@treeseed/sdk 0.12.62 → 0.13.0-rc.10

package/dist/capacity-provider.js

@@ -1,727 +0,0 @@
-import {
-  TREESEED_REMOTE_CONTRACT_HEADER,
-  TREESEED_REMOTE_CONTRACT_VERSION
-} from "./remote.js";
-import { parse as parseYaml } from "yaml";
-import {
-  collectTreeseedConfigSeedValues,
-  collectTreeseedEnvironmentContext,
-  resolveTreeseedMachineEnvironmentValues,
-  setTreeseedMachineEnvironmentValue
-} from "./operations/services/config-runtime.js";
-const CAPACITY_PROVIDER_ENDPOINTS = {
-  register: "/v1/provider/register",
-  heartbeat: "/v1/provider/heartbeat",
-  checkIn: "/v1/provider/check-in",
-  sessions: "/v1/provider/sessions",
-  portfolio: "/v1/provider/portfolio",
-  workdays: "/v1/provider/workdays",
-  nextAssignment: "/v1/provider/assignments/next",
-  assignment: (assignmentId) => `/v1/provider/assignments/${encodeURIComponent(assignmentId)}`,
-  assignmentRenew: (assignmentId) => `/v1/provider/assignments/${encodeURIComponent(assignmentId)}/renew`,
-  assignmentReturn: (assignmentId) => `/v1/provider/assignments/${encodeURIComponent(assignmentId)}/return`,
-  assignmentComplete: (assignmentId) => `/v1/provider/assignments/${encodeURIComponent(assignmentId)}/complete`,
-  assignmentFail: (assignmentId) => `/v1/provider/assignments/${encodeURIComponent(assignmentId)}/fail`,
-  assignmentModeRuns: (assignmentId) => `/v1/provider/assignments/${encodeURIComponent(assignmentId)}/mode-runs`,
-  assignmentWorkflowOperationDispatch: (assignmentId, operationId) => `/v1/provider/assignments/${encodeURIComponent(assignmentId)}/workflow-operations/${encodeURIComponent(operationId)}/dispatch`,
-  assignmentExplanation: (assignmentId) => `/v1/provider/assignments/${encodeURIComponent(assignmentId)}/explanation`,
-  usage: "/v1/provider/usage",
-  reports: "/v1/provider/reports"
-};
-const CAPACITY_PROVIDER_SCOPES = [
-  "provider:register",
-  "provider:heartbeat",
-  "provider:portfolio:read",
-  "provider:assignments:read",
-  "provider:assignments:write",
-  "provider:usage:report",
-  "provider:reports:write",
-  "provider:capabilities:write"
-];
-const CAPACITY_PROVIDER_ENV_KEYS = [
-  "TREESEED_MANAGEMENT_API_URL",
-  "TREESEED_MARKET_URL",
-  "TREESEED_MARKET_ID",
-  "TREESEED_MANAGER_ID",
-  "TREESEED_CAPACITY_PROVIDER_ID",
-  "TREESEED_CAPACITY_PROVIDER_TEAM_ID",
-  "TREESEED_CAPACITY_PROVIDER_API_KEY",
-  "TREESEED_PROVIDER_HOST_DATA_DIR",
-  "TREESEED_HOST_CODEX_AUTH_FILE",
-  "TREESEED_PROVIDER_DATA_DIR",
-  "TREESEED_PROVIDER_ENVIRONMENT",
-  "TREESEED_PROVIDER_CAPABILITIES_FILE",
-  "TREESEED_PROVIDER_BUDGET_FILE",
-  "TREESEED_PROVIDER_MAX_CONCURRENT_WORKDAYS",
-  "TREESEED_PROVIDER_MAX_CONCURRENT_RUNNERS",
-  "TREESEED_PROVIDER_DAILY_CREDIT_BUDGET",
-  "TREESEED_PROVIDER_MONTHLY_CREDIT_BUDGET",
-  "TREESEED_PROVIDER_STARTUP_MODE",
-  "TREESEED_CODEX_AUTH_FILE",
-  "TREESEED_CODEX_AUTH_JSON_B64",
-  "TREESEED_CODEX_AUTH_OVERWRITE",
-  "TREESEED_TREEDX_BASE_URL",
-  "TREESEED_TREEDX_URL",
-  "TREESEED_TREEDX_TOKEN",
-  "TREESEED_TREEDX_REPO_ID",
-  "TREESEED_TREEDX_REF",
-  "TREESEED_TREEDX_WORKSPACE_ID",
-  "TREESEED_TREEDX_JWT_ISSUER",
-  "TREESEED_TREEDX_JWT_AUDIENCE",
-  "TREESEED_TREEDX_JWT_HS256_SECRET",
-  "TREESEED_TREEDX_PROXY_ACTOR_ID",
-  "TREESEED_TREEDX_PROXY_TENANT_ID"
-];
-const CAPACITY_PROVIDER_DEPLOYMENT_SERVICE_ROLES = ["api", "manager", "runner"];
-const DEFAULT_CAPACITY_PROVIDER_ROLE_IMAGES = {
-  api: "treeseed/agent-provider-api",
-  manager: "treeseed/agent-manager",
-  runner: "treeseed/agent-runner"
-};
-class CapacityProviderApiError extends Error {
-  constructor(message, status, payload) {
-    super(message);
-    this.status = status;
-    this.payload = payload;
-    this.name = "CapacityProviderApiError";
-  }
-  status;
-  payload;
-}
-function normalizeBaseUrl(value) {
-  const trimmed = value.trim().replace(/\/+$/u, "");
