            branch: z.ZodDefault<z.ZodString>;
+            deployOnPush: z.ZodDefault<z.ZodBoolean>;
+        }, z.core.$strip>>;
+        environmentSlug: z.ZodOptional<z.ZodString>;
+        label: z.ZodOptional<z.ZodString>;
+        memoryMb: z.ZodOptional<z.ZodNumber>;
+        timeoutSeconds: z.ZodOptional<z.ZodNumber>;
+        adapter: z.ZodLiteral<"digitalocean-functions">;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export type DigitalOceanFunctionsDescriptorInput = z.input<typeof DigitalOceanFunctionsDescriptorSchema>;
+export type DigitalOceanFunctionsDescriptor = z.infer<typeof DigitalOceanFunctionsDescriptorSchema>;
+export interface DigitalOceanFunctionsPlanAction {
+    op: 'create-component' | 'update-component' | 'unchanged' | 'unsupported';
+    componentName: string;
+    reason?: string;
+    diff?: {
+        before?: FunctionComponent;
+        after?: FunctionComponent;
+    };
+}
+export interface DigitalOceanFunctionsPlan {
+    mode: 'app-platform' | 'namespace';
+    appName?: string;
+    componentName: string;
+    actions: DigitalOceanFunctionsPlanAction[];
+    /**
+     * Resulting App spec when applied. Undefined for the `namespace` mode
+     * because the namespace path mutates the Functions API, not an App spec.
+     */
+    nextAppSpec?: DoAppSpec;
+}
+export interface DigitalOceanFunctionsApplyResult {
+    mode: 'app-platform' | 'namespace';
+    componentName: string;
+    appId?: string;
+    updatedSpec?: DoAppSpec;
+    skipped?: boolean;
+    reason?: string;
+}
+export interface DigitalOceanFunctionsPlanContext {
+    apps?: DigitalOceanAppsClient;
+}
+export interface DigitalOceanFunctionsApplyContext {
+    apps?: DigitalOceanAppsClient;
+    /** Optional callback for status updates while the reconciler runs. */
+    onLine?: (stream: 'stdout' | 'stderr', line: string) => void;
+}
+/**
+ * Build a plan for a functions descriptor. The plan is pure — it can be
+ * computed without making API calls when the caller passes the existing
+ * App spec via `existingApp`. When `apps` is provided, the planner reads
+ * the App by name to produce a real diff.
+ */
+export declare function planDigitalOceanFunctions(descriptor: DigitalOceanFunctionsDescriptor, ctx?: DigitalOceanFunctionsPlanContext & {
+    existingApp?: DoApp;
+}): Promise<DigitalOceanFunctionsPlan>;
+/**
+ * Apply a functions plan. For the `app-platform` mode, this updates the
+ * App spec via the apps client. For the `namespace` mode, this returns
+ * `skipped: true` with a reason — the standalone namespace path is not
+ * yet implemented and the caller (CLI/routine) should surface the reason.
+ */
+export declare function reconcileDigitalOceanFunctions(descriptor: DigitalOceanFunctionsDescriptor, ctx?: DigitalOceanFunctionsApplyContext): Promise<DigitalOceanFunctionsApplyResult>;
+//# sourceMappingURL=functions.impl.d.ts.map

package/dist/infra/functions.impl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"functions.impl.d.ts","sourceRoot":"","sources":["../../src/infra/functions.impl.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAA2B,KAAK,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAG1F,OAAO,KAAK,EAAE,sBAAsB,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAEjF,eAAO,MAAM,qCAAqC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAqBhD,CAAC;AACH,MAAM,MAAM,oCAAoC,GAAG,CAAC,CAAC,KAAK,CACzD,OAAO,qCAAqC,CAC5C,CAAC;AACF,MAAM,MAAM,+BAA+B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qCAAqC,CAAC,CAAC;AAEpG,MAAM,WAAW,+BAA+B;IAC/C,EAAE,EAAE,kBAAkB,GAAG,kBAAkB,GAAG,WAAW,GAAG,aAAa,CAAC;IAC1E,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE;QACN,MAAM,CAAC,EAAE,iBAAiB,CAAC;QAC3B,KAAK,CAAC,EAAE,iBAAiB,CAAC;KAC1B,CAAC;CACF;AAED,MAAM,WAAW,yBAAyB;IACzC,IAAI,EAAE,cAAc,GAAG,WAAW,CAAC;IACnC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,+BAA+B,EAAE,CAAC;IAC3C;;;OAGG;IACH,WAAW,CAAC,EAAE,SAAS,CAAC;CACxB;AAED,MAAM,WAAW,gCAAgC;IAChD,IAAI,EAAE,cAAc,GAAG,WAAW,CAAC;IACnC,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,SAAS,CAAC;IACxB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,gCAAgC;IAChD,IAAI,CAAC,EAAE,sBAAsB,CAAC;CAC9B;AAED,MAAM,WAAW,iCAAiC;IACjD,IAAI,CAAC,EAAE,sBAAsB,CAAC;IAC9B,sEAAsE;IACtE,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,QAAQ,GAAG,QAAQ,EAAE,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAC7D;AAiCD;;;;;GAKG;AACH,wBAAsB,yBAAyB,CAC9C,UAAU,EAAE,+BAA+B,EAC3C,GAAG,GAAE,gCAAgC,GAAG;IAAE,WAAW,CAAC,EAAE,KAAK,CAAA;CAAO,GAClE,OAAO,CAAC,yBAAyB,CAAC,CAkEpC;AAED;;;;;GAKG;AACH,wBAAsB,8BAA8B,CACnD,UAAU,EAAE,+BAA+B,EAC3C,GAAG,GAAE,iCAAsC,GACzC,OAAO,CAAC,gCAAgC,CAAC,CAmD3C"}

package/dist/infra/functions.impl.js

@@ -0,0 +1,202 @@
+/**
+ * Implementation: infra/worker -> digitalocean-functions
+ *
+ * Provider that reconciles DigitalOcean Functions for a worker descriptor.
