@treeseed/core 0.8.3 → 0.8.4

package/README.md

@@ -1,6 +1,8 @@
 # @treeseed/core
 
-`@treeseed/core` is the Treeseed integrated platform starter for Astro/Starlight sites, Hono API runtimes, agent runtimes, and worker services. It contains the published web runtime, API runtime, manager/worker entrypoints, integrated local dev orchestration, shared components and styles, the knowledge-factory content model, and the forms stack used by Treeseed tenants.
+`@treeseed/core` is the Treeseed web framework package for Astro/Starlight sites. It contains the published web runtime, tenant site configuration, shared components and styles, the knowledge-factory content model, and the forms stack used by Treeseed tenants.
+
+Backend API, agent runtime, manager, worker, and workday processing services are owned by `@treeseed/agent`.
 
 This repository is the package root. Run package commands from [`core`](./), not from the top-level `treeseed` workspace.
 
@@ -33,7 +35,7 @@ npm ci
 - `test/`: unit tests run by Vitest
 - `.fixtures/treeseed-fixtures/`: pinned shared fixtures submodule
 - `.github/workflows/`: CI and publish workflows for this package repo
-- `templates/github/deploy.workflow.yml`: downstream tenant deploy workflow template
+- `templates/github/deploy-web.workflow.yml`: downstream tenant web deploy workflow template
 
 The package builds directly against the canonical shared working-site fixture in `treeseed-fixtures`.
 
@@ -50,10 +52,6 @@ That means the fixture may reference package surfaces owned by `sdk`, `core`, an
 ```bash
 npm run dev
 npm run dev:web
-npm run dev:api
-npm run dev:worker
-npm run dev:workday-manager
-npm run dev:worker-runner
 npm run fixtures:check
 npm run build:dist
 npm run test:unit
@@ -64,10 +62,8 @@ npm run test:smoke
 
 What they do:
 
-- `dev`: starts the integrated Astro UI and Hono API local runtime from `core`
+- `dev`: starts the Astro UI local runtime from `core`
 - `dev:web`: starts only the Astro UI dev surface through the `core` runtime
-- `dev:api`: starts only the Hono API dev surface through the `core` runtime
-- `dev:workday-manager`, `dev:worker-runner`: start the scheduled manager and worker runner entrypoints from `core`
 - `fixtures:check`: verifies that the pinned shared fixture is initialized and usable
 - `build:dist`: builds the publishable `dist/` package output
 - `test:unit`: runs package unit tests with Vitest
@@ -117,7 +113,7 @@ This repo ships two package workflows:
 - [`ci.yml`](./.github/workflows/ci.yml): runs on push and pull request, installs with `npm ci`, then runs `npm run verify`
 - [`publish.yml`](./.github/workflows/publish.yml): runs on `workflow_dispatch` and on plain semver tags like `0.1.0`; it installs with `npm ci`, validates the tag with `release:check-tag`, runs `npm run verify`, and publishes with `NPM_TOKEN`
 
-The deploy workflow template at [`templates/github/deploy.workflow.yml`](./templates/github/deploy.workflow.yml) is for downstream Treeseed site repositories, not for publishing this package.
+The deploy workflow template at [`templates/github/deploy-web.workflow.yml`](./templates/github/deploy-web.workflow.yml) is for downstream Treeseed web repositories, not for publishing this package. Processing host deploy assets are owned by `@treeseed/agent`.
 
 ## Consumer Contract
 
@@ -132,7 +128,7 @@ The published package includes:
 - `utils/`
 - `README.md`
 
-The package currently depends on `@treeseed/sdk` plus the runtime packages needed for its web, API, and worker surfaces. It does not depend on `@treeseed/cli`.
+The package currently depends on `@treeseed/sdk` plus the runtime packages needed for its web surfaces. It does not depend on `@treeseed/cli` or `@treeseed/agent`.
