@treeseed/core 0.6.3 → 0.6.4

package/dist/components/forms/ContactForm.astro

@@ -1,6 +1,5 @@
 ---
 import {
-	TREESEED_PUBLIC_FORMS_LOCAL_BYPASS_TURNSTILE,
 	TREESEED_PUBLIC_TURNSTILE_SITE_KEY,
 } from 'astro:env/client';
 import { CONTACT_TYPE_LABELS } from '../../utils/forms/constants';
@@ -25,7 +24,7 @@ const messages: Record<string, string> = {
 };
 
 const statusMessage = code ? messages[code] ?? null : null;
-const shouldBypassTurnstile = TREESEED_PUBLIC_FORMS_LOCAL_BYPASS_TURNSTILE ?? import.meta.env.DEV;
+const shouldBypassTurnstile = import.meta.env.DEV;
 const formsApiBaseUrl = SITE_FORMS?.apiBaseUrl ?? '/api/form/submit';
 ---
 

package/dist/components/forms/FooterSubscribeForm.astro

@@ -1,6 +1,5 @@
 ---
 import {
-	TREESEED_PUBLIC_FORMS_LOCAL_BYPASS_TURNSTILE,
 	TREESEED_PUBLIC_TURNSTILE_SITE_KEY,
 } from 'astro:env/client';
 import { FORM_CODE_PARAM, FORM_SUCCESS_PARAM, SUBSCRIBE_ANCHOR_ID } from '../../utils/forms/constants';
@@ -8,7 +7,7 @@ import { SITE_FORMS } from '../../utils/site-config';
 
 const { currentPath = '/' } = Astro.props as { currentPath?: string };
 const redirectTarget = `${currentPath}#${SUBSCRIBE_ANCHOR_ID}`;
-const shouldBypassTurnstile = TREESEED_PUBLIC_FORMS_LOCAL_BYPASS_TURNSTILE ?? import.meta.env.DEV;
+const shouldBypassTurnstile = import.meta.env.DEV;
 const formsApiBaseUrl = SITE_FORMS?.apiBaseUrl ?? '/api/form/submit';
 ---
 