+ * Two delivery modes are supported (selected via the descriptor's
+ * `config.mode`):
+ *
+ *   - `app-platform`: attach the function as a `functions[]` component on
+ *     an App Platform App. This is the recommended path because it shares
+ *     the App's region, env, secrets, alerts, log destinations, and
+ *     deploy lifecycle with the rest of the application. The reconciler
+ *     calls into `@vibesdotdev/integrations-digitalocean/apps` to read the
+ *     existing App spec and produce an updated spec containing the
+ *     function component. Applying the spec is delegated to the App
+ *     Platform deploy client (the same one that handles services/workers/
+ *     jobs), so this impl never mutates the App directly — it returns a
+ *     plan + an `apply()` that the runtime can drive.
+ *
+ *   - `namespace`: a standalone Functions namespace package. The DO
+ *     Functions namespace API surface lives outside the App Platform
+ *     control plane; we model the descriptor here but the reconciler
+ *     leaves namespace mutation as a TODO (returns `unsupported`) until
+ *     the connector-side namespace client lands. This keeps the runtime
+ *     contract stable — descriptors are valid today, with a clear error
+ *     surface if you try to apply the standalone path.
+ *
+ * Inventory + status reads use the App Platform read client
+ * (`DigitalOceanAppsClient`) and surface the function-component summary
+ * via the same `runtime/inventory` path as other DO resources.
+ */
+import * as z from 'zod/v4';
+import { FunctionComponentSchema } from "../schemas/functions.js";
+import { DigitalOceanJsonBodySchema } from "../schemas/control-plane.js";
+import { DigitalOceanFunctionsWorkerConfigSchema } from "../schemas/worker.js";
+export const DigitalOceanFunctionsDescriptorSchema = z.object({
+    kind: z.literal('infra/worker'),
+    id: z.string().min(1),
+    name: z.string().optional(),
+    description: z.string().optional(),
+    entrypoint: z.string().min(1).optional(),
+    queues: z.array(z.string().min(1)).optional(),
+    concurrency: z.number().int().positive().optional(),
+    env: z
+        .array(z.object({
+        name: z.string().regex(/^[_A-Z0-9]+$/),
+        value: z.string().optional(),
+        secret: z.boolean().optional(),
+        storeKey: z.string().min(1).optional()
+    }))
+        .optional(),
+    config: DigitalOceanFunctionsWorkerConfigSchema.extend({
+        adapter: z.literal('digitalocean-functions')
+    })
+});
+function componentNameFor(descriptor) {
+    return descriptor.name ?? descriptor.id;
+}
+function buildFunctionComponent(descriptor) {
+    const c = descriptor.config;
+    const component = {
+        name: componentNameFor(descriptor),
+        source_dir: c.sourceDir,
+        environment_slug: c.environmentSlug,
+        github: c.github
+            ? {
+                repo: c.github.repo,
+                branch: c.github.branch,
+                deploy_on_push: c.github.deployOnPush
+            }
+            : undefined,
+        envs: descriptor.env?.map((req) => ({
+            key: req.name,
+            value: req.value,
+            scope: 'RUN_AND_BUILD_TIME',
+            type: req.secret ? 'SECRET' : 'GENERAL'
+        }))
+    };
+    return FunctionComponentSchema.parse(DigitalOceanJsonBodySchema.parse(component));
+}
+function specsEqual(a, b) {
+    return JSON.stringify(a) === JSON.stringify(b);
+}
+/**
+ * Build a plan for a functions descriptor. The plan is pure — it can be
+ * computed without making API calls when the caller passes the existing
+ * App spec via `existingApp`. When `apps` is provided, the planner reads
+ * the App by name to produce a real diff.
