@treeseed/sdk 0.12.8 → 0.12.10

package/dist/operations/services/config-runtime.js

@@ -48,7 +48,7 @@ import {
   ensureGitHubBranchFromBase
 } from "./github-api.js";
 import { resolveGitHubCredentialForRepository } from "./github-credentials.js";
-import { loadCliDeployConfig, packageScriptPath, resolveWranglerBin, withProcessCwd } from "./runtime-tools.js";
+import { loadCliDeployConfig, packageDistScriptRoot, packageScriptPath, resolveWranglerBin, withProcessCwd } from "./runtime-tools.js";
 import { PRODUCTION_BRANCH, STAGING_BRANCH } from "./git-workflow.js";
 import {
   createTreeseedManagedToolEnv,
@@ -82,6 +82,7 @@ const TEMPLATE_CATALOG_CACHE_RELATIVE_PATH = "treeseed/cache/template-catalog.js
 const TENANT_ENVIRONMENT_OVERLAY_PATH = "src/env.yaml";
 const CLOUDFLARE_ACCOUNT_ID_PLACEHOLDER = "replace-with-cloudflare-account-id";
 const TREESEED_KEY_AGENT_AUTOPROMPT_ENV = "TREESEED_KEY_AGENT_AUTOPROMPT";
+const KEY_AGENT_COMMAND_TIMEOUT_MS = 1e4;
 const DEFAULT_TREESEED_API_BASE_URL = "https://api.treeseed.dev";
 const DEFAULT_TEMPLATE_CATALOG_URL = "https://api.treeseed.dev/search/templates";
 const TREESEED_TEMPLATE_CATALOG_URL_ENV = "TREESEED_TEMPLATE_CATALOG_URL";
@@ -335,7 +336,12 @@ function resolveManagedWorktreeMachineConfigRoot(tenantRoot) {
   }
 }
 function keyAgentScriptPath() {
-  return packageScriptPath("key-agent.ts");
+  const distScriptPath = resolve(packageDistScriptRoot, "key-agent.js");
+  return existsSync(distScriptPath) ? distScriptPath : packageScriptPath("key-agent.ts");
+}
+function keyAgentNodeArgs() {
+  const scriptPath = keyAgentScriptPath();
+  return scriptPath.endsWith(".ts") ? ["--import", "tsx", scriptPath] : [scriptPath];
 }
 function keyAgentScriptCwd() {
   return dirname(dirname(keyAgentScriptPath()));
@@ -372,11 +378,10 @@ function withTreeseedKeyAgentAutopromptDisabled(action) {
 function startTreeseedKeyAgentDaemon(tenantRoot) {
   const { keyPath } = getTreeseedMachineConfigPaths(tenantRoot);
   const { socketPath } = getTreeseedKeyAgentPaths();
+  const scriptArgs = keyAgentNodeArgs();
   const command = [
     shellQuote(process.execPath),
-    "--import",
-    "tsx",
-    shellQuote(keyAgentScriptPath()),
+    ...scriptArgs.map((arg) => shellQuote(arg)),
     "serve",
     "--key-path",
     shellQuote(keyPath),
@@ -396,9 +401,7 @@ function startTreeseedKeyAgentDaemon(tenantRoot) {
 }
 function runTreeseedKeyAgentCommand(args, options = {}) {
   const result = spawnSync(process.execPath, [
-    "--import",
-    "tsx",
-    keyAgentScriptPath(),
+    ...keyAgentNodeArgs(),
     ...args
   ], {
     cwd: keyAgentScriptCwd(),
@@ -408,8 +411,18 @@ function runTreeseedKeyAgentCommand(args, options = {}) {
       ...options.env ?? {}
     },
     stdio: options.input !== void 0 ? ["pipe", "pipe", "pipe"] : ["ignore", "pipe", "pipe"],
-    input: options.input
+    input: options.input,
+    timeout: KEY_AGENT_COMMAND_TIMEOUT_MS,
+    killSignal: "SIGTERM"
   });
+  if (result.error) {
+    const timedOut = result.error.code === "ETIMEDOUT";
+    return {
+      ok: false,
+      code: "daemon_unavailable",
+      message: timedOut ? `Treeseed key-agent command timed out after ${KEY_AGENT_COMMAND_TIMEOUT_MS}ms.` : result.error.message || "Treeseed key-agent command failed."
+    };
+  }
   if (result.status !== 0 && (!result.stdout || result.stdout.trim().length === 0)) {
     return {
       ok: false,

