@treeseed/sdk 0.10.28 → 0.12.4

package/drizzle/market/0012_workday_test_runs.sql

@@ -0,0 +1,44 @@
+CREATE TABLE IF NOT EXISTS "workday_test_runs" (
+	"id" text PRIMARY KEY NOT NULL,
+	"team_id" text NOT NULL,
+	"capacity_provider_id" text,
+	"scenario_id" text DEFAULT 'portfolio-local' NOT NULL,
+	"status" text DEFAULT 'queued' NOT NULL,
+	"environment" text DEFAULT 'local' NOT NULL,
+	"requested_by_id" text,
+	"parameters_json" text DEFAULT '{}' NOT NULL,
+	"summary_json" text DEFAULT '{}' NOT NULL,
+	"metrics_json" text DEFAULT '{}' NOT NULL,
+	"expected_json" text DEFAULT '{}' NOT NULL,
+	"actual_json" text DEFAULT '{}' NOT NULL,
+	"report_refs_json" text DEFAULT '{}' NOT NULL,
+	"error_json" text DEFAULT '{}' NOT NULL,
+	"started_at" text,
+	"completed_at" text,
+	"created_at" text NOT NULL,
+	"updated_at" text NOT NULL
+);
+CREATE INDEX IF NOT EXISTS "idx_workday_test_runs_team_status" ON "workday_test_runs" ("team_id","status","updated_at");
+CREATE INDEX IF NOT EXISTS "idx_workday_test_runs_provider" ON "workday_test_runs" ("capacity_provider_id","updated_at");
+
+CREATE TABLE IF NOT EXISTS "workday_test_events" (
+	"id" text PRIMARY KEY NOT NULL,
+	"run_id" text NOT NULL,
+	"team_id" text NOT NULL,
+	"project_id" text,
+	"workday_id" text,
+	"assignment_id" text,
+	"mode_run_id" text,
+	"event_index" integer NOT NULL,
+	"event_type" text NOT NULL,
+	"status" text DEFAULT 'recorded' NOT NULL,
+	"title" text,
+	"message" text,
+	"parameters_json" text DEFAULT '{}' NOT NULL,
+	"context_json" text DEFAULT '{}' NOT NULL,
+	"refs_json" text DEFAULT '{}' NOT NULL,
+	"metadata_json" text DEFAULT '{}' NOT NULL,
+	"created_at" text NOT NULL
+);
+CREATE INDEX IF NOT EXISTS "idx_workday_test_events_run_index" ON "workday_test_events" ("run_id","event_index");
+CREATE INDEX IF NOT EXISTS "idx_workday_test_events_project" ON "workday_test_events" ("project_id","created_at");

package/drizzle/market/0013_runtime_task_lifecycle.sql

@@ -0,0 +1,39 @@
+CREATE TABLE IF NOT EXISTS "runtime_tasks" (
+	"id" text PRIMARY KEY NOT NULL,
+	"project_id" text NOT NULL,
+	"work_day_id" text NOT NULL,
+	"agent_id" text NOT NULL,
+	"type" text NOT NULL,
+	"idempotency_key" text NOT NULL UNIQUE,
+	"payload_json" text NOT NULL,
+	"state" text NOT NULL,
+	"claimed_by" text,
+	"claimed_at" text,
+	"lease_expires_at" text,
+	"attempts" integer DEFAULT 0 NOT NULL,
+	"created_at" text NOT NULL,
+	"updated_at" text NOT NULL
+);
+CREATE INDEX IF NOT EXISTS "idx_runtime_tasks_project_workday_state" ON "runtime_tasks" ("project_id","work_day_id","state","created_at");
+
+CREATE TABLE IF NOT EXISTS "runtime_task_events" (
+	"id" text PRIMARY KEY NOT NULL,
+	"task_id" text NOT NULL,
+	"kind" text NOT NULL,
+	"data_json" text NOT NULL,
+	"actor" text,
+	"created_at" text NOT NULL
+);
+CREATE INDEX IF NOT EXISTS "idx_runtime_task_events_task_created" ON "runtime_task_events" ("task_id","created_at");
+
+CREATE TABLE IF NOT EXISTS "runtime_task_outputs" (
+	"id" text PRIMARY KEY NOT NULL,
+	"task_id" text NOT NULL,
+	"output_json" text NOT NULL,
+	"output_ref" text,
+	"summary_json" text,
+	"actor" text,
+	"created_at" text NOT NULL,
+	"updated_at" text NOT NULL
+);
+CREATE INDEX IF NOT EXISTS "idx_runtime_task_outputs_task_created" ON "runtime_task_outputs" ("task_id","created_at");

package/drizzle/market/0014_governance_pipeline.sql

@@ -0,0 +1,189 @@
+CREATE TABLE IF NOT EXISTS "team_governance_policies" (
+	"id" text PRIMARY KEY NOT NULL,
+	"team_id" text NOT NULL,
+	"scope" text DEFAULT 'team' NOT NULL,
+	"provider_id" text NOT NULL,
+	"provider_version" text DEFAULT '1' NOT NULL,
+	"config_json" text DEFAULT '{}' NOT NULL,
+	"active" integer DEFAULT 1 NOT NULL,
+	"created_by" text,
+	"created_at" text NOT NULL,
+	"updated_at" text NOT NULL,
+	"superseded_at" text
