@treeseed/sdk 0.13.0-rc.11 → 0.13.0-rc.110

package/dist/operator-contracts/catalog/hosted-topology-operations.d.ts

@@ -0,0 +1,399 @@
+export declare const HOSTED_TOPOLOGY_OPERATIONS: {
+    readonly plan: import("../control-plane-operation.js").ControlPlaneOperationBinding<{
+        teamId: string;
+    }, {}, {
+        declaration: {
+            id: string;
+            schemaVersion: "treeseed.hosted-topology/v1";
+            resources: {
+                kind: "admin-application" | "pages-application" | "dns-record" | "tls-policy" | "api-proxy" | "control-plane-api" | "postgresql" | "operations-runner" | "treedx-service";
+                provider: "cloudflare" | "railway";
+                id: string;
+                adoption: {
+                    mode: "adopt-or-create";
+                    replacement: "forbidden";
+                    externalIdInput?: string | undefined;
+                };
+                dependsOn?: string[] | undefined;
+                parameters?: Record<string, {
+                    input: string;
+                } | {
+                    artifact: string;
+                } | {
+                    resourceOutput: {
+                        resourceId: string;
+                        output: string;
+                    };
+                } | {
+                    literal: string | number | boolean;
+                }> | undefined;
+            }[];
+            teamId: string;
+            platform: {
+                repository: "treeseed-ai/platform";
+                commit: string;
+            };
+            mutation: "agent-authorized";
+            environment: "production" | "staging";
+            artifacts: Record<string, {
+                kind: "archive";
+                digest: string;
+                source: string;
+                format: "tar+gzip";
+            } | {
+                kind: "file";
+                digest: string;
+                source: string;
+                mediaType: string;
+            } | {
+                identity: string;
+                kind: "oci-image";
+                digest: string;
+            }>;
+            deploymentId: string;
+            stackId: string;
+            stateBackend: {
+                connectionRef: string;
+            };
+            providerConnections: Partial<Record<"cloudflare" | "railway", {
+                connectionRef: string;
+            }>>;
+        };
+    }, Record<string, unknown>>;
+    readonly apply: import("../control-plane-operation.js").ControlPlaneOperationBinding<{
+        teamId: string;
+    }, {}, {
+        plan: {
+            schemaVersion: "treeseed.hosted-topology-plan/v1";
+            blockers: {
+                code: "connection-unavailable" | "state-backend-unavailable" | "dependency-cycle" | "observation-unhealthy" | "adoption-drift";
+                message: string;
+                resourceId?: string | undefined;
+            }[];
+            planDigest: string;
+            actions: {
+                kind: "admin-application" | "pages-application" | "dns-record" | "tls-policy" | "api-proxy" | "control-plane-api" | "postgresql" | "operations-runner" | "treedx-service";
+                provider: "cloudflare" | "railway";
+                action: "noop" | "create" | "adopt" | "update";
+                resourceId: string;
+                providerResourceId: string | null;
+                desiredResource: {
+                    kind: "admin-application" | "pages-application" | "dns-record" | "tls-policy" | "api-proxy" | "control-plane-api" | "postgresql" | "operations-runner" | "treedx-service";
+                    provider: "cloudflare" | "railway";
+                    id: string;
+                    adoption: {
+                        mode: "adopt-or-create";
+                        replacement: "forbidden";
+                        externalIdInput?: string | undefined;
+                    };
+                    dependsOn?: string[] | undefined;
+                    parameters?: Record<string, {
+                        input: string;
+                    } | {
+                        artifact: string;
+                    } | {
+                        resourceOutput: {
+                            resourceId: string;
+                            output: string;
+                        };
+                    } | {
+                        literal: string | number | boolean;
+                    }> | undefined;
+                };
+                desiredDigest: string;
+                previousDigest: string | null;
+            }[];
+            teamId: string;
+            environment: "production" | "staging";
+            executable: false;
+            artifacts: Record<string, {
+                kind: "archive";
+                digest: string;
+                source: string;
+                format: "tar+gzip";
+            } | {
+                kind: "file";
+                digest: string;
+                source: string;
+                mediaType: string;
+            } | {
+                identity: string;
+                kind: "oci-image";
+                digest: string;
+            }>;
+            planId: string;