-  if (!trimmed) throw new Error("Capacity provider Market URL is required.");
-  return trimmed;
-}
-function stringValue(value, fallback) {
-  if (typeof value === "string" && value.length > 0) return value;
-  if (typeof value === "number" || typeof value === "boolean") return String(value);
-  return fallback ?? "";
-}
-function objectStringValues(value = {}) {
-  return Object.fromEntries(
-    Object.entries(value).filter(([, entryValue]) => entryValue !== void 0 && entryValue !== null && String(entryValue).length > 0).map(([key, entryValue]) => [key, String(entryValue)])
-  );
-}
-function filterCapacityProviderEnv(value) {
-  const allowed = new Set(CAPACITY_PROVIDER_ENV_KEYS);
-  return Object.fromEntries(
-    Object.entries(value).filter(([key, entryValue]) => allowed.has(key) && typeof entryValue === "string" && entryValue.length > 0)
-  );
-}
-function capacityProviderConfigEntry(id) {
-  return {
-    id,
-    label: id,
-    group: "capacity-provider",
-    description: "Capacity provider launch value.",
-    howToGet: "Created by local seed or stored through trsd config.",
-    sensitivity: id === "TREESEED_CAPACITY_PROVIDER_API_KEY" ? "secret" : "plain",
-    targets: ["local-runtime"],
-    scopes: ["local", "staging", "prod"],
-    storage: "scoped",
-    requirement: "optional",
-    purposes: ["dev", "deploy", "config"]
-  };
-}
-function isRecord(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-function requireString(record, key, label) {
-  const value = record[key];
-  if (typeof value !== "string" || value.length === 0) {
-    throw new Error(`${label} is missing required string field "${key}".`);
-  }
-  return value;
-}
-function requireNumber(record, key, label) {
-  const value = record[key];
-  if (typeof value !== "number" || !Number.isFinite(value)) {
-    throw new Error(`${label} is missing required numeric field "${key}".`);
-  }
-  return value;
-}
-function buildCapacityProviderAuthHeaders(apiKey) {
-  const trimmed = apiKey.trim();
-  if (!trimmed) throw new Error("Capacity provider API key is required.");
-  return {
-    authorization: `Bearer ${trimmed}`
-  };
-}
-function assertCapacityProviderOkEnvelope(value, label = "Capacity provider response") {
-  if (!isRecord(value) || value.ok !== true) {
-    throw new Error(`${label} must be an ok response envelope.`);
-  }
-}
-function assertCapacityProviderRegistrationResponse(value) {
-  assertCapacityProviderOkEnvelope(value, "Capacity provider registration response");
-  const record = value;
-  if (!isRecord(record.provider)) {
-    throw new Error("Capacity provider registration response is missing provider.");
-  }
-  requireString(record.provider, "id", "Capacity provider registration provider");
-  requireString(record.provider, "teamId", "Capacity provider registration provider");
-  requireString(record.provider, "name", "Capacity provider registration provider");
-  requireString(record.provider, "status", "Capacity provider registration provider");
-  requireString(record, "portfolioManifestUrl", "Capacity provider registration response");
-  requireNumber(record, "heartbeatIntervalSeconds", "Capacity provider registration response");
-}
-function assertCapacityProviderPortfolioManifest(value) {
-  if (!isRecord(value)) {
-    throw new Error("Capacity provider portfolio manifest must be an object.");
-  }
-  if (!isRecord(value.team)) {
-    throw new Error("Capacity provider portfolio manifest is missing team.");
-  }
-  requireString(value.team, "id", "Capacity provider portfolio team");
-  requireString(value.team, "slug", "Capacity provider portfolio team");
-  requireString(value.team, "name", "Capacity provider portfolio team");
-  if (!Array.isArray(value.projects)) {
-    throw new Error("Capacity provider portfolio manifest is missing projects.");
-  }
-  for (const [index, project] of value.projects.entries()) {