 
 ## Contributor Workflow
 

package/dist/dev-watch.js

@@ -85,7 +85,7 @@ function classifyChanges(changedPaths, watchEntries) {
   }
   function isTenantApiInput(filePath) {
     const normalized = filePath.split(sep).join("/");
-    return normalized.includes("/src/api/") || normalized.endsWith("/src/api") || normalized.endsWith("/treeseed.site.yaml") || normalized.endsWith("/treeseed.config.ts") || normalized.endsWith("/package.json") || normalized.endsWith("/tsconfig.json");
+    return normalized.endsWith("/treeseed.site.yaml") || normalized.endsWith("/treeseed.config.ts") || normalized.endsWith("/package.json") || normalized.endsWith("/tsconfig.json");
   }
   const tenantChanged = changedPaths.some(
     (filePath) => watchEntries.some((entry) => entry.kind === "tenant" && matchesEntry(filePath, entry))

package/dist/dev.d.ts

@@ -5,11 +5,10 @@ export declare const TREESEED_DEFAULT_WEB_HOST = "127.0.0.1";
 export declare const TREESEED_DEFAULT_WEB_PORT = 4321;
 export declare const TREESEED_DEFAULT_API_HOST = "127.0.0.1";
 export declare const TREESEED_DEFAULT_API_PORT = 3000;
-export declare const TREESEED_DEFAULT_MANAGER_PORT = 3100;
 export declare const TREESEED_DEFAULT_LOCAL_SMTP_HOST = "127.0.0.1";
 export declare const TREESEED_DEFAULT_LOCAL_SMTP_PORT = 1025;
 export declare const TREESEED_DEFAULT_MAILPIT_UI_PORT = 8025;
-export type TreeseedIntegratedDevSurface = 'integrated' | 'services' | 'web' | 'api' | 'manager' | 'worker';
+export type TreeseedIntegratedDevSurface = 'integrated' | 'web';
 export type TreeseedIntegratedDevSetupMode = 'auto' | 'check' | 'off';
 export type TreeseedIntegratedDevFeedbackMode = 'live' | 'restart' | 'off';
 export type TreeseedIntegratedDevOpenMode = 'auto' | 'on' | 'off';
@@ -31,7 +30,6 @@ export type TreeseedIntegratedDevOptions = {
     webPort?: number;
     apiHost?: string;
     apiPort?: number;
-    managerPort?: number;
     setupMode?: TreeseedIntegratedDevSetupMode;
     feedbackMode?: TreeseedIntegratedDevFeedbackMode;
     openMode?: TreeseedIntegratedDevOpenMode;
@@ -46,7 +44,7 @@ export type TreeseedIntegratedDevOptions = {
     shutdownGraceMs?: number;
 };
 export type TreeseedIntegratedDevCommand = {
-    id: 'web' | 'api' | 'manager' | 'worker';
+    id: 'web';
     label: string;
     command: string;
     args: string[];

package/dist/dev.js

@@ -27,7 +27,6 @@ const TREESEED_DEFAULT_WEB_HOST = "127.0.0.1";
 const TREESEED_DEFAULT_WEB_PORT = 4321;
 const TREESEED_DEFAULT_API_HOST = "127.0.0.1";
 const TREESEED_DEFAULT_API_PORT = 3e3;
-const TREESEED_DEFAULT_MANAGER_PORT = 3100;
 const TREESEED_DEFAULT_LOCAL_SMTP_HOST = "127.0.0.1";
 const TREESEED_DEFAULT_LOCAL_SMTP_PORT = 1025;
 const TREESEED_DEFAULT_MAILPIT_UI_PORT = 8025;
@@ -83,28 +82,6 @@ function resolveOptionalScriptEntrypoint(packageDir, sourceRelativePath, distRel
   }
   return null;
 }
-function resolveTenantApiEntrypoint(tenantRoot, runTsPath) {
