@treeseed/cli 0.5.1 → 0.6.1

package/dist/cli/handlers/config-ui.js

@@ -73,7 +73,7 @@ function normalizedClusterKey(entry) {
     return `cloudflare-${cluster}`;
   }
   if (provider === "railway") {
-    if (entry.id.includes("API_TOKEN") || entry.id === "RAILWAY_TOKEN") {
+    if (entry.id.includes("API_TOKEN")) {
       return "railway-access";
     }
     return `railway-${cluster}`;

package/dist/cli/handlers/config.js

@@ -110,9 +110,10 @@ function renderConfigResult(commandName, result) {
   const configContext = payload.context;
   const configReadiness = configContext?.configReadinessByScope?.local ?? {};
   const readinessByScope = payload.result?.readinessByScope ?? {};
+  const resourceInventoryByScope = payload.result?.resourceInventoryByScope ?? payload.resourceInventoryByScope ?? {};
   const secretSession = payload.secretSession;
   const sharedStorageMigrations = payload.result?.sharedStorageMigrations;
-  const summary = payload.mode === "print-env-only" ? "Treeseed config environment report completed." : payload.mode === "rotate-machine-key" ? "Treeseed machine key rotated successfully." : payload.mode === "connect-market" ? "Knowledge Coop pairing completed successfully." : "Treeseed config completed successfully.";
+  const summary = payload.mode === "print-env-only" ? "Treeseed config environment report completed." : payload.mode === "rotate-machine-key" ? "Treeseed machine key rotated successfully." : payload.mode === "connect-market" ? "Knowledge Coop pairing completed successfully." : payload.mode === "bootstrap-preflight" ? "Treeseed bootstrap verification preflight completed." : payload.mode === "bootstrap" ? "Treeseed platform bootstrap completed successfully." : "Treeseed config completed successfully.";
   const market = payload.market;
   return guidedResult({
     command: commandName,
@@ -124,11 +125,17 @@ function renderConfigResult(commandName, result) {
       { label: "Safe repairs", value: Array.isArray(payload.repairs) ? payload.repairs.length : 0 },
       { label: "Machine config", value: payload.configPath },
       { label: "Machine key", value: payload.keyPath },
+      { label: "Passphrase env", value: payload.passphraseEnv?.configured ? "configured" : "unset" },
       { label: "Secrets session", value: describeSecretBootstrap(secretSession) },
       { label: "Shared consolidations", value: describeSharedStorageMigrations(sharedStorageMigrations) },
+      { label: "Deployment key", value: resourceInventoryByScope.staging?.identity?.deploymentKey ?? resourceInventoryByScope.prod?.identity?.deploymentKey ?? "(unset)" },
+      { label: "Team", value: resourceInventoryByScope.staging?.identity?.teamId ?? resourceInventoryByScope.prod?.identity?.teamId ?? "(unset)" },
+      { label: "Project", value: resourceInventoryByScope.staging?.identity?.projectId ?? resourceInventoryByScope.prod?.identity?.projectId ?? "(unset)" },
       { label: "Local readiness", value: configReadinessLabel(readinessByScope.local) },
       { label: "Staging readiness", value: configReadinessLabel(readinessByScope.staging) },
       { label: "Prod readiness", value: configReadinessLabel(readinessByScope.prod) },
+      { label: "Pages project", value: resourceInventoryByScope.staging?.resources?.pagesProject ?? resourceInventoryByScope.prod?.resources?.pagesProject ?? "(unset)" },
+      { label: "R2 bucket", value: resourceInventoryByScope.staging?.resources?.contentBucket ?? resourceInventoryByScope.prod?.resources?.contentBucket ?? "(unset)" },
       { label: "GitHub token/config", value: configReadiness.github?.configured ? "configured" : "missing" },
       { label: "Cloudflare token/config", value: configReadiness.cloudflare?.configured ? "configured" : "missing" },
       { label: "Railway token/config", value: configReadiness.railway?.configured ? "configured" : "missing" },
@@ -147,7 +154,10 @@ function renderConfigResult(commandName, result) {
         { label: "Runtime ready", value: market.runtimeReady ? "yes" : "no" }
       ] : []
     ],
-    nextSteps: renderWorkflowNextSteps(result),
+    nextSteps: [
+      ...payload.passphraseEnv?.configured ? [] : [payload.passphraseEnv?.recommendedLaunch].filter(Boolean),
+      ...renderWorkflowNextSteps(result)
+    ],
     report: payload
   });
 }
@@ -161,9 +171,9 @@ const handleConfig = async (invocation, context) => {
     const sync = invocation.args.sync;
     const interactive = context.outputFormat !== "json" && context.interactiveUi !== false && process.stdin.isTTY && process.stdout.isTTY;
     const nonInteractive = invocation.args.nonInteractive === true || context.outputFormat === "json";
-    const operationalMode = invocation.args.printEnvOnly === true || invocation.args.rotateMachineKey === true || invocation.args.connectMarket === true;
+    const operationalMode = invocation.args.printEnvOnly === true || invocation.args.rotateMachineKey === true || invocation.args.connectMarket === true || invocation.args.bootstrap === true;
     if (!interactive && !nonInteractive && !operationalMode) {
-      return fail("Treeseed config requires a TTY for the interactive editor. Re-run in a terminal, or use --non-interactive, --json, --print-env-only, --rotate-machine-key, or --connect-market.");
+      return fail("Treeseed config requires a TTY for the interactive editor. Re-run in a terminal, or use --non-interactive, --json, --bootstrap, --print-env-only, --rotate-machine-key, or --connect-market.");
     }
     if (interactive && !nonInteractive && !operationalMode) {
       const tenantRoot = findNearestTreeseedRoot(context.cwd) ?? context.cwd;
@@ -247,6 +257,8 @@ const handleConfig = async (invocation, context) => {
     const result = await workflow.config({
       environment: invocation.args.environment,
       sync,
+      bootstrap: invocation.args.bootstrap === true,
+      preflight: invocation.args.preflight === true,
       printEnv: invocation.args.printEnv === true,
       printEnvOnly: invocation.args.printEnvOnly === true,
       showSecrets: invocation.args.showSecrets === true,