-    if (!isRecord(project)) throw new Error(`Capacity provider portfolio project ${index} must be an object.`);
-    requireString(project, "id", `Capacity provider portfolio project ${index}`);
-    requireString(project, "slug", `Capacity provider portfolio project ${index}`);
-    requireString(project, "name", `Capacity provider portfolio project ${index}`);
-    if (!isRecord(project.repository)) throw new Error(`Capacity provider portfolio project ${index} is missing repository.`);
-    if (project.repositoryTopology !== void 0) {
-      if (!isRecord(project.repositoryTopology)) {
-        throw new Error(`Capacity provider portfolio project ${index} repositoryTopology must be an object.`);
-      }
-      if (!isRecord(project.repositoryTopology.contentRepository)) {
-        throw new Error(`Capacity provider portfolio project ${index} repositoryTopology is missing contentRepository.`);
-      }
-      if (project.repositoryTopology.contentRepository.accessMode !== "treedx") {
-        throw new Error(`Capacity provider portfolio project ${index} contentRepository must use treedx access.`);
-      }
-      if (!isRecord(project.repositoryTopology.siteRepository)) {
-        throw new Error(`Capacity provider portfolio project ${index} repositoryTopology is missing siteRepository.`);
-      }
-      if (project.repositoryTopology.siteRepository.accessMode !== "filesystem") {
-        throw new Error(`Capacity provider portfolio project ${index} siteRepository must use filesystem access.`);
-      }
-      if (project.repositoryTopology.projectRepository !== void 0 && project.repositoryTopology.projectRepository !== null && (!isRecord(project.repositoryTopology.projectRepository) || project.repositoryTopology.projectRepository.accessMode !== "filesystem")) {
-        throw new Error(`Capacity provider portfolio project ${index} projectRepository must use filesystem access.`);
-      }
-    }
-    if (!isRecord(project.agentSpecs)) throw new Error(`Capacity provider portfolio project ${index} is missing agentSpecs.`);
-    if (!isRecord(project.workPolicy)) throw new Error(`Capacity provider portfolio project ${index} is missing workPolicy.`);
-  }
-}
-function resolveCapacityProviderEnvironment(input) {
-  const env = {
-    TREESEED_MARKET_URL: normalizeBaseUrl(input.marketUrl),
-    TREESEED_MARKET_ID: input.marketId.trim(),
-    TREESEED_MANAGER_ID: input.marketId.trim(),
-    TREESEED_CAPACITY_PROVIDER_API_KEY: input.apiKey.trim(),
-    TREESEED_PROVIDER_DATA_DIR: input.providerDataDir ?? "/data",
-    TREESEED_PROVIDER_ENVIRONMENT: input.providerEnvironment ?? "local"
-  };
-  env.TREESEED_MANAGEMENT_API_URL = env.TREESEED_MARKET_URL || "https://api.treeseed.dev";
-  if (!env.TREESEED_CAPACITY_PROVIDER_API_KEY) throw new Error("Capacity provider API key is required.");
-  if (input.providerId) env.TREESEED_CAPACITY_PROVIDER_ID = input.providerId;
-  if (input.teamId) env.TREESEED_CAPACITY_PROVIDER_TEAM_ID = input.teamId;
-  if (input.providerHostDataDir) env.TREESEED_PROVIDER_HOST_DATA_DIR = input.providerHostDataDir;
-  if (input.capabilitiesFile) env.TREESEED_PROVIDER_CAPABILITIES_FILE = input.capabilitiesFile;
-  if (input.budgetFile) env.TREESEED_PROVIDER_BUDGET_FILE = input.budgetFile;
-  if (input.maxConcurrentWorkdays !== void 0) env.TREESEED_PROVIDER_MAX_CONCURRENT_WORKDAYS = stringValue(input.maxConcurrentWorkdays);
-  if (input.maxConcurrentRunners !== void 0) env.TREESEED_PROVIDER_MAX_CONCURRENT_RUNNERS = stringValue(input.maxConcurrentRunners);
-  if (input.dailyCreditBudget !== void 0) env.TREESEED_PROVIDER_DAILY_CREDIT_BUDGET = stringValue(input.dailyCreditBudget);
-  if (input.monthlyCreditBudget !== void 0) env.TREESEED_PROVIDER_MONTHLY_CREDIT_BUDGET = stringValue(input.monthlyCreditBudget);
-  if (input.codexAuthFile) env.TREESEED_CODEX_AUTH_FILE = input.codexAuthFile;
