@treeseed/cli 0.10.17 → 0.10.20

package/dist/cli/handlers/config-ui.d.ts

@@ -21,6 +21,9 @@ type ConfigEntry = {
     purposes: string[];
     storage: 'shared' | 'scoped';
     validation?: ConfigValidation;
+    sourceRequirement?: string;
+    sourceHostType?: string | null;
+    sourceProvider?: string | null;
     scope: Exclude<ConfigScope, 'all'>;
     sharedScopes: Array<Exclude<ConfigScope, 'all'>>;
     required: boolean;

package/dist/cli/handlers/config-ui.js

@@ -336,6 +336,9 @@ function buildStartupDetailLines(step, draftValue) {
     `Applies to: ${step.scopes.join(", ")}`,
     `Required in: ${step.requiredScopes.join(", ")}`,
     `Storage: ${step.entry.storage}`,
+    ...step.entry.sourceRequirement ? [
+      `Host source: ${step.entry.sourceRequirement}${step.entry.sourceProvider ? ` (${step.entry.sourceProvider})` : ""}${step.entry.sourceHostType ? ` / ${step.entry.sourceHostType}` : ""}`
+    ] : [],
     "",
     `Current value: ${formatDisplayValue(step, step.currentValue, "(unset)")}`,
     `Suggested value: ${formatDisplayValue(step, step.suggestedValue, "(none)")}`,
@@ -356,6 +359,9 @@ function buildFullDetailLines(page, draftValue) {
     `Scope: ${page.scopes.join(", ")}`,
     `Storage: ${page.entry.storage} | ${page.required ? "required" : "optional"}`,
     `Group: ${page.entry.group}`,
+    ...page.entry.sourceRequirement ? [
+      `Host source: ${page.entry.sourceRequirement}${page.entry.sourceProvider ? ` (${page.entry.sourceProvider})` : ""}${page.entry.sourceHostType ? ` / ${page.entry.sourceHostType}` : ""}`
+    ] : [],
     "",
     `Current: ${formatDisplayValue(page, page.currentValue, "(unset)")}`,
     `Suggested: ${formatDisplayValue(page, page.suggestedValue, "(none)")}`,

package/dist/cli/handlers/config.js

@@ -32,7 +32,8 @@ function formatPrintEnvReports(payload) {
     lines.push(`Resolved environment values for ${report.scope}`);
     lines.push(payload.secretsRevealed ? "Secrets are shown." : "Secret values are masked.");
     for (const entry of report.environment?.entries ?? []) {
-      lines.push(`${entry.id}=${entry.displayValue} (${entry.source})`);
+      const hostSource = entry.sourceRequirement ? ` requirement=${entry.sourceRequirement}${entry.sourceProvider ? ` provider=${entry.sourceProvider}` : ""}${entry.sourceHostType ? ` hostType=${entry.sourceHostType}` : ""}` : "";
+      lines.push(`${entry.id}=${entry.displayValue} (${entry.source}${hostSource})`);
     }
     lines.push("");
     lines.push(`Provider connection checks for ${report.scope}`);

