@treeseed/sdk 0.13.0-rc.1 → 0.13.0-rc.100

package/dist/platform/env.yaml

@@ -1,1128 +0,0 @@
-entries:
-  TREESEED_GITHUB_TOKEN:
-    label: GitHub access token
-    group: auth
-    description: Personal access token used by Treeseed for GitHub CLI automation, repository setup, CI secret sync, and repository-scoped GitHub workflows.
-    howToGet: "Create a GitHub fine-grained personal access token scoped to the TreeSeed repository. Required repository permissions: Contents read/write, Environments read/write, Secrets and variables read/write, Actions and workflows read/write, Pull requests read/write, Issues read/write. Then paste it here as TREESEED_GITHUB_TOKEN."
-    sensitivity: secret
-    targets:
-      - local-runtime
-      - railway-secret
-      - github-secret
-    scopes:
-      - local
-      - staging
-      - prod
-    storage: shared
-    requirement: required
-    purposes:
-      - save
-      - deploy
-      - config
-    validation:
-      kind: nonempty
-      minLength: 8
-    sourcePriority:
-      - machine-config
-      - process-env
-  TREESEED_GITHUB_COPILOT_TOKEN:
-    label: GitHub Copilot access token
-    group: auth
-    description: Account-scoped GitHub token used only by Treeseed GitHub Copilot SDK-backed execution providers.
-    howToGet: "Create a GitHub fine-grained personal access token for the account with an active Copilot subscription. Enable the Copilot Requests permission, then store it as TREESEED_GITHUB_COPILOT_TOKEN."
-    sensitivity: secret
-    targets:
-      - local-runtime
-      - github-secret
-      - railway-secret
-    scopes:
-      - local
-      - staging
-      - prod
-    storage: scoped
-    requirement: optional
-    purposes:
-      - config
-    validation:
-      kind: nonempty
-      minLength: 8
-    sourcePriority:
-      - machine-config
-      - process-env
-  TREESEED_OPENROUTER_API_KEY:
-    label: OpenRouter API key
-    group: auth
-    description: Provider-scoped OpenRouter credential brokered only to an OpenCode capacity provider.
-    howToGet: Create an OpenRouter API key with the intended model and spend limits, then store it as TREESEED_OPENROUTER_API_KEY.
-    sensitivity: secret
-    targets:
-      - local-runtime
-      - railway-secret
-    scopes:
-      - local
-      - staging
-      - prod
-    storage: scoped
-    requirement: optional
-    purposes:
-      - config
-    validation:
-      kind: nonempty
-      minLength: 8
-    sourcePriority:
-      - machine-config
-      - process-env
-  TREESEED_OPENCODE_SERVER_URL:
-    label: OpenCode server URL
-    group: agent
-    description: Private headless OpenCode server endpoint used by an OpenCode capacity provider.
-    howToGet: Start or reconcile a headless OpenCode server and enter its private provider-reachable URL.
-    sensitivity: plain
-    targets:
-      - local-runtime
-      - railway-variable
-    scopes:
-      - local
-      - staging
-      - prod
-    storage: scoped
-    requirement: optional
-    purposes:
-      - config
-    validation:
-      kind: url
-    sourcePriority:
-      - machine-config
-      - process-env
-  TREESEED_OPENCODE_SERVER_USERNAME:
-    label: OpenCode server username
-    group: agent
-    description: Optional basic-auth username for the private OpenCode server.
-    howToGet: Use the username configured on the headless OpenCode server.
-    sensitivity: plain
-    targets: [local-runtime, railway-variable]
-    scopes: [local, staging, prod]
-    storage: scoped
-    requirement: optional
-    purposes: [config]
-    validation: { kind: nonempty }
-    sourcePriority: [machine-config, process-env]
-  TREESEED_OPENCODE_SERVER_PASSWORD:
-    label: OpenCode server password
-    group: auth
-    description: Optional basic-auth password brokered only to an OpenCode capacity provider.
-    howToGet: Use the password configured on the headless OpenCode server.
-    sensitivity: secret
-    targets: [local-runtime, railway-secret]
-    scopes: [local, staging, prod]
-    storage: scoped
-    requirement: optional
-    purposes: [config]
-    validation: { kind: nonempty }
-    sourcePriority: [machine-config, process-env]
-  TREESEED_DOCKERHUB_USERNAME:
-    label: Docker Hub username
-    group: docker
-    description: Docker Hub username used by Treeseed package release workflows to publish container images such as treeseed/treedx and treeseed/treedx-profiler.
-    howToGet: Use the Docker Hub account or organization user that owns the Treeseed images.