package/dist/cli/handlers/secrets.js

@@ -1,5 +1,7 @@
 import {
   inspectTreeseedKeyAgentStatus,
+  inspectTreeseedKeyAgentTransportDiagnostic,
+  inspectTreeseedPassphraseEnvDiagnostic,
   lockTreeseedSecretSession,
   migrateTreeseedMachineKeyToWrapped,
   rotateTreeseedMachineKey,
@@ -11,8 +13,10 @@ import {
 } from "@treeseed/sdk/workflow-support";
 import { fail, guidedResult } from "./utils.js";
 import { promptForNewPassphrase } from "./secret-prompts.js";
-function renderStatus(command, tenantRoot) {
+async function renderStatus(command, tenantRoot) {
   const status = inspectTreeseedKeyAgentStatus(tenantRoot);
+  const passphraseEnv = inspectTreeseedPassphraseEnvDiagnostic();
+  const transport = await inspectTreeseedKeyAgentTransportDiagnostic();
   return guidedResult({
     command,
     summary: status.unlocked ? "Treeseed secrets are unlocked." : "Treeseed secrets are locked.",
@@ -20,14 +24,24 @@ function renderStatus(command, tenantRoot) {
       { label: "Key agent", value: status.running ? "running" : "stopped" },
       { label: "Wrapped key", value: status.wrappedKeyPresent ? "present" : "missing" },
       { label: "Migration required", value: status.migrationRequired ? "yes" : "no" },
+      { label: "Socket", value: transport.socketPresent ? "present" : "missing" },
+      { label: "Socket connect", value: transport.socketConnectable ? "yes" : "no" },
+      { label: "Socket health", value: transport.healthOk ? "ok" : "failed" },
       { label: "Idle timeout", value: `${Math.round(status.idleTimeoutMs / 1e3)}s` },
       { label: "Idle remaining", value: `${Math.round(status.idleRemainingMs / 1e3)}s` },
-      { label: "Passphrase env", value: process.env[TREESEED_MACHINE_KEY_PASSPHRASE_ENV]?.trim() ? "configured" : "unset" },
-      { label: "Key path", value: status.keyPath }
+      { label: "Passphrase env", value: passphraseEnv.configured ? "configured" : "unset" },
+      { label: "Key path", value: status.keyPath },
+      { label: "Socket path", value: transport.socketPath }
     ],
     report: {
-      status
-    }
+      status,
+      passphraseEnv,
+      transport
+    },
+    nextSteps: [
+      ...passphraseEnv.configured ? [] : [passphraseEnv.recommendedLaunch],
+      ...transport.lastError ? [`Key-agent transport error: ${transport.lastError}`] : []
+    ]
   });
 }
 function keyErrorResult(command, error) {