+            deploymentId: string;
+            stackId: string;
+            stateBackend: {
+                type: "s3";
+                schemaVersion: "treeseed.hosted-state-backend/v1";
+                key: string;
+                teamId: string;
+                environment: "production" | "staging";
+                deploymentId: string;
+                bucket: string;
+                stackId: string;
+                connectionRef: string;
+                region: string;
+                encryptionKeyRef: string;
+                bindingDigest: string;
+                endpoint?: string | undefined;
+                usePathStyle?: boolean | undefined;
+            } | null;
+            providerConnections: Partial<Record<"cloudflare" | "railway", {
+                connectionRef: string;
+                nonSecretConfig: Record<string, string | number | boolean>;
+            }>>;
+            declarationDigest: string;
+            topologyId: string;
+            platformCommit: string;
+            authorization: "authenticated-agent";
+        };
+    }, Record<string, unknown>>;
+    readonly status: import("../control-plane-operation.js").ControlPlaneOperationBinding<{
+        teamId: string;
+    }, {}, undefined, {
+        operation: Record<string, unknown> | null;
+        receipt: {
+            state: "known-good";
+            schemaVersion: "treeseed.hosted-topology-receipt/v1";
+            resources: {
+                kind: "admin-application" | "pages-application" | "dns-record" | "tls-policy" | "api-proxy" | "control-plane-api" | "postgresql" | "operations-runner" | "treedx-service";
+                provider: "cloudflare" | "railway";
+                state: "missing" | "degraded" | "healthy";
+                resourceId: string;
+                providerResourceId: string | null;
+                managedBy: "external" | "treeseed" | null;
+                observedDigest: string | null;
+                observedAt: string;
+            }[];
+            planDigest: string;
+            teamId: string;
+            environment: "production" | "staging";
+            completedAt: string;
+            receiptId: string;
+            deploymentId: string;
+            stackId: string;
+            declarationDigest: string;
+            topologyId: string;
+            platformCommit: string;
+            backendBindingDigest: string;
+            previousResources: {
+                kind: "admin-application" | "pages-application" | "dns-record" | "tls-policy" | "api-proxy" | "control-plane-api" | "postgresql" | "operations-runner" | "treedx-service";
+                provider: "cloudflare" | "railway";
+                state: "missing" | "degraded" | "healthy";
+                resourceId: string;
+                providerResourceId: string | null;
+                managedBy: "external" | "treeseed" | null;
+                observedDigest: string | null;
+                observedAt: string;
+            }[];
+        } | null;
+    }>;
+    readonly rollback: import("../control-plane-operation.js").ControlPlaneOperationBinding<{
+        teamId: string;
+    }, {}, {
+        execution: {
+            schemaVersion: "treeseed.hosted-topology-rollback-execution/v1";
+            teamId: string;
+            environment: "production" | "staging";
+            rollback: {
+                schemaVersion: "treeseed.hosted-topology-rollback/v1";
+                teamId: string;
+                environment: "production" | "staging";
+                operations: {
+                    action: "noop" | "restore" | "delete-created";
+                    resourceId: string;
+                    providerResourceId: string;
+                    targetDigest: string | null;
+                }[];
+                deploymentId: string;
+                stackId: string;
+                backendBindingDigest: string;
+                rollbackId: string;
+                sourceReceiptId: string;
+                rollbackDigest: string;
+            };
+            deploymentId: string;
+            stackId: string;
+            topologyId: string;
+            backendBindingDigest: string;
+            sourceReceiptId: string;
+            sourcePlanDigest: string;
+            targetPlanDigest: string;
+            executionDigest: string;
+        };
+        sourcePlan: {
+            schemaVersion: "treeseed.hosted-topology-plan/v1";
+            blockers: {
+                code: "connection-unavailable" | "state-backend-unavailable" | "dependency-cycle" | "observation-unhealthy" | "adoption-drift";
+                message: string;
+                resourceId?: string | undefined;
+            }[];
+            planDigest: string;
+            actions: {
+                kind: "admin-application" | "pages-application" | "dns-record" | "tls-policy" | "api-proxy" | "control-plane-api" | "postgresql" | "operations-runner" | "treedx-service";
+                provider: "cloudflare" | "railway";
+                action: "noop" | "create" | "adopt" | "update";
+                resourceId: string;
+                providerResourceId: string | null;
+                desiredResource: {