package/dist/cli/handlers/init.js

@@ -1,6 +1,10 @@
+import { TREESEED_DEFAULT_STARTER_TEMPLATE_ID } from "@treeseed/sdk";
 import { TreeseedOperationsSdk } from "@treeseed/sdk/operations";
 import { guidedResult } from "./utils.js";
 const operations = new TreeseedOperationsSdk();
+function normalizeRepeatable(value) {
+  return Array.isArray(value) ? value.map(String) : typeof value === "string" ? [value] : [];
+}
 const handleInit = async (invocation, context) => {
   const directory = invocation.positionals[0];
   const result = await operations.execute({
@@ -13,7 +17,8 @@ const handleInit = async (invocation, context) => {
       siteUrl: invocation.args.siteUrl,
       contactEmail: invocation.args.contactEmail,
       repo: invocation.args.repo,
-      discord: invocation.args.discord
+      discord: invocation.args.discord,
+      hostBindingSpecs: normalizeRepeatable(invocation.args.host)
     }
   }, {
     cwd: context.cwd,
@@ -31,13 +36,35 @@ const handleInit = async (invocation, context) => {
       report: result.payload
     };
   }
+  const payload = result.payload;
+  const hostSummaries = Array.isArray(payload?.hostBindingSummaries) ? payload.hostBindingSummaries : [];
+  const configWrites = Array.isArray(payload?.hostBindingConfig?.configWrites) ? payload.hostBindingConfig.configWrites : [];
+  const environmentWrites = Array.isArray(payload?.hostBindingConfig?.environmentWrites) ? payload.hostBindingConfig.environmentWrites : [];
   return guidedResult({
     command: "init",
     summary: "Treeseed init completed successfully.",
-    facts: [{ label: "Directory", value: directory ?? "(current directory)" }],
+    facts: [
+      { label: "Directory", value: directory ?? "(current directory)" },
+      { label: "Template", value: String(payload?.template ?? TREESEED_DEFAULT_STARTER_TEMPLATE_ID) },
+      { label: "Host bindings", value: hostSummaries.length > 0 ? hostSummaries.length : "(none)" }
+    ],
+    sections: [
+      ...hostSummaries.length > 0 ? [{
+        title: "Host Bindings",
+        lines: hostSummaries.map((summary) => `${summary.requirementKey}: ${summary.mode}${summary.provider ? ` ${summary.provider}` : ""}${summary.alias ? ` (${summary.alias})` : ""}`)
+      }] : [],
+      ...configWrites.length > 0 ? [{
+        title: "Config Writes",
+        lines: configWrites.map((write) => `${write.target} ${write.path} <- ${write.provider ?? "template"}`)
+      }] : [],
+      ...environmentWrites.length > 0 ? [{
+        title: "Environment Entries",
+        lines: environmentWrites.map((entry) => `${entry.env}: ${entry.sensitivity} from ${entry.requirementKey}${entry.sourceProvider ? ` (${entry.sourceProvider})` : ""}`)
+      }] : []
+    ],
     nextSteps: [
       `cd ${directory}`,
-      "treeseed template show starter-basic",
+      `treeseed template show ${String(payload?.template ?? TREESEED_DEFAULT_STARTER_TEMPLATE_ID)}`,
       "treeseed sync --check",
       "treeseed doctor",
       "treeseed config --environment local",
@@ -45,7 +72,11 @@ const handleInit = async (invocation, context) => {
     ],
     report: {
       directory: directory ?? null,
-      template: result.payload?.template ?? null
+      template: payload?.template ?? null,
+      hostBindings: payload?.hostBindings ?? {},
+      hostBindingPlans: payload?.hostBindingPlans ?? null,
+      hostBindingSummaries: hostSummaries,
+      hostBindingConfig: payload?.hostBindingConfig ?? null
     }
   });
 };

