@treeseed/sdk 0.12.59 → 0.12.61

package/dist/hosting/graph.js

@@ -3,12 +3,10 @@ import { loadTreeseedPlugins } from "../platform/plugins/runtime.js";
 import { existsSync, readFileSync } from "node:fs";
 import { resolve } from "node:path";
 import { parse as parseYaml } from "yaml";
-import { createPersistentDeployTarget } from "../operations/services/deploy.js";
-import { collectTreeseedConfigSeedValues, resolveTreeseedMachineEnvironmentValues } from "../operations/services/config-runtime.js";
+import { resolveTreeseedMachineEnvironmentValues } from "../operations/services/config-runtime.js";
 import { classifyTreeseedGitMode, runTreeseedGitText } from "../operations/services/git-runner.js";
-import { apiRailwayDefaultDockerfilePath, apiRailwayDefaultSourceRepo, assertApiRailwaySourcePolicy, isApiRailwaySourcePolicyService } from "../operations/services/railway-source-policy.js";
+import { apiRailwayDefaultDockerfilePath, apiRailwayDefaultSourceRepo, assertApiRailwaySourcePolicy, isApiRailwaySourcePolicyService, railwayEnvironmentQualifiedServiceName, railwayTreeDxServiceName } from "../operations/services/railway-source-policy.js";
 import { createTreeseedCanonicalReconcileReport } from "../reconcile/index.js";
-import { reconcileTreeseedTarget } from "../reconcile/index.js";
 import { discoverTreeseedApplications, findTreeseedApplication } from "./apps.js";
 import {
   createDefaultHostAdapters,
@@ -18,6 +16,16 @@ import {
   sanitizedUnitConfig,
   summarizePlacementStatus
 } from "./builtins.js";
+const RAILWAY_SERVICE_NAME_MAX_LENGTH = 32;
+const RAILWAY_VOLUME_NAME_MAX_LENGTH = 48;
+function assertRailwayResourceNames(serviceName, volumeName) {
+  if (serviceName.length > RAILWAY_SERVICE_NAME_MAX_LENGTH) {
+    throw new Error(`Railway service name ${serviceName} exceeds the provider limit of ${RAILWAY_SERVICE_NAME_MAX_LENGTH} characters.`);
+  }
+  if (volumeName && volumeName.length > RAILWAY_VOLUME_NAME_MAX_LENGTH) {
+    throw new Error(`Railway volume name ${volumeName} exceeds the provider limit of ${RAILWAY_VOLUME_NAME_MAX_LENGTH} characters.`);
+  }
+}
 const ENVIRONMENT_NAMES = {
   local: "local",
   staging: "staging",
@@ -83,8 +91,8 @@ function publicTreeDxSourcePolicy(input, config, launchEnv) {
       imageRef,
       imageTagRef: "TREESEED_PUBLIC_TREEDX_IMAGE_REF"
     };
-    const serviceName = input.environment === "prod" ? "public-treedx-node-production-01" : "public-treedx-node-01";
-    assertApiRailwaySourcePolicy(input.environment, { key: serviceName, serviceName, ...policy2 });
+    const serviceName = railwayTreeDxServiceName(1, input.environment);
+    assertApiRailwaySourcePolicy(input.environment, { key: "public-treedx-node-01", serviceName, ...policy2 });
     return policy2;
   }
   const policy = {
@@ -98,7 +106,7 @@ function publicTreeDxSourcePolicy(input, config, launchEnv) {
   };
   assertApiRailwaySourcePolicy(input.environment, {
     key: "public-treedx-node-01",
-    serviceName: "public-treedx-node-01",
+    serviceName: railwayTreeDxServiceName(1, input.environment),
     dockerfilePath: railway.dockerfilePath ?? "/Dockerfile",
     ...policy
   });
@@ -176,8 +184,8 @@ function railwaySourcePolicy(input, serviceKey, service, imageRef) {
   const configuredSource = service.railway?.source && typeof service.railway.source === "object" && !Array.isArray(service.railway.source) ? service.railway.source : {};
   const configuredMode = typeof service.railway?.sourceMode === "string" ? service.railway.sourceMode : null;
   const baseServiceName = service.railway?.serviceName ?? null;
-  const configuredEnvironmentServiceName = service.environments?.[input.environment]?.railwayServiceName;
-  const serviceName = typeof configuredEnvironmentServiceName === "string" && configuredEnvironmentServiceName.trim() ? configuredEnvironmentServiceName.trim() : input.environment === "prod" && ["api", "operationsRunner"].includes(serviceKey) && baseServiceName ? `${baseServiceName}-production` : baseServiceName;
+  const environmentConfig = service.environments?.[input.environment];
+  const serviceName = typeof environmentConfig?.serviceName === "string" && environmentConfig.serviceName.trim() ? environmentConfig.serviceName.trim() : isApiRailwaySourcePolicyService({ key: serviceKey, serviceName: baseServiceName }) && baseServiceName ? railwayEnvironmentQualifiedServiceName(baseServiceName, input.environment) : baseServiceName;
   const repository = typeof service.railway?.sourceRepo === "string" ? service.railway.sourceRepo : typeof configuredSource.repository === "string" ? configuredSource.repository : typeof configuredSource.repo === "string" ? configuredSource.repo : readPackageRepository(resolveRailwayServiceSourceRoot(input, serviceKey, service)) ?? readPackageRepository(input.tenantRoot) ?? apiRailwayDefaultSourceRepo({ key: serviceKey, serviceName });
   const dockerfilePath = service.railway?.dockerfilePath ?? apiRailwayDefaultDockerfilePath({ key: serviceKey, serviceName });
   const apiPackageSourceEligible = ["api", "operationsRunner"].includes(serviceKey);
@@ -384,56 +392,82 @@ function buildProfileFromDeployConfig(input) {
     const imageRefEnv = railwayImageRefEnvForService(serviceKey);
     const imageRef = service.railway?.imageRef ?? (input.environment === "prod" && imageRefEnv ? launchEnv[imageRefEnv] ?? null : null) ?? defaultRailwayImageRefForService(serviceKey, input.environment) ?? null;
     const sourcePolicy = railwaySourcePolicy(input, serviceKey, service, imageRef);
-    const environmentConfig = service.environments?.[input.environment];
     const baseServiceName = service.railway?.serviceName ?? null;
-    const effectiveServiceName = environmentConfig?.railwayServiceName ?? (input.environment === "prod" && ["api", "operationsRunner"].includes(serviceKey) && baseServiceName ? `${baseServiceName}-production` : baseServiceName);
-    services.push({
-      id: serviceKey,
-      label: placement === "runner-capacity" ? "Runner Capacity" : serviceKey === "api" ? "API Runtime" : serviceKey,
-      serviceType,
-      placement,
-      projectGroupId: defaultProjectGroup,
-      config: {
-        rootDir: service.railway?.rootDir ?? service.rootDir ?? ".",
-        imageRef: sourcePolicy.imageRef,
-        imageRefEnv: sourcePolicy.sourceMode === "image" ? imageRefEnv : null,
-        sourceMode: sourcePolicy.sourceMode,
-        sourceRepo: sourcePolicy.sourceRepo,
-        sourceBranch: sourcePolicy.sourceBranch,
-        sourceCommit: sourcePolicy.sourceCommit,
-        sourceRootDirectory: sourcePolicy.sourceRootDirectory,
-        dockerfilePath: sourcePolicy.sourceMode === "git" ? service.railway?.dockerfilePath ?? apiRailwayDefaultDockerfilePath({ key: serviceKey, serviceName: service.railway?.serviceName ?? null }) : null,
-        buildCommand: sourcePolicy.imageRef || sourcePolicy.sourceMode === "git" && service.railway?.dockerfilePath ? null : service.railway?.buildCommand ?? null,
-        startCommand: sourcePolicy.imageRef ? null : service.railway?.startCommand ?? null,
-        healthcheckPath: service.railway?.healthcheckPath ?? null,
-        runtimeMode: service.railway?.runtimeMode ?? null,
-        volumeMountPath: service.railway?.volumeMountPath ?? null,
-        runnerPool: service.railway?.runnerPool ?? null,
-        resourceType: service.railway?.resourceType ?? null,
-        serviceName: effectiveServiceName,
-        serviceTargets: service.railway?.serviceTargets ?? null
-      },
-      secretRefs: serviceKey === "treeseedDatabase" ? ["TREESEED_DATABASE_URL"] : [],
-      variableRefs: serviceKey === "operationsRunner" ? ["TREESEED_PLATFORM_RUNNER_ID", "TREESEED_PLATFORM_RUNNER_DATA_DIR", "TREESEED_PLATFORM_RUNNER_ENVIRONMENT"] : [],
-      metadata: String(serviceKey).startsWith("capacityProvider") ? { capacityProvider: true, deployByDefault: false } : {},
-      environments: {
-        local: {
-          hostId: serviceType === "relational-database" || serviceType === "runner-pool" || service.railway?.volumeMountPath ? "local-docker" : "local-process",
-          projectGroupId: void 0,
-          config: service.environments?.local ?? {}
-        },
-        staging: {
-          hostId: service.provider ?? "railway",
-          projectGroupId: defaultProjectGroup,
-          config: service.environments?.staging ?? {}
+    const environmentConfig = service.environments?.[input.environment];
+    const effectiveServiceName = typeof environmentConfig?.serviceName === "string" && environmentConfig.serviceName.trim() ? environmentConfig.serviceName.trim() : (serviceKey === "operationsRunner" || isApiRailwaySourcePolicyService({ key: serviceKey, serviceName: baseServiceName })) && baseServiceName ? railwayEnvironmentQualifiedServiceName(baseServiceName, input.environment) : baseServiceName;
+    const runnerPool = serviceKey === "operationsRunner" && service.railway?.runnerPool && typeof service.railway.runnerPool === "object" ? service.railway.runnerPool : null;
+    const instanceCount = runnerPool ? Math.max(1, Number.parseInt(String(runnerPool.bootstrapCount ?? 1), 10) || 1) : 1;
+    const maxRunners = runnerPool ? Math.max(1, Number.parseInt(String(runnerPool.maxRunners ?? instanceCount), 10) || instanceCount) : 1;
+    if (runnerPool && instanceCount > maxRunners) {
+      throw new Error(`services.operationsRunner.railway.runnerPool.bootstrapCount (${instanceCount}) cannot exceed maxRunners (${maxRunners}).`);
+    }
+    for (let offset = 0; offset < instanceCount; offset += 1) {
+      const runnerIndex = offset + 1;
+      const instanceId = serviceKey === "operationsRunner" && runnerIndex > 1 ? `${serviceKey}-${String(runnerIndex).padStart(2, "0")}` : serviceKey;
+      const instanceServiceName = serviceKey === "operationsRunner" && effectiveServiceName ? indexedName(effectiveServiceName, runnerIndex) : effectiveServiceName;
+      const volumeMountPath = serviceKey === "operationsRunner" ? service.railway?.volumeMountPath ?? runnerPool?.volumeMountPath ?? "/data" : service.railway?.volumeMountPath ?? null;
+      if (instanceServiceName && (service.provider === "railway" || service.railway)) {
+        assertRailwayResourceNames(instanceServiceName, volumeMountPath ? `${instanceServiceName}-volume` : null);
+      }
+      const environmentBinding = (bindingEnvironment) => {
+        const configured = service.environments?.[bindingEnvironment] ?? {};
+        if (!runnerPool) return configured;
+        const configuredName = typeof configured.serviceName === "string" && configured.serviceName.trim() ? configured.serviceName.trim() : baseServiceName ? railwayEnvironmentQualifiedServiceName(baseServiceName, bindingEnvironment) : instanceServiceName;
+        const serviceName = configuredName ? indexedName(configuredName, runnerIndex) : instanceServiceName;
+        return { ...configured, serviceName, railwayServiceName: serviceName };
+      };
+      services.push({
+        id: instanceId,
+        label: placement === "runner-capacity" ? `Runner Capacity ${String(runnerIndex).padStart(2, "0")}` : serviceKey === "api" ? "API Runtime" : serviceKey,
+        serviceType,
+        placement,
+        projectGroupId: defaultProjectGroup,
+        config: {
+          rootDir: service.railway?.rootDir ?? service.rootDir ?? ".",
+          imageRef: sourcePolicy.imageRef,
+          imageRefEnv: sourcePolicy.sourceMode === "image" ? imageRefEnv : null,
+          sourceMode: sourcePolicy.sourceMode,
+          sourceRepo: sourcePolicy.sourceRepo,
+          sourceBranch: sourcePolicy.sourceBranch,
+          sourceCommit: sourcePolicy.sourceCommit,
+          sourceRootDirectory: sourcePolicy.sourceRootDirectory,
+          dockerfilePath: sourcePolicy.sourceMode === "git" ? service.railway?.dockerfilePath ?? apiRailwayDefaultDockerfilePath({ key: serviceKey, serviceName: service.railway?.serviceName ?? null }) : null,
+          buildCommand: sourcePolicy.imageRef || sourcePolicy.sourceMode === "git" && service.railway?.dockerfilePath ? null : service.railway?.buildCommand ?? null,
+          startCommand: sourcePolicy.imageRef ? null : service.railway?.startCommand ?? null,
+          healthcheckPath: service.railway?.healthcheckPath ?? null,
+          runtimeMode: service.railway?.runtimeMode ?? null,
+          volumeMountPath,
+          volumeName: volumeMountPath && instanceServiceName ? `${instanceServiceName}-volume` : null,
+          runnerPool: runnerPool ? { ...runnerPool, bootstrapCount: instanceCount, maxRunners } : null,
+          runnerIndex: runnerPool ? runnerIndex : null,
+          poolKey: runnerPool ? serviceKey : null,
+          runnerId: runnerPool ? instanceServiceName : null,
+          resourceType: service.railway?.resourceType ?? null,
+          serviceName: instanceServiceName,
+          serviceTargets: service.railway?.serviceTargets ?? null
         },
-        prod: {
-          hostId: service.provider ?? "railway",
-          projectGroupId: defaultProjectGroup,
-          config: service.environments?.prod ?? {}
+        secretRefs: serviceKey === "treeseedDatabase" ? ["TREESEED_DATABASE_URL"] : [],
+        variableRefs: serviceKey === "operationsRunner" ? ["TREESEED_PLATFORM_RUNNER_ID", "TREESEED_PLATFORM_RUNNER_DATA_DIR", "TREESEED_PLATFORM_RUNNER_ENVIRONMENT"] : [],
+        metadata: String(serviceKey).startsWith("capacityProvider") ? { capacityProvider: true, deployByDefault: false } : runnerPool ? { poolKey: serviceKey, runnerIndex } : {},
+        environments: {
+          local: {
+            hostId: serviceType === "relational-database" || serviceType === "runner-pool" || service.railway?.volumeMountPath ? "local-docker" : "local-process",
+            projectGroupId: void 0,
+            config: environmentBinding("local")
+          },
+          staging: {
+            hostId: service.provider ?? "railway",
+            projectGroupId: defaultProjectGroup,
+            config: environmentBinding("staging")
+          },
+          prod: {
+            hostId: service.provider ?? "railway",
+            projectGroupId: defaultProjectGroup,
+            config: environmentBinding("prod")
+          }
         }
-      }
-    });
+      });
+    }
   }
   if (config.cloudflare?.r2) {
     services.push({
@@ -472,9 +506,11 @@ function buildProfileFromDeployConfig(input) {
     const treeDxSourcePolicy = publicTreeDxSourcePolicy(input, config, launchEnv);
     const treeDxNodeUnits = Array.from({ length: treeDxNodePool.bootstrapCount }, (_, offset) => {
       const nodeIndex = offset + 1;
-      const serviceName = indexedName(input.environment === "prod" ? "public-treedx-node-production" : "public-treedx-node", nodeIndex);
+      const logicalServiceName = indexedName("public-treedx-node", nodeIndex);
+      const serviceName = railwayTreeDxServiceName(nodeIndex, input.environment);
+      assertRailwayResourceNames(serviceName, `${serviceName}-volume`);
       return {
-        id: serviceName,
+        id: logicalServiceName,
         label: `Public TreeDX node ${String(nodeIndex).padStart(2, "0")}`,
         serviceType: "treedx-node",
         placement: "knowledge-library",
@@ -660,7 +696,7 @@ function filterHostingUnits(units, filter) {
   const serviceIds = normalizeFilterValues(filter?.serviceIds);
   const placements = normalizeFilterValues(filter?.placements);
   const hosts = normalizeFilterValues(filter?.hosts);
-  const allServiceIds = new Set(units.map((unit) => unit.id));
+  const allServiceIds = new Set(units.flatMap((unit) => [unit.id, typeof unit.config.poolKey === "string" ? unit.config.poolKey : null]).filter((value) => Boolean(value)));
   const missingServices = [...serviceIds].filter((serviceId) => !allServiceIds.has(serviceId));
   if (missingServices.length > 0) {
     throw new Error(`Unknown hosting service id${missingServices.length === 1 ? "" : "s"}: ${missingServices.join(", ")}.`);
@@ -668,7 +704,7 @@ function filterHostingUnits(units, filter) {
   if (serviceIds.size === 0 && placements.size === 0 && hosts.size === 0) {
     return units.filter((unit) => unit.metadata.deployByDefault !== false);
   }
-  return units.filter((unit) => (serviceIds.size === 0 || serviceIds.has(unit.id)) && (placements.size === 0 || placements.has(unit.placement)) && (hosts.size === 0 || hosts.has(unit.host.id)));
+  return units.filter((unit) => (serviceIds.size === 0 || serviceIds.has(unit.id) || typeof unit.config.poolKey === "string" && serviceIds.has(unit.config.poolKey)) && (placements.size === 0 || placements.has(unit.placement)) && (hosts.size === 0 || hosts.has(unit.host.id)));
 }
 function compileSingleTreeseedHostingGraph(input, application) {
   const environment = normalizeEnvironment(input.environment);
@@ -798,112 +834,6 @@ function railwayReconcileSystemsForUnits(units) {
   }
   return [...systems];
 }
-function isInfrastructureHostedUnit(unit) {
-  return ["railway", "cloudflare", "cloudflare-dns", "local-docker"].includes(unit.host.id);
-}
-function railwayEnvForHostingApply(input, graph) {
-  const seedValues = collectTreeseedConfigSeedValues(input.tenantRoot, graph.environment);
-  return {
-    ...process.env,
-    ...seedValues
-  };
-}
-async function applyTreeseedHostingGraph(input) {
-  const plan = await planTreeseedHostingGraph(input);
-  const graph = compileTreeseedHostingGraph(input);
-  const selectedSystems = railwayReconcileSystemsForUnits(graph.units);
-  const infrastructureUnits = graph.units.filter(isInfrastructureHostedUnit);
-  if (plan.planOnly) {
-    return {
-      environment: plan.environment,
-      planOnly: true,
-      selectedApps: [...new Set(graph.units.map((unit) => unit.application?.id).filter((value) => Boolean(value)))],
-      selectedSystems,
-      skippedSystems: ["web", "data", "github"].filter((system) => !selectedSystems.includes(system)).map((system) => ({ system, reason: selectedSystems.length > 0 ? "Not selected by hosting app filter." : "No Railway reconciliation selected." })),
-      results: plan.units.map((entry) => ({
-        unit: entry.unit,
-        plan: entry.plan,
-        result: entry.observed,
-        verification: entry.verification
-      })),
-      placements: plan.placements,
-      warnings: plan.warnings
-    };
-  }
-  if (infrastructureUnits.length > 0 && selectedSystems.length === 0) {
-    throw new Error(`Hosting apply selected infrastructure resources but no provider reconciliation system was selected: ${infrastructureUnits.map((unit) => `${unit.id} (${unit.host.id})`).join(", ")}.`);
-  }
-  const reconcile = await reconcileTreeseedTarget({
-    tenantRoot: graph.tenantRoot,
-    target: createPersistentDeployTarget(graph.environment),
-    systems: selectedSystems.length > 0 ? selectedSystems : void 0,
-    env: railwayEnvForHostingApply(input, graph),
-    planOnly: plan.planOnly
-  });
-  const resultByUnit = /* @__PURE__ */ new Map();
-  for (const entry of reconcile.results) {
-    resultByUnit.set(entry.unit.unitId, entry);
-    resultByUnit.set(entry.unit.logicalName, entry);
-  }
-  const results = plan.units.map((entry) => {
-    const unit = graph.units.find((candidate) => candidate.id === entry.unit.id) ?? entry.unit;
-    const reconcileResult = resultByUnit.get(entry.unit.id) ?? resultByUnit.get(unit.id) ?? resultByUnit.get(unit.logicalName) ?? null;
-    return {
-      unit,
-      plan: entry.plan,
-      result: {
-        status: reconcileResult?.verification?.ready || plan.planOnly ? "ready" : "blocked",
-        locators: reconcileResult?.resourceLocators ?? {},
-        state: reconcileResult?.state ?? {
-          unitId: unit.id,
-          action: plan.planOnly ? "plan" : "unmatched"
-        },
-        warnings: reconcileResult?.warnings ?? []
-      },
-      verification: reconcileResult?.verification ? {
-        unitId: unit.id,
-        status: reconcileResult.verification.verified ? "ready" : "blocked",
-        verified: reconcileResult.verification.verified,
-        checks: reconcileResult.verification.checks.map((check) => ({
-          key: check.key,
-          label: check.description,
-          ok: check.verified,
-          expected: check.expected,
-          observed: check.observed,
-          issues: check.issues
-        })),
-        warnings: reconcileResult.verification.warnings
-      } : {
-        unitId: unit.id,
-        status: plan.planOnly ? "ready" : "blocked",
-        verified: plan.planOnly,
-        checks: plan.planOnly ? [] : [{
-          key: "reconcile-result",
-          label: "Hosting unit matched a reconcile result",
-          ok: false,
-          issues: [`No reconcile result matched hosting unit ${unit.id}.`]
-        }],
-        warnings: []
-      }
-    };
-  });
-  return {
-    environment: plan.environment,
-    planOnly: plan.planOnly,
-    selectedApps: [...new Set(graph.units.map((unit) => unit.application?.id).filter((value) => Boolean(value)))],
-    selectedSystems,
-    skippedSystems: ["web", "data", "github"].filter((system) => !selectedSystems.includes(system)).map((system) => ({ system, reason: selectedSystems.length > 0 ? "Not selected by hosting app filter." : "No Railway reconciliation selected." })),
-    transport: selectedSystems.length > 0 ? {
-      railway: {
-        reconcile: "api",
-        deploy: process.env.TREESEED_RAILWAY_DEPLOY_TRANSPORT === "cli-fallback" ? "cli-fallback" : "api"
-      }
-    } : void 0,
-    results,
-    placements: plan.placements,
-    warnings: plan.warnings
-  };
-}
 function serializeHostingUnit(unit) {
   return sanitizedUnitConfig(unit);
 }
@@ -1019,58 +949,6 @@ function canonicalHostingReportFromPlan(plan) {
     }
   });
 }
-function canonicalHostingReportFromApplyResult(result) {
-  const desiredGraph = result.results.map((entry) => canonicalHostingNode(entry.unit));
-  const observedGraph = result.results.map((entry) => canonicalHostingNode(entry.unit, entry.result));
-  const diff = result.results.flatMap((entry) => [
-    ...entry.plan.action && entry.plan.action !== "noop" ? [{
-      id: `${entry.unit.id}:diff`,
-      resourceId: entry.unit.id,
-      severity: canonicalActionKind(entry.plan.action) === "blocked" ? "blocking" : "info",
-      reason: hostingPlanReason(entry.plan, "Applied"),
-      provider: entry.unit.host.id,
-      type: entry.unit.serviceType.id,
-      expected: serializeHostingUnit(entry.unit),
-      observed: entry.result
-    }] : [],
-    ...canonicalHostingDrift(entry.unit, entry.plan.blockedDrift, "Blocked provider drift.")
-  ]);
-  const providerLimitations = result.results.flatMap((entry) => canonicalHostingDrift(entry.unit, entry.plan.providerLimitations, "Provider limitation."));
-  const actions = result.results.map((entry) => ({
-    id: `${entry.unit.id}:${entry.plan.action ?? "noop"}`,
-    kind: canonicalActionKind(entry.plan.action),
-    resourceId: entry.unit.id,
-    reason: hostingPlanReason(entry.plan, "Applied"),
-    provider: entry.unit.host.id,
-    type: entry.unit.serviceType.id,
-    before: entry.result,
-    after: serializeHostingUnit(entry.unit)
-  }));
-  return createTreeseedCanonicalReconcileReport({
-    desiredGraph,
-    observedGraph,
-    stateGraph: [],
-    diff,
-    actions,
-    postconditions: result.results.map((entry) => canonicalHostingPostcondition(entry.unit, entry.verification)),
-    selectedResources: result.results.map((entry) => entry.unit.id),
-    skippedResources: result.skippedSystems.map((entry) => ({ id: entry.system, reason: entry.reason })),
-    blockedDrift: diff.filter((entry) => entry.severity === "blocking"),
-    providerLimitations,
-    retainedResources: result.results.flatMap((entry) => (entry.plan.retainedResources ?? []).map((resource, index) => ({
-      id: `${entry.unit.id}:retained:${index + 1}`,
-      provider: entry.unit.host.id,
-      type: "retained-resource",
-      owner: entry.unit.application?.id ?? null,
-      state: resource
-    }))),
-    liveVerification: {
-      ok: result.results.every((entry) => entry.verification.verified === true),
-      source: "hosting-apply",
-      issues: result.results.filter((entry) => entry.verification.verified !== true).map((entry) => `${entry.unit.id}: verification did not pass after apply`)
-    }
-  });
-}
 function serializeHostingPlan(plan) {
   const selectedSystems = railwayReconcileSystemsForUnits(plan.units.map((entry) => entry.unit));
   const canonical = canonicalHostingReportFromPlan(plan);
@@ -1103,42 +981,13 @@ function serializeHostingPlan(plan) {
     warnings: plan.warnings
   };
 }
-function serializeHostingApplyResult(result) {
-  const canonical = canonicalHostingReportFromApplyResult(result);
-  return {
-    environment: result.environment,
-    planOnly: result.planOnly,
-    ...canonical,
-    selectedApps: result.selectedApps ?? [],
-    selectedSystems: result.selectedSystems ?? [],
-    skippedSystems: result.skippedSystems ?? [],
-    transport: result.transport,
-    placements: result.placements,
-    results: result.results.map((entry) => ({
-      unit: serializeHostingUnit(entry.unit),
-      desired: serializeHostingUnit(entry.unit),
-      observed: entry.result,
-      diff: entry.plan,
-      actions: entry.plan.actions ?? [entry.plan.action],
-      retainedResources: entry.plan.retainedResources ?? [],
-      blockedDrift: entry.plan.blockedDrift ?? [],
-      providerLimitations: entry.plan.providerLimitations ?? [],
-      plan: entry.plan,
-      result: entry.result,
-      verification: entry.verification
-    })),
-    warnings: result.warnings
-  };
-}
 function hostingEnvironmentLabel(environment) {
   return ENVIRONMENT_NAMES[environment];
 }
 export {
-  applyTreeseedHostingGraph,
   compileTreeseedHostingGraph,
   hostingEnvironmentLabel,
   planTreeseedHostingGraph,
-  serializeHostingApplyResult,
   serializeHostingPlan,
   serializeHostingUnit
 };

package/dist/local-dev/managed-dev.js

@@ -31,6 +31,31 @@ async function waitForPidsToExit(pids, timeoutMs = 3e3) {
     await new Promise((resolvePromise) => setTimeout(resolvePromise, 100));
   }
 }
+function processGroupAlive(pid) {
+  if (process.platform === "win32") return pidAlive(pid);
+  try {
+    process.kill(-pid, 0);
+    return true;
+  } catch {
+    return false;
+  }
+}
+async function terminateManagedProcess(pid) {
+  const signal = (value) => {
+    try {
+      process.kill(process.platform === "win32" ? pid : -pid, value);
+    } catch {
+    }
+  };
+  signal("SIGTERM");
+  const startedAt = Date.now();
+  while (processGroupAlive(pid) && Date.now() - startedAt < 3e3) {
+    await new Promise((resolvePromise) => setTimeout(resolvePromise, 100));
+  }
+  if (processGroupAlive(pid)) {
+    signal("SIGKILL");
+  }
+}
 async function stopConflictingPortListeners(spec, allowedPid = null) {
   const conflicts = portListenerPids(spec.port).filter((pid) => pid !== process.pid && pid !== allowedPid);
   if (conflicts.length === 0) return [];
@@ -249,7 +274,7 @@ function instanceFromSpec(spec) {
   return {
     ...spec,
     pid: Number.isFinite(pid) ? pid : null,
-    running: pidAlive(Number.isFinite(pid) ? pid : null),
+    running: Number.isFinite(pid) ? processGroupAlive(pid) : false,
     startedAt: typeof record?.startedAt === "string" ? record.startedAt : null
   };
 }
@@ -296,13 +321,10 @@ function listTreeseedDevInstances(input = {}) {
   if (!existsSync(instanceDir)) return [];
   return readdirSync(instanceDir).filter((entry) => entry.endsWith(".json")).map((entry) => entry.slice(0, -".json".length)).map((surface) => readTreeseedDevInstance({ cwd: input.cwd, surface })).filter((entry) => Boolean(entry));
 }
-function stopSpec(spec) {
+async function stopSpec(spec) {
   const instance = instanceFromSpec(spec);
   if (instance.pid && instance.running) {
-    try {
-      process.kill(instance.pid, "SIGTERM");
-    } catch {
-    }
+    await terminateManagedProcess(instance.pid);
   }
   rmSync(spec.pidPath, { force: true });
   rmSync(spec.instancePath, { force: true });
@@ -314,7 +336,7 @@ async function startSpec(spec, force = false, forceConflicts = false) {
     return existing;
   }
   if (existing.running && force) {
-    stopSpec(spec);
+    await stopSpec(spec);
   }
   if (forceConflicts) {
     await stopConflictingPortListeners(spec, existing.pid);
@@ -359,7 +381,7 @@ async function startTreeseedManagedDev(options = {}) {
 }
 async function stopTreeseedManagedDev(options = {}) {
   const plan = createTreeseedIntegratedDevPlan(options);
-  const instances = plan.processes.map((spec) => stopSpec(spec));
+  const instances = await Promise.all(plan.processes.map((spec) => stopSpec(spec)));
   return { ok: true, action: "stop", plan, instances };
 }
 function stopTreeseedDevInstance(options = {}) {

package/dist/managed-dependencies.d.ts

@@ -70,6 +70,9 @@ export declare function createTreeseedManagedToolEnv(env?: NodeJS.ProcessEnv): {
     DOCKERHUB_USERNAME?: string;
     CODEX_API_KEY?: string;
 };
+export declare function collectInstalledNativeDependencyIssues(tenantRoot: string): string[];
+export declare function repairInstalledNativeDependencies(tenantRoot: string, options: Required<Pick<DependencyInstallerOptions, 'env' | 'spawn'>> & Pick<DependencyInstallerOptions, 'write'>): number | null;
+export declare function staleNpmGitClonePath(detail: string): string | null;
 export declare function formatTreeseedDependencyFailureDetails(result: Pick<TreeseedDependencyInstallResult, 'npmInstalls' | 'reports'>): string;
 export declare function resolveTreeseedToolBinary(toolName: TreeseedManagedToolName, options?: {
     env?: NodeJS.ProcessEnv;