+                    kind: "admin-application" | "pages-application" | "dns-record" | "tls-policy" | "api-proxy" | "control-plane-api" | "postgresql" | "operations-runner" | "treedx-service";
+                    provider: "cloudflare" | "railway";
+                    id: string;
+                    adoption: {
+                        mode: "adopt-or-create";
+                        replacement: "forbidden";
+                        externalIdInput?: string | undefined;
+                    };
+                    dependsOn?: string[] | undefined;
+                    parameters?: Record<string, {
+                        input: string;
+                    } | {
+                        artifact: string;
+                    } | {
+                        resourceOutput: {
+                            resourceId: string;
+                            output: string;
+                        };
+                    } | {
+                        literal: string | number | boolean;
+                    }> | undefined;
+                };
+                desiredDigest: string;
+                previousDigest: string | null;
+            }[];
+            teamId: string;
+            environment: "production" | "staging";
+            executable: false;
+            artifacts: Record<string, {
+                kind: "archive";
+                digest: string;
+                source: string;
+                format: "tar+gzip";
+            } | {
+                kind: "file";
+                digest: string;
+                source: string;
+                mediaType: string;
+            } | {
+                identity: string;
+                kind: "oci-image";
+                digest: string;
+            }>;
+            planId: string;
+            deploymentId: string;
+            stackId: string;
+            stateBackend: {
+                type: "s3";
+                schemaVersion: "treeseed.hosted-state-backend/v1";
+                key: string;
+                teamId: string;
+                environment: "production" | "staging";
+                deploymentId: string;
+                bucket: string;
+                stackId: string;
+                connectionRef: string;
+                region: string;
+                encryptionKeyRef: string;
+                bindingDigest: string;
+                endpoint?: string | undefined;
+                usePathStyle?: boolean | undefined;
+            } | null;
+            providerConnections: Partial<Record<"cloudflare" | "railway", {
+                connectionRef: string;
+                nonSecretConfig: Record<string, string | number | boolean>;
+            }>>;
+            declarationDigest: string;
+            topologyId: string;
+            platformCommit: string;
+            authorization: "authenticated-agent";
+        };
+        targetPlan: {
+            schemaVersion: "treeseed.hosted-topology-plan/v1";
+            blockers: {
+                code: "connection-unavailable" | "state-backend-unavailable" | "dependency-cycle" | "observation-unhealthy" | "adoption-drift";
+                message: string;
+                resourceId?: string | undefined;
+            }[];
+            planDigest: string;
+            actions: {
+                kind: "admin-application" | "pages-application" | "dns-record" | "tls-policy" | "api-proxy" | "control-plane-api" | "postgresql" | "operations-runner" | "treedx-service";
+                provider: "cloudflare" | "railway";
+                action: "noop" | "create" | "adopt" | "update";
+                resourceId: string;
+                providerResourceId: string | null;
+                desiredResource: {
+                    kind: "admin-application" | "pages-application" | "dns-record" | "tls-policy" | "api-proxy" | "control-plane-api" | "postgresql" | "operations-runner" | "treedx-service";
+                    provider: "cloudflare" | "railway";
+                    id: string;
+                    adoption: {
+                        mode: "adopt-or-create";
+                        replacement: "forbidden";
+                        externalIdInput?: string | undefined;
+                    };
+                    dependsOn?: string[] | undefined;
+                    parameters?: Record<string, {
+                        input: string;
+                    } | {
+                        artifact: string;
+                    } | {
+                        resourceOutput: {
+                            resourceId: string;
+                            output: string;
+                        };
+                    } | {
+                        literal: string | number | boolean;
+                    }> | undefined;
+                };
+                desiredDigest: string;
+                previousDigest: string | null;
+            }[];
+            teamId: string;
+            environment: "production" | "staging";
+            executable: false;
+            artifacts: Record<string, {
+                kind: "archive";
+                digest: string;
+                source: string;
+                format: "tar+gzip";
+            } | {
+                kind: "file";
+                digest: string;
