@treeseed/sdk 0.13.0-rc.5 → 0.13.0-rc.8

package/dist/operations/services/config-runtime/support/rotate-machine-key-passphrase.d.ts

@@ -15,6 +15,7 @@ export declare function loadRemoteAuthState(tenantRoot: any): {
             accessToken: string;
             refreshToken: string;
             expiresAt: any;
+            audience: any;
             principal: any;
         };
     };
@@ -30,6 +31,7 @@ export declare function setRemoteSession(tenantRoot: any, { hostId, accessToken,
     accessToken: string;
     refreshToken: string;
     expiresAt: any;
+    audience: any;
     principal: any;
 };
 export declare function clearRemoteSession(tenantRoot: any, hostId: any): {
@@ -39,6 +41,7 @@ export declare function clearRemoteSession(tenantRoot: any, hostId: any): {
             accessToken: string;
             refreshToken: string;
             expiresAt: any;
+            audience: any;
             principal: any;
         };
     };
@@ -47,6 +50,7 @@ export declare function resolveRemoteSession(tenantRoot: any, hostId: any): {
     accessToken: string;
     refreshToken: string;
     expiresAt: any;
+    audience: any;
     principal: any;
 } | null;
 export declare function loadMachineConfig(tenantRoot: any): any;

package/dist/operations/services/config-runtime/{commerce/catalog/resolve-template-catalog-endpoint.d.ts → templates/catalog/template-catalog-settings.d.ts}

@@ -1,4 +1,5 @@
 import { SharedStorageMigrationNotice } from '../../accounts/ensure-secret-session-for-config.js';
+/** Resolve the independently hosted template registry endpoint. */
 export declare function resolveTemplateCatalogEndpoint(startRoot?: string, env?: NodeJS.ProcessEnv): string;
 export declare function resolveTemplateCatalogCachePath(startRoot?: string): string;
 export declare function ensureGitignoreEntries(tenantRoot: any): string;

package/dist/operations/services/configuration/config-runtime.d.ts

@@ -1,6 +1,6 @@
 export * from '../config-runtime/accounts/ensure-secret-session-for-config.js';
 export * from '../config-runtime/agents/ensure-act-verification-tooling.js';
-export * from '../config-runtime/commerce/catalog/resolve-template-catalog-endpoint.js';
+export * from '../config-runtime/templates/catalog/template-catalog-settings.js';
 export * from '../config-runtime/configuration/create-default-machine-config.js';
 export * from '../config-runtime/configuration/create-git-hub-config-sync-units.js';
 export * from '../config-runtime/configuration/configuration-generation.js';

package/dist/operations/services/configuration/config-runtime.js

@@ -1,6 +1,6 @@
 export * from "../config-runtime/accounts/ensure-secret-session-for-config.js";
 export * from "../config-runtime/agents/ensure-act-verification-tooling.js";
-export * from "../config-runtime/commerce/catalog/resolve-template-catalog-endpoint.js";
+export * from "../config-runtime/templates/catalog/template-catalog-settings.js";
 export * from "../config-runtime/configuration/create-default-machine-config.js";
 export * from "../config-runtime/configuration/create-git-hub-config-sync-units.js";
 export * from "../config-runtime/configuration/configuration-generation.js";

package/dist/operations/services/deploy/accounts/local-runtime-auth-env-keys.d.ts

@@ -72,7 +72,7 @@ export declare function defaultStateFromConfig(deployConfig: any, target: any):
     hosting: {
         kind: any;
         registration: any;
-        marketBaseUrl: string | null;
+        controlPlaneBaseUrl: string | null;
         teamId: string;
         projectId: string;
     };
@@ -82,7 +82,7 @@ export declare function defaultStateFromConfig(deployConfig: any, target: any):
     runtime: {
         mode: any;
         registration: any;
-        marketBaseUrl: string | null;
+        controlPlaneBaseUrl: string | null;
         teamId: string;
         projectId: string;
     };