-  if (input.codexAuthJsonB64) env.TREESEED_CODEX_AUTH_JSON_B64 = input.codexAuthJsonB64;
-  if (input.codexAuthOverwrite !== void 0) env.TREESEED_CODEX_AUTH_OVERWRITE = stringValue(input.codexAuthOverwrite);
-  return env;
-}
-function resolveCapacityProviderLaunchEnvironment(input = {}) {
-  const scope = input.scope === "staging" || input.scope === "prod" ? input.scope : "local";
-  const env = input.env ?? process.env;
-  const overrides = objectStringValues(input.overrides);
-  let configValues = {};
-  let machineValues = {};
-  let source = "process-env";
-  if (input.tenantRoot) {
-    try {
-      configValues = collectTreeseedConfigSeedValues(input.tenantRoot, scope, env);
-      source = "treeseed-config";
-    } catch {
-      configValues = {};
-    }
-    try {
-      machineValues = resolveTreeseedMachineEnvironmentValues(input.tenantRoot, scope, CAPACITY_PROVIDER_ENV_KEYS);
-      source = "treeseed-config";
-    } catch {
-      machineValues = {};
-    }
-  }
-  const values = {
-    ...filterCapacityProviderEnv(configValues),
-    ...filterCapacityProviderEnv(machineValues),
-    ...filterCapacityProviderEnv(env),
-    ...filterCapacityProviderEnv(overrides)
-  };
-  const diagnostic = input.diagnostic === true || values.TREESEED_PROVIDER_STARTUP_MODE === "diagnostic";
-  const resolved = {
-    TREESEED_PROVIDER_DATA_DIR: "/data",
-    TREESEED_PROVIDER_ENVIRONMENT: scope,
-    ...values
-  };
-  if (!resolved.TREESEED_MARKET_ID && resolved.TREESEED_MANAGER_ID) {
-    resolved.TREESEED_MARKET_ID = resolved.TREESEED_MANAGER_ID;
-  }
-  if (!resolved.TREESEED_MANAGER_ID && resolved.TREESEED_MARKET_ID) {
-    resolved.TREESEED_MANAGER_ID = resolved.TREESEED_MARKET_ID;
-  }
-  if (!resolved.TREESEED_PROVIDER_HOST_DATA_DIR) {
-    resolved.TREESEED_PROVIDER_HOST_DATA_DIR = ".treeseed/local-capacity-provider/data";
-  }
-  if (diagnostic) {
-    resolved.TREESEED_PROVIDER_STARTUP_MODE = "diagnostic";
-  }
-  const required = [
-    ...diagnostic ? [] : ["TREESEED_CAPACITY_PROVIDER_API_KEY"],
-    "TREESEED_PROVIDER_HOST_DATA_DIR"
-  ];
-  const missing = required.filter((key) => !resolved[key]);
-  if (input.requireConnection !== false && missing.length > 0) {
-    throw new Error(`Capacity provider launch environment is missing: ${missing.join(", ")}.`);
-  }
-  return {
-    env: resolved,
-    redactedEnv: redactCapacityProviderEnv(resolved),
-    missing,
-    diagnostic,
-    source
-  };
-}
-function persistCapacityProviderConnectionToTreeseedConfig(input) {
-  const scope = input.scope === "staging" || input.scope === "prod" ? input.scope : "local";
-  const env = resolveCapacityProviderEnvironment({
-    ...input,
-    providerEnvironment: input.providerEnvironment ?? "local",
-    providerHostDataDir: input.providerHostDataDir ?? ".treeseed/local-capacity-provider/data"
-  });
-  let registryEntries = [];
-  try {
-    registryEntries = collectTreeseedEnvironmentContext(input.tenantRoot).entries;
-  } catch {
-    registryEntries = [];
-  }
-  const entryById = new Map(registryEntries.map((entry) => [entry.id, entry]));
-  const keys = [
-    "TREESEED_MANAGEMENT_API_URL",
-    "TREESEED_MARKET_URL",
-    "TREESEED_MARKET_ID",
-    "TREESEED_MANAGER_ID",
-    "TREESEED_CAPACITY_PROVIDER_ID",
-    "TREESEED_CAPACITY_PROVIDER_TEAM_ID",
-    "TREESEED_CAPACITY_PROVIDER_API_KEY",
-    "TREESEED_PROVIDER_HOST_DATA_DIR",
-    "TREESEED_PROVIDER_ENVIRONMENT"
-  ];
-  for (const key of keys) {
-    const entry = entryById.get(key) ?? capacityProviderConfigEntry(key);
-    setTreeseedMachineEnvironmentValue(input.tenantRoot, scope, entry, env[key] ?? "");
-  }
-  return {
-    env,
-    redactedEnv: redactCapacityProviderEnv(env),
-    scope,
-    writtenKeys: keys
-  };
-}
-function redactCapacityProviderSecret(value) {
-  if (value.length <= 8) return "<redacted>";
