@vibesdotdev/integrations-digitalocean 0.0.0-stage → 1.0.0-rc.2

package/dist/schemas/doks-worker.d.ts

@@ -0,0 +1,4071 @@
+import * as z from 'zod/v4';
+export declare const DIGITALOCEAN_DOKS_WORKER_FIELD_MANAGER = "vibes-infra-doks-worker";
+export declare const DigitalOceanDoksWorkerDescriptorSchema: z.ZodObject<{
+    id: z.ZodString;
+    name: z.ZodOptional<z.ZodString>;
+    description: z.ZodOptional<z.ZodString>;
+    tags: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    hardware: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    enabled: z.ZodOptional<z.ZodBoolean>;
+    priority: z.ZodOptional<z.ZodNumber>;
+    capabilityId: z.ZodOptional<z.ZodString>;
+    requiredContext: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    optionalContext: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    retention: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+        maxAgeDays: z.ZodOptional<z.ZodNumber>;
+        maxEntries: z.ZodOptional<z.ZodNumber>;
+        maxBytes: z.ZodOptional<z.ZodNumber>;
+        cascadeFrom: z.ZodOptional<z.ZodString>;
+        ageField: z.ZodOptional<z.ZodString>;
+        reason: z.ZodString;
+        enforcedBy: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>]>>;
+    kind: z.ZodLiteral<"infra/worker">;
+    queues: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    concurrency: z.ZodOptional<z.ZodNumber>;
+    scaling: z.ZodOptional<z.ZodObject<{
+        min: z.ZodDefault<z.ZodNumber>;
+        max: z.ZodDefault<z.ZodNumber>;
+        cpu: z.ZodOptional<z.ZodString>;
+        memory: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    env: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        public: z.ZodOptional<z.ZodBoolean>;
+        required: z.ZodOptional<z.ZodBoolean>;
+        value: z.ZodOptional<z.ZodString>;
+        secret: z.ZodOptional<z.ZodBoolean>;
+        description: z.ZodOptional<z.ZodString>;
+        storeKey: z.ZodOptional<z.ZodString>;
+        storeBinding: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strip>>>;
+    entrypoint: z.ZodString;
+    runtime: z.ZodObject<{
+        scope: z.ZodObject<{
+            surface: z.ZodEnum<{
+                agent: "agent";
+                browser: "browser";
+                ssr: "ssr";
+                cli: "cli";
+                tui: "tui";
+                worker: "worker";
+                mcp: "mcp";
+                bridge: "bridge";
+            }>;
+            hardware: z.ZodEnum<{
+                consumer: "consumer";
+                cloud: "cloud";
+            }>;
+            purpose: z.ZodEnum<{
+                agent: "agent";
+                worker: "worker";
+                mcp: "mcp";
+                direct: "direct";
+                projection: "projection";
+            }>;
+            hosting: z.ZodObject<{
+                mode: z.ZodUnion<readonly [z.ZodEnum<{
+                    local: "local";
+                    hosted: "hosted";
+                    "managed-cloud": "managed-cloud";
+                }>, z.ZodString]>;
+                owner: z.ZodUnion<readonly [z.ZodEnum<{
+                    consumer: "consumer";
+                    customer: "customer";
+                    vibes: "vibes";
+                }>, z.ZodString]>;
+                venue: z.ZodOptional<z.ZodUnion<readonly [z.ZodEnum<{
+                    "user-device": "user-device";
+                    "ipc-worker": "ipc-worker";
+                    doks: "doks";
+                    "cloudflare-workers": "cloudflare-workers";
+                    "digitalocean-functions": "digitalocean-functions";
+                }>, z.ZodString]>>;
+                provider: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>;
+            capabilities: z.ZodOptional<z.ZodObject<{
+                requestPrincipals: z.ZodOptional<z.ZodBoolean>;
+                interactiveSession: z.ZodOptional<z.ZodBoolean>;
+                hostCredentials: z.ZodOptional<z.ZodBoolean>;
+                sharedHost: z.ZodOptional<z.ZodBoolean>;
+            }, z.core.$strict>>;
+            workspace: z.ZodOptional<z.ZodObject<{
+                root: z.ZodOptional<z.ZodString>;
+                access: z.ZodOptional<z.ZodEnum<{
+                    read: "read";
+                    write: "write";
+                }>>;
+            }, z.core.$strict>>;
+            tenancy: z.ZodOptional<z.ZodObject<{
+                ownerType: z.ZodEnum<{
+                    user: "user";
+                    organization: "organization";
+                    team: "team";
+                    system: "system";
+                }>;
+                ownerId: z.ZodString;
+                teamId: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>>;
+            actor: z.ZodOptional<z.ZodObject<{
+                agentId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                harness: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                agentSystemId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                harnessSessionId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                userId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                orgId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                projectId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                teamId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                home: z.ZodOptional<z.ZodEnum<{
+                    user: "user";
+                    organization: "organization";
+                    team: "team";
+                }>>;
+                projectIds: z.ZodOptional<z.ZodReadonly<z.ZodArray<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>>>;
+                participantId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                sessionId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                instanceId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+            }, z.core.$strip>>;
+            lifecycle: z.ZodDefault<z.ZodEnum<{
+                finite: "finite";
+                persistent: "persistent";
+            }>>;
+            qualifiers: z.ZodDefault<z.ZodObject<{
+                dev: z.ZodBoolean;
+                building: z.ZodOptional<z.ZodBoolean>;
+                environmentTier: z.ZodOptional<z.ZodEnum<{
+                    local: "local";
+                    dev: "dev";
+                    staging: "staging";
+                    production: "production";
+                }>>;
+                profile: z.ZodOptional<z.ZodString>;
+                os: z.ZodOptional<z.ZodString>;
+                cef: z.ZodOptional<z.ZodBoolean>;
+                trustedOrigin: z.ZodOptional<z.ZodString>;
+                rendererGeneration: z.ZodOptional<z.ZodNumber>;
+                filesystem: z.ZodOptional<z.ZodString>;
+                browserBackend: z.ZodOptional<z.ZodString>;
+                workspaceSessionId: z.ZodOptional<z.ZodString>;
+                workspaceTarget: z.ZodOptional<z.ZodString>;
+                repositoryId: z.ZodOptional<z.ZodString>;
+                remoteHostId: z.ZodOptional<z.ZodString>;
+                connectionMode: z.ZodOptional<z.ZodString>;
+                outreachExportsDir: z.ZodOptional<z.ZodString>;
+                serve: z.ZodOptional<z.ZodString>;
+                hotReload: z.ZodOptional<z.ZodEnum<{
+                    on: "on";
+                    off: "off";
+                }>>;
+                loaderTimeoutMs: z.ZodOptional<z.ZodNumber>;
+            }, z.core.$strict>>;
+        }, z.core.$strip>;
+        adapter: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+    config: z.ZodObject<{
+        namespace: z.ZodString;
+        healthPort: z.ZodDefault<z.ZodNumber>;
+        healthPath: z.ZodDefault<z.ZodString>;
+        readyPath: z.ZodDefault<z.ZodString>;
+        serviceAccountName: z.ZodString;
+        disruption: z.ZodDefault<z.ZodObject<{
+            minAvailable: z.ZodDefault<z.ZodUnion<readonly [z.ZodNumber, z.ZodString]>>;
+        }, z.core.$strip>>;
+        nodeSelector: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        tolerations: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            key: z.ZodOptional<z.ZodString>;
+            operator: z.ZodOptional<z.ZodEnum<{
+                Exists: "Exists";
+                Equal: "Equal";
+            }>>;
+            value: z.ZodOptional<z.ZodString>;
+            effect: z.ZodOptional<z.ZodEnum<{
+                NoSchedule: "NoSchedule";
+                PreferNoSchedule: "PreferNoSchedule";
+                NoExecute: "NoExecute";
+            }>>;
+        }, z.core.$strip>>>;
+        imagePullSecrets: z.ZodArray<z.ZodObject<{
+            name: z.ZodString;
+        }, z.core.$strip>>;
+        adapter: z.ZodLiteral<"doks-deployment">;
+        cluster: z.ZodObject<{
+            id: z.ZodOptional<z.ZodString>;
+            name: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>;
+        image: z.ZodString;
+        build: z.ZodOptional<z.ZodObject<{
+            repositoryUrl: z.ZodString;
+            contextPath: z.ZodDefault<z.ZodString>;
+            dockerfile: z.ZodDefault<z.ZodString>;
+            destinationRepository: z.ZodString;
+            builderImage: z.ZodString;
+            serviceAccountName: z.ZodString;
+            sourceCredential: z.ZodObject<{
+                secretName: z.ZodString;
+                key: z.ZodString;
+                broker: z.ZodObject<{
+                    repositoryId: z.ZodUUID;
+                    authority: z.ZodObject<{
+                        store: z.ZodOptional<z.ZodString>;
+                        key: z.ZodString;
+                        env: z.ZodOptional<z.ZodString>;
+                    }, z.core.$strip>;
+                }, z.core.$strip>;
+            }, z.core.$strip>;
+            registryCredential: z.ZodObject<{
+                secretName: z.ZodString;
+                key: z.ZodLiteral<"config.json">;
+                provider: z.ZodLiteral<"digitalocean">;
+                expirySeconds: z.ZodDefault<z.ZodNumber>;
+            }, z.core.$strip>;
+            packageCredential: z.ZodOptional<z.ZodObject<{
+                secretName: z.ZodString;
+                key: z.ZodDefault<z.ZodEnum<{
+                    ".npmrc": ".npmrc";
+                    ".bunfig.toml": ".bunfig.toml";
+                }>>;
+                mountPath: z.ZodDefault<z.ZodString>;
+                authority: z.ZodObject<{
+                    store: z.ZodOptional<z.ZodString>;
+                    key: z.ZodString;
+                    env: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>;
+            }, z.core.$strip>>;
+        }, z.core.$strip>>;
+        resources: z.ZodObject<{
+            requests: z.ZodObject<{
+                cpu: z.ZodString;
+                memory: z.ZodString;
+            }, z.core.$strip>;
+            limits: z.ZodObject<{
+                cpu: z.ZodString;
+                memory: z.ZodString;
+            }, z.core.$strip>;
+        }, z.core.$strip>;
+        shutdown: z.ZodObject<{
+            gracePeriodSeconds: z.ZodDefault<z.ZodNumber>;
+            preStopDelaySeconds: z.ZodDefault<z.ZodNumber>;
+            terminationMessage: z.ZodDefault<z.ZodString>;
+        }, z.core.$strip>;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export type DigitalOceanDoksWorkerDescriptor = z.infer<typeof DigitalOceanDoksWorkerDescriptorSchema>;
+export type DigitalOceanDoksWorkerDescriptorInput = z.input<typeof DigitalOceanDoksWorkerDescriptorSchema>;
+export declare const KubernetesWorkerManifestSchema: z.ZodObject<{
+    apiVersion: z.ZodString;
+    kind: z.ZodString;
+    metadata: z.ZodObject<{
+        name: z.ZodString;
+        namespace: z.ZodOptional<z.ZodString>;
+    }, z.core.$loose>;
+}, z.core.$loose>;
+export declare const KubernetesWorkerResourceSchema: z.ZodObject<{
+    apiVersion: z.ZodString;
+    kind: z.ZodString;
+    namespace: z.ZodOptional<z.ZodString>;
+    name: z.ZodString;
+    manifest: z.ZodObject<{
+        apiVersion: z.ZodString;
+        kind: z.ZodString;
+        metadata: z.ZodObject<{
+            name: z.ZodString;
+            namespace: z.ZodOptional<z.ZodString>;
+        }, z.core.$loose>;
+    }, z.core.$loose>;
+}, z.core.$strict>;
+export type KubernetesWorkerResource = z.infer<typeof KubernetesWorkerResourceSchema>;
+export declare const DigitalOceanDoksWorkerOperationIdSchema: z.ZodUUID;
+export declare const DigitalOceanDoksWorkerSourceOperationAnnotationsSchema: z.ZodObject<{
+    'vibes.dev/source-operation-id': z.ZodUUID;
+}, z.core.$strict>;
+export type DigitalOceanDoksWorkerSourceOperationAnnotations = z.infer<typeof DigitalOceanDoksWorkerSourceOperationAnnotationsSchema>;
+export declare const DigitalOceanDoksWorkerCredentialLeaseSchema: z.ZodObject<{
+    operationId: z.ZodUUID;
+    repositoryId: z.ZodUUID;
+    ref: z.ZodString;
+    namespace: z.ZodString;
+    name: z.ZodString;
+    authority: z.ZodObject<{
+        store: z.ZodOptional<z.ZodString>;
+        key: z.ZodString;
+        env: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+}, z.core.$strict>;
+export declare const DigitalOceanDoksSourceCredentialRequestSchema: z.ZodObject<{
+    operationId: z.ZodUUID;
+    repositoryId: z.ZodUUID;
+    ref: z.ZodString;
+}, z.core.$strict>;
+export type DigitalOceanDoksSourceCredentialRequest = z.infer<typeof DigitalOceanDoksSourceCredentialRequestSchema>;
+export type DigitalOceanDoksWorkerCredentialLease = z.infer<typeof DigitalOceanDoksWorkerCredentialLeaseSchema>;
+export declare const DigitalOceanDoksWorkerPlanSchema: z.ZodObject<{
+    provider: z.ZodLiteral<"digitalocean-kubernetes">;
+    operation: z.ZodEnum<{
+        build: "build";
+        apply: "apply";
+    }>;
+    fieldManager: z.ZodLiteral<"vibes-infra-doks-worker">;
+    conflictPolicy: z.ZodLiteral<"fail">;
+    cluster: z.ZodObject<{
+        id: z.ZodOptional<z.ZodString>;
+        name: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>;
+    worker: z.ZodString;
+    namespace: z.ZodString;
+    image: z.ZodString;
+    sourceRevision: z.ZodOptional<z.ZodString>;
+    requiredSecrets: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        namespace: z.ZodString;
+        name: z.ZodString;
+        keys: z.ZodArray<z.ZodString>;
+    }, z.core.$strict>>>;
+    credentialBindings: z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"source-lease">;
+        namespace: z.ZodString;
+        name: z.ZodString;
+        key: z.ZodString;
+        repositoryId: z.ZodUUID;
+        ref: z.ZodString;
+        authority: z.ZodObject<{
+            store: z.ZodOptional<z.ZodString>;
+            key: z.ZodString;
+            env: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"docr">;
+        namespace: z.ZodString;
+        name: z.ZodString;
+        key: z.ZodLiteral<"config.json">;
+        expirySeconds: z.ZodNumber;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"package-registry">;
+        namespace: z.ZodString;
+        name: z.ZodString;
+        key: z.ZodEnum<{
+            ".npmrc": ".npmrc";
+            ".bunfig.toml": ".bunfig.toml";
+        }>;
+        authority: z.ZodObject<{
+            store: z.ZodOptional<z.ZodString>;
+            key: z.ZodString;
+            env: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>;
+    }, z.core.$strict>], "kind">>>;
+    credentialLease: z.ZodOptional<z.ZodObject<{
+        operationId: z.ZodUUID;
+        repositoryId: z.ZodUUID;
+        ref: z.ZodString;
+        namespace: z.ZodString;
+        name: z.ZodString;
+        authority: z.ZodObject<{
+            store: z.ZodOptional<z.ZodString>;
+            key: z.ZodString;
+            env: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>;
+    }, z.core.$strict>>;
+    resources: z.ZodArray<z.ZodObject<{
+        apiVersion: z.ZodString;
+        kind: z.ZodString;
+        namespace: z.ZodOptional<z.ZodString>;
+        name: z.ZodString;
+        manifest: z.ZodObject<{
+            apiVersion: z.ZodString;
+            kind: z.ZodString;
+            metadata: z.ZodObject<{
+                name: z.ZodString;
+                namespace: z.ZodOptional<z.ZodString>;
+            }, z.core.$loose>;
+        }, z.core.$loose>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type DigitalOceanDoksWorkerPlan = z.infer<typeof DigitalOceanDoksWorkerPlanSchema>;
+export declare const DigitalOceanDoksDockerConfigSchema: z.ZodObject<{
+    auths: z.ZodRecord<z.ZodString, z.ZodObject<{
+        auth: z.ZodOptional<z.ZodString>;
+    }, z.core.$loose>>;
+}, z.core.$loose>;
+export type DigitalOceanDoksDockerConfig = z.infer<typeof DigitalOceanDoksDockerConfigSchema>;
+export declare const DigitalOceanDoksWorkerExecutionInputSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    operation: z.ZodLiteral<"apply">;
+    worker: z.ZodString;
+    environment: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>, z.ZodObject<{
+    operation: z.ZodLiteral<"build">;
+    worker: z.ZodString;
+    sourceRevision: z.ZodString;
+    environment: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>], "operation">;
+export type DigitalOceanDoksWorkerExecutionInput = z.infer<typeof DigitalOceanDoksWorkerExecutionInputSchema>;
+export declare const DigitalOceanDoksWorkerCreateOptionsSchema: z.ZodObject<{
+    environment: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export type DigitalOceanDoksWorkerCreateOptions = z.input<typeof DigitalOceanDoksWorkerCreateOptionsSchema>;
+export declare const DigitalOceanDoksWorkerAdapterSchema: z.ZodObject<{
+    planApply: z.ZodFunction<z.ZodTuple<readonly [z.ZodObject<{
+        id: z.ZodString;
+        name: z.ZodOptional<z.ZodString>;
+        description: z.ZodOptional<z.ZodString>;
+        tags: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        hardware: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        enabled: z.ZodOptional<z.ZodBoolean>;
+        priority: z.ZodOptional<z.ZodNumber>;
+        capabilityId: z.ZodOptional<z.ZodString>;
+        requiredContext: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        optionalContext: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        retention: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+            maxAgeDays: z.ZodOptional<z.ZodNumber>;
+            maxEntries: z.ZodOptional<z.ZodNumber>;
+            maxBytes: z.ZodOptional<z.ZodNumber>;
+            cascadeFrom: z.ZodOptional<z.ZodString>;
+            ageField: z.ZodOptional<z.ZodString>;
+            reason: z.ZodString;
+            enforcedBy: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>]>>;
+        kind: z.ZodLiteral<"infra/worker">;
+        queues: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        concurrency: z.ZodOptional<z.ZodNumber>;
+        scaling: z.ZodOptional<z.ZodObject<{
+            min: z.ZodDefault<z.ZodNumber>;
+            max: z.ZodDefault<z.ZodNumber>;
+            cpu: z.ZodOptional<z.ZodString>;
+            memory: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+        env: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            name: z.ZodString;
+            public: z.ZodOptional<z.ZodBoolean>;
+            required: z.ZodOptional<z.ZodBoolean>;
+            value: z.ZodOptional<z.ZodString>;
+            secret: z.ZodOptional<z.ZodBoolean>;
+            description: z.ZodOptional<z.ZodString>;
+            storeKey: z.ZodOptional<z.ZodString>;
+            storeBinding: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strip>>>;
+        entrypoint: z.ZodString;
+        runtime: z.ZodObject<{
+            scope: z.ZodObject<{
+                surface: z.ZodEnum<{
+                    agent: "agent";
+                    browser: "browser";
+                    ssr: "ssr";
+                    cli: "cli";
+                    tui: "tui";
+                    worker: "worker";
+                    mcp: "mcp";
+                    bridge: "bridge";
+                }>;
+                hardware: z.ZodEnum<{
+                    consumer: "consumer";
+                    cloud: "cloud";
+                }>;
+                purpose: z.ZodEnum<{
+                    agent: "agent";
+                    worker: "worker";
+                    mcp: "mcp";
+                    direct: "direct";
+                    projection: "projection";
+                }>;
+                hosting: z.ZodObject<{
+                    mode: z.ZodUnion<readonly [z.ZodEnum<{
+                        local: "local";
+                        hosted: "hosted";
+                        "managed-cloud": "managed-cloud";
+                    }>, z.ZodString]>;
+                    owner: z.ZodUnion<readonly [z.ZodEnum<{
+                        consumer: "consumer";
+                        customer: "customer";
+                        vibes: "vibes";
+                    }>, z.ZodString]>;
+                    venue: z.ZodOptional<z.ZodUnion<readonly [z.ZodEnum<{
+                        "user-device": "user-device";
+                        "ipc-worker": "ipc-worker";
+                        doks: "doks";
+                        "cloudflare-workers": "cloudflare-workers";
+                        "digitalocean-functions": "digitalocean-functions";
+                    }>, z.ZodString]>>;
+                    provider: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>;
+                capabilities: z.ZodOptional<z.ZodObject<{
+                    requestPrincipals: z.ZodOptional<z.ZodBoolean>;
+                    interactiveSession: z.ZodOptional<z.ZodBoolean>;
+                    hostCredentials: z.ZodOptional<z.ZodBoolean>;
+                    sharedHost: z.ZodOptional<z.ZodBoolean>;
+                }, z.core.$strict>>;
+                workspace: z.ZodOptional<z.ZodObject<{
+                    root: z.ZodOptional<z.ZodString>;
+                    access: z.ZodOptional<z.ZodEnum<{
