@treeseed/cli 0.10.21 → 0.11.0

package/dist/cli/operations-registry.js

@@ -25,6 +25,8 @@ const DEV_RUNTIME_OPTIONS = [
   { name: "host", flags: "--host <host>", description: "Host for the web dev server.", kind: "string" },
   { name: "port", flags: "--port <port>", description: "Port for the web dev server.", kind: "string" },
   { name: "webRuntime", flags: "--web-runtime <mode>", description: "Choose the local web runtime. Use local for Astro hot reload or provider for provider parity.", kind: "enum", values: ["auto", "local", "provider"] },
+  { name: "app", flags: "--app <app-id>", description: "Select a discovered Treeseed app for local dev, such as web or api.", kind: "string" },
+  { name: "api", flags: "--api <mode>", description: "Choose whether the web app uses a local API app or a configured remote API.", kind: "enum", values: ["auto", "local", "remote"] },
   { name: "apiHost", flags: "--api-host <host>", description: "Host used to construct the local API URL.", kind: "string" },
   { name: "apiPort", flags: "--api-port <port>", description: "Port for the local API server.", kind: "string" },
   { name: "setup", flags: "--setup <mode>", description: "Control automatic local runtime setup.", kind: "enum", values: ["auto", "check", "off"] },
@@ -377,25 +379,32 @@ const CLI_COMMAND_OVERLAYS = /* @__PURE__ */ new Map([
       { name: "hotfix", flags: "--hotfix", description: "Allow save on main for an explicit hotfix.", kind: "boolean" },
       { name: "preview", flags: "--preview", description: "Create or refresh the branch preview during save.", kind: "boolean" },
       { name: "worktreeMode", flags: "--worktree <mode>", description: "Control managed workflow worktrees.", kind: "enum", values: ["auto", "on", "off"] },
+      { name: "lane", flags: "--lane <mode>", description: "Select save lane: fast local checkpoint or promotion-grade hosted checks.", kind: "enum", values: ["fast", "promotion"] },
       { name: "ciMode", flags: "--ci <mode>", description: "Control hosted GitHub Actions waits.", kind: "enum", values: ["auto", "hosted", "off"] },
       { name: "verifyMode", flags: "--verify <mode>", description: "Control save verification depth.", kind: "enum", values: ["fast", "local", "hosted", "both", "skip"] },
+      { name: "releaseCandidate", flags: "--release-candidate <mode>", description: "Control staging save release-candidate checks.", kind: "enum", values: ["hybrid", "strict", "skip"] },
       { name: "verifyDeployedResources", flags: "--verify-deployed-resources", description: "Also wait for hosted deployment checks that verify provider resources.", kind: "boolean" },
       { name: "workspaceLinks", flags: "--workspace-links <mode>", description: "Control local workspace package links.", kind: "enum", values: ["auto", "off"] },
       { name: "plan", flags: "--plan", description: "Compute the recursive save plan without mutating any repo.", kind: "boolean" },
       { name: "dryRun", flags: "--dry-run", description: "Alias for --plan.", kind: "boolean" },
       { name: "json", flags: "--json", description: "Emit machine-readable JSON instead of human-readable text.", kind: "boolean" }
     ],
-    examples: ["treeseed save", 'treeseed save "add search filters"', "treeseed save --preview", "treeseed save --plan", 'treeseed save --hotfix "fix production form submit"'],
+    examples: ["treeseed save", 'treeseed save "add search filters"', "treeseed save --preview", "treeseed save --lane promotion", "treeseed save --release-candidate strict", "treeseed save --plan", 'treeseed save --hotfix "fix production form submit"'],
     help: {
       workflowPosition: "checkpoint work",
       longSummary: [
         "Save is the main task-branch checkpoint command. It verifies, commits, syncs, pushes, and can refresh the task preview so the branch remains in a clean, reviewable state.",
-        "Use it instead of ad hoc manual git-and-preview sequences when you want the standard Treeseed task-save behavior."
+        "Use it instead of ad hoc manual git-and-preview sequences when you want the standard Treeseed task-save behavior.",
+        "Save has two lanes. The default fast lane is for routine integrated checkpoints. The explicit promotion lane is for checkpoints that should wait for hosted gates and strict release-candidate proof."
       ],
       whenToUse: [
         "Use this after a meaningful unit of work on a task branch.",
+        "Use the default fast lane for routine code, docs, and low-risk package checkpoints where local lockfile validation and lightweight release-candidate checks are enough.",
+        "Use `--verify local` when a fast-lane checkpoint should also run package-local verification before pushing.",
         "Use `--preview` when the branch preview should be refreshed as part of the save operation.",
+        "Use `--lane promotion` when a save should wait for hosted gates and strict release-candidate checks like a promotion rehearsal.",
         "Use `--verify-deployed-resources` on staging or production branches when the checkpoint should wait for deployed provider resources to be verified.",
+        "Use `--release-candidate strict` on staging when dependency topology changed and you want a full clean-install rehearsal even if the cache says hybrid is enough.",
         "Use `--hotfix` only when you are intentionally saving from `main` for an explicit production hotfix flow."
       ],
       beforeYouRun: [
@@ -405,15 +414,21 @@ const CLI_COMMAND_OVERLAYS = /* @__PURE__ */ new Map([
       outcomes: [
         "Verifies and commits current work using a generated commit message.",
         "Syncs and pushes branch state.",
+        "Fast lane saves dependency-ordered repos without hosted CI/deploy waits or strict clean-install rehearsal unless another option requests them.",
+        "Promotion lane waits for hosted gates on staging and uses strict release-candidate checks by default.",
         "Optionally refreshes preview infrastructure if requested."