-  return `${value.slice(0, 4)}...<redacted>`;
-}
-function isCapacityProviderSecretEnvKey(key) {
-  return /(?:API_KEY|AUTH|TOKEN|SECRET|PASSWORD|CREDENTIAL)/u.test(key);
-}
-function redactCapacityProviderEnv(env) {
-  const redacted = {};
-  for (const [key, value] of Object.entries(env)) {
-    redacted[key] = isCapacityProviderSecretEnvKey(key) ? redactCapacityProviderSecret(value) : value;
-  }
-  return redacted;
-}
-function manifestRecord(value) {
-  return value && typeof value === "object" && !Array.isArray(value) ? value : {};
-}
-function manifestRoleImage(role, manifest) {
-  const tag = manifest.runtime?.images?.tag ?? "latest";
-  const roleConfig = manifest.runtime?.images?.roles?.[role] ?? {};
-  const extension = manifest.extensions?.[role];
-  if (extension?.enabled && extension.image) {
-    return `${extension.image}:${extension.tag ?? tag}`;
-  }
-  return `${roleConfig.image ?? DEFAULT_CAPACITY_PROVIDER_ROLE_IMAGES[role]}:${roleConfig.tag ?? tag}`;
-}
-function assertSafeCapacityProviderManifest(value) {
-  for (const [role, extension] of Object.entries(value.extensions ?? {})) {
-    if (!extension) continue;
-    for (const [key, entryValue] of Object.entries(extension.buildArgs ?? {})) {
-      if (entryValue === void 0 || entryValue === null || entryValue === "") continue;
-      if (isCapacityProviderSecretEnvKey(key) || /(?:tscp_|tsp_|sk-|ghp_|gho_|github_pat_)/u.test(String(entryValue))) {
-        throw new Error(`Capacity provider ${role} extension build arg ${key} looks secret-like. Store secrets in Treeseed config or the host secret manager instead.`);
-      }
-    }
-  }
-}
-function parseCapacityProviderLaunchManifest(source) {
-  const parsed = typeof source === "string" ? parseYaml(source) : source;
-  const record = manifestRecord(parsed);
-  if (record.schemaVersion !== 1) {
-    throw new Error("Capacity provider launch manifest schemaVersion must be 1.");
-  }
-  const manifest = record;
-  assertSafeCapacityProviderManifest(manifest);
-  return manifest;
-}
-function resolveCapacityProviderLaunchPlan(manifest) {
-  assertSafeCapacityProviderManifest(manifest);
-  const roleImages = {
-    api: manifestRoleImage("api", manifest),
-    manager: manifestRoleImage("manager", manifest),
-    runner: manifestRoleImage("runner", manifest)
-  };
-  const composeEnv = {
-    ...manifest.provider?.dataDir ? { TREESEED_PROVIDER_HOST_DATA_DIR: manifest.provider.dataDir } : {},
-    ...manifest.provider?.environment ? { TREESEED_PROVIDER_ENVIRONMENT: manifest.provider.environment } : {},
-    ...manifest.provider?.market?.url ? { TREESEED_MARKET_URL: manifest.provider.market.url } : {},
-    ...manifest.provider?.market?.id ? { TREESEED_MANAGER_ID: manifest.provider.market.id, TREESEED_MARKET_ID: manifest.provider.market.id } : {},
-    ...manifest.runtime?.runners?.maxConcurrent ? { TREESEED_PROVIDER_MAX_CONCURRENT_RUNNERS: String(manifest.runtime.runners.maxConcurrent) } : {},
-    TREESEED_AGENT_API_IMAGE: roleImages.api,
-    TREESEED_AGENT_MANAGER_IMAGE: roleImages.manager,
-    TREESEED_AGENT_RUNNER_IMAGE: roleImages.runner
-  };
-  return {
-    manifest,
-    roleImages,
-    composeEnv,
-    redactedEnv: redactCapacityProviderEnv(composeEnv)
-  };
-}
-function renderCapacityProviderSelfHostInstructions(input) {
-  const env = resolveCapacityProviderEnvironment(input);
-  return {
-    composeFile: "packages/agent/compose.capacity-provider.yml",
-    commands: [
-      "npm -w packages/agent run capacity-provider:build",
-      "docker compose -f packages/agent/compose.capacity-provider.yml up"
-    ],
-    env,
-    redactedEnv: redactCapacityProviderEnv(env),
-    summary: "Unlock TreeSeed sensitive config, inject these values into the docker compose process environment, and start the package-owned capacity provider runtime."