package/dist/operations/services/deploy/accounts/local-runtime-auth-env-keys.js

@@ -2,7 +2,7 @@ import { randomBytes } from "node:crypto";
 import {
   normalizeRailwayEnvironmentName
 } from "../../hosting/railway/railway-api.js";
-import { resolveConfiguredContentBucketBinding, resolveConfiguredContentBucketName, resolveConfiguredContentPublicBaseUrl, resolveConfiguredMarketBaseUrl, resolveConfiguredPagesProjectName } from "../hosting/assert-cloudflare-cache-purge-succeeded.js";
+import { resolveConfiguredContentBucketBinding, resolveConfiguredContentBucketName, resolveConfiguredContentPublicBaseUrl, resolveConfiguredControlPlaneBaseUrl, resolveConfiguredPagesProjectName } from "../hosting/assert-cloudflare-cache-purge-succeeded.js";
 import { configuredSurfaceHosts, envValue, environmentScopedIdentityName, resolveContentKeyTemplate, scopeFromTarget, sharedDeploymentName, targetWorkerName, targetWorkersDevUrl } from "../hosting/configured-surface-hosts.js";
 import { MANAGED_SERVICE_KEYS, TRESEED_ENVELOPE_SCHEMA_GENERATION, TRESEED_MIGRATION_WAVE_ID, TRESEED_SUPPORTED_PAYLOAD_RANGE, envOrNull, resolveConfiguredSurfaceBaseUrl, resolveResourceIdentity, sanitizeSegment } from "../support/default-compatibility-date.js";
 const LOCAL_RUNTIME_AUTH_ENV_KEYS = [
@@ -140,7 +140,7 @@ function defaultStateFromConfig(deployConfig, target) {
     hosting: {
       kind: deployConfig.hosting?.kind ?? "self_hosted_project",
       registration: deployConfig.hosting?.registration ?? "none",
-      marketBaseUrl: resolveConfiguredMarketBaseUrl(deployConfig) || null,
+      controlPlaneBaseUrl: resolveConfiguredControlPlaneBaseUrl(deployConfig, target) || null,
       teamId: identity.teamId,
       projectId: identity.projectId
     },
@@ -150,7 +150,7 @@ function defaultStateFromConfig(deployConfig, target) {
     runtime: {
       mode: deployConfig.runtime?.mode ?? "none",
       registration: deployConfig.runtime?.registration ?? "none",
-      marketBaseUrl: resolveConfiguredMarketBaseUrl(deployConfig) || null,
+      controlPlaneBaseUrl: resolveConfiguredControlPlaneBaseUrl(deployConfig, target) || null,
       teamId: identity.teamId,
       projectId: identity.projectId
     },

package/dist/operations/services/deploy/hosting/assert-cloudflare-cache-purge-succeeded.d.ts

@@ -95,7 +95,6 @@ export declare function normalizeConfiguredBaseUrl(value: any): string | null;
 export declare function domainBaseUrl(domain: any): string | null;
 export declare function targetEnvironmentKey(target: any): any;
 export declare function resolveConfiguredApiConnectionBaseUrl(deployConfig: any, target: any): string | null;
-export declare function resolveConfiguredMarketBaseUrl(deployConfig: any, target: any): string;
 export declare function resolveConfiguredControlPlaneBaseUrl(deployConfig: any, target: any): string | null;
 export declare function resolveConfiguredPagesProjectName(deployConfig: any): any;
 export declare function resolveConfiguredContentBucketBinding(deployConfig: any): any;

package/dist/operations/services/deploy/hosting/assert-cloudflare-cache-purge-succeeded.js

@@ -1,6 +1,6 @@
 import { resolveWebCachePolicy } from "../../../../platform/hosting/deploy-config.js";
 import { buildProvisioningSummary, safeUrl } from "../projects/projects-core/ensure-pages-project-compatibility.js";
-import { DEFAULT_MARKET_BASE_URL, envOrNull, loadTenantDeployConfig, resolveResourceIdentity } from "../support/default-compatibility-date.js";
+import { envOrNull, loadTenantDeployConfig, resolveResourceIdentity } from "../support/default-compatibility-date.js";
 import { purgeCloudflareCacheByUrls, purgeCloudflareCacheEverythingByHosts } from "./build-managed-cloudflare-cache-rules.js";
 import { createPersistentDeployTarget, normalizeTarget, sharedDeploymentName } from "./configured-surface-hosts.js";
 import { loadDeployState, writeDeployState } from "./load-deploy-state.js";
@@ -151,11 +151,7 @@ function resolveConfiguredApiConnectionBaseUrl(deployConfig, target) {
   }
   return normalizeConfiguredBaseUrl(deployConfig.connections?.api?.environments?.[scope]?.baseUrl) ?? domainBaseUrl(deployConfig.connections?.api?.environments?.[scope]?.domain);
 }
-function resolveConfiguredMarketBaseUrl(deployConfig, target) {
-  return normalizeConfiguredBaseUrl(deployConfig.market?.baseUrl) ?? envOrNull("TREESEED_MARKET_API_BASE_URL") ?? DEFAULT_MARKET_BASE_URL;
-}
 function resolveConfiguredControlPlaneBaseUrl(deployConfig, target) {
-  if (deployConfig.controlPlane?.mode === "market-passthrough") return resolveConfiguredMarketBaseUrl(deployConfig, target);
   const scope = targetEnvironmentKey(target);
   return normalizeConfiguredBaseUrl(deployConfig.controlPlane?.baseUrl) ?? resolveConfiguredApiConnectionBaseUrl(deployConfig, target) ?? (scope === "local" ? normalizeConfiguredBaseUrl(deployConfig.surfaces?.api?.localBaseUrl) : normalizeConfiguredBaseUrl(deployConfig.surfaces?.api?.environments?.[scope]?.baseUrl) ?? domainBaseUrl(deployConfig.surfaces?.api?.environments?.[scope]?.domain)) ?? normalizeConfiguredBaseUrl(deployConfig.surfaces?.api?.publicBaseUrl) ?? envOrNull("TREESEED_API_BASE_URL");
 }
@@ -208,7 +204,6 @@ export {
   resolveConfiguredContentBucketName,
   resolveConfiguredContentPublicBaseUrl,
   resolveConfiguredControlPlaneBaseUrl,
-  resolveConfiguredMarketBaseUrl,
   resolveConfiguredPagesProjectName,
   resolveSourcePagePurgeUrls,
   targetEnvironmentKey