package/dist/env.yaml

@@ -22,6 +22,70 @@ entries:
     sourcePriority:
       - machine-config
       - process-env
+  TREESEED_GITHUB_OWNER:
+    label: GitHub repository owner
+    group: github
+    description: GitHub user or organization that owns the Treeseed repository used for bootstrap, CI/CD, and environment sync.
+    howToGet: Treeseed suggests this from the origin remote when available. Otherwise enter the GitHub user or organization that should own the repository.
+    sensitivity: plain
+    targets:
+      - local-runtime
+    scopes:
+      - local
+    storage: scoped
+    requirement: required
+    purposes:
+      - config
+    validation:
+      kind: nonempty
+    sourcePriority:
+      - machine-config
+      - process-env
+    defaultValueRef: githubOwnerDefault
+  TREESEED_GITHUB_REPOSITORY_NAME:
+    label: GitHub repository name
+    group: github
+    description: GitHub repository name Treeseed should verify or create before GitHub bootstrap.
+    howToGet: Treeseed suggests this from the origin remote when available and otherwise defaults it from the site slug.
+    sensitivity: plain
+    targets:
+      - local-runtime
+    scopes:
+      - local
+    storage: scoped
+    requirement: required
+    purposes:
+      - config
+    validation:
+      kind: nonempty
+    sourcePriority:
+      - machine-config
+      - process-env
+    defaultValueRef: githubRepositoryNameDefault
+  TREESEED_GITHUB_REPOSITORY_VISIBILITY:
+    label: GitHub repository visibility
+    group: github
+    description: Visibility to use if Treeseed needs to create the GitHub repository during bootstrap.
+    howToGet: Choose private, public, or internal. Treeseed defaults new repositories to private.
+    sensitivity: plain
+    targets:
+      - local-runtime
+    scopes:
+      - local
+    storage: scoped
+    requirement: optional
+    purposes:
+      - config
+    validation:
+      kind: enum
+      values:
+        - private
+        - public
+        - internal
+    sourcePriority:
+      - machine-config
+      - process-env
+    defaultValueRef: githubRepositoryVisibilityDefault
   CLOUDFLARE_API_TOKEN:
     label: Cloudflare API token
     group: auth
@@ -32,7 +96,6 @@ entries:
       - local-runtime
       - github-secret
     scopes:
-      - local
       - staging
       - prod
     requirement: required
@@ -51,13 +114,12 @@ entries:
     label: Railway API token
     group: auth
     description: Primary Railway token for user or workspace scoped access, including project creation and most Treeseed-managed Railway flows.
-    howToGet: In Railway, create a user or workspace API token that can create and manage the target project, then paste it here. Treeseed also accepts the legacy alias RAILWAY_API_KEY from process env.
+    howToGet: In Railway, create a user or workspace API token that can create and manage the target project, then paste it here.
     sensitivity: secret
     targets:
       - local-runtime
       - railway-secret
     scopes:
-      - local
       - staging
       - prod
     requirement: conditional
@@ -80,10 +142,8 @@ entries:
     howToGet: In Railway, use the workspace slug or name shown in the workspace switcher. Treeseed defaults this repository to knowledge-coop unless you override it here.
     sensitivity: plain
     targets:
-      - local-runtime
       - railway-var
     scopes:
-      - local
       - staging
       - prod
     storage: shared
@@ -161,18 +221,14 @@ entries:
     howToGet: Create a Turnstile widget in Cloudflare Turnstile and copy the site key.
     sensitivity: plain
     targets:
-      - local-runtime
-      - local-cloudflare
       - github-variable
       - cloudflare-var
     scopes:
-      - local
       - staging
       - prod
     storage: shared
     requirement: conditional
     purposes:
-      - dev
       - save
       - deploy
       - config
@@ -190,18 +246,14 @@ entries:
     howToGet: Create a Turnstile widget in Cloudflare Turnstile and copy the secret key.
     sensitivity: secret
     targets:
-      - local-runtime
-      - local-cloudflare
       - github-secret
       - cloudflare-secret
     scopes:
-      - local
       - staging
       - prod
     storage: shared
     requirement: conditional
     purposes:
-      - dev
       - save
       - deploy
       - config
@@ -212,27 +264,6 @@ entries:
       - process-env
     relevanceRef: turnstileEnabled
     requiredWhenRef: turnstileNonLocal
-  TREESEED_PUBLIC_FORMS_LOCAL_BYPASS_TURNSTILE:
-    label: Local Turnstile bypass
-    group: local-development
-    description: Lets contributors edit content and exercise forms locally without a live Turnstile widget.
-    howToGet: Treeseed defaults this to true for local development. You can switch it off if you want to test with real Turnstile keys locally.
-    sensitivity: plain
-    targets:
-      - local-runtime
-      - local-cloudflare
-    scopes:
-      - local
-    requirement: optional
-    purposes:
-      - dev
-      - config
-    validation:
-      kind: boolean
-    sourcePriority:
-      - machine-config
-      - process-env
-    localDefaultValueRef: localFormsBypassDefault
   TREESEED_SMTP_HOST:
     label: SMTP host
     group: smtp

package/dist/scripts/package-tools.js

@@ -46,8 +46,6 @@ export function isWorkspaceRoot(root = process.cwd()) {
 export function createProductionBuildEnv(extraEnv = {}) {
     return {
         TREESEED_LOCAL_DEV_MODE: 'cloudflare',
-        TREESEED_PUBLIC_FORMS_LOCAL_BYPASS_TURNSTILE: '',
-        TREESEED_FORMS_LOCAL_BYPASS_TURNSTILE: '',
         TREESEED_FORMS_LOCAL_BYPASS_CLOUDFLARE_GUARDS: '',
         TREESEED_PUBLIC_DEV_WATCH_RELOAD: '',
         ...extraEnv,