-  const javascriptCandidates = [
-    resolve(tenantRoot, "src", "api", "server.js"),
-    resolve(tenantRoot, "src", "api", "server.mjs")
-  ];
-  for (const candidate of javascriptCandidates) {
-    if (existsSync(candidate)) {
-      return {
-        command: process.execPath,
-        args: [candidate]
-      };
-    }
-  }
-  const typescriptCandidate = resolve(tenantRoot, "src", "api", "server.ts");
-  if (existsSync(typescriptCandidate) && existsSync(runTsPath)) {
-    return {
-      command: process.execPath,
-      args: [runTsPath, typescriptCandidate]
-    };
-  }
-  return null;
-}
 function normalizePort(value, fallback) {
   return Number.isInteger(value) && Number(value) > 0 ? Number(value) : fallback;
 }
@@ -156,20 +133,6 @@ function selectWebLocalRuntime(surfaceConfig, providerFallback = "local") {
     reason: requested === "local" ? "Configured to use the full local Astro runtime." : `Provider "${provider}" has no provider-local web runtime; using Astro local.`
   };
 }
-function selectServiceLocalRuntime(serviceName, serviceConfig) {
-  const record = serviceConfig && typeof serviceConfig === "object" ? serviceConfig : {};
-  const provider = normalizeProvider(record.provider, "railway");
-  const requested = normalizeLocalRuntimeMode(record.local?.runtime);
-  if (requested === "provider") {
-    throw new Error(unsupportedProviderRuntimeMessage("service", serviceName, provider));
-  }
-  return {
-    requested,
-    provider,
-    selected: "node-local",
-    reason: requested === "local" ? "Configured to use the full local Node runtime." : `Provider "${provider}" has no provider-local service runtime; using Node local.`
-  };
-}
 function loadDevDeployConfig(tenantRoot) {
   try {
     return loadTreeseedDeployConfig(resolve(tenantRoot, "treeseed.site.yaml"));
@@ -272,9 +235,6 @@ function createWatchEntries(tenantRoot, sdkPackageRoot) {
   }
   return entries;
 }
-function isSurfaceIncluded(plan, id) {
-  return plan.commands.some((command) => command.id === id);
-}
 function createSetupSteps(tenantRoot, setupMode, sdkPackageRoot, planLike, env, mailpitEnabled, usesCloudflareWebRuntime) {
   if (setupMode === "off") {
     return [
@@ -311,7 +271,7 @@ function createSetupSteps(tenantRoot, setupMode, sdkPackageRoot, planLike, env,
     {
       id: "wrangler",
       label: "Verify Wrangler executable",
-      required: usesCloudflareWebRuntime || isSurfaceIncluded(planLike, "api"),
+      required: usesCloudflareWebRuntime,
       status: "planned",
       detail: resolveTreeseedToolBinary("wrangler", { env }) ?? void 0
     },
@@ -354,7 +314,7 @@ function createSetupSteps(tenantRoot, setupMode, sdkPackageRoot, planLike, env,
       detail: mailpitEnabled ? mailpit ? "Mailpit SMTP will listen on 127.0.0.1:1025 and the web UI on http://127.0.0.1:8025." : "Unable to resolve the Mailpit startup script." : "Docker Compose is unavailable, so Mailpit is disabled for this local dev run."