package/dist/operations/services/deploy/hosting/configured-surface-hosts.d.ts

@@ -46,9 +46,7 @@ export declare function buildPublicVars(deployConfig: any, options?: {}): {
     TREESEED_HUB_MODE: any;
     TREESEED_RUNTIME_MODE: any;
     TREESEED_RUNTIME_REGISTRATION: any;
-    TREESEED_MARKET_API_BASE_URL: string;
     TREESEED_API_BASE_URL: string | null;
-    TREESEED_CATALOG_MARKET_API_BASE_URLS: string;
     TREESEED_HOSTING_TEAM_ID: string;
     TREESEED_PROJECT_DOMAINS: any;
     TREESEED_PROJECT_ID: string;

package/dist/operations/services/deploy/hosting/configured-surface-hosts.js

@@ -2,7 +2,7 @@ import { existsSync, readFileSync } from "node:fs";
 import { relative, resolve } from "node:path";
 import { resolveWebCachePolicy } from "../../../../platform/hosting/deploy-config.js";
 import { envOrNull, GENERATED_ROOT, PERSISTENT_SCOPES, primaryHost, resolveConfiguredSurfaceDomain, resolveResourceIdentity, sanitizeSegment, STATE_ROOT, WORKTREE_METADATA_RELATIVE_PATH } from "../support/default-compatibility-date.js";
-import { resolveConfiguredControlPlaneBaseUrl, resolveConfiguredContentBucketName, resolveConfiguredContentPublicBaseUrl, resolveConfiguredMarketBaseUrl } from "./assert-cloudflare-cache-purge-succeeded.js";
+import { resolveConfiguredControlPlaneBaseUrl, resolveConfiguredContentBucketName, resolveConfiguredContentPublicBaseUrl } from "./assert-cloudflare-cache-purge-succeeded.js";
 function configuredSurfaceHosts(deployConfig, target, surface) {
   const hosts = [
     resolveConfiguredSurfaceDomain(deployConfig, target, surface),
@@ -144,9 +144,7 @@ function buildPublicVars(deployConfig, options = {}) {
     TREESEED_HUB_MODE: deployConfig.hub?.mode ?? "treeseed_hosted",
     TREESEED_RUNTIME_MODE: deployConfig.runtime?.mode ?? "none",
     TREESEED_RUNTIME_REGISTRATION: deployConfig.runtime?.registration ?? "none",
-    TREESEED_MARKET_API_BASE_URL: resolveConfiguredMarketBaseUrl(deployConfig, target),
     TREESEED_API_BASE_URL: resolveConfiguredControlPlaneBaseUrl(deployConfig, target),
-    TREESEED_CATALOG_MARKET_API_BASE_URLS: resolveConfiguredMarketBaseUrl(deployConfig, target) ?? envOrNull("TREESEED_CATALOG_MARKET_API_BASE_URLS"),
     TREESEED_HOSTING_TEAM_ID: contentDefaultTeamId,
     TREESEED_PROJECT_DOMAINS: projectDomain ?? "",
     TREESEED_PROJECT_ID: identity.projectId,

package/dist/operations/services/deploy/hosting/load-deploy-state.js

@@ -90,7 +90,7 @@ function loadDeployState(tenantRoot, deployConfig, options = {}) {
       ...persisted.hosting ?? {},
       kind: defaults.hosting?.kind ?? persisted.hosting?.kind ?? "self_hosted_project",
       registration: defaults.hosting?.registration ?? persisted.hosting?.registration ?? "none",
-      marketBaseUrl: defaults.hosting?.marketBaseUrl ?? persisted.hosting?.marketBaseUrl ?? null,
+      controlPlaneBaseUrl: defaults.hosting?.controlPlaneBaseUrl ?? persisted.hosting?.controlPlaneBaseUrl ?? null,
       teamId: defaults.hosting?.teamId ?? persisted.hosting?.teamId ?? defaults.identity?.teamId,
       projectId: defaults.hosting?.projectId ?? persisted.hosting?.projectId ?? defaults.identity?.projectId
     },
@@ -104,7 +104,7 @@ function loadDeployState(tenantRoot, deployConfig, options = {}) {
       ...persisted.runtime ?? {},
       mode: defaults.runtime?.mode ?? persisted.runtime?.mode ?? "none",
       registration: defaults.runtime?.registration ?? persisted.runtime?.registration ?? "none",
-      marketBaseUrl: defaults.runtime?.marketBaseUrl ?? persisted.runtime?.marketBaseUrl ?? null,
+      controlPlaneBaseUrl: defaults.runtime?.controlPlaneBaseUrl ?? persisted.runtime?.controlPlaneBaseUrl ?? null,
       teamId: defaults.runtime?.teamId ?? persisted.runtime?.teamId ?? defaults.identity?.teamId,
       projectId: defaults.runtime?.projectId ?? persisted.runtime?.projectId ?? defaults.identity?.projectId
     },