+);
+CREATE INDEX IF NOT EXISTS "idx_team_governance_policies_team_scope" ON "team_governance_policies" ("team_id","scope","active");
+
+CREATE TABLE IF NOT EXISTS "project_governance_policies" (
+	"id" text PRIMARY KEY NOT NULL,
+	"team_id" text NOT NULL,
+	"project_id" text NOT NULL,
+	"provider_id" text NOT NULL,
+	"provider_version" text DEFAULT '1' NOT NULL,
+	"config_json" text DEFAULT '{}' NOT NULL,
+	"active" integer DEFAULT 1 NOT NULL,
+	"created_by" text,
+	"created_at" text NOT NULL,
+	"updated_at" text NOT NULL,
+	"superseded_at" text
+);
+CREATE INDEX IF NOT EXISTS "idx_project_governance_policies_project" ON "project_governance_policies" ("project_id","active");
+
+CREATE TABLE IF NOT EXISTS "governance_proposals" (
+	"id" text PRIMARY KEY NOT NULL,
+	"team_id" text NOT NULL,
+	"project_id" text,
+	"scope" text DEFAULT 'project' NOT NULL,
+	"status" text DEFAULT 'draft' NOT NULL,
+	"title" text NOT NULL,
+	"summary" text NOT NULL,
+	"body" text NOT NULL,
+	"proposal_type" text DEFAULT 'implementation' NOT NULL,
+	"content_proposal_slug" text,
+	"content_decision_slug" text,
+	"active_version" integer DEFAULT 1 NOT NULL,
+	"active_content_hash" text NOT NULL,
+	"governance_provider_id" text NOT NULL,
+	"governance_provider_version" text DEFAULT '1' NOT NULL,
+	"governance_policy_id" text,
+	"decision_id" text,
+	"voting_starts_at" text,
+	"voting_ends_at" text,
+	"closed_at" text,
+	"closed_reason" text,
+	"created_by_type" text DEFAULT 'user' NOT NULL,
+	"created_by_id" text,
+	"metadata_json" text DEFAULT '{}' NOT NULL,
+	"created_at" text NOT NULL,
+	"updated_at" text NOT NULL
+);
+CREATE INDEX IF NOT EXISTS "idx_governance_proposals_team_status" ON "governance_proposals" ("team_id","status","updated_at");
+CREATE INDEX IF NOT EXISTS "idx_governance_proposals_project_status" ON "governance_proposals" ("project_id","status","updated_at");
+CREATE INDEX IF NOT EXISTS "idx_governance_proposals_scope_status" ON "governance_proposals" ("scope","status","updated_at");
+CREATE INDEX IF NOT EXISTS "idx_governance_proposals_content_slug" ON "governance_proposals" ("content_proposal_slug");
+
+CREATE TABLE IF NOT EXISTS "governance_proposal_versions" (
+	"id" text PRIMARY KEY NOT NULL,
+	"proposal_id" text NOT NULL,
+	"version" integer NOT NULL,
+	"title" text NOT NULL,
+	"summary" text NOT NULL,
+	"body" text NOT NULL,
+	"content_hash" text NOT NULL,
+	"change_reason" text,
+	"created_by_type" text DEFAULT 'user' NOT NULL,
+	"created_by_id" text,
+	"created_at" text NOT NULL
+);
+CREATE UNIQUE INDEX IF NOT EXISTS "idx_governance_proposal_versions_unique" ON "governance_proposal_versions" ("proposal_id","version");
+CREATE INDEX IF NOT EXISTS "idx_governance_proposal_versions_proposal" ON "governance_proposal_versions" ("proposal_id","created_at");
+
+CREATE TABLE IF NOT EXISTS "governance_electorate_snapshots" (
+	"id" text PRIMARY KEY NOT NULL,
+	"proposal_id" text NOT NULL,
+	"proposal_version" integer NOT NULL,
+	"provider_id" text NOT NULL,
+	"provider_version" text DEFAULT '1' NOT NULL,
+	"rule_snapshot_json" text DEFAULT '{}' NOT NULL,
+	"chambers_json" text DEFAULT '[]' NOT NULL,
+	"eligible_voters_json" text DEFAULT '[]' NOT NULL,
+	"delegations_json" text DEFAULT '[]' NOT NULL,
+	"eligible_weight_total" real DEFAULT 0 NOT NULL,
+	"active_weight_total" real DEFAULT 0 NOT NULL,
+	"created_at" text NOT NULL
+);
+CREATE INDEX IF NOT EXISTS "idx_governance_electorate_snapshots_proposal" ON "governance_electorate_snapshots" ("proposal_id","proposal_version");
+
+CREATE TABLE IF NOT EXISTS "governance_proposal_votes" (
+	"id" text PRIMARY KEY NOT NULL,
+	"proposal_id" text NOT NULL,
+	"proposal_version" integer NOT NULL,
+	"user_id" text NOT NULL,
+	"vote" text NOT NULL,
+	"reason" text,
