gcp-job-runner 1.4.1 → 1.5.0

package/dist/cloud/deploy.mjs

@@ -1,5 +1,5 @@
 import { generateDockerfile } from "./dockerfile.mjs";
-import { checkGcloudAvailable, gcloudExecCapture, gcloudJson, isDockerAvailable, shellExecCapture } from "./gcloud.mjs";
+import { checkGcloudAvailable, gcloudExecCapture, gcloudJson, isDockerDaemonRunning, isDockerInstalled, shellExecCapture, startDockerDaemon, waitForDockerDaemon } from "./gcloud.mjs";
 import { hashDirectory } from "./hash.mjs";
 import { consola } from "consola";
 import path from "node:path";
@@ -42,9 +42,38 @@ async function prepareImage(options) {
 	const project = envConfig.project;
 	let buildLocal = cloud.buildLocal !== false;
 	checkGcloudAvailable();
-	if (buildLocal && !isDockerAvailable()) {
-		consola.warn("Docker is not available, falling back to Cloud Build. Install Docker for faster local builds: https://docs.docker.com/get-docker/");
-		buildLocal = false;
+	if (buildLocal) {
+		if (!isDockerInstalled()) {
+			consola.warn("Docker is not installed, falling back to Cloud Build. Install Docker for faster local builds: https://docs.docker.com/get-docker/");
+			buildLocal = false;
+		} else if (!isDockerDaemonRunning()) if (!process.stdin.isTTY) {
+			/** Non-interactive environment (CI) — fall back automatically */
+			consola.warn("Docker daemon is not running, falling back to Cloud Build.");
+			buildLocal = false;
+		} else {
+			const choice = await consola.prompt("Docker is installed but the daemon is not running.", {
+				type: "select",
+				options: [{
+					label: "Start Docker",
+					value: "start",
+					hint: "attempt to start the daemon"
+				}, {
+					label: "Use Cloud Build",
+					value: "cloud-build",
+					hint: "build remotely instead"
+				}]
+			});
+			if (typeof choice === "symbol") process.exit(0);
+			if (choice === "start") {
+				if (!startDockerDaemon()) {
+					consola.warn("Could not start Docker automatically, falling back to Cloud Build.");
+					buildLocal = false;
+				} else if (!await waitForDockerDaemon()) {
+					consola.warn("Docker daemon did not become ready in time, falling back to Cloud Build.");
+					buildLocal = false;
+				}
+			} else buildLocal = false;
+		}
 	}
 	/** Step 1: Run isolate to bundle workspace dependencies */
 	const isolateDirectory = resolveIsolateDirectory(serviceDirectory);
@@ -208,6 +237,11 @@ async function createOrUpdateJob(options) {
 		updateArgs.push(`--parallelism=${cloud.resources?.parallelism ?? 0}`);
 		if (secretsString) updateArgs.push(`--set-secrets=${secretsString}`);
 		if (cloud.serviceAccount) updateArgs.push(`--service-account=${cloud.serviceAccount}`);
+		if (cloud.network) {
+			updateArgs.push(`--network=${cloud.network.name}`);
+			if (cloud.network.subnet) updateArgs.push(`--subnet=${cloud.network.subnet}`);
+			updateArgs.push(`--vpc-egress=${cloud.network.egress ?? "private-ranges-only"}`);
+		}
 		const result = gcloudExecCapture(updateArgs);
 		if (!result.success) {
 			consola.error("Failed to update Cloud Run Job");
@@ -238,6 +272,11 @@ async function createOrUpdateJob(options) {
 	if (cloud.resources?.parallelism !== void 0) createArgs.push(`--parallelism=${cloud.resources.parallelism}`);
 	if (secretsString) createArgs.push(`--set-secrets=${secretsString}`);
 	if (cloud.serviceAccount) createArgs.push(`--service-account=${cloud.serviceAccount}`);
+	if (cloud.network) {
+		createArgs.push(`--network=${cloud.network.name}`);
+		if (cloud.network.subnet) createArgs.push(`--subnet=${cloud.network.subnet}`);
+		createArgs.push(`--vpc-egress=${cloud.network.egress ?? "private-ranges-only"}`);
+	}
 	const result = gcloudExecCapture(createArgs);
 	if (!result.success) {
 		consola.error("Failed to create Cloud Run Job");