     }
   ];
-  if ((isSurfaceIncluded(planLike, "api") || usesCloudflareWebRuntime) && existsSync(resolve(tenantRoot, "migrations"))) {
+  if (usesCloudflareWebRuntime && existsSync(resolve(tenantRoot, "migrations"))) {
     const migrate = resolveOptionalScriptEntrypoint(
       sdkPackageRoot,
       "scripts/tenant-d1-migrate-local.ts",
@@ -383,8 +343,6 @@ function createTreeseedIntegratedDevPlan(options = {}) {
   const webPort = normalizePort(options.webPort, TREESEED_DEFAULT_WEB_PORT);
   const apiHost = options.apiHost ?? TREESEED_DEFAULT_API_HOST;
   const apiPort = normalizePort(options.apiPort, TREESEED_DEFAULT_API_PORT);
-  const managerPort = normalizePort(options.managerPort, TREESEED_DEFAULT_MANAGER_PORT);
-  const includeServices = options.includeServices ?? (surface === "integrated" || surface === "services");
   const machineEnv = resolveLocalMachineEnv(tenantRoot);
   const mergedEnv = { ...process.env, ...machineEnv, ...options.env ?? {} };
   const projectId = options.projectId ?? mergedEnv.TREESEED_PROJECT_ID;
@@ -394,13 +352,7 @@ function createTreeseedIntegratedDevPlan(options = {}) {
   const sdkPackageRoot = resolvePackageRoot("@treeseed/sdk", tenantRoot);
   const deployConfig = loadDevDeployConfig(tenantRoot);
   const webLocalRuntime = selectWebLocalRuntime(deployConfig?.surfaces?.web, fallbackWebProviderFromDeployConfig(deployConfig));
-  const serviceLocalRuntimes = {
-    api: selectServiceLocalRuntime("api", deployConfig?.services?.api),
-    manager: selectServiceLocalRuntime("manager", deployConfig?.services?.manager),
-    worker: selectServiceLocalRuntime("worker", deployConfig?.services?.worker)
-  };
   const usesCloudflareWebRuntime = webLocalRuntime.selected === "cloudflare-wrangler-local";
-  const coreRunTsPath = resolve(packageRoot, "scripts", "run-ts.mjs");
   const webEntrypoint = resolveNodeEntrypoint(
     sdkPackageRoot,
     "scripts/tenant-astro-command.ts",
@@ -420,21 +372,6 @@ function createTreeseedIntegratedDevPlan(options = {}) {
       String(webPort)
     ]
   };
-  const apiEntrypoint = resolveTenantApiEntrypoint(tenantRoot, coreRunTsPath) ?? resolveNodeEntrypoint(
-    packageRoot,
-    "src/api/server.ts",
-    "dist/api/server.js"
-  );
-  const managerEntrypoint = resolveNodeEntrypoint(
-    packageRoot,
-    "src/services/manager.ts",
-    "dist/services/manager.js"
-  );
-  const workerEntrypoint = resolveNodeEntrypoint(
-    packageRoot,
-    "src/services/worker.ts",
-    "dist/services/worker.js"
-  );
   const watchEntries = watch ? createWatchEntries(tenantRoot, sdkPackageRoot) : [];
   const mailpitEnabled = dockerComposeIsAvailable(mergedEnv);
   const resetRequested = options.reset === true;
@@ -480,46 +417,6 @@ function createTreeseedIntegratedDevPlan(options = {}) {
       localRuntime: webLocalRuntime
     });
   }
-  if (surface === "integrated" || surface === "api") {
-    commands.push({
-      id: "api",
-      label: "Hono API",
-      command: apiEntrypoint.command,
-      args: apiEntrypoint.args,
-      cwd: tenantRoot,
-      env: {
-        ...sharedEnv,
-        PORT: options.apiPort != null ? String(apiPort) : sharedEnv.PORT ?? String(apiPort)
-      },
-      localRuntime: serviceLocalRuntimes.api
-    });
-  }
-  if (includeServices || surface === "manager") {
-    commands.push({
-      id: "manager",
-      label: "Manager",
-      command: managerEntrypoint.command,
-      args: managerEntrypoint.args,
-      cwd: tenantRoot,
-      env: {
-        ...sharedEnv,
-        PORT: options.managerPort != null ? String(managerPort) : sharedEnv.PORT ?? String(managerPort),
-        TREESEED_MANAGER_BASE_URL: options.managerPort != null ? `http://${apiHost}:${managerPort}` : sharedEnv.TREESEED_MANAGER_BASE_URL ?? `http://${apiHost}:${managerPort}`
-      },
-      localRuntime: serviceLocalRuntimes.manager
-    });
-  }
-  if (includeServices || surface === "worker") {
-    commands.push({
-      id: "worker",
-      label: "Worker",
-      command: workerEntrypoint.command,
-      args: workerEntrypoint.args,
-      cwd: tenantRoot,
-      env: sharedEnv,
-      localRuntime: serviceLocalRuntimes.worker
-    });
-  }