-    sensitivity: plain
-    targets:
-      - local-runtime
-      - github-variable
-    scopes:
-      - staging
-      - prod
-    storage: shared
-    requirement: optional
-    purposes:
-      - deploy
-      - config
-    validation:
-      kind: nonempty
-    sourcePriority:
-      - machine-config
-      - process-env
-  TREESEED_DOCKERHUB_TOKEN:
-    label: Docker Hub token
-    group: docker
-    description: Docker Hub access token used by Treeseed production release workflows to publish semantic TreeDX service and profiler images.
-    howToGet: Create a Docker Hub access token with permission to push the Treeseed images, then store it through Treeseed config as TREESEED_DOCKERHUB_TOKEN.
-    sensitivity: secret
-    targets:
-      - local-runtime
-      - github-secret
-    scopes:
-      - staging
-      - prod
-    storage: shared
-    requirement: optional
-    purposes:
-      - deploy
-      - config
-    validation:
-      kind: nonempty
-      minLength: 8
-    sourcePriority:
-      - machine-config
-      - process-env
-  TREESEED_RAILWAY_API_TOKEN:
-    label: Railway API token
-    group: auth
-    description: Account-level Railway API token used by Treeseed to provision, reconcile, deploy, and inspect Market Railway services.
-    howToGet: Create a Railway account API token with access to the Treeseed Market project/workspace, then store it through Treeseed config as TREESEED_RAILWAY_API_TOKEN.
-    sensitivity: secret
-    targets:
-      - local-runtime
-      - github-secret
-      - railway-secret
-    serviceTargets:
-      - operationsRunner
-    scopes:
-      - local
-      - staging
-      - prod
-    storage: shared
-    requirement: required
-    purposes:
-      - deploy
-      - config
-    validation:
-      kind: nonempty
-      minLength: 8
-    sourcePriority:
-      - machine-config
-      - process-env
-    relevanceRef: railwayManagedEnabled
-    requiredWhenRef: railwayManagedEnabled
-  TREESEED_RAILWAY_WORKSPACE:
-    label: Railway workspace
-    group: railway
-    description: Railway workspace Treeseed should use when listing or creating projects during bootstrap and config reconciliation.
-    howToGet: In Railway, use the workspace slug or name shown in the workspace switcher.
-    sensitivity: plain
-    targets:
-      - local-runtime
-      - github-variable
-      - railway-var
-    scopes:
-      - staging
-      - prod
-    storage: shared
-    requirement: optional
-    purposes:
-      - deploy
-      - destroy
-      - config
-    validation:
-      kind: nonempty
-    sourcePriority:
-      - machine-config
-      - process-env
-    relevanceRef: railwayManagedEnabled
-    requiredWhenRef: railwayManagedEnabled
-  TREESEED_RAILWAY_PROJECT_ID:
-    label: Railway project ID
-    group: hosting
-    visibility: system
-    description: Railway project identifier used by hosted deploy workflows and reconciliation helpers for the active environment.
-    howToGet: Treeseed can derive or persist this after Railway project reconciliation. Override it only when targeting a known Railway project ID.
-    sensitivity: plain
-    targets:
-      - github-variable
-      - railway-var
-    scopes:
-      - staging
-      - prod
-    storage: scoped
-    requirement: optional
-    purposes:
-      - deploy
-      - config
-    validation:
-      kind: nonempty
-    sourcePriority:
-      - machine-config
-      - process-env
-    relevanceRef: railwayManagedEnabled
-  TREESEED_GITHUB_OWNER:
-    label: GitHub repository owner
-    group: github
-    description: GitHub user or organization that owns the Treeseed repository used for bootstrap, CI/CD, and environment sync.
-    howToGet: Treeseed suggests this from the origin remote when available. Otherwise enter the GitHub user or organization that should own the repository.
-    sensitivity: plain
-    targets:
-      - local-runtime
-    scopes:
-      - local
-    storage: scoped
-    requirement: required
-    purposes:
-      - config
-    validation:
-      kind: nonempty
-    sourcePriority:
-      - machine-config
-      - process-env
-    defaultValueRef: githubOwnerDefault
-  TREESEED_GITHUB_REPOSITORY_NAME:
-    label: GitHub repository name
-    group: github
-    description: GitHub repository name Treeseed should verify or create before GitHub bootstrap.
-    howToGet: Treeseed suggests this from the origin remote when available and otherwise defaults it from the site slug.
