@treeseed/sdk 0.12.62 → 0.13.0-rc.10

package/dist/hosting/graph.js

@@ -1,993 +0,0 @@
-import { loadTreeseedDeployConfig } from "../platform/deploy-config.js";
-import { loadTreeseedPlugins } from "../platform/plugins/runtime.js";
-import { existsSync, readFileSync } from "node:fs";
-import { resolve } from "node:path";
-import { parse as parseYaml } from "yaml";
-import { resolveTreeseedMachineEnvironmentValues } from "../operations/services/config-runtime.js";
-import { classifyTreeseedGitMode, runTreeseedGitText } from "../operations/services/git-runner.js";
-import { apiRailwayDefaultDockerfilePath, apiRailwayDefaultSourceRepo, assertApiRailwaySourcePolicy, isApiRailwaySourcePolicyService, railwayEnvironmentQualifiedServiceName, railwayTreeDxServiceName } from "../operations/services/railway-source-policy.js";
-import { createTreeseedCanonicalReconcileReport } from "../reconcile/index.js";
-import { discoverTreeseedApplications, findTreeseedApplication } from "./apps.js";
-import {
-  createDefaultHostAdapters,
-  createDefaultHostingProfiles,
-  createDefaultServiceTypeAdapters,
-  redactSensitiveConfig,
-  sanitizedUnitConfig,
-  summarizePlacementStatus
-} from "./builtins.js";
-const RAILWAY_SERVICE_NAME_MAX_LENGTH = 32;
-const RAILWAY_VOLUME_NAME_MAX_LENGTH = 48;
-function assertRailwayResourceNames(serviceName, volumeName) {
-  if (serviceName.length > RAILWAY_SERVICE_NAME_MAX_LENGTH) {
-    throw new Error(`Railway service name ${serviceName} exceeds the provider limit of ${RAILWAY_SERVICE_NAME_MAX_LENGTH} characters.`);
-  }
-  if (volumeName && volumeName.length > RAILWAY_VOLUME_NAME_MAX_LENGTH) {
-    throw new Error(`Railway volume name ${volumeName} exceeds the provider limit of ${RAILWAY_VOLUME_NAME_MAX_LENGTH} characters.`);
-  }
-}
-const ENVIRONMENT_NAMES = {
-  local: "local",
-  staging: "staging",
-  prod: "production"
-};
-const PLACEMENT_LABELS = {
-  web: "Site Hosting",
-  api: "API Runtime",
-  database: "Database",
-  "knowledge-library": "Knowledge Library",
-  "runner-capacity": "Runner Capacity",
-  repository: "Repository",
-  "content-storage": "Content Storage",
-  email: "Email",
-  operations: "Operations",
-  custom: "Custom"
-};
-function mergeRecord(...records) {
-  return Object.assign({}, ...records.filter(Boolean));
-}
-function asPluginRecord(value) {
-  return value && typeof value === "object" && !Array.isArray(value) ? value : {};
-}
-function normalizeEnvironment(value) {
-  return value === "prod" || value === "production" ? "prod" : value === "staging" ? "staging" : "local";
-}
-function indexedName(baseName, index) {
-  return `${baseName.replace(/-\d+$/u, "").replace(/-\d{2}$/u, "")}-${String(Math.max(1, index)).padStart(2, "0")}`;
-}
-function publicTreeDxNodePool(config) {
-  const nodePool = config.publicTreeDxFederation?.railway?.nodePool ?? {};
-  const bootstrapCount = Math.max(1, Number.parseInt(String(nodePool.bootstrapCount ?? 1), 10) || 1);
-  const maxNodes = Math.max(bootstrapCount, Number.parseInt(String(nodePool.maxNodes ?? 4), 10) || 4);
-  return { bootstrapCount, maxNodes };
-}
-function resolvePublicTreeDxRoot(input) {
-  const candidates = [
-    resolve(input.tenantRoot, "packages", "treedx"),
-    resolve(input.tenantRoot, "..", "treedx"),
-    input.configRoot ? resolve(input.configRoot, "packages", "treedx") : null
-  ].filter((candidate) => Boolean(candidate));
-  return candidates.find((candidate) => existsSync(resolve(candidate, "treeseed.package.yaml")) || existsSync(resolve(candidate, ".git"))) ?? candidates[0];
-}
-function publicTreeDxSourcePolicy(input, config, launchEnv) {
-  const railway = config.publicTreeDxFederation?.railway ?? {};
-  const configuredSource = railway.source && typeof railway.source === "object" && !Array.isArray(railway.source) ? railway.source : {};
-  const configuredMode = typeof railway.sourceMode === "string" ? railway.sourceMode : null;
-  if (input.environment === "staging" && configuredMode === "image") {
-    throw new Error("public-treedx-node-01: API Railway staging services must use GitHub Dockerfile source builds (configured sourceMode image is not allowed).");
-  }
-  const treeDxRoot = resolvePublicTreeDxRoot(input);
-  const repository = typeof railway.sourceRepo === "string" ? railway.sourceRepo : typeof configuredSource.repository === "string" ? configuredSource.repository : typeof configuredSource.repo === "string" ? configuredSource.repo : readPackageRepository(treeDxRoot) ?? "treeseed-ai/treedx";
-  const sourceMode = configuredMode === "git" || configuredMode === "image" ? configuredMode : input.environment === "staging" ? "git" : "image";
-  if (sourceMode !== "git") {
-    const imageRef = typeof launchEnv.TREESEED_PUBLIC_TREEDX_IMAGE_REF === "string" && launchEnv.TREESEED_PUBLIC_TREEDX_IMAGE_REF.trim() ? launchEnv.TREESEED_PUBLIC_TREEDX_IMAGE_REF.trim() : null;
-    const policy2 = {
-      sourceMode: "image",
-      sourceRepo: null,
-      sourceBranch: null,
-      sourceCommit: null,
-      sourceRootDirectory: null,
-      image: "treeseed/treedx",
-      imageRef,
-      imageTagRef: "TREESEED_PUBLIC_TREEDX_IMAGE_REF"
-    };
-    const serviceName = railwayTreeDxServiceName(1, input.environment);
-    assertApiRailwaySourcePolicy(input.environment, { key: "public-treedx-node-01", serviceName, ...policy2 });
-    return policy2;
-  }
-  const policy = {
-    sourceMode: "git",
-    sourceRepo: repository,
-    sourceBranch: typeof railway.sourceBranch === "string" ? railway.sourceBranch : typeof configuredSource.branch === "string" ? configuredSource.branch : "staging",
-    sourceCommit: typeof railway.sourceCommit === "string" ? railway.sourceCommit : typeof configuredSource.commit === "string" ? configuredSource.commit : headCommitSafe(treeDxRoot) ?? headCommitSafe(input.tenantRoot),
-    sourceRootDirectory: typeof railway.sourceRootDirectory === "string" ? railway.sourceRootDirectory : typeof configuredSource.rootDirectory === "string" ? configuredSource.rootDirectory : ".",
-    image: null,
-    imageTagRef: null
-  };
-  assertApiRailwaySourcePolicy(input.environment, {
-    key: "public-treedx-node-01",