package/dist/operations/services/deploy/support/default-compatibility-date.d.ts

@@ -1,6 +1,5 @@
 export declare const DEFAULT_COMPATIBILITY_DATE = "2026-04-05";
 export declare const DEFAULT_COMPATIBILITY_FLAGS: string[];
-export declare const DEFAULT_MARKET_BASE_URL = "https://api.treeseed.dev";
 export declare const GENERATED_ROOT = ".treeseed/generated";
 export declare const STATE_ROOT = ".treeseed/state";
 export declare const WORKTREE_METADATA_RELATIVE_PATH = ".treeseed/worktree.json";

package/dist/operations/services/deploy/support/default-compatibility-date.js

@@ -6,7 +6,6 @@ import { scopeFromTarget } from "../hosting/configured-surface-hosts.js";
 import { safeUrl } from "../projects/projects-core/ensure-pages-project-compatibility.js";
 const DEFAULT_COMPATIBILITY_DATE = "2026-04-05";
 const DEFAULT_COMPATIBILITY_FLAGS = ["nodejs_compat"];
-const DEFAULT_MARKET_BASE_URL = "https://api.treeseed.dev";
 const GENERATED_ROOT = ".treeseed/generated";
 const STATE_ROOT = ".treeseed/state";
 const WORKTREE_METADATA_RELATIVE_PATH = ".treeseed/worktree.json";
@@ -202,7 +201,6 @@ function resolveConfiguredSurfaceBaseUrl(deployConfig, target, surface) {
 export {
   DEFAULT_COMPATIBILITY_DATE,
   DEFAULT_COMPATIBILITY_FLAGS,
-  DEFAULT_MARKET_BASE_URL,
   GENERATED_ROOT,
   MANAGED_SERVICE_KEYS,
   PERSISTENT_SCOPES,

package/dist/operations/services/github-actions-verification/git-hub-actions-workflow-state.d.ts

@@ -124,7 +124,7 @@ export declare function normalizeWorkflowJobStep(step: Record<string, any>): Git
 export declare function isSuccessfulConclusion(conclusion: string | null | undefined): conclusion is "skipped" | "success" | "neutral";
 export declare function isFailedConclusion(conclusion: string | null | undefined): boolean;
 export declare function normalizeWorkflowJob(job: Record<string, any>): GitHubActionsWorkflowJob;
-export declare function workflowStateForRun(run: GitHubWorkflowRunSummary | null): "pending" | "missing" | "success" | "failure";
+export declare function workflowStateForRun(run: GitHubWorkflowRunSummary | null): "pending" | "missing" | "failure" | "success";
 export declare function aggregateWorkflowState(states: GitHubActionsWorkflowState[]): GitHubActionsWorkflowState;
 export declare function cappedLogExcerpt(value: unknown, maxLines: number): string;
 export declare function downloadJobLogExcerpt(client: GitHubApiClient, repository: string, jobId: number, maxLines: number): Promise<string>;

package/dist/operations/services/hosting/audit/managed-host-security.js

@@ -1,6 +1,5 @@
 const MANAGED_HOST_DIRECT_CI_OPT_IN_ENV = "TREESEED_ALLOW_MANAGED_HOST_DIRECT_CI_SECRETS";
 const SAFE_MANAGED_HOST_CI_VARIABLES = /* @__PURE__ */ new Set([
-  "TREESEED_CATALOG_MARKET_API_BASE_URLS",
   "TREESEED_HOSTING_KIND",
   "TREESEED_HOSTING_REGISTRATION",
   "TREESEED_HOSTING_TEAM_ID",

package/dist/operations/services/hosting-audit/hosting-audit-environment.d.ts

@@ -68,11 +68,11 @@ export declare function targetLabel(target: ReconcileTarget): string;
 export declare function serializeTarget(target: ReconcileTarget): {
     label: string;
     branchName: string;
-    kind: "persistent" | "branch";
+    kind: "branch" | "persistent";
 } | {
     label: string;
     scope: "local" | "staging" | "prod";
-    kind: "persistent" | "branch";
+    kind: "branch" | "persistent";
 };
 export declare function resolveHostingAuditTarget({ tenantRoot, environment, }: {
     tenantRoot: string;

package/dist/operations/services/key-agent/read-legacy-project-machine-key.d.ts

@@ -2,7 +2,7 @@ import { KeyAgentCommand, KeyAgentResponse, KeyAgentSessionState } from './trese
 export declare function readLegacyProjectMachineKey(legacyKeyPath: string): Buffer<ArrayBuffer> | null;
 export declare function unwrapOrProvisionMachineKey(command: Extract<KeyAgentCommand, {
     command: 'unlock';
-}>): NonSharedBuffer;
+}>): Buffer<ArrayBuffer>;
 export declare function ok(response?: Omit<KeyAgentResponse, 'ok'>): KeyAgentResponse;
 export declare function fail(error: unknown, command: KeyAgentCommand): KeyAgentResponse;
 export declare function handleKeyAgentCommand(command: KeyAgentCommand, session: KeyAgentSessionState): KeyAgentResponse;

package/dist/operations/services/template-registry/sync-managed-package-json.d.ts