+ */
+export async function planDigitalOceanFunctions(descriptor, ctx = {}) {
+    const config = descriptor.config;
+    const componentName = componentNameFor(descriptor);
+    if (config.mode === 'namespace') {
+        return {
+            mode: 'namespace',
+            componentName,
+            actions: [
+                {
+                    op: 'unsupported',
+                    componentName,
+                    reason: 'Standalone DigitalOcean Functions namespace deployment is not yet wired. Use mode="app-platform" to attach the function to an App Platform App.'
+                }
+            ]
+        };
+    }
+    if (!config.appName) {
+        return {
+            mode: 'app-platform',
+            componentName,
+            actions: [
+                {
+                    op: 'unsupported',
+                    componentName,
+                    reason: 'config.appName is required when mode="app-platform" so the reconciler knows which App to update.'
+                }
+            ]
+        };
+    }
+    const existingApp = ctx.existingApp;
+    const desired = buildFunctionComponent(descriptor);
+    const nextSpec = existingApp?.spec
+        ? structuredClone(existingApp.spec)
+        : { name: config.appName };
+    const functions = (nextSpec.functions ??= []);
+    const existingIdx = functions.findIndex((fn) => FunctionComponentSchema.parse(fn).name === componentName);
+    const actions = [];
+    if (existingIdx < 0) {
+        functions.push(desired);
+        actions.push({ op: 'create-component', componentName, diff: { after: desired } });
+    }
+    else {
+        const before = FunctionComponentSchema.parse(functions[existingIdx]);
+        if (specsEqual(before, desired)) {
+            actions.push({ op: 'unchanged', componentName });
+        }
+        else {
+            functions[existingIdx] = desired;
+            actions.push({ op: 'update-component', componentName, diff: { before, after: desired } });
+        }
+    }
+    return {
+        mode: 'app-platform',
+        appName: config.appName,
+        componentName,
+        actions,
+        nextAppSpec: nextSpec
+    };
+}
+/**
+ * Apply a functions plan. For the `app-platform` mode, this updates the
+ * App spec via the apps client. For the `namespace` mode, this returns
+ * `skipped: true` with a reason — the standalone namespace path is not
+ * yet implemented and the caller (CLI/routine) should surface the reason.
+ */
+export async function reconcileDigitalOceanFunctions(descriptor, ctx = {}) {
+    const inventory = ctx.apps ? await ctx.apps.list() : [];
+    const current = inventory.find((app) => app.spec?.name === descriptor.config.appName);
+    const plan = await planDigitalOceanFunctions(descriptor, { existingApp: current });
+    if (plan.mode === 'namespace' || plan.actions[0]?.op === 'unsupported') {
+        const reason = plan.actions[0]?.reason ?? 'unsupported';
+        ctx.onLine?.('stderr', `[functions ${plan.componentName}] skipped: ${reason}`);
+        return { mode: plan.mode, componentName: plan.componentName, skipped: true, reason };
+    }
+    if (plan.actions.every((a) => a.op === 'unchanged')) {
+        ctx.onLine?.('stdout', `[functions ${plan.componentName}] unchanged`);
+        return {
+            mode: 'app-platform',
+            componentName: plan.componentName,
+            updatedSpec: plan.nextAppSpec,
+            skipped: true,
+            reason: 'no diff'
+        };
+    }
+    if (!ctx.apps || !plan.nextAppSpec) {
+        return {
+            mode: 'app-platform',
+            componentName: plan.componentName,
+            updatedSpec: plan.nextAppSpec,
+            skipped: true,
+            reason: 'no apps client provided'
+        };
+    }
+    const existing = current;
+    if (!existing) {
+        const created = await ctx.apps.create(plan.nextAppSpec);
+        ctx.onLine?.('stdout', `[functions ${plan.componentName}] created App ${created.id}`);
+        return {
+            mode: 'app-platform',
+            componentName: plan.componentName,
+            appId: created.id,
+            updatedSpec: created.spec
+        };
+    }
+    const finalApp = await ctx.apps.update(existing.id, plan.nextAppSpec);
+    ctx.onLine?.('stdout', `[functions ${plan.componentName}] updated App ${finalApp.id}`);