+                        read: "read";
+                        write: "write";
+                    }>>;
+                }, z.core.$strict>>;
+                tenancy: z.ZodOptional<z.ZodObject<{
+                    ownerType: z.ZodEnum<{
+                        user: "user";
+                        organization: "organization";
+                        team: "team";
+                        system: "system";
+                    }>;
+                    ownerId: z.ZodString;
+                    teamId: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>>;
+                actor: z.ZodOptional<z.ZodObject<{
+                    agentId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                    harness: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                    agentSystemId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                    harnessSessionId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                    userId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                    orgId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                    projectId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                    teamId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                    home: z.ZodOptional<z.ZodEnum<{
+                        user: "user";
+                        organization: "organization";
+                        team: "team";
+                    }>>;
+                    projectIds: z.ZodOptional<z.ZodReadonly<z.ZodArray<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>>>;
+                    participantId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                    sessionId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                    instanceId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                }, z.core.$strip>>;
+                lifecycle: z.ZodDefault<z.ZodEnum<{
+                    finite: "finite";
+                    persistent: "persistent";
+                }>>;
+                qualifiers: z.ZodDefault<z.ZodObject<{
+                    dev: z.ZodBoolean;
+                    building: z.ZodOptional<z.ZodBoolean>;
+                    environmentTier: z.ZodOptional<z.ZodEnum<{
+                        local: "local";
+                        dev: "dev";
+                        staging: "staging";
+                        production: "production";
+                    }>>;
+                    profile: z.ZodOptional<z.ZodString>;
+                    os: z.ZodOptional<z.ZodString>;
+                    cef: z.ZodOptional<z.ZodBoolean>;
+                    trustedOrigin: z.ZodOptional<z.ZodString>;
+                    rendererGeneration: z.ZodOptional<z.ZodNumber>;
+                    filesystem: z.ZodOptional<z.ZodString>;
+                    browserBackend: z.ZodOptional<z.ZodString>;
+                    workspaceSessionId: z.ZodOptional<z.ZodString>;
+                    workspaceTarget: z.ZodOptional<z.ZodString>;
+                    repositoryId: z.ZodOptional<z.ZodString>;
+                    remoteHostId: z.ZodOptional<z.ZodString>;
+                    connectionMode: z.ZodOptional<z.ZodString>;
+                    outreachExportsDir: z.ZodOptional<z.ZodString>;
+                    serve: z.ZodOptional<z.ZodString>;
+                    hotReload: z.ZodOptional<z.ZodEnum<{
+                        on: "on";
+                        off: "off";
+                    }>>;
+                    loaderTimeoutMs: z.ZodOptional<z.ZodNumber>;
+                }, z.core.$strict>>;
+            }, z.core.$strip>;
+            adapter: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>;
+        config: z.ZodObject<{
+            namespace: z.ZodString;
+            healthPort: z.ZodDefault<z.ZodNumber>;
+            healthPath: z.ZodDefault<z.ZodString>;
+            readyPath: z.ZodDefault<z.ZodString>;
+            serviceAccountName: z.ZodString;
+            disruption: z.ZodDefault<z.ZodObject<{
+                minAvailable: z.ZodDefault<z.ZodUnion<readonly [z.ZodNumber, z.ZodString]>>;
+            }, z.core.$strip>>;
+            nodeSelector: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            tolerations: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                key: z.ZodOptional<z.ZodString>;
+                operator: z.ZodOptional<z.ZodEnum<{
+                    Exists: "Exists";
+                    Equal: "Equal";
+                }>>;
+                value: z.ZodOptional<z.ZodString>;
+                effect: z.ZodOptional<z.ZodEnum<{
+                    NoSchedule: "NoSchedule";
+                    PreferNoSchedule: "PreferNoSchedule";
+                    NoExecute: "NoExecute";
+                }>>;
+            }, z.core.$strip>>>;
+            imagePullSecrets: z.ZodArray<z.ZodObject<{
+                name: z.ZodString;
+            }, z.core.$strip>>;
+            adapter: z.ZodLiteral<"doks-deployment">;
+            cluster: z.ZodObject<{
+                id: z.ZodOptional<z.ZodString>;
+                name: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>;
+            image: z.ZodString;
+            build: z.ZodOptional<z.ZodObject<{
+                repositoryUrl: z.ZodString;
+                contextPath: z.ZodDefault<z.ZodString>;
+                dockerfile: z.ZodDefault<z.ZodString>;
+                destinationRepository: z.ZodString;
+                builderImage: z.ZodString;
+                serviceAccountName: z.ZodString;
+                sourceCredential: z.ZodObject<{
+                    secretName: z.ZodString;
+                    key: z.ZodString;
+                    broker: z.ZodObject<{
+                        repositoryId: z.ZodUUID;
+                        authority: z.ZodObject<{
+                            store: z.ZodOptional<z.ZodString>;
+                            key: z.ZodString;
+                            env: z.ZodOptional<z.ZodString>;
+                        }, z.core.$strip>;
+                    }, z.core.$strip>;
+                }, z.core.$strip>;
+                registryCredential: z.ZodObject<{
+                    secretName: z.ZodString;
+                    key: z.ZodLiteral<"config.json">;
+                    provider: z.ZodLiteral<"digitalocean">;
+                    expirySeconds: z.ZodDefault<z.ZodNumber>;
+                }, z.core.$strip>;
+                packageCredential: z.ZodOptional<z.ZodObject<{
+                    secretName: z.ZodString;
+                    key: z.ZodDefault<z.ZodEnum<{
+                        ".npmrc": ".npmrc";
+                        ".bunfig.toml": ".bunfig.toml";
+                    }>>;
+                    mountPath: z.ZodDefault<z.ZodString>;
+                    authority: z.ZodObject<{
+                        store: z.ZodOptional<z.ZodString>;
+                        key: z.ZodString;
+                        env: z.ZodOptional<z.ZodString>;
+                    }, z.core.$strip>;
+                }, z.core.$strip>>;
+            }, z.core.$strip>>;
+            resources: z.ZodObject<{
+                requests: z.ZodObject<{
+                    cpu: z.ZodString;
+                    memory: z.ZodString;
+                }, z.core.$strip>;
+                limits: z.ZodObject<{
+                    cpu: z.ZodString;
+                    memory: z.ZodString;
+                }, z.core.$strip>;
+            }, z.core.$strip>;
+            shutdown: z.ZodObject<{
+                gracePeriodSeconds: z.ZodDefault<z.ZodNumber>;
+                preStopDelaySeconds: z.ZodDefault<z.ZodNumber>;
+                terminationMessage: z.ZodDefault<z.ZodString>;
+            }, z.core.$strip>;
+        }, z.core.$strip>;
+    }, z.core.$strip>], null>, z.ZodObject<{
+        provider: z.ZodLiteral<"digitalocean-kubernetes">;
+        operation: z.ZodEnum<{
+            build: "build";
+            apply: "apply";
+        }>;
+        fieldManager: z.ZodLiteral<"vibes-infra-doks-worker">;
+        conflictPolicy: z.ZodLiteral<"fail">;
+        cluster: z.ZodObject<{
+            id: z.ZodOptional<z.ZodString>;
+            name: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>;
+        worker: z.ZodString;
+        namespace: z.ZodString;
+        image: z.ZodString;
+        sourceRevision: z.ZodOptional<z.ZodString>;
+        requiredSecrets: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            namespace: z.ZodString;
+            name: z.ZodString;
+            keys: z.ZodArray<z.ZodString>;
+        }, z.core.$strict>>>;
+        credentialBindings: z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"source-lease">;
+            namespace: z.ZodString;
+            name: z.ZodString;
+            key: z.ZodString;
+            repositoryId: z.ZodUUID;
+            ref: z.ZodString;
+            authority: z.ZodObject<{
+                store: z.ZodOptional<z.ZodString>;
+                key: z.ZodString;
+                env: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"docr">;
+            namespace: z.ZodString;
+            name: z.ZodString;
+            key: z.ZodLiteral<"config.json">;
+            expirySeconds: z.ZodNumber;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"package-registry">;
+            namespace: z.ZodString;
+            name: z.ZodString;
+            key: z.ZodEnum<{
+                ".npmrc": ".npmrc";
+                ".bunfig.toml": ".bunfig.toml";
+            }>;
+            authority: z.ZodObject<{
+                store: z.ZodOptional<z.ZodString>;
+                key: z.ZodString;
+                env: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>;
+        }, z.core.$strict>], "kind">>>;
+        credentialLease: z.ZodOptional<z.ZodObject<{
+            operationId: z.ZodUUID;
+            repositoryId: z.ZodUUID;
+            ref: z.ZodString;
+            namespace: z.ZodString;
+            name: z.ZodString;
+            authority: z.ZodObject<{
+                store: z.ZodOptional<z.ZodString>;
+                key: z.ZodString;
+                env: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>;
+        }, z.core.$strict>>;
+        resources: z.ZodArray<z.ZodObject<{
+            apiVersion: z.ZodString;
+            kind: z.ZodString;
+            namespace: z.ZodOptional<z.ZodString>;
+            name: z.ZodString;
+            manifest: z.ZodObject<{
+                apiVersion: z.ZodString;
+                kind: z.ZodString;
+                metadata: z.ZodObject<{
+                    name: z.ZodString;
+                    namespace: z.ZodOptional<z.ZodString>;
+                }, z.core.$loose>;
+            }, z.core.$loose>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>;
+    planBuild: z.ZodFunction<z.ZodTuple<readonly [z.ZodObject<{
+        id: z.ZodString;
+        name: z.ZodOptional<z.ZodString>;
+        description: z.ZodOptional<z.ZodString>;
+        tags: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        hardware: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        enabled: z.ZodOptional<z.ZodBoolean>;
+        priority: z.ZodOptional<z.ZodNumber>;
+        capabilityId: z.ZodOptional<z.ZodString>;
+        requiredContext: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        optionalContext: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        retention: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+            maxAgeDays: z.ZodOptional<z.ZodNumber>;
+            maxEntries: z.ZodOptional<z.ZodNumber>;
+            maxBytes: z.ZodOptional<z.ZodNumber>;
+            cascadeFrom: z.ZodOptional<z.ZodString>;
+            ageField: z.ZodOptional<z.ZodString>;
+            reason: z.ZodString;
+            enforcedBy: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>]>>;
+        kind: z.ZodLiteral<"infra/worker">;
+        queues: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        concurrency: z.ZodOptional<z.ZodNumber>;
+        scaling: z.ZodOptional<z.ZodObject<{
+            min: z.ZodDefault<z.ZodNumber>;
+            max: z.ZodDefault<z.ZodNumber>;
+            cpu: z.ZodOptional<z.ZodString>;
+            memory: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+        env: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            name: z.ZodString;
+            public: z.ZodOptional<z.ZodBoolean>;
+            required: z.ZodOptional<z.ZodBoolean>;
+            value: z.ZodOptional<z.ZodString>;
+            secret: z.ZodOptional<z.ZodBoolean>;
+            description: z.ZodOptional<z.ZodString>;
+            storeKey: z.ZodOptional<z.ZodString>;
+            storeBinding: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strip>>>;
+        entrypoint: z.ZodString;
+        runtime: z.ZodObject<{
+            scope: z.ZodObject<{
+                surface: z.ZodEnum<{
+                    agent: "agent";
+                    browser: "browser";
+                    ssr: "ssr";
+                    cli: "cli";
+                    tui: "tui";
+                    worker: "worker";
+                    mcp: "mcp";
+                    bridge: "bridge";
+                }>;
+                hardware: z.ZodEnum<{
+                    consumer: "consumer";
+                    cloud: "cloud";
+                }>;
+                purpose: z.ZodEnum<{
+                    agent: "agent";
+                    worker: "worker";
+                    mcp: "mcp";
+                    direct: "direct";
+                    projection: "projection";
+                }>;
+                hosting: z.ZodObject<{
+                    mode: z.ZodUnion<readonly [z.ZodEnum<{
+                        local: "local";
+                        hosted: "hosted";
+                        "managed-cloud": "managed-cloud";
+                    }>, z.ZodString]>;
+                    owner: z.ZodUnion<readonly [z.ZodEnum<{
+                        consumer: "consumer";
+                        customer: "customer";
+                        vibes: "vibes";
+                    }>, z.ZodString]>;
+                    venue: z.ZodOptional<z.ZodUnion<readonly [z.ZodEnum<{
+                        "user-device": "user-device";
+                        "ipc-worker": "ipc-worker";
+                        doks: "doks";
+                        "cloudflare-workers": "cloudflare-workers";
+                        "digitalocean-functions": "digitalocean-functions";
+                    }>, z.ZodString]>>;
+                    provider: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>;
+                capabilities: z.ZodOptional<z.ZodObject<{
+                    requestPrincipals: z.ZodOptional<z.ZodBoolean>;
+                    interactiveSession: z.ZodOptional<z.ZodBoolean>;
+                    hostCredentials: z.ZodOptional<z.ZodBoolean>;
+                    sharedHost: z.ZodOptional<z.ZodBoolean>;
+                }, z.core.$strict>>;
+                workspace: z.ZodOptional<z.ZodObject<{
+                    root: z.ZodOptional<z.ZodString>;
+                    access: z.ZodOptional<z.ZodEnum<{
+                        read: "read";
+                        write: "write";
+                    }>>;
+                }, z.core.$strict>>;
+                tenancy: z.ZodOptional<z.ZodObject<{
+                    ownerType: z.ZodEnum<{
+                        user: "user";
+                        organization: "organization";
+                        team: "team";
+                        system: "system";
+                    }>;
+                    ownerId: z.ZodString;
+                    teamId: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>>;
+                actor: z.ZodOptional<z.ZodObject<{
+                    agentId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                    harness: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                    agentSystemId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                    harnessSessionId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                    userId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                    orgId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                    projectId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                    teamId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                    home: z.ZodOptional<z.ZodEnum<{
+                        user: "user";
+                        organization: "organization";
+                        team: "team";
+                    }>>;
+                    projectIds: z.ZodOptional<z.ZodReadonly<z.ZodArray<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>>>;
+                    participantId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                    sessionId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                    instanceId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                }, z.core.$strip>>;
+                lifecycle: z.ZodDefault<z.ZodEnum<{
+                    finite: "finite";
+                    persistent: "persistent";
+                }>>;
+                qualifiers: z.ZodDefault<z.ZodObject<{
+                    dev: z.ZodBoolean;
+                    building: z.ZodOptional<z.ZodBoolean>;
+                    environmentTier: z.ZodOptional<z.ZodEnum<{
+                        local: "local";
+                        dev: "dev";
+                        staging: "staging";
+                        production: "production";
+                    }>>;
+                    profile: z.ZodOptional<z.ZodString>;
+                    os: z.ZodOptional<z.ZodString>;
+                    cef: z.ZodOptional<z.ZodBoolean>;
+                    trustedOrigin: z.ZodOptional<z.ZodString>;
+                    rendererGeneration: z.ZodOptional<z.ZodNumber>;
+                    filesystem: z.ZodOptional<z.ZodString>;
+                    browserBackend: z.ZodOptional<z.ZodString>;
+                    workspaceSessionId: z.ZodOptional<z.ZodString>;
+                    workspaceTarget: z.ZodOptional<z.ZodString>;
+                    repositoryId: z.ZodOptional<z.ZodString>;
+                    remoteHostId: z.ZodOptional<z.ZodString>;
+                    connectionMode: z.ZodOptional<z.ZodString>;
+                    outreachExportsDir: z.ZodOptional<z.ZodString>;
+                    serve: z.ZodOptional<z.ZodString>;
+                    hotReload: z.ZodOptional<z.ZodEnum<{
+                        on: "on";
+                        off: "off";
+                    }>>;
+                    loaderTimeoutMs: z.ZodOptional<z.ZodNumber>;
+                }, z.core.$strict>>;
+            }, z.core.$strip>;
+            adapter: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>;
+        config: z.ZodObject<{
+            namespace: z.ZodString;
+            healthPort: z.ZodDefault<z.ZodNumber>;
+            healthPath: z.ZodDefault<z.ZodString>;
+            readyPath: z.ZodDefault<z.ZodString>;
+            serviceAccountName: z.ZodString;
+            disruption: z.ZodDefault<z.ZodObject<{
+                minAvailable: z.ZodDefault<z.ZodUnion<readonly [z.ZodNumber, z.ZodString]>>;
+            }, z.core.$strip>>;
+            nodeSelector: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            tolerations: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                key: z.ZodOptional<z.ZodString>;
+                operator: z.ZodOptional<z.ZodEnum<{
+                    Exists: "Exists";
+                    Equal: "Equal";
+                }>>;
+                value: z.ZodOptional<z.ZodString>;
+                effect: z.ZodOptional<z.ZodEnum<{
+                    NoSchedule: "NoSchedule";
+                    PreferNoSchedule: "PreferNoSchedule";
+                    NoExecute: "NoExecute";
+                }>>;
+            }, z.core.$strip>>>;
+            imagePullSecrets: z.ZodArray<z.ZodObject<{
+                name: z.ZodString;
+            }, z.core.$strip>>;
+            adapter: z.ZodLiteral<"doks-deployment">;
+            cluster: z.ZodObject<{
+                id: z.ZodOptional<z.ZodString>;
+                name: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>;
+            image: z.ZodString;
+            build: z.ZodOptional<z.ZodObject<{
+                repositoryUrl: z.ZodString;
+                contextPath: z.ZodDefault<z.ZodString>;
+                dockerfile: z.ZodDefault<z.ZodString>;
+                destinationRepository: z.ZodString;
+                builderImage: z.ZodString;
+                serviceAccountName: z.ZodString;
+                sourceCredential: z.ZodObject<{
+                    secretName: z.ZodString;
+                    key: z.ZodString;
+                    broker: z.ZodObject<{
+                        repositoryId: z.ZodUUID;
+                        authority: z.ZodObject<{
+                            store: z.ZodOptional<z.ZodString>;
+                            key: z.ZodString;
+                            env: z.ZodOptional<z.ZodString>;
+                        }, z.core.$strip>;
+                    }, z.core.$strip>;
+                }, z.core.$strip>;
+                registryCredential: z.ZodObject<{
+                    secretName: z.ZodString;
+                    key: z.ZodLiteral<"config.json">;
+                    provider: z.ZodLiteral<"digitalocean">;
+                    expirySeconds: z.ZodDefault<z.ZodNumber>;
+                }, z.core.$strip>;
+                packageCredential: z.ZodOptional<z.ZodObject<{
+                    secretName: z.ZodString;
+                    key: z.ZodDefault<z.ZodEnum<{
+                        ".npmrc": ".npmrc";
+                        ".bunfig.toml": ".bunfig.toml";
+                    }>>;
+                    mountPath: z.ZodDefault<z.ZodString>;
+                    authority: z.ZodObject<{
+                        store: z.ZodOptional<z.ZodString>;
