@treeseed/sdk 0.10.16 → 0.10.18

package/dist/reconcile/builtin-adapters.js

@@ -32,6 +32,7 @@ import {
   configuredRailwayServices,
   deriveRailwayMarketOperationsRunnerVolumeName,
   ensureRailwayProjectContext,
+  ensureRailwayServiceVolumeWithCliFallback,
   runRailway,
   validateRailwayDeployPrerequisites
 } from "../operations/services/railway-deploy.js";
@@ -42,7 +43,6 @@ import {
   ensureRailwayProject,
   ensureRailwayService,
   ensureRailwayServiceInstanceConfiguration,
-  ensureRailwayServiceVolume,
   getRailwayServiceInstance,
   getRailwayProject,
   listRailwayCustomDomains,
@@ -587,7 +587,7 @@ function collectCloudflareEnvironmentSync(input) {
   const registry = collectTreeseedEnvironmentContext(input.context.tenantRoot);
   const state = loadDeployState(input.context.tenantRoot, input.context.deployConfig, { target });
   const generatedSecrets = buildSecretMap(input.context.deployConfig, state);
-  const publicVars = buildPublicVars(input.context.deployConfig);
+  const publicVars = buildPublicVars(input.context.deployConfig, { target });
   const secrets = {};
   const vars = { ...publicVars };
   const secretNames = /* @__PURE__ */ new Set();
@@ -1568,36 +1568,54 @@ async function syncRailwayEnvironmentForScope(input, { dryRun = false } = {}) {
       });
       if (entry.configuredService.volumeMountPath) {
         const volumeName = entry.configuredService.key === "marketOperationsRunner" ? deriveRailwayMarketOperationsRunnerVolumeName(entry.service.name, entry.environment.name) : `${entry.service.name}-volume`;
-        const volume = await ensureRailwayServiceVolume({
+        const volume = await ensureRailwayServiceVolumeWithCliFallback({
+          tenantRoot: input.context.tenantRoot,
           projectId: entry.project.id,
           environmentId: entry.environment.id,
+          environmentName: entry.environment.name,
           serviceId: entry.service.id,
+          serviceName: entry.service.name,
           name: volumeName,
           mountPath: entry.configuredService.volumeMountPath,
+          preferCli: entry.configuredService.key === "marketOperationsRunner",
           env: topology.env
         });
         if (!volume.instance?.serviceId) {
           ensureRailwayProjectContext(entry.configuredService, { env: topology.env, capture: true });
-          const attachResult = runRailway([
-            "volume",
-            "--service",
-            entry.service.id,
-            "attach",
-            "--volume",
-            volume.volume.id,
-            "--yes",
-            "--json"
-          ], {
-            cwd: entry.configuredService.rootDir,
-            capture: true,
-            allowFailure: true,
-            env: topology.env
-          });
-          if ((attachResult.status ?? 1) !== 0) {
-            const attachMessage = attachResult.stderr?.trim() || attachResult.stdout?.trim() || "";
-            if (!/already mounted/iu.test(attachMessage)) {
-              throw new Error(attachMessage || `Railway volume attach failed for ${entry.service.name}.`);
+          let attachMessage = "";
+          let attached = false;
+          for (let attempt = 0; attempt < 5; attempt += 1) {
+            const attachResult = runRailway([
+              "volume",
+              "--service",
+              entry.service.id,
+              "attach",
+              "--volume",
+              volume.volume.id,
+              "--yes",
+              "--json"
+            ], {
+              cwd: entry.configuredService.rootDir,
+              capture: true,
+              allowFailure: true,
+              env: topology.env
+            });
+            if ((attachResult.status ?? 1) === 0) {
+              attached = true;
+              break;
+            }
+            attachMessage = attachResult.stderr?.trim() || attachResult.stdout?.trim() || "";
+            if (/already mounted/iu.test(attachMessage)) {
+              attached = true;
+              break;
+            }
+            if (!/volume .*not found|not found|does not exist/iu.test(attachMessage)) {
+              break;
             }
+            sleepMs(2e3 * (attempt + 1));
+          }
+          if (!attached) {
+            throw new Error(attachMessage || `Railway volume attach failed for ${entry.service.name}.`);
           }
         }
       }
@@ -1646,7 +1664,7 @@ async function ensureRailwayMarketDatabaseForScope(input, topology) {
       env: topology.env
     });
   }
-  for (let attempt = 0; attempt < 8; attempt += 1) {
+  for (let attempt = 0; attempt < 20; attempt += 1) {
     const existingVolumes = await listRailwayVolumes({
       projectId: firstService.project.id,
       env: topology.env
@@ -1655,18 +1673,10 @@ async function ensureRailwayMarketDatabaseForScope(input, topology) {
       (instance) => instance.serviceId === postgresService.id && instance.environmentId === firstService.environment?.id && instance.mountPath === "/var/lib/postgresql/data"
     ));
     if (attached) {
-      break;
+      return;
     }
-    await new Promise((resolve2) => setTimeout(resolve2, 1500));
+    await new Promise((resolve2) => setTimeout(resolve2, 3e3));
   }
-  await ensureRailwayServiceVolume({
-    projectId: firstService.project.id,
-    environmentId: firstService.environment.id,
-    serviceId: postgresService.id,
-    name: `postgres-${topology.scope === "prod" ? "prod" : topology.scope}-data`,
-    mountPath: "/var/lib/postgresql/data",
-    env: topology.env
-  });
 }
 async function observeRailwayUnit(input, { refresh = false } = {}) {
   let attempt = 0;

