@treeseed/sdk 0.13.0-rc.56 → 0.13.0-rc.57

package/dist/content/validation/portable-content-data.d.ts

@@ -845,12 +845,12 @@ export declare function validatePortableContentData(model: string, value: unknow
                 messageTypes: string[];
                 modelMutations: string[];
             };
-            enabled: boolean;
             prompt: {
                 system: string;
                 templates?: Record<string, string> | undefined;
                 task?: string | undefined;
             };
+            enabled: boolean;
             branchPolicy: {
                 kind: "read-only" | "main-planning-content" | "staging-content" | "assignment-feature" | "staging-release";
                 base: "staging" | "main";
@@ -1017,12 +1017,12 @@ export declare function validatePortableContentData(model: string, value: unknow
                 messageTypes: string[];
                 modelMutations: string[];
             };
-            enabled: boolean;
             prompt: {
                 system: string;
                 templates?: Record<string, string> | undefined;
                 task?: string | undefined;
             };
+            enabled: boolean;
             branchPolicy: {
                 kind: "read-only" | "main-planning-content" | "staging-content" | "assignment-feature" | "staging-release";
                 base: "staging" | "main";
@@ -1189,12 +1189,12 @@ export declare function validatePortableContentData(model: string, value: unknow
                 messageTypes: string[];
                 modelMutations: string[];
             };
-            enabled: boolean;
             prompt: {
                 system: string;
                 templates?: Record<string, string> | undefined;
                 task?: string | undefined;
             };
+            enabled: boolean;
             branchPolicy: {
                 kind: "read-only" | "main-planning-content" | "staging-content" | "assignment-feature" | "staging-release";
                 base: "staging" | "main";
@@ -1361,12 +1361,12 @@ export declare function validatePortableContentData(model: string, value: unknow
                 messageTypes: string[];
                 modelMutations: string[];
             };
-            enabled: boolean;
             prompt: {
                 system: string;
                 templates?: Record<string, string> | undefined;
                 task?: string | undefined;
             };
+            enabled: boolean;
             branchPolicy: {
                 kind: "read-only" | "main-planning-content" | "staging-content" | "assignment-feature" | "staging-release";
                 base: "staging" | "main";
@@ -1600,8 +1600,8 @@ export declare function validatePortableContentData(model: string, value: unknow
         prioritySnapshotId?: string | null | undefined;
     } | {
         status: "live" | "archived" | "draft";
-        audience: string[];
         description: string;
+        audience: string[];
         summary: string;
         slug: string;
         title: string;
@@ -1700,10 +1700,10 @@ export declare function validatePortableContentData(model: string, value: unknow
             paths?: string[] | undefined;
             models?: string[] | undefined;
         };
+        description: string;
         required: boolean;
         revision: number;
-        format: "map" | "summary" | "list" | "full" | "brief" | "sources";
-        description: string;
+        format: "map" | "sources" | "summary" | "list" | "full" | "brief";
         query: string;
         depth: number;
         title: string;
@@ -1720,8 +1720,8 @@ export declare function validatePortableContentData(model: string, value: unknow
         codeScopes?: string[] | undefined;
     } | {
         id: string;
-        revision: number;
         description: string;
+        revision: number;
         title: string;
         queryRefs: {
             id: string;
@@ -1731,8 +1731,8 @@ export declare function validatePortableContentData(model: string, value: unknow
     } | {
         kind: "message" | "status" | "summary" | "plan";
         id: string;
-        revision: number;
         description: string;
+        revision: number;
         title: string;
         instructions: string;
         variables: string[];
@@ -1866,8 +1866,8 @@ export declare function validatePortableContentData(model: string, value: unknow
     } | {
         title: string;
         status?: "live" | "planned" | "in progress" | "exploratory" | "speculative" | undefined;
-        audience?: string[] | undefined;
         description?: string | undefined;
+        audience?: string[] | undefined;
         summary?: string | undefined;
         stage?: string | undefined;
         slug?: string | undefined;
@@ -1995,8 +1995,8 @@ export declare function validatePortableContentData(model: string, value: unknow
         summary: string;
         slug: string;
         title: string;
-        audience?: string[] | undefined;
         description?: string | undefined;
+        audience?: string[] | undefined;
         groupIds?: string[] | undefined;
         relatedBookIds?: string[] | undefined;
     } | {
@@ -2008,14 +2008,14 @@ export declare function validatePortableContentData(model: string, value: unknow
         slug: string;
         title: string;
         bookId: string;
-        order?: number | undefined;
         description?: string | undefined;
+        order?: number | undefined;
         groupIds?: string[] | undefined;
     } | {
         name: string;
         status?: "live" | "planned" | "in progress" | "exploratory" | "speculative" | undefined;
-        role?: string | undefined;
         description?: string | undefined;
+        role?: string | undefined;
         summary?: string | undefined;
         group_ids?: string[] | undefined;
         related_objectives?: string[] | undefined;
@@ -2061,8 +2061,8 @@ export declare function validatePortableContentData(model: string, value: unknow
     } | {
         id: string;
         name: string;
-        classification: string;
         description: string;
+        classification: string;
         slug: string;
         contract: "treeseed.group/v1";
         status?: "active" | "archived" | undefined;