+    return {
+        mode: 'app-platform',
+        componentName: plan.componentName,
+        appId: finalApp.id,
+        updatedSpec: finalApp.spec ?? plan.nextAppSpec
+    };
+}
+//# sourceMappingURL=functions.impl.js.map

package/dist/infra/functions.impl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"functions.impl.js","sourceRoot":"","sources":["../../src/infra/functions.impl.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,uBAAuB,EAA0B,MAAM,yBAAyB,CAAC;AAC1F,OAAO,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAC;AACzE,OAAO,EAAE,uCAAuC,EAAE,MAAM,sBAAsB,CAAC;AAG/E,MAAM,CAAC,MAAM,qCAAqC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7D,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC;IAC/B,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACxC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC7C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACnD,GAAG,EAAE,CAAC;SACJ,KAAK,CACL,CAAC,CAAC,MAAM,CAAC;QACR,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC;QACtC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC5B,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;QAC9B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;KACtC,CAAC,CACF;SACA,QAAQ,EAAE;IACZ,MAAM,EAAE,uCAAuC,CAAC,MAAM,CAAC;QACtD,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,wBAAwB,CAAC;KAC5C,CAAC;CACF,CAAC,CAAC;AA+CH,SAAS,gBAAgB,CAAC,UAA2C;IACpE,OAAO,UAAU,CAAC,IAAI,IAAI,UAAU,CAAC,EAAE,CAAC;AACzC,CAAC;AAED,SAAS,sBAAsB,CAAC,UAA2C;IAC1E,MAAM,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC;IAC5B,MAAM,SAAS,GAAG;QACjB,IAAI,EAAE,gBAAgB,CAAC,UAAU,CAAC;QAClC,UAAU,EAAE,CAAC,CAAC,SAAS;QACvB,gBAAgB,EAAE,CAAC,CAAC,eAAe;QACnC,MAAM,EAAE,CAAC,CAAC,MAAM;YACf,CAAC,CAAC;gBACA,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI;gBACnB,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM;gBACvB,cAAc,EAAE,CAAC,CAAC,MAAM,CAAC,YAAY;aACrC;YACF,CAAC,CAAC,SAAS;QACZ,IAAI,EAAE,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACnC,GAAG,EAAE,GAAG,CAAC,IAAI;YACb,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,KAAK,EAAE,oBAAoB;YAC3B,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;SACvC,CAAC,CAAC;KACH,CAAC;IACF,OAAO,uBAAuB,CAAC,KAAK,CAAC,0BAA0B,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;AACnF,CAAC;AAED,SAAS,UAAU,CAAC,CAAoB,EAAE,CAAoB;IAC7D,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;AAChD,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC9C,UAA2C,EAC3C,MAAkE,EAAE;IAEpE,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;IACjC,MAAM,aAAa,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;IAEnD,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QACjC,OAAO;YACN,IAAI,EAAE,WAAW;YACjB,aAAa;YACb,OAAO,EAAE;gBACR;oBACC,EAAE,EAAE,aAAa;oBACjB,aAAa;oBACb,MAAM,EACL,iJAAiJ;iBAClJ;aACD;SACD,CAAC;IACH,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACrB,OAAO;YACN,IAAI,EAAE,cAAc;YACpB,aAAa;YACb,OAAO,EAAE;gBACR;oBACC,EAAE,EAAE,aAAa;oBACjB,aAAa;oBACb,MAAM,EACL,kGAAkG;iBACnG;aACD;SACD,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAG,GAAG,CAAC,WAAW,CAAC;IAEpC,MAAM,OAAO,GAAG,sBAAsB,CAAC,UAAU,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAc,WAAW,EAAE,IAAI;QAC5C,CAAC,CAAC,eAAe,CAAC,WAAW,CAAC,IAAI,CAAC;QACnC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;IAC5B,MAAM,SAAS,GAAG,CAAC,QAAQ,CAAC,SAAS,KAAK,EAAE,CAAC,CAAC;IAC9C,MAAM,WAAW,GAAG,SAAS,CAAC,SAAS,CACtC,CAAC,EAAE,EAAE,EAAE,CAAC,uBAAuB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,KAAK,aAAa,CAChE,CAAC;IAEF,MAAM,OAAO,GAAsC,EAAE,CAAC;IACtD,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;QACrB,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACxB,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,kBAAkB,EAAE,aAAa,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;IACnF,CAAC;SAAM,CAAC;QACP,MAAM,MAAM,GAAG,uBAAuB,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC;QACrE,IAAI,UAAU,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;YACjC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,aAAa,EAAE,CAAC,CAAC;QAClD,CAAC;aAAM,CAAC;YACP,SAAS,CAAC,WAAW,CAAC,GAAG,OAAO,CAAC;YACjC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,kBAAkB,EAAE,aAAa,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;QAC3F,CAAC;IACF,CAAC;IAED,OAAO;QACN,IAAI,EAAE,cAAc;QACpB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,aAAa;QACb,