       ],
       examples: [
-        example("treeseed save", "Generated checkpoint", "Verify, commit, and push the current task branch with a generated message."),
+        example("treeseed save", "Fast checkpoint", "Commit and push the current task branch through the default fast lane."),
         example('treeseed save "add search filters"', "Checkpoint with a hint", "Feed a short hint into commit-message generation without replacing the generated message."),
+        example('treeseed save --verify local "add search filters"', "Fast checkpoint with local verification", "Keep hosted waits off while running package-local verification before pushing."),
+        example('treeseed save --lane promotion "prove dependency topology"', "Promotion-grade checkpoint", "Wait for hosted staging gates and strict release-candidate proof before returning."),
         example("treeseed save --preview", "Checkpoint plus preview refresh", "Include preview refresh when the save should update the branch environment."),
         example('treeseed save --hotfix "fix production form submit"', "Explicit hotfix save", "Allow a save from main when the work is a deliberate hotfix path.", { why: "Use sparingly and only when the workflow intentionally bypasses the usual task-branch rule." })
       ],
       warnings: [
+        "Fast lane is intentionally optimized for iteration. Use `stage`, `release`, or `save --lane promotion` when hosted proof is required.",
+        "`--verify local` can still be expensive because package-local verify scripts may run builds, unit tests, and smoke tests even though hosted gates remain off.",
         "`--hotfix` deliberately loosens the normal task-branch safety model. Keep it exceptional."
       ],
       relatedDetails: [
@@ -659,9 +674,11 @@ const CLI_COMMAND_OVERLAYS = /* @__PURE__ */ new Map([
   ["doctor", command({
     options: [
       { name: "fix", flags: "--fix", description: "Apply safe local repairs before rerunning diagnostics.", kind: "boolean" },
+      { name: "live", flags: "--live", description: "Include read-only live provider and hosted service checks.", kind: "boolean" },
+      { name: "hostedServices", flags: "--hosted-services", description: "Include config-driven hosted service checks.", kind: "boolean" },
       { name: "json", flags: "--json", description: "Emit machine-readable JSON instead of human-readable text.", kind: "boolean" }
     ],
-    examples: ["treeseed doctor", "treeseed doctor --fix --json"],
+    examples: ["treeseed doctor", "treeseed doctor --live --json", "treeseed doctor --fix --json"],
     help: {
       workflowPosition: "validate",
       longSummary: [
@@ -669,7 +686,8 @@ const CLI_COMMAND_OVERLAYS = /* @__PURE__ */ new Map([
       ],
       whenToUse: [
         "Use this when other commands are failing or when onboarding a machine and you want a readiness report.",
-        "Use `--fix` when you want Treeseed to apply safe local repairs before rerunning diagnostics."
+        "Use `--fix` when you want Treeseed to apply safe local repairs before rerunning diagnostics.",
+        "Use `--live` or `--hosted-services` before staging or release when Railway, Cloudflare, and DNS resources should be checked from configuration."
       ],
       outcomes: [
         "Reports readiness issues and what must be fixed immediately.",
@@ -677,6 +695,7 @@ const CLI_COMMAND_OVERLAYS = /* @__PURE__ */ new Map([
       ],
       examples: [
         example("treeseed doctor", "Run diagnostics only", "Inspect the current machine and workspace without making repairs."),
+        example("treeseed doctor --live --json", "Check hosted services", "Include config-driven hosted service checks in JSON diagnostics."),
         example("treeseed doctor --fix", "Repair safe local issues", "Apply safe fixes first and then rerun diagnostics."),
         example("treeseed doctor --fix --json", "Integrate diagnostics with automation", "Emit structured diagnostics and repair results for scripts or agents.")
       ],
@@ -752,7 +771,7 @@ const CLI_COMMAND_OVERLAYS = /* @__PURE__ */ new Map([
   ["auth:login", command({
     options: [
       { name: "host", flags: "--host <id>", description: "Override the configured remote host id for this login.", kind: "string" },
-      { name: "market", flags: "--market <id-or-url>", description: "Limit catalog lookup to one configured market id or direct market API URL. Without this, search/install uses the integrated catalog from all configured catalog markets.", kind: "string" },
+      { name: "market", flags: "--market <id-or-url>", description: "Limit catalog lookup to one configured market id or direct API URL. Without this, search/install uses the integrated catalog from all configured catalog markets.", kind: "string" },
       { name: "json", flags: "--json", description: "Emit machine-readable JSON instead of human-readable text.", kind: "boolean" }
     ],
     examples: ["treeseed auth:login"],
@@ -760,7 +779,7 @@ const CLI_COMMAND_OVERLAYS = /* @__PURE__ */ new Map([
       longSummary: ["Auth:login authenticates the CLI against the configured Treeseed API so later provider-aware and remote-aware workflows can run without missing-credential failures."],
       examples: [
         example("treeseed auth:login", "Log in with the default host", "Authenticate the CLI against the configured default Treeseed API host."),
-        example("treeseed auth:login --market local", "Log in to local dev", "Authenticate against the local Treeseed API at TREESEED_MARKET_API_BASE_URL or http://127.0.0.1:3000."),
+        example("treeseed auth:login --market local", "Log in to local dev", "Authenticate against the local Treeseed API at TREESEED_API_BASE_URL or http://127.0.0.1:3000."),
         example("treeseed auth:login --host production", "Target a specific host id", "Override the configured default host for this login session."),
         example("treeseed auth:login --json", "Automate auth workflows", "Emit structured auth results where supported for scripts and agents.")