-    serviceName: railwayTreeDxServiceName(1, input.environment),
-    dockerfilePath: railway.dockerfilePath ?? "/Dockerfile",
-    ...policy
-  });
-  return policy;
-}
-function serviceKeyPlacement(serviceKey) {
-  if (serviceKey === "api") return "api";
-  if (serviceKey === "treeseedDatabase") return "database";
-  if (serviceKey === "operationsRunner") return "runner-capacity";
-  if (/runner|capacity/iu.test(serviceKey)) return "runner-capacity";
-  if (/database|postgres|db/iu.test(serviceKey)) return "database";
-  if (/email|smtp/iu.test(serviceKey)) return "email";
-  return "operations";
-}
-function serviceKeyType(serviceKey, service) {
-  if (serviceKey === "treeseedDatabase" || service.railway?.resourceType === "postgres") return "relational-database";
-  if (String(serviceKey).startsWith("capacityProvider")) return "capacity-provider";
-  if (serviceKey === "operationsRunner" || /runner/iu.test(serviceKey)) return "runner-pool";
-  if (Array.isArray(service.railway?.schedule) || typeof service.railway?.schedule === "string") return "scheduled-job";
-  if (serviceKey === "api") return "container-api";
-  return service.railway?.volumeMountPath ? "stateful-container" : "container-api";
-}
-function railwayImageRefEnvForService(serviceKey) {
-  if (serviceKey === "api") return "TREESEED_API_IMAGE_REF";
-  if (serviceKey === "operationsRunner") return "TREESEED_OPERATIONS_RUNNER_IMAGE_REF";
-  if (serviceKey === "capacityProviderManager") return "TREESEED_AGENT_MANAGER_IMAGE_REF";
-  if (serviceKey === "capacityProviderRunner") return "TREESEED_AGENT_RUNNER_IMAGE_REF";
-  if (String(serviceKey).startsWith("public-treedx-node-")) return "TREESEED_PUBLIC_TREEDX_IMAGE_REF";
-  return null;
-}
-function defaultRailwayImageRefForService(serviceKey, environment) {
-  return null;
-}
-function readPackageRepository(root) {
-  const manifestPath = resolve(root, "treeseed.package.yaml");
-  if (!existsSync(manifestPath)) return null;
-  try {
-    const parsed = parseYaml(readFileSync(manifestPath, "utf8"));
-    const repository = parsed && typeof parsed === "object" && !Array.isArray(parsed) ? parsed.repository : null;
-    return typeof repository === "string" && /^[^/\s]+\/[^/\s]+$/u.test(repository.trim()) ? repository.trim() : null;
-  } catch {
-    return null;
-  }
-}
-function headCommitSafe(root) {
-  try {
-    return runTreeseedGitText(["rev-parse", "HEAD"], {
-      cwd: root,
-      mode: classifyTreeseedGitMode(["rev-parse", "HEAD"])
-    }).trim();
-  } catch {
-    return null;
-  }
-}
-function resolveRailwayServiceSourceRoot(input, serviceKey, service) {
-  if (String(serviceKey).startsWith("capacityProvider")) {
-    if (service.railway?.rootDir) {
-      return resolve(input.tenantRoot, service.railway.rootDir);
-    }
-    const workspaceRoot = input.configRoot ?? input.tenantRoot;
-    const candidates = [
-      resolve(input.tenantRoot, "..", "agent"),
-      resolve(workspaceRoot, "packages", "agent"),
-      resolve(input.tenantRoot, "..", "..", "packages", "agent")
-    ];
-    const found = candidates.find(
-      (candidate) => existsSync(resolve(candidate, "treeseed.package.yaml")) || existsSync(resolve(candidate, "package.json"))
-    );
-    return found ?? resolve(workspaceRoot, "packages", "agent");
-  }
-  const rootDir = service.railway?.rootDir ?? service.rootDir ?? ".";
-  return resolve(input.tenantRoot, rootDir);
-}
-function railwaySourcePolicy(input, serviceKey, service, imageRef) {
-  const configuredSource = service.railway?.source && typeof service.railway.source === "object" && !Array.isArray(service.railway.source) ? service.railway.source : {};
-  const configuredMode = typeof service.railway?.sourceMode === "string" ? service.railway.sourceMode : null;
-  const baseServiceName = service.railway?.serviceName ?? null;
-  const environmentConfig = service.environments?.[input.environment];
-  const serviceName = typeof environmentConfig?.serviceName === "string" && environmentConfig.serviceName.trim() ? environmentConfig.serviceName.trim() : isApiRailwaySourcePolicyService({ key: serviceKey, serviceName: baseServiceName }) && baseServiceName ? railwayEnvironmentQualifiedServiceName(baseServiceName, input.environment) : baseServiceName;
-  const repository = typeof service.railway?.sourceRepo === "string" ? service.railway.sourceRepo : typeof configuredSource.repository === "string" ? configuredSource.repository : typeof configuredSource.repo === "string" ? configuredSource.repo : readPackageRepository(resolveRailwayServiceSourceRoot(input, serviceKey, service)) ?? readPackageRepository(input.tenantRoot) ?? apiRailwayDefaultSourceRepo({ key: serviceKey, serviceName });
-  const dockerfilePath = service.railway?.dockerfilePath ?? apiRailwayDefaultDockerfilePath({ key: serviceKey, serviceName });
-  const apiPackageSourceEligible = ["api", "operationsRunner"].includes(serviceKey);
-  if (input.environment === "staging" && isApiRailwaySourcePolicyService({ key: serviceKey, serviceName }) && (configuredMode === "image" || service.railway?.imageRef)) {
-    throw new Error(`${serviceName ?? serviceKey}: API Railway staging services must use GitHub Dockerfile source builds (configured image source is not allowed).`);
-  }
-  const mode = input.environment === "prod" ? "image" : input.environment === "staging" && apiPackageSourceEligible ? "git" : configuredMode === "git" || configuredMode === "image" ? configuredMode : imageRef ? "image" : "git";
-  if (mode !== "git") {
-    const policy2 = {
-      sourceMode: "image",
-      sourceRepo: null,
-      sourceBranch: null,
-      sourceCommit: null,
-      sourceRootDirectory: null,
-      imageRef
-    };
-    assertApiRailwaySourcePolicy(input.environment, {
-      key: serviceKey,
-      serviceName,
-      dockerfilePath: null,
-      buildCommand: null,
-      startCommand: null,
-      ...policy2
-    });
-    return policy2;
-  }
-  const policy = {
-    sourceMode: "git",
-    sourceRepo: repository,
-    sourceBranch: typeof service.railway?.sourceBranch === "string" ? service.railway.sourceBranch : typeof configuredSource.branch === "string" ? configuredSource.branch : input.environment === "staging" ? "staging" : null,