OAAO;QACP,WAAW,EAAE,QAAQ;KACrB,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,8BAA8B,CACnD,UAA2C,EAC3C,MAAyC,EAAE;IAE3C,MAAM,SAAS,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACxD,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,KAAK,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACtF,MAAM,IAAI,GAAG,MAAM,yBAAyB,CAAC,UAAU,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC;IAEnF,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,aAAa,EAAE,CAAC;QACxE,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,IAAI,aAAa,CAAC;QACxD,GAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,cAAc,IAAI,CAAC,aAAa,cAAc,MAAM,EAAE,CAAC,CAAC;QAC/E,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACtF,CAAC;IAED,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,WAAW,CAAC,EAAE,CAAC;QACrD,GAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,cAAc,IAAI,CAAC,aAAa,aAAa,CAAC,CAAC;QACtE,OAAO;YACN,IAAI,EAAE,cAAc;YACpB,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,SAAS;SACjB,CAAC;IACH,CAAC;IAED,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;QACpC,OAAO;YACN,IAAI,EAAE,cAAc;YACpB,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,yBAAyB;SACjC,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC;IACzB,IAAI,CAAC,QAAQ,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACxD,GAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,cAAc,IAAI,CAAC,aAAa,iBAAiB,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;QACtF,OAAO;YACN,IAAI,EAAE,cAAc;YACpB,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,KAAK,EAAE,OAAO,CAAC,EAAE;YACjB,WAAW,EAAE,OAAO,CAAC,IAAI;SACzB,CAAC;IACH,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;IACtE,GAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,cAAc,IAAI,CAAC,aAAa,iBAAiB,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;IACvF,OAAO;QACN,IAAI,EAAE,cAAc;QACpB,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,KAAK,EAAE,QAAQ,CAAC,EAAE;QAClB,WAAW,EAAE,QAAQ,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW;KAC9C,CAAC;AACH,CAAC"}

package/dist/infra/index.d.ts

@@ -0,0 +1,15 @@
+export { default as digitalOceanInfraPlugin } from './digitalocean-infra.plugin.ts';
+export { DigitalOceanImagePublishSettingsSchema, DigitalOceanReleaseOptionsSchema, SanitizedAppSpecEvidenceSchema } from '../schemas/app-deployment.ts';
+export type { DigitalOceanImagePublishSettings, DigitalOceanReleaseOptions, SanitizedAppSpecEvidence } from '../schemas/app-deployment.ts';
+export { DigitalOceanDoksWorkerAdapterSchema, DigitalOceanDoksWorkerCredentialDeliveryOwnerSchema, DigitalOceanDoksWorkerCreateOptionsSchema, DigitalOceanDoksWorkerExecutionInputSchema, DigitalOceanDoksWorkerExecutionOwnerSchema, DigitalOceanDoksWorkerInfraImplementationSchema, DigitalOceanDoksWorkerSourceOperationAnnotationsSchema } from '../schemas/doks-worker.ts';
+export type { DigitalOceanDoksWorkerAdapter, DigitalOceanDoksWorkerCreateOptions, DigitalOceanDoksWorkerExecutionInput, DigitalOceanDoksWorkerExecutionOwner, DigitalOceanDoksWorkerInfraImplementation, DigitalOceanDoksWorkerPlan } from '../schemas/doks-worker.ts';
+export { DigitalOceanDoksWorkerStatusSchema } from '../schemas/worker-status.ts';
+export type { DigitalOceanDoksWorkerStatus } from '../schemas/worker-status.ts';
+export { DigitalOceanBillingClient } from './billing.ts';
+export { DigitalOceanUtilizationClient } from './utilization.ts';
+export { createDigitalOceanProviderControlPlaneClient } from './credentials.ts';
+export * from './droplet.impl.ts';
+export * from './functions.impl.ts';
+export * from './inventory.ts';
+export * from './doks/service-release.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/infra/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/infra/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,IAAI,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AACpF,OAAO,EACN,sCAAsC,EACtC,gCAAgC,EAChC,8BAA8B,EAC9B,MAAM,8BAA8B,CAAC;AACtC,YAAY,EACX,gCAAgC,EAChC,0BAA0B,EAC1B,wBAAwB,EACxB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACN,mCAAmC,EACnC,mDAAmD,EACnD,yCAAyC,EACzC,0CAA0C,EAC1C,0CAA0C,EAC1C,+CAA+C,EAC/C,sDAAsD,EACtD,MAAM,2BAA2B,CAAC;AACnC,YAAY,EACX,6BAA6B,EAC7B,mCAAmC,EACnC,oCAAoC,EACpC,oCAAoC,EACpC,yCAAyC,EACzC,0BAA0B,EAC1B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,kCAAkC,EAAE,MAAM,6BAA6B,CAAC;AACjF,YAAY,EAAE,4BAA4B,EAAE,MAAM,6BAA6B,CAAC;AAChF,OAAO,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAC;AACzD,OAAO,EAAE,6BAA6B,EAAE,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAAE,4CAA4C,EAAE,MAAM,kBAAkB,CAAC;AAChF,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC;AACpC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,2BAA2B,CAAC"}