       ]
@@ -771,7 +790,7 @@ const CLI_COMMAND_OVERLAYS = /* @__PURE__ */ new Map([
   ["auth:logout", command({
     options: [
       { name: "host", flags: "--host <id>", description: "Override the configured remote host id to clear.", kind: "string" },
-      { name: "market", flags: "--market <id-or-url>", description: "Select a configured market id or direct market API URL.", kind: "string" },
+      { name: "market", flags: "--market <id-or-url>", description: "Select a configured market id or direct API URL.", kind: "string" },
       { name: "json", flags: "--json", description: "Emit machine-readable JSON instead of human-readable text.", kind: "boolean" }
     ],
     examples: ["treeseed auth:logout"],
@@ -788,7 +807,7 @@ const CLI_COMMAND_OVERLAYS = /* @__PURE__ */ new Map([
   })],
   ["auth:whoami", command({
     options: [
-      { name: "market", flags: "--market <id-or-url>", description: "Select a configured market id or direct market API URL.", kind: "string" },
+      { name: "market", flags: "--market <id-or-url>", description: "Select a configured market id or direct API URL.", kind: "string" },
       { name: "allMarkets", flags: "--all-markets", description: "Show locally stored identities for all configured markets.", kind: "boolean" },
       { name: "json", flags: "--json", description: "Emit machine-readable JSON instead of human-readable text.", kind: "boolean" }
     ],
@@ -888,7 +907,7 @@ const CLI_COMMAND_OVERLAYS = /* @__PURE__ */ new Map([
       { name: "id", description: "Template id for show or validate.", required: false }
     ],
     options: [
-      { name: "market", flags: "--market <id-or-url>", description: "Select a configured market id or direct market API URL.", kind: "string" },
+      { name: "market", flags: "--market <id-or-url>", description: "Select a configured market id or direct API URL.", kind: "string" },
       { name: "version", flags: "--version <version>", description: "Artifact version for market template install.", kind: "string" },
       { name: "json", flags: "--json", description: "Emit machine-readable JSON instead of human-readable text.", kind: "boolean" }
     ],
@@ -1122,12 +1141,13 @@ const CLI_COMMAND_OVERLAYS = /* @__PURE__ */ new Map([
       { name: "worktreeMode", flags: "--worktree <mode>", description: "Control managed workflow worktrees.", kind: "enum", values: ["auto", "on", "off"] },
       { name: "ciMode", flags: "--ci <mode>", description: "Control hosted GitHub Actions waits.", kind: "enum", values: ["auto", "hosted", "off"] },
       { name: "workspaceLinks", flags: "--workspace-links <mode>", description: "Control local workspace package links.", kind: "enum", values: ["auto", "off"] },
+      { name: "verifyDeployedResources", flags: "--verify-deployed-resources", description: "Force production deployment checks to verify provider resources before release returns.", kind: "boolean" },
       { name: "fresh", flags: "--fresh", description: "Start a new release instead of auto-resuming stale failed release runs.", kind: "boolean" },
       { name: "plan", flags: "--plan", description: "Compute the recursive release plan without mutating any repo.", kind: "boolean" },
       { name: "dryRun", flags: "--dry-run", description: "Alias for --plan.", kind: "boolean" },
       { name: "json", flags: "--json", description: "Emit machine-readable JSON instead of human-readable text.", kind: "boolean" }
     ],
-    examples: ["treeseed release --patch", "treeseed release --minor", "treeseed release --repair-version-line --target-version-line 0.10 --plan", "treeseed release --patch --fresh"],
+    examples: ["treeseed release --patch", "treeseed release --minor --verify-deployed-resources", "treeseed release --repair-version-line --target-version-line 0.10 --plan", "treeseed release --patch --fresh"],
     notes: ["Requires exactly one bump flag unless --repair-version-line is used."],
     help: {
       workflowPosition: "promote to production",
@@ -1136,7 +1156,8 @@ const CLI_COMMAND_OVERLAYS = /* @__PURE__ */ new Map([
       ],
       whenToUse: [
         "Use this only when staging is the approved source for production promotion.",
-        "Choose exactly one bump flag so the release version reflects the intended change size, or use --repair-version-line to repair package line drift."
+        "Choose exactly one bump flag so the release version reflects the intended change size, or use --repair-version-line to repair package line drift.",
+        "Use `--verify-deployed-resources` when production provider resources must be checked before the release returns."
       ],
       beforeYouRun: [
         "Confirm staging is in the state you want to promote.",
@@ -1148,7 +1169,7 @@ const CLI_COMMAND_OVERLAYS = /* @__PURE__ */ new Map([
       ],
       examples: [
         example("treeseed release --patch", "Patch release", "Promote staging to production with the next patch version."),
-        example("treeseed release --minor", "Minor release", "Promote staging with the next minor version bump."),
+        example("treeseed release --minor --verify-deployed-resources", "Minor release with hosted checks", "Promote staging with the next minor version bump and verify production provider resources."),
         example("treeseed release --repair-version-line --target-version-line 0.10 --json", "Repair package line drift", "Publish only packages below the selected public package release line."),
         example("treeseed release --patch --json", "Automate release tracking", "Emit structured release output for tooling that records deployments and version changes.")
       ],
@@ -1165,19 +1186,20 @@ const CLI_COMMAND_OVERLAYS = /* @__PURE__ */ new Map([
     handlerName: "release"
   })],
   ["destroy", command({
-    usage: "treeseed destroy --environment <local|staging|prod> [--plan|--dry-run] [--delete-data] [--force] [--skip-confirmation] [--confirm <slug>] [--remove-build-artifacts]",
+    usage: "treeseed destroy --environment <local|staging|prod> [--plan|--dry-run] [--delete-data] [--sweep-treeseed] [--force] [--skip-confirmation] [--confirm <slug>] [--remove-build-artifacts]",
     options: [
       { name: "environment", flags: "--environment <scope>", description: "Select the persistent environment to destroy.", kind: "enum", values: ["local", "staging", "prod"] },
       { name: "plan", flags: "--plan", description: "Compute the destroy plan without mutating the environment.", kind: "boolean" },
       { name: "dryRun", flags: "--dry-run", description: "Alias for --plan.", kind: "boolean" },
       { name: "deleteData", flags: "--delete-data", description: "Also delete data repositories such as PostgreSQL, D1, and R2 for the target environment.", kind: "boolean" },
+      { name: "sweepTreeseed", flags: "--sweep-treeseed", description: "Sweep all TreeSeed-owned Cloudflare and Railway resources across persistent environments. Requires careful provider verification.", kind: "boolean" },
       { name: "force", flags: "--force", description: "Force worker deletion when supported.", kind: "boolean" },
       { name: "skipConfirmation", flags: "--skip-confirmation", description: "Skip the interactive confirmation prompt.", kind: "boolean" },
       { name: "confirm", flags: "--confirm <slug>", description: "Provide the expected slug confirmation non-interactively.", kind: "string" },
       { name: "removeBuildArtifacts", flags: "--remove-build-artifacts", description: "Also remove local build artifacts after destroy.", kind: "boolean" },
       { name: "json", flags: "--json", description: "Emit machine-readable JSON instead of human-readable text.", kind: "boolean" }
     ],
-    examples: ["treeseed destroy --environment staging --delete-data --plan", "treeseed destroy --environment prod --delete-data --confirm example --skip-confirmation"],
+    examples: ["treeseed destroy --environment staging --delete-data --plan", "treeseed destroy --environment staging --delete-data --sweep-treeseed --force --confirm example --skip-confirmation"],
     notes: ["Only for persistent environments. Task cleanup belongs to treeseed close.", "This command is destructive and requires explicit confirmation."],
     help: {
       workflowPosition: "tear down environment",
@@ -1226,15 +1248,15 @@ const CLI_COMMAND_OVERLAYS = /* @__PURE__ */ new Map([
       ],
       beforeYouRun: [
         "Run from the tenant or workspace root you want to develop.",
-        "From the Market repo root, dev automatically starts the local Market API, managed local PostgreSQL, and Market operations runner alongside the web UI.",
+        "From the Market repo root, dev automatically starts the local API, managed local PostgreSQL, and Treeseed operations runner alongside the web UI.",
         "Use `dev start` for worktree-scoped background instance management that AI agents can discover and stop later.",
         "Use `--plan --json` when you want to inspect fixed web/API/runner commands, setup steps, readiness checks, watched paths, and restart policy without starting services.",
-        "Use `--reset` when you want a fresh local D1 database, Market PostgreSQL state, Mailpit inbox, generated worker bundle, and Wrangler temp output without deleting configuration.",
+        "Use `--reset` when you want a fresh local D1 database, Treeseed PostgreSQL state, Mailpit inbox, generated worker bundle, and Wrangler temp output without deleting configuration.",
         "Dev prints the local web URL after readiness; it does not open a browser unless you pass `--open on` or `--open auto`.",
         "Keep the foreground process running while you test. Press Ctrl+C to stop the supervised stack and free the local ports."