package/dist/cloud/deploy.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"deploy.mjs","names":[],"sources":["../../src/cloud/deploy.ts"],"sourcesContent":["import { existsSync, readFileSync, writeFileSync, unlinkSync } from \"node:fs\";\nimport path from \"node:path\";\nimport { consola } from \"consola\";\nimport type { CloudConfig, RunnerEnvOptions } from \"../config\";\nimport { generateDockerfile } from \"./dockerfile\";\nimport {\n  checkGcloudAvailable,\n  isDockerAvailable,\n  gcloudExecCapture,\n  gcloudJson,\n  shellExecCapture,\n} from \"./gcloud\";\nimport { hashDirectory } from \"./hash\";\n\nexport interface DeployOptions {\n  /** Cloud configuration from the runner config */\n  cloud: CloudConfig;\n  /** Environment configuration (project, env vars, secrets) */\n  envConfig: RunnerEnvOptions;\n  /** Working directory (service root where isolate.config.json lives) */\n  serviceDirectory: string;\n}\n\nexport interface DeployResult {\n  /** Full image URI including tag */\n  imageUri: string;\n  /** Whether a new image was built */\n  imageBuilt: boolean;\n}\n\n/**\n * Filter out noisy gcloud hints from captured output.\n * Removes \"To execute this job\" and \"Updates are available\" blocks.\n */\nfunction filterGcloudOutput(output: string): string {\n  return output\n    .replace(/To execute this job.*?gcloud run jobs execute \\S+\\n?/gs, \"\")\n    .replace(/Updates are available.*?\\$ gcloud components update\\n?/gs, \"\")\n    .trim();\n}\n\nconst DEFAULT_REGION = \"us-central1\";\nconst DEFAULT_ARTIFACT_REGISTRY = \"cloud-run\";\nconst DEFAULT_ISOLATE_PATH = \"isolate\";\nconst GENERATED_DOCKERFILE = \"Dockerfile\";\nconst REGISTRY = \"docker.pkg.dev\";\n\ninterface IsolateConfig {\n  targetPackagePath?: string;\n}\n\n/**\n * Resolve the isolate output directory path.\n * Reads isolate.config.json if present, otherwise uses default \"./isolate\".\n */\nfunction resolveIsolateDirectory(serviceDirectory: string): string {\n  const configPath = path.join(serviceDirectory, \"isolate.config.json\");\n\n  if (existsSync(configPath)) {\n    try {\n      const configContent = readFileSync(configPath, \"utf-8\");\n      const config = JSON.parse(configContent) as IsolateConfig;\n      if (config.targetPackagePath) {\n        return path.join(serviceDirectory, config.targetPackagePath);\n      }\n    } catch {\n      /** Ignore parse errors, use default */\n    }\n  }\n\n  return path.join(serviceDirectory, DEFAULT_ISOLATE_PATH);\n}\n\nexport interface PrepareResult {\n  imageUri: string;\n  imageBuilt: boolean;\n  region: string;\n  project: string;\n}\n\n/**\n * Shared preparation logic: isolate, hash, check image, build if needed.\n * Used by both deploy() and deployIfChanged().\n */\nexport async function prepareImage(\n  options: DeployOptions,\n): Promise<PrepareResult> {\n  const { cloud, envConfig, serviceDirectory } = options;\n  const region = cloud.region ?? DEFAULT_REGION;\n  const artifactRegistry = cloud.artifactRegistry ?? DEFAULT_ARTIFACT_REGISTRY;\n  const project = envConfig.project;\n  let buildLocal = cloud.buildLocal !== false;\n\n  checkGcloudAvailable();\n\n  if (buildLocal && !isDockerAvailable()) {\n    consola.warn(\n      \"Docker is not available, falling back to Cloud Build. \" +\n        \"Install Docker for faster local builds: https://docs.docker.com/get-docker/\",\n    );\n    buildLocal = false;\n  }\n\n  /** Step 1: Run isolate to bundle workspace dependencies */\n  const isolateDirectory = resolveIsolateDirectory(serviceDirectory);\n\n  consola.start(\"Isolating package...\");\n\n  try {\n    const { isolate: runIsolate } = await import(\"isolate-package\");\n\n    const configPath = path.join(serviceDirectory, \"isolate.config.json\");\n    const fileConfig = existsSync(configPath)\n      ? JSON.parse(readFileSync(configPath, \"utf-8\"))\n      : {};\n\n    await runIsolate({\n      ...fileConfig,\n      includeDevDependencies: true,\n    });\n  } catch (error) {\n    const message = error instanceof Error ? error.message : String(error);\n    consola.error(`Failed to isolate package: ${message}`);\n    process.exit(1);\n  }\n\n  consola.success(\"Package isolated\");\n\n  /** Step 2: Hash the isolate directory */\n  const tag = await hashDirectory(isolateDirectory);\n  consola.info(`Content hash: ${tag}`);\n\n  /** Step 3: Check if image already exists */\n  const imageUri = `${region}-${REGISTRY}/${project}/${artifactRegistry}/${cloud.name}:${tag}`;\n\n  const imageExists = checkImageExists(imageUri, project);\n  let imageBuilt = false;\n\n  if (imageExists) {\n    consola.success(`Image already exists: ${cloud.name}:${tag}`);\n  } else if (buildLocal) {\n    /** Step 4a: Generate Dockerfile and build locally with Docker */\n    consola.start(\"Building image locally with Docker...\");\n\n    const dockerfilePath = path.join(serviceDirectory, GENERATED_DOCKERFILE);\n    writeFileSync(dockerfilePath, generateDockerfile());\n\n    try {\n      const buildResult = shellExecCapture(\n        `docker build --platform linux/amd64 -t ${imageUri} .`,\n        { cwd: serviceDirectory },\n      );\n\n      if (!buildResult.success) {\n        consola.error(\"Docker build failed. Output:\\n\" + buildResult.output);\n        process.exit(1);\n      }\n\n      consola.success(`Image built: ${cloud.name}:${tag}`);\n\n      /** Configure Docker authentication for Artifact Registry */\n      gcloudExecCapture([\n        \"auth\",\n        \"configure-docker\",\n        `${region}-${REGISTRY}`,\n        \"--quiet\",\n      ]);\n\n      consola.start(\"Pushing image to Artifact Registry...\");\n\n      const pushResult = shellExecCapture(`docker push ${imageUri}`);\n\n      if (!pushResult.success) {\n        consola.error(\"Docker push failed. Output:\\n\" + pushResult.output);\n        process.exit(1);\n      }\n\n      consola.success(`Image pushed: ${cloud.name}:${tag}`);\n      imageBuilt = true;\n    } finally {\n      /** Clean up generated Dockerfile */\n      try {\n        unlinkSync(dockerfilePath);\n      } catch {\n        /** Ignore cleanup errors */\n      }\n    }\n  } else {\n    /** Step 4b: Generate Dockerfile and build with Cloud Build */\n    consola.start(\"Building image with Cloud Build...\");\n\n    const dockerfilePath = path.join(serviceDirectory, GENERATED_DOCKERFILE);\n    writeFileSync(dockerfilePath, generateDockerfile());\n\n    try {\n      const buildResult = gcloudExecCapture(\n        [\n          \"builds\",\n          \"submit\",\n          \"--project\",\n          project,\n          \"--region\",\n          region,\n          `--tag=${imageUri}`,\n          \".\",\n        ],\n        { cwd: serviceDirectory },\n      );\n\n      /** Extract and show the Cloud Build logs URL if available */\n      const logsUrlMatch = buildResult.output.match(\n        /Logs are available at \\[(.+?)]/,\n      );\n      if (logsUrlMatch) {\n        consola.info(`Cloud Build logs: ${logsUrlMatch[1]}`);\n      }\n\n      if (!buildResult.success) {\n        consola.error(\"Cloud Build failed. Output:\\n\" + buildResult.output);\n        process.exit(1);\n      }\n\n      consola.success(`Image built: ${cloud.name}:${tag}`);\n      imageBuilt = true;\n    } finally {\n      /** Clean up generated Dockerfile */\n      try {\n        unlinkSync(dockerfilePath);\n      } catch {\n        /** Ignore cleanup errors */\n      }\n    }\n  }\n\n  return { imageUri, imageBuilt, region, project };\n}\n\n/**\n * Build and push a Cloud Run Job image.\n *\n * This is image-only: it does not create or update Cloud Run Job resources.\n * Use createOrUpdateJob() separately to manage job resources.\n */\nexport async function deploy(options: DeployOptions): Promise<DeployResult> {\n  const { imageUri, imageBuilt } = await prepareImage(options);\n  return { imageUri, imageBuilt };\n}\n\n/**\n * Build and push a Cloud Run Job image only if it has changed.\n *\n * This is image-only: it does not create or update Cloud Run Job resources.\n * Use createOrUpdateJob() separately to manage job resources.\n */\nexport async function deployIfChanged(\n  options: DeployOptions,\n): Promise<DeployResult> {\n  const { imageUri, imageBuilt } = await prepareImage(options);\n\n  if (!imageBuilt) {\n    consola.info(\"No changes detected, skipping image build\");\n  }\n\n  return { imageUri, imageBuilt };\n}\n\nexport interface CreateOrUpdateJobOptions {\n  cloud: CloudConfig;\n  envConfig: RunnerEnvOptions;\n  /** The Cloud Run Job resource name (e.g., \"admin-create-user\") */\n  jobName: string;\n  imageUri: string;\n  region: string;\n  project: string;\n}\n\n/**\n * Create or update a Cloud Run Job resource.\n * Returns true if the job was newly created, false if updated.\n */\nexport async function createOrUpdateJob(\n  options: CreateOrUpdateJobOptions,\n): Promise<boolean> {\n  const { cloud, envConfig, jobName, imageUri, region, project } = options;\n  const memory = cloud.resources?.memory ?? \"512Mi\";\n  const cpu = cloud.resources?.cpu ?? \"1\";\n  const timeout = cloud.resources?.timeout ?? 86400;\n\n  /** Check if job already exists */\n  const existingJob = gcloudJson(\n    [\n      \"run\",\n      \"jobs\",\n      \"describe\",\n      jobName,\n      \"--project\",\n      project,\n      \"--region\",\n      region,\n    ],\n    { ignoreErrors: true },\n  );\n\n  /** Build environment variables */\n  const envVars: Record<string, string> = {\n    GOOGLE_CLOUD_PROJECT: project,\n    ...envConfig.env,\n  };\n\n  const envVarsString = Object.entries(envVars)\n    .map(([key, value]) => `${key}=${value}`)\n    .join(\",\");\n\n  /** Build secret references */\n  const secretNames = envConfig.secrets ?? [];\n  const secretsString = secretNames\n    .map((name) => `${name}=${name}:latest`)\n    .join(\",\");\n\n  if (existingJob) {\n    consola.start(\"Updating Cloud Run Job...\");\n\n    const updateArgs = [\n      \"run\",\n      \"jobs\",\n      \"update\",\n      jobName,\n      \"--project\",\n      project,\n      \"--region\",\n      region,\n      `--image=${imageUri}`,\n      `--set-env-vars=${envVarsString}`,\n      `--memory=${memory}`,\n      `--cpu=${cpu}`,\n      `--task-timeout=${timeout}s`,\n      \"--max-retries=0\",\n    ];\n\n    /**\n     * Always pass --parallelism on update so that removing it from config\n     * resets the deployed value. Default 0 means no concurrency limit.\n     */\n    updateArgs.push(`--parallelism=${cloud.resources?.parallelism ?? 0}`);\n\n    if (secretsString) {\n      updateArgs.push(`--set-secrets=${secretsString}`);\n    }\n\n    if (cloud.serviceAccount) {\n      updateArgs.push(`--service-account=${cloud.serviceAccount}`);\n    }\n\n    const result = gcloudExecCapture(updateArgs);\n\n    if (!result.success) {\n      consola.error(\"Failed to update Cloud Run Job\");\n      process.exit(1);\n    }\n\n    const filtered = filterGcloudOutput(result.stderr);\n    if (filtered) {\n      process.stderr.write(filtered + \"\\n\");\n    }\n\n    consola.success(`Cloud Run Job updated: ${jobName}`);\n    return false;\n  }\n\n  consola.start(\"Creating Cloud Run Job...\");\n\n  const createArgs = [\n    \"run\",\n    \"jobs\",\n    \"create\",\n    jobName,\n    \"--project\",\n    project,\n    \"--region\",\n    region,\n    `--image=${imageUri}`,\n    `--set-env-vars=${envVarsString}`,\n    `--memory=${memory}`,\n    `--cpu=${cpu}`,\n    `--task-timeout=${timeout}s`,\n    \"--max-retries=0\",\n  ];\n\n  if (cloud.resources?.parallelism !== undefined) {\n    createArgs.push(`--parallelism=${cloud.resources.parallelism}`);\n  }\n\n  if (secretsString) {\n    createArgs.push(`--set-secrets=${secretsString}`);\n  }\n\n  if (cloud.serviceAccount) {\n    createArgs.push(`--service-account=${cloud.serviceAccount}`);\n  }\n\n  const result = gcloudExecCapture(createArgs);\n\n  if (!result.success) {\n    consola.error(\"Failed to create Cloud Run Job\");\n    process.exit(1);\n  }\n\n  const filtered = filterGcloudOutput(result.stderr);\n  if (filtered) {\n    process.stderr.write(filtered + \"\\n\");\n  }\n\n  consola.success(`Cloud Run Job created: ${jobName}`);\n  return true;\n}\n\n/**\n * Check if a Docker image exists in Artifact Registry.