package/dist/site.js

@@ -275,7 +275,6 @@ function createTreeseedSite(tenantConfig, { starlight }) {
     env: {
       schema: {
         TREESEED_PUBLIC_TURNSTILE_SITE_KEY: envField.string({ context: "client", access: "public", optional: true }),
-        TREESEED_PUBLIC_FORMS_LOCAL_BYPASS_TURNSTILE: envField.boolean({ context: "client", access: "public", optional: true }),
         TREESEED_PUBLIC_DEV_WATCH_RELOAD: envField.boolean({ context: "client", access: "public", optional: true }),
         TREESEED_TURNSTILE_SECRET_KEY: envField.string({ context: "server", access: "secret", optional: true }),
         TREESEED_SMTP_HOST: envField.string({ context: "server", access: "secret", optional: true }),
@@ -293,7 +292,6 @@ function createTreeseedSite(tenantConfig, { starlight }) {
         TREESEED_CONTENT_MANIFEST_KEY_TEMPLATE: envField.string({ context: "server", access: "secret", optional: true }),
         TREESEED_CONTENT_PREVIEW_ROOT_TEMPLATE: envField.string({ context: "server", access: "secret", optional: true }),
         TREESEED_LOCAL_DEV_MODE: envField.enum({ values: ["cloudflare"], context: "server", access: "secret", optional: true }),
-        TREESEED_FORMS_LOCAL_BYPASS_TURNSTILE: envField.boolean({ context: "server", access: "secret", optional: true }),
         TREESEED_FORMS_LOCAL_BYPASS_CLOUDFLARE_GUARDS: envField.boolean({ context: "server", access: "secret", optional: true }),
         TREESEED_FORMS_LOCAL_USE_MAILPIT: envField.boolean({ context: "server", access: "secret", optional: true }),
         TREESEED_MAILPIT_SMTP_HOST: envField.string({ context: "server", access: "secret", optional: true }),

package/dist/utils/forms/config.js

@@ -1,7 +1,6 @@
 import {
   TREESEED_FORM_TOKEN_SECRET,
   TREESEED_FORMS_LOCAL_BYPASS_CLOUDFLARE_GUARDS,
-  TREESEED_FORMS_LOCAL_BYPASS_TURNSTILE,
   TREESEED_FORMS_LOCAL_USE_MAILPIT,
   TREESEED_LOCAL_DEV_MODE,
   TREESEED_MAILPIT_SMTP_HOST,
@@ -52,9 +51,6 @@ function getLocalDevMode() {
   }
   return null;
 }
-function shouldBypassTurnstileByEnv() {
-  return TREESEED_FORMS_LOCAL_BYPASS_TURNSTILE;
-}
 function shouldBypassCloudflareGuardsByEnv() {
   return TREESEED_FORMS_LOCAL_BYPASS_CLOUDFLARE_GUARDS;
 }
@@ -86,6 +82,5 @@ export {
   isSmtpEnabled,
   isTurnstileEnabled,
   shouldBypassCloudflareGuardsByEnv,
-  shouldBypassTurnstileByEnv,
   shouldUseMailpit
 };

package/dist/utils/forms/runtime-core.js

@@ -4,12 +4,12 @@ function deriveFormRuntimeCapabilities(input) {
     isCloudflareRuntime: input.isCloudflareRuntime,
     isLocalMode,
     localDevMode: input.localDevMode ?? "production",
-    bypassTurnstile: isLocalMode ? input.bypassTurnstile ?? false : false,
+    bypassTurnstile: isLocalMode ? true : false,
     bypassCloudflareGuards: isLocalMode ? input.bypassCloudflareGuards ?? false : false,
     useMailpit: isLocalMode ? input.useMailpit : false,
     formsMode: input.formsMode,
     smtpEnabled: input.smtpEnabled || (isLocalMode ? input.useMailpit : false),
-    turnstileEnabled: input.turnstileEnabled
+    turnstileEnabled: isLocalMode ? false : input.turnstileEnabled
   };
 }
 export {

package/dist/utils/forms/runtime.js

@@ -4,7 +4,6 @@ import {
   isSmtpEnabled,
   isTurnstileEnabled,
   shouldBypassCloudflareGuardsByEnv,
-  shouldBypassTurnstileByEnv,
   shouldUseMailpit
 } from "./config.js";
 import { deriveFormRuntimeCapabilities } from "./runtime-core.js";
@@ -14,7 +13,6 @@ function resolveFormRuntimeCapabilities(locals) {
     isCloudflareRuntime: Boolean(runtime?.env?.FORM_GUARD_KV && runtime?.env?.SITE_DATA_DB),
     localDevMode: getLocalDevMode(),
     isDevServer: import.meta.env.DEV,
-    bypassTurnstile: shouldBypassTurnstileByEnv(),
     bypassCloudflareGuards: shouldBypassCloudflareGuardsByEnv(),
     useMailpit: shouldUseMailpit(),
     formsMode: getFormsMode(),