   const readyChecks = commands.map((command) => {
     if (command.id === "web") {
       return {
@@ -530,15 +427,6 @@ function createTreeseedIntegratedDevPlan(options = {}) {
         url: webUrl ?? void 0
       };
     }
-    if (command.id === "api") {
-      return {
-        id: command.id,
-        label: command.label,
-        required: true,
-        strategy: "http",
-        url: `${apiBaseUrl.replace(/\/$/u, "")}/readyz`
-      };
-    }
     return {
       id: command.id,
       label: command.label,
@@ -569,8 +457,7 @@ function createTreeseedIntegratedDevPlan(options = {}) {
     watchEntries,
     commands,
     localRuntimes: {
-      web: webLocalRuntime,
-      ...serviceLocalRuntimes
+      web: webLocalRuntime
     },
     reset
   };
@@ -1284,13 +1171,7 @@ async function runTreeseedIntegratedDev(options = {}, deps = {}) {
               await restartCommand("web");
             }
             if (change.packageChanged || change.sdkChanged) {
-              await Promise.all([
-                restartCommand("api"),
-                restartCommand("manager"),
-                restartCommand("worker")
-              ]);
-            } else if (change.tenantApiChanged) {
-              await restartCommand("api");
+              await restartCommand("web");
             }
             if (plan.feedbackMode === "live") {
               writeDevReloadStamp(plan.tenantRoot);
@@ -1379,7 +1260,6 @@ export {
   TREESEED_DEFAULT_LOCAL_SMTP_HOST,
   TREESEED_DEFAULT_LOCAL_SMTP_PORT,
   TREESEED_DEFAULT_MAILPIT_UI_PORT,
-  TREESEED_DEFAULT_MANAGER_PORT,
   TREESEED_DEFAULT_WEB_HOST,
   TREESEED_DEFAULT_WEB_PORT,
   createTreeseedIntegratedDevPlan,

package/dist/env.yaml

@@ -1,198 +1,34 @@
 entries:
-  GH_TOKEN:
-    label: GitHub access token
+  TREESEED_PROJECT_DOMAINS:
+    label: Project custom domains
     group: auth
-    description: Personal access token used by Treeseed for GitHub CLI automation, repository setup, CI secret sync, and GitHub Copilot SDK-backed workflows.
-    howToGet: "Create a GitHub fine-grained personal access token scoped to the TreeSeed repository. Required repository permissions: Contents read/write, Environments read/write, Secrets and variables read/write, Actions and workflows read/write, Pull requests read/write, Issues read/write. Then paste it here as GH_TOKEN."
-    sensitivity: secret
-    targets:
-      - local-runtime
-      - railway-secret
-    scopes:
-      - local
-      - staging
-      - prod
-    requirement: required
-    purposes:
-      - save
-      - config
-    validation:
-      kind: nonempty
-      minLength: 8
-    sourcePriority:
-      - machine-config
-      - process-env
-  TREESEED_GITHUB_OWNER:
-    label: GitHub repository owner
-    group: github
-    description: GitHub user or organization that owns the Treeseed repository used for bootstrap, CI/CD, and environment sync.
-    howToGet: Treeseed suggests this from the origin remote when available. Otherwise enter the GitHub user or organization that should own the repository.
-    sensitivity: plain
-    targets:
-      - local-runtime
-    scopes:
-      - local
-    storage: scoped
-    requirement: required
-    purposes:
-      - config
-    validation:
-      kind: nonempty
-    sourcePriority:
-      - machine-config
-      - process-env
-    defaultValueRef: githubOwnerDefault
-  TREESEED_GITHUB_REPOSITORY_NAME:
-    label: GitHub repository name
-    group: github
-    description: GitHub repository name Treeseed should verify or create before GitHub bootstrap.
-    howToGet: Treeseed suggests this from the origin remote when available and otherwise defaults it from the site slug.
-    sensitivity: plain
-    targets:
-      - local-runtime
-    scopes:
-      - local
-    storage: scoped
-    requirement: required
-    purposes:
-      - config
-    validation:
-      kind: nonempty
-    sourcePriority:
-      - machine-config
-      - process-env
-    defaultValueRef: githubRepositoryNameDefault
-  TREESEED_GITHUB_REPOSITORY_VISIBILITY:
-    label: GitHub repository visibility
-    group: github
-    description: Visibility to use if Treeseed needs to create the GitHub repository during bootstrap.