package/dist/infra/index.js

@@ -0,0 +1,12 @@
+export { default as digitalOceanInfraPlugin } from "./digitalocean-infra.plugin.js";
+export { DigitalOceanImagePublishSettingsSchema, DigitalOceanReleaseOptionsSchema, SanitizedAppSpecEvidenceSchema } from "../schemas/app-deployment.js";
+export { DigitalOceanDoksWorkerAdapterSchema, DigitalOceanDoksWorkerCredentialDeliveryOwnerSchema, DigitalOceanDoksWorkerCreateOptionsSchema, DigitalOceanDoksWorkerExecutionInputSchema, DigitalOceanDoksWorkerExecutionOwnerSchema, DigitalOceanDoksWorkerInfraImplementationSchema, DigitalOceanDoksWorkerSourceOperationAnnotationsSchema } from "../schemas/doks-worker.js";
+export { DigitalOceanDoksWorkerStatusSchema } from "../schemas/worker-status.js";
+export { DigitalOceanBillingClient } from "./billing.js";
+export { DigitalOceanUtilizationClient } from "./utilization.js";
+export { createDigitalOceanProviderControlPlaneClient } from "./credentials.js";
+export * from "./droplet.impl.js";
+export * from "./functions.impl.js";
+export * from "./inventory.js";
+export * from "./doks/service-release.js";
+//# sourceMappingURL=index.js.map

package/dist/infra/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/infra/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,IAAI,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AACpF,OAAO,EACN,sCAAsC,EACtC,gCAAgC,EAChC,8BAA8B,EAC9B,MAAM,8BAA8B,CAAC;AAMtC,OAAO,EACN,mCAAmC,EACnC,mDAAmD,EACnD,yCAAyC,EACzC,0CAA0C,EAC1C,0CAA0C,EAC1C,+CAA+C,EAC/C,sDAAsD,EACtD,MAAM,2BAA2B,CAAC;AASnC,OAAO,EAAE,kCAAkC,EAAE,MAAM,6BAA6B,CAAC;AAEjF,OAAO,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAC;AACzD,OAAO,EAAE,6BAA6B,EAAE,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAAE,4CAA4C,EAAE,MAAM,kBAAkB,CAAC;AAChF,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC;AACpC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,2BAA2B,CAAC"}

package/dist/infra/inventory.d.ts

@@ -0,0 +1,7 @@
+import { type VibesRuntime } from '@vibesdotdev/kernel';
+import type { InventoryImplementation } from '@vibesdotdev/infra-core/kinds';
+import type { DigitalOceanControlPlaneClient } from '../client/control-plane.ts';
+export declare function createDigitalOceanInventoryImplementation(runtime: VibesRuntime, options?: {
+    client?: DigitalOceanControlPlaneClient;
+}): Promise<InventoryImplementation>;
+//# sourceMappingURL=inventory.d.ts.map

package/dist/infra/inventory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inventory.d.ts","sourceRoot":"","sources":["../../src/infra/inventory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAU,KAAK,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEhE,OAAO,KAAK,EACX,uBAAuB,EAGvB,MAAM,+BAA+B,CAAC;AAOvC,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,4BAA4B,CAAC;AA2BjF,wBAAsB,yCAAyC,CAC9D,OAAO,EAAE,YAAY,EACrB,OAAO,CAAC,EAAE;IAAE,MAAM,CAAC,EAAE,8BAA8B,CAAA;CAAE,GACnD,OAAO,CAAC,uBAAuB,CAAC,CAuPlC"}

package/dist/infra/inventory.js

@@ -0,0 +1,259 @@
+import { settle } from '@vibesdotdev/kernel';
+import { sanitizeInfraProviderFailure } from '@vibesdotdev/infra-core';
+import { DigitalOceanKubernetesClient } from "../kubernetes/index.js";
+import { DigitalOceanDropletsClient } from "../droplets/index.js";
+import { DigitalOceanStorageClient, DigitalOceanSpacesKeysClient } from "../storage/index.js";
+import { DigitalOceanAppsClient } from "../apps/index.js";
+import { DigitalOceanNetworkClient } from "../network/index.js";
+import { DigitalOceanContainerRegistryClient } from "../registry/index.js";
+import { createDigitalOceanProviderControlPlaneClient } from "./credentials.js";
+const SPACES_KEY_KIND = 'infra/object-storage-credential';
+export async function createDigitalOceanInventoryImplementation(runtime, options) {
+    // The control-plane client is injectable so this module can be exercised
+    // without resolving an operator credential; production callers pass nothing
+    // and get the canonical credential path.
+    const controlPlane = options?.client ??