\n */\nfunction checkImageExists(imageUri: string, project: string): boolean {\n  const result = gcloudJson(\n    [\n      \"artifacts\",\n      \"docker\",\n      \"images\",\n      \"describe\",\n      imageUri,\n      \"--project\",\n      project,\n    ],\n    { ignoreErrors: true },\n  );\n\n  return result !== undefined;\n}\n"],"mappings":";;;;;;;;;;;;AAkCA,SAAS,mBAAmB,QAAwB;AAClD,QAAO,OACJ,QAAQ,0DAA0D,GAAG,CACrE,QAAQ,4DAA4D,GAAG,CACvE,MAAM;;AAGX,MAAM,iBAAiB;AACvB,MAAM,4BAA4B;AAClC,MAAM,uBAAuB;AAC7B,MAAM,uBAAuB;AAC7B,MAAM,WAAW;;;;;AAUjB,SAAS,wBAAwB,kBAAkC;CACjE,MAAM,aAAa,KAAK,KAAK,kBAAkB,sBAAsB;AAErE,KAAI,WAAW,WAAW,CACxB,KAAI;EACF,MAAM,gBAAgB,aAAa,YAAY,QAAQ;EACvD,MAAM,SAAS,KAAK,MAAM,cAAc;AACxC,MAAI,OAAO,kBACT,QAAO,KAAK,KAAK,kBAAkB,OAAO,kBAAkB;SAExD;AAKV,QAAO,KAAK,KAAK,kBAAkB,qBAAqB;;;;;;AAc1D,eAAsB,aACpB,SACwB;CACxB,MAAM,EAAE,OAAO,WAAW,qBAAqB;CAC/C,MAAM,SAAS,MAAM,UAAU;CAC/B,MAAM,mBAAmB,MAAM,oBAAoB;CACnD,MAAM,UAAU,UAAU;CAC1B,IAAI,aAAa,MAAM,eAAe;AAEtC,uBAAsB;AAEtB,KAAI,cAAc,CAAC,mBAAmB,EAAE;AACtC,UAAQ,KACN,oIAED;AACD,eAAa;;;CAIf,MAAM,mBAAmB,wBAAwB,iBAAiB;AAElE,SAAQ,MAAM,uBAAuB;AAErC,KAAI;EACF,MAAM,EAAE,SAAS,eAAe,MAAM,OAAO;EAE7C,MAAM,aAAa,KAAK,KAAK,kBAAkB,sBAAsB;AAKrE,QAAM,WAAW;GACf,GALiB,WAAW,WAAW,GACrC,KAAK,MAAM,aAAa,YAAY,QAAQ,CAAC,GAC7C,EAAE;GAIJ,wBAAwB;GACzB,CAAC;UACK,OAAO;EACd,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;AACtE,UAAQ,MAAM,8BAA8B,UAAU;AACtD,UAAQ,KAAK,EAAE;;AAGjB,SAAQ,QAAQ,mBAAmB;;CAGnC,MAAM,MAAM,MAAM,cAAc,iBAAiB;AACjD,SAAQ,KAAK,iBAAiB,MAAM;;CAGpC,MAAM,WAAW,GAAG,OAAO,GAAG,SAAS,GAAG,QAAQ,GAAG,iBAAiB,GAAG,MAAM,KAAK,GAAG;CAEvF,MAAM,cAAc,iBAAiB,UAAU,QAAQ;CACvD,IAAI,aAAa;AAEjB,KAAI,YACF,SAAQ,QAAQ,yBAAyB,MAAM,KAAK,GAAG,MAAM;UACpD,YAAY;;AAErB,UAAQ,MAAM,wCAAwC;EAEtD,MAAM,iBAAiB,KAAK,KAAK,kBAAkB,qBAAqB;AACxE,gBAAc,gBAAgB,oBAAoB,CAAC;AAEnD,MAAI;GACF,MAAM,cAAc,iBAClB,0CAA0C,SAAS,KACnD,EAAE,KAAK,kBAAkB,CAC1B;AAED,OAAI,CAAC,YAAY,SAAS;AACxB,YAAQ,MAAM,mCAAmC,YAAY,OAAO;AACpE,YAAQ,KAAK,EAAE;;AAGjB,WAAQ,QAAQ,gBAAgB,MAAM,KAAK,GAAG,MAAM;;AAGpD,qBAAkB;IAChB;IACA;IACA,GAAG,OAAO,GAAG;IACb;IACD,CAAC;AAEF,WAAQ,MAAM,wCAAwC;GAEtD,MAAM,aAAa,iBAAiB,eAAe,WAAW;AAE9D,OAAI,CAAC,WAAW,SAAS;AACvB,YAAQ,MAAM,kCAAkC,WAAW,OAAO;AAClE,YAAQ,KAAK,EAAE;;AAGjB,WAAQ,QAAQ,iBAAiB,MAAM,KAAK,GAAG,MAAM;AACrD,gBAAa;YACL;;AAER,OAAI;AACF,eAAW,eAAe;WACpB;;QAIL;;AAEL,UAAQ,MAAM,qCAAqC;EAEnD,MAAM,iBAAiB,KAAK,KAAK,kBAAkB,qBAAqB;AACxE,gBAAc,gBAAgB,oBAAoB,CAAC;AAEnD,MAAI;GACF,MAAM,cAAc,kBAClB;IACE;IACA;IACA;IACA;IACA;IACA;IACA,SAAS;IACT;IACD,EACD,EAAE,KAAK,kBAAkB,CAC1B;;GAGD,MAAM,eAAe,YAAY,OAAO,MACtC,iCACD;AACD,OAAI,aACF,SAAQ,KAAK,qBAAqB,aAAa,KAAK;AAGtD,OAAI,CAAC,YAAY,SAAS;AACxB,YAAQ,MAAM,kCAAkC,YAAY,OAAO;AACnE,YAAQ,KAAK,EAAE;;AAGjB,WAAQ,QAAQ,gBAAgB,MAAM,KAAK,GAAG,MAAM;AACpD,gBAAa;YACL;;AAER,OAAI;AACF,eAAW,eAAe;WACpB;;;AAMZ,QAAO;EAAE;EAAU;EAAY;EAAQ;EAAS;;;;;;;;AAoBlD,eAAsB,gBACpB,SACuB;CACvB,MAAM,EAAE,UAAU,eAAe,MAAM,aAAa,QAAQ;AAE5D,KAAI,CAAC,WACH,SAAQ,KAAK,4CAA4C;AAG3D,QAAO;EAAE;EAAU;EAAY;;;;;;AAiBjC,eAAsB,kBACpB,SACkB;CAClB,MAAM,EAAE,OAAO,WAAW,SAAS,UAAU,QAAQ,YAAY;CACjE,MAAM,SAAS,MAAM,WAAW,UAAU;CAC1C,MAAM,MAAM,MAAM,WAAW,OAAO;CACpC,MAAM,UAAU,MAAM,WAAW,WAAW;;CAG5C,MAAM,cAAc,WAClB;EACE;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACD,EACD,EAAE,cAAc,MAAM,CACvB;;CAGD,MAAM,UAAkC;EACtC,sBAAsB;EACtB,GAAG,UAAU;EACd;CAED,MAAM,gBAAgB,OAAO,QAAQ,QAAQ,CAC1C,KAAK,CAAC,KAAK,WAAW,GAAG,IAAI,GAAG,QAAQ,CACxC,KAAK,IAAI;CAIZ,MAAM,iBADc,UAAU,WAAW,EAAE,EAExC,KAAK,SAAS,GAAG,KAAK,GAAG,KAAK,SAAS,CACvC,KAAK,IAAI;AAEZ,KAAI,aAAa;AACf,UAAQ,MAAM,4BAA4B;EAE1C,MAAM,aAAa;GACjB;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA,WAAW;GACX,kBAAkB;GAClB,YAAY;GACZ,SAAS;GACT,kBAAkB,QAAQ;GAC1B;GACD;;;;;AAMD,aAAW,KAAK,iBAAiB,MAAM,WAAW,eAAe,IAAI;AAErE,MAAI,cACF,YAAW,KAAK,iBAAiB,gBAAgB;AAGnD,MAAI,MAAM,eACR,YAAW,KAAK,qBAAqB,MAAM,iBAAiB;EAG9D,MAAM,SAAS,kBAAkB,WAAW;AAE5C,MAAI,CAAC,OAAO,SAAS;AACnB,WAAQ,MAAM,iCAAiC;AAC/C,WAAQ,KAAK,EAAE;;EAGjB,MAAM,WAAW,mBAAmB,OAAO,OAAO;AAClD,MAAI,SACF,SAAQ,OAAO,MAAM,WAAW,KAAK;AAGvC,UAAQ,QAAQ,0BAA0B,UAAU;AACpD,SAAO;;AAGT,SAAQ,MAAM,4BAA4B;CAE1C,MAAM,aAAa;EACjB;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,WAAW;EACX,kBAAkB;EAClB,YAAY;EACZ,SAAS;EACT,kBAAkB,QAAQ;EAC1B;EACD;AAED,KAAI,MAAM,WAAW,gBAAgB,OACnC,YAAW,KAAK,iBAAiB,MAAM,UAAU,cAAc;AAGjE,KAAI,cACF,YAAW,KAAK,iBAAiB,gBAAgB;AAGnD,KAAI,MAAM,eACR,YAAW,KAAK,qBAAqB,MAAM,iBAAiB;CAG9D,MAAM,SAAS,kBAAkB,WAAW;AAE5C,KAAI,CAAC,OAAO,SAAS;AACnB,UAAQ,MAAM,iCAAiC;AAC/C,UAAQ,KAAK,EAAE;;CAGjB,MAAM,WAAW,mBAAmB,OAAO,OAAO;AAClD,KAAI,SACF,SAAQ,OAAO,MAAM,WAAW,KAAK;AAGvC,SAAQ,QAAQ,0BAA0B,UAAU;AACpD,QAAO;;;;;AAMT,SAAS,iBAAiB,UAAkB,SAA0B;AAcpE,QAbe,WACb;EACE;EACA;EACA;EACA;EACA;EACA;EACA;EACD,EACD,EAAE,cAAc,MAAM,CACvB,KAEiB"}
+{"version":3,"file":"deploy.mjs","names":[],"sources":["../../src/cloud/deploy.ts"],"sourcesContent":["import { existsSync, readFileSync, writeFileSync, unlinkSync } from \"node:fs\";\nimport path from \"node:path\";\nimport { consola } from \"consola\";\nimport type { CloudConfig, RunnerEnvOptions } from \"../config\";\nimport { generateDockerfile } from \"./dockerfile\";\nimport {\n  checkGcloudAvailable,\n  isDockerInstalled,\n  isDockerDaemonRunning,\n  startDockerDaemon,\n  waitForDockerDaemon,\n  gcloudExecCapture,\n  gcloudJson,\n  shellExecCapture,\n} from \"./gcloud\";\nimport { hashDirectory } from \"./hash\";\n\nexport interface DeployOptions {\n  /** Cloud configuration from the runner config */\n  cloud: CloudConfig;\n  /** Environment configuration (project, env vars, secrets) */\n  envConfig: RunnerEnvOptions;\n  /** Working directory (service root where isolate.config.json lives) */\n  serviceDirectory: string;\n}\n\nexport interface DeployResult {\n  /** Full image URI including tag */\n  imageUri: string;\n  /** Whether a new image was built */\n  imageBuilt: boolean;\n}\n\n/**\n * Filter out noisy gcloud hints from captured output.\n * Removes \"To execute this job\" and \"Updates are available\" blocks.\n */\nfunction filterGcloudOutput(output: string): string {\n  return output\n    .replace(/To execute this job.*?gcloud run jobs execute \\S+\\n?/gs, \"\")\n    .replace(/Updates are available.*?\\$ gcloud components update\\n?/gs, \"\")\n    .trim();\n}\n\nconst DEFAULT_REGION = \"us-central1\";\nconst DEFAULT_ARTIFACT_REGISTRY = \"cloud-run\";\nconst DEFAULT_ISOLATE_PATH = \"isolate\";\nconst GENERATED_DOCKERFILE = \"Dockerfile\";\nconst REGISTRY = \"docker.pkg.dev\";\n\ninterface IsolateConfig {\n  targetPackagePath?: string;\n}\n\n/**\n * Resolve the isolate output directory path.\n * Reads isolate.config.json if present, otherwise uses default \"./isolate\".\n */\nfunction resolveIsolateDirectory(serviceDirectory: string): string {\n  const configPath = path.join(serviceDirectory, \"isolate.config.json\");\n\n  if (existsSync(configPath)) {\n    try {\n      const configContent = readFileSync(configPath, \"utf-8\");\n      const config = JSON.parse(configContent) as IsolateConfig;\n      if (config.targetPackagePath) {\n        return path.join(serviceDirectory, config.targetPackagePath);\n      }\n    } catch {\n      /** Ignore parse errors, use default */\n    }\n  }\n\n  return path.join(serviceDirectory, DEFAULT_ISOLATE_PATH);\n}\n\nexport interface PrepareResult {\n  imageUri: string;\n  imageBuilt: boolean;\n  region: string;\n  project: string;\n}\n\n/**\n * Shared preparation logic: isolate, hash, check image, build if needed.\n * Used by both deploy() and deployIfChanged().\n */\nexport async function prepareImage(\n  options: DeployOptions,\n): Promise<PrepareResult> {\n  const { cloud, envConfig, serviceDirectory } = options;\n  const region = cloud.region ?? DEFAULT_REGION;\n  const artifactRegistry = cloud.artifactRegistry ?? DEFAULT_ARTIFACT_REGISTRY;\n  const project = envConfig.project;\n  let buildLocal = cloud.buildLocal !== false;\n\n  checkGcloudAvailable();\n\n  if (buildLocal) {\n    if (!isDockerInstalled()) {\n      consola.warn(\n        \"Docker is not installed, falling back to Cloud Build. \" +\n          \"Install Docker for faster local builds: https://docs.docker.com/get-docker/\",\n      );\n      buildLocal = false;\n    } else if (!isDockerDaemonRunning()) {\n      if (!process.stdin.isTTY) {\n        /** Non-interactive environment (CI) — fall back automatically */\n        consola.warn(\n          \"Docker daemon is not running, falling back to Cloud Build.\",\n        );\n        buildLocal = false;\n      } else {\n        const choice = await consola.prompt(\n          \"Docker is installed but the daemon is not running.\",\n          {\n            type: \"select\",\n            options: [\n              {\n                label: \"Start Docker\",\n                value: \"start\",\n                hint: \"attempt to start the daemon\",\n              },\n              {\n                label: \"Use Cloud Build\",\n                value: \"cloud-build\",\n                hint: \"build remotely instead\",\n              },\n            ],\n          },\n        );\n\n        if (typeof choice === \"symbol\") {\n          process.exit(0);\n        }\n\n        if (choice === \"start\") {\n          const started = startDockerDaemon();\n\n          if (!started) {\n            consola.warn(\n              \"Could not start Docker automatically, falling back to Cloud Build.\",\n            );\n            buildLocal = false;\n          } else {\n            const ready = await waitForDockerDaemon();\n\n            if (!ready) {\n              consola.warn(\n                \"Docker daemon did not become ready in time, falling back to Cloud Build.\",\n              );\n              buildLocal = false;\n            }\n          }\n        } else {\n          buildLocal = false;\n        }\n      }\n    }\n  }\n\n  /** Step 1: Run isolate to bundle workspace dependencies */\n  const isolateDirectory = resolveIsolateDirectory(serviceDirectory);\n\n  consola.start(\"Isolating package...\");\n\n  try {\n    const { isolate: runIsolate } = await import(\"isolate-package\");\n\n    const configPath = path.join(serviceDirectory, \"isolate.config.json\");\n    const fileConfig = existsSync(configPath)\n      ? JSON.parse(readFileSync(configPath, \"utf-8\"))\n      : {};\n\n    await runIsolate({\n      ...fileConfig,\n      includeDevDependencies: true,\n    });\n  } catch (error) {\n    const message = error instanceof Error ? error.message : String(error);\n    consola.error(`Failed to isolate package: ${message}`);\n    process.exit(1);\n  }\n\n  consola.success(\"Package isolated\");\n\n  /** Step 2: Hash the isolate directory */\n  const tag = await hashDirectory(isolateDirectory);\n  consola.info(`Content hash: ${tag}`);\n\n  /** Step 3: Check if image already exists */\n  const imageUri = `${region}-${REGISTRY}/${project}/${artifactRegistry}/${cloud.name}:${tag}`;\n\n  const imageExists = checkImageExists(imageUri, project);\n  let imageBuilt = false;\n\n  if (imageExists) {\n    consola.success(`Image already exists: ${cloud.name}:${tag}`);\n  } else if (buildLocal) {\n    /** Step 4a: Generate Dockerfile and build locally with Docker */\n    consola.start(\"Building image locally with Docker...\");\n\n    const dockerfilePath = path.join(serviceDirectory, GENERATED_DOCKERFILE);\n    writeFileSync(dockerfilePath, generateDockerfile());\n\n    try {\n      const buildResult = shellExecCapture(\n        `docker build --platform linux/amd64 -t ${imageUri} .`,\n        { cwd: serviceDirectory },\n      );\n\n      if (!buildResult.success) {\n        consola.error(\"Docker build failed. Output:\\n\" + buildResult.output);\n        process.exit(1);\n      }\n\n      consola.success(`Image built: ${cloud.name}:${tag}`);\n\n      /** Configure Docker authentication for Artifact Registry */\n      gcloudExecCapture([\n        \"auth\",\n        \"configure-docker\",\n        `${region}-${REGISTRY}`,\n        \"--quiet\",\n      ]);\n\n      consola.start(\"Pushing image to Artifact Registry...\");\n\n      const pushResult = shellExecCapture(`docker push ${imageUri}`);\n\n      if (!pushResult.success) {\n        consola.error(\"Docker push failed. Output:\\n\" + pushResult.output);\n        process.exit(1);\n      }\n\n      consola.success(`Image pushed: ${cloud.name}:${tag}`);\n      imageBuilt = true;\n    } finally {\n      /** Clean up generated Dockerfile */\n      try {\n        unlinkSync(dockerfilePath);\n      } catch {\n        /** Ignore cleanup errors */\n      }\n    }\n  } else {\n    /** Step 4b: Generate Dockerfile and build with Cloud Build */\n    consola.start(\"Building image with Cloud Build...