-    sensitivity: plain
-    targets:
-      - local-runtime
-    scopes:
-      - local
-    storage: scoped
-    requirement: required
-    purposes:
-      - config
-    validation:
-      kind: nonempty
-    sourcePriority:
-      - machine-config
-      - process-env
-    defaultValueRef: githubRepositoryNameDefault
-  TREESEED_GITHUB_REPOSITORY_VISIBILITY:
-    label: GitHub repository visibility
-    group: github
-    description: Visibility to use if Treeseed needs to create the GitHub repository during bootstrap.
-    howToGet: Choose private, public, or internal. Treeseed defaults new repositories to private.
-    sensitivity: plain
-    targets:
-      - local-runtime
-    scopes:
-      - local
-    storage: scoped
-    requirement: optional
-    purposes:
-      - config
-    validation:
-      kind: enum
-      values:
-        - private
-        - public
-        - internal
-    sourcePriority:
-      - machine-config
-      - process-env
-    defaultValueRef: githubRepositoryVisibilityDefault
-  TREESEED_CLOUDFLARE_API_TOKEN:
-    label: Cloudflare API token
-    group: auth
-    description: Account-level Cloudflare API token used by Wrangler, Workers AI, and CI to manage Pages, Workers, Workers KV, D1, R2, Queues, Turnstile, DNS, cache settings, secrets, and deploys.
-    howToGet: "Create a Cloudflare account-level API token scoped to the target account and domain. Account permissions: Pages Write, Workers Scripts Write, Workers KV Storage Write, D1 Write, Queues Write, Turnstile Sites Write, Cloudflare Tunnel Write, Account Rulesets Write, and Account Rule Lists Write. Zone permissions: Zone Read, DNS Write, Cache Settings Write, and SSL and Certificates Write. If this token is used as the local Tunnel fallback it must include Tunnel Write and DNS Write."
-    sensitivity: secret
-    targets:
-      - local-runtime
-      - github-secret
-    scopes:
-      - local
-      - staging
-      - prod
-    storage: shared
-    requirement: required
-    purposes:
-      - save
-      - deploy
-      - destroy
-      - config
-    validation:
-      kind: nonempty
-      minLength: 8
-    sourcePriority:
-      - machine-config
-      - process-env
-  TREESEED_CLOUDFLARE_TUNNEL_API_TOKEN:
-    label: Cloudflare Tunnel API token
-    group: cloudflare
-    description: Optional least-privilege token used only to reconcile the local GitHub callback and webhook tunnel. Falls back to TREESEED_CLOUDFLARE_API_TOKEN with a warning.
-    howToGet: Create an account-scoped token with Cloudflare Tunnel Write and DNS Write for only the local development hostname.
-    sensitivity: secret
-    targets:
-      - local-runtime
-    scopes:
-      - local
-    storage: scoped
-    requirement: optional
-    purposes:
-      - config
-    validation:
-      kind: nonempty
-      minLength: 8
-    sourcePriority:
-      - machine-config
-      - process-env
-  TREESEED_CLOUDFLARE_ACCOUNT_ID:
-    label: Cloudflare account ID
-    group: cloudflare
-    description: Identifies the Cloudflare account Treeseed should provision, deploy into, and use for Workers AI commit message generation.
-    howToGet: In the Cloudflare dashboard, open Workers & Pages or Account Home and copy the account ID.
-    startupProfile: core
-    sensitivity: plain
-    targets:
-      - local-runtime
-      - github-variable
-      - config-file
-    scopes:
-      - local
-      - staging
-      - prod
-    storage: shared
-    requirement: required
-    purposes:
-      - save
-      - deploy
-      - destroy
-      - config
-    validation:
-      kind: nonempty
-    sourcePriority:
-      - machine-config
-      - process-env
-  TREESEED_CLOUDFLARE_PAGES_PROJECT_NAME:
-    label: Cloudflare Pages project name
-    group: cloudflare
-    description: Static Cloudflare Pages project used for all Treeseed web environments.
-    howToGet: Treeseed can default this from the site slug. Override it if the Cloudflare Pages project should use a different name.
-    sensitivity: plain
-    targets:
-      - local-runtime
-      - github-variable
-    scopes:
-      - staging
-      - prod
-    storage: shared
-    requirement: required
-    purposes:
-      - deploy
-      - config
-    validation:
-      kind: nonempty
-    sourcePriority:
-      - machine-config
-      - process-env
-    defaultValueRef: pagesProjectNameDefault
-  TREESEED_CLOUDFLARE_PAGES_PREVIEW_PROJECT_NAME:
-    label: Cloudflare preview Pages project
-    group: cloudflare
-    description: Legacy alias for the shared Cloudflare Pages project used by non-production branch deployments. Do not configure a separate project per environment.