       ],
       examples: [
-        example("treeseed dev", "Start local Market development", "Run web, API, managed PostgreSQL setup, and the Market operations runner locally."),
+        example("treeseed dev", "Start local Market development", "Run web, API, managed PostgreSQL setup, and the Treeseed operations runner locally."),
         example("treeseed dev start", "Start a managed worktree instance", "Launch the same dev runtime detached, write worktree-local PID/log/state files, and return after readiness."),
         example("treeseed dev status --all --json", "Inspect all worktree instances", "List managed dev instances discovered through the repository-family index."),
         example("treeseed dev logs", "Show managed dev logs", "Print the current worktree managed dev log file."),
@@ -1445,7 +1467,7 @@ const CLI_ONLY_OPERATION_SPECS = [
       { name: "environments", flags: "--environments <list>", description: "Comma-separated environments to select from the manifest.", kind: "string" },
       { name: "plan", flags: "--plan", description: "Generate a deterministic plan without applying it. This is the Phase 1 default.", kind: "boolean" },
       { name: "validate", flags: "--validate", description: "Validate the manifest and selected environments without printing plan actions.", kind: "boolean" },
-      { name: "apply", flags: "--apply", description: "Apply local seeds directly or governed staging/production seeds through the market API.", kind: "boolean" },
+      { name: "apply", flags: "--apply", description: "Apply local seeds directly or governed staging/production seeds through the API.", kind: "boolean" },
       { name: "market", flags: "--market <market>", description: "Market profile or URL for staging and production seed operations.", kind: "string" },
       { name: "host", flags: "--host <host>", description: "Compatibility alias for --market.", kind: "string" },
       { name: "approvalRequest", flags: "--approval-request <id>", description: "Approved production seed apply request id.", kind: "string" },
@@ -1490,7 +1512,7 @@ const CLI_ONLY_OPERATION_SPECS = [
         "`--apply --environments prod` is blocked until a matching approval request is approved."
       ],
       relatedDetails: [
-        related("projects", "Use `projects` after Phase 2 apply work lands to inspect created projects through the market API."),
+        related("projects", "Use `projects` after Phase 2 apply work lands to inspect created projects through the API."),
         related("capacity", "Use `capacity` to inspect existing provider and grant state outside the seed planner.")
       ]
     },
@@ -1508,11 +1530,12 @@ const CLI_ONLY_OPERATION_SPECS = [
     description: "Run a read-only or explicit repair audit for Repository, Web, Processing, and Email hosting setup.",
     provider: "default",
     related: ["status", "config", "save", "release"],
-    usage: "treeseed audit hosting [--environment current|local|staging|prod] [--repair] [--json]",
+    usage: "treeseed audit hosting [--environment current|local|staging|prod] [--repair] [--live] [--json]",
     arguments: [{ name: "target", description: "Audit target. Use hosting.", required: false }],
     options: [
       { name: "environment", flags: "--environment <environment>", description: "Audit environment. Defaults to current branch mapping.", kind: "enum", values: ["current", "local", "staging", "prod"] },
       { name: "repair", flags: "--repair", description: "Explicitly reconcile missing platform/provider resources.", kind: "boolean" },
+      { name: "live", flags: "--live", description: "Collect live Railway and HTTP observations for hosted service checks.", kind: "boolean" },
       { name: "hostKinds", flags: "--host-kinds <kinds>", description: "Comma-separated host kinds to audit.", kind: "string" },
       { name: "json", flags: "--json", description: "Emit the hosting audit report as JSON.", kind: "boolean" }
     ],
@@ -1618,14 +1641,14 @@ const CLI_ONLY_OPERATION_SPECS = [
     name: "market",
     aliases: [],
     group: "Utilities",
-    summary: "Manage configured Treeseed market API endpoints.",
-    description: "List, add, select, remove, and inspect market API profiles stored in local machine configuration.",
+    summary: "Manage configured Treeseed API endpoints.",
+    description: "List, add, select, remove, and inspect API profiles stored in local machine configuration.",
     provider: "default",
     related: ["auth:login", "teams", "projects"],
     usage: "treeseed market [list|add|use|remove|status]",
     arguments: [{ name: "action", description: "Market action.", required: false }],
     options: [
-      { name: "market", flags: "--market <id-or-url>", description: "Select a configured market id or direct market API URL.", kind: "string" },
+      { name: "market", flags: "--market <id-or-url>", description: "Select a configured market id or direct API URL.", kind: "string" },
       { name: "label", flags: "--label <label>", description: "Display label for market add.", kind: "string" },
       { name: "kind", flags: "--kind <kind>", description: "Market kind for market add.", kind: "enum", values: ["central", "specialized"] },
       { name: "team", flags: "--team <team-id>", description: "Team id for a specialized market profile.", kind: "string" },
@@ -1633,7 +1656,7 @@ const CLI_ONLY_OPERATION_SPECS = [
     ],
     examples: ["treeseed market list", "treeseed market add enterprise https://market.example.com", "treeseed market use central"],
     help: {
-      longSummary: ["Market manages local Treeseed market API profiles. It never serves market behavior itself; it only selects endpoints the SDK market client should call."],
+      longSummary: ["Market manages local Treeseed API profiles. It never serves market behavior itself; it only selects endpoints the SDK market client should call."],
       whenToUse: ["Use this when you need to add an enterprise market, switch back to central, or inspect which market endpoint CLI commands will target."],
       beforeYouRun: ["Decide whether you are managing the always-available central profile or a team-specific specialized market profile."],
       automationNotes: ["Use `--json` when scripts need the active market id, URL, and configured profiles."]