-  };
-}
-function providerDeploymentServiceName(prefix, role) {
-  return `${prefix}-${role}`.replace(/[^a-zA-Z0-9_.-]+/gu, "-").replace(/^-+|-+$/gu, "").toLowerCase();
-}
-function providerDeploymentStartCommand(role) {
-  return `node ./dist/provider/entrypoint.js ${role}`;
-}
-function defaultProviderDeploymentAdapter(hostKind) {
-  return {
-    async provisionService(spec) {
-      return {
-        role: spec.role,
-        serviceName: spec.serviceName,
-        serviceId: `${hostKind}:${spec.serviceName}`,
-        url: null,
-        status: "deployed",
-        envRefs: Object.fromEntries(
-          Object.keys(spec.env).map((key) => [key, isCapacityProviderSecretEnvKey(key) ? `${spec.serviceName}:${key}` : spec.redactedEnv[key] ?? spec.env[key]])
-        )
-      };
-    }
-  };
-}
-async function deployCapacityProviderWithAdapter(input, launchMode, hostKind) {
-  const roleImageRefs = {
-    api: input.roleImageRefs?.api ?? input.imageRef ?? input.intent.imageRef ?? "treeseed/agent-provider-api:latest",
-    manager: input.roleImageRefs?.manager ?? input.imageRef ?? input.intent.imageRef ?? "treeseed/agent-manager:latest",
-    runner: input.roleImageRefs?.runner ?? input.imageRef ?? input.intent.imageRef ?? "treeseed/agent-runner:latest"
-  };
-  const serviceNamePrefix = input.serviceNamePrefix ?? `${input.intent.capacityProviderId || "capacity-provider"}`.replace(/^cp[_-]?/u, "capacity-provider-").replace(/[^a-zA-Z0-9_.-]+/gu, "-");
-  const env = { ...input.env };
-  const redactedEnv = input.redactedEnv ?? redactCapacityProviderEnv(env);
-  const adapter = input.adapter ?? defaultProviderDeploymentAdapter(hostKind);
-  const services = {};
-  const diagnostics = [];
-  try {
-    for (const role of CAPACITY_PROVIDER_DEPLOYMENT_SERVICE_ROLES) {
-      const result = await adapter.provisionService({
-        role,
-        serviceName: providerDeploymentServiceName(serviceNamePrefix, role),
-        imageRef: roleImageRefs[role],
-        startCommand: providerDeploymentStartCommand(role),
-        env,
-        redactedEnv
-      });
-      services[role] = {
-        role,
-        serviceName: result.serviceName,
-        serviceId: result.serviceId ?? null,
-        url: result.url ?? null,
-        status: result.status ?? "deployed",
-        envRefs: result.envRefs ?? {},
-        metadata: result.metadata ?? {}
-      };
-    }
-    return {
-      ok: true,
-      launchMode,
-      hostKind,
-      roleImageRefs,
-      status: "deployed",
-      serviceRefs: services,
-      envRefs: Object.fromEntries(Object.keys(env).map((key) => [key, isCapacityProviderSecretEnvKey(key) ? "<host-secret>" : redactedEnv[key] ?? env[key]])),
-      diagnostics,
-      deployedAt: (input.now ?? /* @__PURE__ */ new Date()).toISOString()
-    };
-  } catch (error) {
-    const message = error instanceof Error ? error.message : String(error);
-    return {
-      ok: false,
-      launchMode,
-      hostKind,
-      roleImageRefs,
-      status: "failed",
-      serviceRefs: services,
-      envRefs: Object.fromEntries(Object.keys(env).map((key) => [key, isCapacityProviderSecretEnvKey(key) ? "<host-secret>" : redactedEnv[key] ?? env[key]])),
-      diagnostics: [message],
-      deployedAt: null,
-      error: { message }
-    };
-  }
-}
-function deployCapacityProviderToRailway(input) {
-  return deployCapacityProviderWithAdapter(input, "connected_host", "railway");
-}
-function deployCapacityProviderToManagedMarketHost(input) {
-  return deployCapacityProviderWithAdapter(input, "managed_market_host", "managed_market_host");
-}
-class MarketProviderClient {
-  marketUrl;
-  marketId;
-  apiKey;
-  fetchImpl;
-  userAgent;
-  requestTimeoutMs;
-  constructor(options) {
-    this.marketUrl = normalizeBaseUrl(options.marketUrl);
-    this.marketId = options.marketId.trim();
-    this.apiKey = options.apiKey.trim();
-    if (!this.apiKey) throw new Error("Capacity provider API key is required.");
-    this.fetchImpl = options.fetchImpl ?? fetch;
-    this.userAgent = options.userAgent;