-    sourceCommit: headCommitSafe(resolveRailwayServiceSourceRoot(input, serviceKey, service)) ?? headCommitSafe(input.tenantRoot),
-    sourceRootDirectory: typeof service.railway?.sourceRootDirectory === "string" ? service.railway.sourceRootDirectory : typeof configuredSource.rootDirectory === "string" ? configuredSource.rootDirectory : ".",
-    imageRef: null
-  };
-  assertApiRailwaySourcePolicy(input.environment, {
-    key: serviceKey,
-    serviceName,
-    dockerfilePath,
-    ...policy
-  });
-  return policy;
-}
-function collectPluginHostingContributions(input) {
-  const plugins = loadTreeseedPlugins(input.deployConfig);
-  const context = {
-    projectRoot: input.tenantRoot,
-    tenantConfig: void 0,
-    deployConfig: input.deployConfig,
-    pluginConfig: {}
-  };
-  const hostAdapters = {};
-  const serviceTypeAdapters = {};
-  const profiles = [];
-  for (const entry of plugins) {
-    const pluginContext = { ...context, pluginConfig: entry.config ?? {} };
-    const contribution = entry.plugin.hosting;
-    const resolved = typeof contribution === "function" ? contribution(pluginContext) : contribution;
-    if (!resolved || typeof resolved !== "object") continue;
-    Object.assign(hostAdapters, asPluginRecord(resolved.hostAdapters));
-    Object.assign(serviceTypeAdapters, asPluginRecord(resolved.serviceTypeAdapters));
-    const contributedProfiles = Array.isArray(resolved.profiles) ? resolved.profiles : [];
-    profiles.push(...contributedProfiles.filter(Boolean));
-  }
-  return {
-    hostAdapters,
-    serviceTypeAdapters,
-    profiles
-  };
-}
-function marketProjectGroup(environment, config) {
-  const apiService = config.services?.api && typeof config.services.api === "object" ? config.services.api : null;
-  const railwayProjectName = typeof apiService?.railway?.projectName === "string" && apiService.railway.projectName.trim() ? apiService.railway.projectName.trim() : void 0;
-  const projectName = railwayProjectName ?? config.slug ?? "treeseed-api";
-  const environmentProjectName = (scope) => {
-    const configured = apiService?.environments?.[scope]?.railwayProjectName;
-    return typeof configured === "string" && configured.trim() ? configured.trim() : projectName;
-  };
-  return {
-    id: "treeseed-control-plane",
-    label: "Treeseed control plane",
-    hostId: environment === "local" ? "local-process" : "railway",
-    environments: {
-      local: { projectName: `${projectName}-local`, environmentName: "local" },
-      staging: { projectName: environmentProjectName("staging"), environmentName: "staging" },
-      prod: { projectName: environmentProjectName("prod"), environmentName: "production" }
-    },
-    metadata: { stableProjectName: projectName }
-  };
-}
-function railwayProjectGroupIdForProjectName(prefix, projectName) {
-  const slug = projectName.toLowerCase().replace(/[^a-z0-9-]+/gu, "-").replace(/^-+|-+$/gu, "") || "railway-project";
-  return `${prefix}:${slug}`;
-}
-function capacityProviderProjectGroupId(projectName) {
-  return railwayProjectGroupIdForProjectName("capacity-provider", projectName);
-}
-function capacityProviderProjectGroups(environment, config) {
-  const projectNames = /* @__PURE__ */ new Set();
-  for (const [serviceKey, service] of Object.entries(config.services ?? {})) {
-    if (!String(serviceKey).startsWith("capacityProvider")) continue;
-    if (!service || typeof service !== "object") continue;
-    const projectName = service.railway?.projectName;
-    if (typeof projectName === "string" && projectName.trim()) {
-      projectNames.add(projectName.trim());
-    }
-  }
-  return [...projectNames].map((projectName) => ({
-    id: capacityProviderProjectGroupId(projectName),
-    label: "Capacity provider",
-    hostId: environment === "local" ? "local-docker" : "railway",
-    environments: {
-      local: { projectName: `${projectName}-local`, environmentName: "local" },
-      staging: { projectName, environmentName: "staging" },
-      prod: { projectName, environmentName: "production" }
-    },
-    metadata: {
-      stableProjectName: projectName,
-      isolation: "capacity-provider"
-    }
-  }));
-}
-function publicTreeDxProjectGroup(environment, config) {
-  const apiProjectName = marketProjectGroup(environment, config).environments.staging?.projectName ?? config.slug ?? "treeseed-api";
-  return {
-    id: "public-treedx-federation",
-    label: "Public TreeDX federation",
-    hostId: environment === "local" ? "local-docker" : "railway",
-    environments: {
-      local: { projectName: `${apiProjectName}-local`, environmentName: "local" },
-      staging: { projectName: apiProjectName, environmentName: "staging" },
-      prod: { projectName: apiProjectName, environmentName: "production" }
-    },
-    metadata: {
-      publicFederation: true,
-      ownedByAppProject: "api",
-      isolation: "railway-service-volume-domain"
-    }
-  };
-}
-function privateTreeDxProjectGroup(teamId = "{teamId}") {
-  return {
-    id: "private-team-treedx",
-    label: "Private team TreeDX",
-    hostId: "railway",
-    environments: {
-      staging: { projectName: `treeseed-team-${teamId}-treedx`, environmentName: "staging" },
-      prod: { projectName: `treeseed-team-${teamId}-treedx`, environmentName: "production" }
-    },
-    metadata: { transferable: true, privateTeam: true }
-  };
-}
-function buildProfileFromDeployConfig(input) {
-  const config = input.deployConfig;
-  const environment = input.environment;
-  const services = [];
-  const projectGroups = [
-    marketProjectGroup(environment, config),
-    ...capacityProviderProjectGroups(environment, config),
-    publicTreeDxProjectGroup(environment, config),
-    privateTreeDxProjectGroup()
-  ];
-  const railwayImageRefEnvKeys = [.../* @__PURE__ */ new Set([
-    ...Object.keys(config.services ?? {}).map((serviceKey) => railwayImageRefEnvForService(serviceKey)).filter((value) => Boolean(value)),
-    ...config.hosting?.kind === "treeseed_control_plane" ? ["TREESEED_PUBLIC_TREEDX_IMAGE_REF"] : []
-  ])];
-  let railwayImageRefEnv = {};
-  try {