+                        key: z.ZodString;
+                        env: z.ZodOptional<z.ZodString>;
+                    }, z.core.$strip>;
+                }, z.core.$strip>>;
+            }, z.core.$strip>>;
+            resources: z.ZodObject<{
+                requests: z.ZodObject<{
+                    cpu: z.ZodString;
+                    memory: z.ZodString;
+                }, z.core.$strip>;
+                limits: z.ZodObject<{
+                    cpu: z.ZodString;
+                    memory: z.ZodString;
+                }, z.core.$strip>;
+            }, z.core.$strip>;
+            shutdown: z.ZodObject<{
+                gracePeriodSeconds: z.ZodDefault<z.ZodNumber>;
+                preStopDelaySeconds: z.ZodDefault<z.ZodNumber>;
+                terminationMessage: z.ZodDefault<z.ZodString>;
+            }, z.core.$strip>;
+        }, z.core.$strip>;
+    }, z.core.$strip>, z.ZodString], null>, z.ZodObject<{
+        provider: z.ZodLiteral<"digitalocean-kubernetes">;
+        operation: z.ZodEnum<{
+            build: "build";
+            apply: "apply";
+        }>;
+        fieldManager: z.ZodLiteral<"vibes-infra-doks-worker">;
+        conflictPolicy: z.ZodLiteral<"fail">;
+        cluster: z.ZodObject<{
+            id: z.ZodOptional<z.ZodString>;
+            name: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>;
+        worker: z.ZodString;
+        namespace: z.ZodString;
+        image: z.ZodString;
+        sourceRevision: z.ZodOptional<z.ZodString>;
+        requiredSecrets: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            namespace: z.ZodString;
+            name: z.ZodString;
+            keys: z.ZodArray<z.ZodString>;
+        }, z.core.$strict>>>;
+        credentialBindings: z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"source-lease">;
+            namespace: z.ZodString;
+            name: z.ZodString;
+            key: z.ZodString;
+            repositoryId: z.ZodUUID;
+            ref: z.ZodString;
+            authority: z.ZodObject<{
+                store: z.ZodOptional<z.ZodString>;
+                key: z.ZodString;
+                env: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"docr">;
+            namespace: z.ZodString;
+            name: z.ZodString;
+            key: z.ZodLiteral<"config.json">;
+            expirySeconds: z.ZodNumber;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"package-registry">;
+            namespace: z.ZodString;
+            name: z.ZodString;
+            key: z.ZodEnum<{
+                ".npmrc": ".npmrc";
+                ".bunfig.toml": ".bunfig.toml";
+            }>;
+            authority: z.ZodObject<{
+                store: z.ZodOptional<z.ZodString>;
+                key: z.ZodString;
+                env: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>;
+        }, z.core.$strict>], "kind">>>;
+        credentialLease: z.ZodOptional<z.ZodObject<{
+            operationId: z.ZodUUID;
+            repositoryId: z.ZodUUID;
+            ref: z.ZodString;
+            namespace: z.ZodString;
+            name: z.ZodString;
+            authority: z.ZodObject<{
+                store: z.ZodOptional<z.ZodString>;
+                key: z.ZodString;
+                env: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>;
+        }, z.core.$strict>>;
+        resources: z.ZodArray<z.ZodObject<{
+            apiVersion: z.ZodString;
+            kind: z.ZodString;
+            namespace: z.ZodOptional<z.ZodString>;
+            name: z.ZodString;
+            manifest: z.ZodObject<{
+                apiVersion: z.ZodString;
+                kind: z.ZodString;
+                metadata: z.ZodObject<{
+                    name: z.ZodString;
+                    namespace: z.ZodOptional<z.ZodString>;
+                }, z.core.$loose>;
+            }, z.core.$loose>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>;
+    apply: z.ZodFunction<z.ZodTuple<readonly [z.ZodObject<{
+        provider: z.ZodLiteral<"digitalocean-kubernetes">;
+        operation: z.ZodEnum<{
+            build: "build";
+            apply: "apply";
+        }>;
+        fieldManager: z.ZodLiteral<"vibes-infra-doks-worker">;
+        conflictPolicy: z.ZodLiteral<"fail">;
+        cluster: z.ZodObject<{
+            id: z.ZodOptional<z.ZodString>;
+            name: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>;
+        worker: z.ZodString;
+        namespace: z.ZodString;
+        image: z.ZodString;
+        sourceRevision: z.ZodOptional<z.ZodString>;
+        requiredSecrets: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            namespace: z.ZodString;
+            name: z.ZodString;
+            keys: z.ZodArray<z.ZodString>;
+        }, z.core.$strict>>>;
+        credentialBindings: z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"source-lease">;
+            namespace: z.ZodString;
+            name: z.ZodString;
+            key: z.ZodString;
+            repositoryId: z.ZodUUID;
+            ref: z.ZodString;
+            authority: z.ZodObject<{
+                store: z.ZodOptional<z.ZodString>;
+                key: z.ZodString;
+                env: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"docr">;
+            namespace: z.ZodString;
+            name: z.ZodString;
+            key: z.ZodLiteral<"config.json">;
+            expirySeconds: z.ZodNumber;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"package-registry">;
+            namespace: z.ZodString;
+            name: z.ZodString;
+            key: z.ZodEnum<{
+                ".npmrc": ".npmrc";
+                ".bunfig.toml": ".bunfig.toml";
+            }>;
+            authority: z.ZodObject<{
+                store: z.ZodOptional<z.ZodString>;
+                key: z.ZodString;
+                env: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>;
+        }, z.core.$strict>], "kind">>>;
+        credentialLease: z.ZodOptional<z.ZodObject<{
+            operationId: z.ZodUUID;
+            repositoryId: z.ZodUUID;
+            ref: z.ZodString;
+            namespace: z.ZodString;
+            name: z.ZodString;
+            authority: z.ZodObject<{
+                store: z.ZodOptional<z.ZodString>;
+                key: z.ZodString;
+                env: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>;
+        }, z.core.$strict>>;
+        resources: z.ZodArray<z.ZodObject<{
+            apiVersion: z.ZodString;
+            kind: z.ZodString;
+            namespace: z.ZodOptional<z.ZodString>;
+            name: z.ZodString;
+            manifest: z.ZodObject<{
+                apiVersion: z.ZodString;
+                kind: z.ZodString;
+                metadata: z.ZodObject<{
+                    name: z.ZodString;
+                    namespace: z.ZodOptional<z.ZodString>;
+                }, z.core.$loose>;
+            }, z.core.$loose>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>], null>, z.ZodPromise<z.ZodObject<{
+        provider: z.ZodLiteral<"digitalocean-kubernetes">;
+        operation: z.ZodEnum<{
+            build: "build";
+            apply: "apply";
+        }>;
+        fieldManager: z.ZodLiteral<"vibes-infra-doks-worker">;
+        conflictPolicy: z.ZodLiteral<"fail">;
+        cluster: z.ZodObject<{
+            id: z.ZodOptional<z.ZodString>;
+            name: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>;
+        worker: z.ZodString;
+        namespace: z.ZodString;
+        image: z.ZodString;
+        sourceRevision: z.ZodOptional<z.ZodString>;
+        requiredSecrets: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            namespace: z.ZodString;
+            name: z.ZodString;
+            keys: z.ZodArray<z.ZodString>;
+        }, z.core.$strict>>>;
+        credentialBindings: z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"source-lease">;
+            namespace: z.ZodString;
+            name: z.ZodString;
+            key: z.ZodString;
+            repositoryId: z.ZodUUID;
+            ref: z.ZodString;
+            authority: z.ZodObject<{
+                store: z.ZodOptional<z.ZodString>;
+                key: z.ZodString;
+                env: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"docr">;
+            namespace: z.ZodString;
+            name: z.ZodString;
+            key: z.ZodLiteral<"config.json">;
+            expirySeconds: z.ZodNumber;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"package-registry">;
+            namespace: z.ZodString;
+            name: z.ZodString;
+            key: z.ZodEnum<{
+                ".npmrc": ".npmrc";
+                ".bunfig.toml": ".bunfig.toml";
+            }>;
+            authority: z.ZodObject<{
+                store: z.ZodOptional<z.ZodString>;
+                key: z.ZodString;
+                env: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>;
+        }, z.core.$strict>], "kind">>>;
+        credentialLease: z.ZodOptional<z.ZodObject<{
+            operationId: z.ZodUUID;
+            repositoryId: z.ZodUUID;
+            ref: z.ZodString;
+            namespace: z.ZodString;
+            name: z.ZodString;
+            authority: z.ZodObject<{
+                store: z.ZodOptional<z.ZodString>;
+                key: z.ZodString;
+                env: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>;
+        }, z.core.$strict>>;
+        resources: z.ZodArray<z.ZodObject<{
+            apiVersion: z.ZodString;
+            kind: z.ZodString;
+            namespace: z.ZodOptional<z.ZodString>;
+            name: z.ZodString;
+            manifest: z.ZodObject<{
+                apiVersion: z.ZodString;
+                kind: z.ZodString;
+                metadata: z.ZodObject<{
+                    name: z.ZodString;
+                    namespace: z.ZodOptional<z.ZodString>;
+                }, z.core.$loose>;
+            }, z.core.$loose>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>>;
+    status: z.ZodFunction<z.ZodTuple<readonly [z.ZodObject<{
+        provider: z.ZodLiteral<"digitalocean-kubernetes">;
+        operation: z.ZodEnum<{
+            build: "build";
+            apply: "apply";
+        }>;
+        fieldManager: z.ZodLiteral<"vibes-infra-doks-worker">;
+        conflictPolicy: z.ZodLiteral<"fail">;
+        cluster: z.ZodObject<{
+            id: z.ZodOptional<z.ZodString>;
+            name: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>;
+        worker: z.ZodString;
+        namespace: z.ZodString;
+        image: z.ZodString;
+        sourceRevision: z.ZodOptional<z.ZodString>;
+        requiredSecrets: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            namespace: z.ZodString;
+            name: z.ZodString;
+            keys: z.ZodArray<z.ZodString>;
+        }, z.core.$strict>>>;
+        credentialBindings: z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"source-lease">;
+            namespace: z.ZodString;
+            name: z.ZodString;
+            key: z.ZodString;
+            repositoryId: z.ZodUUID;
+            ref: z.ZodString;
+            authority: z.ZodObject<{
+                store: z.ZodOptional<z.ZodString>;
+                key: z.ZodString;
+                env: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"docr">;
+            namespace: z.ZodString;
+            name: z.ZodString;
+            key: z.ZodLiteral<"config.json">;
+            expirySeconds: z.ZodNumber;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"package-registry">;
+            namespace: z.ZodString;
+            name: z.ZodString;
+            key: z.ZodEnum<{
+                ".npmrc": ".npmrc";
+                ".bunfig.toml": ".bunfig.toml";
+            }>;
+            authority: z.ZodObject<{
+                store: z.ZodOptional<z.ZodString>;
+                key: z.ZodString;
+                env: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>;
+        }, z.core.$strict>], "kind">>>;
+        credentialLease: z.ZodOptional<z.ZodObject<{
+            operationId: z.ZodUUID;
+            repositoryId: z.ZodUUID;
+            ref: z.ZodString;
+            namespace: z.ZodString;
+            name: z.ZodString;
+            authority: z.ZodObject<{
+                store: z.ZodOptional<z.ZodString>;
+                key: z.ZodString;
+                env: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>;
+        }, z.core.$strict>>;
+        resources: z.ZodArray<z.ZodObject<{
+            apiVersion: z.ZodString;
+            kind: z.ZodString;
+            namespace: z.ZodOptional<z.ZodString>;
+            name: z.ZodString;
+            manifest: z.ZodObject<{
+                apiVersion: z.ZodString;
+                kind: z.ZodString;
+                metadata: z.ZodObject<{
+                    name: z.ZodString;
+                    namespace: z.ZodOptional<z.ZodString>;
+                }, z.core.$loose>;
+            }, z.core.$loose>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>], null>, z.ZodPromise<z.ZodObject<{
+        errors: z.ZodOptional<z.ZodArray<z.ZodInstanceOf<import("@vibesdotdev/kernel").CapabilityError>>>;
+        state: z.ZodEnum<{
+            failed: "failed";
+            pending: "pending";
+            succeeded: "succeeded";
+        }>;
+        reason: z.ZodString;
+        worker: z.ZodString;
+        operation: z.ZodEnum<{
+            build: "build";
+            apply: "apply";
+        }>;
+    }, z.core.$strict>>>;
+}, z.core.$strip>;
+export type DigitalOceanDoksWorkerAdapter = z.infer<typeof DigitalOceanDoksWorkerAdapterSchema>;
+export declare const DigitalOceanDoksWorkerInfraImplementationSchema: z.ZodObject<{
+    planApply: z.ZodFunction<z.ZodTuple<readonly [z.ZodObject<{
+        id: z.ZodString;
+        name: z.ZodOptional<z.ZodString>;
+        description: z.ZodOptional<z.ZodString>;
+        tags: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        hardware: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        enabled: z.ZodOptional<z.ZodBoolean>;
+        priority: z.ZodOptional<z.ZodNumber>;
+        capabilityId: z.ZodOptional<z.ZodString>;
+        requiredContext: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        optionalContext: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        retention: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+            maxAgeDays: z.ZodOptional<z.ZodNumber>;
+            maxEntries: z.ZodOptional<z.ZodNumber>;
+            maxBytes: z.ZodOptional<z.ZodNumber>;
+            cascadeFrom: z.ZodOptional<z.ZodString>;
+            ageField: z.ZodOptional<z.ZodString>;
+            reason: z.ZodString;
+            enforcedBy: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>]>>;
+        kind: z.ZodLiteral<"infra/worker">;
+        queues: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        concurrency: z.ZodOptional<z.ZodNumber>;
+        scaling: z.ZodOptional<z.ZodObject<{
+            min: z.ZodDefault<z.ZodNumber>;
+            max: z.ZodDefault<z.ZodNumber>;
+            cpu: z.ZodOptional<z.ZodString>;
+            memory: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+        env: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            name: z.ZodString;
+            public: z.ZodOptional<z.ZodBoolean>;
+            required: z.ZodOptional<z.ZodBoolean>;
+            value: z.ZodOptional<z.ZodString>;
+            secret: z.ZodOptional<z.ZodBoolean>;
+            description: z.ZodOptional<z.ZodString>;
+            storeKey: z.ZodOptional<z.ZodString>;
+            storeBinding: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strip>>>;
+        entrypoint: z.ZodString;
+        runtime: z.ZodObject<{
+            scope: z.ZodObject<{
+                surface: z.ZodEnum<{
+                    agent: "agent";
+                    browser: "browser";
+                    ssr: "ssr";
+                    cli: "cli";
+                    tui: "tui";
+                    worker: "worker";
+                    mcp: "mcp";
+                    bridge: "bridge";
+                }>;
+                hardware: z.ZodEnum<{
+                    consumer: "consumer";
+                    cloud: "cloud";
+                }>;
+                purpose: z.ZodEnum<{
+                    agent: "agent";
+                    worker: "worker";
+                    mcp: "mcp";
+                    direct: "direct";
+                    projection: "projection";
+                }>;
+                hosting: z.ZodObject<{
+                    mode: z.ZodUnion<readonly [z.ZodEnum<{
+                        local: "local";
+                        hosted: "hosted";
+                        "managed-cloud": "managed-cloud";
+                    }>, z.ZodString]>;
+                    owner: z.ZodUnion<readonly [z.ZodEnum<{
+                        consumer: "consumer";
+                        customer: "customer";
+                        vibes: "vibes";
+                    }>, z.ZodString]>;
+                    venue: z.ZodOptional<z.ZodUnion<readonly [z.ZodEnum<{
+                        "user-device": "user-device";
+                        "ipc-worker": "ipc-worker";
+                        doks: "doks";
+                        "cloudflare-workers": "cloudflare-workers";
+                        "digitalocean-functions": "digitalocean-functions";
+                    }>, z.ZodString]>>;
+                    provider: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>;
+                capabilities: z.ZodOptional<z.ZodObject<{
+                    requestPrincipals: z.ZodOptional<z.ZodBoolean>;
+                    interactiveSession: z.ZodOptional<z.ZodBoolean>;
+                    hostCredentials: z.ZodOptional<z.ZodBoolean>;
+                    sharedHost: z.ZodOptional<z.ZodBoolean>;
+                }, z.core.$strict>>;
+                workspace: z.ZodOptional<z.ZodObject<{
+                    root: z.ZodOptional<z.ZodString>;
+                    access: z.ZodOptional<z.ZodEnum<{
+                        read: "read";
+                        write: "write";
+                    }>>;
+                }, z.core.$strict>>;
+                tenancy: z.ZodOptional<z.ZodObject<{
+                    ownerType: z.ZodEnum<{
+                        user: "user";
+                        organization: "organization";
+                        team: "team";
+                        system: "system";
+                    }>;
+                    ownerId: z.ZodString;
+                    teamId: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>>;
+                actor: z.ZodOptional<z.ZodObject<{
+                    agentId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                    harness: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                    agentSystemId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                    harnessSessionId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                    userId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                    orgId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                    projectId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                    teamId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                    home: z.ZodOptional<z.ZodEnum<{
+                        user: "user";
+                        organization: "organization";
+                        team: "team";
+                    }>>;
+                    projectIds: z.ZodOptional<z.ZodReadonly<z.ZodArray<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>>>;
+                    participantId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                    sessionId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                    instanceId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                }, z.core.$strip>>;
+                lifecycle: z.ZodDefault<z.ZodEnum<{
+                    finite: "finite";
+                    persistent: "persistent";
+                }>>;
+                qualifiers: z.ZodDefault<z.ZodObject<{
+                    dev: z.ZodBoolean;
+                    building: z.ZodOptional<z.ZodBoolean>;
+                    environmentTier: z.ZodOptional<z.ZodEnum<{
+                        local: "local";
+                        dev: "dev";
+                        staging: "staging";
+                        production: "production";
+                    }>>;
+                    profile: z.ZodOptional<z.ZodString>;
+                    os: z.ZodOptional<z.ZodString>;
+                    cef: z.ZodOptional<z.ZodBoolean>;
+                    trustedOrigin: z.ZodOptional<z.ZodString>;
+                    rendererGeneration: z.ZodOptional<z.ZodNumber>;
+                    filesystem: z.ZodOptional<z.ZodString>;
+                    browserBackend: z.ZodOptional<z.ZodString>;
+                    workspaceSessionId: z.ZodOptional<z.ZodString>;
+                    workspaceTarget: z.ZodOptional<z.ZodString>;
+                    repositoryId: z.ZodOptional<z.ZodString>;
+                    remoteHostId: z.ZodOptional<z.ZodString>;
+                    connectionMode: z.ZodOptional<z.ZodString>;
+                    outreachExportsDir: z.ZodOptional<z.ZodString>;
+                    serve: z.ZodOptional<z.ZodString>;
+                    hotReload: z.ZodOptional<z.ZodEnum<{
+                        on: "on";
+                        off: "off";
+                    }>>;
+                    loaderTimeoutMs: z.ZodOptional<z.ZodNumber>;
+                }, z.core.$strict>>;
+            }, z.core.$strip>;
+            adapter: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>;
+        config: z.ZodObject<{
+            namespace: z.ZodString;
+            healthPort: z.ZodDefault<z.ZodNumber>;
+            healthPath: z.ZodDefault<z.ZodString>;
+            readyPath: z.ZodDefault<z.ZodString>;
+            serviceAccountName: z.ZodString;
