@treeseed/sdk 0.13.0-rc.113 → 0.13.0-rc.114

package/dist/.treeseed-build-complete.json

@@ -1 +1 @@
-{"completedAt":"2026-09-10T23:14:23.976Z"}
+{"completedAt":"2026-09-11T00:17:39.136Z"}

package/dist/capacity-provider/client.d.ts

@@ -2,6 +2,7 @@ import type { ProviderAssignmentLifecycleRequest, ProviderAssignmentLifecycleRes
 import type { ProviderRuntimeEventInput } from '../agent-capacity/contracts/capacity/workdays/workday-records.js';
 import type { CapacityProviderIdentity, CapacityProviderIdentityRotationRequest, CapacityProviderSignedProof, ProviderAccessTokenIssue, ProviderAvailabilitySession, ProviderCredentialIssuanceAuthorization, ProviderRegistrationRequest, ProviderRegistrationSubmission, ProviderTeamCredentialIssue } from './contracts/index.js';
 import type { ProviderDiscussionResponseRequest } from '../operator-contracts/communication/contracts.js';
+import { type SourceWorkspaceRequest } from './source-workspace.js';
 export interface ProviderProtocolClientOptions {
     controlPlaneUrl: string;
     accessToken?: string;
@@ -44,6 +45,48 @@ export declare class ProviderProtocolClient {
     startAssignmentExecution(assignmentId: string, request: Record<string, unknown>): Promise<Record<string, unknown>>;
     startAssignmentCloseout(assignmentId: string, request: Record<string, unknown>): Promise<Record<string, unknown>>;
     preflightAssignmentCompletion(assignmentId: string, request: Record<string, unknown>): Promise<Record<string, unknown>>;
+    /** Host provider transport only; the recipient key belongs to the trusted source fetch worker. */
+    authorizeAssignmentSource(assignmentId: string, request: SourceWorkspaceRequest): Promise<{
+        repository: {
+            provider: "github";
+            name: string;
+            owner: string;
+            ref: string;
+            cloneUrl: string;
+        };
+        authorization: {
+            id: string;
+            expiresAt: string;
+            schemaVersion: "treeseed.source-workspace-authorization/v1";
+            providerId: string;
+            issuedAt: string;
+            assignmentId: string;
+            source: {
+                commit: string;
+                projectId: string;
+                teamId: string;
+                profile: "source-only";
+                repositoryId: string;
+                controlPlaneId: string;
+                formatVersion: 1;
+            };
+            mode: "analysis" | "work";
+            attempt: number;
+            publication: "denied" | "candidate-only";
+            credentialBindingId: string;
+        };
+        credential: {
+            id: string;
+            nonce: string;
+            expiresAt: string;
+            schemaVersion: "treeseed.source-credential-delivery/v1";
+            algorithm: "x25519-hkdf-sha256-chacha20-poly1305";
+            ciphertext: string;
+            tag: string;
+            authorizationId: string;
+            ephemeralPublicKey: string;
+        };
+    }>;
     respondToAssignmentDiscussion(assignmentId: string, request: ProviderDiscussionResponseRequest, idempotencyKey: string): Promise<{
         status: "responded" | "abstained";
         schemaVersion: "treeseed.provider-discussion-response-receipt/v1";