@@ -17,16 +17,16 @@ export declare function serializeTemplateRegistryEntry(product: Pick<TemplatePro
     displayName: string;
     description: string;
     summary: string;
-    status: import("../../../entrypoints/models/sdk-types.js").SdkTemplateCatalogStatus;
+    status: import("../../../sdk-types/control-plane/resource-requests.js").SdkTemplateCatalogStatus;
     featured: boolean;
-    category: import("../../../entrypoints/models/sdk-types.js").SdkTemplateCategory;
+    category: import("../../../sdk-types/control-plane/resource-requests.js").SdkTemplateCategory;
     tags: string[];
     publisher: import("../../../index.js").SdkTemplateCatalogPublisher;
     templateVersion: string;
     templateApiVersion: number;
     minCliVersion: string;
     minCoreVersion: string | undefined;
-    fulfillmentMode: "git" | "r2" | "packaged";
+    fulfillmentMode: "packaged" | "git" | "r2";
     source: import("../../../index.js").SdkTemplateCatalogSource;
 };
 export declare function exportTemplateCatalogYaml(options?: TemplateCatalogOptions): Promise<string>;

package/dist/operations/services/template-registry/template-categories.d.ts

@@ -35,7 +35,7 @@ export interface TemplateManifest {
 }
 export interface PlatformTemplateComposition {
     controlPlane: {
-        mode: 'managed' | 'market-passthrough' | 'external';
+        mode: 'managed' | 'external';
         baseUrl?: string;
     };
     processing: {

package/dist/operations/services/template-registry/validate-template-placeholders.js

@@ -1,6 +1,6 @@
 import { cpSync, existsSync, mkdirSync, readFileSync, rmSync, writeFileSync } from "node:fs";
 import { dirname, relative, resolve } from "node:path";
-import { RemoteTemplateCatalogClient } from "../../../commerce/catalog/template-catalog.js";
+import { RemoteTemplateCatalogClient } from "../../../templates/template-catalog.js";
 import {
   normalizeTemplateId
 } from "../../../entrypoints/models/sdk-types.js";

package/dist/operator-contracts/control-plane-operation.d.ts

@@ -0,0 +1,60 @@
+export declare const CONTROL_PLANE_OPERATION_SCHEMA_VERSION: "treeseed.control-plane-operation/v1";
+export type ControlPlaneHttpMethod = 'DELETE' | 'GET' | 'PATCH' | 'POST' | 'PUT';
+export type ControlPlaneOperationKind = 'read' | 'mutation';
+export type ControlPlaneRiskClass = 'ordinary' | 'destructive' | 'credential' | 'authority' | 'production' | 'irreversible';
+export type ControlPlaneConfirmationPolicy = 'never' | 'input_required';
+export type ControlPlaneOperationSurface = 'rest' | 'cli' | 'mcp_tool' | 'mcp_resource' | 'internal';
+export type ControlPlaneCacheScope = 'none' | 'principal' | 'team' | 'project' | 'public';
+export type ControlPlanePaginationKind = 'none' | 'cursor';
+export interface ControlPlaneRestBinding {
+    method: ControlPlaneHttpMethod;
+    path: `/v1/${string}`;
+}
+export interface ControlPlaneSchemaBinding {
+    input: string;
+    output: string;
+    parameters?: string;
+    errors: string;
+}
+export interface ControlPlaneIdempotencyContract {
+    required: boolean;
+    header: 'Idempotency-Key';
+}
+export interface ControlPlaneConcurrencyContract {
+    required: boolean;
+    readHeader: 'ETag';
+    writeHeader: 'If-Match';
+}
+export interface ControlPlaneOperationDescriptor {
+    schemaVersion: typeof CONTROL_PLANE_OPERATION_SCHEMA_VERSION;
+    operationId: `${string}.${string}`;
+    description: string;
+    rest?: ControlPlaneRestBinding;
+    schemas: ControlPlaneSchemaBinding;
+    capability: string;
+    oauthScopes: OAuthScope[];
+    kind: ControlPlaneOperationKind;
+    riskClass: ControlPlaneRiskClass;
+    confirmation: ControlPlaneConfirmationPolicy;
+    idempotency: ControlPlaneIdempotencyContract;
+    concurrency: ControlPlaneConcurrencyContract;
+    surfaces: ControlPlaneOperationSurface[];
+    cacheScope: ControlPlaneCacheScope;
+    pagination: ControlPlanePaginationKind;
+    audited: boolean;
+    receipt: boolean;
+    redactedPaths: string[];
+}
+export declare const TREESEED_OAUTH_SCOPES: readonly ["treeseed:read", "treeseed:knowledge:write", "treeseed:governance:write", "treeseed:projects:write", "treeseed:execution", "treeseed:admin"];
+export type OAuthScope = typeof TREESEED_OAUTH_SCOPES[number];
+export interface ControlPlaneCatalog {
+    schemaVersion: 'treeseed.control-plane-catalog/v1';
+    operations: ControlPlaneOperationDescriptor[];
+}
+export interface ControlPlaneCatalogDiagnostic {
+    code: string;
+    path: string;
+    message: string;
+}
+export declare function validateControlPlaneCatalog(catalog: ControlPlaneCatalog): ControlPlaneCatalogDiagnostic[];
+export declare function indexControlPlaneCatalog(catalog: ControlPlaneCatalog): Map<`${string}.${string}`, ControlPlaneOperationDescriptor>;