+            disruption: z.ZodDefault<z.ZodObject<{
+                minAvailable: z.ZodDefault<z.ZodUnion<readonly [z.ZodNumber, z.ZodString]>>;
+            }, z.core.$strip>>;
+            nodeSelector: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            tolerations: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                key: z.ZodOptional<z.ZodString>;
+                operator: z.ZodOptional<z.ZodEnum<{
+                    Exists: "Exists";
+                    Equal: "Equal";
+                }>>;
+                value: z.ZodOptional<z.ZodString>;
+                effect: z.ZodOptional<z.ZodEnum<{
+                    NoSchedule: "NoSchedule";
+                    PreferNoSchedule: "PreferNoSchedule";
+                    NoExecute: "NoExecute";
+                }>>;
+            }, z.core.$strip>>>;
+            imagePullSecrets: z.ZodArray<z.ZodObject<{
+                name: z.ZodString;
+            }, z.core.$strip>>;
+            adapter: z.ZodLiteral<"doks-deployment">;
+            cluster: z.ZodObject<{
+                id: z.ZodOptional<z.ZodString>;
+                name: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>;
+            image: z.ZodString;
+            build: z.ZodOptional<z.ZodObject<{
+                repositoryUrl: z.ZodString;
+                contextPath: z.ZodDefault<z.ZodString>;
+                dockerfile: z.ZodDefault<z.ZodString>;
+                destinationRepository: z.ZodString;
+                builderImage: z.ZodString;
+                serviceAccountName: z.ZodString;
+                sourceCredential: z.ZodObject<{
+                    secretName: z.ZodString;
+                    key: z.ZodString;
+                    broker: z.ZodObject<{
+                        repositoryId: z.ZodUUID;
+                        authority: z.ZodObject<{
+                            store: z.ZodOptional<z.ZodString>;
+                            key: z.ZodString;
+                            env: z.ZodOptional<z.ZodString>;
+                        }, z.core.$strip>;
+                    }, z.core.$strip>;
+                }, z.core.$strip>;
+                registryCredential: z.ZodObject<{
+                    secretName: z.ZodString;
+                    key: z.ZodLiteral<"config.json">;
+                    provider: z.ZodLiteral<"digitalocean">;
+                    expirySeconds: z.ZodDefault<z.ZodNumber>;
+                }, z.core.$strip>;
+                packageCredential: z.ZodOptional<z.ZodObject<{
+                    secretName: z.ZodString;
+                    key: z.ZodDefault<z.ZodEnum<{
+                        ".npmrc": ".npmrc";
+                        ".bunfig.toml": ".bunfig.toml";
+                    }>>;
+                    mountPath: z.ZodDefault<z.ZodString>;
+                    authority: z.ZodObject<{
+                        store: z.ZodOptional<z.ZodString>;
+                        key: z.ZodString;
+                        env: z.ZodOptional<z.ZodString>;
+                    }, z.core.$strip>;
+                }, z.core.$strip>>;
+            }, z.core.$strip>>;
+            resources: z.ZodObject<{
+                requests: z.ZodObject<{
+                    cpu: z.ZodString;
+                    memory: z.ZodString;
+                }, z.core.$strip>;
+                limits: z.ZodObject<{
+                    cpu: z.ZodString;
+                    memory: z.ZodString;
+                }, z.core.$strip>;
+            }, z.core.$strip>;
+            shutdown: z.ZodObject<{
+                gracePeriodSeconds: z.ZodDefault<z.ZodNumber>;
+                preStopDelaySeconds: z.ZodDefault<z.ZodNumber>;
+                terminationMessage: z.ZodDefault<z.ZodString>;
+            }, z.core.$strip>;
+        }, z.core.$strip>;
+    }, z.core.$strip>], null>, z.ZodObject<{
+        provider: z.ZodLiteral<"digitalocean-kubernetes">;
+        operation: z.ZodEnum<{
+            build: "build";
+            apply: "apply";
+        }>;
+        fieldManager: z.ZodLiteral<"vibes-infra-doks-worker">;
+        conflictPolicy: z.ZodLiteral<"fail">;
+        cluster: z.ZodObject<{
+            id: z.ZodOptional<z.ZodString>;
+            name: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>;
+        worker: z.ZodString;
+        namespace: z.ZodString;
+        image: z.ZodString;
+        sourceRevision: z.ZodOptional<z.ZodString>;
+        requiredSecrets: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            namespace: z.ZodString;
+            name: z.ZodString;
+            keys: z.ZodArray<z.ZodString>;
+        }, z.core.$strict>>>;
+        credentialBindings: z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"source-lease">;
+            namespace: z.ZodString;
+            name: z.ZodString;
+            key: z.ZodString;
+            repositoryId: z.ZodUUID;
+            ref: z.ZodString;
+            authority: z.ZodObject<{
+                store: z.ZodOptional<z.ZodString>;
+                key: z.ZodString;
+                env: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"docr">;
+            namespace: z.ZodString;
+            name: z.ZodString;
+            key: z.ZodLiteral<"config.json">;
+            expirySeconds: z.ZodNumber;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"package-registry">;
+            namespace: z.ZodString;
+            name: z.ZodString;
+            key: z.ZodEnum<{
+                ".npmrc": ".npmrc";
+                ".bunfig.toml": ".bunfig.toml";
+            }>;
+            authority: z.ZodObject<{
+                store: z.ZodOptional<z.ZodString>;
+                key: z.ZodString;
+                env: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>;
+        }, z.core.$strict>], "kind">>>;
+        credentialLease: z.ZodOptional<z.ZodObject<{
+            operationId: z.ZodUUID;
+            repositoryId: z.ZodUUID;
+            ref: z.ZodString;
+            namespace: z.ZodString;
+            name: z.ZodString;
+            authority: z.ZodObject<{
+                store: z.ZodOptional<z.ZodString>;
+                key: z.ZodString;
+                env: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>;
+        }, z.core.$strict>>;
+        resources: z.ZodArray<z.ZodObject<{
+            apiVersion: z.ZodString;
+            kind: z.ZodString;
+            namespace: z.ZodOptional<z.ZodString>;
+            name: z.ZodString;
+            manifest: z.ZodObject<{
+                apiVersion: z.ZodString;
+                kind: z.ZodString;
+                metadata: z.ZodObject<{
+                    name: z.ZodString;
+                    namespace: z.ZodOptional<z.ZodString>;
+                }, z.core.$loose>;
+            }, z.core.$loose>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>;
+    planBuild: z.ZodFunction<z.ZodTuple<readonly [z.ZodObject<{
+        id: z.ZodString;
+        name: z.ZodOptional<z.ZodString>;
+        description: z.ZodOptional<z.ZodString>;
+        tags: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        hardware: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        enabled: z.ZodOptional<z.ZodBoolean>;
+        priority: z.ZodOptional<z.ZodNumber>;
+        capabilityId: z.ZodOptional<z.ZodString>;
+        requiredContext: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        optionalContext: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        retention: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+            maxAgeDays: z.ZodOptional<z.ZodNumber>;
+            maxEntries: z.ZodOptional<z.ZodNumber>;
+            maxBytes: z.ZodOptional<z.ZodNumber>;
+            cascadeFrom: z.ZodOptional<z.ZodString>;
+            ageField: z.ZodOptional<z.ZodString>;
+            reason: z.ZodString;
+            enforcedBy: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>]>>;
+        kind: z.ZodLiteral<"infra/worker">;
+        queues: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        concurrency: z.ZodOptional<z.ZodNumber>;
+        scaling: z.ZodOptional<z.ZodObject<{
+            min: z.ZodDefault<z.ZodNumber>;
+            max: z.ZodDefault<z.ZodNumber>;
+            cpu: z.ZodOptional<z.ZodString>;
+            memory: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+        env: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            name: z.ZodString;
+            public: z.ZodOptional<z.ZodBoolean>;
+            required: z.ZodOptional<z.ZodBoolean>;
+            value: z.ZodOptional<z.ZodString>;
+            secret: z.ZodOptional<z.ZodBoolean>;
+            description: z.ZodOptional<z.ZodString>;
+            storeKey: z.ZodOptional<z.ZodString>;
+            storeBinding: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strip>>>;
+        entrypoint: z.ZodString;
+        runtime: z.ZodObject<{
+            scope: z.ZodObject<{
+                surface: z.ZodEnum<{
+                    agent: "agent";
+                    browser: "browser";
+                    ssr: "ssr";
+                    cli: "cli";
+                    tui: "tui";
+                    worker: "worker";
+                    mcp: "mcp";
+                    bridge: "bridge";
+                }>;
+                hardware: z.ZodEnum<{
+                    consumer: "consumer";
+                    cloud: "cloud";
+                }>;
+                purpose: z.ZodEnum<{
+                    agent: "agent";
+                    worker: "worker";
+                    mcp: "mcp";
+                    direct: "direct";
+                    projection: "projection";
+                }>;
+                hosting: z.ZodObject<{
+                    mode: z.ZodUnion<readonly [z.ZodEnum<{
+                        local: "local";
+                        hosted: "hosted";
+                        "managed-cloud": "managed-cloud";
+                    }>, z.ZodString]>;
+                    owner: z.ZodUnion<readonly [z.ZodEnum<{
+                        consumer: "consumer";
+                        customer: "customer";
+                        vibes: "vibes";
+                    }>, z.ZodString]>;
+                    venue: z.ZodOptional<z.ZodUnion<readonly [z.ZodEnum<{
+                        "user-device": "user-device";
+                        "ipc-worker": "ipc-worker";
+                        doks: "doks";
+                        "cloudflare-workers": "cloudflare-workers";
+                        "digitalocean-functions": "digitalocean-functions";
+                    }>, z.ZodString]>>;
+                    provider: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>;
+                capabilities: z.ZodOptional<z.ZodObject<{
+                    requestPrincipals: z.ZodOptional<z.ZodBoolean>;
+                    interactiveSession: z.ZodOptional<z.ZodBoolean>;
+                    hostCredentials: z.ZodOptional<z.ZodBoolean>;
+                    sharedHost: z.ZodOptional<z.ZodBoolean>;
+                }, z.core.$strict>>;
+                workspace: z.ZodOptional<z.ZodObject<{
+                    root: z.ZodOptional<z.ZodString>;
+                    access: z.ZodOptional<z.ZodEnum<{
+                        read: "read";
+                        write: "write";
+                    }>>;
+                }, z.core.$strict>>;
+                tenancy: z.ZodOptional<z.ZodObject<{
+                    ownerType: z.ZodEnum<{
+                        user: "user";
+                        organization: "organization";
+                        team: "team";
+                        system: "system";
+                    }>;
+                    ownerId: z.ZodString;
+                    teamId: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>>;
+                actor: z.ZodOptional<z.ZodObject<{
+                    agentId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                    harness: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                    agentSystemId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                    harnessSessionId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                    userId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                    orgId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                    projectId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                    teamId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                    home: z.ZodOptional<z.ZodEnum<{
+                        user: "user";
+                        organization: "organization";
+                        team: "team";
+                    }>>;
+                    projectIds: z.ZodOptional<z.ZodReadonly<z.ZodArray<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>>>;
+                    participantId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                    sessionId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                    instanceId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                }, z.core.$strip>>;
+                lifecycle: z.ZodDefault<z.ZodEnum<{
+                    finite: "finite";
+                    persistent: "persistent";
+                }>>;
+                qualifiers: z.ZodDefault<z.ZodObject<{
+                    dev: z.ZodBoolean;
+                    building: z.ZodOptional<z.ZodBoolean>;
+                    environmentTier: z.ZodOptional<z.ZodEnum<{
+                        local: "local";
+                        dev: "dev";
+                        staging: "staging";
+                        production: "production";
+                    }>>;
+                    profile: z.ZodOptional<z.ZodString>;
+                    os: z.ZodOptional<z.ZodString>;
+                    cef: z.ZodOptional<z.ZodBoolean>;
+                    trustedOrigin: z.ZodOptional<z.ZodString>;
+                    rendererGeneration: z.ZodOptional<z.ZodNumber>;
+                    filesystem: z.ZodOptional<z.ZodString>;
+                    browserBackend: z.ZodOptional<z.ZodString>;
+                    workspaceSessionId: z.ZodOptional<z.ZodString>;
+                    workspaceTarget: z.ZodOptional<z.ZodString>;
+                    repositoryId: z.ZodOptional<z.ZodString>;
+                    remoteHostId: z.ZodOptional<z.ZodString>;
+                    connectionMode: z.ZodOptional<z.ZodString>;
+                    outreachExportsDir: z.ZodOptional<z.ZodString>;
+                    serve: z.ZodOptional<z.ZodString>;
+                    hotReload: z.ZodOptional<z.ZodEnum<{
+                        on: "on";
+                        off: "off";
+                    }>>;
+                    loaderTimeoutMs: z.ZodOptional<z.ZodNumber>;
+                }, z.core.$strict>>;
+            }, z.core.$strip>;
+            adapter: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>;
+        config: z.ZodObject<{
+            namespace: z.ZodString;
+            healthPort: z.ZodDefault<z.ZodNumber>;
+            healthPath: z.ZodDefault<z.ZodString>;
+            readyPath: z.ZodDefault<z.ZodString>;
+            serviceAccountName: z.ZodString;
+            disruption: z.ZodDefault<z.ZodObject<{
+                minAvailable: z.ZodDefault<z.ZodUnion<readonly [z.ZodNumber, z.ZodString]>>;
+            }, z.core.$strip>>;
+            nodeSelector: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            tolerations: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                key: z.ZodOptional<z.ZodString>;
+                operator: z.ZodOptional<z.ZodEnum<{
+                    Exists: "Exists";
+                    Equal: "Equal";
+                }>>;
+                value: z.ZodOptional<z.ZodString>;
+                effect: z.ZodOptional<z.ZodEnum<{
+                    NoSchedule: "NoSchedule";
+                    PreferNoSchedule: "PreferNoSchedule";
+                    NoExecute: "NoExecute";
+                }>>;
+            }, z.core.$strip>>>;
+            imagePullSecrets: z.ZodArray<z.ZodObject<{
+                name: z.ZodString;
+            }, z.core.$strip>>;
+            adapter: z.ZodLiteral<"doks-deployment">;
+            cluster: z.ZodObject<{
+                id: z.ZodOptional<z.ZodString>;
+                name: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>;
+            image: z.ZodString;
+            build: z.ZodOptional<z.ZodObject<{
+                repositoryUrl: z.ZodString;
+                contextPath: z.ZodDefault<z.ZodString>;
+                dockerfile: z.ZodDefault<z.ZodString>;
+                destinationRepository: z.ZodString;
+                builderImage: z.ZodString;
+                serviceAccountName: z.ZodString;
+                sourceCredential: z.ZodObject<{
+                    secretName: z.ZodString;
+                    key: z.ZodString;
+                    broker: z.ZodObject<{
+                        repositoryId: z.ZodUUID;
+                        authority: z.ZodObject<{
+                            store: z.ZodOptional<z.ZodString>;
+                            key: z.ZodString;
+                            env: z.ZodOptional<z.ZodString>;
+                        }, z.core.$strip>;
+                    }, z.core.$strip>;
+                }, z.core.$strip>;
+                registryCredential: z.ZodObject<{
+                    secretName: z.ZodString;
+                    key: z.ZodLiteral<"config.json">;
+                    provider: z.ZodLiteral<"digitalocean">;
+                    expirySeconds: z.ZodDefault<z.ZodNumber>;
+                }, z.core.$strip>;
+                packageCredential: z.ZodOptional<z.ZodObject<{
+                    secretName: z.ZodString;
+                    key: z.ZodDefault<z.ZodEnum<{
+                        ".npmrc": ".npmrc";
+                        ".bunfig.toml": ".bunfig.toml";
+                    }>>;
+                    mountPath: z.ZodDefault<z.ZodString>;
+                    authority: z.ZodObject<{
+                        store: z.ZodOptional<z.ZodString>;
+                        key: z.ZodString;
+                        env: z.ZodOptional<z.ZodString>;
+                    }, z.core.$strip>;
+                }, z.core.$strip>>;
+            }, z.core.$strip>>;
+            resources: z.ZodObject<{
+                requests: z.ZodObject<{
+                    cpu: z.ZodString;
+                    memory: z.ZodString;
+                }, z.core.$strip>;
+                limits: z.ZodObject<{
+                    cpu: z.ZodString;
+                    memory: z.ZodString;
+                }, z.core.$strip>;
+            }, z.core.$strip>;
+            shutdown: z.ZodObject<{
+                gracePeriodSeconds: z.ZodDefault<z.ZodNumber>;
+                preStopDelaySeconds: z.ZodDefault<z.ZodNumber>;
+                terminationMessage: z.ZodDefault<z.ZodString>;
+            }, z.core.$strip>;
+        }, z.core.$strip>;
+    }, z.core.$strip>, z.ZodString], null>, z.ZodObject<{
+        provider: z.ZodLiteral<"digitalocean-kubernetes">;
+        operation: z.ZodEnum<{
+            build: "build";
+            apply: "apply";
+        }>;
+        fieldManager: z.ZodLiteral<"vibes-infra-doks-worker">;
+        conflictPolicy: z.ZodLiteral<"fail">;
+        cluster: z.ZodObject<{
+            id: z.ZodOptional<z.ZodString>;
+            name: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>;
+        worker: z.ZodString;
+        namespace: z.ZodString;
+        image: z.ZodString;
+        sourceRevision: z.ZodOptional<z.ZodString>;
+        requiredSecrets: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            namespace: z.ZodString;
+            name: z.ZodString;
+            keys: z.ZodArray<z.ZodString>;
+        }, z.core.$strict>>>;
+        credentialBindings: z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"source-lease">;
+            namespace: z.ZodString;
+            name: z.ZodString;
+            key: z.ZodString;
+            repositoryId: z.ZodUUID;
+            ref: z.ZodString;
+            authority: z.ZodObject<{
+                store: z.ZodOptional<z.ZodString>;
+                key: z.ZodString;
+                env: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"docr">;
+            namespace: z.ZodString;
+            name: z.ZodString;
+            key: z.ZodLiteral<"config.json">;
+            expirySeconds: z.ZodNumber;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"package-registry">;
+            namespace: z.ZodString;
+            name: z.ZodString;
+            key: z.ZodEnum<{
+                ".npmrc": ".npmrc";
+                ".bunfig.toml": ".bunfig.toml";
+            }>;
+            authority: z.ZodObject<{
+                store: z.ZodOptional<z.ZodString>;
+                key: z.ZodString;
+                env: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>;
+        }, z.core.$strict>], "kind">>>;
+        credentialLease: z.ZodOptional<z.ZodObject<{
+            operationId: z.ZodUUID;
+            repositoryId: z.ZodUUID;
+            ref: z.ZodString;
+            namespace: z.ZodString;
+            name: z.ZodString;
+            authority: z.ZodObject<{
+                store: z.ZodOptional<z.ZodString>;
+                key: z.ZodString;
+                env: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>;
+        }, z.core.$strict>>;
+        resources: z.ZodArray<z.ZodObject<{
+            apiVersion: z.ZodString;
+            kind: z.ZodString;
+            namespace: z.ZodOptional<z.ZodString>;
+            name: z.ZodString;
+            manifest: z.ZodObject<{
+                apiVersion: z.ZodString;
+                kind: z.ZodString;
+                metadata: z.ZodObject<{
+                    name: z.ZodString;
+                    namespace: z.ZodOptional<z.ZodString>;
+                }, z.core.$loose>;
+            }, z.core.$loose>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>;
+    create: z.ZodFunction<z.ZodTuple<readonly [z.ZodOptional<z.ZodObject<{