\");\n\n    const dockerfilePath = path.join(serviceDirectory, GENERATED_DOCKERFILE);\n    writeFileSync(dockerfilePath, generateDockerfile());\n\n    try {\n      const buildResult = gcloudExecCapture(\n        [\n          \"builds\",\n          \"submit\",\n          \"--project\",\n          project,\n          \"--region\",\n          region,\n          `--tag=${imageUri}`,\n          \".\",\n        ],\n        { cwd: serviceDirectory },\n      );\n\n      /** Extract and show the Cloud Build logs URL if available */\n      const logsUrlMatch = buildResult.output.match(\n        /Logs are available at \\[(.+?)]/,\n      );\n      if (logsUrlMatch) {\n        consola.info(`Cloud Build logs: ${logsUrlMatch[1]}`);\n      }\n\n      if (!buildResult.success) {\n        consola.error(\"Cloud Build failed. Output:\\n\" + buildResult.output);\n        process.exit(1);\n      }\n\n      consola.success(`Image built: ${cloud.name}:${tag}`);\n      imageBuilt = true;\n    } finally {\n      /** Clean up generated Dockerfile */\n      try {\n        unlinkSync(dockerfilePath);\n      } catch {\n        /** Ignore cleanup errors */\n      }\n    }\n  }\n\n  return { imageUri, imageBuilt, region, project };\n}\n\n/**\n * Build and push a Cloud Run Job image.\n *\n * This is image-only: it does not create or update Cloud Run Job resources.\n * Use createOrUpdateJob() separately to manage job resources.\n */\nexport async function deploy(options: DeployOptions): Promise<DeployResult> {\n  const { imageUri, imageBuilt } = await prepareImage(options);\n  return { imageUri, imageBuilt };\n}\n\n/**\n * Build and push a Cloud Run Job image only if it has changed.\n *\n * This is image-only: it does not create or update Cloud Run Job resources.\n * Use createOrUpdateJob() separately to manage job resources.\n */\nexport async function deployIfChanged(\n  options: DeployOptions,\n): Promise<DeployResult> {\n  const { imageUri, imageBuilt } = await prepareImage(options);\n\n  if (!imageBuilt) {\n    consola.info(\"No changes detected, skipping image build\");\n  }\n\n  return { imageUri, imageBuilt };\n}\n\nexport interface CreateOrUpdateJobOptions {\n  cloud: CloudConfig;\n  envConfig: RunnerEnvOptions;\n  /** The Cloud Run Job resource name (e.g., \"admin-create-user\") */\n  jobName: string;\n  imageUri: string;\n  region: string;\n  project: string;\n}\n\n/**\n * Create or update a Cloud Run Job resource.\n * Returns true if the job was newly created, false if updated.\n */\nexport async function createOrUpdateJob(\n  options: CreateOrUpdateJobOptions,\n): Promise<boolean> {\n  const { cloud, envConfig, jobName, imageUri, region, project } = options;\n  const memory = cloud.resources?.memory ?? \"512Mi\";\n  const cpu = cloud.resources?.cpu ?? \"1\";\n  const timeout = cloud.resources?.timeout ?? 86400;\n\n  /** Check if job already exists */\n  const existingJob = gcloudJson(\n    [\n      \"run\",\n      \"jobs\",\n      \"describe\",\n      jobName,\n      \"--project\",\n      project,\n      \"--region\",\n      region,\n    ],\n    { ignoreErrors: true },\n  );\n\n  /** Build environment variables */\n  const envVars: Record<string, string> = {\n    GOOGLE_CLOUD_PROJECT: project,\n    ...envConfig.env,\n  };\n\n  const envVarsString = Object.entries(envVars)\n    .map(([key, value]) => `${key}=${value}`)\n    .join(\",\");\n\n  /** Build secret references */\n  const secretNames = envConfig.secrets ?? [];\n  const secretsString = secretNames\n    .map((name) => `${name}=${name}:latest`)\n    .join(\",\");\n\n  if (existingJob) {\n    consola.start(\"Updating Cloud Run Job...\");\n\n    const updateArgs = [\n      \"run\",\n      \"jobs\",\n      \"update\",\n      jobName,\n      \"--project\",\n      project,\n      \"--region\",\n      region,\n      `--image=${imageUri}`,\n      `--set-env-vars=${envVarsString}`,\n      `--memory=${memory}`,\n      `--cpu=${cpu}`,\n      `--task-timeout=${timeout}s`,\n      \"--max-retries=0\",\n    ];\n\n    /**\n     * Always pass --parallelism on update so that removing it from config\n     * resets the deployed value. Default 0 means no concurrency limit.\n     */\n    updateArgs.push(`--parallelism=${cloud.resources?.parallelism ?? 0}`);\n\n    if (secretsString) {\n      updateArgs.push(`--set-secrets=${secretsString}`);\n    }\n\n    if (cloud.serviceAccount) {\n      updateArgs.push(`--service-account=${cloud.serviceAccount}`);\n    }\n\n    if (cloud.network) {\n      updateArgs.push(`--network=${cloud.network.name}`);\n      if (cloud.network.subnet) {\n        updateArgs.push(`--subnet=${cloud.network.subnet}`);\n      }\n      updateArgs.push(\n        `--vpc-egress=${cloud.network.egress ?? \"private-ranges-only\"}`,\n      );\n    }\n\n    const result = gcloudExecCapture(updateArgs);\n\n    if (!result.success) {\n      consola.error(\"Failed to update Cloud Run Job\");\n      process.exit(1);\n    }\n\n    const filtered = filterGcloudOutput(result.stderr);\n    if (filtered) {\n      process.stderr.write(filtered + \"\\n\");\n    }\n\n    consola.success(`Cloud Run Job updated: ${jobName}`);\n    return false;\n  }\n\n  consola.start(\"Creating Cloud Run Job...\");\n\n  const createArgs = [\n    \"run\",\n    \"jobs\",\n    \"create\",\n    jobName,\n    \"--project\",\n    project,\n    \"--region\",\n    region,\n    `--image=${imageUri}`,\n    `--set-env-vars=${envVarsString}`,\n    `--memory=${memory}`,\n    `--cpu=${cpu}`,\n    `--task-timeout=${timeout}s`,\n    \"--max-retries=0\",\n  ];\n\n  if (cloud.resources?.parallelism !== undefined) {\n    createArgs.push(`--parallelism=${cloud.resources.parallelism}`);\n  }\n\n  if (secretsString) {\n    createArgs.push(`--set-secrets=${secretsString}`);\n  }\n\n  if (cloud.serviceAccount) {\n    createArgs.push(`--service-account=${cloud.serviceAccount}`);\n  }\n\n  if (cloud.network) {\n    createArgs.push(`--network=${cloud.network.name}`);\n    if (cloud.network.subnet) {\n      createArgs.push(`--subnet=${cloud.network.subnet}`);\n    }\n    createArgs.push(\n      `--vpc-egress=${cloud.network.egress ?? \"private-ranges-only\"}`,\n    );\n  }\n\n  const result = gcloudExecCapture(createArgs);\n\n  if (!result.success) {\n    consola.error(\"Failed to create Cloud Run Job\");\n    process.exit(1);\n  }\n\n  const filtered = filterGcloudOutput(result.stderr);\n  if (filtered) {\n    process.stderr.write(filtered + \"\\n\");\n  }\n\n  consola.success(`Cloud Run Job created: ${jobName}`);\n  return true;\n}\n\n/**\n * Check if a Docker image exists in Artifact Registry.\n */\nfunction checkImageExists(imageUri: string, project: string): boolean {\n  const result = gcloudJson(\n    [\n      \"artifacts\",\n      \"docker\",\n      \"images\",\n      \"describe\",\n      imageUri,\n      \"--project\",\n      project,\n    ],\n    { ignoreErrors: true },\n  );\n\n  return result !== undefined;\n}\n"],"mappings":";;;;;;;;;;;;AAqCA,SAAS,mBAAmB,QAAwB;AAClD,QAAO,OACJ,QAAQ,0DAA0D,GAAG,CACrE,QAAQ,4DAA4D,GAAG,CACvE,MAAM;;AAGX,MAAM,iBAAiB;AACvB,MAAM,4BAA4B;AAClC,MAAM,uBAAuB;AAC7B,MAAM,uBAAuB;AAC7B,MAAM,WAAW;;;;;AAUjB,SAAS,wBAAwB,kBAAkC;CACjE,MAAM,aAAa,KAAK,KAAK,kBAAkB,sBAAsB;AAErE,KAAI,WAAW,WAAW,CACxB,KAAI;EACF,MAAM,gBAAgB,aAAa,YAAY,QAAQ;EACvD,MAAM,SAAS,KAAK,MAAM,cAAc;AACxC,MAAI,OAAO,kBACT,QAAO,KAAK,KAAK,kBAAkB,OAAO,kBAAkB;SAExD;AAKV,QAAO,KAAK,KAAK,kBAAkB,qBAAqB;;;;;;AAc1D,eAAsB,aACpB,SACwB;CACxB,MAAM,EAAE,OAAO,WAAW,qBAAqB;CAC/C,MAAM,SAAS,MAAM,UAAU;CAC/B,MAAM,mBAAmB,MAAM,oBAAoB;CACnD,MAAM,UAAU,UAAU;CAC1B,IAAI,aAAa,MAAM,eAAe;AAEtC,uBAAsB;AAEtB,KAAI,YACF;MAAI,CAAC,mBAAmB,EAAE;AACxB,WAAQ,KACN,oIAED;AACD,gBAAa;aACJ,CAAC,uBAAuB,CACjC,KAAI,CAAC,QAAQ,MAAM,OAAO;;AAExB,WAAQ,KACN,6DACD;AACD,gBAAa;SACR;GACL,MAAM,SAAS,MAAM,QAAQ,OAC3B,sDACA;IACE,MAAM;IACN,SAAS,CACP;KACE,OAAO;KACP,OAAO;KACP,MAAM;KACP,EACD;KACE,OAAO;KACP,OAAO;KACP,MAAM;KACP,CACF;IACF,CACF;AAED,OAAI,OAAO,WAAW,SACpB,SAAQ,KAAK,EAAE;AAGjB,OAAI,WAAW,SAGb;QAAI,CAFY,mBAAmB,EAErB;AACZ,aAAQ,KACN,qEACD;AACD,kBAAa;eAIT,CAFU,MAAM,qBAAqB,EAE7B;AACV,aAAQ,KACN,2EACD;AACD,kBAAa;;SAIjB,cAAa;;;;CAOrB,MAAM,mBAAmB,wBAAwB,iBAAiB;AAElE,SAAQ,MAAM,uBAAuB;AAErC,KAAI;EACF,MAAM,EAAE,SAAS,eAAe,MAAM,OAAO;EAE7C,MAAM,aAAa,KAAK,KAAK,kBAAkB,sBAAsB;AAKrE,QAAM,WAAW;GACf,GALiB,WAAW,WAAW,GACrC,KAAK,MAAM,aAAa,YAAY,QAAQ,CAAC,GAC7C,EAAE;GAIJ,wBAAwB;GACzB,CAAC;UACK,OAAO;EACd,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;AACtE,UAAQ,MAAM,8BAA8B,UAAU;AACtD,UAAQ,KAAK,EAAE;;AAGjB,SAAQ,QAAQ,mBAAmB;;CAGnC,MAAM,MAAM,MAAM,cAAc,iBAAiB;AACjD,SAAQ,KAAK,iBAAiB,MAAM;;CAGpC,MAAM,WAAW,GAAG,OAAO,GAAG,SAAS,GAAG,QAAQ,GAAG,iBAAiB,GAAG,MAAM,KAAK,GAAG;CAEvF,MAAM,cAAc,iBAAiB,UAAU,QAAQ;CACvD,IAAI,aAAa;AAEjB,KAAI,YACF,SAAQ,QAAQ,yBAAyB,MAAM,KAAK,GAAG,MAAM;UACpD,YAAY;;AAErB,UAAQ,MAAM,wCAAwC;EAEtD,MAAM,iBAAiB,KAAK,KAAK,kBAAkB,qBAAqB;AACxE,gBAAc,gBAAgB,oBAAoB,CAAC;AAEnD,MAAI;GACF,MAAM,cAAc,iBAClB,0CAA0C,SAAS,KACnD,EAAE,KAAK,kBAAkB,CAC1B;AAED,OAAI,CAAC,YAAY,SAAS;AACxB,YAAQ,MAAM,mCAAmC,YAAY,OAAO;AACpE,YAAQ,KAAK,EAAE;;AAGjB,WAAQ,QAAQ,gBAAgB,MAAM,KAAK,GAAG,MAAM;;AAGpD,qBAAkB;IAChB;IACA;IACA,GAAG,OAAO,GAAG;IACb;IACD,CAAC;AAEF,WAAQ,MAAM,wCAAwC;GAEtD,MAAM,aAAa,iBAAiB,eAAe,WAAW;AAE9D,OAAI,CAAC,WAAW,SAAS;AACvB,YAAQ,MAAM,kCAAkC,WAAW,OAAO;AAClE,YAAQ,KAAK,EAAE;;AAGjB,WAAQ,QAAQ,iBAAiB,MAAM,KAAK,GAAG,MAAM;AACrD,gBAAa;YACL;;AAER,OAAI;AACF,eAAW,eAAe;WACpB;;QAIL;;AAEL,UAAQ,MAAM,qCAAqC;EAEnD,MAAM,iBAAiB,KAAK,KAAK,kBAAkB,qBAAqB;AACxE,gBAAc,gBAAgB,oBAAoB,CAAC;AAEnD,MAAI;GACF,MAAM,cAAc,kBAClB;IACE;IACA;IACA;IACA;IACA;IACA;IACA,SAAS;IACT;IACD,EACD,EAAE,KAAK,kBAAkB,CAC1B;;GAGD,MAAM,eAAe,YAAY,OAAO,MACtC,iCACD;AACD,OAAI,aACF,SAAQ,KAAK,qBAAqB,aAAa,KAAK;AAGtD,OAAI,CAAC,YAAY,SAAS;AACxB,YAAQ,MAAM,kCAAkC,YAAY,OAAO;AACnE,YAAQ,KAAK,EAAE;;AAGjB,WAAQ,QAAQ,gBAAgB,MAAM,KAAK,GAAG,MAAM;AACpD,gBAAa;YACL;;AAER,OAAI;AACF,eAAW,eAAe;WACpB;;;AAMZ,QAAO;EAAE;EAAU;EAAY;EAAQ;EAAS;;;;;;;;AAoBlD,eAAsB,gBACpB,SACuB;CACvB,MAAM,EAAE,UAAU,eAAe,MAAM,aAAa,QAAQ;AAE5D,KAAI,CAAC,WACH,SAAQ,KAAK,4CAA4C;AAG3D,QAAO;EAAE;EAAU;EAAY;;;;;;AAiBjC,eAAsB,kBACpB,SACkB;CAClB,MAAM,EAAE,OAAO,WAAW,SAAS,UAAU,QAAQ,YAAY;CACjE,MAAM,SAAS,MAAM,WAAW,UAAU;CAC1C,MAAM,MAAM,MAAM,WAAW,OAAO;CACpC,MAAM,UAAU,MAAM,WAAW,WAAW;;CAG5C,MAAM,cAAc,WAClB;EACE;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACD,EACD,EAAE,cAAc,MAAM,CACvB;;CAGD,MAAM,UAAkC;EACtC,sBAAsB;EACtB,GAAG,UAAU;EACd;CAED,MAAM,gBAAgB,OAAO,QAAQ,QAAQ,CAC1C,KAAK,CAAC,KAAK,WAAW,GAAG,IAAI,GAAG,QAAQ,CACxC,KAAK,IAAI;CAIZ,MAAM,iBADc,UAAU,WAAW,EAAE,EAExC,KAAK,SAAS,GAAG,KAAK,GAAG,KAAK,SAAS,CACvC,KAAK,IAAI;AAEZ,KAAI,aAAa;AACf,UAAQ,MAAM,4BAA4B;EAE1C,MAAM,aAAa;GACjB;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA,WAAW;GACX,kBAAkB;GAClB,YAAY;GACZ,SAAS;GACT,kBAAkB,QAAQ;GAC1B;GACD;;;;;AAMD,aAAW,KAAK,iBAAiB,MAAM,WAAW,eAAe,IAAI;AAErE,MAAI,cACF,YAAW,KAAK,iBAAiB,gBAAgB;AAGnD,MAAI,MAAM,eACR,YAAW,KAAK,qBAAqB,MAAM,iBAAiB;AAG9D,MAAI,MAAM,SAAS;AACjB,cAAW,KAAK,aAAa,MAAM,QAAQ,OAAO;AAClD,OAAI,MAAM,QAAQ,OAChB,YAAW,KAAK,YAAY,MAAM,QAAQ,SAAS;AAErD,cAAW,KACT,gBAAgB,MAAM,QAAQ,UAAU,wBACzC;;EAGH,MAAM,SAAS,kBAAkB,WAAW;AAE5C,MAAI,CAAC,OAAO,SAAS;AACnB,WAAQ,MAAM,iCAAiC;AAC/C,WAAQ,KAAK,EAAE;;EAGjB,MAAM,WAAW,mBAAmB,OAAO,OAAO;AAClD,MAAI,SACF,SAAQ,OAAO,MAAM,WAAW,KAAK;AAGvC,UAAQ,QAAQ,0BAA0B,UAAU;AACpD,SAAO;;AAGT,SAAQ,MAAM,4BAA4B;CAE1C,MAAM,aAAa;EACjB;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,WAAW;EACX,kBAAkB;EAClB,YAAY;EACZ,SAAS;EACT,kBAAkB,QAAQ;EAC1B;EACD;AAED,KAAI,MAAM,WAAW,gBAAgB,OACnC,YAAW,KAAK,iBAAiB,MAAM,UAAU,cAAc;AAGjE,KAAI,cACF,YAAW,KAAK,iBAAiB,gBAAgB;AAGnD,KAAI,MAAM,eACR,YAAW,KAAK,qBAAqB,MAAM,iBAAiB;AAG9D,KAAI,MAAM,SAAS;AACjB,aAAW,KAAK,aAAa,MAAM,QAAQ,OAAO;AAClD,MAAI,MAAM,QAAQ,OAChB,YAAW,KAAK,YAAY,MAAM,QAAQ,SAAS;AAErD,aAAW,KACT,gBAAgB,MAAM,QAAQ,UAAU,wBACzC;;CAGH,MAAM,SAAS,kBAAkB,WAAW;AAE5C,KAAI,CAAC,OAAO,SAAS;AACnB,UAAQ,MAAM,iCAAiC;AAC/C,UAAQ,KAAK,EAAE;;CAGjB,MAAM,WAAW,mBAAmB,OAAO,OAAO;AAClD,KAAI,SACF,SAAQ,OAAO,MAAM,WAAW,KAAK;AAGvC,SAAQ,QAAQ,0BAA0B,UAAU;AACpD,QAAO;;;;;AAMT,SAAS,iBAAiB,UAAkB,SAA0B;AAcpE,QAbe,WACb;EACE;EACA;EACA;EACA;EACA;EACA;EACA;EACD,EACD,EAAE,cAAc,MAAM,CACvB,KAEiB"}

