@treeseed/sdk 0.12.62 → 0.13.0-rc.10

package/drizzle/market/0011_github_app_adapter.sql

@@ -1,47 +0,0 @@
-CREATE TABLE IF NOT EXISTS "github_app_installation_records" (
-	"id" text PRIMARY KEY NOT NULL,
-	"team_id" text NOT NULL,
-	"installation_id" text NOT NULL,
-	"account_login" text,
-	"account_id" text,
-	"account_type" text,
-	"status" text DEFAULT 'active' NOT NULL,
-	"permissions_json" text DEFAULT '{}' NOT NULL,
-	"repository_selection" text,
-	"drift_code" text,
-	"observed_at" text,
-	"revoked_at" text,
-	"suspended_at" text,
-	"metadata_json" text DEFAULT '{}' NOT NULL,
-	"created_at" text NOT NULL,
-	"updated_at" text NOT NULL
-);
-CREATE INDEX IF NOT EXISTS "idx_github_app_installations_team_status" ON "github_app_installation_records" ("team_id","status","updated_at");
-CREATE UNIQUE INDEX IF NOT EXISTS "idx_github_app_installations_team_installation" ON "github_app_installation_records" ("team_id","installation_id");
-
-CREATE TABLE IF NOT EXISTS "github_app_token_issuance_records" (
-	"id" text PRIMARY KEY NOT NULL,
-	"team_id" text NOT NULL,
-	"project_id" text,
-	"assignment_id" text,
-	"provider_id" text,
-	"workday_id" text,
-	"operation_id" text,
-	"repository" text NOT NULL,
-	"installation_id" text NOT NULL,
-	"status" text DEFAULT 'issued' NOT NULL,
-	"token_prefix" text,
-	"token_hash" text,
-	"permissions_json" text DEFAULT '{}' NOT NULL,
-	"allowed_operations_json" text DEFAULT '[]' NOT NULL,
-	"expires_at" text,
-	"issued_at" text,
-	"revoked_at" text,
-	"fail_closed_code" text,
-	"metadata_json" text DEFAULT '{}' NOT NULL,
-	"created_at" text NOT NULL,
-	"updated_at" text NOT NULL
-);
-CREATE INDEX IF NOT EXISTS "idx_github_app_token_issuance_project" ON "github_app_token_issuance_records" ("team_id","project_id","status","updated_at");
-CREATE INDEX IF NOT EXISTS "idx_github_app_token_issuance_operation" ON "github_app_token_issuance_records" ("operation_id","status","expires_at");
-CREATE INDEX IF NOT EXISTS "idx_github_app_token_issuance_assignment" ON "github_app_token_issuance_records" ("assignment_id","status","expires_at");

package/drizzle/market/0012_workday_test_runs.sql

@@ -1,44 +0,0 @@
-CREATE TABLE IF NOT EXISTS "workday_test_runs" (
-	"id" text PRIMARY KEY NOT NULL,
-	"team_id" text NOT NULL,
-	"capacity_provider_id" text,
-	"scenario_id" text DEFAULT 'portfolio-local' NOT NULL,
-	"status" text DEFAULT 'queued' NOT NULL,
-	"environment" text DEFAULT 'local' NOT NULL,
-	"requested_by_id" text,
-	"parameters_json" text DEFAULT '{}' NOT NULL,
-	"summary_json" text DEFAULT '{}' NOT NULL,
-	"metrics_json" text DEFAULT '{}' NOT NULL,
-	"expected_json" text DEFAULT '{}' NOT NULL,
-	"actual_json" text DEFAULT '{}' NOT NULL,
-	"report_refs_json" text DEFAULT '{}' NOT NULL,
-	"error_json" text DEFAULT '{}' NOT NULL,
-	"started_at" text,
-	"completed_at" text,
-	"created_at" text NOT NULL,
-	"updated_at" text NOT NULL
-);
-CREATE INDEX IF NOT EXISTS "idx_workday_test_runs_team_status" ON "workday_test_runs" ("team_id","status","updated_at");
-CREATE INDEX IF NOT EXISTS "idx_workday_test_runs_provider" ON "workday_test_runs" ("capacity_provider_id","updated_at");
-
-CREATE TABLE IF NOT EXISTS "workday_test_events" (
-	"id" text PRIMARY KEY NOT NULL,
-	"run_id" text NOT NULL,
-	"team_id" text NOT NULL,
-	"project_id" text,
-	"workday_id" text,
-	"assignment_id" text,
-	"mode_run_id" text,
-	"event_index" integer NOT NULL,
-	"event_type" text NOT NULL,
-	"status" text DEFAULT 'recorded' NOT NULL,
-	"title" text,
-	"message" text,
-	"parameters_json" text DEFAULT '{}' NOT NULL,
-	"context_json" text DEFAULT '{}' NOT NULL,
-	"refs_json" text DEFAULT '{}' NOT NULL,
-	"metadata_json" text DEFAULT '{}' NOT NULL,
-	"created_at" text NOT NULL
-);
-CREATE INDEX IF NOT EXISTS "idx_workday_test_events_run_index" ON "workday_test_events" ("run_id","event_index");
-CREATE INDEX IF NOT EXISTS "idx_workday_test_events_project" ON "workday_test_events" ("project_id","created_at");

package/drizzle/market/0013_runtime_task_lifecycle.sql

@@ -1,39 +0,0 @@
-CREATE TABLE IF NOT EXISTS "runtime_tasks" (
-	"id" text PRIMARY KEY NOT NULL,
-	"project_id" text NOT NULL,
-	"work_day_id" text NOT NULL,
-	"agent_id" text NOT NULL,
-	"type" text NOT NULL,
-	"idempotency_key" text NOT NULL UNIQUE,
-	"payload_json" text NOT NULL,
-	"state" text NOT NULL,
-	"claimed_by" text,
-	"claimed_at" text,
-	"lease_expires_at" text,
-	"attempts" integer DEFAULT 0 NOT NULL,
-	"created_at" text NOT NULL,
-	"updated_at" text NOT NULL
-);
-CREATE INDEX IF NOT EXISTS "idx_runtime_tasks_project_workday_state" ON "runtime_tasks" ("project_id","work_day_id","state","created_at");
-
-CREATE TABLE IF NOT EXISTS "runtime_task_events" (
-	"id" text PRIMARY KEY NOT NULL,
-	"task_id" text NOT NULL,
-	"kind" text NOT NULL,
-	"data_json" text NOT NULL,
-	"actor" text,
-	"created_at" text NOT NULL
-);
-CREATE INDEX IF NOT EXISTS "idx_runtime_task_events_task_created" ON "runtime_task_events" ("task_id","created_at");
-
-CREATE TABLE IF NOT EXISTS "runtime_task_outputs" (
-	"id" text PRIMARY KEY NOT NULL,
-	"task_id" text NOT NULL,
-	"output_json" text NOT NULL,
-	"output_ref" text,
-	"summary_json" text,
-	"actor" text,
-	"created_at" text NOT NULL,
-	"updated_at" text NOT NULL
-);
-CREATE INDEX IF NOT EXISTS "idx_runtime_task_outputs_task_created" ON "runtime_task_outputs" ("task_id","created_at");

package/drizzle/market/0014_governance_pipeline.sql

@@ -1,189 +0,0 @@
-CREATE TABLE IF NOT EXISTS "team_governance_policies" (
-	"id" text PRIMARY KEY NOT NULL,
-	"team_id" text NOT NULL,
-	"scope" text DEFAULT 'team' NOT NULL,
-	"provider_id" text NOT NULL,
-	"provider_version" text DEFAULT '1' NOT NULL,
-	"config_json" text DEFAULT '{}' NOT NULL,
-	"active" integer DEFAULT 1 NOT NULL,
-	"created_by" text,
-	"created_at" text NOT NULL,
-	"updated_at" text NOT NULL,
-	"superseded_at" text
-);
-CREATE INDEX IF NOT EXISTS "idx_team_governance_policies_team_scope" ON "team_governance_policies" ("team_id","scope","active");
-
-CREATE TABLE IF NOT EXISTS "project_governance_policies" (
-	"id" text PRIMARY KEY NOT NULL,
-	"team_id" text NOT NULL,
-	"project_id" text NOT NULL,
-	"provider_id" text NOT NULL,
-	"provider_version" text DEFAULT '1' NOT NULL,
-	"config_json" text DEFAULT '{}' NOT NULL,
-	"active" integer DEFAULT 1 NOT NULL,
-	"created_by" text,
-	"created_at" text NOT NULL,
-	"updated_at" text NOT NULL,
-	"superseded_at" text
-);
-CREATE INDEX IF NOT EXISTS "idx_project_governance_policies_project" ON "project_governance_policies" ("project_id","active");
-
-CREATE TABLE IF NOT EXISTS "governance_proposals" (
-	"id" text PRIMARY KEY NOT NULL,
-	"team_id" text NOT NULL,
-	"project_id" text,
-	"scope" text DEFAULT 'project' NOT NULL,
-	"status" text DEFAULT 'draft' NOT NULL,
-	"title" text NOT NULL,
-	"summary" text NOT NULL,
-	"body" text NOT NULL,
-	"proposal_type" text DEFAULT 'implementation' NOT NULL,
-	"content_proposal_slug" text,
-	"content_decision_slug" text,
-	"active_version" integer DEFAULT 1 NOT NULL,
-	"active_content_hash" text NOT NULL,
-	"governance_provider_id" text NOT NULL,
-	"governance_provider_version" text DEFAULT '1' NOT NULL,
-	"governance_policy_id" text,
-	"decision_id" text,
-	"voting_starts_at" text,
-	"voting_ends_at" text,
-	"closed_at" text,
-	"closed_reason" text,
-	"created_by_type" text DEFAULT 'user' NOT NULL,
-	"created_by_id" text,
-	"metadata_json" text DEFAULT '{}' NOT NULL,
-	"created_at" text NOT NULL,
-	"updated_at" text NOT NULL
-);
-CREATE INDEX IF NOT EXISTS "idx_governance_proposals_team_status" ON "governance_proposals" ("team_id","status","updated_at");
-CREATE INDEX IF NOT EXISTS "idx_governance_proposals_project_status" ON "governance_proposals" ("project_id","status","updated_at");
-CREATE INDEX IF NOT EXISTS "idx_governance_proposals_scope_status" ON "governance_proposals" ("scope","status","updated_at");
-CREATE INDEX IF NOT EXISTS "idx_governance_proposals_content_slug" ON "governance_proposals" ("content_proposal_slug");
-
-CREATE TABLE IF NOT EXISTS "governance_proposal_versions" (
-	"id" text PRIMARY KEY NOT NULL,
-	"proposal_id" text NOT NULL,
-	"version" integer NOT NULL,
-	"title" text NOT NULL,
-	"summary" text NOT NULL,
-	"body" text NOT NULL,
-	"content_hash" text NOT NULL,
-	"change_reason" text,
-	"created_by_type" text DEFAULT 'user' NOT NULL,
-	"created_by_id" text,
-	"created_at" text NOT NULL
-);
-CREATE UNIQUE INDEX IF NOT EXISTS "idx_governance_proposal_versions_unique" ON "governance_proposal_versions" ("proposal_id","version");
-CREATE INDEX IF NOT EXISTS "idx_governance_proposal_versions_proposal" ON "governance_proposal_versions" ("proposal_id","created_at");
-
-CREATE TABLE IF NOT EXISTS "governance_electorate_snapshots" (
-	"id" text PRIMARY KEY NOT NULL,
-	"proposal_id" text NOT NULL,
-	"proposal_version" integer NOT NULL,
-	"provider_id" text NOT NULL,
-	"provider_version" text DEFAULT '1' NOT NULL,
-	"rule_snapshot_json" text DEFAULT '{}' NOT NULL,
-	"chambers_json" text DEFAULT '[]' NOT NULL,
-	"eligible_voters_json" text DEFAULT '[]' NOT NULL,
-	"delegations_json" text DEFAULT '[]' NOT NULL,
-	"eligible_weight_total" real DEFAULT 0 NOT NULL,
-	"active_weight_total" real DEFAULT 0 NOT NULL,
-	"created_at" text NOT NULL
-);
-CREATE INDEX IF NOT EXISTS "idx_governance_electorate_snapshots_proposal" ON "governance_electorate_snapshots" ("proposal_id","proposal_version");
-
-CREATE TABLE IF NOT EXISTS "governance_proposal_votes" (
-	"id" text PRIMARY KEY NOT NULL,
-	"proposal_id" text NOT NULL,
-	"proposal_version" integer NOT NULL,
-	"user_id" text NOT NULL,
-	"vote" text NOT NULL,
-	"reason" text,
-	"chamber_votes_json" text DEFAULT '{}' NOT NULL,
-	"effective_weights_json" text DEFAULT '{}' NOT NULL,
-	"delegated_from_json" text DEFAULT '[]' NOT NULL,
-	"created_at" text NOT NULL,
-	"updated_at" text NOT NULL
-);
-CREATE UNIQUE INDEX IF NOT EXISTS "idx_governance_proposal_votes_once" ON "governance_proposal_votes" ("proposal_id","proposal_version","user_id");
-CREATE INDEX IF NOT EXISTS "idx_governance_proposal_votes_proposal" ON "governance_proposal_votes" ("proposal_id","proposal_version","vote");
-
-CREATE TABLE IF NOT EXISTS "governance_vote_events" (
-	"id" text PRIMARY KEY NOT NULL,
-	"proposal_id" text NOT NULL,
-	"proposal_version" integer NOT NULL,
-	"user_id" text NOT NULL,
-	"prior_vote" text,
-	"next_vote" text NOT NULL,
-	"reason" text,
-	"effective_weights_json" text DEFAULT '{}' NOT NULL,
-	"created_at" text NOT NULL
-);
-CREATE INDEX IF NOT EXISTS "idx_governance_vote_events_proposal" ON "governance_vote_events" ("proposal_id","proposal_version","created_at");
-
-CREATE TABLE IF NOT EXISTS "governance_delegations" (
-	"id" text PRIMARY KEY NOT NULL,
-	"team_id" text NOT NULL,
-	"scope" text DEFAULT 'team' NOT NULL,
-	"from_user_id" text NOT NULL,
-	"to_user_id" text NOT NULL,
-	"chambers_json" text DEFAULT '[]' NOT NULL,
-	"status" text DEFAULT 'active' NOT NULL,
-	"reason" text,
-	"created_at" text NOT NULL,
-	"revoked_at" text,
-	"expires_at" text,
-	"metadata_json" text DEFAULT '{}' NOT NULL
-);
-CREATE INDEX IF NOT EXISTS "idx_governance_delegations_team_status" ON "governance_delegations" ("team_id","status");
-CREATE INDEX IF NOT EXISTS "idx_governance_delegations_from" ON "governance_delegations" ("from_user_id","status");
-CREATE INDEX IF NOT EXISTS "idx_governance_delegations_to" ON "governance_delegations" ("to_user_id","status");
-
-CREATE TABLE IF NOT EXISTS "governance_decisions" (
-	"id" text PRIMARY KEY NOT NULL,
-	"team_id" text NOT NULL,
-	"project_id" text,
-	"proposal_id" text NOT NULL,
-	"proposal_version" integer NOT NULL,
-	"proposal_content_hash" text NOT NULL,
-	"status" text DEFAULT 'creating' NOT NULL,
-	"title" text NOT NULL,
-	"summary" text NOT NULL,
-	"content_decision_slug" text,
-	"governance_provider_id" text NOT NULL,
-	"governance_rule_json" text DEFAULT '{}' NOT NULL,
-	"electorate_snapshot_id" text,
-	"vote_result_json" text DEFAULT '{}' NOT NULL,
-	"voter_reasons_json" text DEFAULT '[]' NOT NULL,
-	"proposal_snapshot_json" text DEFAULT '{}' NOT NULL,
-	"decision_record_json" text DEFAULT '{}' NOT NULL,
-	"created_by_type" text DEFAULT 'system' NOT NULL,
-	"created_by_id" text,
-	"created_at" text NOT NULL,
-	"updated_at" text NOT NULL,
-	"superseded_at" text
-);
-CREATE UNIQUE INDEX IF NOT EXISTS "idx_governance_decisions_proposal" ON "governance_decisions" ("proposal_id");
-CREATE INDEX IF NOT EXISTS "idx_governance_decisions_project_status" ON "governance_decisions" ("project_id","status","updated_at");
-
-CREATE TABLE IF NOT EXISTS "governance_events" (
-	"id" text PRIMARY KEY NOT NULL,
-	"event_type" text NOT NULL,
-	"actor_type" text DEFAULT 'system' NOT NULL,
-	"actor_id" text,
-	"team_id" text NOT NULL,
-	"project_id" text,
-	"proposal_id" text,
-	"decision_id" text,
-	"proposal_version" integer,
-	"prior_state" text,
-	"next_state" text,
-	"message" text,
-	"evidence_json" text DEFAULT '{}' NOT NULL,
-	"created_at" text NOT NULL
-);
-CREATE INDEX IF NOT EXISTS "idx_governance_events_proposal" ON "governance_events" ("proposal_id","created_at");
-CREATE INDEX IF NOT EXISTS "idx_governance_events_decision" ON "governance_events" ("decision_id","created_at");
-CREATE INDEX IF NOT EXISTS "idx_governance_events_team" ON "governance_events" ("team_id","created_at");
-CREATE INDEX IF NOT EXISTS "idx_governance_events_project" ON "governance_events" ("project_id","created_at");

package/drizzle/market/0015_agent_decision_assignment_graphs.sql

@@ -1,60 +0,0 @@
-CREATE TABLE IF NOT EXISTS "structured_agent_estimates" (
-	"id" text PRIMARY KEY NOT NULL,
-	"team_id" text NOT NULL,
-	"project_id" text NOT NULL,
-	"decision_id" text,
-	"proposal_id" text,
-	"work_unit_id" text,
-	"agent_class" text NOT NULL,
-	"agent_id" text,
-	"status" text DEFAULT 'submitted' NOT NULL,
-	"estimate_json" text NOT NULL,
-	"metadata_json" text DEFAULT '{}' NOT NULL,
-	"created_at" text NOT NULL,
-	"accepted_at" text,
-	"rejected_at" text
-);
-CREATE INDEX IF NOT EXISTS "idx_structured_agent_estimates_decision" ON "structured_agent_estimates" ("decision_id","status","created_at");
-
-CREATE TABLE IF NOT EXISTS "decision_assignment_graphs" (
-	"id" text PRIMARY KEY NOT NULL,
-	"team_id" text NOT NULL,
-	"project_id" text NOT NULL,
-	"decision_id" text NOT NULL,
-	"version" integer NOT NULL,
-	"status" text NOT NULL,
-	"active" integer DEFAULT 0 NOT NULL,
-	"graph_json" text NOT NULL,
-	"metadata_json" text DEFAULT '{}' NOT NULL,
-	"compiled_at" text,
-	"created_at" text NOT NULL,
-	"updated_at" text NOT NULL
-);
-CREATE INDEX IF NOT EXISTS "idx_decision_assignment_graphs_decision" ON "decision_assignment_graphs" ("decision_id","active","version");
-
-CREATE TABLE IF NOT EXISTS "deliverable_contracts" (
-	"id" text PRIMARY KEY NOT NULL,
-	"team_id" text NOT NULL,
-	"project_id" text NOT NULL,
-	"decision_id" text NOT NULL,
-	"deliverable_type" text NOT NULL,
-	"status" text NOT NULL,
-	"contract_json" text NOT NULL,
-	"metadata_json" text DEFAULT '{}' NOT NULL,
-	"created_at" text NOT NULL,
-	"updated_at" text NOT NULL
-);
-CREATE INDEX IF NOT EXISTS "idx_deliverable_contracts_decision" ON "deliverable_contracts" ("decision_id","status","deliverable_type");
-
-CREATE TABLE IF NOT EXISTS "deliverable_manifests" (
-	"id" text PRIMARY KEY NOT NULL,
-	"deliverable_contract_id" text NOT NULL,
-	"project_id" text NOT NULL,
-	"decision_id" text NOT NULL,
-	"ready_for_review" integer DEFAULT 0 NOT NULL,
-	"manifest_json" text NOT NULL,
-	"metadata_json" text DEFAULT '{}' NOT NULL,
-	"submitted_at" text,
-	"created_at" text NOT NULL
-);
-CREATE INDEX IF NOT EXISTS "idx_deliverable_manifests_contract" ON "deliverable_manifests" ("deliverable_contract_id","submitted_at");

package/scripts/verify-driver.ts

@@ -1,51 +0,0 @@
-#!/usr/bin/env node
-
-import { existsSync } from 'node:fs';
-import { spawnSync } from 'node:child_process';
-import { dirname, resolve } from 'node:path';
-import { tmpdir } from 'node:os';
-import { fileURLToPath } from 'node:url';
-
-const scriptRoot = dirname(fileURLToPath(import.meta.url));
-const packageRoot = resolve(scriptRoot, '..');
-const sourceEntry = resolve(packageRoot, 'src', 'verification.ts');
-const publishedEntry = resolve(packageRoot, 'dist', 'verification.js');
-const entrypointCheckOnly = process.env.TREESEED_VERIFY_ENTRYPOINT_CHECK === 'true';
-
-function withShortTempEnv() {
-	if (process.platform === 'win32') {
-		return process.env;
-	}
-	const env = { ...process.env };
-	const shortTemp = tmpdir();
-	for (const key of ['TMPDIR', 'TMP', 'TEMP'] as const) {
-		const value = env[key];
-		if (value && value.length > shortTemp.length) {
-			env[key] = shortTemp;
-		}
-	}
-	return env;
-}
-
-if (existsSync(sourceEntry)) {
-	if (entrypointCheckOnly) {
-		process.exit(0);
-	}
-	const result = spawnSync('tsx', [sourceEntry], {
-		cwd: process.cwd(),
-		env: withShortTempEnv(),
-		stdio: 'inherit',
-	});
-	process.exit(result.status ?? 1);
-}
-
-if (existsSync(publishedEntry)) {
-	if (entrypointCheckOnly) {
-		process.exit(0);
-	}
-	const { runTreeseedVerifyDriver } = await import('../dist/verification.js');
-	process.exit(runTreeseedVerifyDriver({ packageRoot: process.cwd() }));
-}
-
-process.stderr.write(`Unable to locate Treeseed SDK verification runtime from ${packageRoot}.\n`);
-process.exit(1);

package/templates/github/deploy-web.workflow.yml

@@ -1,168 +0,0 @@
-name: Treeseed Web Deploy
-
-on:
-  workflow_call:
-    inputs:
-      environment:
-        required: true
-        type: string
-      action_kind:
-        required: true
-        type: string
-      project_id:
-        required: false
-        type: string
-      preview_id:
-        required: false
-        type: string
-  workflow_dispatch:
-    inputs:
-      environment:
-        required: true
-        default: staging
-        type: choice
-        options:
-          - staging
-          - prod
-      action_kind:
-        required: true
-        default: deploy_web
-        type: choice
-        options:
-          - deploy_web
-          - publish_content
-          - monitor
-      project_id:
-        required: false
-        type: string
-      preview_id:
-        required: false
-        type: string
-
-jobs:
-__WORKING_DIRECTORY_BLOCK__  web:
-    runs-on: ubuntu-latest
-    permissions:
-      contents: read
-    environment: ${{ inputs.environment == 'prod' && 'production' || 'staging' }}
-    env:
-      TREESEED_BOOTSTRAP_MODE: auto
-      TREESEED_CLOUDFLARE_API_TOKEN: ${{ secrets.TREESEED_CLOUDFLARE_API_TOKEN }}
-      TREESEED_CLOUDFLARE_ACCOUNT_ID: ${{ vars.TREESEED_CLOUDFLARE_ACCOUNT_ID }}
-      TREESEED_CLOUDFLARE_PAGES_PROJECT_NAME: ${{ vars.TREESEED_CLOUDFLARE_PAGES_PROJECT_NAME }}
-      TREESEED_CLOUDFLARE_PAGES_PREVIEW_PROJECT_NAME: ${{ vars.TREESEED_CLOUDFLARE_PAGES_PREVIEW_PROJECT_NAME }}
-      TREESEED_CONTENT_BUCKET_NAME: ${{ vars.TREESEED_CONTENT_BUCKET_NAME }}
-      TREESEED_CONTENT_BUCKET_BINDING: ${{ vars.TREESEED_CONTENT_BUCKET_BINDING }}
-      TREESEED_FORM_TOKEN_SECRET: ${{ secrets.TREESEED_FORM_TOKEN_SECRET }}
-      TREESEED_EDITORIAL_PREVIEW_SECRET: ${{ secrets.TREESEED_EDITORIAL_PREVIEW_SECRET }}
-      TREESEED_PUBLIC_TURNSTILE_SITE_KEY: ${{ vars.TREESEED_PUBLIC_TURNSTILE_SITE_KEY }}
-      TREESEED_TURNSTILE_SECRET_KEY: ${{ secrets.TREESEED_TURNSTILE_SECRET_KEY }}
-      TREESEED_SMTP_HOST: ${{ vars.TREESEED_SMTP_HOST }}
-      TREESEED_SMTP_PORT: ${{ vars.TREESEED_SMTP_PORT }}
-      TREESEED_SMTP_USERNAME: ${{ vars.TREESEED_SMTP_USERNAME }}
-      TREESEED_SMTP_PASSWORD: ${{ secrets.TREESEED_SMTP_PASSWORD }}
-      TREESEED_SMTP_FROM: ${{ vars.TREESEED_SMTP_FROM }}
-      TREESEED_SMTP_REPLY_TO: ${{ vars.TREESEED_SMTP_REPLY_TO }}
-      TREESEED_SMTP_SECURE: ${{ vars.TREESEED_SMTP_SECURE }}
-      TREESEED_PROJECT_DOMAINS: ${{ vars.TREESEED_PROJECT_DOMAINS }}
-      TREESEED_BETTER_AUTH_SECRET: ${{ secrets.TREESEED_BETTER_AUTH_SECRET }}
-      TREESEED_WEB_SERVICE_SECRET: ${{ secrets.TREESEED_WEB_SERVICE_SECRET }}
-      TREESEED_WEB_ASSERTION_SECRET: ${{ secrets.TREESEED_WEB_ASSERTION_SECRET }}
-      TREESEED_WEB_CSRF_SECRET: ${{ secrets.TREESEED_WEB_CSRF_SECRET }}
-      TREESEED_CREDENTIAL_SESSION_SECRET: ${{ secrets.TREESEED_CREDENTIAL_SESSION_SECRET }}
-      TREESEED_API_WEB_SERVICE_ID: ${{ vars.TREESEED_API_WEB_SERVICE_ID || vars.TREESEED_WEB_SERVICE_ID || 'web' }}
-      TREESEED_API_WEB_SERVICE_SECRET: ${{ secrets.TREESEED_WEB_SERVICE_SECRET || secrets.TREESEED_API_WEB_SERVICE_SECRET }}
-      TREESEED_API_WEB_ASSERTION_SECRET: ${{ secrets.TREESEED_API_WEB_ASSERTION_SECRET || secrets.TREESEED_WEB_ASSERTION_SECRET }}
-      TREESEED_API_AUTH_SECRET: ${{ secrets.TREESEED_API_AUTH_SECRET || secrets.TREESEED_BETTER_AUTH_SECRET }}
-      TREESEED_HOSTED_HUBS_GITHUB_OWNER: ${{ vars.TREESEED_HOSTED_HUBS_GITHUB_OWNER }}
-      TREESEED_HOSTED_HUBS_GITHUB_TOKEN: ${{ secrets.TREESEED_HOSTED_HUBS_GITHUB_TOKEN }}
-      TREESEED_GITHUB_TOKEN: ${{ secrets.TREESEED_HOSTED_HUBS_GITHUB_TOKEN }}
-      GH_TOKEN: ${{ secrets.TREESEED_HOSTED_HUBS_GITHUB_TOKEN }}
-      GITHUB_TOKEN: ${{ secrets.TREESEED_HOSTED_HUBS_GITHUB_TOKEN }}
-      TREESEED_SITE_URL: ${{ vars.TREESEED_SITE_URL }}
-      TREESEED_BETTER_AUTH_URL: ${{ vars.TREESEED_BETTER_AUTH_URL || vars.TREESEED_SITE_URL }}
-      TREESEED_CENTRAL_MARKET_API_BASE_URL: ${{ vars.TREESEED_CENTRAL_MARKET_API_BASE_URL || 'https://api.treeseed.dev' }}
-      TREESEED_API_BASE_URL: ${{ vars.TREESEED_API_BASE_URL || vars.TREESEED_CENTRAL_MARKET_API_BASE_URL || 'https://api.treeseed.dev' }}
-      TREESEED_CATALOG_MARKET_API_BASE_URLS: ${{ vars.TREESEED_CATALOG_MARKET_API_BASE_URLS || vars.TREESEED_API_BASE_URL || vars.TREESEED_CENTRAL_MARKET_API_BASE_URL || 'https://api.treeseed.dev' }}
-      TREESEED_HOSTING_KIND: ${{ vars.TREESEED_HOSTING_KIND }}
-      TREESEED_HOSTING_REGISTRATION: ${{ vars.TREESEED_HOSTING_REGISTRATION }}
-      TREESEED_HOSTING_TEAM_ID: ${{ vars.TREESEED_HOSTING_TEAM_ID }}
-      TREESEED_PROJECT_ID: ${{ inputs.project_id || vars.TREESEED_PROJECT_ID }}
-      TREESEED_WORKFLOW_ACTION: ${{ inputs.action_kind }}
-      TREESEED_WORKFLOW_ENVIRONMENT: ${{ inputs.environment }}
-      TREESEED_WORKFLOW_PLANE: web
-      TREESEED_WORKFLOW_PROJECT: ${{ inputs.project_id || vars.TREESEED_PROJECT_ID }}
-      TREESEED_WORKFLOW_PREVIEW_ID: ${{ inputs.preview_id }}
-    steps:
-      - uses: actions/checkout@v4
-        with:
-          submodules: recursive
-
-      - uses: actions/setup-node@v4
-        with:
-          node-version: 22
-          cache: npm
-          cache-dependency-path: __CACHE_DEPENDENCY_PATH__
-
-      - name: Install dependencies
-        shell: bash
-        run: |
-          set -euo pipefail
-          node <<'NODE'
-          const fs = require('fs');
-          const path = require('path');
-          const packageRoot = 'packages';
-          if (fs.existsSync(packageRoot)) {
-            const localPackageNames = new Set();
-            for (const entry of fs.readdirSync(packageRoot, { withFileTypes: true })) {
-              if (!entry.isDirectory()) continue;
-              const file = path.join(packageRoot, entry.name, 'package.json');
-              if (!fs.existsSync(file)) continue;
-              const manifest = JSON.parse(fs.readFileSync(file, 'utf8'));
-              if (typeof manifest.name === 'string') localPackageNames.add(manifest.name);
-            }
-            for (const entry of fs.readdirSync(packageRoot, { withFileTypes: true })) {
-              if (!entry.isDirectory()) continue;
-              const file = path.join(packageRoot, entry.name, 'package.json');
-              if (!fs.existsSync(file)) continue;
-              const manifest = JSON.parse(fs.readFileSync(file, 'utf8'));
-              let changed = false;
-              if (manifest.scripts?.prepare) {
-                delete manifest.scripts.prepare;
-                changed = true;
-              }
-              for (const section of ['dependencies', 'devDependencies', 'optionalDependencies']) {
-                for (const dependencyName of Object.keys(manifest[section] ?? {})) {
-                  if (dependencyName !== manifest.name && localPackageNames.has(dependencyName)) {
-                    delete manifest[section][dependencyName];
-                    changed = true;
-                  }
-                }
-              }
-              if (changed) fs.writeFileSync(file, `${JSON.stringify(manifest, null, '\t')}\n`);
-            }
-          }
-          NODE
-          npm ci --ignore-scripts
-
-      - name: Build package artifacts
-        shell: bash
-        run: |
-          set -euo pipefail
-          for dir in packages/sdk packages/ui packages/agent packages/core packages/cli; do
-            if test -f "${dir}/package.json"; then npm --prefix "${dir}" run build:dist; fi
-          done
-
-      - name: Run web workflow action
-        timeout-minutes: 30
-        shell: bash
-        run: |
-          set -euo pipefail
-          TIMING_SUMMARY="${RUNNER_TEMP:-/tmp}/treeseed-provider-timing.md"
-          : > "${TIMING_SUMMARY}"
-          export TREESEED_PROVIDER_TIMING_SUMMARY_PATH="${TIMING_SUMMARY}"
-          EXTRA_ARGS=()
-          if [[ -n "${TREESEED_WORKFLOW_PROJECT:-}" ]]; then EXTRA_ARGS+=(--project-id "${TREESEED_WORKFLOW_PROJECT}"); fi
-          if [[ -n "${TREESEED_WORKFLOW_PREVIEW_ID:-}" ]]; then EXTRA_ARGS+=(--preview-id "${TREESEED_WORKFLOW_PREVIEW_ID}"); fi
-          tsx ./packages/sdk/scripts/tenant-workflow-action.ts --action "${TREESEED_WORKFLOW_ACTION}" --environment "${TREESEED_WORKFLOW_ENVIRONMENT}" "${EXTRA_ARGS[@]}"
-          if [[ -n "${GITHUB_STEP_SUMMARY:-}" && -s "${TIMING_SUMMARY}" ]]; then cat "${TIMING_SUMMARY}" >> "${GITHUB_STEP_SUMMARY}"; fi