@@ -1649,19 +1672,19 @@ const CLI_ONLY_OPERATION_SPECS = [
     aliases: [],
     group: "Utilities",
     summary: "Inspect teams from the selected market.",
-    description: "List teams, select a team context, and inspect team membership through the market API client.",
+    description: "List teams, select a team context, and inspect team membership through the API client.",
     provider: "default",
     related: ["market", "auth:login", "projects"],
     usage: "treeseed teams [list|use|members]",
     arguments: [{ name: "action", description: "Teams action.", required: false }],
     options: [
-      { name: "market", flags: "--market <id-or-url>", description: "Select a configured market id or direct market API URL.", kind: "string" },
+      { name: "market", flags: "--market <id-or-url>", description: "Select a configured market id or direct API URL.", kind: "string" },
       { name: "team", flags: "--team <team-id>", description: "Team id for member lookup.", kind: "string" },
       { name: "json", flags: "--json", description: "Emit machine-readable JSON instead of human-readable text.", kind: "boolean" }
     ],
     examples: ["treeseed teams list", "treeseed teams members team_123"],
     help: {
-      longSummary: ["Teams reads team membership data from the selected market API using the SDK market client."],
+      longSummary: ["Teams reads team membership data from the selected API using the SDK market client."],
       whenToUse: ["Use this after login to confirm team membership or inspect who belongs to a market-owned team."],
       beforeYouRun: ["Authenticate to the selected market with `treeseed auth:login --market <id>` before reading private team data."],
       automationNotes: ["Use `--json` for scripts that need stable team or member arrays."]
@@ -1677,7 +1700,7 @@ const CLI_ONLY_OPERATION_SPECS = [
     aliases: [],
     group: "Utilities",
     summary: "Inspect projects, project hosts, and web deployment operations from the selected market.",
-    description: "List market projects, inspect access and host bindings, and queue project host or web deployment operations through the Market API.",
+    description: "List market projects, inspect access and host bindings, and queue project host or web deployment operations through the API.",
     provider: "default",
     related: ["market", "teams", "config"],
     usage: "treeseed projects [list|access|hosts|deploy|publish|monitor|deployments|deployment]",
@@ -1687,7 +1710,7 @@ const CLI_ONLY_OPERATION_SPECS = [
       { name: "deployment-id", description: "Deployment id for deployment detail, retry, resume, or cancel.", required: false }
     ],
     options: [
-      { name: "market", flags: "--market <id-or-url>", description: "Select a configured market id or direct market API URL.", kind: "string" },
+      { name: "market", flags: "--market <id-or-url>", description: "Select a configured market id or direct API URL.", kind: "string" },
       { name: "team", flags: "--team <team-id>", description: "Limit project list to a team.", kind: "string" },
       { name: "environment", flags: "--environment <environment>", description: "Deployment environment for project web actions.", kind: "enum", values: ["staging", "prod"] },
       { name: "wait", flags: "--wait", description: "Poll the queued deployment until it reaches a terminal state.", kind: "boolean" },
@@ -1715,7 +1738,7 @@ const CLI_ONLY_OPERATION_SPECS = [
       "treeseed projects deployment project_123 dep_123"
     ],
     help: {
-      longSummary: ["Projects reads project, host binding, access, and deployment state from the selected market API using the SDK market client."],
+      longSummary: ["Projects reads project, host binding, access, and deployment state from the selected API using the SDK market client."],
       whenToUse: ["Use this to inspect projects, audit or replace launch host bindings, queue staging or production web deployment operations, and inspect the same state shown in the Market UI."],
       beforeYouRun: ["Authenticate to the market with `treeseed auth:login --market <selector>` and know the project id before queueing deployment work."],
       automationNotes: ["Use `--json` to capture project lists, deployment records, events, and wait results for automation."],
@@ -1738,7 +1761,7 @@ const CLI_ONLY_OPERATION_SPECS = [
     usage: "treeseed capacity [doctor|register|plan|migrate|up|down|restart|logs|status|build|test-local]",
     arguments: [{ name: "action", description: "Capacity action.", required: false }],
     options: [
-      { name: "market", flags: "--market <id-or-url>", description: "Select a configured market id or direct market API URL.", kind: "string" },
+      { name: "market", flags: "--market <id-or-url>", description: "Select a configured market id or direct API URL.", kind: "string" },
       { name: "provider", flags: "--provider <provider-id>", description: "Provider id or local provider selector for diagnostics.", kind: "string" },
       { name: "team", flags: "--team <team-id>", description: "Team id for Market capacity migration.", kind: "string" },
       { name: "project", flags: "--project <project-id>", description: "Project id for Market capacity plan or allocation migration.", kind: "string" },
@@ -1784,19 +1807,262 @@ const CLI_ONLY_OPERATION_SPECS = [
     executionMode: "handler",
     handlerName: "capacity"
   },
+  {
+    id: "hosting",
+    name: "hosting",
+    aliases: [],
+    group: "Utilities",
+    summary: "Plan, apply, verify, and inspect the Treeseed hosting graph.",
+    description: "Resolve host-agnostic service types into environment-specific host bindings for local dev, staging, and production.",
+    provider: "default",
+    related: ["status", "dev", "config", "stage", "release"],
+    usage: "treeseed hosting [status|plan|apply|verify|destroy] [--environment local|staging|prod] [--app web|api] [--service api] [--json]",
+    arguments: [{ name: "action", description: "Hosting action.", required: false }],
+    options: [
+      { name: "environment", flags: "--environment <scope>", description: "Hosting environment to resolve.", kind: "enum", values: ["local", "staging", "prod"] },
+      { name: "app", flags: "--app <app-id>", description: "Limit hosting graph work to one discovered Treeseed application, such as web or api.", kind: "string" },
+      { name: "service", flags: "--service <service-id>", description: "Limit hosting graph work to one service id. Repeat or comma-separate for multiple services.", kind: "string" },
+      { name: "placement", flags: "--placement <placement>", description: "Limit hosting graph work to one service placement.", kind: "string" },
+      { name: "host", flags: "--host <host-id>", description: "Limit hosting graph work to one host id.", kind: "string" },