package/dist/scripts/tenant-destroy.js

@@ -2,7 +2,7 @@
 import readline from 'node:readline/promises';
 import { stdin as input, stdout as output } from 'node:process';
 import { applyTreeseedEnvironmentToProcess, assertTreeseedCommandEnvironment } from '../operations/services/config-runtime.js';
-import { cleanupDestroyedState, createPersistentDeployTarget, destroyCloudflareResources, loadDeployState, printDestroySummary, validateDestroyPrerequisites, } from '../operations/services/deploy.js';
+import { cleanupDestroyedState, createPersistentDeployTarget, destroyTreeseedEnvironmentResources, loadDeployState, printDestroySummary, validateDestroyPrerequisites, } from '../operations/services/deploy.js';
 import { deriveCloudflareWorkerName } from '../platform/deploy-config.js';
 const tenantRoot = process.cwd();
 function parseArgs(argv) {
@@ -11,6 +11,7 @@ function parseArgs(argv) {
         force: false,
         skipConfirmation: false,
         confirm: null,
+        deleteData: false,
         removeBuildArtifacts: false,
         environment: null,
     };
@@ -27,6 +28,10 @@ function parseArgs(argv) {
             parsed.force = true;
             continue;
         }
+        if (current === '--delete-data') {
+            parsed.deleteData = true;
+            continue;
+        }
         if (current === '--skip-confirmation') {
             parsed.skipConfirmation = true;
             continue;
@@ -92,9 +97,10 @@ if (!options.skipConfirmation) {
         process.exit(1);
     }
 }
-const result = destroyCloudflareResources(tenantRoot, {
+const result = await destroyTreeseedEnvironmentResources(tenantRoot, {
     dryRun: options.dryRun,
     force: options.force,
+    deleteData: options.deleteData,
     target,
 });
 printDestroySummary(result);