package/dist/operator-contracts/control-plane-operation.js

@@ -0,0 +1,75 @@
+const CONTROL_PLANE_OPERATION_SCHEMA_VERSION = "treeseed.control-plane-operation/v1";
+const TREESEED_OAUTH_SCOPES = [
+  "treeseed:read",
+  "treeseed:knowledge:write",
+  "treeseed:governance:write",
+  "treeseed:projects:write",
+  "treeseed:execution",
+  "treeseed:admin"
+];
+const OPERATION_ID = /^[a-z][a-z0-9]*(?:\.[a-z][a-z0-9]*)+$/u;
+const PATH_PARAMETER = /\{([A-Za-z][A-Za-z0-9]*)\}/gu;
+function duplicates(values) {
+  const seen = /* @__PURE__ */ new Set();
+  return values.filter((value) => seen.size === seen.add(value).size);
+}
+function validateControlPlaneCatalog(catalog) {
+  const diagnostics = [];
+  const operationIds = /* @__PURE__ */ new Set();
+  const restBindings = /* @__PURE__ */ new Set();
+  for (const [index, operation] of catalog.operations.entries()) {
+    const path = `operations.${index}`;
+    if (operation.schemaVersion !== CONTROL_PLANE_OPERATION_SCHEMA_VERSION) {
+      diagnostics.push({ code: "operation_schema_version_invalid", path: `${path}.schemaVersion`, message: "Operation schemaVersion is not supported." });
+    }
+    if (!OPERATION_ID.test(operation.operationId)) {
+      diagnostics.push({ code: "operation_id_invalid", path: `${path}.operationId`, message: "Operation IDs must be stable dotted lowercase words." });
+    }
+    if (operationIds.has(operation.operationId)) {
+      diagnostics.push({ code: "operation_id_duplicate", path: `${path}.operationId`, message: `Duplicate operation ID ${operation.operationId}.` });
+    }
+    operationIds.add(operation.operationId);
+    if (operation.surfaces.includes("rest") !== Boolean(operation.rest)) {
+      diagnostics.push({ code: "rest_binding_mismatch", path: `${path}.rest`, message: "REST surface and REST binding must be declared together." });
+    }
+    if (operation.rest) {
+      const binding = `${operation.rest.method} ${operation.rest.path}`;
+      if (restBindings.has(binding)) diagnostics.push({ code: "rest_binding_duplicate", path: `${path}.rest`, message: `Duplicate REST binding ${binding}.` });
+      restBindings.add(binding);
+      const parameters = [...operation.rest.path.matchAll(PATH_PARAMETER)].map((match) => match[1]);
+      if (parameters.length > 0 && !operation.schemas.parameters) {
+        diagnostics.push({ code: "parameter_schema_required", path: `${path}.schemas.parameters`, message: "Parameterized REST paths require a parameter schema." });
+      }
+    }
+    for (const scope of operation.oauthScopes) {
+      if (!TREESEED_OAUTH_SCOPES.includes(scope)) diagnostics.push({ code: "oauth_scope_invalid", path: `${path}.oauthScopes`, message: `Unknown OAuth scope ${scope}.` });
+    }
+    for (const duplicate of duplicates(operation.surfaces)) diagnostics.push({ code: "surface_duplicate", path: `${path}.surfaces`, message: `Duplicate operation surface ${duplicate}.` });
+    for (const duplicate of duplicates(operation.oauthScopes)) diagnostics.push({ code: "oauth_scope_duplicate", path: `${path}.oauthScopes`, message: `Duplicate OAuth scope ${duplicate}.` });
+    const elevatedRisk = operation.riskClass !== "ordinary";
+    if (elevatedRisk !== (operation.confirmation === "input_required")) {
+      diagnostics.push({ code: "confirmation_policy_invalid", path: `${path}.confirmation`, message: "Elevated-risk operations require input_required; ordinary operations must not." });
+    }
+    if (operation.kind === "read" && (operation.idempotency.required || operation.concurrency.required || operation.receipt)) {
+      diagnostics.push({ code: "read_mutation_contract_invalid", path, message: "Read operations cannot require mutation idempotency, write concurrency, or mutation receipts." });
+    }
+    if (operation.kind === "mutation" && operation.surfaces.some((surface) => surface !== "internal") && !operation.audited) {
+      diagnostics.push({ code: "mutation_audit_required", path: `${path}.audited`, message: "Every externally reachable mutation must be audited." });
+    }
+    if (operation.kind === "mutation" && !operation.receipt) {
+      diagnostics.push({ code: "mutation_receipt_required", path: `${path}.receipt`, message: "Mutations must return durable receipts." });
+    }
+  }
+  return diagnostics.sort((left, right) => `${left.path}:${left.code}`.localeCompare(`${right.path}:${right.code}`));
+}
+function indexControlPlaneCatalog(catalog) {
+  const diagnostics = validateControlPlaneCatalog(catalog);
+  if (diagnostics.length > 0) throw new Error(`Invalid control-plane catalog: ${diagnostics.map((entry) => entry.code).join(", ")}`);
+  return new Map(catalog.operations.map((operation) => [operation.operationId, operation]));
+}
+export {
+  CONTROL_PLANE_OPERATION_SCHEMA_VERSION,
+  TREESEED_OAUTH_SCOPES,
+  indexControlPlaneCatalog,
+  validateControlPlaneCatalog
+};