+	"chamber_votes_json" text DEFAULT '{}' NOT NULL,
+	"effective_weights_json" text DEFAULT '{}' NOT NULL,
+	"delegated_from_json" text DEFAULT '[]' NOT NULL,
+	"created_at" text NOT NULL,
+	"updated_at" text NOT NULL
+);
+CREATE UNIQUE INDEX IF NOT EXISTS "idx_governance_proposal_votes_once" ON "governance_proposal_votes" ("proposal_id","proposal_version","user_id");
+CREATE INDEX IF NOT EXISTS "idx_governance_proposal_votes_proposal" ON "governance_proposal_votes" ("proposal_id","proposal_version","vote");
+
+CREATE TABLE IF NOT EXISTS "governance_vote_events" (
+	"id" text PRIMARY KEY NOT NULL,
+	"proposal_id" text NOT NULL,
+	"proposal_version" integer NOT NULL,
+	"user_id" text NOT NULL,
+	"prior_vote" text,
+	"next_vote" text NOT NULL,
+	"reason" text,
+	"effective_weights_json" text DEFAULT '{}' NOT NULL,
+	"created_at" text NOT NULL
+);
+CREATE INDEX IF NOT EXISTS "idx_governance_vote_events_proposal" ON "governance_vote_events" ("proposal_id","proposal_version","created_at");
+
+CREATE TABLE IF NOT EXISTS "governance_delegations" (
+	"id" text PRIMARY KEY NOT NULL,
+	"team_id" text NOT NULL,
+	"scope" text DEFAULT 'team' NOT NULL,
+	"from_user_id" text NOT NULL,
+	"to_user_id" text NOT NULL,
+	"chambers_json" text DEFAULT '[]' NOT NULL,
+	"status" text DEFAULT 'active' NOT NULL,
+	"reason" text,
+	"created_at" text NOT NULL,
+	"revoked_at" text,
+	"expires_at" text,
+	"metadata_json" text DEFAULT '{}' NOT NULL
+);
+CREATE INDEX IF NOT EXISTS "idx_governance_delegations_team_status" ON "governance_delegations" ("team_id","status");
+CREATE INDEX IF NOT EXISTS "idx_governance_delegations_from" ON "governance_delegations" ("from_user_id","status");
+CREATE INDEX IF NOT EXISTS "idx_governance_delegations_to" ON "governance_delegations" ("to_user_id","status");
+
+CREATE TABLE IF NOT EXISTS "governance_decisions" (
+	"id" text PRIMARY KEY NOT NULL,
+	"team_id" text NOT NULL,
+	"project_id" text,
+	"proposal_id" text NOT NULL,
+	"proposal_version" integer NOT NULL,
+	"proposal_content_hash" text NOT NULL,
+	"status" text DEFAULT 'creating' NOT NULL,
+	"title" text NOT NULL,
+	"summary" text NOT NULL,
+	"content_decision_slug" text,
+	"governance_provider_id" text NOT NULL,
+	"governance_rule_json" text DEFAULT '{}' NOT NULL,
+	"electorate_snapshot_id" text,
+	"vote_result_json" text DEFAULT '{}' NOT NULL,
+	"voter_reasons_json" text DEFAULT '[]' NOT NULL,
+	"proposal_snapshot_json" text DEFAULT '{}' NOT NULL,
+	"decision_record_json" text DEFAULT '{}' NOT NULL,
+	"created_by_type" text DEFAULT 'system' NOT NULL,
+	"created_by_id" text,
+	"created_at" text NOT NULL,
+	"updated_at" text NOT NULL,
+	"superseded_at" text
+);
+CREATE UNIQUE INDEX IF NOT EXISTS "idx_governance_decisions_proposal" ON "governance_decisions" ("proposal_id");
+CREATE INDEX IF NOT EXISTS "idx_governance_decisions_project_status" ON "governance_decisions" ("project_id","status","updated_at");
+
+CREATE TABLE IF NOT EXISTS "governance_events" (
+	"id" text PRIMARY KEY NOT NULL,
+	"event_type" text NOT NULL,
+	"actor_type" text DEFAULT 'system' NOT NULL,
+	"actor_id" text,
+	"team_id" text NOT NULL,
+	"project_id" text,
+	"proposal_id" text,
+	"decision_id" text,
+	"proposal_version" integer,
+	"prior_state" text,
+	"next_state" text,
+	"message" text,
+	"evidence_json" text DEFAULT '{}' NOT NULL,
+	"created_at" text NOT NULL
+);
+CREATE INDEX IF NOT EXISTS "idx_governance_events_proposal" ON "governance_events" ("proposal_id","created_at");
+CREATE INDEX IF NOT EXISTS "idx_governance_events_decision" ON "governance_events" ("decision_id","created_at");
+CREATE INDEX IF NOT EXISTS "idx_governance_events_team" ON "governance_events" ("team_id","created_at");
+CREATE INDEX IF NOT EXISTS "idx_governance_events_project" ON "governance_events" ("project_id","created_at");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@treeseed/sdk",