-    railwayImageRefEnv = resolveTreeseedMachineEnvironmentValues(input.configRoot ?? input.tenantRoot, environment, railwayImageRefEnvKeys);
-  } catch {
-    railwayImageRefEnv = {};
-  }
-  const launchEnv = mergeRecord(railwayImageRefEnv, process.env, input.env);
-  if (config.surfaces?.web && config.surfaces.web.enabled !== false) {
-    services.push({
-      id: "web",
-      label: "Site Hosting",
-      serviceType: "web-site",
-      placement: "web",
-      projectGroupId: environment === "local" ? void 0 : "treeseed-control-plane",
-      config: {
-        rootDir: config.surfaces?.web?.rootDir ?? ".",
-        publicBaseUrl: config.surfaces?.web?.environments?.[environment]?.baseUrl ?? config.surfaces?.web?.publicBaseUrl ?? null,
-        domain: config.surfaces?.web?.environments?.[environment]?.domain ?? null,
-        cache: config.surfaces?.web?.cache ?? null,
-        cloudflare: config.cloudflare ? {
-          workerName: config.cloudflare.workerName ?? null,
-          pages: config.cloudflare.pages ?? null
-        } : null
-      },
-      environments: {
-        local: { hostId: "local-process", config: { hotReload: true, baseUrl: config.surfaces?.web?.localBaseUrl ?? "http://127.0.0.1:4321" } },
-        staging: { hostId: "cloudflare", projectGroupId: "treeseed-control-plane" },
-        prod: { hostId: "cloudflare", projectGroupId: "treeseed-control-plane" }
-      }
-    });
-  }
-  for (const [serviceKey, serviceValue] of Object.entries(config.services ?? {})) {
-    const service = serviceValue;
-    if (!service || service.enabled === false) continue;
-    const serviceType = serviceKeyType(serviceKey, service);
-    const placement = serviceKeyPlacement(serviceKey);
-    const configuredRailwayProjectName = typeof service.railway?.projectName === "string" && service.railway.projectName.trim() ? service.railway.projectName.trim() : null;
-    const defaultProjectGroup = service.provider === "railway" || service.railway ? String(serviceKey).startsWith("capacityProvider") && configuredRailwayProjectName ? capacityProviderProjectGroupId(configuredRailwayProjectName) : "treeseed-control-plane" : void 0;
-    const imageRefEnv = railwayImageRefEnvForService(serviceKey);
-    const imageRef = service.railway?.imageRef ?? (input.environment === "prod" && imageRefEnv ? launchEnv[imageRefEnv] ?? null : null) ?? defaultRailwayImageRefForService(serviceKey, input.environment) ?? null;
-    const sourcePolicy = railwaySourcePolicy(input, serviceKey, service, imageRef);
-    const baseServiceName = service.railway?.serviceName ?? null;
-    const environmentConfig = service.environments?.[input.environment];
-    const effectiveServiceName = typeof environmentConfig?.serviceName === "string" && environmentConfig.serviceName.trim() ? environmentConfig.serviceName.trim() : (serviceKey === "operationsRunner" || isApiRailwaySourcePolicyService({ key: serviceKey, serviceName: baseServiceName })) && baseServiceName ? railwayEnvironmentQualifiedServiceName(baseServiceName, input.environment) : baseServiceName;
-    const runnerPool = serviceKey === "operationsRunner" && service.railway?.runnerPool && typeof service.railway.runnerPool === "object" ? service.railway.runnerPool : null;
-    const instanceCount = runnerPool ? Math.max(1, Number.parseInt(String(runnerPool.bootstrapCount ?? 1), 10) || 1) : 1;
-    const maxRunners = runnerPool ? Math.max(1, Number.parseInt(String(runnerPool.maxRunners ?? instanceCount), 10) || instanceCount) : 1;
-    if (runnerPool && instanceCount > maxRunners) {
-      throw new Error(`services.operationsRunner.railway.runnerPool.bootstrapCount (${instanceCount}) cannot exceed maxRunners (${maxRunners}).`);
-    }
-    for (let offset = 0; offset < instanceCount; offset += 1) {
-      const runnerIndex = offset + 1;
-      const instanceId = serviceKey === "operationsRunner" && runnerIndex > 1 ? `${serviceKey}-${String(runnerIndex).padStart(2, "0")}` : serviceKey;
-      const instanceServiceName = serviceKey === "operationsRunner" && effectiveServiceName ? indexedName(effectiveServiceName, runnerIndex) : effectiveServiceName;
-      const volumeMountPath = serviceKey === "operationsRunner" ? service.railway?.volumeMountPath ?? runnerPool?.volumeMountPath ?? "/data" : service.railway?.volumeMountPath ?? null;
-      if (instanceServiceName && (service.provider === "railway" || service.railway)) {
-        assertRailwayResourceNames(instanceServiceName, volumeMountPath ? `${instanceServiceName}-volume` : null);
-      }
-      const environmentBinding = (bindingEnvironment) => {
-        const configured = service.environments?.[bindingEnvironment] ?? {};
-        if (!runnerPool) return configured;
-        const configuredName = typeof configured.serviceName === "string" && configured.serviceName.trim() ? configured.serviceName.trim() : baseServiceName ? railwayEnvironmentQualifiedServiceName(baseServiceName, bindingEnvironment) : instanceServiceName;
-        const serviceName = configuredName ? indexedName(configuredName, runnerIndex) : instanceServiceName;
-        return { ...configured, serviceName, railwayServiceName: serviceName };
-      };
-      services.push({
-        id: instanceId,
-        label: placement === "runner-capacity" ? `Runner Capacity ${String(runnerIndex).padStart(2, "0")}` : serviceKey === "api" ? "API Runtime" : serviceKey,
-        serviceType,
-        placement,
-        projectGroupId: defaultProjectGroup,
-        config: {
-          rootDir: service.railway?.rootDir ?? service.rootDir ?? ".",
-          imageRef: sourcePolicy.imageRef,
-          imageRefEnv: sourcePolicy.sourceMode === "image" ? imageRefEnv : null,
-          sourceMode: sourcePolicy.sourceMode,
-          sourceRepo: sourcePolicy.sourceRepo,
-          sourceBranch: sourcePolicy.sourceBranch,
-          sourceCommit: sourcePolicy.sourceCommit,
-          sourceRootDirectory: sourcePolicy.sourceRootDirectory,
-          dockerfilePath: sourcePolicy.sourceMode === "git" ? service.railway?.dockerfilePath ?? apiRailwayDefaultDockerfilePath({ key: serviceKey, serviceName: service.railway?.serviceName ?? null }) : null,