package/dist/cli/operations-registry.js

@@ -702,6 +702,8 @@ const CLI_COMMAND_OVERLAYS = /* @__PURE__ */ new Map([
       { name: "mouse", flags: "--mouse", description: "Opt into mouse capture for the config UI. Keyboard-first terminal behavior remains the default.", kind: "boolean" },
       { name: "environment", flags: "--environment <scope>", description: "Select all environments or limit configuration to local, staging, or prod. Defaults to all.", kind: "enum", repeatable: true, values: ["all", "local", "staging", "prod"] },
       { name: "sync", flags: "--sync <mode>", description: "Sync hosted secrets/variables to GitHub, Cloudflare, Railway, or all providers. Defaults to all.", kind: "enum", values: ["none", "github", "cloudflare", "railway", "all"] },
+      { name: "bootstrap", flags: "--bootstrap", description: "Skip the editor and run platform reconciliation/bootstrap from the currently saved required values.", kind: "boolean" },
+      { name: "preflight", flags: "--preflight", description: "Inspect bootstrap verification readiness and planned checks without mutating provider resources.", kind: "boolean" },
       { name: "nonInteractive", flags: "--non-interactive", description: "Apply resolved values without opening the interactive UI. Required for non-TTY automation unless using an operational mode such as --print-env-only.", kind: "boolean" },
       { name: "installMissingTooling", flags: "--install-missing-tooling", description: "Install missing config verification tooling such as `gh-act` during the run instead of only reporting it.", kind: "boolean" },
       { name: "printEnv", flags: "--print-env", description: "Print resolved environment values before remote initialization.", kind: "boolean" },
@@ -719,7 +721,7 @@ const CLI_COMMAND_OVERLAYS = /* @__PURE__ */ new Map([
       { name: "rotateRunnerToken", flags: "--rotate-runner-token", description: "Rotate the project runner credential while pairing the local hybrid repo.", kind: "boolean" },
       { name: "json", flags: "--json", description: "Emit machine-readable JSON instead of human-readable text.", kind: "boolean" }
     ],
-    examples: ["treeseed config", "treeseed config --full --mouse", "treeseed config --environment all", "treeseed config --environment local --sync none", "treeseed config --environment local --sync none --non-interactive", "treeseed config --environment staging --print-env-only --show-secrets", "treeseed config --rotate-machine-key", "treeseed config --connect-market --market-project-id kc_proj_123"],
+    examples: ["treeseed config", "treeseed config --full --mouse", "treeseed config --environment all", "treeseed config --environment staging --bootstrap", "treeseed config --environment staging --bootstrap --preflight", "treeseed config --environment local --sync none", "treeseed config --environment local --sync none --non-interactive", "treeseed config --environment staging --print-env-only --show-secrets", "treeseed config --rotate-machine-key", "treeseed config --connect-market --market-project-id kc_proj_123"],
     notes: ["Does not create branch preview deployments. Use `treeseed switch <branch> --preview` for that."],
     help: {
       workflowPosition: "configure runtime",
@@ -745,6 +747,8 @@ const CLI_COMMAND_OVERLAYS = /* @__PURE__ */ new Map([
         example("treeseed config", "Run the startup wizard", "Open the newcomer-friendly configuration wizard in human TTY mode."),
         example("treeseed config --full", "Open the advanced editor directly", "Skip the startup wizard and go straight to the full configuration surface."),
         example("treeseed config --full --mouse", "Opt into mouse capture for the editor", "Keep the keyboard-first defaults unless you explicitly want click and wheel interaction inside the config UI."),