package/dist/deployment/schemas.d.ts

@@ -1,5 +1,149 @@
 import { z } from 'zod';
 export declare const deploymentTrackSchema: z.ZodEnum<["stable", "development"]>;
+export declare const hostCredentialInitializerSchema: z.ZodEffects<z.ZodObject<{
+    schemaVersion: z.ZodLiteral<"treeseed.host-credential-initializer/v1">;
+    id: z.ZodString;
+    displayName: z.ZodString;
+    description: z.ZodString;
+    credentialId: z.ZodString;
+    sources: z.ZodArray<z.ZodEffects<z.ZodObject<{
+        id: z.ZodString;
+        label: z.ZodString;
+        kind: z.ZodEnum<["file", "secret"]>;
+        prompt: z.ZodString;
+        suggestedPaths: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        contentType: z.ZodEnum<["application/json", "text/plain"]>;
+        minimumBytes: z.ZodNumber;
+        maximumBytes: z.ZodNumber;
+    }, "strict", z.ZodTypeAny, {
+        kind: "secret" | "file";
+        id: string;
+        label: string;
+        prompt: string;
+        suggestedPaths: string[];
+        contentType: "application/json" | "text/plain";
+        minimumBytes: number;
+        maximumBytes: number;
+    }, {
+        kind: "secret" | "file";
+        id: string;
+        label: string;
+        prompt: string;
+        contentType: "application/json" | "text/plain";
+        minimumBytes: number;
+        maximumBytes: number;
+        suggestedPaths?: string[] | undefined;
+    }>, {
+        kind: "secret" | "file";
+        id: string;
+        label: string;
+        prompt: string;
+        suggestedPaths: string[];
+        contentType: "application/json" | "text/plain";
+        minimumBytes: number;
+        maximumBytes: number;
+    }, {
+        kind: "secret" | "file";
+        id: string;
+        label: string;
+        prompt: string;
+        contentType: "application/json" | "text/plain";
+        minimumBytes: number;
+        maximumBytes: number;
+        suggestedPaths?: string[] | undefined;
+    }>, "many">;
+    activation: z.ZodObject<{
+        kind: z.ZodLiteral<"sandbox-model-gateway">;
+        authenticationModes: z.ZodRecord<z.ZodString, z.ZodEnum<["api-key", "subscription-file"]>>;
+    }, "strict", z.ZodTypeAny, {
+        kind: "sandbox-model-gateway";
+        authenticationModes: Record<string, "api-key" | "subscription-file">;
+    }, {
+        kind: "sandbox-model-gateway";
+        authenticationModes: Record<string, "api-key" | "subscription-file">;
+    }>;
+}, "strict", z.ZodTypeAny, {
+    schemaVersion: "treeseed.host-credential-initializer/v1";
+    id: string;
+    displayName: string;
+    description: string;
+    credentialId: string;
+    sources: {
+        kind: "secret" | "file";
+        id: string;
+        label: string;
+        prompt: string;
+        suggestedPaths: string[];
+        contentType: "application/json" | "text/plain";
+        minimumBytes: number;
+        maximumBytes: number;
+    }[];
+    activation: {
+        kind: "sandbox-model-gateway";
+        authenticationModes: Record<string, "api-key" | "subscription-file">;
+    };
+}, {
+    schemaVersion: "treeseed.host-credential-initializer/v1";
+    id: string;
+    displayName: string;
+    description: string;
+    credentialId: string;
+    sources: {
+        kind: "secret" | "file";
+        id: string;
+        label: string;
+        prompt: string;
+        contentType: "application/json" | "text/plain";
+        minimumBytes: number;
+        maximumBytes: number;
+        suggestedPaths?: string[] | undefined;
+    }[];
+    activation: {
+        kind: "sandbox-model-gateway";
+        authenticationModes: Record<string, "api-key" | "subscription-file">;
+    };
+}>, {
+    schemaVersion: "treeseed.host-credential-initializer/v1";
+    id: string;
+    displayName: string;
+    description: string;
+    credentialId: string;
+    sources: {
+        kind: "secret" | "file";
+        id: string;
+        label: string;
+        prompt: string;
+        suggestedPaths: string[];
+        contentType: "application/json" | "text/plain";
+        minimumBytes: number;
+        maximumBytes: number;
+    }[];
+    activation: {
+        kind: "sandbox-model-gateway";
+        authenticationModes: Record<string, "api-key" | "subscription-file">;
+    };
+}, {
+    schemaVersion: "treeseed.host-credential-initializer/v1";
+    id: string;
+    displayName: string;
+    description: string;
+    credentialId: string;
+    sources: {
+        kind: "secret" | "file";
+        id: string;
+        label: string;
+        prompt: string;
+        contentType: "application/json" | "text/plain";
+        minimumBytes: number;
+        maximumBytes: number;
+        suggestedPaths?: string[] | undefined;
+    }[];
+    activation: {
+        kind: "sandbox-model-gateway";
+        authenticationModes: Record<string, "api-key" | "subscription-file">;
+    };
+}>;
+export type HostCredentialInitializer = z.infer<typeof hostCredentialInitializerSchema>;
 export declare const hostRoleSchema: z.ZodUnion<[z.ZodEnum<["integrated", "capacity-provider", "control-plane", "knowledge", "ai-gpu", "edge"]>, z.ZodString]>;
 export declare const hostConnectionBindingSchema: z.ZodEffects<z.ZodUnion<[z.ZodObject<{
     kind: z.ZodLiteral<"local">;
@@ -6281,6 +6425,11 @@ export declare const hostUpdateSchema: z.ZodObject<{
 }, "strict", z.ZodTypeAny, {
     schemaVersion: "treeseed.host-update/v1";
     state: "failed" | "planned" | "rolled-back" | "draining" | "applying" | "healthy";
+    activation: {
+        policy: "maintenance-window" | "continuous";
+        eligibleAt: string;
+        jitterSeconds: number;
+    };
     track: "stable" | "development";
     components: {
         from: string | null;
@@ -6291,14 +6440,14 @@ export declare const hostUpdateSchema: z.ZodObject<{
     updateId: string;
     fromCatalogDigest: string;
     toCatalogDigest: string;
+}, {
+    schemaVersion: "treeseed.host-update/v1";
+    state: "failed" | "planned" | "rolled-back" | "draining" | "applying" | "healthy";
     activation: {
         policy: "maintenance-window" | "continuous";
         eligibleAt: string;
         jitterSeconds: number;
     };
-}, {
-    schemaVersion: "treeseed.host-update/v1";
-    state: "failed" | "planned" | "rolled-back" | "draining" | "applying" | "healthy";
     track: "stable" | "development";
     components: {
         from: string | null;
@@ -6309,11 +6458,6 @@ export declare const hostUpdateSchema: z.ZodObject<{
     updateId: string;
     fromCatalogDigest: string;
     toCatalogDigest: string;
-    activation: {
-        policy: "maintenance-window" | "continuous";
-        eligibleAt: string;
-        jitterSeconds: number;
-    };
 }>;
 export declare const hostReceiptSchema: z.ZodObject<{
     schemaVersion: z.ZodLiteral<"treeseed.host-receipt/v1">;