package/dist/workflow/operations.d.ts

@@ -1227,10 +1227,102 @@ export declare function workflowRecover(helpers: WorkflowOperationHelpers, input
     finalState?: WorkflowStatePayload;
 }>>;
 export declare function workflowDestroy(helpers: WorkflowOperationHelpers, input: TreeseedDestroyInput): Promise<TreeseedWorkflowResult<{
+    remoteResult: {
+        target: {
+            kind: string;
+            scope: string;
+        } | {
+            kind: string;
+            branchName: string;
+        };
+        deleteData: boolean;
+        summary: {
+            target: any;
+            identity: any;
+            workerName: any;
+            siteUrl: any;
+            accountId: any;
+            pages: any;
+            formGuardKv: any;
+            sessionKv: any;
+            siteDataDb: any;
+            queue: any;
+            content: any;
+            resources: {
+                pagesProject: any;
+                contentBucket: any;
+                queue: any;
+                dlq: any;
+                database: any;
+                formGuardKv: any;
+                railwayProject: any;
+                webDomain: any;
+                apiDomain: any;
+                railwayServices: {
+                    [k: string]: any;
+                };
+            };
+            webCache: {
+                webHost: any;
+                contentHost: any;
+                rulesManaged: boolean;
+                lastSyncedAt: any;
+                lastError: any;
+                policy: {
+                    sourcePages: {
+                        paths: string[];
+                        browserTtlSeconds: number;
+                        edgeTtlSeconds: number;
+                        staleWhileRevalidateSeconds: number;
+                        staleIfErrorSeconds: number;
+                    };
+                    contentPages: Required<import("../platform/contracts.ts").TreeseedWebCachePolicyConfig>;
+                    r2PublishedObjects: Required<import("../platform/contracts.ts").TreeseedWebCachePolicyConfig>;
+                };
+                deployPurge: any;
+                contentPurge: any;
+            };
+        };
+        operations: {
+            cloudflare: any[];
+            railway: {
+                provider: any;
+                type: any;
+                name: any;
+                status: any;
+            }[];
+            local: {
+                provider: any;
+                type: any;
+                name: any;
+                status: any;
+            }[];
+        };
+    } | null;
+    scope: string;
+    dryRun: boolean;
+    force: boolean;
+    deleteData: boolean;
+    destroyRemote: boolean;
+    destroyLocal: boolean;
+    removeBuildArtifacts: boolean;
+    expectedConfirmation: string;
+    stateSummary: {
+        workerName: any;
+        lastDeploymentTimestamp: any;
+    };
+    plannedSteps: {
+        id: string;
+        description: string;
+    }[];
+} & {
+    finalState?: WorkflowStatePayload;
+}> | TreeseedWorkflowResult<{
     dryRun: boolean;
     remoteResult: Record<string, unknown> | null;
     scope: string;
     force: boolean;
+    deleteData: boolean;
     destroyRemote: boolean;
     destroyLocal: boolean;
     removeBuildArtifacts: boolean;

package/dist/workflow/operations.js

@@ -33,6 +33,7 @@ import {
   createBranchPreviewDeployTarget,
   createPersistentDeployTarget,
   destroyCloudflareResources,
+  destroyTreeseedEnvironmentResources,
   ensureGeneratedWranglerConfig,
   finalizeDeploymentState,
   loadDeployState,
@@ -4679,6 +4680,7 @@ async function workflowDestroy(helpers, input) {
       const target = createPersistentDeployTarget(scope);
       const dryRun = executionMode === "plan";
       const force = input.force === true;
+      const deleteData = input.deleteData === true;
       const destroyRemote = input.destroyRemote !== false;
       const destroyLocal = input.destroyLocal !== false;
       const removeBuildArtifacts = input.removeBuildArtifacts === true;
@@ -4691,6 +4693,7 @@ async function workflowDestroy(helpers, input) {
         scope,
         dryRun,
         force,
+        deleteData,
         destroyRemote,
         destroyLocal,
         removeBuildArtifacts,
@@ -4706,14 +4709,18 @@ async function workflowDestroy(helpers, input) {
         remoteResult: null
       };
       if (executionMode === "plan") {
+        const plannedRemoteResult = destroyRemote ? await destroyTreeseedEnvironmentResources(tenantRoot, { dryRun: true, force, deleteData, target }) : null;
         return buildWorkflowResult(
           "destroy",
           tenantRoot,
-          payload,
+          {
+            ...payload,
+            remoteResult: plannedRemoteResult
+          },
           {
             executionMode,
             nextSteps: createNextSteps([
-              { operation: "destroy", reason: "Run without --plan to destroy the selected environment.", input: { environment: scope, force, removeBuildArtifacts } },
+              { operation: "destroy", reason: "Run without --plan to destroy the selected environment.", input: { environment: scope, force, deleteData, removeBuildArtifacts } },
               { operation: "status", reason: "Confirm the current environment state before making destructive changes." }
             ])
           }
@@ -4725,6 +4732,7 @@ async function workflowDestroy(helpers, input) {
         {
           environment: scope,
           force,
+          deleteData,
           destroyRemote,
           destroyLocal,
           removeBuildArtifacts
@@ -4754,7 +4762,7 @@ async function workflowDestroy(helpers, input) {
         if (!confirmed) {
           workflowError("destroy", "confirmation_required", `Destroy confirmation required. Re-run with confirm="${expectedConfirmation}".`);
         }
-        const remoteResult = destroyRemote ? await executeJournalStep(root, workflowRun.runId, "destroy-remote", () => destroyCloudflareResources(tenantRoot, { dryRun: false, force, target })) : null;
+        const remoteResult = destroyRemote ? await executeJournalStep(root, workflowRun.runId, "destroy-remote", () => destroyTreeseedEnvironmentResources(tenantRoot, { dryRun: false, force, deleteData, target })) : null;
         if (!destroyRemote) {
           skipJournalStep(root, workflowRun.runId, "destroy-remote", { skippedReason: "destroyRemote=false" });
         }