-    howToGet: Treeseed defaults this to TREESEED_CLOUDFLARE_PAGES_PROJECT_NAME so staging deploys use the shared Pages project preview environment.
-    sensitivity: plain
-    targets:
-      - local-runtime
-      - github-variable
-    scopes:
-      - staging
-      - prod
-    storage: shared
-    requirement: required
-    purposes:
-      - deploy
-      - config
-    validation:
-      kind: nonempty
-    sourcePriority:
-      - machine-config
-      - process-env
-    defaultValueRef: pagesPreviewProjectNameDefault
-  TREESEED_CONTENT_BUCKET_NAME:
-    label: Cloudflare R2 content bucket
-    group: cloudflare
-    description: Shared R2 bucket name that stores team-scoped published content, artifacts, and editorial overlays.
-    howToGet: Treeseed can default this from the site slug with a -content suffix. Override it if the shared bucket should use a different name.
-    sensitivity: plain
-    targets:
-      - local-runtime
-      - github-variable
-      - railway-var
-      - config-file
-    scopes:
-      - local
-      - staging
-      - prod
-    storage: shared
-    requirement: required
-    purposes:
-      - save
-      - deploy
-      - config
-    validation:
-      kind: nonempty
-    sourcePriority:
-      - machine-config
-      - process-env
-    defaultValueRef: contentBucketNameDefault
-  TREESEED_CONTENT_BUCKET_BINDING:
-    label: Cloudflare R2 binding name
-    group: cloudflare
-    description: Worker binding name used to mount the shared Treeseed content bucket.
-    howToGet: Treeseed defaults this to TREESEED_CONTENT_BUCKET unless you need a different binding name.
-    sensitivity: plain
-    targets:
-      - local-runtime
-      - github-variable
-    scopes:
-      - staging
-      - prod
-    storage: shared
-    requirement: required
-    purposes:
-      - deploy
-      - config
-    validation:
-      kind: nonempty
-    sourcePriority:
-      - machine-config
-      - process-env
-    defaultValueRef: contentBucketBindingDefault
-  TREESEED_EDITORIAL_PREVIEW_SECRET:
-    label: Editorial preview signing secret
-    group: cloudflare
-    description: Shared HMAC secret used to sign and verify temporary editorial preview links and cookies.
-    howToGet: Treeseed can generate a strong random secret for you. Reuse the same value across hosted environments so preview links remain valid during staging-to-production promotion.
-    sensitivity: secret
-    targets:
-      - local-runtime
-      - github-secret
-      - cloudflare-secret
-    scopes:
-      - staging
-      - prod
-    storage: shared
-    requirement: required
-    purposes:
-      - deploy
-      - config
-    validation:
-      kind: nonempty
-    sourcePriority:
-      - machine-config
-      - process-env
-    defaultValueRef: generatedSecret
-  TREESEED_HOSTING_KIND:
-    label: Treeseed hosting kind
-    group: hosting
-    description: Declares whether this repository is the central market control plane, a Treeseed-hosted project platform, or a self-hosted project platform.
-    howToGet: Treeseed can derive this from the hosting block in treeseed.site.yaml. Override it only when the runtime environment must force a different deployment profile.
-    sensitivity: plain
-    targets:
-      - github-variable
-      - railway-var
-      - config-file
-    scopes:
-      - staging
-      - prod
-    storage: shared
-    requirement: required
-    purposes:
-      - deploy
-      - config
-    validation:
-      kind: enum
-      values:
-        - treeseed_control_plane
-        - hosted_project
-        - self_hosted_project
-    sourcePriority:
-      - machine-config
-      - process-env
-      - treeseed.site.yaml
-    defaultValueRef: hostingKindDefault
-  TREESEED_HOSTING_REGISTRATION:
-    label: Treeseed hosting registration mode
-    group: hosting
-    description: Controls whether a self-hosted project should register itself with the market control plane or remain completely standalone.
-    howToGet: Treeseed can derive this from the hosting block in treeseed.site.yaml.
-    sensitivity: plain
-    targets:
-      - github-variable
-      - railway-var
-      - config-file
-    scopes:
-      - staging
-      - prod
-    storage: shared
-    requirement: required
-    purposes:
-      - deploy
-      - config
-    validation:
-      kind: enum
-      values:
-        - optional
-        - none
-    sourcePriority:
-      - machine-config
-      - process-env
-      - treeseed.site.yaml
-    defaultValueRef: hostingRegistrationDefault
-  TREESEED_MARKET_API_BASE_URL:
-    label: Treeseed Market API base URL
-    group: hosting
-    description: Immutable singleton TreeSeed Market gateway used for registry, ecommerce, licensing, and ecosystem-governance operations.