+        environment: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>], null>, z.ZodPromise<z.ZodObject<{
+        planApply: z.ZodFunction<z.ZodTuple<readonly [z.ZodObject<{
+            id: z.ZodString;
+            name: z.ZodOptional<z.ZodString>;
+            description: z.ZodOptional<z.ZodString>;
+            tags: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            hardware: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            enabled: z.ZodOptional<z.ZodBoolean>;
+            priority: z.ZodOptional<z.ZodNumber>;
+            capabilityId: z.ZodOptional<z.ZodString>;
+            requiredContext: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            optionalContext: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            retention: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+                maxAgeDays: z.ZodOptional<z.ZodNumber>;
+                maxEntries: z.ZodOptional<z.ZodNumber>;
+                maxBytes: z.ZodOptional<z.ZodNumber>;
+                cascadeFrom: z.ZodOptional<z.ZodString>;
+                ageField: z.ZodOptional<z.ZodString>;
+                reason: z.ZodString;
+                enforcedBy: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>]>>;
+            kind: z.ZodLiteral<"infra/worker">;
+            queues: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            concurrency: z.ZodOptional<z.ZodNumber>;
+            scaling: z.ZodOptional<z.ZodObject<{
+                min: z.ZodDefault<z.ZodNumber>;
+                max: z.ZodDefault<z.ZodNumber>;
+                cpu: z.ZodOptional<z.ZodString>;
+                memory: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>>;
+            env: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                name: z.ZodString;
+                public: z.ZodOptional<z.ZodBoolean>;
+                required: z.ZodOptional<z.ZodBoolean>;
+                value: z.ZodOptional<z.ZodString>;
+                secret: z.ZodOptional<z.ZodBoolean>;
+                description: z.ZodOptional<z.ZodString>;
+                storeKey: z.ZodOptional<z.ZodString>;
+                storeBinding: z.ZodOptional<z.ZodBoolean>;
+            }, z.core.$strip>>>;
+            entrypoint: z.ZodString;
+            runtime: z.ZodObject<{
+                scope: z.ZodObject<{
+                    surface: z.ZodEnum<{
+                        agent: "agent";
+                        browser: "browser";
+                        ssr: "ssr";
+                        cli: "cli";
+                        tui: "tui";
+                        worker: "worker";
+                        mcp: "mcp";
+                        bridge: "bridge";
+                    }>;
+                    hardware: z.ZodEnum<{
+                        consumer: "consumer";
+                        cloud: "cloud";
+                    }>;
+                    purpose: z.ZodEnum<{
+                        agent: "agent";
+                        worker: "worker";
+                        mcp: "mcp";
+                        direct: "direct";
+                        projection: "projection";
+                    }>;
+                    hosting: z.ZodObject<{
+                        mode: z.ZodUnion<readonly [z.ZodEnum<{
+                            local: "local";
+                            hosted: "hosted";
+                            "managed-cloud": "managed-cloud";
+                        }>, z.ZodString]>;
+                        owner: z.ZodUnion<readonly [z.ZodEnum<{
+                            consumer: "consumer";
+                            customer: "customer";
+                            vibes: "vibes";
+                        }>, z.ZodString]>;
+                        venue: z.ZodOptional<z.ZodUnion<readonly [z.ZodEnum<{
+                            "user-device": "user-device";
+                            "ipc-worker": "ipc-worker";
+                            doks: "doks";
+                            "cloudflare-workers": "cloudflare-workers";
+                            "digitalocean-functions": "digitalocean-functions";
+                        }>, z.ZodString]>>;
+                        provider: z.ZodOptional<z.ZodString>;
+                    }, z.core.$strip>;
+                    capabilities: z.ZodOptional<z.ZodObject<{
+                        requestPrincipals: z.ZodOptional<z.ZodBoolean>;
+                        interactiveSession: z.ZodOptional<z.ZodBoolean>;
+                        hostCredentials: z.ZodOptional<z.ZodBoolean>;
+                        sharedHost: z.ZodOptional<z.ZodBoolean>;
+                    }, z.core.$strict>>;
+                    workspace: z.ZodOptional<z.ZodObject<{
+                        root: z.ZodOptional<z.ZodString>;
+                        access: z.ZodOptional<z.ZodEnum<{
+                            read: "read";
+                            write: "write";
+                        }>>;
+                    }, z.core.$strict>>;
+                    tenancy: z.ZodOptional<z.ZodObject<{
+                        ownerType: z.ZodEnum<{
+                            user: "user";
+                            organization: "organization";
+                            team: "team";
+                            system: "system";
+                        }>;
+                        ownerId: z.ZodString;
+                        teamId: z.ZodOptional<z.ZodString>;
+                    }, z.core.$strip>>;
+                    actor: z.ZodOptional<z.ZodObject<{
+                        agentId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                        harness: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                        agentSystemId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                        harnessSessionId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                        userId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                        orgId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                        projectId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                        teamId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                        home: z.ZodOptional<z.ZodEnum<{
+                            user: "user";
+                            organization: "organization";
+                            team: "team";
+                        }>>;
+                        projectIds: z.ZodOptional<z.ZodReadonly<z.ZodArray<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>>>;
+                        participantId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                        sessionId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                        instanceId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                    }, z.core.$strip>>;
+                    lifecycle: z.ZodDefault<z.ZodEnum<{
+                        finite: "finite";
+                        persistent: "persistent";
+                    }>>;
+                    qualifiers: z.ZodDefault<z.ZodObject<{
+                        dev: z.ZodBoolean;
+                        building: z.ZodOptional<z.ZodBoolean>;
+                        environmentTier: z.ZodOptional<z.ZodEnum<{
+                            local: "local";
+                            dev: "dev";
+                            staging: "staging";
+                            production: "production";
+                        }>>;
+                        profile: z.ZodOptional<z.ZodString>;
+                        os: z.ZodOptional<z.ZodString>;
+                        cef: z.ZodOptional<z.ZodBoolean>;
+                        trustedOrigin: z.ZodOptional<z.ZodString>;
+                        rendererGeneration: z.ZodOptional<z.ZodNumber>;
+                        filesystem: z.ZodOptional<z.ZodString>;
+                        browserBackend: z.ZodOptional<z.ZodString>;
+                        workspaceSessionId: z.ZodOptional<z.ZodString>;
+                        workspaceTarget: z.ZodOptional<z.ZodString>;
+                        repositoryId: z.ZodOptional<z.ZodString>;
+                        remoteHostId: z.ZodOptional<z.ZodString>;
+                        connectionMode: z.ZodOptional<z.ZodString>;
+                        outreachExportsDir: z.ZodOptional<z.ZodString>;
+                        serve: z.ZodOptional<z.ZodString>;
+                        hotReload: z.ZodOptional<z.ZodEnum<{
+                            on: "on";
+                            off: "off";
+                        }>>;
+                        loaderTimeoutMs: z.ZodOptional<z.ZodNumber>;
+                    }, z.core.$strict>>;
+                }, z.core.$strip>;
+                adapter: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>;
+            config: z.ZodObject<{
+                namespace: z.ZodString;
+                healthPort: z.ZodDefault<z.ZodNumber>;
+                healthPath: z.ZodDefault<z.ZodString>;
+                readyPath: z.ZodDefault<z.ZodString>;
+                serviceAccountName: z.ZodString;
+                disruption: z.ZodDefault<z.ZodObject<{
+                    minAvailable: z.ZodDefault<z.ZodUnion<readonly [z.ZodNumber, z.ZodString]>>;
+                }, z.core.$strip>>;
+                nodeSelector: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                tolerations: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                    key: z.ZodOptional<z.ZodString>;
+                    operator: z.ZodOptional<z.ZodEnum<{
+                        Exists: "Exists";
+                        Equal: "Equal";
+                    }>>;
+                    value: z.ZodOptional<z.ZodString>;
+                    effect: z.ZodOptional<z.ZodEnum<{
+                        NoSchedule: "NoSchedule";
+                        PreferNoSchedule: "PreferNoSchedule";
+                        NoExecute: "NoExecute";
+                    }>>;
+                }, z.core.$strip>>>;
+                imagePullSecrets: z.ZodArray<z.ZodObject<{
+                    name: z.ZodString;
+                }, z.core.$strip>>;
+                adapter: z.ZodLiteral<"doks-deployment">;
+                cluster: z.ZodObject<{
+                    id: z.ZodOptional<z.ZodString>;
+                    name: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>;
+                image: z.ZodString;
+                build: z.ZodOptional<z.ZodObject<{
+                    repositoryUrl: z.ZodString;
+                    contextPath: z.ZodDefault<z.ZodString>;
+                    dockerfile: z.ZodDefault<z.ZodString>;
+                    destinationRepository: z.ZodString;
+                    builderImage: z.ZodString;
+                    serviceAccountName: z.ZodString;
+                    sourceCredential: z.ZodObject<{
+                        secretName: z.ZodString;
+                        key: z.ZodString;
+                        broker: z.ZodObject<{
+                            repositoryId: z.ZodUUID;
+                            authority: z.ZodObject<{
+                                store: z.ZodOptional<z.ZodString>;
+                                key: z.ZodString;
+                                env: z.ZodOptional<z.ZodString>;
+                            }, z.core.$strip>;
+                        }, z.core.$strip>;
+                    }, z.core.$strip>;
+                    registryCredential: z.ZodObject<{
+                        secretName: z.ZodString;
+                        key: z.ZodLiteral<"config.json">;
+                        provider: z.ZodLiteral<"digitalocean">;
+                        expirySeconds: z.ZodDefault<z.ZodNumber>;
+                    }, z.core.$strip>;
+                    packageCredential: z.ZodOptional<z.ZodObject<{
+                        secretName: z.ZodString;
+                        key: z.ZodDefault<z.ZodEnum<{
+                            ".npmrc": ".npmrc";
+                            ".bunfig.toml": ".bunfig.toml";
+                        }>>;
+                        mountPath: z.ZodDefault<z.ZodString>;
+                        authority: z.ZodObject<{
+                            store: z.ZodOptional<z.ZodString>;
+                            key: z.ZodString;
+                            env: z.ZodOptional<z.ZodString>;
+                        }, z.core.$strip>;
+                    }, z.core.$strip>>;
+                }, z.core.$strip>>;
+                resources: z.ZodObject<{
+                    requests: z.ZodObject<{
+                        cpu: z.ZodString;
+                        memory: z.ZodString;
+                    }, z.core.$strip>;
+                    limits: z.ZodObject<{
+                        cpu: z.ZodString;
+                        memory: z.ZodString;
+                    }, z.core.$strip>;
+                }, z.core.$strip>;
+                shutdown: z.ZodObject<{
+                    gracePeriodSeconds: z.ZodDefault<z.ZodNumber>;
+                    preStopDelaySeconds: z.ZodDefault<z.ZodNumber>;
+                    terminationMessage: z.ZodDefault<z.ZodString>;
+                }, z.core.$strip>;
+            }, z.core.$strip>;
+        }, z.core.$strip>], null>, z.ZodObject<{
+            provider: z.ZodLiteral<"digitalocean-kubernetes">;
+            operation: z.ZodEnum<{
+                build: "build";
+                apply: "apply";
+            }>;
+            fieldManager: z.ZodLiteral<"vibes-infra-doks-worker">;
+            conflictPolicy: z.ZodLiteral<"fail">;
+            cluster: z.ZodObject<{
+                id: z.ZodOptional<z.ZodString>;
+                name: z.ZodOptional<z.ZodString>;
+            }, z.core.$strict>;
+            worker: z.ZodString;
+            namespace: z.ZodString;
+            image: z.ZodString;
+            sourceRevision: z.ZodOptional<z.ZodString>;
+            requiredSecrets: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                namespace: z.ZodString;
+                name: z.ZodString;
+                keys: z.ZodArray<z.ZodString>;
+            }, z.core.$strict>>>;
+            credentialBindings: z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+                kind: z.ZodLiteral<"source-lease">;
+                namespace: z.ZodString;
+                name: z.ZodString;
+                key: z.ZodString;
+                repositoryId: z.ZodUUID;
+                ref: z.ZodString;
+                authority: z.ZodObject<{
+                    store: z.ZodOptional<z.ZodString>;
+                    key: z.ZodString;
+                    env: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"docr">;
+                namespace: z.ZodString;
+                name: z.ZodString;
+                key: z.ZodLiteral<"config.json">;
+                expirySeconds: z.ZodNumber;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"package-registry">;
+                namespace: z.ZodString;
+                name: z.ZodString;
+                key: z.ZodEnum<{
+                    ".npmrc": ".npmrc";
+                    ".bunfig.toml": ".bunfig.toml";
+                }>;
+                authority: z.ZodObject<{
+                    store: z.ZodOptional<z.ZodString>;
+                    key: z.ZodString;
+                    env: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>;
+            }, z.core.$strict>], "kind">>>;
+            credentialLease: z.ZodOptional<z.ZodObject<{
+                operationId: z.ZodUUID;
+                repositoryId: z.ZodUUID;
+                ref: z.ZodString;
+                namespace: z.ZodString;
+                name: z.ZodString;
+                authority: z.ZodObject<{
+                    store: z.ZodOptional<z.ZodString>;
+                    key: z.ZodString;
+                    env: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>;
+            }, z.core.$strict>>;
+            resources: z.ZodArray<z.ZodObject<{
+                apiVersion: z.ZodString;
+                kind: z.ZodString;
+                namespace: z.ZodOptional<z.ZodString>;
+                name: z.ZodString;
+                manifest: z.ZodObject<{
+                    apiVersion: z.ZodString;
+                    kind: z.ZodString;
+                    metadata: z.ZodObject<{
+                        name: z.ZodString;
+                        namespace: z.ZodOptional<z.ZodString>;
+                    }, z.core.$loose>;
+                }, z.core.$loose>;
+            }, z.core.$strict>>;
+        }, z.core.$strict>>;
+        planBuild: z.ZodFunction<z.ZodTuple<readonly [z.ZodObject<{
+            id: z.ZodString;
+            name: z.ZodOptional<z.ZodString>;
+            description: z.ZodOptional<z.ZodString>;
+            tags: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            hardware: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            enabled: z.ZodOptional<z.ZodBoolean>;
+            priority: z.ZodOptional<z.ZodNumber>;
+            capabilityId: z.ZodOptional<z.ZodString>;
+            requiredContext: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            optionalContext: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            retention: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+                maxAgeDays: z.ZodOptional<z.ZodNumber>;
+                maxEntries: z.ZodOptional<z.ZodNumber>;
+                maxBytes: z.ZodOptional<z.ZodNumber>;
+                cascadeFrom: z.ZodOptional<z.ZodString>;
+                ageField: z.ZodOptional<z.ZodString>;
+                reason: z.ZodString;
+                enforcedBy: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>]>>;
+            kind: z.ZodLiteral<"infra/worker">;
+            queues: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            concurrency: z.ZodOptional<z.ZodNumber>;
+            scaling: z.ZodOptional<z.ZodObject<{
+                min: z.ZodDefault<z.ZodNumber>;
+                max: z.ZodDefault<z.ZodNumber>;
+                cpu: z.ZodOptional<z.ZodString>;
+                memory: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>>;
+            env: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                name: z.ZodString;
+                public: z.ZodOptional<z.ZodBoolean>;
+                required: z.ZodOptional<z.ZodBoolean>;
+                value: z.ZodOptional<z.ZodString>;
+                secret: z.ZodOptional<z.ZodBoolean>;
+                description: z.ZodOptional<z.ZodString>;
+                storeKey: z.ZodOptional<z.ZodString>;
+                storeBinding: z.ZodOptional<z.ZodBoolean>;
+            }, z.core.$strip>>>;
+            entrypoint: z.ZodString;
+            runtime: z.ZodObject<{
+                scope: z.ZodObject<{
+                    surface: z.ZodEnum<{
+                        agent: "agent";
+                        browser: "browser";
+                        ssr: "ssr";
+                        cli: "cli";
+                        tui: "tui";
+                        worker: "worker";
+                        mcp: "mcp";
+                        bridge: "bridge";
+                    }>;
+                    hardware: z.ZodEnum<{
+                        consumer: "consumer";
+                        cloud: "cloud";
+                    }>;
+                    purpose: z.ZodEnum<{
+                        agent: "agent";
+                        worker: "worker";
+                        mcp: "mcp";
+                        direct: "direct";
+                        projection: "projection";
+                    }>;
+                    hosting: z.ZodObject<{
+                        mode: z.ZodUnion<readonly [z.ZodEnum<{
+                            local: "local";
+                            hosted: "hosted";
+                            "managed-cloud": "managed-cloud";
+                        }>, z.ZodString]>;
+                        owner: z.ZodUnion<readonly [z.ZodEnum<{
+                            consumer: "consumer";
+                            customer: "customer";
+                            vibes: "vibes";
+                        }>, z.ZodString]>;
+                        venue: z.ZodOptional<z.ZodUnion<readonly [z.ZodEnum<{
+                            "user-device": "user-device";
+                            "ipc-worker": "ipc-worker";
+                            doks: "doks";
+                            "cloudflare-workers": "cloudflare-workers";
+                            "digitalocean-functions": "digitalocean-functions";
+                        }>, z.ZodString]>>;
+                        provider: z.ZodOptional<z.ZodString>;
+                    }, z.core.$strip>;
+                    capabilities: z.ZodOptional<z.ZodObject<{
+                        requestPrincipals: z.ZodOptional<z.ZodBoolean>;
+                        interactiveSession: z.ZodOptional<z.ZodBoolean>;
+                        hostCredentials: z.ZodOptional<z.ZodBoolean>;
+                        sharedHost: z.ZodOptional<z.ZodBoolean>;
+                    }, z.core.$strict>>;
+                    workspace: z.ZodOptional<z.ZodObject<{
+                        root: z.ZodOptional<z.ZodString>;
+                        access: z.ZodOptional<z.ZodEnum<{
+                            read: "read";
+                            write: "write";
+                        }>>;
+                    }, z.core.$strict>>;
+                    tenancy: z.ZodOptional<z.ZodObject<{
+                        ownerType: z.ZodEnum<{
+                            user: "user";
+                            organization: "organization";
+                            team: "team";
+                            system: "system";
+                        }>;
+                        ownerId: z.ZodString;
+                        teamId: z.ZodOptional<z.ZodString>;
+                    }, z.core.$strip>>;
+                    actor: z.ZodOptional<z.ZodObject<{