+        (await createDigitalOceanProviderControlPlaneClient(runtime));
+    const kubernetes = new DigitalOceanKubernetesClient(controlPlane);
+    const droplets = new DigitalOceanDropletsClient(controlPlane);
+    const storage = new DigitalOceanStorageClient(controlPlane);
+    const spacesKeys = new DigitalOceanSpacesKeysClient(controlPlane);
+    const apps = new DigitalOceanAppsClient(controlPlane);
+    const network = new DigitalOceanNetworkClient(controlPlane);
+    const registry = new DigitalOceanContainerRegistryClient(controlPlane);
+    const collectors = [
+        {
+            kind: 'infra/kubernetes-cluster',
+            collect: async () => (await kubernetes.listClusters()).map((cluster) => ({
+                id: cluster.id,
+                kind: 'infra/kubernetes-cluster',
+                name: cluster.name,
+                region: cluster.region,
+                status: cluster.status.state,
+                tags: cluster.tags,
+                createdAt: cluster.created_at,
+                raw: {
+                    version: cluster.version,
+                    ha: cluster.ha ?? false,
+                    autoUpgrade: cluster.auto_upgrade ?? false,
+                    surgeUpgrade: cluster.surge_upgrade ?? false,
+                    registryEnabled: cluster.registry_enabled ?? false,
+                    clusterSubnet: cluster.cluster_subnet,
+                    serviceSubnet: cluster.service_subnet,
+                    vpcId: cluster.vpc_uuid,
+                    nodePools: cluster.node_pools.map((pool) => ({
+                        id: pool.id,
+                        name: pool.name,
+                        size: pool.size,
+                        count: pool.count,
+                        autoScale: pool.auto_scale ?? false,
+                        minNodes: pool.min_nodes,
+                        maxNodes: pool.max_nodes
+                    }))
+                }
+            }))
+        },
+        {
+            kind: 'infra/compute-instance',
+            collect: async () => (await droplets.list()).map((droplet) => ({
+                id: String(droplet.id),
+                kind: 'infra/compute-instance',
+                name: droplet.name,
+                region: droplet.region.slug,
+                status: droplet.status,
+                // A DOKS worker carries `k8s:<cluster-id>`; anything else is a
+                // standalone droplet somebody has to own by hand.
+                managedBy: kubernetesClusterTag(droplet.tags) ?? undefined,
+                tags: droplet.tags,
+                createdAt: droplet.created_at,
+                raw: {
+                    size: droplet.size_slug,
+                    vcpus: droplet.vcpus,
+                    memoryMb: droplet.memory,
+                    diskGb: droplet.disk,
+                    image: droplet.image?.slug ?? droplet.image?.distribution,
+                    publicIps: publicIps(droplet.networks?.v4),
+                    backupsEnabled: featureEnabled(droplet, 'backups'),
+                    monitoringEnabled: featureEnabled(droplet, 'monitoring')
+                }
+            }))
+        },
+        {
+            kind: 'infra/load-balancer',
+            collect: async () => (await network.listLoadBalancers()).map((lb) => ({
+                id: lb.id,
+                kind: 'infra/load-balancer',
+                name: lb.name,
+                region: lb.region?.slug,
+                status: lb.status,
+                createdAt: lb.created_at,
+                raw: {
+                    ip: lb.ip,
+                    size: lb.size ?? lb.size_unit,
+                    dropletCount: lb.droplet_ids?.length ?? 0,
+                    dropletIds: lb.droplet_ids ?? [],
+                    tag: lb.tag || undefined,
+                    forwardingRules: (lb.forwarding_rules ?? []).map((rule) => `${rule.entry_protocol}:${rule.entry_port}->${rule.target_protocol}:${rule.target_port}`)
+                }
+            }))
+        },
+        {
+            kind: 'infra/volume',
+            collect: async () => (await storage.listVolumes()).map((volume) => ({
+                id: volume.id,
+                kind: 'infra/volume',
+                name: volume.name,
+                region: volume.region.slug,
+                // An unattached volume bills exactly like an attached one.
+                status: volume.droplet_ids.length > 0 ? 'attached' : 'detached',
+                tags: volume.tags,
+                createdAt: volume.created_at,
+                raw: {
+                    sizeGb: volume.size_gigabytes,
+                    dropletIds: volume.droplet_ids,
+                    filesystemType: volume.filesystem_type
+                }
+            }))
+        },
+        {
+            kind: 'infra/snapshot',
+            collect: async () => (await droplets.listSnapshots()).map((snapshot) => ({
+                id: snapshot.id,
+                kind: 'infra/snapshot',
+                name: snapshot.name,
+                region: snapshot.regions?.[0],
+                createdAt: snapshot.created_at,
+                raw: {
+                    sizeGb: snapshot.size_gigabytes,
+                    resourceType: snapshot.resource_type,
+                    resourceId: snapshot.resource_id,
+                    regions: snapshot.regions ?? []
+                }
+            }))
+        },
+        {
+            kind: 'infra/web-app',
+            collect: async () => (await apps.list()).map((app) => ({
+                id: app.id,
+                kind: 'infra/web-app',
+                name: app.spec?.name,
+                region: app.spec?.region,
+                status: app.active_deployment?.phase ?? 'unknown',
+                createdAt: app.created_at,
+                raw: {
+                    liveUrl: app.live_url,
+                    defaultIngress: app.default_ingress,
+                    activeDeploymentId: app.active_deployment?.id,
+                    inProgressDeploymentPhase: app.in_progress_deployment?.phase,
+                    updatedAt: app.updated_at
+                }
+            }))
+        },
+        {
+            kind: 'infra/container-registry',
+            collect: async () => {
+                const found = await registry.get();
+                if (!found)
+                    return [];
+                const repositories = await registry.listRepositories(found.registry.name);
+                // tag_count and manifest_count diverge as soon as an image is
+                // overwritten: the old manifest loses its tag but keeps its blobs.
