@treeseed/cli 0.8.1 → 0.8.2

package/dist/cli/handlers/audit.d.ts

@@ -0,0 +1,2 @@
+import type { TreeseedCommandHandler } from '../types.js';
+export declare const handleAudit: TreeseedCommandHandler;

package/dist/cli/handlers/audit.js

@@ -0,0 +1,77 @@
+import {
+  formatTreeseedHostingAuditReport,
+  runTreeseedHostingAudit
+} from "@treeseed/sdk/workflow-support";
+import { guidedResult } from "./utils.js";
+import { workflowErrorResult } from "./workflow.js";
+const ENVIRONMENTS = /* @__PURE__ */ new Set(["current", "local", "staging", "prod"]);
+const HOST_KINDS = /* @__PURE__ */ new Set(["repository", "web", "processing", "email"]);
+function normalizeEnvironment(value) {
+  const environment = typeof value === "string" && value.trim() ? value.trim() : "current";
+  if (!ENVIRONMENTS.has(environment)) {
+    throw new Error(`Unsupported audit environment "${environment}". Expected current, local, staging, or prod.`);
+  }
+  return environment;
+}
+function normalizeHostKinds(value) {
+  if (value === void 0 || value === null || value === "") {
+    return void 0;
+  }
+  const raw = Array.isArray(value) ? value.flatMap((entry) => String(entry).split(",")) : String(value).split(",");
+  const hostKinds = raw.map((entry) => entry.trim()).filter(Boolean);
+  const invalid = hostKinds.find((entry) => !HOST_KINDS.has(entry));
+  if (invalid) {
+    throw new Error(`Unsupported hosting audit host kind "${invalid}". Expected repository, web, processing, or email.`);
+  }
+  return [...new Set(hostKinds)];
+}
+function statusCounts(checks) {
+  return checks.reduce((counts, check) => {
+    counts[check.status] = (counts[check.status] ?? 0) + 1;
+    return counts;
+  }, {});
+}
+const handleAudit = async (invocation, context) => {
+  try {
+    const target = invocation.positionals[0] ?? "hosting";
+    if (target !== "hosting") {
+      throw new Error(`Unsupported audit target "${target}". The available target is "hosting".`);
+    }
+    const report = await runTreeseedHostingAudit({
+      tenantRoot: context.cwd,
+      environment: normalizeEnvironment(invocation.args.environment),
+      repair: invocation.args.repair === true,
+      env: context.env,
+      hostKinds: normalizeHostKinds(invocation.args.hostKinds ?? invocation.args.hosts),
+      write: context.write
+    });
+    const counts = statusCounts(report.checks);
+    if (context.outputFormat === "json") {
+      return {
+        exitCode: report.ok ? 0 : 1,
+        stdout: [],
+        report
+      };
+    }
+    return guidedResult({
+      command: "audit",
+      summary: formatTreeseedHostingAuditReport(report),
+      facts: [
+        { label: "Environment", value: report.environment },
+        { label: "Target", value: report.target.label },
+        { label: "Mode", value: report.repairMode ? "repair" : "read-only" },
+        { label: "Passed", value: counts.passed ?? 0 },
+        { label: "Warnings", value: (counts.warning ?? 0) + report.warnings.length },
+        { label: "Failed", value: counts.failed ?? 0 }
+      ],
+      nextSteps: report.nextActions,
+      report,
+      exitCode: report.ok ? 0 : 1
+    });
+  } catch (error) {
+    return workflowErrorResult(error);
+  }
+};
+export {
+  handleAudit
+};