package/dist/operator-contracts/index.d.ts

@@ -2,3 +2,6 @@ export * from './command-tree.js';
 export * from './canonical-command-tree.js';
 export * from './workday-profile.js';
 export * from './workday-lifecycle.js';
+export * from './control-plane-operation.js';
+export * from './mcp.js';
+export * from './oauth.js';

package/dist/operator-contracts/index.js

@@ -2,3 +2,6 @@ export * from "./command-tree.js";
 export * from "./canonical-command-tree.js";
 export * from "./workday-profile.js";
 export * from "./workday-lifecycle.js";
+export * from "./control-plane-operation.js";
+export * from "./mcp.js";
+export * from "./oauth.js";

package/dist/operator-contracts/mcp.d.ts

@@ -0,0 +1,78 @@
+import type { ControlPlaneOperationDescriptor, OAuthScope } from './control-plane-operation.js';
+export declare const MCP_PROTOCOL_VERSION: "2026-07-28";
+export interface ResourceLink {
+    type: 'resource_link';
+    uri: `treeseed://${string}`;
+    name: string;
+    title?: string;
+    description?: string;
+    mimeType?: string;
+}
+export interface ActorChain {
+    principalId: string;
+    delegatedAgentId?: string;
+    oauthClientId: string;
+    interface: 'rest' | 'cli' | 'mcp' | 'site_bff' | 'internal';
+    conversationId?: string;
+    modelClaim?: string;
+    skillClaim?: string;
+    traceId: string;
+}
+export interface ConfirmationState {
+    schemaVersion: 'treeseed.confirmation-state/v1';
+    principalId: string;
+    clientId: string;
+    operationId: string;
+    argumentsDigest: `sha256:${string}`;
+    expiresAt: string;
+    nonce: string;
+    signature: string;
+}
+export interface InputRequired {
+    type: 'input_required';
+    requestId: string;
+    prompt: string;
+    confirmation: ConfirmationState;
+}
+export interface McpToolDescriptor {
+    name: string;
+    description: string;
+    inputSchemaId: string;
+    outputSchemaId: string;
+    operationId: string;
+    readOnlyHint: boolean;
+    destructiveHint: boolean;
+    idempotentHint: boolean;
+    openWorldHint: boolean;
+}
+export interface McpResourceDescriptor {
+    uriTemplate: `treeseed://${string}`;
+    name: string;
+    description: string;
+    mimeType: string;
+    operationId: string;
+    subscribable: boolean;
+    cacheTtlSeconds?: number;
+}
+export interface McpPromptDescriptor {
+    name: string;
+    description: string;
+    argumentSchemaId: string;
+    requiredScopes: OAuthScope[];
+}
+export interface McpCatalog {
+    schemaVersion: 'treeseed.mcp-catalog/v1';
+    protocolVersion: typeof MCP_PROTOCOL_VERSION;
+    tools: McpToolDescriptor[];
+    resources: McpResourceDescriptor[];
+    prompts: McpPromptDescriptor[];
+    capabilities: {
+        completion: true;
+        progress: true;
+        cancellation: true;
+        inputRequired: true;
+        resourceSubscriptions: true;
+    };
+}
+export declare function operationToMcpTool(operation: ControlPlaneOperationDescriptor): McpToolDescriptor | null;
+export declare function buildMcpTools(operations: readonly ControlPlaneOperationDescriptor[]): McpToolDescriptor[];