-    howToGet: The production TreeSeed Market is https://api.treeseed.dev. Only process-scoped local tests may substitute a local fixture URL.
-    sensitivity: plain
-    targets:
-      - github-variable
-      - railway-var
-      - config-file
-    scopes:
-      - staging
-      - prod
-    storage: shared
-    requirement: required
-    purposes:
-      - deploy
-      - config
-    validation:
-      kind: url
-    sourcePriority:
-      - machine-config
-      - process-env
-      - treeseed.site.yaml
-    defaultValueRef: centralMarketBaseUrlDefault
-  TREESEED_API_BASE_URL:
-    label: Treeseed default API base URL
-    group: hosting
-    description: Resolved Admin control-plane API URL. It equals the Market gateway in pass-through mode and points to sovereign infrastructure in external or managed mode.
-    howToGet: Leave the control-plane mode at market-passthrough for https://api.treeseed.dev, supply an external URL, or let managed reconciliation derive the customer-owned API URL.
-    sensitivity: plain
-    targets:
-      - github-variable
-      - railway-var
-    scopes:
-      - staging
-      - prod
-    storage: shared
-    requirement: optional
-    purposes:
-      - deploy
-      - config
-    validation:
-      kind: url
-    sourcePriority:
-      - machine-config
-      - process-env
-      - treeseed.site.yaml
-    relevanceRef: projectRegistrationEnabled
-    requiredWhenRef: projectRegistrationEnabled
-    defaultValueRef: marketBaseUrlDefault
-  TREESEED_DATABASE_URL:
-    label: Treeseed PostgreSQL database URL
-    group: hosting
-    cluster: hosting:treeseed-control-plane
-    visibility: system
-    description: PostgreSQL connection URL for Treeseed control-plane tables. Local development derives this from the managed local API Postgres configuration; hosted environments receive the reconciled Railway PostgreSQL connection URL. Browser/UI code must never receive this value.
-    howToGet: For local development, Treeseed derives this from the local API Postgres port and database defaults. For staging and production, provision the managed Treeseed PostgreSQL resource through Treeseed/Railway reconciliation and store the generated connection URL as a service secret.
-    sensitivity: secret
-    targets:
-      - local-runtime
-      - railway-secret
-    serviceTargets:
-      - api
-      - operationsRunner
-    scopes:
-      - local
-      - staging
-      - prod
-    storage: scoped
-    requirement: optional
-    purposes:
-      - deploy
-      - config
-    validation:
-      kind: url
-    sourcePriority:
-      - generated
-      - machine-config
-      - process-env
-      - treeseed.site.yaml
-    localDefaultValueRef: localApiDatabaseUrlDefault
-  TREESEED_PLATFORM_RUNNER_SECRET:
-    label: Treeseed operations runner secret
-    group: hosting
-    cluster: hosting:operations-runner
-    visibility: system
-    description: Bearer credential used only by the TreeSeed-owned Treeseed operations runner to claim and update platform operation jobs.
-    howToGet: Generate a strong secret with `openssl rand -base64 48` and store it through `treeseed config` for staging and production.
-    sensitivity: secret
-    targets:
-      - github-secret
-      - railway-secret
-    serviceTargets:
-      - api
-      - operationsRunner
-    scopes:
-      - staging
-      - prod
-    storage: scoped
-    requirement: optional
-    purposes:
-      - deploy
-      - config
-    validation:
-      kind: nonempty
-      minLength: 24
-    sourcePriority:
-      - machine-config
-      - process-env
-    defaultValueRef: generatedSecret
-  TREESEED_PLATFORM_RUNNER_ID:
-    label: Treeseed operations runner ID
-    group: hosting
-    cluster: hosting:operations-runner
-    visibility: system
-    description: Stable identity for the TreeSeed-owned Treeseed operations runner service in each environment.
-    howToGet: Treeseed derives this from the environment. Override it only when replacing a runner identity deliberately.
-    sensitivity: plain
-    targets:
-      - railway-var
-    serviceTargets:
-      - operationsRunner
-    scopes:
-      - staging
-      - prod
-    storage: scoped
-    requirement: conditional
-    purposes:
-      - deploy
-      - config
-    validation:
-      kind: nonempty
-    sourcePriority:
-      - machine-config
-      - process-env
-      - treeseed.site.yaml
-    defaultValueRef: platformRunnerIdDefault
-  TREESEED_PLATFORM_RUNNER_DATA_DIR:
-    label: Treeseed operations runner data directory
-    group: hosting
-    cluster: hosting:operations-runner
-    visibility: system
-    description: Writable data directory mounted into the Treeseed operations runner for repository workspaces and operation state.