+      { name: "live", flags: "--live", description: "Request live provider verification where supported.", kind: "boolean" },
+      { name: "dryRun", flags: "--dry-run", description: "Force apply to render a non-mutating dry-run result.", kind: "boolean" },
+      { name: "execute", flags: "--execute", description: "Allow hosting apply to call adapter apply methods for the selected environment.", kind: "boolean" },
+      { name: "json", flags: "--json", description: "Emit machine-readable JSON instead of human-readable text.", kind: "boolean" }
+    ],
+    examples: [
+      "treeseed hosting status --environment local",
+      "treeseed hosting plan --environment staging --json",
+      "treeseed hosting plan --environment staging --app web --json",
+      "treeseed hosting plan --environment staging --app api --json",
+      "treeseed hosting plan --environment staging --service api --json",
+      "treeseed hosting verify --environment prod --json",
+      "treeseed hosting apply --environment staging --app api --execute --json",
+      "treeseed hosting destroy --environment staging --app api --execute --json"
+    ],
+    help: {
+      longSummary: ["Hosting resolves Treeseed application profiles into service placements, service types, host capabilities, and provider/local resources."],
+      whenToUse: ["Use this before dev, stage, or release when you need to inspect host bindings, missing capabilities, or TreeDX/public federation placement."],
+      beforeYouRun: ["Run from the Treeseed workspace. Use `--json` for automation. `apply` is dry-run unless `--execute` is passed."],
+      automationNotes: ["The JSON report includes placements, units, selected hosts, required capabilities, project groups, and verification checks without secret values."]
+    },
+    helpVisible: true,
+    helpFeatured: true,
+    executionMode: "handler",
+    handlerName: "hosting"
+  },
+  {
+    id: "reconcile",
+    name: "reconcile",
+    aliases: [],
+    group: "Utilities",
+    summary: "Run canonical reconciliation platform diagnostics.",
+    description: "Exercise SDK-owned reconciliation reports, live provider coverage, and exact-state postconditions.",
+    provider: "default",
+    related: ["hosting", "config", "stage", "release"],
+    usage: "treeseed reconcile test-live [--mode smoke|acceptance|cleanup] [--provider railway|cloudflare|github|local|all] [--environment local|staging|prod] [--yes] [--json]",
+    arguments: [{ name: "action", description: "Reconcile diagnostic action. Use test-live.", required: false }],
+    options: [
+      { name: "provider", flags: "--provider <provider>", description: "Provider live-test scope. Use railway, cloudflare, github, local, or all.", kind: "string" },
+      { name: "mode", flags: "--mode <mode>", description: "Live-test mode. Smoke is read-only; acceptance and cleanup mutate isolated provider resources and require --yes.", kind: "enum", values: ["smoke", "acceptance", "cleanup"] },
+      { name: "environment", flags: "--environment <scope>", description: "Environment to test.", kind: "enum", values: ["local", "staging", "prod"] },
+      { name: "yes", flags: "--yes", description: "Confirm acceptance or cleanup mode may create and delete real isolated provider resources.", kind: "boolean" },
+      { name: "json", flags: "--json", description: "Emit machine-readable JSON instead of human-readable text.", kind: "boolean" }
+    ],
+    examples: [
+      "treeseed reconcile test-live --provider local --json",
+      "treeseed reconcile test-live --provider railway --environment staging --json",
+      "treeseed reconcile test-live --provider all --environment staging --json",
+      "treeseed reconcile test-live --mode acceptance --provider railway --environment staging --yes --json",
+      "treeseed reconcile test-live --mode cleanup --provider all --environment staging --yes --json"
+    ],
+    help: {
+      longSummary: ["Reconcile diagnostics prove that provider adapters implement the canonical SDK lifecycle. Smoke mode is fast and read-only. Acceptance mode creates, updates, verifies, and destroys isolated resources. Cleanup mode removes leftover isolated live-test resources. Missing provider coverage is reported as blocking drift, not skipped success."],
+      whenToUse: ["Use this before staging or release promotions when provider tokens are configured, or when adding a new provider/resource adapter."],
+      beforeYouRun: ["Run from the Treeseed workspace. Provider tests use encrypted Treeseed config values and deterministic isolated prefixes."],
+      automationNotes: ["The JSON report contains desiredGraph, observedGraph, actions, postconditions, blockedDrift, providerLimitations, liveVerification, and ok for each selected provider."]
+    },
+    helpVisible: true,
+    helpFeatured: false,
+    executionMode: "handler",
+    handlerName: "reconcile"
+  },
+  {
+    id: "ready",
+    name: "ready",
+    aliases: [],
+    group: "Workflow",
+    summary: "Check whether an environment is ready for staging or release.",
+    description: "Runs deployment graph readiness, hosted service checks, and Treeseed operations runner smoke diagnostics before expensive workflow promotion.",
+    provider: "default",
+    related: ["hosting", "stage", "release", "doctor"],
+    usage: "treeseed ready <local|staging|prod> [--live] [--strict] [--json]",
+    arguments: [{ name: "environment", description: "Environment to check.", required: false }],
+    options: [
+      { name: "environment", flags: "--environment <scope>", description: "Environment to check.", kind: "enum", values: ["local", "staging", "prod"] },
+      { name: "live", flags: "--live", description: "Include live provider and HTTP checks.", kind: "boolean" },
+      { name: "strict", flags: "--strict", description: "Fail when required live observations are unavailable.", kind: "boolean" },
+      { name: "json", flags: "--json", description: "Emit machine-readable JSON instead of human-readable text.", kind: "boolean" }
+    ],
+    examples: [
+      "treeseed ready staging --json",
+      "treeseed ready prod --json"
+    ],
+    help: {
+      longSummary: ["Ready is the fail-fast preflight for stage and release. It checks the effective hosting graph, provider state, HTTP health, and runner operation processing before a workflow spends time on deploys."],
+      whenToUse: ["Run before stage or release, especially after hosting config or package boundary changes."],
+      beforeYouRun: ["Run from the Treeseed workspace. Use `ready local` for static local checks, and use staging or prod only when provider credentials are available for live checks."],
+      automationNotes: ["Use --json for stable readiness output. Staging and prod default to live strict checks."]