package/dist/scenes/builtin-plugins.js

@@ -57,6 +57,27 @@ function extractConfirmationUrl(body) {
   const relative = body.match(/(?:\/auth\/confirm-email\?[^"' <>\n]+|\/team-invites\/[^"' <>\n]+\/accept)/u)?.[0];
   return relative ?? null;
 }
+async function sleep(ms) {
+  await new Promise((resolve) => setTimeout(resolve, ms));
+}
+function isRetryableNavigationError(error) {
+  const message = error instanceof Error ? error.message : String(error ?? "");
+  return /Timeout|ERR_CONNECTION|ECONNRESET|ECONNREFUSED|ETIMEDOUT|503|502|504/iu.test(message);
+}
+async function navigateScenePage(page, url) {
+  let lastError = null;
+  for (let attempt = 1; attempt <= 3; attempt += 1) {
+    try {
+      await page.goto(url, { waitUntil: "domcontentloaded", timeout: 45e3 });
+      return;
+    } catch (error) {
+      lastError = error;
+      if (!isRetryableNavigationError(error) || attempt >= 3) break;
+      await sleep(500 * attempt);
+    }
+  }
+  throw lastError instanceof Error ? lastError : new Error(String(lastError ?? `Navigation failed for ${url}`));
+}
 async function assertionReport(kind, action, selector) {
   const startedAt = /* @__PURE__ */ new Date();
   try {
@@ -85,7 +106,7 @@ function createBuiltInTreeseedScenePlugins() {
           summary: "Navigate to a route or absolute URL.",
           async run({ action, context }) {
             if (!("goto" in action)) return { ok: false, diagnostics: [sceneErrorDiagnostic("scene.invalid_action", "Expected goto action.", "workflow.action.goto")] };
-            await context.session.page.goto(context.resolveUrl(action.goto));
+            await navigateScenePage(context.session.page, context.resolveUrl(action.goto));
             return { ok: true, diagnostics: [] };
           }
         },
@@ -219,18 +240,18 @@ function createBuiltInTreeseedScenePlugins() {
                 search.searchParams.set("query", `to:${email}`);
                 context.timeline.push("mailpit.inbox.open", { messageId: id, email, url: search.toString() }, step.id);
                 context.progress?.push("mailpit.inbox.open", { messageId: id, email }, { stepId: step.id });
-                await context.session.page.goto(search.toString());
+                await navigateScenePage(context.session.page, search.toString());
                 await context.sleep(displayInboxSeconds * 1e3);
               }
               if (displayMessageSeconds && displayMessageSeconds > 0) {
                 const view = new URL(`view/${encodeURIComponent(id)}`, mailpitBase);
                 context.timeline.push("mailpit.message.open", { messageId: id, email, url: view.toString() }, step.id);
                 context.progress?.push("mailpit.message.open", { messageId: id, email }, { stepId: step.id });
-                await context.session.page.goto(view.toString());
+                await navigateScenePage(context.session.page, view.toString());
                 await context.sleep(displayMessageSeconds * 1e3);
               }
               context.timeline.push("mailpit.confirm.open", { messageId: id, email, url: resolvedUrl }, step.id);
-              await context.session.page.goto(resolvedUrl);
+              await navigateScenePage(context.session.page, resolvedUrl);
               return { ok: true, diagnostics: [] };
             } catch (error) {
               return { ok: false, diagnostics: [sceneErrorDiagnostic("scene.mailpit_unavailable", error instanceof Error ? error.message : String(error ?? "Mailpit confirmation failed."), `workflow.${step.id}.action.mailpitConfirmLatest`)] };

package/dist/scenes/types.d.ts

@@ -1809,7 +1809,10 @@ export type TreeseedSceneLocator = {
     isVisible(): Promise<boolean>;
 };
 export type TreeseedScenePage = {
-    goto(url: string): Promise<void>;
+    goto(url: string, options?: {
+        waitUntil?: 'load' | 'domcontentloaded' | 'networkidle';
+        timeout?: number;
+    }): Promise<void>;
     url(): string;
     locator(selector: string): TreeseedSceneLocator;
     getByTestId(testId: string): TreeseedSceneLocator;