-    howToGet: Use `/data` for Railway runner services with an attached volume.
-    sensitivity: plain
-    targets:
-      - railway-var
-    serviceTargets:
-      - operationsRunner
-    scopes:
-      - staging
-      - prod
-    storage: scoped
-    requirement: conditional
-    purposes:
-      - deploy
-      - config
-    validation:
-      kind: nonempty
-    sourcePriority:
-      - machine-config
-      - process-env
-      - treeseed.site.yaml
-    defaultValueRef: platformRunnerDataDirDefault
-  TREESEED_PLATFORM_RUNNER_ENVIRONMENT:
-    label: Treeseed operations runner environment
-    group: hosting
-    cluster: hosting:operations-runner
-    visibility: system
-    description: Runtime environment label reported by the Treeseed operations runner in registration and heartbeat records.
-    howToGet: Treeseed derives this from the selected environment.
-    sensitivity: plain
-    targets:
-      - railway-var
-    serviceTargets:
-      - operationsRunner
-    scopes:
-      - staging
-      - prod
-    storage: scoped
-    requirement: conditional
-    purposes:
-      - deploy
-      - config
-    validation:
-      kind: nonempty
-    sourcePriority:
-      - machine-config
-      - process-env
-      - treeseed.site.yaml
-    defaultValueRef: platformRunnerEnvironmentDefault
-  TREESEED_STRIPE_SECRET_KEY:
-    label: Stripe platform secret key
-    group: commerce
-    cluster: hosting:treeseed-control-plane
-    visibility: system
-    description: Platform Stripe secret key used only by the API for Connect onboarding, Product/Price mirror sync, PaymentIntent confirmation, subscriptions, webhook reconciliation, and connected-account refunds.
-    howToGet: "Stripe Dashboard -> Developers -> API keys. Use test mode first. Prefer a restricted key when available with access for Connect accounts, account links, login links, Products, Prices, PaymentIntents, Customers, Subscriptions, Refunds, and webhook event reads as needed. Store with `npx trsd config set TREESEED_STRIPE_SECRET_KEY --environment local|staging|prod`; never place Stripe secret keys in plaintext env files and never request vendor-provided Stripe secret keys."
-    sensitivity: secret
-    targets:
-      - local-runtime
-      - railway-secret
-    serviceTargets:
-      - api
-    scopes:
-      - local
-      - staging
-      - prod
-    storage: scoped
-    requirement: optional
-    purposes:
-      - deploy
-      - config
-    validation:
-      kind: nonempty
-    sourcePriority:
-      - machine-config
-      - process-env
-  TREESEED_STRIPE_PUBLISHABLE_KEY:
-    label: Stripe publishable key
-    group: commerce
-    cluster: hosting:treeseed-control-plane
-    visibility: system
-    description: Platform Stripe publishable key returned by `/v1/commerce/stripe/config` for root-market Stripe Elements checkout surfaces. Admin must not initialize Stripe Elements.
-    howToGet: "Stripe Dashboard -> Developers -> API keys. Copy the publishable key for the same test/live mode as TREESEED_STRIPE_SECRET_KEY and store it with `npx trsd config set TREESEED_STRIPE_PUBLISHABLE_KEY --environment local|staging|prod`."
-    sensitivity: plain
-    targets:
-      - local-runtime
-      - railway-var
-      - config-file
-    serviceTargets:
-      - api
-    scopes:
-      - local
-      - staging
-      - prod
-    storage: shared
-    requirement: optional
-    purposes:
-      - deploy
-      - config
-    validation:
-      kind: nonempty
-    sourcePriority:
-      - machine-config
-      - process-env
-      - treeseed.site.yaml
-  TREESEED_STRIPE_WEBHOOK_SECRET:
-    label: Stripe webhook signing secret
-    group: commerce
-    cluster: hosting:treeseed-control-plane
-    visibility: system
-    description: Stripe webhook endpoint signing secret used by the API to verify connected-account payment and subscription events.
-    howToGet: "Stripe Dashboard -> Developers -> Webhooks. Add endpoint `<TREESEED_API_BASE_URL>/v1/commerce/webhooks/stripe`; for local development use the Stripe CLI to forward to the local API. Subscribe to payment_intent.succeeded, payment_intent.payment_failed, payment_intent.canceled, customer.subscription.created, customer.subscription.updated, customer.subscription.deleted, invoice.payment_succeeded, and invoice.payment_failed. Copy the signing secret and store it with `npx trsd config set TREESEED_STRIPE_WEBHOOK_SECRET --environment local|staging|prod`."