-  "version": "0.10.28",
+  "version": "0.12.4",
   "description": "Shared Treeseed SDK for content-backed and D1-backed object models.",
   "license": "AGPL-3.0-only",
   "repository": {
@@ -21,47 +21,52 @@
     "README.md",
     "dist",
     "drizzle",
-    "scripts/verify-driver.mjs",
+    "scripts/verify-driver.ts",
     "templates"
   ],
   "publishConfig": {
     "access": "public"
   },
   "bin": {
-    "treeseed-sdk-verify": "./scripts/verify-driver.mjs"
+    "treeseed-sdk-verify": "./dist/verification.js"
   },
   "scripts": {
     "setup": "npm install",
     "setup:ci": "npm ci",
     "build": "npm run build:dist",
-    "build:dist": "node ./scripts/run-ts.mjs ./scripts/build-dist.ts",
-    "db:generate:d1": "node ../../node_modules/drizzle-kit/bin.cjs export --config drizzle.config.ts > drizzle/d1/0000_treeseed_d1.sql",
-    "db:generate:market": "node ../../node_modules/drizzle-kit/bin.cjs export --config drizzle.market.config.ts > drizzle/market/0000_market_control_plane.sql",
-    "prepare": "node ./scripts/prepare.mjs",
+    "build:dist": "node --import tsx ./scripts/build-dist.ts",
+    "db:generate:d1": "drizzle-kit export --config drizzle.config.ts > drizzle/d1/0000_treeseed_d1.sql",
+    "db:generate:market": "drizzle-kit export --config drizzle.market.config.ts > drizzle/market/0000_market_control_plane.sql",
+    "prepare": "node --import tsx ./scripts/prepare.ts",
     "prepack": "npm run build:dist",
     "test": "npm run test:unit",
     "test:unit": "vitest run --config ./vitest.config.ts",
     "test:unit:fast": "vitest run --config ./vitest.fast.config.ts",
     "test:workflow:lifecycle": "vitest run --config ./vitest.config.ts test/utils/workflow-lifecycle.test.ts",
     "test:release": "npm run test:unit:fast",
-    "test:smoke": "node ./scripts/run-ts.mjs ./scripts/test-smoke.ts",
-    "fixtures:resolve": "node ./scripts/run-ts.mjs ./scripts/fixture-tools.ts resolve",
-    "fixtures:check": "node ./scripts/run-ts.mjs ./scripts/fixture-tools.ts check",
+    "test:smoke": "node --import tsx ./scripts/test-smoke.ts",
+    "treedx:generate-types": "node --import tsx ./scripts/generate-treedx-openapi-types.ts",
+    "treedx:check-types": "node --import tsx ./scripts/generate-treedx-openapi-types.ts --check",
+    "treedx:contract": "vitest run --config ./vitest.config.ts test/utils/treedx-openapi-contract.test.ts test/utils/treedx-sdk-request-contract.test.ts test/utils/treedx-generated-types.test.ts",
+    "fixtures:resolve": "node --import tsx ./scripts/fixture-tools.ts resolve",
+    "fixtures:check": "node --import tsx ./scripts/fixture-tools.ts check",
     "lint": "npm run fixtures:check && npm run build:dist",
     "verify:direct": "npm run release:verify",
-    "verify:local": "node --input-type=module -e \"process.env.TREESEED_VERIFY_DRIVER='direct'; await import('./scripts/verify-driver.mjs')\"",
-    "verify:action": "node --input-type=module -e \"process.env.TREESEED_VERIFY_DRIVER='act'; await import('./scripts/verify-driver.mjs')\"",
-    "verify": "node ./scripts/verify-driver.mjs",
+    "verify:local": "TREESEED_VERIFY_DRIVER=direct TMPDIR=/tmp node --import tsx ./scripts/verify-driver.ts",
+    "verify:action": "TREESEED_VERIFY_DRIVER=act TMPDIR=/tmp node --import tsx ./scripts/verify-driver.ts",
+    "verify": "TMPDIR=/tmp node --import tsx ./scripts/verify-driver.ts",
     "release:setup": "npm run setup:ci",
-    "release:check-tag": "node ./scripts/run-ts.mjs ./scripts/assert-release-tag-version.ts",
-    "release:verify": "node ./scripts/run-ts.mjs ./scripts/release-verify.ts",
-    "release:publish": "node ./scripts/run-ts.mjs ./scripts/publish-package.ts"
+    "release:check-tag": "node --import tsx ./scripts/assert-release-tag-version.ts",