-    howToGet: Choose private, public, or internal. Treeseed defaults new repositories to private.
-    sensitivity: plain
-    targets:
-      - local-runtime
-    scopes:
-      - local
-    storage: scoped
-    requirement: optional
-    purposes:
-      - config
-    validation:
-      kind: enum
-      values:
-        - private
-        - public
-        - internal
-    sourcePriority:
-      - machine-config
-      - process-env
-    defaultValueRef: githubRepositoryVisibilityDefault
-  CLOUDFLARE_API_TOKEN:
-    label: Cloudflare API token
-    group: auth
-    description: Account-level Cloudflare API token used by Wrangler, Workers AI, and CI to manage Pages, Workers, Workers KV, D1, Queues, DNS, secrets, and deploys.
-    howToGet: "Create a Cloudflare account-level API token scoped to the target domain and account. Required permissions: Account Cloudflare Pages edit, Account Workers Scripts edit, Account Workers KV Storage edit, Account D1 edit, Account Queues edit, Zone DNS edit, Workers AI Read, and Workers AI Edit for model execution. If TREESEED_COMMIT_AI_GATEWAY_ID is configured, also grant AI Gateway Read/Run access for the gateway. Then paste it here as CLOUDFLARE_API_TOKEN."
-    sensitivity: secret
-    targets:
-      - local-runtime
-      - github-secret
-    scopes:
-      - local
-      - staging
-      - prod
-    storage: shared
-    requirement: required
-    purposes:
-      - save
-      - deploy
-      - destroy
-      - config
-    validation:
-      kind: nonempty
-      minLength: 8
-    sourcePriority:
-      - machine-config
-      - process-env
-  RAILWAY_API_TOKEN:
-    label: Railway API token
-    group: auth
-    description: Primary Railway token for user or workspace scoped access, including project creation and most Treeseed-managed Railway flows.
-    howToGet: In Railway, create a user or workspace API token that can create and manage the target project, then paste it here.
-    sensitivity: secret
-    targets:
-      - local-runtime
-      - github-secret
-      - railway-secret
-    scopes:
-      - staging
-      - prod
-    requirement: conditional
-    purposes:
-      - deploy
-      - destroy
-      - config
-    validation:
-      kind: nonempty
-      minLength: 8
-    sourcePriority:
-      - machine-config
-      - process-env
-    relevanceRef: railwayManagedEnabled
-    requiredWhenRef: railwayManagedEnabled
-  TREESEED_RAILWAY_WORKSPACE:
-    label: Railway workspace
-    group: railway
-    description: Railway workspace Treeseed should use when listing or creating projects during bootstrap and config reconciliation.
-    howToGet: In Railway, use the workspace slug or name shown in the workspace switcher. Treeseed defaults this repository to knowledge-coop unless you override it here.
-    sensitivity: plain
-    targets:
-      - railway-var
-    scopes:
-      - staging
-      - prod
-    storage: shared
-    requirement: conditional
-    purposes:
-      - deploy
-      - destroy
-      - config
-    validation:
-      kind: nonempty
-    sourcePriority:
-      - machine-config
-      - process-env
-    defaultValueRef: railwayWorkspaceDefault
-    relevanceRef: railwayManagedEnabled
-    requiredWhenRef: railwayManagedEnabled
-  CLOUDFLARE_ACCOUNT_ID:
-    label: Cloudflare account ID
-    group: cloudflare
-    description: Identifies the Cloudflare account Treeseed should provision, deploy into, and use for Workers AI commit message generation.
-    howToGet: In the Cloudflare dashboard, open Workers & Pages or Account Home and copy the account ID.
+    description: Comma-separated domains for the web-facing project surfaces. Treeseed uses this as a shared hint when it needs to complete environment-specific URL defaults.