package/dist/cli/handlers/projects.js

@@ -1,4 +1,5 @@
 import { MarketApiError } from "@treeseed/sdk/market-client";
+import { parseProjectLaunchHostBindingSpecs } from "@treeseed/sdk";
 import { fail, guidedResult } from "./utils.js";
 import { createMarketClientForInvocation } from "./market-utils.js";
 const DEPLOYMENT_TERMINAL_STATUSES = /* @__PURE__ */ new Set(["succeeded", "failed", "cancelled", "timed_out"]);
@@ -39,8 +40,10 @@ function projectUsage(action) {
       return "Usage: treeseed projects deployments <project-id>";
     case "deployment":
       return "Usage: treeseed projects deployment <project-id> <deployment-id>";
+    case "hosts":
+      return "Usage: treeseed projects hosts [audit|replace|resync|rotate] <project-id> [--host <requirement=provider:host-id|managed>]";
     default:
-      return "Usage: treeseed projects [list|access|deploy|publish|monitor|deployments|deployment]";
+      return "Usage: treeseed projects [list|access|hosts|deploy|publish|monitor|deployments|deployment]";
   }
 }
 function authFailure(error) {
@@ -106,6 +109,55 @@ function deploymentLine(deployment) {
     deploymentUrl(deployment)
   ].filter(Boolean).join("  ");
 }
+function normalizeRepeatable(value) {
+  if (Array.isArray(value)) return value.map(String).filter((entry) => entry.trim());
+  return typeof value === "string" && value.trim() ? [value.trim()] : [];
+}
+function hostBindingLine(entry) {
+  const binding = entry?.binding ?? {};
+  const audit = entry?.audit ?? {};
+  return [
+    entry.requirementKey,
+    entry.required ? "required" : "optional",
+    entry.type,
+    binding.provider ?? "(none)",
+    binding.hostId ?? binding.managedHostKey ?? "(not selected)",
+    audit.status ?? "ok"
+  ].filter(Boolean).join("  ");
+}
+function operationFacts(projectId, response) {
+  const operation = response.operation ?? null;
+  return [
+    { label: "Project", value: projectId },
+    { label: "Operation", value: operation?.id ?? null },
+    { label: "Status", value: operation?.status ?? null },
+    { label: "Poll", value: operation?.pollUrl ?? null }
+  ].filter((fact) => fact.value != null && fact.value !== "");
+}
+function hostBindingForMarket(parsed, requirementKey) {
+  const summary = parsed.summaries.find((entry) => entry.requirementKey === requirementKey) ?? parsed.omitted.find((entry) => entry.requirementKey === requirementKey);
+  const binding = parsed.hostBindings[requirementKey];
+  if (summary?.mode === "none") {
+    return {
+      requirementKey,
+      requirementKind: "host",
+      type: summary.type,
+      provider: summary.provider ?? "",
+      hostId: null,
+      managedHostKey: null,
+      mode: "none",
+      selectedBy: "user"
+    };
+  }
+  if (!binding || !summary) return null;
+  return {
+    ...binding,
+    hostId: summary.mode === "team_owned" ? summary.alias : null,
+    managedHostKey: summary.mode === "treeseed_managed" ? summary.alias === "managed" ? binding.managedHostKey : summary.alias : null,
+    displayName: summary.displayName,
+    environmentScopes: binding.environmentScopes?.filter((scope) => scope !== "local") ?? ["staging", "prod"]
+  };
+}
 function waitExitCode(status) {
   if (status === "succeeded") return 0;
   if (status === "timed_out") return 4;
@@ -226,6 +278,86 @@ const handleProjects = async (invocation, context) => {
         report: { marketId: profile.id, access: redact(response.payload) }
       });
     }
+    if (action === "hosts") {
+      const subaction = ["audit", "replace", "resync", "rotate"].includes(String(invocation.positionals[1])) ? String(invocation.positionals[1]) : "list";
+      const projectId = subaction === "list" ? invocation.positionals[1] : invocation.positionals[2];
+      if (!projectId) return fail(projectUsage(action));
+      if (subaction === "list") {
+        const response2 = await client.projectHosts(projectId);
+        const view2 = response2.payload.view ?? {};
+        return guidedResult({
+          command: "projects",
+          summary: "Treeseed project host bindings",
+          facts: [