+                source: string;
+                mediaType: string;
+            } | {
+                identity: string;
+                kind: "oci-image";
+                digest: string;
+            }>;
+            planId: string;
+            deploymentId: string;
+            stackId: string;
+            stateBackend: {
+                type: "s3";
+                schemaVersion: "treeseed.hosted-state-backend/v1";
+                key: string;
+                teamId: string;
+                environment: "production" | "staging";
+                deploymentId: string;
+                bucket: string;
+                stackId: string;
+                connectionRef: string;
+                region: string;
+                encryptionKeyRef: string;
+                bindingDigest: string;
+                endpoint?: string | undefined;
+                usePathStyle?: boolean | undefined;
+            } | null;
+            providerConnections: Partial<Record<"cloudflare" | "railway", {
+                connectionRef: string;
+                nonSecretConfig: Record<string, string | number | boolean>;
+            }>>;
+            declarationDigest: string;
+            topologyId: string;
+            platformCommit: string;
+            authorization: "authenticated-agent";
+        };
+    }, Record<string, unknown>>;
+};

package/dist/operator-contracts/catalog/hosted-topology-operations.js

@@ -0,0 +1,79 @@
+import { z } from "zod";
+import { hostedTopologyDeclarationSchema, hostedTopologyPlanSchema, hostedTopologyReceiptSchema, hostedTopologyRollbackExecutionSchema } from "../../deployment/hosted-topology.js";
+import { defineOperation } from "../operation-builder.js";
+const teamPath = z.object({ teamId: z.string().min(1) }).strict();
+const empty = z.object({}).strict();
+const none = z.undefined();
+const operationReceipt = z.record(z.unknown());
+const HOSTED_TOPOLOGY_OPERATIONS = {
+  plan: defineOperation({
+    operationId: "infrastructure.topology.plan",
+    description: "Plan exact hosted topology reconciliation from authoritative provider observations.",
+    rest: { method: "POST", path: "/v1/teams/{teamId}/infrastructure/topology/plan" },
+    parameters: "treeseed.infrastructure.topology.plan.parameters/v1",
+    capability: "infrastructure.read",
+    authentication: "oauth",
+    oauthScopes: ["treeseed:read"],
+    kind: "read",
+    riskClass: "ordinary",
+    confirmation: "never",
+    surfaces: ["rest", "cli"],
+    cacheScope: "none",
+    pagination: "none",
+    idempotencyRequired: false
+  }, { path: teamPath, query: empty, body: z.object({ declaration: hostedTopologyDeclarationSchema }).strict(), output: operationReceipt }),
+  apply: defineOperation({
+    operationId: "infrastructure.topology.apply",
+    description: "Apply an exact agent-authorized hosted topology plan through the operations runner.",
+    rest: { method: "POST", path: "/v1/teams/{teamId}/infrastructure/topology/apply" },
+    parameters: "treeseed.infrastructure.topology.apply.parameters/v1",
+    capability: "infrastructure.write",
+    authentication: "oauth",
+    oauthScopes: ["treeseed:admin"],
+    kind: "mutation",
+    riskClass: "authority",
+    confirmation: "input_required",
+    surfaces: ["rest", "cli"],
+    cacheScope: "none",
+    pagination: "none",
+    concurrencyRequired: true
+  }, { path: teamPath, query: empty, body: z.object({ plan: hostedTopologyPlanSchema }).strict(), output: operationReceipt }),
+  status: defineOperation({
+    operationId: "infrastructure.topology.status",
+    description: "Read the latest authoritative hosted topology receipt and operation state.",
+    rest: { method: "GET", path: "/v1/teams/{teamId}/infrastructure/topology" },
+    parameters: "treeseed.infrastructure.topology.status.parameters/v1",
+    capability: "infrastructure.read",
+    authentication: "oauth",
+    oauthScopes: ["treeseed:read"],
+    kind: "read",
+    riskClass: "ordinary",
+    confirmation: "never",
+    surfaces: ["rest", "cli"],
+    cacheScope: "principal",
+    pagination: "none"
+  }, { path: teamPath, query: empty, body: none, output: z.object({ receipt: hostedTopologyReceiptSchema.nullable(), operation: operationReceipt.nullable() }).strict() }),
+  rollback: defineOperation({
+    operationId: "infrastructure.topology.rollback",
+    description: "Restore exact prior hosted topology lineage from a known-good receipt.",
+    rest: { method: "POST", path: "/v1/teams/{teamId}/infrastructure/topology/rollback" },
+    parameters: "treeseed.infrastructure.topology.rollback.parameters/v1",
+    capability: "infrastructure.write",
+    authentication: "oauth",
+    oauthScopes: ["treeseed:admin"],
+    kind: "mutation",
+    riskClass: "destructive",
+    confirmation: "input_required",
+    surfaces: ["rest", "cli"],
+    cacheScope: "none",
+    pagination: "none",
+    concurrencyRequired: true
+  }, { path: teamPath, query: empty, body: z.object({
+    execution: hostedTopologyRollbackExecutionSchema,
+    sourcePlan: hostedTopologyPlanSchema,
+    targetPlan: hostedTopologyPlanSchema
+  }).strict(), output: operationReceipt })
+};
+export {
+  HOSTED_TOPOLOGY_OPERATIONS
+};