@treeseed/sdk 0.12.4 → 0.12.5

package/dist/operations/services/package-adapters.js

@@ -156,6 +156,7 @@ function nodeTypeScriptAdapter(pkg) {
       type: stringValue(manifest?.type) ?? null,
       githubEnvironments: stringArray(manifest?.githubEnvironments),
       requiredSecrets: stringArray(manifest?.requiredSecrets),
+      requiredVariables: stringArray(manifest?.requiredVariables),
       workflowTemplateVersion: stringValue(manifest?.workflowTemplateVersion) ?? null,
       localDev: stringRecord(manifest?.localDev),
       capacityProvider: stringRecord(manifest?.capacityProvider),
@@ -269,6 +270,7 @@ function beamPackageAdapter(root, dir) {
       type: stringValue(manifest?.type) ?? null,
       githubEnvironments: stringArray(manifest?.githubEnvironments),
       requiredSecrets: stringArray(manifest?.requiredSecrets),
+      requiredVariables: stringArray(manifest?.requiredVariables),
       workflowTemplateVersion: stringValue(manifest?.workflowTemplateVersion) ?? null,
       ...projectArchitecture ? {
         projectArchitecture,

package/dist/platform/desired-state.d.ts

@@ -11,6 +11,9 @@ export type TreeseedPackageUnit = {
     manifestPath: string | null;
     repository: string | null;
     releaseCapability: 'npm' | 'image' | 'deploy-only' | 'none';
+    requiredSecrets: string[];
+    requiredVariables: string[];
+    githubEnvironments: string[];
 };
 export type TreeseedTemplateUnit = {
     id: string;
@@ -23,7 +26,7 @@ export type TreeseedTemplateUnit = {
     releaseTag: string | null;
     recordPath: string;
 };
-export type TreeseedDesiredResourceKind = 'package-manifest' | 'template-manifest' | 'package-workflow' | 'package-image' | 'github-environment' | 'github-secret-binding' | 'docker-image-build' | 'cloudflare-resource' | 'railway-project' | 'railway-environment' | 'railway-service' | 'railway-volume' | 'railway-domain' | 'local-process' | 'local-docker-compose' | 'local-treedx' | 'local-content-materialization' | 'capacity-provider' | 'branch-preview' | 'branch-preview-cleanup' | 'workflow-gate' | 'save-gate' | 'release-gate';
+export type TreeseedDesiredResourceKind = 'package-manifest' | 'template-manifest' | 'package-workflow' | 'package-image' | 'github-environment' | 'github-secret-binding' | 'github-variable-binding' | 'docker-image-build' | 'cloudflare-resource' | 'railway-project' | 'railway-environment' | 'railway-service' | 'railway-volume' | 'railway-domain' | 'local-process' | 'local-docker-compose' | 'local-treedx' | 'local-content-materialization' | 'capacity-provider' | 'branch-preview' | 'branch-preview-cleanup' | 'workflow-gate' | 'save-gate' | 'release-gate';
 export type TreeseedDesiredResource = {
     id: string;
     kind: TreeseedDesiredResourceKind;

package/dist/platform/desired-state.js

@@ -77,7 +77,10 @@ function packageUnitFromAdapter(adapter) {
     publishTarget: adapter.publishTarget,
     manifestPath: adapter.manifestPath,
     repository: typeof adapter.metadata.repository === "string" ? adapter.metadata.repository : null,
-    releaseCapability: packageReleaseCapability(adapter)
+    releaseCapability: packageReleaseCapability(adapter),
+    requiredSecrets: Array.isArray(adapter.metadata.requiredSecrets) ? adapter.metadata.requiredSecrets : [],
+    requiredVariables: Array.isArray(adapter.metadata.requiredVariables) ? adapter.metadata.requiredVariables : [],
+    githubEnvironments: Array.isArray(adapter.metadata.githubEnvironments) ? adapter.metadata.githubEnvironments : []
   };
 }
 function templateReleaseTag(manifest) {
@@ -251,6 +254,7 @@ function packageResources(adapter, environment) {
       type: adapter.metadata.type ?? null,
       releaseCapability: packageReleaseCapability(adapter),
       requiredSecrets: adapter.metadata.requiredSecrets ?? [],
+      requiredVariables: adapter.metadata.requiredVariables ?? [],
       githubEnvironments: adapter.metadata.githubEnvironments ?? []
     },
     source: { type: "package-adapter", id: packageId }
@@ -317,6 +321,28 @@ function packageResources(adapter, environment) {
           source: { type: "package-adapter", id: packageId }
         });
       }
+      for (const variableName of Array.isArray(adapter.metadata.requiredVariables) ? adapter.metadata.requiredVariables : []) {
+        if (typeof variableName !== "string" || !variableName.trim()) continue;
+        resources.push({
+          id: `github-variable-binding:${packageId}:${environmentName}:${variableName}`,
+          kind: "github-variable-binding",
+          provider: "github",
+          environment,
+          packageId,
+          serviceId: null,
+          logicalName: `${packageId} ${environmentName} ${variableName}`,
+          dependencies: [`github-environment:${packageId}:${environmentName}`],
+          spec: {
+            packageId,
+            packageRoot: adapter.dir,
+            repository,
+            environment: environmentName,
+            variableName,
+            envName: variableName
+          },
+          source: { type: "package-adapter", id: packageId }
+        });
+      }
     }
   }
   for (const artifact of adapter.artifacts) {
@@ -704,6 +730,11 @@ function releaseGateResources(packages, templates, environment) {
       source: { type: "package-adapter", id: pkg.id }
     };
     const publishGateKind = pkg.releaseCapability === "npm" ? "release-gate:npm-publish" : pkg.releaseCapability === "image" ? "release-gate:image-publish" : null;
+    const imageCredentialDependencies = publishGateKind === "release-gate:image-publish" && pkg.githubEnvironments.includes(hostedEnvironment) ? [
+      ...pkg.requiredSecrets.map((secretName) => `github-secret-binding:${pkg.id}:${hostedEnvironment}:${secretName}`),
+      ...pkg.requiredVariables.map((variableName) => `github-variable-binding:${pkg.id}:${hostedEnvironment}:${variableName}`)
+    ] : [];
+    const publishDependencies = publishGateKind === "release-gate:image-publish" ? [verifyGate.id, ...imageCredentialDependencies] : [verifyGate.id];
     return [
       verifyGate,
       ...publishGateKind ? [{
@@ -714,7 +745,7 @@ function releaseGateResources(packages, templates, environment) {
         packageId: pkg.id,
         serviceId: null,
         logicalName: `${pkg.id} publish gate`,
-        dependencies: [verifyGate.id],
+        dependencies: publishDependencies,
         spec: {
           gateKind: publishGateKind,
           phase,

package/dist/workflow/operations.js

@@ -4943,7 +4943,7 @@ async function runReleaseGateReconcileFacade(operation, helpers, root, target, i
     provider: ["treeseed"]
   };
   const desiredGraph = compileTreeseedDesiredResourceGraph({ tenantRoot: root, target });
-  const rawUnits = compileTreeseedDesiredUnitsFromGraph(desiredGraph).filter((unit) => unit.provider === "treeseed" && (unit.unitType === "package-manifest" || unit.unitType.startsWith("release-gate:")));
+  const rawUnits = compileTreeseedDesiredUnitsFromGraph(desiredGraph).filter((unit) => unit.provider === "treeseed" && (unit.unitType === "package-manifest" || unit.unitType.startsWith("release-gate:")) || unit.provider === "github" && (unit.unitType === "github-environment" || unit.unitType === "github-secret-binding" || unit.unitType === "github-variable-binding"));
   const rawUnitIds = new Set(rawUnits.map((unit) => unit.unitId));
   const units = rawUnits.map((unit) => ({
     ...unit,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@treeseed/sdk",
-  "version": "0.12.4",
+  "version": "0.12.5",
   "description": "Shared Treeseed SDK for content-backed and D1-backed object models.",
   "license": "AGPL-3.0-only",
   "repository": {