+    howToGet: List one or more custom domains, separated by commas. Leave the default if the primary site URL already reflects the right domain.
     sensitivity: plain
     targets:
-      - local-runtime
       - github-variable
-      - config-file
+      - railway-var
+      - cloudflare-var
     scopes:
-      - local
       - staging
       - prod
     storage: shared
-    requirement: required
+    requirement: optional
     purposes:
-      - save
       - deploy
-      - destroy
       - config
     validation:
       kind: nonempty
     sourcePriority:
       - machine-config
       - process-env
-      - treeseed.site.yaml
+    defaultValueRef: projectDomainsDefault
+    relevanceRef: webSurfaceEnabled
   TREESEED_FORM_TOKEN_SECRET:
     label: Forms token secret
     group: forms
+    cluster: forms-core
+    startupProfile: core
     description: Signs form-related tokens and protects Treeseed forms workflows in local and hosted runtimes.
     howToGet: Treeseed can generate a strong random secret for you. Reuse it across environments only if that matches your security model.
     sensitivity: secret
@@ -219,9 +55,11 @@ entries:
       - process-env
     defaultValueRef: generatedSecret
     localDefaultValueRef: generatedSecret
+    relevanceRef: formsEnabled
   TREESEED_PUBLIC_TURNSTILE_SITE_KEY:
     label: Turnstile site key
     group: forms
+    cluster: turnstile
     description: Public site key used by the browser to render the Turnstile challenge when forms protection is enabled.
     howToGet: Create a Turnstile widget in Cloudflare Turnstile and copy the site key.
     sensitivity: plain
@@ -247,6 +85,7 @@ entries:
   TREESEED_TURNSTILE_SECRET_KEY:
     label: Turnstile secret key
     group: forms
+    cluster: turnstile
     description: Server-side Turnstile secret used to verify challenge responses.
     howToGet: Create a Turnstile widget in Cloudflare Turnstile and copy the secret key.
     sensitivity: secret
@@ -272,6 +111,7 @@ entries:
   TREESEED_SMTP_HOST:
     label: SMTP host
     group: smtp
+    cluster: smtp
     description: SMTP host for Treeseed email delivery when SMTP-backed forms behavior is enabled.
     howToGet: Use the SMTP hostname from your email provider or local Mailpit instance.
     sensitivity: plain
@@ -302,6 +142,7 @@ entries:
   TREESEED_SMTP_PORT:
     label: SMTP port
     group: smtp
+    cluster: smtp
     description: Port used to connect to the SMTP server.
     howToGet: Use the port provided by your email service, commonly 587, 465, or the Mailpit local port.
     sensitivity: plain
@@ -332,6 +173,7 @@ entries:
   TREESEED_SMTP_USERNAME:
     label: SMTP username
     group: smtp
+    cluster: smtp
     description: SMTP identity used when authenticating to the mail provider.
     howToGet: Use the SMTP username or mailbox identity from your email provider.
     sensitivity: plain
@@ -361,6 +203,7 @@ entries:
   TREESEED_SMTP_PASSWORD:
     label: SMTP password
     group: smtp
+    cluster: smtp
     description: SMTP password or app password used for authenticated email sending.
     howToGet: Use the SMTP password or app-specific password from your email provider.
     sensitivity: secret
@@ -390,6 +233,7 @@ entries:
   TREESEED_SMTP_FROM:
     label: SMTP from address
     group: smtp
+    cluster: smtp
     description: Email address Treeseed uses as the sender for mail notifications.
     howToGet: Use a verified sender address from your SMTP provider.
     sensitivity: plain
@@ -414,11 +258,13 @@ entries:
     sourcePriority:
       - machine-config
       - process-env
+    localDefaultValueRef: contactEmailDefault
     relevanceRef: smtpEnabled
     requiredWhenRef: smtpNonLocal
   TREESEED_SMTP_REPLY_TO:
     label: SMTP reply-to address
     group: smtp
+    cluster: smtp
     description: Reply-to address attached to Treeseed-generated emails.
     howToGet: Use a monitored mailbox that should receive replies from end users.