+            { label: "Project", value: projectId },
+            { label: "Status", value: view2.summary?.status ?? "ok" },
+            { label: "Requirements", value: view2.summary?.total ?? 0 }
+          ],
+          sections: [{
+            title: "Host requirements",
+            lines: (view2.requirements ?? []).map(hostBindingLine)
+          }],
+          report: { marketId: profile.id, projectId, hosts: redact(response2.payload) }
+        });
+      }
+      if (subaction === "audit") {
+        const response2 = await client.auditProjectHosts(projectId, {
+          idempotencyKey: stringArg(invocation, "idempotencyKey")
+        });
+        const view2 = response2.payload.view ?? {};
+        return guidedResult({
+          command: "projects",
+          summary: "Treeseed project host audit",
+          facts: [
+            { label: "Project", value: projectId },
+            { label: "Status", value: view2.summary?.status ?? "ok" },
+            { label: "Warnings", value: view2.summary?.warnings ?? 0 },
+            { label: "Blocked", value: view2.summary?.blocked ?? 0 }
+          ],
+          sections: [{
+            title: "Diagnostics",
+            lines: (view2.diagnostics ?? []).map((entry) => `${entry.status}  ${entry.requirementKey ?? ""}  ${entry.message}`)
+          }],
+          report: { marketId: profile.id, projectId, audit: redact(response2.payload) }
+        });
+      }
+      const hostSpecs = normalizeRepeatable(invocation.args.host);
+      const hostSnapshot = await client.projectHosts(projectId);
+      const launchRequirements = hostSnapshot.payload.launchRequirements ?? null;
+      let requirementKey = stringArg(invocation, "requirement");
+      let hostBinding = null;
+      if (subaction === "replace") {
+        if (hostSpecs.length !== 1) return fail("Host replacement requires exactly one --host <requirement=provider:host-id|managed> spec.");
+        try {
+          const parsed = parseProjectLaunchHostBindingSpecs({ specs: hostSpecs, launchRequirements });
+          requirementKey = requirementKey ?? parsed.summaries[0]?.requirementKey ?? parsed.omitted[0]?.requirementKey ?? null;
+          if (!requirementKey) return fail("Host replacement could not determine a launch requirement key.");
+          hostBinding = hostBindingForMarket(parsed, requirementKey);
+          if (!hostBinding) return fail("Host replacement could not normalize the selected host binding.");
+        } catch (error) {
+          return fail(error instanceof Error ? error.message : String(error));
+        }
+      }
+      if (!requirementKey) return fail(`${subaction} requires --requirement <key>.`);
+      const body = {
+        ...hostBinding ? { hostBinding } : {},
+        ...stringArg(invocation, "sensitivePassphrase") ? { sensitivePassphrase: stringArg(invocation, "sensitivePassphrase") } : {},
+        ...stringArg(invocation, "idempotencyKey") ? { idempotencyKey: stringArg(invocation, "idempotencyKey") } : {}
+      };
+      const response = subaction === "replace" ? await client.replaceProjectHost(projectId, requirementKey, body) : subaction === "resync" ? await client.resyncProjectHost(projectId, requirementKey, body) : await client.rotateProjectHost(projectId, requirementKey, body);
+      const view = response.payload.view ?? {};
+      return guidedResult({
+        command: "projects",
+        summary: `Treeseed project host ${subaction} queued`,
+        facts: operationFacts(projectId, response),
+        sections: [{
+          title: "Host requirements",
+          lines: (view.requirements ?? []).map(hostBindingLine)
+        }],
+        nextSteps: response.operation?.id ? [`trsd projects hosts ${projectId}`, `trsd operations ${response.operation.id}`] : [`trsd projects hosts ${projectId}`],
+        report: { marketId: profile.id, projectId, response: redact(response) }
+      });
+    }
     if (action === "connect") {
       return fail("Use treeseed config --connect-market --market-project-id <project-id> for project pairing.");
     }