package/dist/cloud/gcloud.mjs

@@ -1,5 +1,5 @@
 import { consola } from "consola";
-import { execaCommandSync, execaSync } from "execa";
+import { execa, execaCommandSync, execaSync } from "execa";
 
 //#region src/cloud/gcloud.ts
 /**
@@ -75,9 +75,9 @@ function checkGcloudAvailable() {
 	}
 }
 /**
-* Check if Docker CLI is available.
+* Check if the Docker CLI binary is installed.
 */
-function isDockerAvailable() {
+function isDockerInstalled() {
 	try {
 		execaSync("docker", ["--version"]);
 		return true;
@@ -85,7 +85,62 @@ function isDockerAvailable() {
 		return false;
 	}
 }
+/**
+* Check if the Docker daemon is running by executing `docker info`.
+*/
+function isDockerDaemonRunning() {
+	try {
+		execaSync("docker", ["info"], { stdio: "pipe" });
+		return true;
+	} catch {
+		return false;
+	}
+}
+/**
+* Attempt to start the Docker daemon.
+* - macOS: opens the Docker Desktop application
+* - Linux: starts the docker systemd service
+* - Other platforms: unsupported, returns false
+*/
+function startDockerDaemon() {
+	try {
+		if (process.platform === "darwin") {
+			execaSync("open", ["-a", "Docker"]);
+			return true;
+		}
+		if (process.platform === "linux") {
+			execaSync("systemctl", ["start", "docker"]);
+			return true;
+		}
+		return false;
+	} catch {
+		return false;
+	}
+}
+/**
+* Poll `docker info` until the daemon is responsive or the timeout is reached.
+* Shows a spinner while waiting.
+*
+* @param timeoutMs - Maximum time to wait in milliseconds (default: 30000)
+* @param intervalMs - Polling interval in milliseconds (default: 2000)
+* @returns true if the daemon became available, false on timeout
+*/
+async function waitForDockerDaemon(timeoutMs = 3e4, intervalMs = 2e3) {
+	if (isDockerDaemonRunning()) return true;
+	consola.start("Waiting for Docker daemon to start...");
+	const deadline = Date.now() + timeoutMs;
+	while (Date.now() < deadline) {
+		await new Promise((resolve) => setTimeout(resolve, intervalMs));
+		try {
+			await execa("docker", ["info"], { stdio: "pipe" });
+			consola.success("Docker daemon is running");
+			return true;
+		} catch {}
+	}
+	consola.fail("Docker daemon did not start in time");
+	return false;
+}
 
 //#endregion
-export { checkGcloudAvailable, gcloudExecCapture, gcloudJson, isDockerAvailable, shellExecCapture };
+export { checkGcloudAvailable, gcloudExecCapture, gcloudJson, isDockerDaemonRunning, isDockerInstalled, shellExecCapture, startDockerDaemon, waitForDockerDaemon };
 //# sourceMappingURL=gcloud.mjs.map