+    "release:verify": "node --import tsx ./scripts/release-verify.ts",
+    "release:publish": "node --import tsx ./scripts/publish-package.ts"
   },
   "dependencies": {
     "@github/copilot": "1.0.39",
     "@github/copilot-language-server": "1.480.0",
     "@github/copilot-sdk": "0.3.0",
-    "@railway/cli": "4.44.0",
+    "@railway/cli": "5.23.2",
+    "@remotion/bundler": "4.0.477",
+    "@remotion/renderer": "4.0.477",
     "drizzle-orm": "^0.45.2",
     "esbuild": "^0.28.0",
     "extract-zip": "2.0.1",
@@ -73,9 +78,12 @@
     "minisearch": "^7.2.0",
     "octokit": "^5.0.3",
     "pg": "^8.21.0",
+    "playwright": "^1.60.0",
+    "railway": "3.4.1",
     "react": "^19.2.5",
     "remark-mdx": "^3.1.1",
     "remark-parse": "^11.0.0",
+    "remotion": "4.0.477",
     "repomix": "^1.13.1",
     "tar": "7.5.13",
     "typescript": "^5.9.3",
@@ -86,6 +94,7 @@
   "devDependencies": {
     "@types/node": "^24.6.0",
     "drizzle-kit": "^0.31.10",
+    "tsx": "^4.21.0",
     "vitest": "^4.1.2"
   },
   "exports": {
@@ -105,6 +114,14 @@
       "types": "./dist/operations/agent-tools.d.ts",
       "default": "./dist/operations/agent-tools.js"
     },
+    "./agent-tools": {
+      "types": "./dist/agent-tools.d.ts",
+      "default": "./dist/agent-tools.js"
+    },
+    "./content-operations": {
+      "types": "./dist/content-operations.d.ts",
+      "default": "./dist/content-operations.js"
+    },
     "./api": {
       "types": "./dist/api/index.d.ts",
       "default": "./dist/api/index.js"
@@ -129,7 +146,18 @@
       "types": "./dist/seeds/index.d.ts",
       "default": "./dist/seeds/index.js"
     },
-    "./scripts/verify-driver": "./scripts/verify-driver.mjs",
+    "./scenes": {
+      "types": "./dist/scenes/index.d.ts",
+      "default": "./dist/scenes/index.js"
+    },
+    "./guarantees": {
+      "types": "./dist/guarantees/index.d.ts",
+      "default": "./dist/guarantees/index.js"
+    },
+    "./scripts/verify-driver": {
+      "types": "./dist/verification.d.ts",
+      "default": "./dist/verification.js"
+    },
     "./workflow-support": {
       "types": "./dist/workflow-support.d.ts",
       "default": "./dist/workflow-support.js"
@@ -138,10 +166,26 @@
       "types": "./dist/market-client.d.ts",
       "default": "./dist/market-client.js"
     },
+    "./agent-capacity": {
+      "types": "./dist/agent-capacity.d.ts",
+      "default": "./dist/agent-capacity.js"
+    },
+    "./secrets-capability": {
+      "types": "./dist/secrets-capability.d.ts",
+      "default": "./dist/secrets-capability.js"
+    },
+    "./project-import": {
+      "types": "./dist/project-import.d.ts",
+      "default": "./dist/project-import.js"
+    },
     "./reconcile": {
       "types": "./dist/reconcile/index.d.ts",
       "default": "./dist/reconcile/index.js"
     },
+    "./hosting": {
+      "types": "./dist/hosting/index.d.ts",
+      "default": "./dist/hosting/index.js"
+    },
     "./platform/contracts": {
       "types": "./dist/platform/contracts.d.ts",
       "default": "./dist/platform/contracts.js"
@@ -158,6 +202,10 @@
       "types": "./dist/platform/deploy-runtime.d.ts",
       "default": "./dist/platform/deploy-runtime.js"
     },
+    "./platform/desired-state": {
+      "types": "./dist/platform/desired-state.d.ts",
+      "default": "./dist/platform/desired-state.js"
+    },
     "./platform/environment": {
       "types": "./dist/platform/environment.d.ts",
       "default": "./dist/platform/environment.js"
@@ -194,6 +242,10 @@
       "types": "./dist/content-store.d.ts",
       "default": "./dist/content-store.js"
     },
+    "./treedx-backends": {
+      "types": "./dist/treedx-backends.d.ts",
+      "default": "./dist/treedx-backends.js"
+    },
     "./template-catalog": {