+                        agentId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                        harness: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                        agentSystemId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                        harnessSessionId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                        userId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                        orgId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                        projectId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                        teamId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                        home: z.ZodOptional<z.ZodEnum<{
+                            user: "user";
+                            organization: "organization";
+                            team: "team";
+                        }>>;
+                        projectIds: z.ZodOptional<z.ZodReadonly<z.ZodArray<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>>>;
+                        participantId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                        sessionId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                        instanceId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                    }, z.core.$strip>>;
+                    lifecycle: z.ZodDefault<z.ZodEnum<{
+                        finite: "finite";
+                        persistent: "persistent";
+                    }>>;
+                    qualifiers: z.ZodDefault<z.ZodObject<{
+                        dev: z.ZodBoolean;
+                        building: z.ZodOptional<z.ZodBoolean>;
+                        environmentTier: z.ZodOptional<z.ZodEnum<{
+                            local: "local";
+                            dev: "dev";
+                            staging: "staging";
+                            production: "production";
+                        }>>;
+                        profile: z.ZodOptional<z.ZodString>;
+                        os: z.ZodOptional<z.ZodString>;
+                        cef: z.ZodOptional<z.ZodBoolean>;
+                        trustedOrigin: z.ZodOptional<z.ZodString>;
+                        rendererGeneration: z.ZodOptional<z.ZodNumber>;
+                        filesystem: z.ZodOptional<z.ZodString>;
+                        browserBackend: z.ZodOptional<z.ZodString>;
+                        workspaceSessionId: z.ZodOptional<z.ZodString>;
+                        workspaceTarget: z.ZodOptional<z.ZodString>;
+                        repositoryId: z.ZodOptional<z.ZodString>;
+                        remoteHostId: z.ZodOptional<z.ZodString>;
+                        connectionMode: z.ZodOptional<z.ZodString>;
+                        outreachExportsDir: z.ZodOptional<z.ZodString>;
+                        serve: z.ZodOptional<z.ZodString>;
+                        hotReload: z.ZodOptional<z.ZodEnum<{
+                            on: "on";
+                            off: "off";
+                        }>>;
+                        loaderTimeoutMs: z.ZodOptional<z.ZodNumber>;
+                    }, z.core.$strict>>;
+                }, z.core.$strip>;
+                adapter: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>;
+            config: z.ZodObject<{
+                namespace: z.ZodString;
+                healthPort: z.ZodDefault<z.ZodNumber>;
+                healthPath: z.ZodDefault<z.ZodString>;
+                readyPath: z.ZodDefault<z.ZodString>;
+                serviceAccountName: z.ZodString;
+                disruption: z.ZodDefault<z.ZodObject<{
+                    minAvailable: z.ZodDefault<z.ZodUnion<readonly [z.ZodNumber, z.ZodString]>>;
+                }, z.core.$strip>>;
+                nodeSelector: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                tolerations: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                    key: z.ZodOptional<z.ZodString>;
+                    operator: z.ZodOptional<z.ZodEnum<{
+                        Exists: "Exists";
+                        Equal: "Equal";
+                    }>>;
+                    value: z.ZodOptional<z.ZodString>;
+                    effect: z.ZodOptional<z.ZodEnum<{
+                        NoSchedule: "NoSchedule";
+                        PreferNoSchedule: "PreferNoSchedule";
+                        NoExecute: "NoExecute";
+                    }>>;
+                }, z.core.$strip>>>;
+                imagePullSecrets: z.ZodArray<z.ZodObject<{
+                    name: z.ZodString;
+                }, z.core.$strip>>;
+                adapter: z.ZodLiteral<"doks-deployment">;
+                cluster: z.ZodObject<{
+                    id: z.ZodOptional<z.ZodString>;
+                    name: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>;
+                image: z.ZodString;
+                build: z.ZodOptional<z.ZodObject<{
+                    repositoryUrl: z.ZodString;
+                    contextPath: z.ZodDefault<z.ZodString>;
+                    dockerfile: z.ZodDefault<z.ZodString>;
+                    destinationRepository: z.ZodString;
+                    builderImage: z.ZodString;
+                    serviceAccountName: z.ZodString;
+                    sourceCredential: z.ZodObject<{
+                        secretName: z.ZodString;
+                        key: z.ZodString;
+                        broker: z.ZodObject<{
+                            repositoryId: z.ZodUUID;
+                            authority: z.ZodObject<{
+                                store: z.ZodOptional<z.ZodString>;
+                                key: z.ZodString;
+                                env: z.ZodOptional<z.ZodString>;
+                            }, z.core.$strip>;
+                        }, z.core.$strip>;
+                    }, z.core.$strip>;
+                    registryCredential: z.ZodObject<{
+                        secretName: z.ZodString;
+                        key: z.ZodLiteral<"config.json">;
+                        provider: z.ZodLiteral<"digitalocean">;
+                        expirySeconds: z.ZodDefault<z.ZodNumber>;
+                    }, z.core.$strip>;
+                    packageCredential: z.ZodOptional<z.ZodObject<{
+                        secretName: z.ZodString;
+                        key: z.ZodDefault<z.ZodEnum<{
+                            ".npmrc": ".npmrc";
+                            ".bunfig.toml": ".bunfig.toml";
+                        }>>;
+                        mountPath: z.ZodDefault<z.ZodString>;
+                        authority: z.ZodObject<{
+                            store: z.ZodOptional<z.ZodString>;
+                            key: z.ZodString;
+                            env: z.ZodOptional<z.ZodString>;
+                        }, z.core.$strip>;
+                    }, z.core.$strip>>;
+                }, z.core.$strip>>;
+                resources: z.ZodObject<{
+                    requests: z.ZodObject<{
+                        cpu: z.ZodString;
+                        memory: z.ZodString;
+                    }, z.core.$strip>;
+                    limits: z.ZodObject<{
+                        cpu: z.ZodString;
+                        memory: z.ZodString;
+                    }, z.core.$strip>;
+                }, z.core.$strip>;
+                shutdown: z.ZodObject<{
+                    gracePeriodSeconds: z.ZodDefault<z.ZodNumber>;
+                    preStopDelaySeconds: z.ZodDefault<z.ZodNumber>;
+                    terminationMessage: z.ZodDefault<z.ZodString>;
+                }, z.core.$strip>;
+            }, z.core.$strip>;
+        }, z.core.$strip>, z.ZodString], null>, z.ZodObject<{
+            provider: z.ZodLiteral<"digitalocean-kubernetes">;
+            operation: z.ZodEnum<{
+                build: "build";
+                apply: "apply";
+            }>;
+            fieldManager: z.ZodLiteral<"vibes-infra-doks-worker">;
+            conflictPolicy: z.ZodLiteral<"fail">;
+            cluster: z.ZodObject<{
+                id: z.ZodOptional<z.ZodString>;
+                name: z.ZodOptional<z.ZodString>;
+            }, z.core.$strict>;
+            worker: z.ZodString;
+            namespace: z.ZodString;
+            image: z.ZodString;
+            sourceRevision: z.ZodOptional<z.ZodString>;
+            requiredSecrets: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                namespace: z.ZodString;
+                name: z.ZodString;
+                keys: z.ZodArray<z.ZodString>;
+            }, z.core.$strict>>>;
+            credentialBindings: z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+                kind: z.ZodLiteral<"source-lease">;
+                namespace: z.ZodString;
+                name: z.ZodString;
+                key: z.ZodString;
+                repositoryId: z.ZodUUID;
+                ref: z.ZodString;
+                authority: z.ZodObject<{
+                    store: z.ZodOptional<z.ZodString>;
+                    key: z.ZodString;
+                    env: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"docr">;
+                namespace: z.ZodString;
+                name: z.ZodString;
+                key: z.ZodLiteral<"config.json">;
+                expirySeconds: z.ZodNumber;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"package-registry">;
+                namespace: z.ZodString;
+                name: z.ZodString;
+                key: z.ZodEnum<{
+                    ".npmrc": ".npmrc";
+                    ".bunfig.toml": ".bunfig.toml";
+                }>;
+                authority: z.ZodObject<{
+                    store: z.ZodOptional<z.ZodString>;
+                    key: z.ZodString;
+                    env: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>;
+            }, z.core.$strict>], "kind">>>;
+            credentialLease: z.ZodOptional<z.ZodObject<{
+                operationId: z.ZodUUID;
+                repositoryId: z.ZodUUID;
+                ref: z.ZodString;
+                namespace: z.ZodString;
+                name: z.ZodString;
+                authority: z.ZodObject<{
+                    store: z.ZodOptional<z.ZodString>;
+                    key: z.ZodString;
+                    env: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>;
+            }, z.core.$strict>>;
+            resources: z.ZodArray<z.ZodObject<{
+                apiVersion: z.ZodString;
+                kind: z.ZodString;
+                namespace: z.ZodOptional<z.ZodString>;
+                name: z.ZodString;
+                manifest: z.ZodObject<{
+                    apiVersion: z.ZodString;
+                    kind: z.ZodString;
+                    metadata: z.ZodObject<{
+                        name: z.ZodString;
+                        namespace: z.ZodOptional<z.ZodString>;
+                    }, z.core.$loose>;
+                }, z.core.$loose>;
+            }, z.core.$strict>>;
+        }, z.core.$strict>>;
+        apply: z.ZodFunction<z.ZodTuple<readonly [z.ZodObject<{
+            provider: z.ZodLiteral<"digitalocean-kubernetes">;
+            operation: z.ZodEnum<{
+                build: "build";
+                apply: "apply";
+            }>;
+            fieldManager: z.ZodLiteral<"vibes-infra-doks-worker">;
+            conflictPolicy: z.ZodLiteral<"fail">;
+            cluster: z.ZodObject<{
+                id: z.ZodOptional<z.ZodString>;
+                name: z.ZodOptional<z.ZodString>;
+            }, z.core.$strict>;
+            worker: z.ZodString;
+            namespace: z.ZodString;
+            image: z.ZodString;
+            sourceRevision: z.ZodOptional<z.ZodString>;
+            requiredSecrets: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                namespace: z.ZodString;
+                name: z.ZodString;
+                keys: z.ZodArray<z.ZodString>;
+            }, z.core.$strict>>>;
+            credentialBindings: z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+                kind: z.ZodLiteral<"source-lease">;
+                namespace: z.ZodString;
+                name: z.ZodString;
+                key: z.ZodString;
+                repositoryId: z.ZodUUID;
+                ref: z.ZodString;
+                authority: z.ZodObject<{
+                    store: z.ZodOptional<z.ZodString>;
+                    key: z.ZodString;
+                    env: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"docr">;
+                namespace: z.ZodString;
+                name: z.ZodString;
+                key: z.ZodLiteral<"config.json">;
+                expirySeconds: z.ZodNumber;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"package-registry">;
+                namespace: z.ZodString;
+                name: z.ZodString;
+                key: z.ZodEnum<{
+                    ".npmrc": ".npmrc";
+                    ".bunfig.toml": ".bunfig.toml";
+                }>;
+                authority: z.ZodObject<{
+                    store: z.ZodOptional<z.ZodString>;
+                    key: z.ZodString;
+                    env: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>;
+            }, z.core.$strict>], "kind">>>;
+            credentialLease: z.ZodOptional<z.ZodObject<{
+                operationId: z.ZodUUID;
+                repositoryId: z.ZodUUID;
+                ref: z.ZodString;
+                namespace: z.ZodString;
+                name: z.ZodString;
+                authority: z.ZodObject<{
+                    store: z.ZodOptional<z.ZodString>;
+                    key: z.ZodString;
+                    env: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>;
+            }, z.core.$strict>>;
+            resources: z.ZodArray<z.ZodObject<{
+                apiVersion: z.ZodString;
+                kind: z.ZodString;
+                namespace: z.ZodOptional<z.ZodString>;
+                name: z.ZodString;
+                manifest: z.ZodObject<{
+                    apiVersion: z.ZodString;
+                    kind: z.ZodString;
+                    metadata: z.ZodObject<{
+                        name: z.ZodString;
+                        namespace: z.ZodOptional<z.ZodString>;
+                    }, z.core.$loose>;
+                }, z.core.$loose>;
+            }, z.core.$strict>>;
+        }, z.core.$strict>], null>, z.ZodPromise<z.ZodObject<{
+            provider: z.ZodLiteral<"digitalocean-kubernetes">;
+            operation: z.ZodEnum<{
+                build: "build";
+                apply: "apply";
+            }>;
+            fieldManager: z.ZodLiteral<"vibes-infra-doks-worker">;
+            conflictPolicy: z.ZodLiteral<"fail">;
+            cluster: z.ZodObject<{
+                id: z.ZodOptional<z.ZodString>;
+                name: z.ZodOptional<z.ZodString>;
+            }, z.core.$strict>;
+            worker: z.ZodString;
+            namespace: z.ZodString;
+            image: z.ZodString;
+            sourceRevision: z.ZodOptional<z.ZodString>;
+            requiredSecrets: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                namespace: z.ZodString;
+                name: z.ZodString;
+                keys: z.ZodArray<z.ZodString>;
+            }, z.core.$strict>>>;
+            credentialBindings: z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+                kind: z.ZodLiteral<"source-lease">;
+                namespace: z.ZodString;
+                name: z.ZodString;
+                key: z.ZodString;
+                repositoryId: z.ZodUUID;
+                ref: z.ZodString;
+                authority: z.ZodObject<{
+                    store: z.ZodOptional<z.ZodString>;
+                    key: z.ZodString;
+                    env: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"docr">;
+                namespace: z.ZodString;
+                name: z.ZodString;
+                key: z.ZodLiteral<"config.json">;
+                expirySeconds: z.ZodNumber;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"package-registry">;
+                namespace: z.ZodString;
+                name: z.ZodString;
+                key: z.ZodEnum<{
+                    ".npmrc": ".npmrc";
+                    ".bunfig.toml": ".bunfig.toml";
+                }>;
+                authority: z.ZodObject<{
+                    store: z.ZodOptional<z.ZodString>;
+                    key: z.ZodString;
+                    env: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>;
+            }, z.core.$strict>], "kind">>>;
+            credentialLease: z.ZodOptional<z.ZodObject<{
+                operationId: z.ZodUUID;
+                repositoryId: z.ZodUUID;
+                ref: z.ZodString;
+                namespace: z.ZodString;
+                name: z.ZodString;
+                authority: z.ZodObject<{
+                    store: z.ZodOptional<z.ZodString>;
+                    key: z.ZodString;
+                    env: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>;
+            }, z.core.$strict>>;
+            resources: z.ZodArray<z.ZodObject<{
+                apiVersion: z.ZodString;
+                kind: z.ZodString;
+                namespace: z.ZodOptional<z.ZodString>;
+                name: z.ZodString;
+                manifest: z.ZodObject<{
+                    apiVersion: z.ZodString;
+                    kind: z.ZodString;
+                    metadata: z.ZodObject<{
+                        name: z.ZodString;
+                        namespace: z.ZodOptional<z.ZodString>;
+                    }, z.core.$loose>;
+                }, z.core.$loose>;
+            }, z.core.$strict>>;
+        }, z.core.$strict>>>;
+        status: z.ZodFunction<z.ZodTuple<readonly [z.ZodObject<{
+            provider: z.ZodLiteral<"digitalocean-kubernetes">;
+            operation: z.ZodEnum<{
+                build: "build";
+                apply: "apply";
+            }>;
+            fieldManager: z.ZodLiteral<"vibes-infra-doks-worker">;
+            conflictPolicy: z.ZodLiteral<"fail">;
+            cluster: z.ZodObject<{
+                id: z.ZodOptional<z.ZodString>;
+                name: z.ZodOptional<z.ZodString>;
+            }, z.core.$strict>;
+            worker: z.ZodString;
+            namespace: z.ZodString;
+            image: z.ZodString;
+            sourceRevision: z.ZodOptional<z.ZodString>;
+            requiredSecrets: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                namespace: z.ZodString;
+                name: z.ZodString;
+                keys: z.ZodArray<z.ZodString>;
+            }, z.core.$strict>>>;
+            credentialBindings: z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+                kind: z.ZodLiteral<"source-lease">;
+                namespace: z.ZodString;
+                name: z.ZodString;
+                key: z.ZodString;
+                repositoryId: z.ZodUUID;
+                ref: z.ZodString;
+                authority: z.ZodObject<{
+                    store: z.ZodOptional<z.ZodString>;
+                    key: z.ZodString;
+                    env: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"docr">;
+                namespace: z.ZodString;
+                name: z.ZodString;
+                key: z.ZodLiteral<"config.json">;
+                expirySeconds: z.ZodNumber;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"package-registry">;
+                namespace: z.ZodString;
+                name: z.ZodString;
+                key: z.ZodEnum<{
+                    ".npmrc": ".npmrc";
+                    ".bunfig.toml": ".bunfig.toml";
+                }>;
+                authority: z.ZodObject<{
+                    store: z.ZodOptional<z.ZodString>;
+                    key: z.ZodString;
+                    env: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>;
+            }, z.core.$strict>], "kind">>>;
+            credentialLease: z.ZodOptional<z.ZodObject<{
+                operationId: z.ZodUUID;
+                repositoryId: z.ZodUUID;
+                ref: z.ZodString;
+                namespace: z.ZodString;
+                name: z.ZodString;
+                authority: z.ZodObject<{
+                    store: z.ZodOptional<z.ZodString>;
+                    key: z.ZodString;
+                    env: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>;
+            }, z.core.$strict>>;
+            resources: z.ZodArray<z.ZodObject<{
+                apiVersion: z.ZodString;
+                kind: z.ZodString;
+                namespace: z.ZodOptional<z.ZodString>;
+                name: z.ZodString;
+                manifest: z.ZodObject<{
+                    apiVersion: z.ZodString;
+                    kind: z.ZodString;
+                    metadata: z.ZodObject<{
+                        name: z.ZodString;
+                        namespace: z.ZodOptional<z.ZodString>;
+                    }, z.core.$loose>;
+                }, z.core.$loose>;
+            }, z.core.$strict>>;
+        }, z.core.$strict>], null>, z.ZodPromise<z.ZodObject<{
+            errors: z.ZodOptional<z.ZodArray<z.ZodInstanceOf<import("@vibesdotdev/kernel").CapabilityError>>>;
+            state: z.ZodEnum<{
+                failed: "failed";
+                pending: "pending";
+                succeeded: "succeeded";
+            }>;
+            reason: z.ZodString;
+            worker: z.ZodString;
+            operation: z.ZodEnum<{
+                build: "build";
+                apply: "apply";
+            }>;
+        }, z.core.$strict>>>;
+    }, z.core.$strip>>>;
+}, z.core.$strip>;
+export type DigitalOceanDoksWorkerInfraImplementation = z.infer<typeof DigitalOceanDoksWorkerInfraImplementationSchema>;
+/**
+ * The execution owner exposes the same adapter shape Infra Deploy consumes.
+ * Its apply/status closures reduce caller plans to operation identity and
+ * re-derive the authorized plan from the runtime-selected descriptor.