package/dist/cloud/gcloud.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"gcloud.mjs","names":[],"sources":["../../src/cloud/gcloud.ts"],"sourcesContent":["import { execaCommandSync, execaSync } from \"execa\";\nimport { consola } from \"consola\";\n\nexport interface CapturedExecResult {\n  success: boolean;\n  output: string;\n  stderr: string;\n}\n\n/**\n * Execute a gcloud command and return the parsed JSON output.\n * Throws on non-zero exit code unless `ignoreErrors` is set.\n */\nexport function gcloudJson<T = unknown>(\n  args: string[],\n  options?: { ignoreErrors?: boolean },\n): T | undefined {\n  try {\n    const result = execaSync(\"gcloud\", [...args, \"--format=json\"]);\n    return JSON.parse(result.stdout) as T;\n  } catch (error) {\n    if (options?.ignoreErrors) {\n      return undefined;\n    }\n    throw error;\n  }\n}\n\n/**\n * Execute a gcloud command with stdio inherited (shows output in terminal).\n * Returns whether the command succeeded.\n */\nexport function gcloudExec(\n  args: string[],\n  options?: { cwd?: string },\n): boolean {\n  try {\n    execaSync(\"gcloud\", args, {\n      stdio: \"inherit\",\n      cwd: options?.cwd,\n      reject: true,\n    });\n    return true;\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Execute a shell command with stdio inherited.\n * Uses shell execution for commands that need shell features (like pnpm).\n */\nexport function shellExec(\n  command: string,\n  options?: { cwd?: string },\n): boolean {\n  try {\n    execaCommandSync(command, {\n      stdio: \"inherit\",\n      cwd: options?.cwd,\n      reject: true,\n    });\n    return true;\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Execute a gcloud command and capture all output instead of streaming it.\n * Returns success status and captured stdout/stderr for the caller to handle.\n */\nexport function gcloudExecCapture(\n  args: string[],\n  options?: { cwd?: string },\n): CapturedExecResult {\n  try {\n    const result = execaSync(\"gcloud\", args, {\n      cwd: options?.cwd,\n      reject: true,\n    });\n    return { success: true, output: result.stdout, stderr: result.stderr };\n  } catch (error) {\n    const stderr = (error as { stderr?: string }).stderr ?? \"\";\n    const stdout = (error as { stdout?: string }).stdout ?? \"\";\n    return {\n      success: false,\n      output: [stderr, stdout].filter(Boolean).join(\"\\n\"),\n      stderr,\n    };\n  }\n}\n\n/**\n * Execute a shell command and capture all output instead of streaming it.\n * Returns success status and captured output for the caller to handle.\n */\nexport function shellExecCapture(\n  command: string,\n  options?: { cwd?: string },\n): CapturedExecResult {\n  try {\n    const result = execaCommandSync(command, {\n      cwd: options?.cwd,\n      reject: true,\n    });\n    return { success: true, output: result.stdout, stderr: result.stderr };\n  } catch (error) {\n    const stderr = (error as { stderr?: string }).stderr ?? \"\";\n    const stdout = (error as { stdout?: string }).stdout ?? \"\";\n    return {\n      success: false,\n      output: [stderr, stdout].filter(Boolean).join(\"\\n\"),\n      stderr,\n    };\n  }\n}\n\n/**\n * Check if gcloud CLI is available and authenticated.\n */\nexport function checkGcloudAvailable(): void {\n  try {\n    execaSync(\"gcloud\", [\"--version\"]);\n  } catch {\n    consola.error(\n      \"gcloud CLI is not installed or not in PATH.\\n\" +\n        \"Install it from: https://cloud.google.com/sdk/docs/install\",\n    );\n    process.exit(1);\n  }\n}\n\n/**\n * Check if Docker CLI is available.\n */\nexport function isDockerAvailable(): boolean {\n  try {\n    execaSync(\"docker\", [\"--version\"]);\n    return true;\n  } catch {\n    return false;\n  }\n}\n"],"mappings":";;;;;;;;AAaA,SAAgB,WACd,MACA,SACe;AACf,KAAI;EACF,MAAM,SAAS,UAAU,UAAU,CAAC,GAAG,MAAM,gBAAgB,CAAC;AAC9D,SAAO,KAAK,MAAM,OAAO,OAAO;UACzB,OAAO;AACd,MAAI,SAAS,aACX;AAEF,QAAM;;;;;;;AAgDV,SAAgB,kBACd,MACA,SACoB;AACpB,KAAI;EACF,MAAM,SAAS,UAAU,UAAU,MAAM;GACvC,KAAK,SAAS;GACd,QAAQ;GACT,CAAC;AACF,SAAO;GAAE,SAAS;GAAM,QAAQ,OAAO;GAAQ,QAAQ,OAAO;GAAQ;UAC/D,OAAO;EACd,MAAM,SAAU,MAA8B,UAAU;AAExD,SAAO;GACL,SAAS;GACT,QAAQ,CAAC,QAHK,MAA8B,UAAU,GAG9B,CAAC,OAAO,QAAQ,CAAC,KAAK,KAAK;GACnD;GACD;;;;;;;AAQL,SAAgB,iBACd,SACA,SACoB;AACpB,KAAI;EACF,MAAM,SAAS,iBAAiB,SAAS;GACvC,KAAK,SAAS;GACd,QAAQ;GACT,CAAC;AACF,SAAO;GAAE,SAAS;GAAM,QAAQ,OAAO;GAAQ,QAAQ,OAAO;GAAQ;UAC/D,OAAO;EACd,MAAM,SAAU,MAA8B,UAAU;AAExD,SAAO;GACL,SAAS;GACT,QAAQ,CAAC,QAHK,MAA8B,UAAU,GAG9B,CAAC,OAAO,QAAQ,CAAC,KAAK,KAAK;GACnD;GACD;;;;;;AAOL,SAAgB,uBAA6B;AAC3C,KAAI;AACF,YAAU,UAAU,CAAC,YAAY,CAAC;SAC5B;AACN,UAAQ,MACN,0GAED;AACD,UAAQ,KAAK,EAAE;;;;;;AAOnB,SAAgB,oBAA6B;AAC3C,KAAI;AACF,YAAU,UAAU,CAAC,YAAY,CAAC;AAClC,SAAO;SACD;AACN,SAAO"}
+{"version":3,"file":"gcloud.mjs","names":[],"sources":["../../src/cloud/gcloud.ts"],"sourcesContent":["import { execaCommandSync, execaSync } from \"execa\";\nimport { execa } from \"execa\";\nimport { consola } from \"consola\";\n\nexport interface CapturedExecResult {\n  success: boolean;\n  output: string;\n  stderr: string;\n}\n\n/**\n * Execute a gcloud command and return the parsed JSON output.\n * Throws on non-zero exit code unless `ignoreErrors` is set.\n */\nexport function gcloudJson<T = unknown>(\n  args: string[],\n  options?: { ignoreErrors?: boolean },\n): T | undefined {\n  try {\n    const result = execaSync(\"gcloud\", [...args, \"--format=json\"]);\n    return JSON.parse(result.stdout) as T;\n  } catch (error) {\n    if (options?.ignoreErrors) {\n      return undefined;\n    }\n    throw error;\n  }\n}\n\n/**\n * Execute a gcloud command with stdio inherited (shows output in terminal).\n * Returns whether the command succeeded.\n */\nexport function gcloudExec(\n  args: string[],\n  options?: { cwd?: string },\n): boolean {\n  try {\n    execaSync(\"gcloud\", args, {\n      stdio: \"inherit\",\n      cwd: options?.cwd,\n      reject: true,\n    });\n    return true;\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Execute a shell command with stdio inherited.\n * Uses shell execution for commands that need shell features (like pnpm).\n */\nexport function shellExec(\n  command: string,\n  options?: { cwd?: string },\n): boolean {\n  try {\n    execaCommandSync(command, {\n      stdio: \"inherit\",\n      cwd: options?.cwd,\n      reject: true,\n    });\n    return true;\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Execute a gcloud command and capture all output instead of streaming it.\n * Returns success status and captured stdout/stderr for the caller to handle.\n */\nexport function gcloudExecCapture(\n  args: string[],\n  options?: { cwd?: string },\n): CapturedExecResult {\n  try {\n    const result = execaSync(\"gcloud\", args, {\n      cwd: options?.cwd,\n      reject: true,\n    });\n    return { success: true, output: result.stdout, stderr: result.stderr };\n  } catch (error) {\n    const stderr = (error as { stderr?: string }).stderr ?? \"\";\n    const stdout = (error as { stdout?: string }).stdout ?? \"\";\n    return {\n      success: false,\n      output: [stderr, stdout].filter(Boolean).join(\"\\n\"),\n      stderr,\n    };\n  }\n}\n\n/**\n * Execute a shell command and capture all output instead of streaming it.\n * Returns success status and captured output for the caller to handle.\n */\nexport function shellExecCapture(\n  command: string,\n  options?: { cwd?: string },\n): CapturedExecResult {\n  try {\n    const result = execaCommandSync(command, {\n      cwd: options?.cwd,\n      reject: true,\n    });\n    return { success: true, output: result.stdout, stderr: result.stderr };\n  } catch (error) {\n    const stderr = (error as { stderr?: string }).stderr ?? \"\";\n    const stdout = (error as { stdout?: string }).stdout ?? \"\";\n    return {\n      success: false,\n      output: [stderr, stdout].filter(Boolean).join(\"\\n\"),\n      stderr,\n    };\n  }\n}\n\n/**\n * Check if gcloud CLI is available and authenticated.\n */\nexport function checkGcloudAvailable(): void {\n  try {\n    execaSync(\"gcloud\", [\"--version\"]);\n  } catch {\n    consola.error(\n      \"gcloud CLI is not installed or not in PATH.\\n\" +\n        \"Install it from: https://cloud.google.com/sdk/docs/install\",\n    );\n    process.exit(1);\n  }\n}\n\n/**\n * Check if the Docker CLI binary is installed.\n */\nexport function isDockerInstalled(): boolean {\n  try {\n    execaSync(\"docker\", [\"--version\"]);\n    return true;\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Check if the Docker daemon is running by executing `docker info`.\n */\nexport function isDockerDaemonRunning(): boolean {\n  try {\n    execaSync(\"docker\", [\"info\"], { stdio: \"pipe\" });\n    return true;\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Attempt to start the Docker daemon.\n * - macOS: opens the Docker Desktop application\n * - Linux: starts the docker systemd service\n * - Other platforms: unsupported, returns false\n */\nexport function startDockerDaemon(): boolean {\n  try {\n    if (process.platform === \"darwin\") {\n      execaSync(\"open\", [\"-a\", \"Docker\"]);\n      return true;\n    }\n\n    if (process.platform === \"linux\") {\n      execaSync(\"systemctl\", [\"start\", \"docker\"]);\n      return true;\n    }\n\n    return false;\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Poll `docker info` until the daemon is responsive or the timeout is reached.\n * Shows a spinner while waiting.\n *\n * @param timeoutMs - Maximum time to wait in milliseconds (default: 30000)\n * @param intervalMs - Polling interval in milliseconds (default: 2000)\n * @returns true if the daemon became available, false on timeout\n */\nexport async function waitForDockerDaemon(\n  timeoutMs = 30_000,\n  intervalMs = 2_000,\n): Promise<boolean> {\n  if (isDockerDaemonRunning()) return true;\n\n  consola.start(\"Waiting for Docker daemon to start...\");\n\n  const deadline = Date.now() + timeoutMs;\n\n  while (Date.now() < deadline) {\n    await new Promise((resolve) => setTimeout(resolve, intervalMs));\n\n    try {\n      await execa(\"docker\", [\"info\"], { stdio: \"pipe\" });\n      consola.success(\"Docker daemon is running\");\n      return true;\n    } catch {\n      /** Daemon not ready yet */\n    }\n  }\n\n  consola.fail(\"Docker daemon did not start in time\");\n  return false;\n}\n"],"mappings":";;;;;;;;AAcA,SAAgB,WACd,MACA,SACe;AACf,KAAI;EACF,MAAM,SAAS,UAAU,UAAU,CAAC,GAAG,MAAM,gBAAgB,CAAC;AAC9D,SAAO,KAAK,MAAM,OAAO,OAAO;UACzB,OAAO;AACd,MAAI,SAAS,aACX;AAEF,QAAM;;;;;;;AAgDV,SAAgB,kBACd,MACA,SACoB;AACpB,KAAI;EACF,MAAM,SAAS,UAAU,UAAU,MAAM;GACvC,KAAK,SAAS;GACd,QAAQ;GACT,CAAC;AACF,SAAO;GAAE,SAAS;GAAM,QAAQ,OAAO;GAAQ,QAAQ,OAAO;GAAQ;UAC/D,OAAO;EACd,MAAM,SAAU,MAA8B,UAAU;AAExD,SAAO;GACL,SAAS;GACT,QAAQ,CAAC,QAHK,MAA8B,UAAU,GAG9B,CAAC,OAAO,QAAQ,CAAC,KAAK,KAAK;GACnD;GACD;;;;;;;AAQL,SAAgB,iBACd,SACA,SACoB;AACpB,KAAI;EACF,MAAM,SAAS,iBAAiB,SAAS;GACvC,KAAK,SAAS;GACd,QAAQ;GACT,CAAC;AACF,SAAO;GAAE,SAAS;GAAM,QAAQ,OAAO;GAAQ,QAAQ,OAAO;GAAQ;UAC/D,OAAO;EACd,MAAM,SAAU,MAA8B,UAAU;AAExD,SAAO;GACL,SAAS;GACT,QAAQ,CAAC,QAHK,MAA8B,UAAU,GAG9B,CAAC,OAAO,QAAQ,CAAC,KAAK,KAAK;GACnD;GACD;;;;;;AAOL,SAAgB,uBAA6B;AAC3C,KAAI;AACF,YAAU,UAAU,CAAC,YAAY,CAAC;SAC5B;AACN,UAAQ,MACN,0GAED;AACD,UAAQ,KAAK,EAAE;;;;;;AAOnB,SAAgB,oBAA6B;AAC3C,KAAI;AACF,YAAU,UAAU,CAAC,YAAY,CAAC;AAClC,SAAO;SACD;AACN,SAAO;;;;;;AAOX,SAAgB,wBAAiC;AAC/C,KAAI;AACF,YAAU,UAAU,CAAC,OAAO,EAAE,EAAE,OAAO,QAAQ,CAAC;AAChD,SAAO;SACD;AACN,SAAO;;;;;;;;;AAUX,SAAgB,oBAA6B;AAC3C,KAAI;AACF,MAAI,QAAQ,aAAa,UAAU;AACjC,aAAU,QAAQ,CAAC,MAAM,SAAS,CAAC;AACnC,UAAO;;AAGT,MAAI,QAAQ,aAAa,SAAS;AAChC,aAAU,aAAa,CAAC,SAAS,SAAS,CAAC;AAC3C,UAAO;;AAGT,SAAO;SACD;AACN,SAAO;;;;;;;;;;;AAYX,eAAsB,oBACpB,YAAY,KACZ,aAAa,KACK;AAClB,KAAI,uBAAuB,CAAE,QAAO;AAEpC,SAAQ,MAAM,wCAAwC;CAEtD,MAAM,WAAW,KAAK,KAAK,GAAG;AAE9B,QAAO,KAAK,KAAK,GAAG,UAAU;AAC5B,QAAM,IAAI,SAAS,YAAY,WAAW,SAAS,WAAW,CAAC;AAE/D,MAAI;AACF,SAAM,MAAM,UAAU,CAAC,OAAO,EAAE,EAAE,OAAO,QAAQ,CAAC;AAClD,WAAQ,QAAQ,2BAA2B;AAC3C,UAAO;UACD;;AAKV,SAAQ,KAAK,sCAAsC;AACnD,QAAO"}

package/dist/config.d.mts

@@ -19,6 +19,15 @@ interface CloudResources {
   /** Maximum number of tasks that can run in parallel. Default: unset (no limit) */
   parallelism?: number;
 }
+/** Direct VPC egress configuration for private network access (e.g., Redis) */
+interface CloudNetworkConfig {
+  /** VPC network name (e.g., "default") */
+  name: string;
+  /** VPC subnet name (e.g., "default") */
+  subnet?: string;
+  /** VPC egress mode. Default: "private-ranges-only" */
+  egress?: "all-traffic" | "private-ranges-only";
+}
 /** Configuration for Cloud Run Jobs execution */
 interface CloudConfig {
   /** Cloud Run Job name (e.g., "loads-predictions-jobs") */
@@ -36,6 +45,8 @@ interface CloudConfig {
    * Requires Docker to be installed and running. Default: true.
    */
   buildLocal?: boolean;
+  /** Direct VPC egress configuration for private network access */
+  network?: CloudNetworkConfig;
 }
 /** Full runner configuration provided by each service */
 interface RunnerConfig {
@@ -67,5 +78,5 @@ declare function defineRunnerConfig(config: RunnerConfig): RunnerConfig;
 /** Identity function for type-safe environment definition */
 declare function defineRunnerEnv(options: RunnerEnvOptions): RunnerEnvOptions;
 //#endregion
-export { CloudConfig, CloudResources, RunnerConfig, RunnerEnvOptions, defineRunnerConfig, defineRunnerEnv };
+export { CloudConfig, CloudNetworkConfig, CloudResources, RunnerConfig, RunnerEnvOptions, defineRunnerConfig, defineRunnerEnv };
 //# sourceMappingURL=config.d.mts.map