       "types": "./dist/template-catalog.d.ts",
       "default": "./dist/template-catalog.js"
@@ -234,6 +286,26 @@
       "types": "./dist/graph/context-query-contracts.d.ts",
       "default": "./dist/graph/context-query-contracts.js"
     },
+    "./treedx": {
+      "types": "./dist/treedx/index.d.ts",
+      "import": "./dist/treedx/index.js",
+      "default": "./dist/treedx/index.js"
+    },
+    "./treedx/client": {
+      "types": "./dist/treedx/client.d.ts",
+      "import": "./dist/treedx/client.js",
+      "default": "./dist/treedx/client.js"
+    },
+    "./treedx/types": {
+      "types": "./dist/treedx/types.d.ts",
+      "import": "./dist/treedx/types.js",
+      "default": "./dist/treedx/types.js"
+    },
+    "./treedx/adapters": {
+      "types": "./dist/treedx/adapters.d.ts",
+      "import": "./dist/treedx/adapters.js",
+      "default": "./dist/treedx/adapters.js"
+    },
     "./sdk-filters": {
       "types": "./dist/sdk-filters.d.ts",
       "default": "./dist/sdk-filters.js"
@@ -246,6 +318,10 @@
       "types": "./dist/managed-dependencies.d.ts",
       "default": "./dist/managed-dependencies.js"
     },
+    "./service-credentials": {
+      "types": "./dist/service-credentials.d.ts",
+      "default": "./dist/service-credentials.js"
+    },
     "./copilot": {
       "types": "./dist/copilot.d.ts",
       "default": "./dist/copilot.js"
@@ -270,6 +346,18 @@
       "types": "./dist/operations/repository-operations.d.ts",
       "default": "./dist/operations/repository-operations.js"
     },
+    "./operations/github-credentials": {
+      "types": "./dist/operations/services/github-credentials.d.ts",
+      "default": "./dist/operations/services/github-credentials.js"
+    },
+    "./operations/hub-provider-launch": {
+      "types": "./dist/operations/services/hub-provider-launch.d.ts",
+      "default": "./dist/operations/services/hub-provider-launch.js"
+    },
+    "./operations/project-host-operations": {
+      "types": "./dist/operations/services/project-host-operations.d.ts",
+      "default": "./dist/operations/services/project-host-operations.js"
+    },
     "./types": {
       "types": "./dist/sdk-types.d.ts",
       "default": "./dist/sdk-types.js"

package/scripts/{verify-driver.mjs → verify-driver.ts}

@@ -3,22 +3,37 @@
 import { existsSync } from 'node:fs';
 import { spawnSync } from 'node:child_process';
 import { dirname, resolve } from 'node:path';
+import { tmpdir } from 'node:os';
 import { fileURLToPath } from 'node:url';
 
 const scriptRoot = dirname(fileURLToPath(import.meta.url));
 const packageRoot = resolve(scriptRoot, '..');
-const sourceRunner = resolve(packageRoot, 'scripts', 'run-ts.mjs');
 const sourceEntry = resolve(packageRoot, 'src', 'verification.ts');
 const publishedEntry = resolve(packageRoot, 'dist', 'verification.js');
 const entrypointCheckOnly = process.env.TREESEED_VERIFY_ENTRYPOINT_CHECK === 'true';
 
-if (existsSync(sourceRunner) && existsSync(sourceEntry)) {
+function withShortTempEnv() {
+	if (process.platform === 'win32') {
+		return process.env;
+	}
+	const env = { ...process.env };
+	const shortTemp = tmpdir();
+	for (const key of ['TMPDIR', 'TMP', 'TEMP'] as const) {
+		const value = env[key];
+		if (value && value.length > shortTemp.length) {
+			env[key] = shortTemp;
+		}
+	}
+	return env;
+}
+
+if (existsSync(sourceEntry)) {
 	if (entrypointCheckOnly) {
 		process.exit(0);
 	}
-	const result = spawnSync(process.execPath, [sourceRunner, sourceEntry], {
+	const result = spawnSync('tsx', [sourceEntry], {
 		cwd: process.cwd(),
-		env: process.env,
+		env: withShortTempEnv(),
 		stdio: 'inherit',
 	});
 	process.exit(result.status ?? 1);

package/templates/github/deploy-web.workflow.yml

@@ -47,8 +47,8 @@ __WORKING_DIRECTORY_BLOCK__  web:
     environment: ${{ inputs.environment == 'prod' && 'production' || 'staging' }}
     env:
       TREESEED_BOOTSTRAP_MODE: auto
-      CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN }}
-      CLOUDFLARE_ACCOUNT_ID: ${{ vars.CLOUDFLARE_ACCOUNT_ID }}
+      TREESEED_CLOUDFLARE_API_TOKEN: ${{ secrets.TREESEED_CLOUDFLARE_API_TOKEN }}
+      TREESEED_CLOUDFLARE_ACCOUNT_ID: ${{ vars.TREESEED_CLOUDFLARE_ACCOUNT_ID }}
       TREESEED_CLOUDFLARE_PAGES_PROJECT_NAME: ${{ vars.TREESEED_CLOUDFLARE_PAGES_PROJECT_NAME }}
       TREESEED_CLOUDFLARE_PAGES_PREVIEW_PROJECT_NAME: ${{ vars.TREESEED_CLOUDFLARE_PAGES_PREVIEW_PROJECT_NAME }}
       TREESEED_CONTENT_BUCKET_NAME: ${{ vars.TREESEED_CONTENT_BUCKET_NAME }}
@@ -69,25 +69,28 @@ __WORKING_DIRECTORY_BLOCK__  web:
       TREESEED_WEB_SERVICE_SECRET: ${{ secrets.TREESEED_WEB_SERVICE_SECRET }}
       TREESEED_WEB_ASSERTION_SECRET: ${{ secrets.TREESEED_WEB_ASSERTION_SECRET }}
       TREESEED_WEB_CSRF_SECRET: ${{ secrets.TREESEED_WEB_CSRF_SECRET }}
+      TREESEED_CREDENTIAL_SESSION_SECRET: ${{ secrets.TREESEED_CREDENTIAL_SESSION_SECRET }}
       TREESEED_API_WEB_SERVICE_ID: ${{ vars.TREESEED_API_WEB_SERVICE_ID || vars.TREESEED_WEB_SERVICE_ID || 'web' }}
-      TREESEED_API_WEB_SERVICE_SECRET: ${{ secrets.TREESEED_API_WEB_SERVICE_SECRET || secrets.TREESEED_WEB_SERVICE_SECRET }}
+      TREESEED_API_WEB_SERVICE_SECRET: ${{ secrets.TREESEED_WEB_SERVICE_SECRET || secrets.TREESEED_API_WEB_SERVICE_SECRET }}
       TREESEED_API_WEB_ASSERTION_SECRET: ${{ secrets.TREESEED_API_WEB_ASSERTION_SECRET || secrets.TREESEED_WEB_ASSERTION_SECRET }}
       TREESEED_API_AUTH_SECRET: ${{ secrets.TREESEED_API_AUTH_SECRET || secrets.TREESEED_BETTER_AUTH_SECRET }}
-      TREESEED_PLATFORM_RUNNER_SECRET: ${{ secrets.TREESEED_PLATFORM_RUNNER_SECRET }}
       TREESEED_HOSTED_HUBS_GITHUB_OWNER: ${{ vars.TREESEED_HOSTED_HUBS_GITHUB_OWNER }}
       TREESEED_HOSTED_HUBS_GITHUB_TOKEN: ${{ secrets.TREESEED_HOSTED_HUBS_GITHUB_TOKEN }}
+      TREESEED_GITHUB_TOKEN: ${{ secrets.TREESEED_HOSTED_HUBS_GITHUB_TOKEN }}
+      GH_TOKEN: ${{ secrets.TREESEED_HOSTED_HUBS_GITHUB_TOKEN }}
+      GITHUB_TOKEN: ${{ secrets.TREESEED_HOSTED_HUBS_GITHUB_TOKEN }}
       TREESEED_SITE_URL: ${{ vars.TREESEED_SITE_URL }}
-      BETTER_AUTH_URL: ${{ vars.BETTER_AUTH_URL || vars.TREESEED_SITE_URL }}
-      TREESEED_CENTRAL_MARKET_API_BASE_URL: ${{ vars.TREESEED_CENTRAL_MARKET_API_BASE_URL || 'https://api.treeseed.ai' }}
-      TREESEED_MARKET_API_BASE_URL: ${{ vars.TREESEED_MARKET_API_BASE_URL || vars.TREESEED_CENTRAL_MARKET_API_BASE_URL || 'https://api.treeseed.ai' }}
-      TREESEED_CATALOG_MARKET_API_BASE_URLS: ${{ vars.TREESEED_CATALOG_MARKET_API_BASE_URLS || vars.TREESEED_MARKET_API_BASE_URL || vars.TREESEED_CENTRAL_MARKET_API_BASE_URL || 'https://api.treeseed.ai' }}
+      TREESEED_BETTER_AUTH_URL: ${{ vars.TREESEED_BETTER_AUTH_URL || vars.TREESEED_SITE_URL }}
+      TREESEED_CENTRAL_MARKET_API_BASE_URL: ${{ vars.TREESEED_CENTRAL_MARKET_API_BASE_URL || 'https://api.treeseed.dev' }}
+      TREESEED_API_BASE_URL: ${{ vars.TREESEED_API_BASE_URL || vars.TREESEED_CENTRAL_MARKET_API_BASE_URL || 'https://api.treeseed.dev' }}
+      TREESEED_CATALOG_MARKET_API_BASE_URLS: ${{ vars.TREESEED_CATALOG_MARKET_API_BASE_URLS || vars.TREESEED_API_BASE_URL || vars.TREESEED_CENTRAL_MARKET_API_BASE_URL || 'https://api.treeseed.dev' }}
       TREESEED_HOSTING_KIND: ${{ vars.TREESEED_HOSTING_KIND }}
       TREESEED_HOSTING_REGISTRATION: ${{ vars.TREESEED_HOSTING_REGISTRATION }}
       TREESEED_HOSTING_TEAM_ID: ${{ vars.TREESEED_HOSTING_TEAM_ID }}
       TREESEED_PROJECT_ID: ${{ inputs.project_id || vars.TREESEED_PROJECT_ID }}
       TREESEED_WORKFLOW_ACTION: ${{ inputs.action_kind }}
       TREESEED_WORKFLOW_ENVIRONMENT: ${{ inputs.environment }}
-      TREESEED_WORKFLOW_PLANE: all