package/dist/scenes/visual-audit-fixtures.js

@@ -58,6 +58,22 @@ function serviceHeaders(input) {
     "x-treeseed-service-secret": configuredValue(input, "TREESEED_API_WEB_SERVICE_SECRET") ?? configuredValue(input, "TREESEED_WEB_SERVICE_SECRET") ?? "treeseed-web-service-dev-secret"
   };
 }
+async function sleep(ms) {
+  await new Promise((resolve) => setTimeout(resolve, ms));
+}
+function retryDelayMs(attempt) {
+  return Math.min(500 * attempt, 2e3);
+}
+function isRetryableStatus(status) {
+  return [408, 425, 429, 500, 502, 503, 504].includes(status);
+}
+async function gotoSceneFixturePage(page, url) {
+  await page.goto(url, { waitUntil: "domcontentloaded", timeout: 45e3 });
+  await page.waitForLoadState?.("networkidle", { timeout: 5e3 }).catch(() => void 0);
+}
+function isSignInUrl(value) {
+  return /\/auth\/sign-in/u.test(value);
+}
 function seedActorsForRoles(roles) {
   const actors = {};
   for (const role of roles) {
@@ -76,32 +92,33 @@ function seedActorsForRoles(roles) {
 async function seedVisualAuditFixtures(input) {
   const actors = seedActorsForRoles(input.roles);
   if (Object.keys(actors).length === 0) return [];
-  try {
-    const response = await fetch(new URL("/v1/acceptance/seed", input.baseUrl).toString(), {
-      method: "POST",
-      headers: serviceHeaders(input),
-      body: JSON.stringify({
-        namespace: "visual-audit",
-        password: TREESEED_VISUAL_AUDIT_PASSWORD,
-        actors
-      })
-    });
-    const text = await response.text();
-    if (!response.ok) {
-      return [sceneWarningDiagnostic(
-        "scene.visual_audit_fixture_unavailable",
-        `Visual audit API fixture seed failed with HTTP ${response.status}: ${text.slice(0, 500)}`,
-        "roles"
-      )];
+  let lastFailure = null;
+  for (let attempt = 1; attempt <= 3; attempt += 1) {
+    try {
+      const response = await fetch(new URL("/v1/acceptance/seed", input.baseUrl).toString(), {
+        method: "POST",
+        headers: serviceHeaders(input),
+        body: JSON.stringify({
+          namespace: "visual-audit",
+          password: TREESEED_VISUAL_AUDIT_PASSWORD,
+          actors
+        })
+      });
+      const text = await response.text();
+      if (response.ok) return [];
+      lastFailure = `HTTP ${response.status}: ${text.slice(0, 500)}`;
+      if (!isRetryableStatus(response.status) || attempt >= 3) break;
+    } catch (error) {
+      lastFailure = error instanceof Error ? error.message : String(error ?? "local fixture API is unavailable");
+      if (attempt >= 3) break;
     }
-    return [];
-  } catch (error) {
-    return [sceneWarningDiagnostic(
-      "scene.visual_audit_fixture_unavailable",
-      `Visual audit API fixture seed failed against ${input.baseUrl}: ${error instanceof Error ? error.message : String(error ?? "local fixture API is unavailable")}.`,
-      "roles"
-    )];
+    await sleep(retryDelayMs(attempt));
   }
+  return [sceneWarningDiagnostic(
+    "scene.visual_audit_fixture_unavailable",
+    `Visual audit API fixture seed failed against ${input.baseUrl}: ${lastFailure ?? "local fixture API is unavailable"}.`,
+    "roles"
+  )];
 }
 async function ensureTreeseedSceneVisualAuditRoleFixtures(input) {
   const diagnostics = [];
@@ -165,40 +182,54 @@ async function signInTreeseedSceneVisualAuditRole(input) {
     return [sceneErrorDiagnostic("scene.visual_audit_role_unknown", `Visual audit role "${input.role}" has no fixture login.`, "role")];
   }
   const apiBaseUrl = input.apiBaseUrl?.trim() || input.baseUrl;
+  let lastError = null;
   try {
-    const session = await clientFor(apiBaseUrl).webSignIn({ login: user.email, password: user.password });
-    const accessToken = session.payload.accessToken;
-    if (accessToken) {
-      const webUrl = new URL(input.baseUrl);
-      await input.page.context().addCookies([{
-        name: "ts_market_api_access",
-        value: accessToken,
-        domain: webUrl.hostname,
-        path: "/",
-        httpOnly: true,
-        secure: webUrl.protocol === "https:",