-    this.requestTimeoutMs = Math.max(1e3, Number(options.requestTimeoutMs ?? 3e4) || 3e4);
-  }
-  async requestJson(path, options = {}) {
-    const headers = {
-      accept: "application/json",
-      [TREESEED_REMOTE_CONTRACT_HEADER]: String(TREESEED_REMOTE_CONTRACT_VERSION),
-      ...buildCapacityProviderAuthHeaders(this.apiKey)
-    };
-    if (this.userAgent) headers["user-agent"] = this.userAgent;
-    if (options.body !== void 0) headers["content-type"] = "application/json";
-    const controller = new AbortController();
-    const timeout = setTimeout(() => controller.abort(), this.requestTimeoutMs);
-    let response;
-    try {
-      response = await this.fetchImpl(`${this.marketUrl}${path}`, {
-        method: options.method ?? "GET",
-        headers,
-        body: options.body === void 0 ? void 0 : JSON.stringify(options.body),
-        signal: controller.signal
-      });
-    } catch (error) {
-      const message = error instanceof Error && error.name === "AbortError" ? `Capacity provider request timed out after ${this.requestTimeoutMs}ms: ${path}` : error instanceof Error ? error.message : String(error);
-      throw new CapacityProviderApiError(message, 0, { path, timeoutMs: this.requestTimeoutMs });
-    } finally {
-      clearTimeout(timeout);
-    }
-    const payload = await response.json().catch(() => ({}));
-    if (!response.ok) {
-      const message = isRecord(payload) && typeof payload.error === "string" ? payload.error : `Capacity provider request failed with ${response.status}.`;
-      throw new CapacityProviderApiError(message, response.status, payload);
-    }
-    return payload;
-  }
-  register(request) {
-    const marketId = request.marketId ?? this.marketId;
-    const body = marketId ? { ...request, marketId } : request;
-    return this.requestJson(CAPACITY_PROVIDER_ENDPOINTS.register, {
-      method: "POST",
-      body
-    }).then((response) => {
-      assertCapacityProviderRegistrationResponse(response);
-      if (typeof response.sessionToken === "string" && response.sessionToken.trim()) {
-        this.apiKey = response.sessionToken.trim();
-      }
-      return response;
-    });
-  }
-  heartbeat(request = {}) {
-    const marketId = request.marketId ?? this.marketId;
-    const body = marketId ? { ...request, marketId } : request;
-    return this.requestJson(CAPACITY_PROVIDER_ENDPOINTS.heartbeat, {
-      method: "POST",
-      body
-    }).then((response) => {
-      assertCapacityProviderOkEnvelope(response, "Capacity provider heartbeat response");
-      return response;
-    });
-  }
-  createAvailabilitySession(request = {}) {
-    return this.requestJson(CAPACITY_PROVIDER_ENDPOINTS.sessions, {
-      method: "POST",
-      body: request
-    }).then((response) => {
-      assertCapacityProviderOkEnvelope(response, "Capacity provider availability session response");
-      return response;
-    });
-  }
-  checkIn(request = {}) {
-    return this.requestJson(CAPACITY_PROVIDER_ENDPOINTS.checkIn, {
-      method: "POST",
-      body: request
-    }).then((response) => {
-      assertCapacityProviderOkEnvelope(response, "Capacity provider check-in response");
-      return response;
-    });
-  }
-  portfolio() {
-    return this.requestJson(CAPACITY_PROVIDER_ENDPOINTS.portfolio).then((response) => {
-      assertCapacityProviderPortfolioManifest(response);
-      return response;
-    });
-  }
-  createWorkday(request) {
-    return this.requestJson(CAPACITY_PROVIDER_ENDPOINTS.workdays, {
-      method: "POST",
-      body: request
-    }).then((response) => {
-      assertCapacityProviderOkEnvelope(response, "Capacity provider workday response");
-      return response;
-    });
-  }
-  assignment(assignmentId) {
-    return this.requestJson(CAPACITY_PROVIDER_ENDPOINTS.assignment(assignmentId)).then((response) => {
-      assertCapacityProviderOkEnvelope(response, "Capacity provider assignment response");
-      return response;
-    });
-  }
-  assignmentExplanation(assignmentId) {
-    return this.requestJson(CAPACITY_PROVIDER_ENDPOINTS.assignmentExplanation(assignmentId)).then((response) => {