package/dist/worker/forms-worker.js

@@ -67,7 +67,6 @@ function buildRuntime(env) {
     isCloudflareRuntime: true,
     localDevMode: env.TREESEED_LOCAL_DEV_MODE === "cloudflare" ? "cloudflare" : null,
     isDevServer: false,
-    bypassTurnstile: envBoolean(env.TREESEED_FORMS_LOCAL_BYPASS_TURNSTILE),
     bypassCloudflareGuards: envBoolean(env.TREESEED_FORMS_LOCAL_BYPASS_CLOUDFLARE_GUARDS),
     useMailpit: envBoolean(env.TREESEED_FORMS_LOCAL_USE_MAILPIT),
     formsMode: __TREESEED_DEPLOY_CONFIG__.providers?.forms ?? "store_only",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@treeseed/core",
-  "version": "0.6.3",
+  "version": "0.6.4",
   "description": "Treeseed integrated platform starter for Astro/Starlight web runtimes and Hono API runtimes.",
   "license": "AGPL-3.0-only",
   "repository": {
@@ -75,7 +75,7 @@
     "@astrojs/sitemap": "3.7.0",
     "@astrojs/starlight": "0.37.6",
     "@tailwindcss/vite": "^4.1.4",
-    "@treeseed/sdk": "^0.6.1",
+    "@treeseed/sdk": "^0.6.2",
     "astro": "^5.6.1",
     "esbuild": "^0.28.0",
     "hono": "^4.8.2",