package/dist/cli/operations-registry.js

@@ -1260,6 +1260,48 @@ const CLI_COMMAND_OVERLAYS = /* @__PURE__ */ new Map([
   ["starlight:patch", command({ examples: ["treeseed starlight:patch"], executionMode: "adapter" })]
 ]);
 const CLI_ONLY_OPERATION_SPECS = [
+  {
+    id: "audit.hosting",
+    name: "audit",
+    aliases: [],
+    group: "Validation",
+    summary: "Audit TreeSeed hosting readiness.",
+    description: "Run a read-only or explicit repair audit for Repository, Web, Processing, and Email hosting setup.",
+    provider: "default",
+    related: ["status", "config", "save", "release"],
+    usage: "treeseed audit hosting [--environment current|local|staging|prod] [--repair] [--json]",
+    arguments: [{ name: "target", description: "Audit target. Use hosting.", required: false }],
+    options: [
+      { name: "environment", flags: "--environment <environment>", description: "Audit environment. Defaults to current branch mapping.", kind: "enum", values: ["current", "local", "staging", "prod"] },
+      { name: "repair", flags: "--repair", description: "Explicitly reconcile missing platform/provider resources.", kind: "boolean" },
+      { name: "hostKinds", flags: "--host-kinds <kinds>", description: "Comma-separated host kinds to audit.", kind: "string" },
+      { name: "json", flags: "--json", description: "Emit the hosting audit report as JSON.", kind: "boolean" }
+    ],
+    examples: ["treeseed audit hosting", "treeseed audit hosting --environment staging --json", "treeseed audit hosting --repair --environment prod"],
+    help: {
+      workflowPosition: "validate",
+      longSummary: [
+        "The hosting audit proves that TreeSeed can use its configured Repository, Web, Processing, and Email platforms before saving hosts or launching team projects.",
+        "It is read-only by default. Use `--repair` only when you explicitly want TreeSeed to reconcile provider resources."
+      ],
+      whenToUse: [
+        "Run this before saving managed hosts, launching a hub, or promoting a release that depends on hosted provider resources.",
+        "Use it after changing provider credentials or service topology to verify that the selected environment is complete."
+      ],
+      beforeYouRun: [
+        "Run from the TreeSeed workspace you want to audit.",
+        "Use `--json` for automation and `--repair` only for deliberate provider reconciliation."
+      ],
+      automationNotes: [
+        "The report lists missing key names and resource identifiers but never prints decrypted secret values.",
+        "Save, stage, and release resource verification can include the same read-only audit; repair remains explicit."
+      ]
+    },
+    helpVisible: true,
+    helpFeatured: true,
+    executionMode: "handler",
+    handlerName: "audit"
+  },
   {
     id: "tools.gh",
     name: "gh",

package/dist/cli/registry.d.ts

@@ -38,6 +38,7 @@ export declare const COMMAND_HANDLERS: {
     readonly 'secrets:migrate-key': import("./operations-types.js").TreeseedCommandHandler;
     readonly 'secrets:rotate-passphrase': import("./operations-types.js").TreeseedCommandHandler;
     readonly 'secrets:rotate-machine-key': import("./operations-types.js").TreeseedCommandHandler;
+    readonly audit: import("./operations-types.js").TreeseedCommandHandler;
 };
 export declare const TRESEED_COMMAND_SPECS: TreeseedCommandSpec[];
 export declare function findCommandSpec(name: string | null | undefined): import("./operations-types.js").TreeseedOperationSpec | null;

package/dist/cli/registry.js

@@ -40,6 +40,7 @@ import { handleExport } from "./handlers/export.js";
 import { handleResume } from "./handlers/resume.js";
 import { handleRecover } from "./handlers/recover.js";
 import { handleWorkspace } from "./handlers/workspace.js";
+import { handleAudit } from "./handlers/audit.js";
 const workspaceCommand = (name) => `workspace${":"}${name}`;
 const COMMAND_HANDLERS = {
   init: handleInit,
@@ -81,7 +82,8 @@ const COMMAND_HANDLERS = {
   "secrets:lock": handleSecretsLock,
   "secrets:migrate-key": handleSecretsMigrateKey,
   "secrets:rotate-passphrase": handleSecretsRotatePassphrase,
-  "secrets:rotate-machine-key": handleSecretsRotateMachineKey
+  "secrets:rotate-machine-key": handleSecretsRotateMachineKey,
+  audit: handleAudit
 };
 const TRESEED_COMMAND_SPECS = TRESEED_OPERATION_SPECS;
 function findCommandSpec(name) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@treeseed/cli",
-  "version": "0.8.1",
+  "version": "0.8.2",
   "description": "Operator-facing Treeseed CLI package.",
   "license": "AGPL-3.0-only",
   "repository": {
@@ -45,7 +45,7 @@
     "release:publish": "node ./scripts/run-ts.mjs ./scripts/publish-package.ts"
   },
   "dependencies": {
-    "@treeseed/sdk": "0.8.1",
+    "@treeseed/sdk": "0.8.2",
     "ink": "^7.0.0",
     "react": "^19.2.5"
   },