package/dist/cli/handlers/template.js

@@ -9,6 +9,50 @@ import {
 import { guidedResult } from "./utils.js";
 import { marketAuthRoot, marketSelector } from "./market-utils.js";
 const operations = new TreeseedOperationsSdk();
+function requirementStatus(required) {
+  return required === true ? "required" : "optional";
+}
+function providerList(requirement) {
+  return Array.isArray(requirement.compatibleProviders) && requirement.compatibleProviders.length > 0 ? requirement.compatibleProviders.join(", ") : "any provider";
+}
+function renderLaunchRequirementSections(template) {
+  const launchRequirements = template.launchRequirements;
+  if (!launchRequirements) {
+    return [{ title: "Launch Requirements", lines: ["No launch requirements declared."] }];
+  }
+  const hosts = Array.isArray(launchRequirements.hosts) ? launchRequirements.hosts : [];
+  const resources = Array.isArray(launchRequirements.resources) ? launchRequirements.resources : [];
+  const secrets = Array.isArray(launchRequirements.secrets) ? launchRequirements.secrets : [];
+  const configurableRequirements = [...hosts, ...resources];
+  const configWrites = configurableRequirements.flatMap((requirement) => Array.isArray(requirement.configWrites) ? requirement.configWrites.map((write) => `${requirement.key}: ${write.target}.${write.path} <- ${write.valueFrom}${write.writeWhen ? ` (${write.writeWhen})` : ""}`) : []);
+  const environmentWrites = configurableRequirements.flatMap((requirement) => Array.isArray(requirement.environmentWrites) ? requirement.environmentWrites.map((write) => `${requirement.key}: ${write.env} -> ${(write.targets ?? []).join(", ") || "config"} [${(write.scopes ?? []).join(", ") || "template scopes"}]`) : []);
+  return [
+    {
+      title: "Required Hosts",
+      lines: hosts.filter((host) => host.required === true).map((host) => `${host.key}: ${host.type} via ${providerList(host)} - ${host.purpose ?? host.displayName}`)
+    },
+    {
+      title: "Optional Hosts",
+      lines: hosts.filter((host) => host.required !== true).map((host) => `${host.key}: ${host.type} via ${providerList(host)} - ${host.purpose ?? host.displayName}`)
+    },
+    {
+      title: "Resources",
+      lines: resources.length > 0 ? resources.map((resource) => `${resource.key}: ${resource.type} ${requirementStatus(resource.required)} via ${providerList(resource)}`) : ["No resource lifecycle requirements in this phase."]
+    },
+    {
+      title: "Secrets",
+      lines: secrets.length > 0 ? secrets.map((secret) => `${secret.key}: ${secret.env} ${requirementStatus(secret.required)} -> ${(secret.targets ?? []).join(", ")}`) : ["No standalone secret requirements declared."]
+    },
+    {
+      title: "Config Writes",
+      lines: configWrites.length > 0 ? configWrites : ["No config writes declared."]
+    },
+    {
+      title: "Environment Targets",
+      lines: environmentWrites.length > 0 ? environmentWrites : ["No host-derived environment targets declared."]
+    }
+  ].filter((section) => section.lines.length > 0);
+}
 const handleTemplate = async (invocation, context) => {
   if (invocation.positionals[0] === "search" || invocation.positionals[0] === "install" || typeof invocation.args.market === "string") {
     const action = invocation.positionals[0] ?? "search";
@@ -78,6 +122,52 @@ const handleTemplate = async (invocation, context) => {
     outputFormat: context.outputFormat,
     transport: "cli"
   });
+  if (context.outputFormat === "json" || !result.ok) {
+    return {
+      exitCode: result.exitCode ?? (result.ok ? 0 : 1),
+      stdout: result.stdout,
+      stderr: result.stderr,
+      report: result.payload
+    };
+  }
+  const payload = result.payload;
+  if (payload?.action === "show" && payload.template) {
+    const template = payload.template;
+    return guidedResult({
+      command: "template",
+      summary: `Template ${template.id} is ready to scaffold.`,
+      facts: [
+        { label: "Name", value: template.displayName ?? template.id },
+        { label: "Status", value: template.status ?? "(unknown)" },
+        { label: "Version", value: template.templateVersion ?? "(unversioned)" },
+        { label: "Fulfillment", value: template.fulfillmentMode ?? "(unknown)" }
+      ],
+      sections: renderLaunchRequirementSections(template),
+      report: payload
+    });
+  }
+  if (payload?.action === "list" && Array.isArray(payload.templates)) {
+    return guidedResult({
+      command: "template",
+      summary: "Treeseed starter templates",
+      sections: [{
+        title: "Templates",
+        lines: payload.templates.map((template) => `${template.id}  ${template.displayName ?? template.id}  ${template.status ?? "unknown"}`)
+      }],
+      report: payload
+    });
+  }
+  if (payload?.action === "validate") {
+    return guidedResult({
+      command: "template",
+      summary: "Template validation completed.",
+      sections: [{
+        title: "Validated",
+        lines: Array.isArray(payload.validated) ? payload.validated.map(String) : []
+      }],
+      report: payload
+    });
+  }
   return {
     exitCode: result.exitCode ?? (result.ok ? 0 : 1),
     stdout: result.stdout,