package/dist/config.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"config.mjs","names":[],"sources":["../src/config.ts"],"sourcesContent":["/** Environment configuration for a specific deployment target */\nexport interface RunnerEnvOptions {\n  /** GCP project ID — sets GOOGLE_CLOUD_PROJECT automatically */\n  project: string;\n  /** Additional environment variables to set before the job runs */\n  env?: Record<string, string>;\n  /** Secret names to load from GCP Secret Manager */\n  secrets?: string[];\n}\n\n/** Container resource limits for a Cloud Run Job */\nexport interface CloudResources {\n  /** Memory limit (e.g., \"512Mi\", \"1Gi\"). Default: \"512Mi\" */\n  memory?: string;\n  /** CPU limit (e.g., \"1\", \"2\"). Default: \"1\" */\n  cpu?: string;\n  /** Job timeout in seconds. Default: 86400 (24 hours) */\n  timeout?: number;\n  /** Maximum number of tasks that can run in parallel. Default: unset (no limit) */\n  parallelism?: number;\n}\n\n/** Configuration for Cloud Run Jobs execution */\nexport interface CloudConfig {\n  /** Cloud Run Job name (e.g., \"loads-predictions-jobs\") */\n  name: string;\n  /** GCP region. Default: \"us-central1\" */\n  region?: string;\n  /** Artifact Registry repository name. Default: \"cloud-run\" */\n  artifactRegistry?: string;\n  /** Container resource limits */\n  resources?: CloudResources;\n  /** Service account email for the Cloud Run Job */\n  serviceAccount?: string;\n  /**\n   * Build Docker images locally instead of using Cloud Build.\n   * Requires Docker to be installed and running. Default: true.\n   */\n  buildLocal?: boolean;\n}\n\n/** Full runner configuration provided by each service */\nexport interface RunnerConfig {\n  /**\n   * Absolute path to the directory containing job scripts.\n   * Default: `dist/jobs` relative to cwd.\n   */\n  jobsDirectory?: string;\n  /** Optional initialization function called before the job runs (skipped for --help) */\n  initialize?: () => void | Promise<void>;\n  /** Optional custom logger (defaults to console) */\n  logger?: {\n    info: (message: string) => void;\n    error: (message: string) => void;\n  };\n  /** Named environments (e.g., stag, prod) */\n  environments: Record<string, RunnerEnvOptions>;\n  /** Cloud Run Jobs configuration (required for `job cloud run/deploy` commands) */\n  cloud?: CloudConfig;\n  /**\n   * Command to build workspace dependencies before running jobs.\n   * Set to `false` to skip the build step entirely.\n   * Default: \"turbo build\"\n   */\n  buildCommand?: string | false;\n}\n\n/** Identity function for type-safe runner config definition */\nexport function defineRunnerConfig(config: RunnerConfig): RunnerConfig {\n  return config;\n}\n\n/** Identity function for type-safe environment definition */\nexport function defineRunnerEnv(options: RunnerEnvOptions): RunnerEnvOptions {\n  return options;\n}\n"],"mappings":";;AAoEA,SAAgB,mBAAmB,QAAoC;AACrE,QAAO;;;AAIT,SAAgB,gBAAgB,SAA6C;AAC3E,QAAO"}
+{"version":3,"file":"config.mjs","names":[],"sources":["../src/config.ts"],"sourcesContent":["/** Environment configuration for a specific deployment target */\nexport interface RunnerEnvOptions {\n  /** GCP project ID — sets GOOGLE_CLOUD_PROJECT automatically */\n  project: string;\n  /** Additional environment variables to set before the job runs */\n  env?: Record<string, string>;\n  /** Secret names to load from GCP Secret Manager */\n  secrets?: string[];\n}\n\n/** Container resource limits for a Cloud Run Job */\nexport interface CloudResources {\n  /** Memory limit (e.g., \"512Mi\", \"1Gi\"). Default: \"512Mi\" */\n  memory?: string;\n  /** CPU limit (e.g., \"1\", \"2\"). Default: \"1\" */\n  cpu?: string;\n  /** Job timeout in seconds. Default: 86400 (24 hours) */\n  timeout?: number;\n  /** Maximum number of tasks that can run in parallel. Default: unset (no limit) */\n  parallelism?: number;\n}\n\n/** Direct VPC egress configuration for private network access (e.g., Redis) */\nexport interface CloudNetworkConfig {\n  /** VPC network name (e.g., \"default\") */\n  name: string;\n  /** VPC subnet name (e.g., \"default\") */\n  subnet?: string;\n  /** VPC egress mode. Default: \"private-ranges-only\" */\n  egress?: \"all-traffic\" | \"private-ranges-only\";\n}\n\n/** Configuration for Cloud Run Jobs execution */\nexport interface CloudConfig {\n  /** Cloud Run Job name (e.g., \"loads-predictions-jobs\") */\n  name: string;\n  /** GCP region. Default: \"us-central1\" */\n  region?: string;\n  /** Artifact Registry repository name. Default: \"cloud-run\" */\n  artifactRegistry?: string;\n  /** Container resource limits */\n  resources?: CloudResources;\n  /** Service account email for the Cloud Run Job */\n  serviceAccount?: string;\n  /**\n   * Build Docker images locally instead of using Cloud Build.\n   * Requires Docker to be installed and running. Default: true.\n   */\n  buildLocal?: boolean;\n  /** Direct VPC egress configuration for private network access */\n  network?: CloudNetworkConfig;\n}\n\n/** Full runner configuration provided by each service */\nexport interface RunnerConfig {\n  /**\n   * Absolute path to the directory containing job scripts.\n   * Default: `dist/jobs` relative to cwd.\n   */\n  jobsDirectory?: string;\n  /** Optional initialization function called before the job runs (skipped for --help) */\n  initialize?: () => void | Promise<void>;\n  /** Optional custom logger (defaults to console) */\n  logger?: {\n    info: (message: string) => void;\n    error: (message: string) => void;\n  };\n  /** Named environments (e.g., stag, prod) */\n  environments: Record<string, RunnerEnvOptions>;\n  /** Cloud Run Jobs configuration (required for `job cloud run/deploy` commands) */\n  cloud?: CloudConfig;\n  /**\n   * Command to build workspace dependencies before running jobs.\n   * Set to `false` to skip the build step entirely.\n   * Default: \"turbo build\"\n   */\n  buildCommand?: string | false;\n}\n\n/** Identity function for type-safe runner config definition */\nexport function defineRunnerConfig(config: RunnerConfig): RunnerConfig {\n  return config;\n}\n\n/** Identity function for type-safe environment definition */\nexport function defineRunnerEnv(options: RunnerEnvOptions): RunnerEnvOptions {\n  return options;\n}\n"],"mappings":";;AAgFA,SAAgB,mBAAmB,QAAoC;AACrE,QAAO;;;AAIT,SAAgB,gBAAgB,SAA6C;AAC3E,QAAO"}

package/dist/index.d.mts

@@ -1,8 +1,8 @@
-import { CloudConfig, CloudResources, RunnerConfig, RunnerEnvOptions, defineRunnerConfig, defineRunnerEnv } from "./config.mjs";
+import { CloudConfig, CloudNetworkConfig, CloudResources, RunnerConfig, RunnerEnvOptions, defineRunnerConfig, defineRunnerEnv } from "./config.mjs";
 import { FlagAliases, JobFunction, JobInfo, JobMetadata, JobOptions, RunJobOptions } from "./types.mjs";
 import { defineJob } from "./define-job.mjs";
 import { discoverJobs } from "./discover-jobs.mjs";
 import { FieldInfo, extractFieldInfo, formatZodError, generateSchemaHelp, schemaToParseArgsOptions } from "./help.mjs";
 import { TaskContext, getTaskContext } from "./task-context.mjs";
 import { runJob } from "./run-job.mjs";
-export { type CloudConfig, type CloudResources, type FieldInfo, type FlagAliases, type JobFunction, type JobInfo, type JobMetadata, type JobOptions, type RunJobOptions, type RunnerConfig, type RunnerEnvOptions, type TaskContext, defineJob, defineRunnerConfig, defineRunnerEnv, discoverJobs, extractFieldInfo, formatZodError, generateSchemaHelp, getTaskContext, runJob, schemaToParseArgsOptions };
+export { type CloudConfig, type CloudNetworkConfig, type CloudResources, type FieldInfo, type FlagAliases, type JobFunction, type JobInfo, type JobMetadata, type JobOptions, type RunJobOptions, type RunnerConfig, type RunnerEnvOptions, type TaskContext, defineJob, defineRunnerConfig, defineRunnerEnv, discoverJobs, extractFieldInfo, formatZodError, generateSchemaHelp, getTaskContext, runJob, schemaToParseArgsOptions };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gcp-job-runner",
-  "version": "1.4.1",
+  "version": "1.5.0",
   "description": "Run schema-driven Cloud Run jobs seamlessly in any environment",
   "license": "MIT",
   "repository": {
@@ -44,19 +44,19 @@
     "@google-cloud/secret-manager": "^6.1.1",
     "consola": "^3.4.0",
     "execa": "^9.6.1",
-    "isolate-package": "1.27.0",
+    "isolate-package": "1.28.2",
     "zod": "^4.3.6"
   },
   "devDependencies": {
-    "@codecompose/typescript-config": "2.3.0",
-    "@types/node": "^25.0.10",
+    "@codecompose/typescript-config": "3.0.0",
+    "@types/node": "^25.3.0",
     "del-cli": "^7.0.0",
     "husky": "^9.1.7",
     "lint-staged": "^16.2.7",
-    "oxfmt": "^0.32.0",
-    "oxlint": "^1.47.0",
+    "oxfmt": "^0.34.0",
+    "oxlint": "^1.49.0",
     "tsdown": "^0.20.1",
-    "typescript": "^5.9.3",
+    "typescript": "6.0.0-beta",
     "vitepress": "^1.6.4",
     "vitest": "^4.0.18"
   },
@@ -70,7 +70,7 @@
     ]
   },
   "engines": {
-    "node": ">=22.0.0"
+    "node": ">=22.6.0"
   },
   "packageManager": "pnpm@10.22.0"
 }

package/src/cloud/deploy.ts

@@ -5,7 +5,10 @@ import type { CloudConfig, RunnerEnvOptions } from "../config";
 import { generateDockerfile } from "./dockerfile";
 import {
   checkGcloudAvailable,
-  isDockerAvailable,
+  isDockerInstalled,
+  isDockerDaemonRunning,
+  startDockerDaemon,
+  waitForDockerDaemon,
   gcloudExecCapture,
   gcloudJson,
   shellExecCapture,
@@ -93,12 +96,67 @@ export async function prepareImage(
 
   checkGcloudAvailable();
 
-  if (buildLocal && !isDockerAvailable()) {
-    consola.warn(
-      "Docker is not available, falling back to Cloud Build. " +
-        "Install Docker for faster local builds: https://docs.docker.com/get-docker/",
-    );
-    buildLocal = false;
+  if (buildLocal) {
+    if (!isDockerInstalled()) {
+      consola.warn(
+        "Docker is not installed, falling back to Cloud Build. " +
+          "Install Docker for faster local builds: https://docs.docker.com/get-docker/",
+      );
+      buildLocal = false;
+    } else if (!isDockerDaemonRunning()) {
+      if (!process.stdin.isTTY) {
+        /** Non-interactive environment (CI) — fall back automatically */
+        consola.warn(
+          "Docker daemon is not running, falling back to Cloud Build.",
+        );
+        buildLocal = false;
+      } else {
+        const choice = await consola.prompt(
+          "Docker is installed but the daemon is not running.",
+          {
+            type: "select",
+            options: [
+              {
+                label: "Start Docker",
+                value: "start",
+                hint: "attempt to start the daemon",
+              },
+              {
+                label: "Use Cloud Build",
+                value: "cloud-build",
+                hint: "build remotely instead",
+              },
+            ],
+          },
+        );
+
+        if (typeof choice === "symbol") {
+          process.exit(0);
+        }
+
+        if (choice === "start") {
+          const started = startDockerDaemon();
+
+          if (!started) {
+            consola.warn(
+              "Could not start Docker automatically, falling back to Cloud Build.",
+            );
+            buildLocal = false;
+          } else {
+            const ready = await waitForDockerDaemon();
+
+            if (!ready) {
+              consola.warn(
+                "Docker daemon did not become ready in time, falling back to Cloud Build.",
+              );
+              buildLocal = false;
+            }
+          }
+        } else {
+          buildLocal = false;
+        }
+      }
+    }
   }
 