-        sameSite: "Lax",
-        expires: Math.floor(Date.now() / 1e3) + Number(session.payload.expiresInSeconds ?? 900)
-      }]);
-      await input.page.goto(new URL("/app/", input.baseUrl).toString(), { waitUntil: "networkidle", timeout: 2e4 });
-      if (!/\/auth\/sign-in/u.test(input.page.url())) return [];
+    for (let attempt = 1; attempt <= 3; attempt += 1) {
+      const session = await clientFor(apiBaseUrl).webSignIn({ login: user.email, password: user.password });
+      const accessToken = session.payload.accessToken;
+      if (accessToken) {
+        const webUrl = new URL(input.baseUrl);
+        await input.page.context().addCookies([{
+          name: "ts_market_api_access",
+          value: accessToken,
+          domain: webUrl.hostname,
+          path: "/",
+          httpOnly: true,
+          secure: webUrl.protocol === "https:",
+          sameSite: "Lax",
+          expires: Math.floor(Date.now() / 1e3) + Number(session.payload.expiresInSeconds ?? 900)
+        }]);
+        await gotoSceneFixturePage(input.page, new URL("/app/", input.baseUrl).toString());
+        if (!isSignInUrl(input.page.url())) return [];
+      }
+      await sleep(retryDelayMs(attempt));
     }
   } catch {
   }
-  try {
-    await input.page.goto(new URL("/auth/sign-in", input.baseUrl).toString(), { waitUntil: "networkidle", timeout: 2e4 });
-    await input.page.locator('input[name="login"], input[name="email"], input[name="emailOrUsername"], input[name="username"]').first().fill(user.email, { timeout: 5e3 });
-    await input.page.locator('input[name="password"]').first().fill(user.password, { timeout: 5e3 });
-    await input.page.getByRole("button", { name: /sign in/i }).click({ timeout: 5e3 });
-    await input.page.waitForLoadState("networkidle", { timeout: 5e3 }).catch(() => void 0);
-    const url = input.page.url();
-    if (/\/auth\/sign-in/u.test(url)) {
-      return [sceneWarningDiagnostic("scene.visual_audit_role_login_failed", `Visual audit login for ${input.role} did not leave the sign-in page. Ensure deterministic fixture user ${user.email} exists.`, "roles")];
+  for (let attempt = 1; attempt <= 3; attempt += 1) {
+    try {
+      const signInUrl = new URL("/auth/sign-in", input.baseUrl);
+      signInUrl.searchParams.set("returnTo", "/app/");
+      await gotoSceneFixturePage(input.page, signInUrl.toString());
+      await input.page.locator('input[name="login"], input[name="email"], input[name="emailOrUsername"], input[name="username"]').first().fill(user.email, { timeout: 1e4 });
+      await input.page.locator('input[name="password"]').first().fill(user.password, { timeout: 1e4 });
+      await input.page.getByRole("button", { name: /sign in/i }).click({ timeout: 1e4 });
+      await input.page.waitForURL?.((url) => !isSignInUrl(url.pathname), { timeout: 15e3 }).catch(() => void 0);
+      await input.page.waitForLoadState?.("networkidle", { timeout: 5e3 }).catch(() => void 0);
+      if (!isSignInUrl(input.page.url())) {
+        return [];
+      }
+      lastError = new Error(`Visual audit login for ${input.role} did not leave the sign-in page. Ensure deterministic fixture user ${user.email} exists.`);
+    } catch (error) {
+      lastError = error;
     }
-    return [];
-  } catch (error) {
-    return [sceneWarningDiagnostic("scene.visual_audit_role_login_failed", error instanceof Error ? error.message : String(error ?? `Visual audit login for ${input.role} failed.`), "roles")];
+    await sleep(retryDelayMs(attempt));
   }
+  return [sceneWarningDiagnostic(
+    "scene.visual_audit_role_login_failed",
+    lastError instanceof Error ? lastError.message : String(lastError ?? `Visual audit login for ${input.role} failed.`),
+    "roles"
+  )];
 }
 export {
   TREESEED_VISUAL_AUDIT_PASSWORD,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@treeseed/sdk",
-  "version": "0.12.8",
+  "version": "0.12.10",
   "description": "Shared Treeseed SDK for content-backed and D1-backed object models.",
   "license": "AGPL-3.0-only",
   "repository": {