-          buildCommand: sourcePolicy.imageRef || sourcePolicy.sourceMode === "git" && service.railway?.dockerfilePath ? null : service.railway?.buildCommand ?? null,
-          startCommand: sourcePolicy.imageRef ? null : service.railway?.startCommand ?? null,
-          healthcheckPath: service.railway?.healthcheckPath ?? null,
-          runtimeMode: service.railway?.runtimeMode ?? null,
-          volumeMountPath,
-          volumeName: volumeMountPath && instanceServiceName ? `${instanceServiceName}-volume` : null,
-          runnerPool: runnerPool ? { ...runnerPool, bootstrapCount: instanceCount, maxRunners } : null,
-          runnerIndex: runnerPool ? runnerIndex : null,
-          poolKey: runnerPool ? serviceKey : null,
-          runnerId: runnerPool ? instanceServiceName : null,
-          resourceType: service.railway?.resourceType ?? null,
-          serviceName: instanceServiceName,
-          serviceTargets: service.railway?.serviceTargets ?? null
-        },
-        secretRefs: serviceKey === "treeseedDatabase" ? ["TREESEED_DATABASE_URL"] : [],
-        variableRefs: serviceKey === "operationsRunner" ? ["TREESEED_PLATFORM_RUNNER_ID", "TREESEED_PLATFORM_RUNNER_DATA_DIR", "TREESEED_PLATFORM_RUNNER_ENVIRONMENT"] : [],
-        metadata: String(serviceKey).startsWith("capacityProvider") ? { capacityProvider: true, deployByDefault: false } : runnerPool ? { poolKey: serviceKey, runnerIndex } : {},
-        environments: {
-          local: {
-            hostId: serviceType === "relational-database" || serviceType === "runner-pool" || service.railway?.volumeMountPath ? "local-docker" : "local-process",
-            projectGroupId: void 0,
-            config: environmentBinding("local")
-          },
-          staging: {
-            hostId: service.provider ?? "railway",
-            projectGroupId: defaultProjectGroup,
-            config: environmentBinding("staging")
-          },
-          prod: {
-            hostId: service.provider ?? "railway",
-            projectGroupId: defaultProjectGroup,
-            config: environmentBinding("prod")
-          }
-        }
-      });
-    }
-  }
-  if (config.cloudflare?.r2) {
-    services.push({
-      id: "content-storage",
-      label: "Content Storage",
-      serviceType: "object-store",
-      placement: "content-storage",
-      config: {
-        bucketName: config.cloudflare.r2.bucketName ?? null,
-        manifestKeyTemplate: config.cloudflare.r2.manifestKeyTemplate ?? null,
-        previewRootTemplate: config.cloudflare.r2.previewRootTemplate ?? null
-      },
-      environments: {
-        local: { hostId: "local-docker" },
-        staging: { hostId: "cloudflare" },
-        prod: { hostId: "cloudflare" }
-      }
-    });
-  }
-  if (config.smtp?.enabled === true) {
-    services.push({
-      id: "email",
-      label: "Email",
-      serviceType: "email-relay",
-      placement: "email",
-      secretRefs: ["SMTP_PASSWORD"],
-      environments: {
-        local: { hostId: "smtp" },
-        staging: { hostId: "smtp" },
-        prod: { hostId: "smtp" }
-      }
-    });
-  }
-  if (config.hosting?.kind === "treeseed_control_plane") {
-    const treeDxNodePool = publicTreeDxNodePool(config);
-    const treeDxSourcePolicy = publicTreeDxSourcePolicy(input, config, launchEnv);
-    const treeDxNodeUnits = Array.from({ length: treeDxNodePool.bootstrapCount }, (_, offset) => {
-      const nodeIndex = offset + 1;
-      const logicalServiceName = indexedName("public-treedx-node", nodeIndex);
-      const serviceName = railwayTreeDxServiceName(nodeIndex, input.environment);
-      assertRailwayResourceNames(serviceName, `${serviceName}-volume`);
-      return {
-        id: logicalServiceName,
-        label: `Public TreeDX node ${String(nodeIndex).padStart(2, "0")}`,
-        serviceType: "treedx-node",
-        placement: "knowledge-library",
-        projectGroupId: "public-treedx-federation",
-        config: {
-          ...treeDxSourcePolicy.image ? { image: treeDxSourcePolicy.image } : {},
-          ...treeDxSourcePolicy.imageRef ? { imageRef: treeDxSourcePolicy.imageRef } : {},
-          ...treeDxSourcePolicy.imageTagRef ? { imageTagRef: treeDxSourcePolicy.imageTagRef } : {},
-          sourceMode: treeDxSourcePolicy.sourceMode,
-          ...treeDxSourcePolicy.sourceRepo ? { sourceRepo: treeDxSourcePolicy.sourceRepo } : {},
-          ...treeDxSourcePolicy.sourceBranch ? { sourceBranch: treeDxSourcePolicy.sourceBranch } : {},
-          ...treeDxSourcePolicy.sourceCommit ? { sourceCommit: treeDxSourcePolicy.sourceCommit } : {},
-          ...treeDxSourcePolicy.sourceRootDirectory ? { sourceRootDirectory: treeDxSourcePolicy.sourceRootDirectory } : {},
-          serviceName,
-          volumeName: `${serviceName}-volume`,
-          volumeMountPath: "/data",
-          runtimeMode: "replicated",
-          environmentVariables: {
-            PORT: "4000",
-            TREEDX_DATA_DIR: "/data",
-            TREEDX_AUTH_MODE: "connected",
-            TREEDX_AUTH_VERIFIER: "hs256_dev",
-            TREEDX_ALLOW_DEV_VERIFIER_IN_PROD: "true",
-            TREEDX_EXEC_BACKEND: "container_sandbox",
-            TREEDX_FEDERATION_MODE: "connected_library",
-            TREEDX_JWT_AUDIENCE: "treedx-public-federation",
-            TREEDX_JWT_ISSUER: "https://api.treeseed.local/treedx",
-            TREEDX_BOOTSTRAP_TRUST_ACTOR_ID: "treeseed-api",
-            TREEDX_BOOTSTRAP_TRUST_TENANT_ID: "treeseed-control-plane",
-            TREEDX_BOOTSTRAP_TRUST_REPO_IDS: "*",
-            TREEDX_BOOTSTRAP_TRUST_REFS: "*",
-            TREEDX_BOOTSTRAP_TRUST_PATHS: "**",
-            TREEDX_SCOPE: "public_federation"
-          }
-        },
-        variableRefs: [
-          "PORT",
-          "TREEDX_DATA_DIR",
-          "TREEDX_AUTH_MODE",
-          "TREEDX_AUTH_VERIFIER",
-          "TREEDX_ALLOW_DEV_VERIFIER_IN_PROD",
-          "TREEDX_EXEC_BACKEND",
-          "TREEDX_FEDERATION_MODE",
-          "TREEDX_JWT_AUDIENCE",
-          "TREEDX_JWT_ISSUER",
-          "TREEDX_BOOTSTRAP_TRUST_ACTOR_ID",
-          "TREEDX_BOOTSTRAP_TRUST_TENANT_ID",
-          "TREEDX_BOOTSTRAP_TRUST_REPO_IDS",
-          "TREEDX_BOOTSTRAP_TRUST_REFS",
-          "TREEDX_BOOTSTRAP_TRUST_PATHS",