   /** Step 1: Run isolate to bundle workspace dependencies */
@@ -351,6 +409,16 @@ export async function createOrUpdateJob(
       updateArgs.push(`--service-account=${cloud.serviceAccount}`);
     }
 
+    if (cloud.network) {
+      updateArgs.push(`--network=${cloud.network.name}`);
+      if (cloud.network.subnet) {
+        updateArgs.push(`--subnet=${cloud.network.subnet}`);
+      }
+      updateArgs.push(
+        `--vpc-egress=${cloud.network.egress ?? "private-ranges-only"}`,
+      );
+    }
+
     const result = gcloudExecCapture(updateArgs);
 
     if (!result.success) {
@@ -398,6 +466,16 @@ export async function createOrUpdateJob(
     createArgs.push(`--service-account=${cloud.serviceAccount}`);
   }
 
+  if (cloud.network) {
+    createArgs.push(`--network=${cloud.network.name}`);
+    if (cloud.network.subnet) {
+      createArgs.push(`--subnet=${cloud.network.subnet}`);
+    }
+    createArgs.push(
+      `--vpc-egress=${cloud.network.egress ?? "private-ranges-only"}`,
+    );
+  }
+
   const result = gcloudExecCapture(createArgs);
 
   if (!result.success) {

package/src/cloud/docker-fallback.test.ts

@@ -0,0 +1,195 @@
+import { describe, expect, it, vi, beforeEach, type Mock } from "vitest";
+import { consola } from "consola";
+
+/**
+ * Mock all external dependencies so we can test the Docker detection
+ * and fallback branching in prepareImage() without Docker or gcloud.
+ */
+vi.mock("consola", () => ({
+  consola: {
+    warn: vi.fn(),
+    start: vi.fn(),
+    success: vi.fn(),
+    info: vi.fn(),
+    error: vi.fn(),
+    prompt: vi.fn(),
+  },
+}));
+
+vi.mock("./gcloud", () => ({
+  checkGcloudAvailable: vi.fn(),
+  isDockerInstalled: vi.fn(() => true),
+  isDockerDaemonRunning: vi.fn(() => true),
+  startDockerDaemon: vi.fn(() => true),
+  waitForDockerDaemon: vi.fn(async () => true),
+  gcloudJson: vi.fn(),
+  gcloudExecCapture: vi.fn(() => ({ success: true, output: "", stderr: "" })),
+  shellExecCapture: vi.fn(() => ({ success: true, output: "", stderr: "" })),
+}));
+
+vi.mock("isolate-package", () => ({
+  isolate: vi.fn(async () => {}),
+}));
+
+vi.mock("./dockerfile", () => ({
+  generateDockerfile: vi.fn(() => "FROM node:22"),
+}));
+
+vi.mock("./hash", () => ({
+  hashDirectory: vi.fn(async () => "abc123"),
+}));
+
+vi.mock("node:fs", async () => {
+  const actual = await vi.importActual("node:fs");
+  return {
+    ...actual,
+    existsSync: vi.fn(() => false),
+    readFileSync: vi.fn(() => "{}"),
+    writeFileSync: vi.fn(),
+    unlinkSync: vi.fn(),
+  };
+});
+
+import {
+  isDockerInstalled,
+  isDockerDaemonRunning,
+  startDockerDaemon,
+  waitForDockerDaemon,
+  gcloudJson,
+} from "./gcloud";
+import { prepareImage, type DeployOptions } from "./deploy";
+
+const defaultOptions: DeployOptions = {
+  cloud: { name: "test-job", buildLocal: true },
+  envConfig: { project: "test-project" },
+  serviceDirectory: "/tmp/test-service",
+};
+
+/** Stub gcloudJson to report no existing image */
+function stubNoExistingImage() {
+  (gcloudJson as Mock).mockReturnValue(undefined);
+}
+
+describe("prepareImage Docker fallback", () => {
+  beforeEach(() => {
+    vi.restoreAllMocks();
+    /** Defaults: Docker installed, daemon running, no existing image */
+    (isDockerInstalled as Mock).mockReturnValue(true);
+    (isDockerDaemonRunning as Mock).mockReturnValue(true);
+    (startDockerDaemon as Mock).mockReturnValue(true);
+    (waitForDockerDaemon as Mock).mockResolvedValue(true);
+    stubNoExistingImage();
+  });
+
+  it("falls back to Cloud Build with warning when Docker is not installed", async () => {
+    (isDockerInstalled as Mock).mockReturnValue(false);
+
+    await prepareImage(defaultOptions);
+
+    expect(consola.warn).toHaveBeenCalledWith(
+      expect.stringContaining("Docker is not installed"),
+    );
+    expect(isDockerDaemonRunning).not.toHaveBeenCalled();
+  });
+
+  it("builds locally when Docker is installed and daemon is running", async () => {
+    await prepareImage(defaultOptions);
+
+    expect(consola.warn).not.toHaveBeenCalled();
+    expect(consola.prompt).not.toHaveBeenCalled();
+  });
+
+  describe("daemon not running, non-interactive (no TTY)", () => {
+    beforeEach(() => {
+      (isDockerDaemonRunning as Mock).mockReturnValue(false);
+      Object.defineProperty(process.stdin, "isTTY", {
+        value: false,
+        configurable: true,
+      });
+    });
+
+    it("falls back to Cloud Build without prompting", async () => {
+      await prepareImage(defaultOptions);
+
+      expect(consola.prompt).not.toHaveBeenCalled();
+      expect(consola.warn).toHaveBeenCalledWith(
+        expect.stringContaining("falling back to Cloud Build"),
+      );
+    });
+  });
+
+  describe("daemon not running, interactive (TTY)", () => {
+    beforeEach(() => {
+      (isDockerDaemonRunning as Mock).mockReturnValue(false);
+      Object.defineProperty(process.stdin, "isTTY", {
+        value: true,
+        configurable: true,
+      });
+    });
+
+    it("prompts the user when daemon is not running", async () => {
+      (consola.prompt as Mock).mockResolvedValue("cloud-build");
+
+      await prepareImage(defaultOptions);
+
+      expect(consola.prompt).toHaveBeenCalledWith(
+        expect.stringContaining("daemon is not running"),
+        expect.objectContaining({ type: "select" }),
+      );
+    });
+
+    it("falls back to Cloud Build when user chooses cloud-build", async () => {
+      (consola.prompt as Mock).mockResolvedValue("cloud-build");
+
+      await prepareImage(defaultOptions);
+
+      expect(startDockerDaemon).not.toHaveBeenCalled();
+    });
+
+    it("starts Docker and waits when user chooses start", async () => {
+      (consola.prompt as Mock).mockResolvedValue("start");
+
+      await prepareImage(defaultOptions);
+
+      expect(startDockerDaemon).toHaveBeenCalled();
+      expect(waitForDockerDaemon).toHaveBeenCalled();
+    });
+
+    it("falls back to Cloud Build when Docker fails to start", async () => {
+      (consola.prompt as Mock).mockResolvedValue("start");
+      (startDockerDaemon as Mock).mockReturnValue(false);
+
+      await prepareImage(defaultOptions);
+
+      expect(consola.warn).toHaveBeenCalledWith(
+        expect.stringContaining("Could not start Docker automatically"),
+      );
+      expect(waitForDockerDaemon).not.toHaveBeenCalled();
+    });
+
+    it("falls back to Cloud Build when daemon does not become ready in time", async () => {
+      (consola.prompt as Mock).mockResolvedValue("start");
+      (waitForDockerDaemon as Mock).mockResolvedValue(false);
+
+      await prepareImage(defaultOptions);
+
+      expect(consola.warn).toHaveBeenCalledWith(
+        expect.stringContaining("did not become ready in time"),
+      );
+    });
+
+    it("exits when user cancels the prompt", async () => {
+      (consola.prompt as Mock).mockResolvedValue(Symbol("cancel"));
+
+      const exitSpy = vi.spyOn(process, "exit").mockImplementation(() => {
+        throw new Error("process.exit");
+      });
+
+      await expect(prepareImage(defaultOptions)).rejects.toThrow(
+        "process.exit",
+      );
+
+      expect(exitSpy).toHaveBeenCalledWith(0);
+    });
+  });
+});

package/src/cloud/gcloud.ts

@@ -1,4 +1,5 @@
 import { execaCommandSync, execaSync } from "execa";
+import { execa } from "execa";
 import { consola } from "consola";
 
 export interface CapturedExecResult {
@@ -132,9 +133,9 @@ export function checkGcloudAvailable(): void {
 }
 
 /**
- * Check if Docker CLI is available.
+ * Check if the Docker CLI binary is installed.
  */
-export function isDockerAvailable(): boolean {
+export function isDockerInstalled(): boolean {
   try {
     execaSync("docker", ["--version"]);
     return true;
@@ -142,3 +143,73 @@ export function isDockerAvailable(): boolean {
     return false;
   }
 }
+
+/**
+ * Check if the Docker daemon is running by executing `docker info`.
+ */
+export function isDockerDaemonRunning(): boolean {
+  try {
+    execaSync("docker", ["info"], { stdio: "pipe" });
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+/**
+ * Attempt to start the Docker daemon.
+ * - macOS: opens the Docker Desktop application
+ * - Linux: starts the docker systemd service
+ * - Other platforms: unsupported, returns false
+ */
+export function startDockerDaemon(): boolean {
+  try {
+    if (process.platform === "darwin") {
+      execaSync("open", ["-a", "Docker"]);
+      return true;
+    }
+
+    if (process.platform === "linux") {
+      execaSync("systemctl", ["start", "docker"]);
+      return true;
+    }
+
+    return false;
+  } catch {
+    return false;
+  }
+}
+
+/**
+ * Poll `docker info` until the daemon is responsive or the timeout is reached.
+ * Shows a spinner while waiting.
+ *
+ * @param timeoutMs - Maximum time to wait in milliseconds (default: 30000)
+ * @param intervalMs - Polling interval in milliseconds (default: 2000)
+ * @returns true if the daemon became available, false on timeout
+ */
+export async function waitForDockerDaemon(
+  timeoutMs = 30_000,
+  intervalMs = 2_000,
+): Promise<boolean> {
+  if (isDockerDaemonRunning()) return true;
+
+  consola.start("Waiting for Docker daemon to start...");
+
+  const deadline = Date.now() + timeoutMs;
+
+  while (Date.now() < deadline) {
+    await new Promise((resolve) => setTimeout(resolve, intervalMs));
+
+    try {
+      await execa("docker", ["info"], { stdio: "pipe" });
+      consola.success("Docker daemon is running");
+      return true;
+    } catch {
+      /** Daemon not ready yet */
+    }
+  }
+
+  consola.fail("Docker daemon did not start in time");
+  return false;
+}

package/src/config.ts

@@ -20,6 +20,16 @@ export interface CloudResources {
   parallelism?: number;
 }
 
+/** Direct VPC egress configuration for private network access (e.g., Redis) */
+export interface CloudNetworkConfig {
+  /** VPC network name (e.g., "default") */
+  name: string;
+  /** VPC subnet name (e.g., "default") */
+  subnet?: string;
+  /** VPC egress mode. Default: "private-ranges-only" */
+  egress?: "all-traffic" | "private-ranges-only";
+}
+
 /** Configuration for Cloud Run Jobs execution */
 export interface CloudConfig {
   /** Cloud Run Job name (e.g., "loads-predictions-jobs") */
@@ -37,6 +47,8 @@ export interface CloudConfig {
    * Requires Docker to be installed and running. Default: true.
    */
   buildLocal?: boolean;
+  /** Direct VPC egress configuration for private network access */
+  network?: CloudNetworkConfig;
 }
 
 /** Full runner configuration provided by each service */

package/src/index.ts

@@ -13,6 +13,7 @@ export { runJob } from "./run-job";
 export type { TaskContext } from "./task-context";
 export type {
   CloudConfig,
+  CloudNetworkConfig,
   CloudResources,
   RunnerConfig,
   RunnerEnvOptions,