package/dist/cli/operations-registry.js

@@ -2,6 +2,7 @@ import {
   findTreeseedOperation as findSdkOperation,
   TRESEED_OPERATION_SPECS as SDK_OPERATION_SPECS
 } from "@treeseed/sdk/operations";
+import { TREESEED_DEFAULT_STARTER_TEMPLATE_ID } from "@treeseed/sdk";
 function command(overlay) {
   return overlay;
 }
@@ -848,14 +849,14 @@ const CLI_COMMAND_OVERLAYS = /* @__PURE__ */ new Map([
       { name: "version", flags: "--version <version>", description: "Artifact version for market template install.", kind: "string" },
       { name: "json", flags: "--json", description: "Emit machine-readable JSON instead of human-readable text.", kind: "boolean" }
     ],
-    examples: ["treeseed template", "treeseed template list", "treeseed template show starter-basic", "treeseed template validate"],
+    examples: ["treeseed template", "treeseed template list", `treeseed template show ${TREESEED_DEFAULT_STARTER_TEMPLATE_ID}`, "treeseed template validate"],
     help: {
       longSummary: [
         "Template exposes local starter catalog actions and market-backed search/install actions. Market search/install uses an integrated catalog from central and configured specialized markets, with every result labeled by source market."
       ],
       examples: [
         example("treeseed template", "Default to the catalog list", "Show the available starters without specifying an action."),
-        example("treeseed template show starter-basic", "Inspect a single starter", "View the details of one starter template."),
+        example(`treeseed template show ${TREESEED_DEFAULT_STARTER_TEMPLATE_ID}`, "Inspect a single starter", "View the details of one starter template."),
         example("treeseed template validate", "Validate the current template set", "Run template validation to confirm the catalog is internally consistent.")
       ]
     },
@@ -881,15 +882,19 @@ const CLI_COMMAND_OVERLAYS = /* @__PURE__ */ new Map([
   ["init", command({
     arguments: [{ name: "directory", description: "Target directory for the new tenant.", required: true }],
     options: [
-      { name: "template", flags: "--template <starter-id>", description: "Select the starter template id to generate. Defaults to starter-basic.", kind: "string" },
+      { name: "template", flags: "--template <starter-id>", description: `Select the starter template id to generate. Defaults to ${TREESEED_DEFAULT_STARTER_TEMPLATE_ID}.`, kind: "string" },
       { name: "name", flags: "--name <site-name>", description: "Override the generated site name.", kind: "string" },
       { name: "slug", flags: "--slug <slug>", description: "Override the generated package and tenant slug.", kind: "string" },
       { name: "siteUrl", flags: "--site-url <url>", description: "Set the initial public site URL.", kind: "string" },
       { name: "contactEmail", flags: "--contact-email <email>", description: "Set the site contact address.", kind: "string" },
       { name: "repo", flags: "--repo <url>", description: "Set the repository URL.", kind: "string" },
-      { name: "discord", flags: "--discord <url>", description: "Set the Discord/community URL.", kind: "string" }
+      { name: "discord", flags: "--discord <url>", description: "Set the Discord/community URL.", kind: "string" },
+      { name: "host", flags: "--host <requirement=provider:alias>", description: "Bind a template launch requirement locally. Repeat for multiple requirements, or use requirement=none for optional hosts.", kind: "string", repeatable: true }
+    ],
+    examples: [
+      `treeseed init docs-site --template ${TREESEED_DEFAULT_STARTER_TEMPLATE_ID} --name "Docs Site" --site-url https://docs.example.com`,
+      `treeseed init docs-site --template ${TREESEED_DEFAULT_STARTER_TEMPLATE_ID} --host sourceRepository=github:acme --host publicWeb=cloudflare:managed`
     ],
-    examples: ['treeseed init docs-site --template starter-basic --name "Docs Site" --site-url https://docs.example.com'],
     notes: ["Runs outside an existing repo or from any branch."],
     help: {
       workflowPosition: "create workspace",
@@ -909,7 +914,8 @@ const CLI_COMMAND_OVERLAYS = /* @__PURE__ */ new Map([
         "Seeds the project metadata fields requested through the CLI flags."
       ],
       examples: [
-        example('treeseed init docs-site --template starter-basic --name "Docs Site" --site-url https://docs.example.com', "Create a starter site", "Scaffold a new tenant using the basic starter and explicit branding metadata."),
+        example(`treeseed init docs-site --template ${TREESEED_DEFAULT_STARTER_TEMPLATE_ID} --name "Docs Site" --site-url https://docs.example.com`, "Create a starter site", "Scaffold a new tenant using the default starter and explicit branding metadata."),
+        example(`treeseed init docs-site --template ${TREESEED_DEFAULT_STARTER_TEMPLATE_ID} --host sourceRepository=github:acme --host publicWeb=cloudflare:managed`, "Bind launch hosts locally", "Apply host-derived starter config during scaffold without calling Market inventory APIs."),
         example("treeseed init workbench --slug workbench --contact-email ops@example.com", "Control project identity fields", "Initialize a tenant while overriding slug and contact metadata at creation time."),