-          "TREEDX_SCOPE"
-        ],
-        secretRefs: ["TREEDX_SECRET_KEY_BASE", "TREEDX_ADMIN_TOKEN", "TREEDX_JWT_HS256_SECRET"],
-        environments: {
-          local: { hostId: "local-docker", projectGroupId: "public-treedx-federation" },
-          staging: { hostId: "railway", projectGroupId: "public-treedx-federation" },
-          prod: { hostId: "railway", projectGroupId: "public-treedx-federation" }
-        },
-        metadata: {
-          publicFederation: true,
-          defaultNode: nodeIndex === 1,
-          nodeIndex,
-          maxNodes: treeDxNodePool.maxNodes,
-          retainVolumeOnScaleDown: true
-        }
-      };
-    });
-    services.push(
-      {
-        id: "public-treedx-federation",
-        label: "Public TreeDX federation",
-        serviceType: "treedx-federation",
-        placement: "knowledge-library",
-        projectGroupId: "public-treedx-federation",
-        dependencies: treeDxNodeUnits.map((unit) => unit.id),
-        config: {
-          projectName: marketProjectGroup(environment, config).environments.staging?.projectName ?? config.slug ?? "treeseed-api",
-          isolation: "same API Railway project, separate service, volume, and domain",
-          federationMode: "connected_library",
-          nodePool: treeDxNodePool
-        },
-        environments: {
-          local: { hostId: "local-docker", projectGroupId: "public-treedx-federation" },
-          staging: { hostId: "railway", projectGroupId: "public-treedx-federation" },
-          prod: { hostId: "railway", projectGroupId: "public-treedx-federation" }
-        },
-        metadata: { publicFederation: true, nodeCount: treeDxNodePool.bootstrapCount, maxNodes: treeDxNodePool.maxNodes }
-      },
-      ...treeDxNodeUnits
-    );
-  }
-  return {
-    id: `${config.slug}-compiled`,
-    label: `${config.name} hosting profile`,
-    services,
-    projectGroups,
-    metadata: {
-      source: "treeseed.site.yaml",
-      environment
-    }
-  };
-}
-function assertCapabilityBinding(unit) {
-  const hostCapabilities = new Set(unit.host.capabilities.filter((capability) => capability.environments.includes(unit.environment)).map((capability) => capability.id));
-  const missing = unit.requiredCapabilities.filter((capability) => !hostCapabilities.has(capability));
-  if (missing.length > 0) {
-    throw new Error(`Hosting unit "${unit.id}" cannot bind ${unit.serviceType.id} to host "${unit.host.id}" in ${unit.environment}; missing capabilities: ${missing.join(", ")}.`);
-  }
-}
-function orderUnits(units) {
-  const remaining = new Map(units.map((unit) => [unit.id, unit]));
-  const ordered = [];
-  while (remaining.size > 0) {
-    const ready = [...remaining.values()].filter((unit) => unit.dependencies.every((dependency) => !remaining.has(dependency) || ordered.some((orderedUnit) => orderedUnit.id === dependency)));
-    if (ready.length === 0) {
-      throw new Error(`Hosting graph contains a dependency cycle: ${[...remaining.keys()].join(", ")}.`);
-    }
-    for (const unit of ready) {
-      remaining.delete(unit.id);
-      ordered.push(unit);
-    }
-  }
-  return ordered;
-}
-function createUnit(service, environment, hosts, serviceTypes, projectGroups, application) {
-  const serviceType = serviceTypes[service.serviceType];
-  if (!serviceType) {
-    throw new Error(`Unknown hosting service type "${service.serviceType}" for service "${service.id}".`);
-  }
-  const binding = service.environments?.[environment];
-  if (binding?.enabled === false) return null;
-  const hostId = binding?.hostId ?? serviceType.defaultHostByEnvironment?.[environment];
-  if (!hostId) {
-    throw new Error(`Hosting service "${service.id}" does not define a host binding for ${environment}.`);
-  }
-  const host = hosts[hostId];
-  if (!host) {
-    throw new Error(`Unknown hosting host "${hostId}" for service "${service.id}".`);
-  }
-  const projectGroupId = binding?.projectGroupId ?? service.projectGroupId;
-  const projectGroup = projectGroupId ? projectGroups[projectGroupId] ?? null : null;
-  const unitId = application && application.relativeRoot !== "." && service.id === "web" ? application.id : service.id;
-  const unit = {
-    id: unitId,
-    label: service.label,
-    serviceType,
-    placement: service.placement ?? serviceType.placement,
-    host,
-    environment,
-    projectGroup,
-    dependencies: service.dependencies ?? [],
-    requiredCapabilities: serviceType.requiredCapabilities,
-    config: redactSensitiveConfig({
-      ...service.config ?? {},
-      ...binding?.config ?? {}
-    }),
-    secretRefs: service.secretRefs ?? [],
-    variableRefs: service.variableRefs ?? [],
-    metadata: redactSensitiveConfig(service.metadata ?? {}),
-    application
-  };
-  assertCapabilityBinding(unit);
-  return unit;
-}
-function summarizePlacements(units) {
-  const grouped = /* @__PURE__ */ new Map();
-  for (const unit of units) {
-    grouped.set(unit.placement, [...grouped.get(unit.placement) ?? [], unit]);
-  }
-  return [...grouped.entries()].map(([placement, placementUnits]) => ({
-    placement,
-    label: PLACEMENT_LABELS[placement] ?? placement,
-    serviceIds: placementUnits.map((unit) => unit.id),
-    hostIds: [...new Set(placementUnits.map((unit) => unit.host.id))],
-    status: summarizePlacementStatus(placementUnits.map(() => "pending")),
-    advanced: false
-  }));
-}
-function normalizeFilterValues(values) {
-  return new Set((values ?? []).map((value) => value.trim()).filter(Boolean));
-}
-function filterHostingUnits(units, filter) {
-  const serviceIds = normalizeFilterValues(filter?.serviceIds);
-  const placements = normalizeFilterValues(filter?.placements);
-  const hosts = normalizeFilterValues(filter?.hosts);
-  const allServiceIds = new Set(units.flatMap((unit) => [unit.id, typeof unit.config.poolKey === "string" ? unit.config.poolKey : null]).filter((value) => Boolean(value)));
-  const missingServices = [...serviceIds].filter((serviceId) => !allServiceIds.has(serviceId));
-  if (missingServices.length > 0) {
-    throw new Error(`Unknown hosting service id${missingServices.length === 1 ? "" : "s"}: ${missingServices.join(", ")}.`);