+      TREESEED_WORKFLOW_PLANE: web
       TREESEED_WORKFLOW_PROJECT: ${{ inputs.project_id || vars.TREESEED_PROJECT_ID }}
       TREESEED_WORKFLOW_PREVIEW_ID: ${{ inputs.preview_id }}
     steps:
@@ -105,14 +108,48 @@ __WORKING_DIRECTORY_BLOCK__  web:
         shell: bash
         run: |
           set -euo pipefail
-          node -e "const fs = require('fs'); for (const file of ['packages/sdk/package.json', 'packages/agent/package.json', 'packages/core/package.json', 'packages/cli/package.json']) { if (!fs.existsSync(file)) continue; const p = JSON.parse(fs.readFileSync(file, 'utf8')); if (p.scripts) delete p.scripts.prepare; fs.writeFileSync(file, JSON.stringify(p, null, '\t') + '\n'); }"
+          node <<'NODE'
+          const fs = require('fs');
+          const path = require('path');
+          const packageRoot = 'packages';
+          if (fs.existsSync(packageRoot)) {
+            const localPackageNames = new Set();
+            for (const entry of fs.readdirSync(packageRoot, { withFileTypes: true })) {
+              if (!entry.isDirectory()) continue;
+              const file = path.join(packageRoot, entry.name, 'package.json');
+              if (!fs.existsSync(file)) continue;
+              const manifest = JSON.parse(fs.readFileSync(file, 'utf8'));
+              if (typeof manifest.name === 'string') localPackageNames.add(manifest.name);
+            }
+            for (const entry of fs.readdirSync(packageRoot, { withFileTypes: true })) {
+              if (!entry.isDirectory()) continue;
+              const file = path.join(packageRoot, entry.name, 'package.json');
+              if (!fs.existsSync(file)) continue;
+              const manifest = JSON.parse(fs.readFileSync(file, 'utf8'));
+              let changed = false;
+              if (manifest.scripts?.prepare) {
+                delete manifest.scripts.prepare;
+                changed = true;
+              }
+              for (const section of ['dependencies', 'devDependencies', 'optionalDependencies']) {
+                for (const dependencyName of Object.keys(manifest[section] ?? {})) {
+                  if (dependencyName !== manifest.name && localPackageNames.has(dependencyName)) {
+                    delete manifest[section][dependencyName];
+                    changed = true;
+                  }
+                }
+              }
+              if (changed) fs.writeFileSync(file, `${JSON.stringify(manifest, null, '\t')}\n`);
+            }
+          }
+          NODE
           npm ci --ignore-scripts
 
       - name: Build package artifacts
         shell: bash
         run: |
           set -euo pipefail
-          for dir in packages/sdk packages/agent packages/core packages/cli; do
+          for dir in packages/sdk packages/ui packages/agent packages/core packages/cli; do
             if test -f "${dir}/package.json"; then npm --prefix "${dir}" run build:dist; fi
           done
 
@@ -126,5 +163,5 @@ __WORKING_DIRECTORY_BLOCK__  web:
           EXTRA_ARGS=()
           if [[ -n "${TREESEED_WORKFLOW_PROJECT:-}" ]]; then EXTRA_ARGS+=(--project-id "${TREESEED_WORKFLOW_PROJECT}"); fi
           if [[ -n "${TREESEED_WORKFLOW_PREVIEW_ID:-}" ]]; then EXTRA_ARGS+=(--preview-id "${TREESEED_WORKFLOW_PREVIEW_ID}"); fi
-          node ./packages/sdk/scripts/run-ts.mjs ./packages/sdk/scripts/tenant-workflow-action.ts --action "${TREESEED_WORKFLOW_ACTION}" --environment "${TREESEED_WORKFLOW_ENVIRONMENT}" "${EXTRA_ARGS[@]}"
+          tsx ./packages/sdk/scripts/tenant-workflow-action.ts --action "${TREESEED_WORKFLOW_ACTION}" --environment "${TREESEED_WORKFLOW_ENVIRONMENT}" "${EXTRA_ARGS[@]}"
           if [[ -n "${GITHUB_STEP_SUMMARY:-}" && -s "${TIMING_SUMMARY}" ]]; then cat "${TIMING_SUMMARY}" >> "${GITHUB_STEP_SUMMARY}"; fi