package/dist/deployment/schemas.js

@@ -15,6 +15,31 @@ const localAlias = z.string().regex(
 const binding = z.string().regex(/^(?:\[[0-9a-f:]+\]|[^:]+):[1-9][0-9]{0,4}$/iu);
 const httpsUrl = z.string().url().refine((value) => new URL(value).protocol === "https:", "Remote TreeSeed connections require HTTPS.");
 const deploymentTrackSchema = z.enum(["stable", "development"]);
+const hostCredentialInitializerSchema = z.object({
+  schemaVersion: z.literal("treeseed.host-credential-initializer/v1"),
+  id: identifier,
+  displayName: z.string().min(1).max(128),
+  description: z.string().min(1).max(1024),
+  credentialId: identifier,
+  sources: z.array(z.object({
+    id: identifier,
+    label: z.string().min(1).max(128),
+    kind: z.enum(["file", "secret"]),
+    prompt: z.string().min(1).max(256),
+    suggestedPaths: z.array(z.string().min(1).max(4096)).max(16).default([]),
+    contentType: z.enum(["application/json", "text/plain"]),
+    minimumBytes: z.number().int().positive().max(1048576),
+    maximumBytes: z.number().int().positive().max(1048576)
+  }).strict().refine((source) => source.maximumBytes >= source.minimumBytes, "Credential source maximum must be at least its minimum.")).min(1),
+  activation: z.object({
+    kind: z.literal("sandbox-model-gateway"),
+    authenticationModes: z.record(identifier, z.enum(["api-key", "subscription-file"]))
+  }).strict()
+}).strict().superRefine((initializer, context) => {
+  for (const source of initializer.sources) if (!initializer.activation.authenticationModes[source.id]) {
+    context.addIssue({ code: z.ZodIssueCode.custom, path: ["activation", "authenticationModes", source.id], message: "Every credential source requires an activation mode." });
+  }
+});
 const hostRoleSchema = z.union([
   z.enum(["integrated", "capacity-provider", "control-plane", "knowledge", "ai-gpu", "edge"]),
   identifier
@@ -342,6 +367,7 @@ export {
   hostComponentSchema,
   hostConfigurationSchema,
   hostConnectionBindingSchema,
+  hostCredentialInitializerSchema,
   hostMigrationSchema,
   hostPlanSchema,
   hostReceiptSchema,