+ */
+export declare const DigitalOceanDoksWorkerExecutionOwnerSchema: z.ZodObject<{
+    planApply: z.ZodFunction<z.ZodTuple<readonly [z.ZodObject<{
+        id: z.ZodString;
+        name: z.ZodOptional<z.ZodString>;
+        description: z.ZodOptional<z.ZodString>;
+        tags: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        hardware: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        enabled: z.ZodOptional<z.ZodBoolean>;
+        priority: z.ZodOptional<z.ZodNumber>;
+        capabilityId: z.ZodOptional<z.ZodString>;
+        requiredContext: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        optionalContext: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        retention: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+            maxAgeDays: z.ZodOptional<z.ZodNumber>;
+            maxEntries: z.ZodOptional<z.ZodNumber>;
+            maxBytes: z.ZodOptional<z.ZodNumber>;
+            cascadeFrom: z.ZodOptional<z.ZodString>;
+            ageField: z.ZodOptional<z.ZodString>;
+            reason: z.ZodString;
+            enforcedBy: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>]>>;
+        kind: z.ZodLiteral<"infra/worker">;
+        queues: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        concurrency: z.ZodOptional<z.ZodNumber>;
+        scaling: z.ZodOptional<z.ZodObject<{
+            min: z.ZodDefault<z.ZodNumber>;
+            max: z.ZodDefault<z.ZodNumber>;
+            cpu: z.ZodOptional<z.ZodString>;
+            memory: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+        env: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            name: z.ZodString;
+            public: z.ZodOptional<z.ZodBoolean>;
+            required: z.ZodOptional<z.ZodBoolean>;
+            value: z.ZodOptional<z.ZodString>;
+            secret: z.ZodOptional<z.ZodBoolean>;
+            description: z.ZodOptional<z.ZodString>;
+            storeKey: z.ZodOptional<z.ZodString>;
+            storeBinding: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strip>>>;
+        entrypoint: z.ZodString;
+        runtime: z.ZodObject<{
+            scope: z.ZodObject<{
+                surface: z.ZodEnum<{
+                    agent: "agent";
+                    browser: "browser";
+                    ssr: "ssr";
+                    cli: "cli";
+                    tui: "tui";
+                    worker: "worker";
+                    mcp: "mcp";
+                    bridge: "bridge";
+                }>;
+                hardware: z.ZodEnum<{
+                    consumer: "consumer";
+                    cloud: "cloud";
+                }>;
+                purpose: z.ZodEnum<{
+                    agent: "agent";
+                    worker: "worker";
+                    mcp: "mcp";
+                    direct: "direct";
+                    projection: "projection";
+                }>;
+                hosting: z.ZodObject<{
+                    mode: z.ZodUnion<readonly [z.ZodEnum<{
+                        local: "local";
+                        hosted: "hosted";
+                        "managed-cloud": "managed-cloud";
+                    }>, z.ZodString]>;
+                    owner: z.ZodUnion<readonly [z.ZodEnum<{
+                        consumer: "consumer";
+                        customer: "customer";
+                        vibes: "vibes";
+                    }>, z.ZodString]>;
+                    venue: z.ZodOptional<z.ZodUnion<readonly [z.ZodEnum<{
+                        "user-device": "user-device";
+                        "ipc-worker": "ipc-worker";
+                        doks: "doks";
+                        "cloudflare-workers": "cloudflare-workers";
+                        "digitalocean-functions": "digitalocean-functions";
+                    }>, z.ZodString]>>;
+                    provider: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>;
+                capabilities: z.ZodOptional<z.ZodObject<{
+                    requestPrincipals: z.ZodOptional<z.ZodBoolean>;
+                    interactiveSession: z.ZodOptional<z.ZodBoolean>;
+                    hostCredentials: z.ZodOptional<z.ZodBoolean>;
+                    sharedHost: z.ZodOptional<z.ZodBoolean>;
+                }, z.core.$strict>>;
+                workspace: z.ZodOptional<z.ZodObject<{
+                    root: z.ZodOptional<z.ZodString>;
+                    access: z.ZodOptional<z.ZodEnum<{
+                        read: "read";
+                        write: "write";
+                    }>>;
+                }, z.core.$strict>>;
+                tenancy: z.ZodOptional<z.ZodObject<{
+                    ownerType: z.ZodEnum<{
+                        user: "user";
+                        organization: "organization";
+                        team: "team";
+                        system: "system";
+                    }>;
+                    ownerId: z.ZodString;
+                    teamId: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>>;
+                actor: z.ZodOptional<z.ZodObject<{
+                    agentId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                    harness: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                    agentSystemId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                    harnessSessionId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                    userId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                    orgId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                    projectId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                    teamId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                    home: z.ZodOptional<z.ZodEnum<{
+                        user: "user";
+                        organization: "organization";
+                        team: "team";
+                    }>>;
+                    projectIds: z.ZodOptional<z.ZodReadonly<z.ZodArray<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>>>;
+                    participantId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                    sessionId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                    instanceId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                }, z.core.$strip>>;
+                lifecycle: z.ZodDefault<z.ZodEnum<{
+                    finite: "finite";
+                    persistent: "persistent";
+                }>>;
+                qualifiers: z.ZodDefault<z.ZodObject<{
+                    dev: z.ZodBoolean;
+                    building: z.ZodOptional<z.ZodBoolean>;
+                    environmentTier: z.ZodOptional<z.ZodEnum<{
+                        local: "local";
+                        dev: "dev";
+                        staging: "staging";
+                        production: "production";
+                    }>>;
+                    profile: z.ZodOptional<z.ZodString>;
+                    os: z.ZodOptional<z.ZodString>;
+                    cef: z.ZodOptional<z.ZodBoolean>;
+                    trustedOrigin: z.ZodOptional<z.ZodString>;
+                    rendererGeneration: z.ZodOptional<z.ZodNumber>;
+                    filesystem: z.ZodOptional<z.ZodString>;
+                    browserBackend: z.ZodOptional<z.ZodString>;
+                    workspaceSessionId: z.ZodOptional<z.ZodString>;
+                    workspaceTarget: z.ZodOptional<z.ZodString>;
+                    repositoryId: z.ZodOptional<z.ZodString>;
+                    remoteHostId: z.ZodOptional<z.ZodString>;
+                    connectionMode: z.ZodOptional<z.ZodString>;
+                    outreachExportsDir: z.ZodOptional<z.ZodString>;
+                    serve: z.ZodOptional<z.ZodString>;
+                    hotReload: z.ZodOptional<z.ZodEnum<{
+                        on: "on";
+                        off: "off";
+                    }>>;
+                    loaderTimeoutMs: z.ZodOptional<z.ZodNumber>;
+                }, z.core.$strict>>;
+            }, z.core.$strip>;
+            adapter: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>;
+        config: z.ZodObject<{
+            namespace: z.ZodString;
+            healthPort: z.ZodDefault<z.ZodNumber>;
+            healthPath: z.ZodDefault<z.ZodString>;
+            readyPath: z.ZodDefault<z.ZodString>;
+            serviceAccountName: z.ZodString;
+            disruption: z.ZodDefault<z.ZodObject<{
+                minAvailable: z.ZodDefault<z.ZodUnion<readonly [z.ZodNumber, z.ZodString]>>;
+            }, z.core.$strip>>;
+            nodeSelector: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            tolerations: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                key: z.ZodOptional<z.ZodString>;
+                operator: z.ZodOptional<z.ZodEnum<{
+                    Exists: "Exists";
+                    Equal: "Equal";
+                }>>;
+                value: z.ZodOptional<z.ZodString>;
+                effect: z.ZodOptional<z.ZodEnum<{
+                    NoSchedule: "NoSchedule";
+                    PreferNoSchedule: "PreferNoSchedule";
+                    NoExecute: "NoExecute";
+                }>>;
+            }, z.core.$strip>>>;
+            imagePullSecrets: z.ZodArray<z.ZodObject<{
+                name: z.ZodString;
+            }, z.core.$strip>>;
+            adapter: z.ZodLiteral<"doks-deployment">;
+            cluster: z.ZodObject<{
+                id: z.ZodOptional<z.ZodString>;
+                name: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>;
+            image: z.ZodString;
+            build: z.ZodOptional<z.ZodObject<{
+                repositoryUrl: z.ZodString;
+                contextPath: z.ZodDefault<z.ZodString>;
+                dockerfile: z.ZodDefault<z.ZodString>;
+                destinationRepository: z.ZodString;
+                builderImage: z.ZodString;
+                serviceAccountName: z.ZodString;
+                sourceCredential: z.ZodObject<{
+                    secretName: z.ZodString;
+                    key: z.ZodString;
+                    broker: z.ZodObject<{
+                        repositoryId: z.ZodUUID;
+                        authority: z.ZodObject<{
+                            store: z.ZodOptional<z.ZodString>;
+                            key: z.ZodString;
+                            env: z.ZodOptional<z.ZodString>;
+                        }, z.core.$strip>;
+                    }, z.core.$strip>;
+                }, z.core.$strip>;
+                registryCredential: z.ZodObject<{
+                    secretName: z.ZodString;
+                    key: z.ZodLiteral<"config.json">;
+                    provider: z.ZodLiteral<"digitalocean">;
+                    expirySeconds: z.ZodDefault<z.ZodNumber>;
+                }, z.core.$strip>;
+                packageCredential: z.ZodOptional<z.ZodObject<{
+                    secretName: z.ZodString;
+                    key: z.ZodDefault<z.ZodEnum<{
+                        ".npmrc": ".npmrc";
+                        ".bunfig.toml": ".bunfig.toml";
+                    }>>;
+                    mountPath: z.ZodDefault<z.ZodString>;
+                    authority: z.ZodObject<{
+                        store: z.ZodOptional<z.ZodString>;
+                        key: z.ZodString;
+                        env: z.ZodOptional<z.ZodString>;
+                    }, z.core.$strip>;
+                }, z.core.$strip>>;
+            }, z.core.$strip>>;
+            resources: z.ZodObject<{
+                requests: z.ZodObject<{
+                    cpu: z.ZodString;
+                    memory: z.ZodString;
+                }, z.core.$strip>;
+                limits: z.ZodObject<{
+                    cpu: z.ZodString;
+                    memory: z.ZodString;
+                }, z.core.$strip>;
+            }, z.core.$strip>;
+            shutdown: z.ZodObject<{
+                gracePeriodSeconds: z.ZodDefault<z.ZodNumber>;
+                preStopDelaySeconds: z.ZodDefault<z.ZodNumber>;
+                terminationMessage: z.ZodDefault<z.ZodString>;
+            }, z.core.$strip>;
+        }, z.core.$strip>;
+    }, z.core.$strip>], null>, z.ZodObject<{
+        provider: z.ZodLiteral<"digitalocean-kubernetes">;
+        operation: z.ZodEnum<{
+            build: "build";
+            apply: "apply";
+        }>;
+        fieldManager: z.ZodLiteral<"vibes-infra-doks-worker">;
+        conflictPolicy: z.ZodLiteral<"fail">;
+        cluster: z.ZodObject<{
+            id: z.ZodOptional<z.ZodString>;
+            name: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>;
+        worker: z.ZodString;
+        namespace: z.ZodString;
+        image: z.ZodString;
+        sourceRevision: z.ZodOptional<z.ZodString>;
+        requiredSecrets: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            namespace: z.ZodString;
+            name: z.ZodString;
+            keys: z.ZodArray<z.ZodString>;
+        }, z.core.$strict>>>;
+        credentialBindings: z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"source-lease">;
+            namespace: z.ZodString;
+            name: z.ZodString;
+            key: z.ZodString;
+            repositoryId: z.ZodUUID;
+            ref: z.ZodString;
+            authority: z.ZodObject<{
+                store: z.ZodOptional<z.ZodString>;
+                key: z.ZodString;
+                env: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"docr">;
+            namespace: z.ZodString;
+            name: z.ZodString;
+            key: z.ZodLiteral<"config.json">;
+            expirySeconds: z.ZodNumber;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"package-registry">;
+            namespace: z.ZodString;
+            name: z.ZodString;
+            key: z.ZodEnum<{
+                ".npmrc": ".npmrc";
+                ".bunfig.toml": ".bunfig.toml";
+            }>;
+            authority: z.ZodObject<{
+                store: z.ZodOptional<z.ZodString>;
+                key: z.ZodString;
+                env: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>;
+        }, z.core.$strict>], "kind">>>;
+        credentialLease: z.ZodOptional<z.ZodObject<{
+            operationId: z.ZodUUID;
+            repositoryId: z.ZodUUID;
+            ref: z.ZodString;
+            namespace: z.ZodString;
+            name: z.ZodString;
+            authority: z.ZodObject<{
+                store: z.ZodOptional<z.ZodString>;
+                key: z.ZodString;
+                env: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>;
+        }, z.core.$strict>>;
+        resources: z.ZodArray<z.ZodObject<{
+            apiVersion: z.ZodString;
+            kind: z.ZodString;
+            namespace: z.ZodOptional<z.ZodString>;
+            name: z.ZodString;
+            manifest: z.ZodObject<{
+                apiVersion: z.ZodString;
+                kind: z.ZodString;
+                metadata: z.ZodObject<{
+                    name: z.ZodString;
+                    namespace: z.ZodOptional<z.ZodString>;
+                }, z.core.$loose>;
+            }, z.core.$loose>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>;
+    planBuild: z.ZodFunction<z.ZodTuple<readonly [z.ZodObject<{
+        id: z.ZodString;
+        name: z.ZodOptional<z.ZodString>;
+        description: z.ZodOptional<z.ZodString>;
+        tags: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        hardware: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        enabled: z.ZodOptional<z.ZodBoolean>;
+        priority: z.ZodOptional<z.ZodNumber>;
+        capabilityId: z.ZodOptional<z.ZodString>;
+        requiredContext: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        optionalContext: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        retention: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+            maxAgeDays: z.ZodOptional<z.ZodNumber>;
+            maxEntries: z.ZodOptional<z.ZodNumber>;
+            maxBytes: z.ZodOptional<z.ZodNumber>;
+            cascadeFrom: z.ZodOptional<z.ZodString>;
+            ageField: z.ZodOptional<z.ZodString>;
+            reason: z.ZodString;
+            enforcedBy: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>]>>;
+        kind: z.ZodLiteral<"infra/worker">;
+        queues: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        concurrency: z.ZodOptional<z.ZodNumber>;
+        scaling: z.ZodOptional<z.ZodObject<{
+            min: z.ZodDefault<z.ZodNumber>;
+            max: z.ZodDefault<z.ZodNumber>;
+            cpu: z.ZodOptional<z.ZodString>;
+            memory: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+        env: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            name: z.ZodString;
+            public: z.ZodOptional<z.ZodBoolean>;
+            required: z.ZodOptional<z.ZodBoolean>;
+            value: z.ZodOptional<z.ZodString>;
+            secret: z.ZodOptional<z.ZodBoolean>;
+            description: z.ZodOptional<z.ZodString>;
+            storeKey: z.ZodOptional<z.ZodString>;
+            storeBinding: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strip>>>;
+        entrypoint: z.ZodString;
+        runtime: z.ZodObject<{
+            scope: z.ZodObject<{
+                surface: z.ZodEnum<{
+                    agent: "agent";
+                    browser: "browser";
+                    ssr: "ssr";
+                    cli: "cli";
+                    tui: "tui";
+                    worker: "worker";
+                    mcp: "mcp";
+                    bridge: "bridge";
+                }>;
+                hardware: z.ZodEnum<{
+                    consumer: "consumer";
+                    cloud: "cloud";
+                }>;
+                purpose: z.ZodEnum<{
+                    agent: "agent";
+                    worker: "worker";
+                    mcp: "mcp";
+                    direct: "direct";
+                    projection: "projection";
+                }>;
+                hosting: z.ZodObject<{
+                    mode: z.ZodUnion<readonly [z.ZodEnum<{
+                        local: "local";
+                        hosted: "hosted";
+                        "managed-cloud": "managed-cloud";
+                    }>, z.ZodString]>;
+                    owner: z.ZodUnion<readonly [z.ZodEnum<{
+                        consumer: "consumer";
+                        customer: "customer";
+                        vibes: "vibes";
+                    }>, z.ZodString]>;
+                    venue: z.ZodOptional<z.ZodUnion<readonly [z.ZodEnum<{
+                        "user-device": "user-device";
+                        "ipc-worker": "ipc-worker";
+                        doks: "doks";
+                        "cloudflare-workers": "cloudflare-workers";
+                        "digitalocean-functions": "digitalocean-functions";
+                    }>, z.ZodString]>>;
+                    provider: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>;
+                capabilities: z.ZodOptional<z.ZodObject<{
+                    requestPrincipals: z.ZodOptional<z.ZodBoolean>;
+                    interactiveSession: z.ZodOptional<z.ZodBoolean>;
+                    hostCredentials: z.ZodOptional<z.ZodBoolean>;
+                    sharedHost: z.ZodOptional<z.ZodBoolean>;
+                }, z.core.$strict>>;
+                workspace: z.ZodOptional<z.ZodObject<{
+                    root: z.ZodOptional<z.ZodString>;
+                    access: z.ZodOptional<z.ZodEnum<{
+                        read: "read";
+                        write: "write";
+                    }>>;
+                }, z.core.$strict>>;
+                tenancy: z.ZodOptional<z.ZodObject<{
+                    ownerType: z.ZodEnum<{
+                        user: "user";
+                        organization: "organization";
+                        team: "team";
+                        system: "system";
+                    }>;
+                    ownerId: z.ZodString;
+                    teamId: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>>;
+                actor: z.ZodOptional<z.ZodObject<{
+                    agentId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                    harness: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                    agentSystemId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                    harnessSessionId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                    userId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                    orgId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                    projectId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                    teamId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                    home: z.ZodOptional<z.ZodEnum<{
+                        user: "user";
+                        organization: "organization";
+                        team: "team";
+                    }>>;
+                    projectIds: z.ZodOptional<z.ZodReadonly<z.ZodArray<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>>>;
+                    participantId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                    sessionId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                    instanceId: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
+                }, z.core.$strip>>;
+                lifecycle: z.ZodDefault<z.ZodEnum<{
+                    finite: "finite";
+                    persistent: "persistent";
+                }>>;
+                qualifiers: z.ZodDefault<z.ZodObject<{
+                    dev: z.ZodBoolean;
+                    building: z.ZodOptional<z.ZodBoolean>;
+                    environmentTier: z.ZodOptional<z.ZodEnum<{
+                        local: "local";
+                        dev: "dev";
+                        staging: "staging";
+                        production: "production";
+                    }>>;
+                    profile: z.ZodOptional<z.ZodString>;
+                    os: z.ZodOptional<z.ZodString>;
+                    cef: z.ZodOptional<z.ZodBoolean>;
+                    trustedOrigin: z.ZodOptional<z.ZodString>;
+                    rendererGeneration: z.ZodOptional<z.ZodNumber>;
+                    filesystem: z.ZodOptional<z.ZodString>;
+                    browserBackend: z.ZodOptional<z.ZodString>;
+                    workspaceSessionId: z.ZodOptional<z.ZodString>;
+                    workspaceTarget: z.ZodOptional<z.ZodString>;
+                    repositoryId: z.ZodOptional<z.ZodString>;
+                    remoteHostId: z.ZodOptional<z.ZodString>;
+                    connectionMode: z.ZodOptional<z.ZodString>;
+                    outreachExportsDir: z.ZodOptional<z.ZodString>;
+                    serve: z.ZodOptional<z.ZodString>;
+                    hotReload: z.ZodOptional<z.ZodEnum<{
+                        on: "on";
+                        off: "off";
+                    }>>;
+                    loaderTimeoutMs: z.ZodOptional<z.ZodNumber>;
+                }, z.core.$strict>>;
+            }, z.core.$strip>;
+            adapter: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>;
+        config: z.ZodObject<{
+            namespace: z.ZodString;
+            healthPort: z.ZodDefault<z.ZodNumber>;
+            healthPath: z.ZodDefault<z.ZodString>;
+            readyPath: z.ZodDefault<z.ZodString>;
+            serviceAccountName: z.ZodString;
+            disruption: z.ZodDefault<z.ZodObject<{
+                minAvailable: z.ZodDefault<z.ZodUnion<readonly [z.ZodNumber, z.ZodString]>>;
+            }, z.core.$strip>>;
+            nodeSelector: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            tolerations: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                key: z.ZodOptional<z.ZodString>;
+                operator: z.ZodOptional<z.ZodEnum<{
+                    Exists: "Exists";
+                    Equal: "Equal";
+                }>>;
+                value: z.ZodOptional<z.ZodString>;
+                effect: z.ZodOptional<z.ZodEnum<{
+                    NoSchedule: "NoSchedule";
+                    PreferNoSchedule: "PreferNoSchedule";
+                    NoExecute: "NoExecute";
+                }>>;
+            }, z.core.$strip>>>;
+            imagePullSecrets: z.ZodArray<z.ZodObject<{
+                name: z.ZodString;
+            }, z.core.$strip>>;
+            adapter: z.ZodLiteral<"doks-deployment">;
+            cluster: z.ZodObject<{
+                id: z.ZodOptional<z.ZodString>;
+                name: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>;
+            image: z.ZodString;
+            build: z.ZodOptional<z.ZodObject<{
+                repositoryUrl: z.ZodString;
+                contextPath: z.ZodDefault<z.ZodString>;
+                dockerfile: z.ZodDefault<z.ZodString>;
+                destinationRepository: z.ZodString;
+                builderImage: z.ZodString;
+                serviceAccountName: z.ZodString;
+                sourceCredential: z.ZodObject<{
+                    secretName: z.ZodString;
+                    key: z.ZodString;
+                    broker: z.ZodObject<{
+                        repositoryId: z.ZodUUID;
+                        authority: z.ZodObject<{