-    sensitivity: secret
-    targets:
-      - local-runtime
-      - railway-secret
-    serviceTargets:
-      - api
-    scopes:
-      - local
-      - staging
-      - prod
-    storage: scoped
-    requirement: optional
-    purposes:
-      - deploy
-      - config
-    validation:
-      kind: nonempty
-    sourcePriority:
-      - machine-config
-      - process-env
-  TREESEED_STRIPE_MODE:
-    label: Stripe mode
-    group: commerce
-    cluster: hosting:treeseed-control-plane
-    visibility: system
-    description: Stripe environment mode used by marketplace seller onboarding, mirror sync, checkout, webhooks, subscriptions, and refunds. Defaults to test for local and staging.
-    howToGet: "Set `test` for local and staging with `npx trsd config set TREESEED_STRIPE_MODE test --environment local|staging`. Set `live` in production only after Connect onboarding, webhook verification, local/staging marketplace acceptance, and Stripe production readiness are complete."
-    sensitivity: plain
-    targets:
-      - local-runtime
-      - railway-var
-      - config-file
-    serviceTargets:
-      - api
-    scopes:
-      - local
-      - staging
-      - prod
-    storage: shared
-    requirement: optional
-    purposes:
-      - deploy
-      - config
-    validation:
-      kind: enum
-      values:
-        - test
-        - live
-    sourcePriority:
-      - machine-config
-      - process-env
-      - treeseed.site.yaml
-  TREESEED_STRIPE_CONNECT_ACCOUNT_TYPE:
-    label: Stripe Connect account type
-    group: commerce
-    cluster: hosting:treeseed-control-plane
-    visibility: system
-    description: Canonical Stripe Connect account model for approved vendor onboarding. TreeSeed creates hosted onboarding links and vendors never provide raw Stripe secret keys.
-    howToGet: "Keep this set to `express` with `npx trsd config set TREESEED_STRIPE_CONNECT_ACCOUNT_TYPE express --environment local|staging|prod` unless a future documented phase changes the Connect account model."
-    sensitivity: plain
-    targets:
-      - local-runtime
-      - railway-var
-      - config-file
-    serviceTargets:
-      - api
-    scopes:
-      - local
-      - staging
-      - prod
-    storage: shared
-    requirement: optional
-    purposes:
-      - deploy
-      - config
-    validation:
-      kind: enum
-      values:
-        - express
-    sourcePriority:
-      - machine-config
-      - process-env
-      - treeseed.site.yaml
-  TREESEED_CATALOG_MARKET_API_BASE_URLS:
-    label: Treeseed catalog API URLs
-    group: hosting
-    description: Comma-separated API base URLs that contribute templates, knowledge packs, and shared resources to the integrated catalog.
-    howToGet: Start with the production TreeSeed market at https://api.treeseed.dev and add specialized team or enterprise API URLs as needed.
-    sensitivity: plain
-    targets:
-      - github-variable
-      - railway-var
-      - config-file
-    scopes:
-      - staging
-      - prod
-    storage: shared
-    requirement: optional
-    purposes:
-      - deploy
-      - config
-    validation:
-      kind: string
-    sourcePriority:
-      - machine-config
-      - process-env
-      - treeseed.site.yaml
-    defaultValueRef: catalogMarketBaseUrlsDefault
-  TREESEED_HOSTING_TEAM_ID:
-    label: Hosted team ID
-    group: hosting
-    description: Team identifier used by hosted or registered project platforms when they publish infrastructure metadata or resolve team-scoped content.
-    howToGet: Treeseed defaults this to the site slug unless you need a different hosted team identifier.
-    sensitivity: plain
-    targets:
-      - github-variable
-      - railway-var
-    scopes:
-      - staging
-      - prod
-    storage: shared
-    requirement: conditional
-    purposes:
-      - deploy
-      - config
-    validation:
-      kind: nonempty
-    sourcePriority:
-      - machine-config
-      - process-env
-    relevanceRef: projectRegistrationEnabled
-    requiredWhenRef: projectRegistrationEnabled
-    defaultValueRef: hostingTeamIdDefault
-  TREESEED_PROJECT_ID:
-    label: Hosted project ID
-    group: hosting
-    description: Stable project identifier used by hosted or registered self-hosted project platforms for dispatch and deployment reporting.
-    howToGet: Treeseed defaults this to the site slug unless you need a different hosted project identifier.