     sensitivity: plain
@@ -443,5 +289,7 @@ entries:
     sourcePriority:
       - machine-config
       - process-env
+    localDefaultValueRef: contactEmailDefault
     relevanceRef: smtpEnabled
     requiredWhenRef: smtpNonLocal
+

package/dist/index.d.ts

@@ -1,10 +1,6 @@
 export { buildTreeseedSiteLayers, resolveTreeseedPageEntrypoint, resolveTreeseedSiteResource, resolveTreeseedStyleEntrypoint, TREESEED_SITE_RESOURCE_KINDS, } from './site-resources';
 export { buildTreeseedPlatformLayers, resolveTreeseedPlatformResource, TREESEED_PLATFORM_RESOURCE_KINDS, } from './platform-resources';
 export { parseSiteConfig } from './utils/site-config-schema.js';
-export { createTreeseedApiApp } from './api/app';
-export { createRailwayTreeseedApiServer } from './api/railway';
-export { resolveApiConfig } from './api/config';
 export { executeKnowledgeHubProviderLaunch, validateKnowledgeHubProviderLaunchPrerequisites, } from './launch';
 export { createTreeseedIntegratedDevPlan, runTreeseedIntegratedDev, type TreeseedIntegratedDevCommand, type TreeseedIntegratedDevOptions, type TreeseedIntegratedDevPlan, type TreeseedIntegratedDevSurface, } from './dev';
 export { filterSiteRenderedModels, isSiteRenderedModel, siteModelRendered, } from './utils/site-models.ts';
-export type * from './api/types';

package/dist/index.js

@@ -11,9 +11,6 @@ import {
   TREESEED_PLATFORM_RESOURCE_KINDS
 } from "./platform-resources.js";
 import { parseSiteConfig } from "./utils/site-config-schema.js";
-import { createTreeseedApiApp } from "./api/app.js";
-import { createRailwayTreeseedApiServer } from "./api/railway.js";
-import { resolveApiConfig } from "./api/config.js";
 import {
   executeKnowledgeHubProviderLaunch,
   validateKnowledgeHubProviderLaunchPrerequisites
@@ -32,14 +29,11 @@ export {
   TREESEED_SITE_RESOURCE_KINDS,
   buildTreeseedPlatformLayers,
   buildTreeseedSiteLayers,
-  createRailwayTreeseedApiServer,
-  createTreeseedApiApp,
   createTreeseedIntegratedDevPlan,
   executeKnowledgeHubProviderLaunch,
   filterSiteRenderedModels,
   isSiteRenderedModel,
   parseSiteConfig,
-  resolveApiConfig,
   resolveTreeseedPageEntrypoint,
   resolveTreeseedPlatformResource,
   resolveTreeseedSiteResource,

package/dist/scripts/build-dist.js

@@ -232,9 +232,9 @@ function emitTypeDeclarations() {
         resolve(srcRoot, 'services/index.ts'),
         resolve(srcRoot, 'plugin-default.ts'),
         resolve(srcRoot, 'index.ts'),
-        ...walkFiles(resolve(srcRoot, 'api')).filter((filePath) => filePath.endsWith('.ts') && !filePath.endsWith('.d.js')),
-        ...walkFiles(resolve(srcRoot, 'agents')).filter((filePath) => filePath.endsWith('.ts') && !filePath.endsWith('.d.js')),
-        ...walkFiles(resolve(srcRoot, 'services')).filter((filePath) => filePath.endsWith('.ts') && !filePath.endsWith('.d.js')),
+        ...(existsSync(resolve(srcRoot, 'api')) ? walkFiles(resolve(srcRoot, 'api')).filter((filePath) => filePath.endsWith('.ts') && !filePath.endsWith('.d.js')) : []),
+        ...(existsSync(resolve(srcRoot, 'agents')) ? walkFiles(resolve(srcRoot, 'agents')).filter((filePath) => filePath.endsWith('.ts') && !filePath.endsWith('.d.js')) : []),
+        ...(existsSync(resolve(srcRoot, 'services')) ? walkFiles(resolve(srcRoot, 'services')).filter((filePath) => filePath.endsWith('.ts') && !filePath.endsWith('.d.js')) : []),
     ].filter((filePath) => existsSync(filePath));
     if (sourceFiles.length === 0) {
         return;