-      assertCapacityProviderOkEnvelope(response, "Capacity provider assignment explanation response");
-      return response;
-    });
-  }
-  nextAssignment(request = {}) {
-    return this.requestJson(CAPACITY_PROVIDER_ENDPOINTS.nextAssignment, {
-      method: "POST",
-      body: request
-    }).then((response) => {
-      assertCapacityProviderOkEnvelope(response, "Capacity provider next assignment response");
-      return response;
-    });
-  }
-  renewAssignment(assignmentId, request = {}) {
-    return this.requestJson(CAPACITY_PROVIDER_ENDPOINTS.assignmentRenew(assignmentId), {
-      method: "POST",
-      body: request
-    }).then((response) => {
-      assertCapacityProviderOkEnvelope(response, "Capacity provider assignment renew response");
-      return response;
-    });
-  }
-  returnAssignment(assignmentId, request = {}) {
-    return this.requestJson(CAPACITY_PROVIDER_ENDPOINTS.assignmentReturn(assignmentId), {
-      method: "POST",
-      body: request
-    }).then((response) => {
-      assertCapacityProviderOkEnvelope(response, "Capacity provider assignment return response");
-      return response;
-    });
-  }
-  completeAssignment(assignmentId, request = {}) {
-    return this.requestJson(CAPACITY_PROVIDER_ENDPOINTS.assignmentComplete(assignmentId), {
-      method: "POST",
-      body: request
-    }).then((response) => {
-      assertCapacityProviderOkEnvelope(response, "Capacity provider assignment complete response");
-      return response;
-    });
-  }
-  failAssignment(assignmentId, request = {}) {
-    return this.requestJson(CAPACITY_PROVIDER_ENDPOINTS.assignmentFail(assignmentId), {
-      method: "POST",
-      body: request
-    }).then((response) => {
-      assertCapacityProviderOkEnvelope(response, "Capacity provider assignment fail response");
-      return response;
-    });
-  }
-  createAssignmentModeRun(assignmentId, request) {
-    return this.requestJson(CAPACITY_PROVIDER_ENDPOINTS.assignmentModeRuns(assignmentId), {
-      method: "POST",
-      body: request
-    }).then((response) => {
-      assertCapacityProviderOkEnvelope(response, "Capacity provider mode run response");
-      return response;
-    });
-  }
-  dispatchAssignmentWorkflowOperation(assignmentId, operationId, request) {
-    return this.requestJson(CAPACITY_PROVIDER_ENDPOINTS.assignmentWorkflowOperationDispatch(assignmentId, operationId), {
-      method: "POST",
-      body: request
-    }).then((response) => {
-      assertCapacityProviderOkEnvelope(response, "Capacity provider workflow operation dispatch response");
-      return response;
-    });
-  }
-  reportUsage(request) {
-    return this.requestJson(CAPACITY_PROVIDER_ENDPOINTS.usage, {
-      method: "POST",
-      body: request
-    }).then((response) => {
-      assertCapacityProviderOkEnvelope(response, "Capacity provider usage response");
-      return response;
-    });
-  }
-  writeReport(request) {
-    return this.requestJson(CAPACITY_PROVIDER_ENDPOINTS.reports, {
-      method: "POST",
-      body: request
-    }).then((response) => {
-      assertCapacityProviderOkEnvelope(response, "Capacity provider report response");
-      return response;
-    });
-  }
-}
-export {
-  CAPACITY_PROVIDER_DEPLOYMENT_SERVICE_ROLES,
-  CAPACITY_PROVIDER_ENDPOINTS,
-  CAPACITY_PROVIDER_ENV_KEYS,
-  CAPACITY_PROVIDER_SCOPES,
-  CapacityProviderApiError,
-  DEFAULT_CAPACITY_PROVIDER_ROLE_IMAGES,
-  MarketProviderClient,
-  assertCapacityProviderOkEnvelope,
-  assertCapacityProviderPortfolioManifest,
-  assertCapacityProviderRegistrationResponse,
-  buildCapacityProviderAuthHeaders,
-  deployCapacityProviderToManagedMarketHost,
-  deployCapacityProviderToRailway,
-  isCapacityProviderSecretEnvKey,
-  parseCapacityProviderLaunchManifest,
-  persistCapacityProviderConnectionToTreeseedConfig,
-  redactCapacityProviderEnv,
-  redactCapacityProviderSecret,
-  renderCapacityProviderSelfHostInstructions,
-  resolveCapacityProviderEnvironment,
-  resolveCapacityProviderLaunchEnvironment,
-  resolveCapacityProviderLaunchPlan
-};