package/dist/workflow.d.ts

@@ -247,6 +247,7 @@ export type TreeseedDestroyInput = {
     destroyRemote?: boolean;
     destroyLocal?: boolean;
     force?: boolean;
+    deleteData?: boolean;
     removeBuildArtifacts?: boolean;
 };
 export type TreeseedWorkflowDevInput = {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@treeseed/sdk",
-  "version": "0.10.16",
+  "version": "0.10.18",
   "description": "Shared Treeseed SDK for content-backed and D1-backed object models.",
   "license": "AGPL-3.0-only",
   "repository": {

package/templates/github/deploy-web.workflow.yml

@@ -69,6 +69,13 @@ __WORKING_DIRECTORY_BLOCK__  web:
       TREESEED_WEB_SERVICE_SECRET: ${{ secrets.TREESEED_WEB_SERVICE_SECRET }}
       TREESEED_WEB_ASSERTION_SECRET: ${{ secrets.TREESEED_WEB_ASSERTION_SECRET }}
       TREESEED_WEB_CSRF_SECRET: ${{ secrets.TREESEED_WEB_CSRF_SECRET }}
+      TREESEED_API_WEB_SERVICE_ID: ${{ vars.TREESEED_API_WEB_SERVICE_ID || vars.TREESEED_WEB_SERVICE_ID || 'web' }}
+      TREESEED_API_WEB_SERVICE_SECRET: ${{ secrets.TREESEED_API_WEB_SERVICE_SECRET || secrets.TREESEED_WEB_SERVICE_SECRET }}
+      TREESEED_API_WEB_ASSERTION_SECRET: ${{ secrets.TREESEED_API_WEB_ASSERTION_SECRET || secrets.TREESEED_WEB_ASSERTION_SECRET }}
+      TREESEED_API_AUTH_SECRET: ${{ secrets.TREESEED_API_AUTH_SECRET || secrets.TREESEED_BETTER_AUTH_SECRET }}
+      TREESEED_PLATFORM_RUNNER_SECRET: ${{ secrets.TREESEED_PLATFORM_RUNNER_SECRET }}
+      TREESEED_HOSTED_HUBS_GITHUB_OWNER: ${{ vars.TREESEED_HOSTED_HUBS_GITHUB_OWNER }}
+      TREESEED_HOSTED_HUBS_GITHUB_TOKEN: ${{ secrets.TREESEED_HOSTED_HUBS_GITHUB_TOKEN }}
       TREESEED_SITE_URL: ${{ vars.TREESEED_SITE_URL }}
       BETTER_AUTH_URL: ${{ vars.BETTER_AUTH_URL || vars.TREESEED_SITE_URL }}
       TREESEED_CENTRAL_MARKET_API_BASE_URL: ${{ vars.TREESEED_CENTRAL_MARKET_API_BASE_URL || 'https://api.treeseed.ai' }}
@@ -80,7 +87,7 @@ __WORKING_DIRECTORY_BLOCK__  web:
       TREESEED_PROJECT_ID: ${{ inputs.project_id || vars.TREESEED_PROJECT_ID }}
       TREESEED_WORKFLOW_ACTION: ${{ inputs.action_kind }}
       TREESEED_WORKFLOW_ENVIRONMENT: ${{ inputs.environment }}
-      TREESEED_WORKFLOW_PLANE: web
+      TREESEED_WORKFLOW_PLANE: all
       TREESEED_WORKFLOW_PROJECT: ${{ inputs.project_id || vars.TREESEED_PROJECT_ID }}
       TREESEED_WORKFLOW_PREVIEW_ID: ${{ inputs.preview_id }}
     steps: