@treeseed/sdk 0.12.62 → 0.13.0-rc.10

package/dist/platform/env.yaml

@@ -1,1126 +0,0 @@
-entries:
-  TREESEED_GITHUB_TOKEN:
-    label: GitHub access token
-    group: auth
-    description: Personal access token used by Treeseed for GitHub CLI automation, repository setup, CI secret sync, and repository-scoped GitHub workflows.
-    howToGet: "Create a GitHub fine-grained personal access token scoped to the TreeSeed repository. Required repository permissions: Contents read/write, Environments read/write, Secrets and variables read/write, Actions and workflows read/write, Pull requests read/write, Issues read/write. Then paste it here as TREESEED_GITHUB_TOKEN."
-    sensitivity: secret
-    targets:
-      - local-runtime
-      - railway-secret
-    scopes:
-      - local
-      - staging
-      - prod
-    storage: shared
-    requirement: required
-    purposes:
-      - save
-      - config
-    validation:
-      kind: nonempty
-      minLength: 8
-    sourcePriority:
-      - machine-config
-      - process-env
-  TREESEED_GITHUB_COPILOT_TOKEN:
-    label: GitHub Copilot access token
-    group: auth
-    description: Account-scoped GitHub token used only by Treeseed GitHub Copilot SDK-backed execution providers.
-    howToGet: "Create a GitHub fine-grained personal access token for the account with an active Copilot subscription. Enable the Copilot Requests permission, then store it as TREESEED_GITHUB_COPILOT_TOKEN. If omitted, the Copilot adapter can fall back to TREESEED_GITHUB_TOKEN for compatibility."
-    sensitivity: secret
-    targets:
-      - local-runtime
-      - github-secret
-      - railway-secret
-    scopes:
-      - local
-      - staging
-      - prod
-    storage: scoped
-    requirement: optional
-    purposes:
-      - config
-    validation:
-      kind: nonempty
-      minLength: 8
-    sourcePriority:
-      - machine-config
-      - process-env
-  TREESEED_DOCKERHUB_USERNAME:
-    label: Docker Hub username
-    group: docker
-    description: Docker Hub username used by Treeseed package release workflows to publish container images such as treeseed/treedx and treeseed/treedx-profiler.
-    howToGet: Use the Docker Hub account or organization user that owns the Treeseed images.
-    sensitivity: plain
-    targets:
-      - local-runtime
-      - github-variable
-    scopes:
-      - staging
-      - prod
-    storage: shared
-    requirement: optional
-    purposes:
-      - deploy
-      - config
-    validation:
-      kind: nonempty
-    sourcePriority:
-      - machine-config
-      - process-env
-  TREESEED_DOCKERHUB_TOKEN:
-    label: Docker Hub token
-    group: docker
-    description: Docker Hub access token used by Treeseed production release workflows to publish semantic TreeDX service and profiler images.
-    howToGet: Create a Docker Hub access token with permission to push the Treeseed images, then store it through Treeseed config as TREESEED_DOCKERHUB_TOKEN.
-    sensitivity: secret
-    targets:
-      - local-runtime
-      - github-secret
-    scopes:
-      - staging
-      - prod
-    storage: shared
-    requirement: optional
-    purposes:
-      - deploy
-      - config
-    validation:
-      kind: nonempty
-      minLength: 8
-    sourcePriority:
-      - machine-config
-      - process-env
-  TREESEED_RAILWAY_API_TOKEN:
-    label: Railway API token
-    group: auth
-    description: Account-level Railway API token used by Treeseed to provision, reconcile, deploy, and inspect Market Railway services.
-    howToGet: Create a Railway account API token with access to the Treeseed Market project/workspace, then store it through Treeseed config as TREESEED_RAILWAY_API_TOKEN.
-    sensitivity: secret
-    targets:
-      - local-runtime
-      - github-secret
-      - railway-secret
-    serviceTargets:
-      - operationsRunner
-    scopes:
-      - local
-      - staging
-      - prod
-    storage: shared
-    requirement: required
-    purposes:
-      - deploy
-      - config
-    validation:
-      kind: nonempty
-      minLength: 8
-    sourcePriority:
-      - machine-config
-      - process-env
-    relevanceRef: railwayManagedEnabled
-    requiredWhenRef: railwayManagedEnabled
-  TREESEED_RAILWAY_WORKSPACE:
-    label: Railway workspace
-    group: railway
-    description: Railway workspace Treeseed should use when listing or creating projects during bootstrap and config reconciliation.
-    howToGet: In Railway, use the workspace slug or name shown in the workspace switcher.
-    sensitivity: plain
-    targets:
-      - local-runtime
-      - github-variable
-      - railway-var
-    scopes:
-      - staging
-      - prod
-    storage: shared
-    requirement: optional
-    purposes:
-      - deploy
-      - destroy
-      - config
-    validation:
-      kind: nonempty
-    sourcePriority:
-      - machine-config
-      - process-env
-    relevanceRef: railwayManagedEnabled
-    requiredWhenRef: railwayManagedEnabled
-  TREESEED_RAILWAY_PROJECT_ID:
-    label: Railway project ID
-    group: hosting
-    visibility: system
-    description: Railway project identifier used by hosted deploy workflows and reconciliation helpers for the active environment.
-    howToGet: Treeseed can derive or persist this after Railway project reconciliation. Override it only when targeting a known Railway project ID.
-    sensitivity: plain
-    targets:
-      - github-variable
-      - railway-var
-    scopes:
-      - staging
-      - prod
-    storage: scoped
-    requirement: optional
-    purposes:
-      - deploy
-      - config
-    validation:
-      kind: nonempty
-    sourcePriority:
-      - machine-config
-      - process-env
-    relevanceRef: railwayManagedEnabled
-  TREESEED_GITHUB_OWNER:
-    label: GitHub repository owner
-    group: github
-    description: GitHub user or organization that owns the Treeseed repository used for bootstrap, CI/CD, and environment sync.
-    howToGet: Treeseed suggests this from the origin remote when available. Otherwise enter the GitHub user or organization that should own the repository.
-    sensitivity: plain
-    targets:
-      - local-runtime
-    scopes:
-      - local
-    storage: scoped
-    requirement: required
-    purposes:
-      - config
-    validation:
-      kind: nonempty
-    sourcePriority:
-      - machine-config
-      - process-env
-    defaultValueRef: githubOwnerDefault
-  TREESEED_GITHUB_REPOSITORY_NAME:
-    label: GitHub repository name
-    group: github
-    description: GitHub repository name Treeseed should verify or create before GitHub bootstrap.
-    howToGet: Treeseed suggests this from the origin remote when available and otherwise defaults it from the site slug.
-    sensitivity: plain
-    targets:
-      - local-runtime
-    scopes:
-      - local
-    storage: scoped
-    requirement: required
-    purposes:
-      - config
-    validation:
-      kind: nonempty
-    sourcePriority:
-      - machine-config
-      - process-env
-    defaultValueRef: githubRepositoryNameDefault
-  TREESEED_GITHUB_REPOSITORY_VISIBILITY:
-    label: GitHub repository visibility
-    group: github
-    description: Visibility to use if Treeseed needs to create the GitHub repository during bootstrap.
-    howToGet: Choose private, public, or internal. Treeseed defaults new repositories to private.
-    sensitivity: plain
-    targets:
-      - local-runtime
-    scopes:
-      - local
-    storage: scoped
-    requirement: optional
-    purposes:
-      - config
-    validation:
-      kind: enum
-      values:
-        - private
-        - public
-        - internal
-    sourcePriority:
-      - machine-config
-      - process-env
-    defaultValueRef: githubRepositoryVisibilityDefault
-  TREESEED_CLOUDFLARE_API_TOKEN:
-    label: Cloudflare API token
-    group: auth
-    description: Account-level Cloudflare API token used by Wrangler, Workers AI, and CI to manage Pages, Workers, Workers KV, D1, R2, Queues, Turnstile, DNS, cache settings, secrets, and deploys.
-    howToGet: "Create a Cloudflare account-level API token scoped to the target account and domain. Account permissions: Pages Write, Workers Scripts Write, Workers KV Storage Write, Workers R2 Storage Write, D1 Write, Queues Write, Turnstile Sites Write, Account Rulesets Write, and Account Rule Lists Write. Zone permissions for the target domain: Zone Read, DNS Write, Cache Settings Write, and SSL and Certificates Write. Cloudflare API docs may call Cache Settings Write the Cache Rules permission and Account Rule Lists Write the Account Filter Lists permission. If TREESEED_COMMIT_AI_GATEWAY_ID or Workers AI model execution is configured, also grant AI Gateway Run and Workers AI Write. Then paste it here as TREESEED_CLOUDFLARE_API_TOKEN."
-    sensitivity: secret
-    targets:
-      - local-runtime
-      - github-secret
-    scopes:
-      - local
-      - staging
-      - prod
-    storage: shared
-    requirement: required
-    purposes:
-      - save
-      - deploy
-      - destroy
-      - config
-    validation:
-      kind: nonempty
-      minLength: 8
-    sourcePriority:
-      - machine-config
-      - process-env
-  TREESEED_CLOUDFLARE_ACCOUNT_ID:
-    label: Cloudflare account ID
-    group: cloudflare
-    description: Identifies the Cloudflare account Treeseed should provision, deploy into, and use for Workers AI commit message generation.
-    howToGet: In the Cloudflare dashboard, open Workers & Pages or Account Home and copy the account ID.
-    startupProfile: core
-    sensitivity: plain
-    targets:
-      - local-runtime
-      - github-variable
-      - config-file
-    scopes:
-      - local
-      - staging
-      - prod
-    storage: shared
-    requirement: required
-    purposes:
-      - save
-      - deploy
-      - destroy
-      - config
-    validation:
-      kind: nonempty
-    sourcePriority:
-      - machine-config
-      - process-env
-  TREESEED_CLOUDFLARE_PAGES_PROJECT_NAME:
-    label: Cloudflare Pages project name
-    group: cloudflare
-    description: Static Cloudflare Pages project used for all Treeseed web environments.
-    howToGet: Treeseed can default this from the site slug. Override it if the Cloudflare Pages project should use a different name.
-    sensitivity: plain
-    targets:
-      - local-runtime
-      - github-variable
-    scopes:
-      - staging
-      - prod
-    storage: shared
-    requirement: required
-    purposes:
-      - deploy
-      - config
-    validation:
-      kind: nonempty
-    sourcePriority:
-      - machine-config
-      - process-env
-    defaultValueRef: pagesProjectNameDefault
-  TREESEED_CLOUDFLARE_PAGES_PREVIEW_PROJECT_NAME:
-    label: Cloudflare preview Pages project
-    group: cloudflare
-    description: Legacy alias for the shared Cloudflare Pages project used by non-production branch deployments. Do not configure a separate project per environment.
-    howToGet: Treeseed defaults this to TREESEED_CLOUDFLARE_PAGES_PROJECT_NAME so staging deploys use the shared Pages project preview environment.
-    sensitivity: plain
-    targets:
-      - local-runtime
-      - github-variable
-    scopes:
-      - staging
-      - prod
-    storage: shared
-    requirement: required
-    purposes:
-      - deploy
-      - config
-    validation:
-      kind: nonempty
-    sourcePriority:
-      - machine-config
-      - process-env
-    defaultValueRef: pagesPreviewProjectNameDefault
-  TREESEED_CONTENT_BUCKET_NAME:
-    label: Cloudflare R2 content bucket
-    group: cloudflare
-    description: Shared R2 bucket name that stores team-scoped published content, artifacts, and editorial overlays.
-    howToGet: Treeseed can default this from the site slug with a -content suffix. Override it if the shared bucket should use a different name.
-    sensitivity: plain
-    targets:
-      - local-runtime
-      - github-variable
-    scopes:
-      - staging
-      - prod
-    storage: shared
-    requirement: required
-    purposes:
-      - deploy
-      - config
-    validation:
-      kind: nonempty
-    sourcePriority:
-      - machine-config
-      - process-env
-    defaultValueRef: contentBucketNameDefault
-  TREESEED_CONTENT_BUCKET_BINDING:
-    label: Cloudflare R2 binding name
-    group: cloudflare
-    description: Worker binding name used to mount the shared Treeseed content bucket.
-    howToGet: Treeseed defaults this to TREESEED_CONTENT_BUCKET unless you need a different binding name.
-    sensitivity: plain
-    targets:
-      - local-runtime
-      - github-variable
-    scopes:
-      - staging
-      - prod
-    storage: shared
-    requirement: required
-    purposes:
-      - deploy
-      - config
-    validation:
-      kind: nonempty
-    sourcePriority:
-      - machine-config
-      - process-env
-    defaultValueRef: contentBucketBindingDefault
-  TREESEED_EDITORIAL_PREVIEW_SECRET:
-    label: Editorial preview signing secret
-    group: cloudflare
-    description: Shared HMAC secret used to sign and verify temporary editorial preview links and cookies.
-    howToGet: Treeseed can generate a strong random secret for you. Reuse the same value across hosted environments so preview links remain valid during staging-to-production promotion.
-    sensitivity: secret
-    targets:
-      - local-runtime
-      - github-secret
-      - cloudflare-secret
-    scopes:
-      - staging
-      - prod
-    storage: shared
-    requirement: required
-    purposes:
-      - deploy
-      - config
-    validation:
-      kind: nonempty
-    sourcePriority:
-      - machine-config
-      - process-env
-    defaultValueRef: generatedSecret
-  TREESEED_HOSTING_KIND:
-    label: Treeseed hosting kind
-    group: hosting
-    description: Declares whether this repository is the central market control plane, a Treeseed-hosted project platform, or a self-hosted project platform.
-    howToGet: Treeseed can derive this from the hosting block in treeseed.site.yaml. Override it only when the runtime environment must force a different deployment profile.
-    sensitivity: plain
-    targets:
-      - github-variable
-      - railway-var
-      - config-file
-    scopes:
-      - staging
-      - prod
-    storage: shared
-    requirement: required
-    purposes:
-      - deploy
-      - config
-    validation:
-      kind: enum
-      values:
-        - treeseed_control_plane
-        - hosted_project
-        - self_hosted_project
-    sourcePriority:
-      - machine-config
-      - process-env
-      - treeseed.site.yaml
-    defaultValueRef: hostingKindDefault
-  TREESEED_HOSTING_REGISTRATION:
-    label: Treeseed hosting registration mode
-    group: hosting
-    description: Controls whether a self-hosted project should register itself with the market control plane or remain completely standalone.
-    howToGet: Treeseed can derive this from the hosting block in treeseed.site.yaml.
-    sensitivity: plain
-    targets:
-      - github-variable
-      - railway-var
-      - config-file
-    scopes:
-      - staging
-      - prod
-    storage: shared
-    requirement: required
-    purposes:
-      - deploy
-      - config
-    validation:
-      kind: enum
-      values:
-        - optional
-        - none
-    sourcePriority:
-      - machine-config
-      - process-env
-      - treeseed.site.yaml
-    defaultValueRef: hostingRegistrationDefault
-  TREESEED_CENTRAL_MARKET_API_BASE_URL:
-    label: Treeseed central API base URL
-    group: hosting
-    description: Base URL for the always-available central TreeSeed market used when no team-specific specialized market is selected.
-    howToGet: The production TreeSeed market defaults to https://api.treeseed.dev. Set this only when an environment should use another central-compatible market endpoint.
-    sensitivity: plain
-    targets:
-      - github-variable
-      - railway-var
-      - config-file
-    scopes:
-      - staging
-      - prod
-    storage: shared
-    requirement: optional
-    purposes:
-      - deploy
-      - config
-    validation:
-      kind: url
-    sourcePriority:
-      - machine-config
-      - process-env
-      - treeseed.site.yaml
-    defaultValueRef: centralMarketBaseUrlDefault
-  TREESEED_API_BASE_URL:
-    label: Treeseed default API base URL
-    group: hosting
-    description: Primary market control-plane API URL used by hosted and optionally registered self-hosted project platforms.
-    howToGet: The production TreeSeed market defaults to https://api.treeseed.dev. Set this to a staging, enterprise, or specialized market endpoint when that environment should register with a different market.
-    sensitivity: plain
-    targets:
-      - github-variable
-      - railway-var
-    scopes:
-      - staging
-      - prod
-    storage: shared
-    requirement: optional
-    purposes:
-      - deploy
-      - config
-    validation:
-      kind: url
-    sourcePriority:
-      - machine-config
-      - process-env
-      - treeseed.site.yaml
-    relevanceRef: projectRegistrationEnabled
-    requiredWhenRef: projectRegistrationEnabled
-    defaultValueRef: marketBaseUrlDefault
-  TREESEED_DATABASE_URL:
-    label: Treeseed PostgreSQL database URL
-    group: hosting
-    cluster: hosting:treeseed-control-plane
-    visibility: system
-    description: PostgreSQL connection URL for Treeseed control-plane tables. Local development derives this from the managed local API Postgres configuration; hosted environments receive the reconciled Railway PostgreSQL connection URL. Browser/UI code must never receive this value.
-    howToGet: For local development, Treeseed derives this from the local API Postgres port and database defaults. For staging and production, provision the managed Treeseed PostgreSQL resource through Treeseed/Railway reconciliation and store the generated connection URL as a service secret.
-    sensitivity: secret
-    targets:
-      - local-runtime
-      - railway-secret
-    serviceTargets:
-      - api
-      - operationsRunner
-    scopes:
-      - local
-      - staging
-      - prod
-    storage: scoped
-    requirement: optional
-    purposes:
-      - deploy
-      - config
-    validation:
-      kind: url
-    sourcePriority:
-      - generated
-      - machine-config
-      - process-env
-      - treeseed.site.yaml
-    localDefaultValueRef: localApiDatabaseUrlDefault
-  TREESEED_PLATFORM_RUNNER_SECRET:
-    label: Treeseed operations runner secret
-    group: hosting
-    cluster: hosting:operations-runner
-    visibility: system
-    description: Bearer credential used only by the TreeSeed-owned Treeseed operations runner to claim and update platform operation jobs.
-    howToGet: Generate a strong secret with `openssl rand -base64 48` and store it through `treeseed config` for staging and production.
-    sensitivity: secret
-    targets:
-      - github-secret
-      - railway-secret
-    serviceTargets:
-      - api
-      - operationsRunner
-    scopes:
-      - staging
-      - prod
-    storage: scoped
-    requirement: optional
-    purposes:
-      - deploy
-      - config
-    validation:
-      kind: nonempty
-      minLength: 24
-    sourcePriority:
-      - machine-config
-      - process-env
-    defaultValueRef: generatedSecret
-  TREESEED_PLATFORM_RUNNER_ID:
-    label: Treeseed operations runner ID
-    group: hosting
-    cluster: hosting:operations-runner
-    visibility: system
-    description: Stable identity for the TreeSeed-owned Treeseed operations runner service in each environment.
-    howToGet: Treeseed derives this from the environment. Override it only when replacing a runner identity deliberately.
-    sensitivity: plain
-    targets:
-      - railway-var
-    serviceTargets:
-      - operationsRunner
-    scopes:
-      - staging
-      - prod
-    storage: scoped
-    requirement: conditional
-    purposes:
-      - deploy
-      - config
-    validation:
-      kind: nonempty
-    sourcePriority:
-      - machine-config
-      - process-env
-      - treeseed.site.yaml
-    defaultValueRef: platformRunnerIdDefault
-  TREESEED_PLATFORM_RUNNER_DATA_DIR:
-    label: Treeseed operations runner data directory
-    group: hosting
-    cluster: hosting:operations-runner
-    visibility: system
-    description: Writable data directory mounted into the Treeseed operations runner for repository workspaces and operation state.
-    howToGet: Use `/data` for Railway runner services with an attached volume.
-    sensitivity: plain
-    targets:
-      - railway-var
-    serviceTargets:
-      - operationsRunner
-    scopes:
-      - staging
-      - prod
-    storage: scoped
-    requirement: conditional
-    purposes:
-      - deploy
-      - config
-    validation:
-      kind: nonempty
-    sourcePriority:
-      - machine-config
-      - process-env
-      - treeseed.site.yaml
-    defaultValueRef: platformRunnerDataDirDefault
-  TREESEED_PLATFORM_RUNNER_ENVIRONMENT:
-    label: Treeseed operations runner environment
-    group: hosting
-    cluster: hosting:operations-runner
-    visibility: system
-    description: Runtime environment label reported by the Treeseed operations runner in registration and heartbeat records.
-    howToGet: Treeseed derives this from the selected environment.
-    sensitivity: plain
-    targets:
-      - railway-var
-    serviceTargets:
-      - operationsRunner
-    scopes:
-      - staging
-      - prod
-    storage: scoped
-    requirement: conditional
-    purposes:
-      - deploy
-      - config
-    validation:
-      kind: nonempty
-    sourcePriority:
-      - machine-config
-      - process-env
-      - treeseed.site.yaml
-    defaultValueRef: platformRunnerEnvironmentDefault
-  TREESEED_CREDENTIAL_SESSION_SECRET:
-    label: Treeseed credential session secret
-    group: hosting
-    cluster: hosting:treeseed-control-plane
-    visibility: system
-    description: Secret used by the API and operations runner to encrypt provider credential session payloads.
-    howToGet: Generate a strong random secret and store it through `treeseed config` for staging and production.
-    sensitivity: secret
-    targets:
-      - github-secret
-      - railway-secret
-    serviceTargets:
-      - api
-      - operationsRunner
-    scopes:
-      - staging
-      - prod
-    storage: scoped
-    requirement: conditional
-    purposes:
-      - deploy
-      - config
-    validation:
-      kind: nonempty
-      minLength: 24
-    sourcePriority:
-      - machine-config
-      - process-env
-    defaultValueRef: generatedSecret
-  TREESEED_STRIPE_SECRET_KEY:
-    label: Stripe platform secret key
-    group: commerce
-    cluster: hosting:treeseed-control-plane
-    visibility: system
-    description: Platform Stripe secret key used only by the API for Connect onboarding, Product/Price mirror sync, PaymentIntent confirmation, subscriptions, webhook reconciliation, and connected-account refunds.
-    howToGet: "Stripe Dashboard -> Developers -> API keys. Use test mode first. Prefer a restricted key when available with access for Connect accounts, account links, login links, Products, Prices, PaymentIntents, Customers, Subscriptions, Refunds, and webhook event reads as needed. Store with `npx trsd config set TREESEED_STRIPE_SECRET_KEY --environment local|staging|prod`; never place Stripe secret keys in plaintext env files and never request vendor-provided Stripe secret keys."
-    sensitivity: secret
-    targets:
-      - local-runtime
-      - railway-secret
-    serviceTargets:
-      - api
-    scopes:
-      - local
-      - staging
-      - prod
-    storage: scoped
-    requirement: optional
-    purposes:
-      - deploy
-      - config
-    validation:
-      kind: nonempty
-    sourcePriority:
-      - machine-config
-      - process-env
-  TREESEED_STRIPE_PUBLISHABLE_KEY:
-    label: Stripe publishable key
-    group: commerce
-    cluster: hosting:treeseed-control-plane
-    visibility: system
-    description: Platform Stripe publishable key returned by `/v1/commerce/stripe/config` for root-market Stripe Elements checkout surfaces. Admin must not initialize Stripe Elements.
-    howToGet: "Stripe Dashboard -> Developers -> API keys. Copy the publishable key for the same test/live mode as TREESEED_STRIPE_SECRET_KEY and store it with `npx trsd config set TREESEED_STRIPE_PUBLISHABLE_KEY --environment local|staging|prod`."
-    sensitivity: plain
-    targets:
-      - local-runtime
-      - railway-var
-      - config-file
-    serviceTargets:
-      - api
-    scopes:
-      - local
-      - staging
-      - prod
-    storage: shared
-    requirement: optional
-    purposes:
-      - deploy
-      - config
-    validation:
-      kind: nonempty
-    sourcePriority:
-      - machine-config
-      - process-env
-      - treeseed.site.yaml
-  TREESEED_STRIPE_WEBHOOK_SECRET:
-    label: Stripe webhook signing secret
-    group: commerce
-    cluster: hosting:treeseed-control-plane
-    visibility: system
-    description: Stripe webhook endpoint signing secret used by the API to verify connected-account payment and subscription events.
-    howToGet: "Stripe Dashboard -> Developers -> Webhooks. Add endpoint `<TREESEED_API_BASE_URL>/v1/commerce/webhooks/stripe`; for local development use the Stripe CLI to forward to the local API. Subscribe to payment_intent.succeeded, payment_intent.payment_failed, payment_intent.canceled, customer.subscription.created, customer.subscription.updated, customer.subscription.deleted, invoice.payment_succeeded, and invoice.payment_failed. Copy the signing secret and store it with `npx trsd config set TREESEED_STRIPE_WEBHOOK_SECRET --environment local|staging|prod`."
-    sensitivity: secret
-    targets:
-      - local-runtime
-      - railway-secret
-    serviceTargets:
-      - api
-    scopes:
-      - local
-      - staging
-      - prod
-    storage: scoped
-    requirement: optional
-    purposes:
-      - deploy
-      - config
-    validation:
-      kind: nonempty
-    sourcePriority:
-      - machine-config
-      - process-env
-  TREESEED_STRIPE_MODE:
-    label: Stripe mode
-    group: commerce
-    cluster: hosting:treeseed-control-plane
-    visibility: system
-    description: Stripe environment mode used by marketplace seller onboarding, mirror sync, checkout, webhooks, subscriptions, and refunds. Defaults to test for local and staging.
-    howToGet: "Set `test` for local and staging with `npx trsd config set TREESEED_STRIPE_MODE test --environment local|staging`. Set `live` in production only after Connect onboarding, webhook verification, local/staging marketplace acceptance, and Stripe production readiness are complete."
-    sensitivity: plain
-    targets:
-      - local-runtime
-      - railway-var
-      - config-file
-    serviceTargets:
-      - api
-    scopes:
-      - local
-      - staging
-      - prod
-    storage: shared
-    requirement: optional
-    purposes:
-      - deploy
-      - config
-    validation:
-      kind: enum
-      values:
-        - test
-        - live
-    sourcePriority:
-      - machine-config
-      - process-env
-      - treeseed.site.yaml
-  TREESEED_STRIPE_CONNECT_ACCOUNT_TYPE:
-    label: Stripe Connect account type
-    group: commerce
-    cluster: hosting:treeseed-control-plane
-    visibility: system
-    description: Canonical Stripe Connect account model for approved vendor onboarding. TreeSeed creates hosted onboarding links and vendors never provide raw Stripe secret keys.
-    howToGet: "Keep this set to `express` with `npx trsd config set TREESEED_STRIPE_CONNECT_ACCOUNT_TYPE express --environment local|staging|prod` unless a future documented phase changes the Connect account model."
-    sensitivity: plain
-    targets:
-      - local-runtime
-      - railway-var
-      - config-file
-    serviceTargets:
-      - api
-    scopes:
-      - local
-      - staging
-      - prod
-    storage: shared
-    requirement: optional
-    purposes:
-      - deploy
-      - config
-    validation:
-      kind: enum
-      values:
-        - express
-    sourcePriority:
-      - machine-config
-      - process-env
-      - treeseed.site.yaml
-  TREESEED_CATALOG_MARKET_API_BASE_URLS:
-    label: Treeseed catalog API URLs
-    group: hosting
-    description: Comma-separated API base URLs that contribute templates, knowledge packs, and shared resources to the integrated catalog.
-    howToGet: Start with the production TreeSeed market at https://api.treeseed.dev and add specialized team or enterprise API URLs as needed.
-    sensitivity: plain
-    targets:
-      - github-variable
-      - railway-var
-      - config-file
-    scopes:
-      - staging
-      - prod
-    storage: shared
-    requirement: optional
-    purposes:
-      - deploy
-      - config
-    validation:
-      kind: string
-    sourcePriority:
-      - machine-config
-      - process-env
-      - treeseed.site.yaml
-    defaultValueRef: catalogMarketBaseUrlsDefault
-  TREESEED_HOSTING_TEAM_ID:
-    label: Hosted team ID
-    group: hosting
-    description: Team identifier used by hosted or registered project platforms when they publish infra metadata, register agent pools, or resolve team-scoped content.
-    howToGet: Treeseed defaults this to the site slug unless you need a different hosted team identifier.
-    sensitivity: plain
-    targets:
-      - github-variable
-      - railway-var
-    scopes:
-      - staging
-      - prod
-    storage: shared
-    requirement: conditional
-    purposes:
-      - deploy
-      - config
-    validation:
-      kind: nonempty
-    sourcePriority:
-      - machine-config
-      - process-env
-    relevanceRef: projectRegistrationEnabled
-    requiredWhenRef: projectRegistrationEnabled
-    defaultValueRef: hostingTeamIdDefault
-  TREESEED_PROJECT_ID:
-    label: Hosted project ID
-    group: hosting
-    description: Stable project identifier used by hosted or registered self-hosted project platforms for dispatch, deploy reporting, and agent-pool registration.
-    howToGet: Treeseed defaults this to the site slug unless you need a different hosted project identifier.
-    sensitivity: plain
-    targets:
-      - github-variable
-      - railway-var
-    scopes:
-      - staging
-      - prod
-    storage: shared
-    requirement: conditional
-    purposes:
-      - deploy
-      - config
-    validation:
-      kind: nonempty
-    sourcePriority:
-      - machine-config
-      - process-env
-    relevanceRef: projectRegistrationEnabled
-    requiredWhenRef: projectRegistrationEnabled
-    defaultValueRef: hostingProjectIdDefault
-  TREESEED_SECRET_CAPABILITY_PROOF_REPO:
-    label: Secret capability proof repository
-    group: secrets-capability
-    description: GitHub repository slug used by guarded secret-capability live proof planning.
-    howToGet: Set to owner/name for a dedicated test repository when running the optional plan-only live proof.
-    sensitivity: plain
-    targets:
-      - local-runtime
-    scopes:
-      - local
-      - staging
-      - prod
-    storage: scoped
-    requirement: optional
-    purposes:
-      - dev
-      - config
-    validation:
-      kind: nonempty
-    sourcePriority:
-      - machine-config
-      - process-env
-  TREESEED_SECRET_CAPABILITY_PROOF_WORKFLOW:
-    label: Secret capability proof workflow
-    group: secrets-capability
-    description: Workflow file name used by guarded secret-capability live proof planning.
-    howToGet: Set to the allowlisted workflow file in the proof repository, such as secret-capability-proof.yml.
-    sensitivity: plain
-    targets:
-      - local-runtime
-    scopes:
-      - local
-      - staging
-      - prod
-    storage: scoped
-    requirement: optional
-    purposes:
-      - dev
-      - config
-    validation:
-      kind: nonempty
-    sourcePriority:
-      - machine-config
-      - process-env
-  TREESEED_SECRET_CAPABILITY_PROOF_REF:
-    label: Secret capability proof ref
-    group: secrets-capability
-    description: Branch or ref used by guarded secret-capability live proof planning.
-    howToGet: Set to the protected branch or ref used for the plan-only proof.
-    sensitivity: plain
-    targets:
-      - local-runtime
-    scopes:
-      - local
-      - staging
-      - prod
-    storage: scoped
-    requirement: optional
-    purposes:
-      - dev
-      - config
-    validation:
-      kind: nonempty
-    sourcePriority:
-      - machine-config
-      - process-env
-  TREESEED_CAPACITY_ACCEPTANCE_API_URL:
-    label: Capacity acceptance API URL
-    group: capacity-provider
-    description: Market API base URL used by live capacity runtime acceptance proof.
-    howToGet: Set to the staging or local API base URL when running capacity provider live acceptance.
-    sensitivity: plain
-    targets:
-      - local-runtime
-    scopes:
-      - local
-      - staging
-      - prod
-    storage: scoped
-    requirement: optional
-    purposes:
-      - dev
-      - config
-    validation:
-      kind: url
-    sourcePriority:
-      - machine-config
-      - process-env
-  TREESEED_CAPACITY_ACCEPTANCE_ADMIN_TOKEN:
-    label: Capacity acceptance admin token
-    group: capacity-provider
-    description: Admin bearer token used only by live capacity runtime acceptance proof.
-    howToGet: Create a scoped test/admin token for the acceptance environment and store it through Treeseed config.
-    sensitivity: secret
-    targets:
-      - local-runtime
-    scopes:
-      - local
-      - staging
-      - prod
-    storage: scoped
-    requirement: optional
-    purposes:
-      - dev
-      - config
-    validation:
-      kind: nonempty
-      minLength: 8
-    sourcePriority:
-      - machine-config
-      - process-env
-  TREESEED_CAPACITY_ACCEPTANCE_TEAM_ID:
-    label: Capacity acceptance team ID
-    group: capacity-provider
-    description: Team id used by live capacity runtime acceptance proof.
-    howToGet: Use a dedicated test team id in the target Market environment.
-    sensitivity: plain
-    targets:
-      - local-runtime
-    scopes:
-      - local
-      - staging
-      - prod
-    storage: scoped
-    requirement: optional
-    purposes:
-      - dev
-      - config
-    validation:
-      kind: nonempty
-    sourcePriority:
-      - machine-config
-      - process-env
-  TREESEED_CAPACITY_ACCEPTANCE_PROJECT_ID:
-    label: Capacity acceptance project ID
-    group: capacity-provider
-    description: Project id used by live capacity runtime acceptance proof.
-    howToGet: Use a dedicated test project id in the target Market environment.
-    sensitivity: plain
-    targets:
-      - local-runtime
-    scopes:
-      - local
-      - staging
-      - prod
-    storage: scoped
-    requirement: optional
-    purposes:
-      - dev
-      - config
-    validation:
-      kind: nonempty
-    sourcePriority:
-      - machine-config
-      - process-env
-  TREESEED_CAPACITY_ACCEPTANCE_PROVIDER_ID:
-    label: Capacity acceptance provider ID
-    group: capacity-provider
-    description: Provider id used by live capacity runtime acceptance proof.
-    howToGet: Use the provider id assigned to the test capacity provider.
-    sensitivity: plain
-    targets:
-      - local-runtime
-    scopes:
-      - local
-      - staging
-      - prod
-    storage: scoped
-    requirement: optional
-    purposes:
-      - dev
-      - config
-    validation:
-      kind: nonempty
-    sourcePriority:
-      - machine-config
-      - process-env
-  TREESEED_CAPACITY_ACCEPTANCE_AGENT_CLASS_ID:
-    label: Capacity acceptance agent class ID
-    group: capacity-provider
-    description: Agent class id used by live capacity runtime acceptance proof.
-    howToGet: Use an agent class available to the acceptance test project.
-    sensitivity: plain
-    targets:
-      - local-runtime
-    scopes:
-      - local
-      - staging
-      - prod
-    storage: scoped
-    requirement: optional
-    purposes:
-      - dev
-      - config
-    validation:
-      kind: nonempty
-    sourcePriority:
-      - machine-config
-      - process-env
-  TREESEED_CAPACITY_ACCEPTANCE_MODE:
-    label: Capacity acceptance mode
-    group: capacity-provider
-    description: Work mode requested by live capacity runtime acceptance proof.
-    howToGet: Leave unset to use planning, or set a supported project mode for the proof.
-    sensitivity: plain
-    targets:
-      - local-runtime
-    scopes:
-      - local
-      - staging
-      - prod
-    storage: scoped
-    requirement: optional
-    purposes:
-      - dev
-      - config
-    validation:
-      kind: nonempty
-    sourcePriority:
-      - machine-config
-      - process-env