-    sensitivity: plain
-    targets:
-      - github-variable
-      - railway-var
-    scopes:
-      - staging
-      - prod
-    storage: shared
-    requirement: conditional
-    purposes:
-      - deploy
-      - config
-    validation:
-      kind: nonempty
-    sourcePriority:
-      - machine-config
-      - process-env
-    relevanceRef: projectRegistrationEnabled
-    requiredWhenRef: projectRegistrationEnabled
-    defaultValueRef: hostingProjectIdDefault
-  TREESEED_CAPACITY_ACCEPTANCE_API_URL:
-    label: Capacity acceptance API URL
-    group: capacity-provider
-    description: Market API base URL used by live capacity runtime acceptance proof.
-    howToGet: Set to the staging or local API base URL when running capacity provider live acceptance.
-    sensitivity: plain
-    targets:
-      - local-runtime
-    scopes:
-      - local
-      - staging
-      - prod
-    storage: scoped
-    requirement: optional
-    purposes:
-      - dev
-      - config
-    validation:
-      kind: url
-    sourcePriority:
-      - machine-config
-      - process-env
-  TREESEED_CAPACITY_ACCEPTANCE_ADMIN_TOKEN:
-    label: Capacity acceptance admin token
-    group: capacity-provider
-    description: Admin bearer token used only by live capacity runtime acceptance proof.
-    howToGet: Create a scoped test/admin token for the acceptance environment and store it through Treeseed config.
-    sensitivity: secret
-    targets:
-      - local-runtime
-    scopes:
-      - local
-      - staging
-      - prod
-    storage: scoped
-    requirement: optional
-    purposes:
-      - dev
-      - config
-    validation:
-      kind: nonempty
-      minLength: 8
-    sourcePriority:
-      - machine-config
-      - process-env
-  TREESEED_CAPACITY_ACCEPTANCE_TEAM_ID:
-    label: Capacity acceptance team ID
-    group: capacity-provider
-    description: Team id used by live capacity runtime acceptance proof.
-    howToGet: Use a dedicated test team id in the target Market environment.
-    sensitivity: plain
-    targets:
-      - local-runtime
-    scopes:
-      - local
-      - staging
-      - prod
-    storage: scoped
-    requirement: optional
-    purposes:
-      - dev
-      - config
-    validation:
-      kind: nonempty
-    sourcePriority:
-      - machine-config
-      - process-env
-  TREESEED_CAPACITY_ACCEPTANCE_PROJECT_ID:
-    label: Capacity acceptance project ID
-    group: capacity-provider
-    description: Project id used by live capacity runtime acceptance proof.
-    howToGet: Use a dedicated test project id in the target Market environment.
-    sensitivity: plain
-    targets:
-      - local-runtime
-    scopes:
-      - local
-      - staging
-      - prod
-    storage: scoped
-    requirement: optional
-    purposes:
-      - dev
-      - config
-    validation:
-      kind: nonempty
-    sourcePriority:
-      - machine-config
-      - process-env
-  TREESEED_CAPACITY_ACCEPTANCE_PROVIDER_ID:
-    label: Capacity acceptance provider ID
-    group: capacity-provider
-    description: Provider id used by live capacity runtime acceptance proof.
-    howToGet: Use the provider id assigned to the test capacity provider.
-    sensitivity: plain
-    targets:
-      - local-runtime
-    scopes:
-      - local
-      - staging
-      - prod
-    storage: scoped
-    requirement: optional
-    purposes:
-      - dev
-      - config
-    validation:
-      kind: nonempty
-    sourcePriority:
-      - machine-config
-      - process-env
-  TREESEED_CAPACITY_ACCEPTANCE_AGENT_CLASS_ID:
-    label: Capacity acceptance agent class ID
-    group: capacity-provider
-    description: Agent class id used by live capacity runtime acceptance proof.
-    howToGet: Use an agent class available to the acceptance test project.
-    sensitivity: plain
-    targets:
-      - local-runtime
-    scopes:
-      - local
-      - staging
-      - prod
-    storage: scoped
-    requirement: optional
-    purposes:
-      - dev
-      - config
-    validation:
-      kind: nonempty
-    sourcePriority:
-      - machine-config
-      - process-env
-  TREESEED_CAPACITY_ACCEPTANCE_MODE:
-    label: Capacity acceptance mode
-    group: capacity-provider
-    description: Work mode requested by live capacity runtime acceptance proof.
-    howToGet: Leave unset to use planning, or set a supported project mode for the proof.
-    sensitivity: plain
-    targets:
-      - local-runtime
-    scopes:
-      - local
-      - staging
-      - prod
-    storage: scoped
-    requirement: optional
-    purposes:
-      - dev
-      - config
-    validation:
-      kind: nonempty
-    sourcePriority:
-      - machine-config
-      - process-env