+                // Reporting the difference is the point — it is invisible in the
+                // console and bills as storage until a garbage collection runs.
+                const untagged = repositories.reduce((total, repo) => total + Math.max((repo.manifest_count ?? 0) - (repo.tag_count ?? 0), 0), 0);
+                return [
+                    {
+                        id: found.registry.name,
+                        kind: 'infra/container-registry',
+                        name: found.registry.name,
+                        region: found.registry.region,
+                        status: found.registry.read_only ? 'read-only' : 'active',
+                        createdAt: found.registry.created_at,
+                        raw: {
+                            storageUsageBytes: found.registry.storage_usage_bytes,
+                            storageUsageUpdatedAt: found.registry.storage_usage_updated_at,
+                            includedStorageBytes: found.subscription?.tier?.included_storage_bytes,
+                            tier: found.subscription?.tier?.slug,
+                            repositoryCount: repositories.length,
+                            untaggedManifestCount: untagged,
+                            repositories: repositories.map((repo) => ({
+                                name: repo.name,
+                                tagCount: repo.tag_count ?? 0,
+                                manifestCount: repo.manifest_count ?? 0,
+                                latestUpdatedAt: repo.latest_manifest?.updated_at
+                            }))
+                        }
+                    }
+                ];
+            }
+        },
+        {
+            kind: SPACES_KEY_KIND,
+            collect: async () => 
+            // Names, grants and creation dates only. The access key id is an
+            // identifier, not a credential, and the secret is never returned by
+            // this endpoint at all — but a `fullaccess` grant from a retired
+            // project is a finding, so the grant has to be reported.
+            (await spacesKeys.list()).map((key) => ({
+                id: key.access_key,
+                kind: SPACES_KEY_KIND,
+                name: key.name,
+                status: grantSummary(key.grants),
+                createdAt: key.created_at,
+                raw: {
+                    grants: (key.grants ?? []).map((grant) => ({
+                        bucket: grant.bucket || '*',
+                        permission: grant.permission
+                    }))
+                }
+            }))
+        }
+    ];
+    return {
+        async collect(opts) {
+            const requested = new Set(opts?.kinds ?? []);
+            const selected = collectors.filter((collector) => requested.size === 0 || requested.has(collector.kind));
+            const resources = [];
+            // One failing endpoint must not blank the whole inventory: a token
+            // scoped without registry read still has to report its droplets, and
+            // the gap is reported as a row rather than as silence.
+            for (const collector of selected) {
+                const result = await settle(() => collector.collect());
+                if (result.ok)
+                    resources.push(...result.value);
+                else
+                    resources.push({
+                        id: collector.kind,
+                        kind: 'infra/inventory-error',
+                        name: collector.kind,
+                        status: 'error',
+                        raw: { message: sanitizeInfraProviderFailure(result.cause).message }
+                    });
+            }
+            return {
+                provider: 'digitalocean',
+                collectedAt: new Date().toISOString(),
+                resources,
+                credentialPath: 'canonical-config'
+            };
+        }
+    };
+}
+/** The `k8s:<cluster-id>` tag DOKS puts on every worker it owns. */
+function kubernetesClusterTag(tags) {
+    const tag = (tags ?? []).find((t) => t.startsWith('k8s:') && t !== 'k8s:worker');
+    return tag ? tag.slice('k8s:'.length) : null;
+}
+function publicIps(v4) {
+    return (v4 ?? []).filter((n) => n.type === 'public').map((n) => n.ip_address);
+}
+function featureEnabled(droplet, feature) {
+    const features = droplet.features;
+    return Array.isArray(features) && features.includes(feature);
+}
+function grantSummary(grants) {
+    if (!grants || grants.length === 0)
+        return 'no-grants';
+    return grants.some((grant) => grant.permission === 'fullaccess') ? 'fullaccess' : 'scoped';
+}
+//# sourceMappingURL=inventory.js.map