package/templates/github/deploy.workflow.yml

@@ -188,12 +188,12 @@ __WORKING_DIRECTORY_BLOCK__
       TREESEED_EDITORIAL_PREVIEW_SECRET: ${{ secrets.TREESEED_EDITORIAL_PREVIEW_SECRET }}
       TREESEED_PUBLIC_TURNSTILE_SITE_KEY: ${{ vars.TREESEED_PUBLIC_TURNSTILE_SITE_KEY }}
       TREESEED_TURNSTILE_SECRET_KEY: ${{ secrets.TREESEED_TURNSTILE_SECRET_KEY }}
-      TREESEED_SMTP_HOST: ${{ secrets.TREESEED_SMTP_HOST }}
-      TREESEED_SMTP_PORT: ${{ secrets.TREESEED_SMTP_PORT }}
-      TREESEED_SMTP_USERNAME: ${{ secrets.TREESEED_SMTP_USERNAME }}
+      TREESEED_SMTP_HOST: ${{ vars.TREESEED_SMTP_HOST }}
+      TREESEED_SMTP_PORT: ${{ vars.TREESEED_SMTP_PORT }}
+      TREESEED_SMTP_USERNAME: ${{ vars.TREESEED_SMTP_USERNAME }}
       TREESEED_SMTP_PASSWORD: ${{ secrets.TREESEED_SMTP_PASSWORD }}
-      TREESEED_SMTP_FROM: ${{ secrets.TREESEED_SMTP_FROM }}
-      TREESEED_SMTP_REPLY_TO: ${{ secrets.TREESEED_SMTP_REPLY_TO }}
+      TREESEED_SMTP_FROM: ${{ vars.TREESEED_SMTP_FROM }}
+      TREESEED_SMTP_REPLY_TO: ${{ vars.TREESEED_SMTP_REPLY_TO }}
       RAILWAY_API_TOKEN: ${{ secrets.RAILWAY_API_TOKEN }}
       TREESEED_MARKET_API_BASE_URL: ${{ vars.TREESEED_MARKET_API_BASE_URL }}
       TREESEED_PROJECT_ID: ${{ inputs.project_id || vars.TREESEED_PROJECT_ID }}
@@ -262,12 +262,12 @@ __WORKING_DIRECTORY_BLOCK__
       TREESEED_EDITORIAL_PREVIEW_SECRET: ${{ secrets.TREESEED_EDITORIAL_PREVIEW_SECRET }}
       TREESEED_PUBLIC_TURNSTILE_SITE_KEY: ${{ vars.TREESEED_PUBLIC_TURNSTILE_SITE_KEY }}
       TREESEED_TURNSTILE_SECRET_KEY: ${{ secrets.TREESEED_TURNSTILE_SECRET_KEY }}
-      TREESEED_SMTP_HOST: ${{ secrets.TREESEED_SMTP_HOST }}
-      TREESEED_SMTP_PORT: ${{ secrets.TREESEED_SMTP_PORT }}
-      TREESEED_SMTP_USERNAME: ${{ secrets.TREESEED_SMTP_USERNAME }}
+      TREESEED_SMTP_HOST: ${{ vars.TREESEED_SMTP_HOST }}
+      TREESEED_SMTP_PORT: ${{ vars.TREESEED_SMTP_PORT }}
+      TREESEED_SMTP_USERNAME: ${{ vars.TREESEED_SMTP_USERNAME }}
       TREESEED_SMTP_PASSWORD: ${{ secrets.TREESEED_SMTP_PASSWORD }}
-      TREESEED_SMTP_FROM: ${{ secrets.TREESEED_SMTP_FROM }}
-      TREESEED_SMTP_REPLY_TO: ${{ secrets.TREESEED_SMTP_REPLY_TO }}
+      TREESEED_SMTP_FROM: ${{ vars.TREESEED_SMTP_FROM }}
+      TREESEED_SMTP_REPLY_TO: ${{ vars.TREESEED_SMTP_REPLY_TO }}
       RAILWAY_API_TOKEN: ${{ secrets.RAILWAY_API_TOKEN }}
       TREESEED_MARKET_API_BASE_URL: ${{ vars.TREESEED_MARKET_API_BASE_URL }}
       TREESEED_PROJECT_ID: ${{ inputs.project_id || vars.TREESEED_PROJECT_ID }}
@@ -347,12 +347,12 @@ __WORKING_DIRECTORY_BLOCK__
       TREESEED_EDITORIAL_PREVIEW_SECRET: ${{ secrets.TREESEED_EDITORIAL_PREVIEW_SECRET }}
       TREESEED_PUBLIC_TURNSTILE_SITE_KEY: ${{ vars.TREESEED_PUBLIC_TURNSTILE_SITE_KEY }}
       TREESEED_TURNSTILE_SECRET_KEY: ${{ secrets.TREESEED_TURNSTILE_SECRET_KEY }}
-      TREESEED_SMTP_HOST: ${{ secrets.TREESEED_SMTP_HOST }}
-      TREESEED_SMTP_PORT: ${{ secrets.TREESEED_SMTP_PORT }}
-      TREESEED_SMTP_USERNAME: ${{ secrets.TREESEED_SMTP_USERNAME }}
+      TREESEED_SMTP_HOST: ${{ vars.TREESEED_SMTP_HOST }}
+      TREESEED_SMTP_PORT: ${{ vars.TREESEED_SMTP_PORT }}
+      TREESEED_SMTP_USERNAME: ${{ vars.TREESEED_SMTP_USERNAME }}
       TREESEED_SMTP_PASSWORD: ${{ secrets.TREESEED_SMTP_PASSWORD }}
-      TREESEED_SMTP_FROM: ${{ secrets.TREESEED_SMTP_FROM }}
-      TREESEED_SMTP_REPLY_TO: ${{ secrets.TREESEED_SMTP_REPLY_TO }}
+      TREESEED_SMTP_FROM: ${{ vars.TREESEED_SMTP_FROM }}
+      TREESEED_SMTP_REPLY_TO: ${{ vars.TREESEED_SMTP_REPLY_TO }}
       RAILWAY_API_TOKEN: ${{ secrets.RAILWAY_API_TOKEN }}
       TREESEED_MARKET_API_BASE_URL: ${{ vars.TREESEED_MARKET_API_BASE_URL }}
       TREESEED_PROJECT_ID: ${{ inputs.project_id || vars.TREESEED_PROJECT_ID }}