         example("treeseed init docs-site --repo https://github.com/example/docs-site --discord https://discord.gg/example", "Seed community and repository metadata", "Attach repository and community URLs during project initialization.")
       ],
@@ -1498,11 +1504,11 @@ const CLI_ONLY_OPERATION_SPECS = [
     name: "projects",
     aliases: [],
     group: "Utilities",
-    summary: "Inspect projects and run web deployment operations from the selected market.",
-    description: "List market projects, inspect access, and queue or inspect project web deployment operations through the Market API.",
+    summary: "Inspect projects, project hosts, and web deployment operations from the selected market.",
+    description: "List market projects, inspect access and host bindings, and queue project host or web deployment operations through the Market API.",
     provider: "default",
     related: ["market", "teams", "config"],
-    usage: "treeseed projects [list|access|deploy|publish|monitor|deployments|deployment]",
+    usage: "treeseed projects [list|access|hosts|deploy|publish|monitor|deployments|deployment]",
     arguments: [
       { name: "action", description: "Projects action.", required: false },
       { name: "project-id", description: "Project id for deployment and access actions.", required: false },
@@ -1518,6 +1524,9 @@ const CLI_ONLY_OPERATION_SPECS = [
       { name: "dryRun", flags: "--dry-run", description: "Queue a dry-run deployment request when supported.", kind: "boolean" },
       { name: "reason", flags: "--reason <text>", description: "Presentation-safe reason stored on the deployment request.", kind: "string" },
       { name: "idempotencyKey", flags: "--idempotency-key <key>", description: "Deterministic idempotency key for the deployment request.", kind: "string" },
+      { name: "requirement", flags: "--requirement <key>", description: "Launch host requirement key for project host resync or rotate operations.", kind: "string" },
+      { name: "host", flags: "--host <requirement=provider:host-id>", description: "Replacement host binding for `projects hosts replace`. Use requirement=provider:managed for a managed host or requirement=none for optional hosts.", kind: "string", repeatable: true },
+      { name: "sensitivePassphrase", flags: "--sensitive-passphrase <passphrase>", description: "One-time unlock passphrase for team-owned host credentials. Avoid this in shell history; prefer interactive UI when possible.", kind: "string" },
       { name: "yes", flags: "--yes", description: "Required confirmation for production deploy and publish actions.", kind: "boolean" },
       { name: "limit", flags: "--limit <count>", description: "Maximum number of deployments to list.", kind: "string" },
       { name: "json", flags: "--json", description: "Emit machine-readable JSON instead of human-readable text.", kind: "boolean" }
@@ -1525,14 +1534,17 @@ const CLI_ONLY_OPERATION_SPECS = [
     examples: [
       "treeseed projects list",
       "treeseed projects access project_123",
+      "treeseed projects hosts project_123",
+      "treeseed projects hosts audit project_123",
+      "treeseed projects hosts replace project_123 --host publicWeb=cloudflare:web-host-123",
       "treeseed projects deploy project_123 --environment staging --wait",
       "treeseed projects publish project_123 --environment prod --yes",
       "treeseed projects deployments project_123 --json",
       "treeseed projects deployment project_123 dep_123"
     ],
     help: {
-      longSummary: ["Projects reads project, access, and deployment state from the selected market API using the SDK market client."],
-      whenToUse: ["Use this to inspect projects, queue staging or production web deployment operations, and inspect the same deployment state shown in the Market UI."],
+      longSummary: ["Projects reads project, host binding, access, and deployment state from the selected market API using the SDK market client."],
+      whenToUse: ["Use this to inspect projects, audit or replace launch host bindings, queue staging or production web deployment operations, and inspect the same state shown in the Market UI."],
       beforeYouRun: ["Authenticate to the market with `treeseed auth:login --market <selector>` and know the project id before queueing deployment work."],
       automationNotes: ["Use `--json` to capture project lists, deployment records, events, and wait results for automation."],
       warnings: ["Production deploy and publish require `--yes`; without it the CLI exits before calling the API."]

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@treeseed/cli",
-  "version": "0.10.17",
+  "version": "0.10.20",
   "description": "Operator-facing Treeseed CLI package.",
   "license": "AGPL-3.0-only",
   "repository": {
@@ -45,7 +45,7 @@
     "release:publish": "node ./scripts/run-ts.mjs ./scripts/publish-package.ts"
   },
   "dependencies": {
-    "@treeseed/sdk": "github:treeseed-ai/sdk#0.10.23",
+    "@treeseed/sdk": "github:treeseed-ai/sdk#0.10.26",
     "ink": "^7.0.0",
     "react": "^19.2.5"
   },