+        example("treeseed config --environment staging --bootstrap", "Bootstrap infrastructure from saved config", "Skip the editor and run reconciliation/bootstrap when the required values are already configured."),
+        example("treeseed config --environment staging --bootstrap --preflight", "Inspect bootstrap verification readiness", "Show the resolved units, verification capabilities, and planned reconcile actions without mutating provider resources."),
         example("treeseed config --environment local --sync none", "Edit local values without provider sync", "Limit the session to local values and avoid hosted synchronization while iterating locally."),
         example("treeseed config --environment local --sync none --non-interactive", "Apply deterministic local config in automation", "Use the resolved current and suggested values without opening the interactive UI."),
         example("treeseed config --environment staging --print-env-only --show-secrets", "Inspect a resolved environment report", "Print the resolved staging environment with full secret visibility and exit."),
@@ -756,6 +760,8 @@ const CLI_COMMAND_OVERLAYS = /* @__PURE__ */ new Map([
         detail("--mouse", "Opt into terminal mouse capture for clicking, scrolling, and focus changes inside the config UI."),
         detail("--environment <scope>", "Filter configuration to `all`, `local`, `staging`, or `prod`."),
         detail("--sync <mode>", "Choose which provider surfaces should receive synchronized values after local updates are applied."),
+        detail("--bootstrap", "Skip the editor and run the reconcile/bootstrap path from the values already stored in machine config."),
+        detail("--preflight", "When combined with `--bootstrap`, inspect verification readiness and planned reconcile actions without mutating provider resources."),
         detail("--non-interactive", "Apply resolved values without opening the interactive editor. Use this for automation when you do not want `--json` output."),
         detail("--install-missing-tooling", "Allow config to install missing verification helpers such as the GitHub `gh-act` extension instead of only reporting them."),
         detail("--print-env", "Print the resolved environment values before remote initialization continues."),
@@ -765,7 +771,7 @@ const CLI_COMMAND_OVERLAYS = /* @__PURE__ */ new Map([
       ],
       automationNotes: [
         "Use `--json` for machine-readable automation, or `--non-interactive` when you want deterministic application without interactive UI.",
-        "`--print-env-only`, `--rotate-machine-key`, and `--connect-market` are operational paths that bypass the interactive UI.",
+        "`--bootstrap`, `--bootstrap --preflight`, `--print-env-only`, `--rotate-machine-key`, and `--connect-market` are operational paths that bypass the interactive UI.",
         "Config reports missing tooling by default. Use `--install-missing-tooling` when you want the command to attempt installation.",
         "Shared versus scoped environment semantics are resolved inside the SDK; the CLI help should be treated as the operator-facing explanation layer."
       ],

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@treeseed/cli",
-  "version": "0.5.1",
+  "version": "0.6.1",
   "description": "Operator-facing Treeseed CLI package.",
   "license": "AGPL-3.0-only",
   "repository": {
@@ -44,7 +44,7 @@
     "release:publish": "node ./scripts/run-ts.mjs ./scripts/publish-package.ts"
   },
   "dependencies": {
-    "@treeseed/sdk": "^0.5.3",
+    "@treeseed/sdk": "^0.6.1",
     "ink": "^7.0.0",
     "react": "^19.2.5"
   },