package/dist/operator-contracts/canonical-command-tree.js

@@ -53,6 +53,9 @@ const operationBindings = {
   "host topology": local("local.host.topology"),
   "host connections": local("local.host.connections"),
   "host provider status": local("local.host.provider.status"),
+  "host provider credentials list": local("local.host.provider.credentials.list"),
+  "host provider credentials status": local("local.host.provider.credentials.status"),
+  "host provider credentials initialize": local("local.host.provider.credentials.initialize"),
   "host storage status": local("local.host.storage.status"),
   "host storage connect": local("local.host.storage.connect"),
   "host storage reconcile": local("local.host.storage.reconcile"),
@@ -214,6 +217,13 @@ function hostSecurityRotate() {
   ];
   return value;
 }
+function hostProviderCredentialInitialize() {
+  const value = leaf("initialize", "mutation", "initializer", "credential");
+  if (value.nodeType !== "leaf") throw new Error("Provider credential initialization must be a leaf command.");
+  value.description = "Initialize an execution-provider credential through its registered host initializer.";
+  value.options = [...value.options ?? [], { name: "--source", description: "Registered credential source to use instead of automatic selection.", type: "string" }];
+  return value;
+}
 function hostRecoveryVerify() {
   return {
     nodeType: "leaf",
@@ -332,7 +342,7 @@ const commandTree = {
       branch("config", [leaf("show"), leaf("plan", "read", "file"), leaf("apply", "mutation", "file", "authority"), configurationAdopt()]),
       leaf("topology"),
       leaf("connections"),
-      branch("provider", [leaf("status")]),
+      branch("provider", [leaf("status"), branch("credentials", [leaf("list"), leaf("status"), hostProviderCredentialInitialize()])]),
       branch("storage", [
         leaf("status"),
         addOptions(leaf("connect", "mutation", "backend", "credential"), [{ name: "--account-id", description: "Optional Cloudflare account ID when the bootstrap authority reaches multiple accounts.", type: "string" }]),

package/dist/operator-contracts/catalog/capability-ontology-operations.d.ts

@@ -20,15 +20,15 @@ export declare function capabilityOntologyOperations(): {
             }[];
             digest: string;
             version: string;
+            description: string;
             configuration: {
                 key: string;
-                schema: Record<string, unknown>;
                 description: string;
+                schema: Record<string, unknown>;
                 requirementSupport: ("required" | "preferred")[];
                 securityCritical?: boolean | undefined;
             }[];
             family: "research" | "coordination" | "data" | "engineering" | "publishing" | "external-work";
-            description: string;
             title: string;
             features: string[];
             inputs: {
@@ -72,15 +72,15 @@ export declare function capabilityOntologyOperations(): {
         }[];
         digest: string;
         version: string;
+        description: string;
         configuration: {
             key: string;
-            schema: Record<string, unknown>;
             description: string;
+            schema: Record<string, unknown>;
             requirementSupport: ("required" | "preferred")[];
             securityCritical?: boolean | undefined;
         }[];
         family: "research" | "coordination" | "data" | "engineering" | "publishing" | "external-work";
-        description: string;
         title: string;
         features: string[];
         inputs: {
@@ -123,15 +123,15 @@ export declare function capabilityOntologyOperations(): {
             }[];
             digest: string;
             version: string;
+            description: string;
             configuration: {
                 key: string;
-                schema: Record<string, unknown>;
                 description: string;
+                schema: Record<string, unknown>;
                 requirementSupport: ("required" | "preferred")[];
                 securityCritical?: boolean | undefined;
             }[];
             family: "research" | "coordination" | "data" | "engineering" | "publishing" | "external-work";
-            description: string;
             title: string;
             features: string[];
             inputs: {