package/dist/capacity-provider/client.js

@@ -1,5 +1,6 @@
 import { ControlPlaneClient, ControlPlaneClientError } from "../entrypoints/clients/control-plane-client.js";
 import { CONTROL_PLANE_OPERATIONS } from "../operator-contracts/index.js";
+import { sourceWorkspaceRequestSchema, sourceWorkspaceResponseSchema } from "./source-workspace.js";
 class CapacityProviderApiError extends Error {
   constructor(message, status, payload) {
     super(message);
@@ -126,6 +127,16 @@ class ProviderProtocolClient {
   preflightAssignmentCompletion(assignmentId, request) {
     return this.invoke(CONTROL_PLANE_OPERATIONS.providers.completionPreflight, { path: { assignmentId }, body: request });
   }
+  /** Host provider transport only; the recipient key belongs to the trusted source fetch worker. */
+  async authorizeAssignmentSource(assignmentId, request) {
+    const body = sourceWorkspaceRequestSchema.parse(request);
+    const response = sourceWorkspaceResponseSchema.parse(await this.invoke(
+      CONTROL_PLANE_OPERATIONS.providers.sourceWorkspace,
+      { path: { assignmentId }, body }
+    ));
+    if (response.authorization.assignmentId !== assignmentId) throw new CapacityProviderApiError("Source authority assignment correlation failed.", 502, { code: "source_authority_mismatch" });
+    return response;
+  }
   respondToAssignmentDiscussion(assignmentId, request, idempotencyKey) {
     return this.invoke(CONTROL_PLANE_OPERATIONS.providers.discussionResponse, { path: { assignmentId }, body: request }, { idempotencyKey });
   }

package/dist/capacity-provider/environment-catalog.d.ts

@@ -823,7 +823,7 @@ export declare const providerSandboxEnvironmentAvailabilitySchema: z.ZodObject<{
         checkedAt: z.ZodString;
         reason: z.ZodNullable<z.ZodString>;
     }, "strict", z.ZodTypeAny, {
-        status: "ready" | "failed" | "pulling" | "quarantined";
+        status: "ready" | "failed" | "quarantined" | "pulling";
         version: string;
         reason: string | null;
         contractDigest: string;
@@ -831,7 +831,7 @@ export declare const providerSandboxEnvironmentAvailabilitySchema: z.ZodObject<{
         entryId: string;
         checkedAt: string;
     }, {
-        status: "ready" | "failed" | "pulling" | "quarantined";
+        status: "ready" | "failed" | "quarantined" | "pulling";
         version: string;
         reason: string | null;
         contractDigest: string;
@@ -841,7 +841,7 @@ export declare const providerSandboxEnvironmentAvailabilitySchema: z.ZodObject<{
     }>, "many">;
 }, "strict", z.ZodTypeAny, {
     entries: {
-        status: "ready" | "failed" | "pulling" | "quarantined";
+        status: "ready" | "failed" | "quarantined" | "pulling";
         version: string;
         reason: string | null;
         contractDigest: string;
@@ -855,7 +855,7 @@ export declare const providerSandboxEnvironmentAvailabilitySchema: z.ZodObject<{
     catalogGeneration: number;
 }, {
     entries: {
-        status: "ready" | "failed" | "pulling" | "quarantined";
+        status: "ready" | "failed" | "quarantined" | "pulling";
         version: string;
         reason: string | null;
         contractDigest: string;

package/dist/capacity-provider/source-workspace.d.ts

@@ -183,7 +183,7 @@ export declare const sourceWorkspaceLeaseSchema: z.ZodObject<{
     expiresAt: z.ZodString;
 }, "strict", z.ZodTypeAny, {
     id: string;
-    state: "active" | "released" | "quarantined" | "exporting";
+    state: "active" | "released" | "exporting" | "quarantined";
     expiresAt: string;
     schemaVersion: "treeseed.source-workspace-lease/v1";
     createdAt: string;
@@ -205,7 +205,7 @@ export declare const sourceWorkspaceLeaseSchema: z.ZodObject<{
     workspaceDigest: string;
 }, {
     id: string;
-    state: "active" | "released" | "quarantined" | "exporting";
+    state: "active" | "released" | "exporting" | "quarantined";
     expiresAt: string;
     schemaVersion: "treeseed.source-workspace-lease/v1";
     createdAt: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@treeseed/sdk",
-  "version": "0.13.0-rc.113",
+  "version": "0.13.0-rc.114",
   "description": "Portable TreeSeed contracts, standards, and typed remote control-plane clients.",
   "license": "Apache-2.0",
   "repository": {