package/dist/operator-contracts/mcp.js

@@ -0,0 +1,23 @@
+const MCP_PROTOCOL_VERSION = "2026-07-28";
+function operationToMcpTool(operation) {
+  if (!operation.surfaces.includes("mcp_tool")) return null;
+  return {
+    name: operation.operationId,
+    description: operation.description,
+    inputSchemaId: operation.schemas.input,
+    outputSchemaId: operation.schemas.output,
+    operationId: operation.operationId,
+    readOnlyHint: operation.kind === "read",
+    destructiveHint: operation.riskClass !== "ordinary",
+    idempotentHint: operation.kind === "read" || operation.idempotency.required,
+    openWorldHint: false
+  };
+}
+function buildMcpTools(operations) {
+  return operations.map(operationToMcpTool).filter((tool) => tool !== null).sort((left, right) => left.name.localeCompare(right.name));
+}
+export {
+  MCP_PROTOCOL_VERSION,
+  buildMcpTools,
+  operationToMcpTool
+};

package/dist/operator-contracts/oauth.d.ts

@@ -0,0 +1,38 @@
+import type { OAuthScope } from './control-plane-operation.js';
+export interface OAuthAuthorizationServerMetadata {
+    issuer: string;
+    authorization_endpoint: string;
+    token_endpoint: string;
+    device_authorization_endpoint: string;
+    revocation_endpoint: string;
+    response_types_supported: ['code'];
+    grant_types_supported: ['authorization_code', 'refresh_token', 'urn:ietf:params:oauth:grant-type:device_code'];
+    code_challenge_methods_supported: ['S256'];
+    scopes_supported: OAuthScope[];
+}
+export interface OAuthProtectedResourceMetadata {
+    resource: string;
+    authorization_servers: string[];
+    scopes_supported: OAuthScope[];
+    bearer_methods_supported: ['header'];
+}
+export interface OAuthDeviceAuthorizationRequest {
+    clientId: string;
+    scope: OAuthScope[];
+}
+export interface OAuthDeviceAuthorizationResponse {
+    deviceCode: string;
+    userCode: string;
+    verificationUri: string;
+    verificationUriComplete: string;
+    expiresIn: number;
+    interval: number;
+}
+export interface OAuthTokenReceipt {
+    tokenType: 'Bearer';
+    accessToken: string;
+    expiresIn: number;
+    refreshToken?: string;
+    scope: OAuthScope[];
+    audience: string;
+}

package/dist/platform/deploy-config/deploy-config-field-aliases.d.ts

@@ -25,9 +25,9 @@ export declare function optionalStringArray(value: unknown, label: string): stri
 export declare function optionalRecord(value: unknown, label: string): Record<string, unknown> | undefined;
 export declare function parsePluginReferences(value: unknown): PluginReference[];
 export declare function parseHostingConfig(value: unknown): {
-    kind: "hosted_project" | "treeseed_control_plane" | "self_hosted_project";
+    kind: "treeseed_control_plane" | "hosted_project" | "self_hosted_project";
     registration: "none" | "optional";
-    marketBaseUrl: string | undefined;
+    controlPlaneBaseUrl: string | undefined;
     teamId: string | undefined;
     projectId: string | undefined;
 } | undefined;

package/dist/platform/deploy-config/deploy-config-field-aliases.js

@@ -10,7 +10,7 @@ const deployConfigFieldAliases = {
 const hostingFieldAliases = {
   kind: { key: "kind", aliases: ["kind"] },
   registration: { key: "registration", aliases: ["registration"] },
-  marketBaseUrl: { key: "marketBaseUrl", aliases: ["market_base_url"] },
+  controlPlaneBaseUrl: { key: "controlPlaneBaseUrl", aliases: [] },
   teamId: { key: "teamId", aliases: ["team_id"] },
   projectId: { key: "projectId", aliases: ["project_id"] }
 };
@@ -20,7 +20,7 @@ const hubFieldAliases = {
 const runtimeFieldAliases = {
   mode: { key: "mode", aliases: ["mode"] },
   registration: { key: "registration", aliases: ["registration"] },
-  marketBaseUrl: { key: "marketBaseUrl", aliases: ["market_base_url"] },
+  controlPlaneBaseUrl: { key: "controlPlaneBaseUrl", aliases: [] },
   teamId: { key: "teamId", aliases: ["team_id"] },
   projectId: { key: "projectId", aliases: ["project_id"] }
 };
@@ -181,7 +181,7 @@ function parseHostingConfig(value) {
       "self_hosted_project"
     ]) ?? "self_hosted_project",
     registration: optionalEnum(record.registration, "hosting.registration", ["optional", "none"]) ?? "none",
-    marketBaseUrl: optionalString(process.env.TREESEED_API_BASE_URL) ?? optionalString(record.marketBaseUrl),
+    controlPlaneBaseUrl: optionalString(process.env.TREESEED_API_BASE_URL) ?? optionalString(record.controlPlaneBaseUrl),
     teamId: optionalString(process.env.TREESEED_HOSTING_TEAM_ID) ?? optionalString(record.teamId),
     projectId: optionalString(process.env.TREESEED_PROJECT_ID) ?? optionalString(record.projectId)
   };