+    },
+    helpVisible: true,
+    helpFeatured: true,
+    executionMode: "handler",
+    handlerName: "ready"
+  },
+  {
+    id: "operations",
+    name: "operations",
+    aliases: [],
+    group: "Utilities",
+    summary: "Run Treeseed operation-runner diagnostics.",
+    description: "Queues a diagnostic Market platform operation and verifies that the deployed operations runner claims and completes it.",
+    provider: "default",
+    related: ["hosting", "ready", "stage"],
+    usage: "treeseed operations smoke [--environment staging|prod] [--service operationsRunner] [--json]",
+    arguments: [{ name: "action", description: "Operations action.", required: false }],
+    options: [
+      { name: "environment", flags: "--environment <scope>", description: "Environment to smoke test.", kind: "enum", values: ["staging", "prod"] },
+      { name: "service", flags: "--service <service-id>", description: "Service to smoke test. Currently operationsRunner.", kind: "string" },
+      { name: "json", flags: "--json", description: "Emit machine-readable JSON instead of human-readable text.", kind: "boolean" }
+    ],
+    examples: [
+      "treeseed operations smoke --environment staging --service operationsRunner --json"
+    ],
+    help: {
+      longSummary: ["Operations smoke proves that the API, database, and operations runner work together before TreeDX/bootstrap workflows queue real work."],
+      whenToUse: ["Run when staging deploys time out with queued operations or before release resource verification."],
+      beforeYouRun: ["Run after the API and operations runner are deployed. Ensure the selected environment has the API base URL and service credentials configured through Treeseed config."],
+      automationNotes: ["The JSON report redacts credentials and includes operation id, final status, runner id, timings, and failure remediation."]
+    },
+    helpVisible: true,
+    helpFeatured: true,
+    executionMode: "handler",
+    handlerName: "operations"
+  },
+  {
+    id: "workspace.package",
+    name: "package",
+    aliases: [],
+    group: "Utilities",
+    summary: "Run manifest-driven package development workflows.",
+    description: "Plan, sync credentials for, and dispatch package development image workflows declared by checked-out package manifests such as treeseed.package.yaml.",
+    provider: "default",
+    related: ["config", "hosting", "db"],
+    usage: "treeseed package image --package <package-id>",
+    arguments: [{ name: "action", description: "Package workflow action.", required: false }],
+    options: [
+      { name: "package", flags: "--package <package-id>", description: "Discovered package id from treeseed.package.yaml, such as treedx.", kind: "string" },
+      { name: "branch", flags: "--branch <branch>", description: "Package repository branch to publish as a development image. Defaults to staging.", kind: "string" },
+      { name: "workflow", flags: "--workflow <file>", description: "GitHub Actions workflow file for package image publication. Defaults to the package manifest.", kind: "string" },
+      { name: "syncConfig", flags: "--sync-config", description: "Sync package image credentials from Treeseed config into the package GitHub environment.", kind: "boolean" },
+      { name: "plan", flags: "--plan", description: "Print the package image plan without dispatching GitHub Actions.", kind: "boolean" },
+      { name: "execute", flags: "--execute", description: "Dispatch the package development image workflow.", kind: "boolean" },
+      { name: "json", flags: "--json", description: "Emit machine-readable JSON instead of human-readable text.", kind: "boolean" }
+    ],
+    examples: [
+      "treeseed package image --package treedx --branch staging --plan --json",
+      "treeseed package image --package treedx --branch staging --sync-config --json",
+      "treeseed package image --package treedx --branch staging --execute --json"
+    ],
+    help: {
+      longSummary: ["Package workflows are driven by package-local metadata instead of bespoke CLI logic. A checked-out package can declare its repository, development image workflow, hosting override, and credential requirements in treeseed.package.yaml."],
+      whenToUse: ["Use this when a package such as TreeDX needs to publish a staging development image, sync package-repository GitHub environment secrets, or report the image ref that hosting reconciliation should consume."],
+      beforeYouRun: ["Run `trsd config` to configure repository-scoped GitHub credentials and provider secrets. Do not pass package repository tokens or Docker Hub secrets on the command line."],
+      automationNotes: ["Use `--json` to capture selected package metadata, repository credential routing, Docker Hub readiness, immutable image tags, and the hosting override command."]