-  }
-  if (serviceIds.size === 0 && placements.size === 0 && hosts.size === 0) {
-    return units.filter((unit) => unit.metadata.deployByDefault !== false);
-  }
-  return units.filter((unit) => (serviceIds.size === 0 || serviceIds.has(unit.id) || typeof unit.config.poolKey === "string" && serviceIds.has(unit.config.poolKey)) && (placements.size === 0 || placements.has(unit.placement)) && (hosts.size === 0 || hosts.has(unit.host.id)));
-}
-function compileSingleTreeseedHostingGraph(input, application) {
-  const environment = normalizeEnvironment(input.environment);
-  const deployConfig = input.deployConfig ?? loadTreeseedDeployConfig(resolve(input.tenantRoot, "treeseed.site.yaml"));
-  const pluginContributions = collectPluginHostingContributions({ ...input, deployConfig, environment });
-  const hosts = mergeRecord(createDefaultHostAdapters(), pluginContributions.hostAdapters, input.hostAdapters);
-  const serviceTypes = mergeRecord(createDefaultServiceTypeAdapters(), pluginContributions.serviceTypeAdapters, input.serviceTypeAdapters);
-  const compiledProfile = buildProfileFromDeployConfig({ ...input, deployConfig, environment });
-  const profiles = [
-    ...createDefaultHostingProfiles(),
-    ...pluginContributions.profiles,
-    compiledProfile,
-    ...input.profiles ?? []
-  ];
-  const projectGroups = Object.fromEntries(
-    profiles.flatMap((profile) => profile.projectGroups ?? []).map((group) => [group.id, group])
-  );
-  const services = profiles.flatMap((profile) => profile.services);
-  const applicationInfo = application ? {
-    id: application.id,
-    root: application.root,
-    relativeRoot: application.relativeRoot,
-    configPath: application.configPath,
-    roles: application.roles
-  } : void 0;
-  const units = filterHostingUnits(orderUnits(services.map((service) => createUnit(service, environment, hosts, serviceTypes, projectGroups, applicationInfo)).filter((unit) => Boolean(unit))), input.filter);
-  return {
-    tenantRoot: input.tenantRoot,
-    environment,
-    deployConfig,
-    applications: application ? [application] : void 0,
-    hosts,
-    serviceTypes,
-    profiles,
-    projectGroups,
-    units,
-    placements: summarizePlacements(units),
-    warnings: []
-  };
-}
-function mergeTreeseedHostingGraphs(input, applications) {
-  const environment = normalizeEnvironment(input.environment);
-  const graphs = applications.map((application) => compileSingleTreeseedHostingGraph({
-    ...input,
-    tenantRoot: application.root,
-    configRoot: resolve(input.tenantRoot),
-    deployConfig: application.config,
-    filter: void 0
-  }, application));
-  const rootGraph = graphs.find((graph) => graph.tenantRoot === resolve(input.tenantRoot)) ?? graphs[0];
-  const hosts = mergeRecord(...graphs.map((graph) => graph.hosts), input.hostAdapters);
-  const serviceTypes = mergeRecord(...graphs.map((graph) => graph.serviceTypes), input.serviceTypeAdapters);
-  const projectGroups = mergeRecord(...graphs.map((graph) => graph.projectGroups));
-  const profiles = graphs.flatMap((graph) => graph.profiles);
-  const units = filterHostingUnits(orderUnits(graphs.flatMap((graph) => graph.units)), input.filter);
-  return {
-    tenantRoot: resolve(input.tenantRoot),
-    environment,
-    deployConfig: rootGraph.deployConfig,
-    applications,
-    hosts,
-    serviceTypes,
-    profiles,
-    projectGroups,
-    units,
-    placements: summarizePlacements(units),
-    warnings: graphs.flatMap((graph) => graph.warnings)
-  };
-}
-function compileTreeseedHostingGraph(input) {
-  if (input.deployConfig) {
-    return compileSingleTreeseedHostingGraph(input);
-  }
-  const tenantRoot = resolve(input.tenantRoot);
-  if (input.appId) {
-    const application = findTreeseedApplication(tenantRoot, input.appId);
-    if (!application) {
-      throw new Error(`Unknown Treeseed application "${input.appId}".`);
-    }
-    return compileSingleTreeseedHostingGraph({
-      ...input,
-      tenantRoot: application.root,
-      configRoot: tenantRoot,
-      deployConfig: application.config
-    }, application);
-  }
-  const applications = discoverTreeseedApplications(tenantRoot);
-  if (applications.length > 1) {
-    return mergeTreeseedHostingGraphs(input, applications);
-  }
-  return compileSingleTreeseedHostingGraph(input, applications[0]);
-}
-async function planTreeseedHostingGraph(input) {
-  const graph = compileTreeseedHostingGraph(input);
-  const units = [];
-  for (const unit of graph.units) {
-    const observed = await unit.host.refresh({ environment: graph.environment, unit, graph, planOnly: input.planOnly !== false });
-    const plan = await unit.host.diff({ environment: graph.environment, unit, graph, observed, planOnly: input.planOnly !== false });
-    const verification = await unit.host.verify({ environment: graph.environment, unit, graph, observed, planOnly: input.planOnly !== false });
-    units.push({ unit, observed, plan, verification });
-  }
-  return {
-    environment: graph.environment,
-    planOnly: input.planOnly !== false,
-    units,
-    placements: graph.placements,
-    warnings: graph.warnings
-  };
-}
-function railwayReconcileSystemsForUnits(units) {
-  const systems = /* @__PURE__ */ new Set();
-  for (const unit of units) {
-    if (unit.host.id !== "railway") continue;
-    if (unit.id === "operationsRunner") {
-      systems.add("api");
-      continue;
-    }
-    if (unit.placement === "api" || unit.placement === "knowledge-library" || unit.id === "api" || unit.serviceType.id === "container-api" || unit.serviceType.id === "treedx-node") {
-      systems.add("api");
-    }
-    if (unit.placement === "runner-capacity" || unit.serviceType.id === "runner-pool") {
-      systems.add("agents");
-    }
-    if (unit.placement === "database" && units.some((candidate) => candidate.id === "api" || candidate.placement === "api")) {
-      systems.add("api");
-    }
-  }
-  return [...systems];
-}
-function serializeHostingUnit(unit) {
-  return sanitizedUnitConfig(unit);
-}
-function canonicalActionKind(value) {
-  const allowed = /* @__PURE__ */ new Set(["noop", "create", "update", "replace", "delete", "adopt", "rename", "reattach", "retain", "taint", "blocked"]);
-  return typeof value === "string" && allowed.has(value) ? value : "noop";
-}
-function canonicalHostingNode(unit, value) {
-  return {
-    id: unit.id,
-    provider: unit.host.id,
-    type: unit.serviceType.id,
-    owner: unit.application?.id ?? null,
-    environment: unit.environment,
-    spec: serializeHostingUnit(unit),
-    state: value,
-    locators: {
-      hostId: unit.host.id,
-      projectGroupId: unit.projectGroup?.id ?? null,
-      serviceTypeId: unit.serviceType.id
-    },
-    metadata: {
-      placement: unit.placement,
-      logicalName: unit.logicalName
-    }
-  };
-}
-function canonicalHostingDrift(unit, entries, fallbackReason) {
-  const rawEntries = Array.isArray(entries) ? entries : [];
-  if (rawEntries.length === 0) return [];
-  return rawEntries.map((entry, index) => ({
-    id: `${unit.id}:drift:${index + 1}`,
-    resourceId: unit.id,
-    severity: "blocking",
-    reason: typeof entry === "string" ? entry : fallbackReason,
-    provider: unit.host.id,
-    type: unit.serviceType.id,
-    observed: entry
-  }));
-}
-function canonicalHostingPostcondition(unit, verification) {
-  const issues = [
-    ...Array.isArray(verification.issues) ? verification.issues.map(String) : [],
-    ...Array.isArray(verification.checks) ? verification.checks.flatMap((check) => {
-      if (!check || typeof check !== "object") return [];
-      const maybeIssues = check.issues;
-      return Array.isArray(maybeIssues) ? maybeIssues.map(String) : [];
-    }) : []
-  ];
-  return {
-    id: `${unit.id}:verified`,
-    resourceId: unit.id,
-    description: `Live postconditions pass for ${unit.logicalName}.`,
-    source: "sdk",
-    required: true,
-    ok: verification.verified === true,
-    issues,
-    observed: verification
-  };
-}
-function hostingPlanReason(plan, prefix) {
-  return plan.reasons?.length ? plan.reasons.join("; ") : `${prefix} ${String(plan.action ?? "noop")}.`;
-}
-function canonicalHostingReportFromPlan(plan) {
-  const desiredGraph = plan.units.map((entry) => canonicalHostingNode(entry.unit));
-  const observedGraph = plan.units.map((entry) => canonicalHostingNode(entry.unit, entry.observed));
-  const diff = plan.units.flatMap((entry) => [
-    ...entry.plan.action && entry.plan.action !== "noop" ? [{
-      id: `${entry.unit.id}:diff`,
-      resourceId: entry.unit.id,
-      severity: canonicalActionKind(entry.plan.action) === "blocked" ? "blocking" : "info",
-      reason: hostingPlanReason(entry.plan, "Planned"),
-      provider: entry.unit.host.id,
-      type: entry.unit.serviceType.id,
-      expected: serializeHostingUnit(entry.unit),
-      observed: entry.observed
-    }] : [],
-    ...canonicalHostingDrift(entry.unit, entry.plan.blockedDrift, "Blocked provider drift.")
-  ]);
-  const providerLimitations = plan.units.flatMap((entry) => canonicalHostingDrift(entry.unit, entry.plan.providerLimitations, "Provider limitation."));
-  const actions = plan.units.map((entry) => ({
-    id: `${entry.unit.id}:${entry.plan.action ?? "noop"}`,
-    kind: canonicalActionKind(entry.plan.action),
-    resourceId: entry.unit.id,
-    reason: hostingPlanReason(entry.plan, "Planned"),
-    provider: entry.unit.host.id,
-    type: entry.unit.serviceType.id,
-    before: entry.observed,
-    after: serializeHostingUnit(entry.unit)
-  }));
-  return createTreeseedCanonicalReconcileReport({
-    desiredGraph,
-    observedGraph,
-    stateGraph: [],
-    diff,
-    actions,
-    postconditions: plan.units.map((entry) => canonicalHostingPostcondition(entry.unit, entry.verification)),
-    selectedResources: plan.units.map((entry) => entry.unit.id),
-    skippedResources: [],
-    blockedDrift: diff.filter((entry) => entry.severity === "blocking"),
-    providerLimitations,
-    retainedResources: plan.units.flatMap((entry) => (entry.plan.retainedResources ?? []).map((resource, index) => ({
-      id: `${entry.unit.id}:retained:${index + 1}`,
-      provider: entry.unit.host.id,
-      type: "retained-resource",
-      owner: entry.unit.application?.id ?? null,
-      state: resource
-    }))),
-    liveVerification: {
-      ok: plan.units.every((entry) => entry.verification.verified === true),
-      source: "hosting-plan",
-      issues: plan.units.filter((entry) => entry.verification.verified !== true).map((entry) => `${entry.unit.id}: verification did not pass`)
-    }
-  });
-}
-function serializeHostingPlan(plan) {
-  const selectedSystems = railwayReconcileSystemsForUnits(plan.units.map((entry) => entry.unit));
-  const canonical = canonicalHostingReportFromPlan(plan);
-  return {
-    environment: plan.environment,
-    planOnly: plan.planOnly,
-    ...canonical,
-    selectedApps: [...new Set(plan.units.map((entry) => entry.unit.application?.id).filter((value) => Boolean(value)))],
-    selectedSystems,
-    skippedSystems: ["web", "data", "github"].filter((system) => !selectedSystems.includes(system)).map((system) => ({ system, reason: selectedSystems.length > 0 ? "Not selected by hosting app filter." : "No Railway reconciliation selected." })),
-    transport: selectedSystems.length > 0 ? {
-      railway: {
-        reconcile: "api",
-        deploy: process.env.TREESEED_RAILWAY_DEPLOY_TRANSPORT === "cli-fallback" ? "cli-fallback" : "api"
-      }
-    } : void 0,
-    placements: plan.placements,
-    units: plan.units.map((entry) => ({
-      unit: serializeHostingUnit(entry.unit),
-      desired: serializeHostingUnit(entry.unit),
-      observed: entry.observed,
-      diff: entry.plan,
-      actions: entry.plan.actions ?? [entry.plan.action],
-      retainedResources: entry.plan.retainedResources ?? [],
-      blockedDrift: entry.plan.blockedDrift ?? [],
-      providerLimitations: entry.plan.providerLimitations ?? [],
-      plan: entry.plan,
-      verification: entry.verification
-    })),
-    warnings: plan.warnings
-  };
-}
-function hostingEnvironmentLabel(environment) {
-  return ENVIRONMENT_NAMES[environment];
-}
-export {
-  compileTreeseedHostingGraph,
-  hostingEnvironmentLabel,
-  planTreeseedHostingGraph,
-  serializeHostingPlan,
-  serializeHostingUnit
-};