package/dist/operator-contracts/catalog/inbox-operations.d.ts

@@ -53,10 +53,10 @@ export declare function inboxOperations(): {
         title: string;
         availableActions: {
             reason: string | null;
+            label: string;
             enabled: boolean;
             action: "approve" | "reject" | "publish_revision" | "comment" | "answer" | "reply" | "reopen";
             confirmation: "never" | "input_required";
-            label: string;
             requiresFeedback: boolean;
         }[];
         comments: {
@@ -131,10 +131,10 @@ export declare function inboxOperations(): {
             title: string;
             availableActions: {
                 reason: string | null;
+                label: string;
                 enabled: boolean;
                 action: "approve" | "reject" | "publish_revision" | "comment" | "answer" | "reply" | "reopen";
                 confirmation: "never" | "input_required";
-                label: string;
                 requiresFeedback: boolean;
             }[];
             comments: {
@@ -231,10 +231,10 @@ export declare function inboxOperations(): {
             title: string;
             availableActions: {
                 reason: string | null;
+                label: string;
                 enabled: boolean;
                 action: "approve" | "reject" | "publish_revision" | "comment" | "answer" | "reply" | "reopen";
                 confirmation: "never" | "input_required";
-                label: string;
                 requiresFeedback: boolean;
             }[];
             comments: {

package/dist/operator-contracts/control-plane-operations.d.ts

@@ -22,15 +22,15 @@ export declare const CONTROL_PLANE_OPERATIONS: {
                 }[];
                 digest: string;
                 version: string;
+                description: string;
                 configuration: {
                     key: string;
-                    schema: Record<string, unknown>;
                     description: string;
+                    schema: Record<string, unknown>;
                     requirementSupport: ("required" | "preferred")[];
                     securityCritical?: boolean | undefined;
                 }[];
                 family: "research" | "coordination" | "data" | "engineering" | "publishing" | "external-work";
-                description: string;
                 title: string;
                 features: string[];
                 inputs: {
@@ -74,15 +74,15 @@ export declare const CONTROL_PLANE_OPERATIONS: {
             }[];
             digest: string;
             version: string;
+            description: string;
             configuration: {
                 key: string;
-                schema: Record<string, unknown>;
                 description: string;
+                schema: Record<string, unknown>;
                 requirementSupport: ("required" | "preferred")[];
                 securityCritical?: boolean | undefined;
             }[];
             family: "research" | "coordination" | "data" | "engineering" | "publishing" | "external-work";
-            description: string;
             title: string;
             features: string[];
             inputs: {
@@ -125,15 +125,15 @@ export declare const CONTROL_PLANE_OPERATIONS: {
                 }[];
                 digest: string;
                 version: string;
+                description: string;
                 configuration: {
                     key: string;
-                    schema: Record<string, unknown>;
                     description: string;
+                    schema: Record<string, unknown>;
                     requirementSupport: ("required" | "preferred")[];
                     securityCritical?: boolean | undefined;
                 }[];
                 family: "research" | "coordination" | "data" | "engineering" | "publishing" | "external-work";
-                description: string;
                 title: string;
                 features: string[];
                 inputs: {
@@ -219,10 +219,10 @@ export declare const CONTROL_PLANE_OPERATIONS: {
             title: string;
             availableActions: {
                 reason: string | null;
+                label: string;
                 enabled: boolean;
                 action: "approve" | "reject" | "publish_revision" | "comment" | "answer" | "reply" | "reopen";
                 confirmation: "never" | "input_required";
-                label: string;
                 requiresFeedback: boolean;
             }[];
             comments: {
@@ -297,10 +297,10 @@ export declare const CONTROL_PLANE_OPERATIONS: {
                 title: string;
                 availableActions: {
                     reason: string | null;
+                    label: string;
                     enabled: boolean;
                     action: "approve" | "reject" | "publish_revision" | "comment" | "answer" | "reply" | "reopen";
                     confirmation: "never" | "input_required";
-                    label: string;
                     requiresFeedback: boolean;
                 }[];
                 comments: {
@@ -397,10 +397,10 @@ export declare const CONTROL_PLANE_OPERATIONS: {
                 title: string;
                 availableActions: {
                     reason: string | null;
+                    label: string;
                     enabled: boolean;
                     action: "approve" | "reject" | "publish_revision" | "comment" | "answer" | "reply" | "reopen";
                     confirmation: "never" | "input_required";
-                    label: string;
                     requiresFeedback: boolean;
                 }[];
                 comments: {