+    },
+    helpVisible: true,
+    helpFeatured: false,
+    executionMode: "handler",
+    handlerName: "package"
+  },
+  {
+    id: "market.db",
+    name: "db",
+    aliases: [],
+    group: "Utilities",
+    summary: "Manage team TreeDX knowledge-library bindings.",
+    description: "Inspect, provision, connect, mirror, share, publish, bind TreeDX libraries, and publish staging-safe TreeDX development images.",
+    provider: "default",
+    related: ["teams", "projects", "capacity"],
+    usage: "treeseed db [status|provision|connect|mirrors|shares|library|topology|publish|image]",
+    arguments: [{ name: "action", description: "TreeDX action.", required: false }],
+    options: [
+      { name: "market", flags: "--market <id-or-url>", description: "Select a configured market id or direct API URL.", kind: "string" },
+      { name: "team", flags: "--team <team-id>", description: "Team id for status, provisioning, mirrors, and shares.", kind: "string" },
+      { name: "project", flags: "--project <project-id>", description: "Project id for library binding and topology inspection.", kind: "string" },
+      { name: "public", flags: "--public", description: "Use public federation posture for provisioning or sharing.", kind: "boolean" },
+      { name: "selfHosted", flags: "--self-hosted", description: "Connect a self-hosted TreeDX URL as the primary binding.", kind: "boolean" },
+      { name: "url", flags: "--url <url>", description: "TreeDX base URL for connect/provision.", kind: "string" },
+      { name: "registryUrl", flags: "--registry-url <url>", description: "Optional TreeDX registry URL.", kind: "string" },
+      { name: "image", flags: "--image <image-ref>", description: "TreeDX container image ref, default treeseed/treedx:latest.", kind: "string" },
+      { name: "name", flags: "--name <name>", description: "Mirror display name.", kind: "string" },
+      { name: "targetUrl", flags: "--target-url <url>", description: "Mirror target URL.", kind: "string" },
+      { name: "targetKind", flags: "--target-kind <kind>", description: "Mirror target kind such as git or treedx.", kind: "string" },
+      { name: "direction", flags: "--direction <mode>", description: "Mirror direction: pull, push, or bidirectional.", kind: "string" },
+      { name: "scope", flags: "--scope <scope>", description: "Share scope: team, library, or public_federation.", kind: "string" },
+      { name: "targetTeam", flags: "--target-team <team-id>", description: "Target team id for a team share.", kind: "string" },
+      { name: "library", flags: "--library <library-id>", description: "TreeDX library id for project binding or share.", kind: "string" },
+      { name: "instance", flags: "--instance <instance-id>", description: "TreeDX instance id for project binding.", kind: "string" },
+      { name: "repository", flags: "--repository <repo-id>", description: "TreeDX repository id for project binding.", kind: "string" },
+      { name: "contentRepositoryUrl", flags: "--content-repository-url <url>", description: "Linked GitHub content repository URL.", kind: "string" },
+      { name: "environment", flags: "--environment <scope>", description: "Publish environment for db publish: staging or prod.", kind: "enum", values: ["staging", "prod"] },
+      { name: "branch", flags: "--branch <branch>", description: "TreeDX branch to publish as a development image. Defaults to staging.", kind: "string" },
+      { name: "workflow", flags: "--workflow <file>", description: "TreeDX GitHub Actions workflow file for db image. Defaults to dev-image.yml.", kind: "string" },
+      { name: "syncConfig", flags: "--sync-config", description: "Sync package image credentials from Treeseed config into the package GitHub environment.", kind: "boolean" },
+      { name: "plan", flags: "--plan", description: "Print the TreeDX image plan without dispatching GitHub Actions.", kind: "boolean" },
+      { name: "execute", flags: "--execute", description: "Dispatch the TreeDX development image workflow.", kind: "boolean" },
+      { name: "yes", flags: "--yes", description: "Confirm production db publish.", kind: "boolean" },
+      { name: "dryRun", flags: "--dry-run", description: "Queue a dry-run content publish operation.", kind: "boolean" },
+      { name: "reason", flags: "--reason <reason>", description: "Human-readable reason for a content publish.", kind: "string" },
+      { name: "json", flags: "--json", description: "Emit machine-readable JSON instead of human-readable text.", kind: "boolean" }
+    ],
+    examples: [
+      "treeseed db status --team team_123",
+      "treeseed db provision --team team_123",
+      "treeseed db provision --team team_123 --public",
+      "treeseed db connect --team team_123 --url https://treedx.example.com --self-hosted",
+      "treeseed db mirrors --team team_123 --name customer-copy --target-url https://treedx.customer.example",
+      "treeseed db shares --team team_123 --library team/project --public",
+      "treeseed db library --project project_123 --library team/project",
+      "treeseed db topology --project project_123 --json",
+      "treeseed db publish --project project_123 --environment staging",
+      "treeseed db image --branch staging --plan --json",
+      "treeseed db image --branch staging --sync-config --json",
+      "treeseed db image --branch staging --execute --json"
+    ],
+    help: {
+      longSummary: ["TreeDX commands manage the Treeseed control-plane records that bind each team to one primary knowledge-library instance, bind project content to TreeDX libraries, and publish deterministic TreeDX development images for staging reconciliation."],
+      whenToUse: ["Use this when provisioning a private TreeDX, attaching a public team to federation, creating mirror/share records, inspecting project content/site/project topology, or publishing the TreeDX image that the API app should reconcile."],
+      beforeYouRun: ["Log in to the selected Treeseed API first for team/project actions. For `db image --execute`, configure GitHub credentials through Treeseed-managed config. Do not pass secrets on the command line; TreeDX credentials belong in host secret managers or encrypted config."],
+      automationNotes: ["Use `--json` for stable TreeDX binding, mirror, share, library, topology, and image publication records. `db image` reports the immutable `TREESEED_PUBLIC_TREEDX_IMAGE_REF` value to pass into `trsd hosting apply --app api`. Use `db image --sync-config` when a package repository needs its GitHub environment credentials reconciled from central Treeseed config."]
+    },
+    helpVisible: true,
+    helpFeatured: false,
+    executionMode: "handler",
+    handlerName: "db"
+  },
   {
     id: "market.packs",
     name: "packs",
     aliases: [],
     group: "Utilities",
     summary: "Search and download market knowledge packs.",
-    description: "Search knowledge packs and download artifact versions through the integrated market catalog or a selected market API.",
+    description: "Search knowledge packs and download artifact versions through the integrated market catalog or a selected API.",
     provider: "default",
     related: ["market", "template"],
     usage: "treeseed packs [search|install] [id]",
     arguments: [{ name: "action", description: "Packs action.", required: false }],
     options: [
-      { name: "market", flags: "--market <id-or-url>", description: "Limit catalog lookup to one configured market id or direct market API URL. Without this, search/install uses the integrated catalog from all configured catalog markets.", kind: "string" },
+      { name: "market", flags: "--market <id-or-url>", description: "Limit catalog lookup to one configured market id or direct API URL. Without this, search/install uses the integrated catalog from all configured catalog markets.", kind: "string" },
       { name: "version", flags: "--version <version>", description: "Artifact version for install.", kind: "string" },
       { name: "json", flags: "--json", description: "Emit machine-readable JSON instead of human-readable text.", kind: "boolean" }
     ],