+                            store: z.ZodOptional<z.ZodString>;
+                            key: z.ZodString;
+                            env: z.ZodOptional<z.ZodString>;
+                        }, z.core.$strip>;
+                    }, z.core.$strip>;
+                }, z.core.$strip>;
+                registryCredential: z.ZodObject<{
+                    secretName: z.ZodString;
+                    key: z.ZodLiteral<"config.json">;
+                    provider: z.ZodLiteral<"digitalocean">;
+                    expirySeconds: z.ZodDefault<z.ZodNumber>;
+                }, z.core.$strip>;
+                packageCredential: z.ZodOptional<z.ZodObject<{
+                    secretName: z.ZodString;
+                    key: z.ZodDefault<z.ZodEnum<{
+                        ".npmrc": ".npmrc";
+                        ".bunfig.toml": ".bunfig.toml";
+                    }>>;
+                    mountPath: z.ZodDefault<z.ZodString>;
+                    authority: z.ZodObject<{
+                        store: z.ZodOptional<z.ZodString>;
+                        key: z.ZodString;
+                        env: z.ZodOptional<z.ZodString>;
+                    }, z.core.$strip>;
+                }, z.core.$strip>>;
+            }, z.core.$strip>>;
+            resources: z.ZodObject<{
+                requests: z.ZodObject<{
+                    cpu: z.ZodString;
+                    memory: z.ZodString;
+                }, z.core.$strip>;
+                limits: z.ZodObject<{
+                    cpu: z.ZodString;
+                    memory: z.ZodString;
+                }, z.core.$strip>;
+            }, z.core.$strip>;
+            shutdown: z.ZodObject<{
+                gracePeriodSeconds: z.ZodDefault<z.ZodNumber>;
+                preStopDelaySeconds: z.ZodDefault<z.ZodNumber>;
+                terminationMessage: z.ZodDefault<z.ZodString>;
+            }, z.core.$strip>;
+        }, z.core.$strip>;
+    }, z.core.$strip>, z.ZodString], null>, z.ZodObject<{
+        provider: z.ZodLiteral<"digitalocean-kubernetes">;
+        operation: z.ZodEnum<{
+            build: "build";
+            apply: "apply";
+        }>;
+        fieldManager: z.ZodLiteral<"vibes-infra-doks-worker">;
+        conflictPolicy: z.ZodLiteral<"fail">;
+        cluster: z.ZodObject<{
+            id: z.ZodOptional<z.ZodString>;
+            name: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>;
+        worker: z.ZodString;
+        namespace: z.ZodString;
+        image: z.ZodString;
+        sourceRevision: z.ZodOptional<z.ZodString>;
+        requiredSecrets: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            namespace: z.ZodString;
+            name: z.ZodString;
+            keys: z.ZodArray<z.ZodString>;
+        }, z.core.$strict>>>;
+        credentialBindings: z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"source-lease">;
+            namespace: z.ZodString;
+            name: z.ZodString;
+            key: z.ZodString;
+            repositoryId: z.ZodUUID;
+            ref: z.ZodString;
+            authority: z.ZodObject<{
+                store: z.ZodOptional<z.ZodString>;
+                key: z.ZodString;
+                env: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"docr">;
+            namespace: z.ZodString;
+            name: z.ZodString;
+            key: z.ZodLiteral<"config.json">;
+            expirySeconds: z.ZodNumber;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"package-registry">;
+            namespace: z.ZodString;
+            name: z.ZodString;
+            key: z.ZodEnum<{
+                ".npmrc": ".npmrc";
+                ".bunfig.toml": ".bunfig.toml";
+            }>;
+            authority: z.ZodObject<{
+                store: z.ZodOptional<z.ZodString>;
+                key: z.ZodString;
+                env: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>;
+        }, z.core.$strict>], "kind">>>;
+        credentialLease: z.ZodOptional<z.ZodObject<{
+            operationId: z.ZodUUID;
+            repositoryId: z.ZodUUID;
+            ref: z.ZodString;
+            namespace: z.ZodString;
+            name: z.ZodString;
+            authority: z.ZodObject<{
+                store: z.ZodOptional<z.ZodString>;
+                key: z.ZodString;
+                env: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>;
+        }, z.core.$strict>>;
+        resources: z.ZodArray<z.ZodObject<{
+            apiVersion: z.ZodString;
+            kind: z.ZodString;
+            namespace: z.ZodOptional<z.ZodString>;
+            name: z.ZodString;
+            manifest: z.ZodObject<{
+                apiVersion: z.ZodString;
+                kind: z.ZodString;
+                metadata: z.ZodObject<{
+                    name: z.ZodString;
+                    namespace: z.ZodOptional<z.ZodString>;
+                }, z.core.$loose>;
+            }, z.core.$loose>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>;
+    apply: z.ZodFunction<z.ZodTuple<readonly [z.ZodObject<{
+        provider: z.ZodLiteral<"digitalocean-kubernetes">;
+        operation: z.ZodEnum<{
+            build: "build";
+            apply: "apply";
+        }>;
+        fieldManager: z.ZodLiteral<"vibes-infra-doks-worker">;
+        conflictPolicy: z.ZodLiteral<"fail">;
+        cluster: z.ZodObject<{
+            id: z.ZodOptional<z.ZodString>;
+            name: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>;
+        worker: z.ZodString;
+        namespace: z.ZodString;
+        image: z.ZodString;
+        sourceRevision: z.ZodOptional<z.ZodString>;
+        requiredSecrets: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            namespace: z.ZodString;
+            name: z.ZodString;
+            keys: z.ZodArray<z.ZodString>;
+        }, z.core.$strict>>>;
+        credentialBindings: z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"source-lease">;
+            namespace: z.ZodString;
+            name: z.ZodString;
+            key: z.ZodString;
+            repositoryId: z.ZodUUID;
+            ref: z.ZodString;
+            authority: z.ZodObject<{
+                store: z.ZodOptional<z.ZodString>;
+                key: z.ZodString;
+                env: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"docr">;
+            namespace: z.ZodString;
+            name: z.ZodString;
+            key: z.ZodLiteral<"config.json">;
+            expirySeconds: z.ZodNumber;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"package-registry">;
+            namespace: z.ZodString;
+            name: z.ZodString;
+            key: z.ZodEnum<{
+                ".npmrc": ".npmrc";
+                ".bunfig.toml": ".bunfig.toml";
+            }>;
+            authority: z.ZodObject<{
+                store: z.ZodOptional<z.ZodString>;
+                key: z.ZodString;
+                env: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>;
+        }, z.core.$strict>], "kind">>>;
+        credentialLease: z.ZodOptional<z.ZodObject<{
+            operationId: z.ZodUUID;
+            repositoryId: z.ZodUUID;
+            ref: z.ZodString;
+            namespace: z.ZodString;
+            name: z.ZodString;
+            authority: z.ZodObject<{
+                store: z.ZodOptional<z.ZodString>;
+                key: z.ZodString;
+                env: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>;
+        }, z.core.$strict>>;
+        resources: z.ZodArray<z.ZodObject<{
+            apiVersion: z.ZodString;
+            kind: z.ZodString;
+            namespace: z.ZodOptional<z.ZodString>;
+            name: z.ZodString;
+            manifest: z.ZodObject<{
+                apiVersion: z.ZodString;
+                kind: z.ZodString;
+                metadata: z.ZodObject<{
+                    name: z.ZodString;
+                    namespace: z.ZodOptional<z.ZodString>;
+                }, z.core.$loose>;
+            }, z.core.$loose>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>], null>, z.ZodPromise<z.ZodObject<{
+        provider: z.ZodLiteral<"digitalocean-kubernetes">;
+        operation: z.ZodEnum<{
+            build: "build";
+            apply: "apply";
+        }>;
+        fieldManager: z.ZodLiteral<"vibes-infra-doks-worker">;
+        conflictPolicy: z.ZodLiteral<"fail">;
+        cluster: z.ZodObject<{
+            id: z.ZodOptional<z.ZodString>;
+            name: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>;
+        worker: z.ZodString;
+        namespace: z.ZodString;
+        image: z.ZodString;
+        sourceRevision: z.ZodOptional<z.ZodString>;
+        requiredSecrets: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            namespace: z.ZodString;
+            name: z.ZodString;
+            keys: z.ZodArray<z.ZodString>;
+        }, z.core.$strict>>>;
+        credentialBindings: z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"source-lease">;
+            namespace: z.ZodString;
+            name: z.ZodString;
+            key: z.ZodString;
+            repositoryId: z.ZodUUID;
+            ref: z.ZodString;
+            authority: z.ZodObject<{
+                store: z.ZodOptional<z.ZodString>;
+                key: z.ZodString;
+                env: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"docr">;
+            namespace: z.ZodString;
+            name: z.ZodString;
+            key: z.ZodLiteral<"config.json">;
+            expirySeconds: z.ZodNumber;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"package-registry">;
+            namespace: z.ZodString;
+            name: z.ZodString;
+            key: z.ZodEnum<{
+                ".npmrc": ".npmrc";
+                ".bunfig.toml": ".bunfig.toml";
+            }>;
+            authority: z.ZodObject<{
+                store: z.ZodOptional<z.ZodString>;
+                key: z.ZodString;
+                env: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>;
+        }, z.core.$strict>], "kind">>>;
+        credentialLease: z.ZodOptional<z.ZodObject<{
+            operationId: z.ZodUUID;
+            repositoryId: z.ZodUUID;
+            ref: z.ZodString;
+            namespace: z.ZodString;
+            name: z.ZodString;
+            authority: z.ZodObject<{
+                store: z.ZodOptional<z.ZodString>;
+                key: z.ZodString;
+                env: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>;
+        }, z.core.$strict>>;
+        resources: z.ZodArray<z.ZodObject<{
+            apiVersion: z.ZodString;
+            kind: z.ZodString;
+            namespace: z.ZodOptional<z.ZodString>;
+            name: z.ZodString;
+            manifest: z.ZodObject<{
+                apiVersion: z.ZodString;
+                kind: z.ZodString;
+                metadata: z.ZodObject<{
+                    name: z.ZodString;
+                    namespace: z.ZodOptional<z.ZodString>;
+                }, z.core.$loose>;
+            }, z.core.$loose>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>>;
+    status: z.ZodFunction<z.ZodTuple<readonly [z.ZodObject<{
+        provider: z.ZodLiteral<"digitalocean-kubernetes">;
+        operation: z.ZodEnum<{
+            build: "build";
+            apply: "apply";
+        }>;
+        fieldManager: z.ZodLiteral<"vibes-infra-doks-worker">;
+        conflictPolicy: z.ZodLiteral<"fail">;
+        cluster: z.ZodObject<{
+            id: z.ZodOptional<z.ZodString>;
+            name: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>;
+        worker: z.ZodString;
+        namespace: z.ZodString;
+        image: z.ZodString;
+        sourceRevision: z.ZodOptional<z.ZodString>;
+        requiredSecrets: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            namespace: z.ZodString;
+            name: z.ZodString;
+            keys: z.ZodArray<z.ZodString>;
+        }, z.core.$strict>>>;
+        credentialBindings: z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"source-lease">;
+            namespace: z.ZodString;
+            name: z.ZodString;
+            key: z.ZodString;
+            repositoryId: z.ZodUUID;
+            ref: z.ZodString;
+            authority: z.ZodObject<{
+                store: z.ZodOptional<z.ZodString>;
+                key: z.ZodString;
+                env: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"docr">;
+            namespace: z.ZodString;
+            name: z.ZodString;
+            key: z.ZodLiteral<"config.json">;
+            expirySeconds: z.ZodNumber;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"package-registry">;
+            namespace: z.ZodString;
+            name: z.ZodString;
+            key: z.ZodEnum<{
+                ".npmrc": ".npmrc";
+                ".bunfig.toml": ".bunfig.toml";
+            }>;
+            authority: z.ZodObject<{
+                store: z.ZodOptional<z.ZodString>;
+                key: z.ZodString;
+                env: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>;
+        }, z.core.$strict>], "kind">>>;
+        credentialLease: z.ZodOptional<z.ZodObject<{
+            operationId: z.ZodUUID;
+            repositoryId: z.ZodUUID;
+            ref: z.ZodString;
+            namespace: z.ZodString;
+            name: z.ZodString;
+            authority: z.ZodObject<{
+                store: z.ZodOptional<z.ZodString>;
+                key: z.ZodString;
+                env: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>;
+        }, z.core.$strict>>;
+        resources: z.ZodArray<z.ZodObject<{
+            apiVersion: z.ZodString;
+            kind: z.ZodString;
+            namespace: z.ZodOptional<z.ZodString>;
+            name: z.ZodString;
+            manifest: z.ZodObject<{
+                apiVersion: z.ZodString;
+                kind: z.ZodString;
+                metadata: z.ZodObject<{
+                    name: z.ZodString;
+                    namespace: z.ZodOptional<z.ZodString>;
+                }, z.core.$loose>;
+            }, z.core.$loose>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>], null>, z.ZodPromise<z.ZodObject<{
+        errors: z.ZodOptional<z.ZodArray<z.ZodInstanceOf<import("@vibesdotdev/kernel").CapabilityError>>>;
+        state: z.ZodEnum<{
+            failed: "failed";
+            pending: "pending";
+            succeeded: "succeeded";
+        }>;
+        reason: z.ZodString;
+        worker: z.ZodString;
+        operation: z.ZodEnum<{
+            build: "build";
+            apply: "apply";
+        }>;
+    }, z.core.$strict>>>;
+}, z.core.$strip>;
+export type DigitalOceanDoksWorkerExecutionOwner = z.infer<typeof DigitalOceanDoksWorkerExecutionOwnerSchema>;
+export declare const DigitalOceanDoksWorkerBuildInputSchema: z.ZodObject<{
+    sha: z.ZodString;
+}, z.core.$strict>;
+export type DigitalOceanDoksWorkerBuildInput = z.infer<typeof DigitalOceanDoksWorkerBuildInputSchema>;
+/**
+ * The delivery contract worker execution resolves as a semantic runtime client.
+ *
+ * Admission checks the two delivery members and their signatures; the resolved
+ * value is a `BaseRuntimeClient`, so its lifecycle members (`id`, `runtime`,
+ * `load`, `dispose`, …) are not part of the contract and are not refused.
+ */
+export declare const DigitalOceanDoksWorkerCredentialDeliveryOwnerSchema: z.ZodObject<{
+    admitWorkerCredentials: z.ZodFunction<z.ZodTuple<readonly [z.ZodObject<{
+        provider: z.ZodLiteral<"digitalocean-kubernetes">;
+        operation: z.ZodEnum<{
+            build: "build";
+            apply: "apply";
+        }>;
+        fieldManager: z.ZodLiteral<"vibes-infra-doks-worker">;
+        conflictPolicy: z.ZodLiteral<"fail">;
+        cluster: z.ZodObject<{
+            id: z.ZodOptional<z.ZodString>;
+            name: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>;
+        worker: z.ZodString;
+        namespace: z.ZodString;
+        image: z.ZodString;
+        sourceRevision: z.ZodOptional<z.ZodString>;
+        requiredSecrets: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            namespace: z.ZodString;
+            name: z.ZodString;
+            keys: z.ZodArray<z.ZodString>;
+        }, z.core.$strict>>>;
+        credentialBindings: z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"source-lease">;
+            namespace: z.ZodString;
+            name: z.ZodString;
+            key: z.ZodString;
+            repositoryId: z.ZodUUID;
+            ref: z.ZodString;
+            authority: z.ZodObject<{
+                store: z.ZodOptional<z.ZodString>;
+                key: z.ZodString;
+                env: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"docr">;
+            namespace: z.ZodString;
+            name: z.ZodString;
+            key: z.ZodLiteral<"config.json">;
+            expirySeconds: z.ZodNumber;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"package-registry">;
+            namespace: z.ZodString;
+            name: z.ZodString;
+            key: z.ZodEnum<{
+                ".npmrc": ".npmrc";
+                ".bunfig.toml": ".bunfig.toml";
+            }>;
+            authority: z.ZodObject<{
+                store: z.ZodOptional<z.ZodString>;
+                key: z.ZodString;
+                env: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>;
+        }, z.core.$strict>], "kind">>>;
+        credentialLease: z.ZodOptional<z.ZodObject<{
+            operationId: z.ZodUUID;
+            repositoryId: z.ZodUUID;
+            ref: z.ZodString;
+            namespace: z.ZodString;
+            name: z.ZodString;
+            authority: z.ZodObject<{
+                store: z.ZodOptional<z.ZodString>;
+                key: z.ZodString;
+                env: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>;
+        }, z.core.$strict>>;
+        resources: z.ZodArray<z.ZodObject<{
+            apiVersion: z.ZodString;
+            kind: z.ZodString;
+            namespace: z.ZodOptional<z.ZodString>;
+            name: z.ZodString;
+            manifest: z.ZodObject<{
+                apiVersion: z.ZodString;
+                kind: z.ZodString;
+                metadata: z.ZodObject<{
+                    name: z.ZodString;
+                    namespace: z.ZodOptional<z.ZodString>;
+                }, z.core.$loose>;
+            }, z.core.$loose>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>], null>, z.ZodPromise<z.ZodVoid>>;
+    prepareWorkerCredentials: z.ZodFunction<z.ZodTuple<readonly [z.ZodObject<{
+        provider: z.ZodLiteral<"digitalocean-kubernetes">;
+        operation: z.ZodEnum<{
+            build: "build";
+            apply: "apply";
+        }>;
+        fieldManager: z.ZodLiteral<"vibes-infra-doks-worker">;
+        conflictPolicy: z.ZodLiteral<"fail">;
+        cluster: z.ZodObject<{
+            id: z.ZodOptional<z.ZodString>;
+            name: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>;
+        worker: z.ZodString;
+        namespace: z.ZodString;
+        image: z.ZodString;
+        sourceRevision: z.ZodOptional<z.ZodString>;
+        requiredSecrets: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            namespace: z.ZodString;
+            name: z.ZodString;
+            keys: z.ZodArray<z.ZodString>;
+        }, z.core.$strict>>>;
+        credentialBindings: z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"source-lease">;
+            namespace: z.ZodString;
+            name: z.ZodString;
+            key: z.ZodString;
+            repositoryId: z.ZodUUID;
+            ref: z.ZodString;
+            authority: z.ZodObject<{
+                store: z.ZodOptional<z.ZodString>;
+                key: z.ZodString;
+                env: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"docr">;
+            namespace: z.ZodString;
+            name: z.ZodString;
+            key: z.ZodLiteral<"config.json">;
+            expirySeconds: z.ZodNumber;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"package-registry">;
+            namespace: z.ZodString;
+            name: z.ZodString;
+            key: z.ZodEnum<{
+                ".npmrc": ".npmrc";
+                ".bunfig.toml": ".bunfig.toml";
+            }>;
+            authority: z.ZodObject<{
+                store: z.ZodOptional<z.ZodString>;
+                key: z.ZodString;
+                env: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>;
+        }, z.core.$strict>], "kind">>>;
+        credentialLease: z.ZodOptional<z.ZodObject<{
+            operationId: z.ZodUUID;
+            repositoryId: z.ZodUUID;
+            ref: z.ZodString;
+            namespace: z.ZodString;
+            name: z.ZodString;
+            authority: z.ZodObject<{
+                store: z.ZodOptional<z.ZodString>;
+                key: z.ZodString;
+                env: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>;
+        }, z.core.$strict>>;
+        resources: z.ZodArray<z.ZodObject<{
+            apiVersion: z.ZodString;
+            kind: z.ZodString;
+            namespace: z.ZodOptional<z.ZodString>;
+            name: z.ZodString;
+            manifest: z.ZodObject<{
+                apiVersion: z.ZodString;
+                kind: z.ZodString;
+                metadata: z.ZodObject<{
+                    name: z.ZodString;
+                    namespace: z.ZodOptional<z.ZodString>;
+                }, z.core.$loose>;
+            }, z.core.$loose>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>], null>, z.ZodPromise<z.ZodObject<{
+        provider: z.ZodLiteral<"digitalocean-kubernetes">;
+        operation: z.ZodEnum<{
+            build: "build";
+            apply: "apply";
+        }>;
+        fieldManager: z.ZodLiteral<"vibes-infra-doks-worker">;
+        conflictPolicy: z.ZodLiteral<"fail">;
+        cluster: z.ZodObject<{
+            id: z.ZodOptional<z.ZodString>;
+            name: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>;
+        worker: z.ZodString;
+        namespace: z.ZodString;
+        image: z.ZodString;
+        sourceRevision: z.ZodOptional<z.ZodString>;
+        requiredSecrets: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            namespace: z.ZodString;
+            name: z.ZodString;
+            keys: z.ZodArray<z.ZodString>;
+        }, z.core.$strict>>>;
+        credentialBindings: z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"source-lease">;
+            namespace: z.ZodString;
+            name: z.ZodString;
+            key: z.ZodString;
+            repositoryId: z.ZodUUID;
+            ref: z.ZodString;
+            authority: z.ZodObject<{
+                store: z.ZodOptional<z.ZodString>;
+                key: z.ZodString;
+                env: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"docr">;
+            namespace: z.ZodString;
+            name: z.ZodString;
+            key: z.ZodLiteral<"config.json">;
+            expirySeconds: z.ZodNumber;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"package-registry">;
+            namespace: z.ZodString;
+            name: z.ZodString;
+            key: z.ZodEnum<{
+                ".npmrc": ".npmrc";
+                ".bunfig.toml": ".bunfig.toml";
+            }>;
+            authority: z.ZodObject<{
+                store: z.ZodOptional<z.ZodString>;
+                key: z.ZodString;
+                env: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>;
+        }, z.core.$strict>], "kind">>>;
+        credentialLease: z.ZodOptional<z.ZodObject<{
+            operationId: z.ZodUUID;
+            repositoryId: z.ZodUUID;
+            ref: z.ZodString;
+            namespace: z.ZodString;
+            name: z.ZodString;
+            authority: z.ZodObject<{
+                store: z.ZodOptional<z.ZodString>;
+                key: z.ZodString;
+                env: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>;
+        }, z.core.$strict>>;
+        resources: z.ZodArray<z.ZodObject<{
+            apiVersion: z.ZodString;
+            kind: z.ZodString;
+            namespace: z.ZodOptional<z.ZodString>;
+            name: z.ZodString;
+            manifest: z.ZodObject<{
+                apiVersion: z.ZodString;
+                kind: z.ZodString;
+                metadata: z.ZodObject<{
+                    name: z.ZodString;
+                    namespace: z.ZodOptional<z.ZodString>;
+                }, z.core.$loose>;
+            }, z.core.$loose>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>>;
+    revokeWorkerCredentials: z.ZodFunction<z.ZodTuple<readonly [z.ZodObject<{
+        operationId: z.ZodUUID;
+        repositoryId: z.ZodUUID;
+        ref: z.ZodString;
+        namespace: z.ZodString;
+        name: z.ZodString;
+        authority: z.ZodObject<{
+            store: z.ZodOptional<z.ZodString>;
+            key: z.ZodString;
+            env: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>;
+    }, z.core.$strict>], null>, z.ZodPromise<z.ZodVoid>>;
+}, z.core.$strip>;
+export type DigitalOceanDoksWorkerCredentialDeliveryOwner = z.infer<typeof DigitalOceanDoksWorkerCredentialDeliveryOwnerSchema>;
+/**
+ * Bind the source-credential secret to this operation's unique lease name in
+ * both the Job template and the declared secret evidence.
+ */
+export declare function bindDigitalOceanDoksWorkerCredentialLease(input: DigitalOceanDoksWorkerPlan, operationId: z.infer<typeof DigitalOceanDoksWorkerOperationIdSchema>): DigitalOceanDoksWorkerPlan;
+//# sourceMappingURL=doks-worker.d.ts.map