@treeseed/sdk 0.13.0-rc.6 → 0.13.0-rc.8

package/dist/reconcile/capacity/capacity-core/live-acceptance-capacity-terminal.js

@@ -1,101 +0,0 @@
-function record(value) {
-  return value && typeof value === "object" && !Array.isArray(value) ? value : {};
-}
-function hasAuthenticatedCommittedContentReferences(contentReferences, toolEvents, minimumArtifactCount) {
-  const references = contentReferences.map(record);
-  const events = toolEvents.map(record);
-  const uniqueReferences = new Set(references.map((reference) => `${String(reference.model ?? "")}:${String(reference.contentPath ?? "")}`));
-  const eventsById = new Map(events.map((event) => [String(event.id ?? ""), event]));
-  const hasCommit = events.some((event) => event.status === "completed" && Array.isArray(event.derivedEventTypes) && event.derivedEventTypes.includes("content_committed"));
-  return references.length >= minimumArtifactCount && uniqueReferences.size === references.length && references.every((reference) => {
-    const receiptId = String(reference.receiptId ?? "");
-    const toolEventId = String(reference.toolEventId ?? "");
-    const event = eventsById.get(toolEventId);
-    return Boolean(receiptId && toolEventId && event?.status === "completed" && Array.isArray(event.derivedEventTypes) && (event.derivedEventTypes.includes("content_created") || event.derivedEventTypes.includes("content_updated")));
-  }) && (references.length === 0 || hasCommit);
-}
-async function verifyCapacityAcceptanceTerminal(input) {
-  const terminal = await input.adminClient.capacityProviderAssignment(input.config.teamId, input.assignmentId).catch((error) => {
-    throw new Error(`Capacity acceptance terminal assignment inspection failed: ${error instanceof Error ? error.message : String(error)}`);
-  });
-  const finalStatus = String(terminal.payload.status ?? "");
-  if (finalStatus !== "completed") throw new Error(`Capacity acceptance Agent runtime finished with assignment status "${finalStatus || "unknown"}".`);
-  const terminalProxyHandle = terminal.payload.treedxProxyHandle && typeof terminal.payload.treedxProxyHandle === "object" ? terminal.payload.treedxProxyHandle : {};
-  if (terminalProxyHandle.status !== "revoked" || !terminalProxyHandle.revokedAt) {
-    throw new Error("Capacity acceptance terminal assignment retained an issued TreeDX proxy handle.");
-  }
-  const terminalCapabilityHandles = terminal.payload.capabilityHandles && typeof terminal.payload.capabilityHandles === "object" ? terminal.payload.capabilityHandles : {};
-  const capabilityEntries = ["repository", "treeDx", "workflowOperations", "secrets"].flatMap((key) => Array.isArray(terminalCapabilityHandles[key]) ? terminalCapabilityHandles[key] : []);
-  if (capabilityEntries.some((entry) => !entry || typeof entry !== "object" || entry.status !== "revoked")) {
-    throw new Error("Capacity acceptance terminal assignment retained an active assignment capability handle.");
-  }
-  const modeRuns = await input.adminClient.projectAgentModeRuns(input.config.projectId, { assignmentId: input.assignmentId }).catch((error) => {
-    throw new Error(`Capacity acceptance mode-run inspection failed: ${error instanceof Error ? error.message : String(error)}`);
-  });
-  const completedModeRun = modeRuns.payload.items.find((entry) => entry && typeof entry === "object" && entry.status === "succeeded");
-  if (!completedModeRun?.id) throw new Error("Capacity acceptance Agent runtime did not expose a succeeded mode run.");
-  if (modeRuns.payload.items.some((entry) => !entry || typeof entry !== "object" || entry.providerAssignmentId !== input.assignmentId)) {
-    throw new Error("Capacity acceptance mode-run inspection returned evidence from another assignment.");
-  }
-  const lifecycleOutput = terminal.payload.lifecycleOutput && typeof terminal.payload.lifecycleOutput === "object" ? terminal.payload.lifecycleOutput : {};
-  const artifactManifest = lifecycleOutput.artifactManifest && typeof lifecycleOutput.artifactManifest === "object" ? lifecycleOutput.artifactManifest : null;
-  if (!artifactManifest || artifactManifest.assignmentId !== input.assignmentId) {
-    throw new Error("Capacity acceptance terminal assignment omitted its assignment-scoped artifact manifest.");
-  }
-  const contentReferences = Array.isArray(artifactManifest.contentReferences) ? artifactManifest.contentReferences : [];
-  const toolEvents = Array.isArray(artifactManifest.toolEvents) ? artifactManifest.toolEvents : [];
-  const completedToolIds = toolEvents.filter((entry) => entry && typeof entry === "object" && entry.status === "completed").map((entry) => String(entry.toolId ?? ""));
-  const minimumArtifactCount = input.minimumArtifactCount ?? 1;
-  if (!hasAuthenticatedCommittedContentReferences(contentReferences, toolEvents, minimumArtifactCount)) {
-    throw new Error(`Capacity acceptance required at least ${minimumArtifactCount} unique content artifact(s), each tied to a completed content mutation event and an authenticated assignment commit; observed ${contentReferences.length} artifact(s) and tools [${completedToolIds.join(", ")}].`);
-  }
-  const library = (await input.adminClient.projectTreeDxLibrary(input.config.projectId)).payload;
-  if (!library?.repositoryId) throw new Error("Capacity acceptance cannot read back its artifact without the project TreeDX repository binding.");
-  for (const rawReference of contentReferences) {
-    const contentReference = rawReference;
-    const contentPath = String(contentReference.contentPath ?? "");
-    const contentRef = String(contentReference.ref ?? "");
-    const commitSha = String(contentReference.commitSha ?? "");
-    if (!contentPath || !contentRef || !commitSha) throw new Error("Capacity acceptance content artifact omitted exact path, ref, or commit provenance.");
-    const readBack = await input.adminClient.treeDxReadRepositoryFiles(input.config.projectId, library.repositoryId, {
-      paths: [contentPath],
-      ref: contentRef,
-      encoding: "utf8",
-      parseFrontmatter: true
-    });
-    const readBackPayload = readBack.payload && typeof readBack.payload === "object" ? readBack.payload : {};
-    const readBackFiles = Array.isArray(readBackPayload.files) ? readBackPayload.files : [];
-    if (!readBackFiles.some((entry) => entry && typeof entry === "object" && entry.path === contentPath)) {
-      throw new Error("Capacity acceptance could not read its committed artifact from the exact TreeDX ref.");
-    }
-  }
-  const workDayId = String(terminal.payload.workDayId ?? "");
-  if (!workDayId) throw new Error("Capacity acceptance terminal assignment omitted its workday provenance.");
-  const [reservations, usage, ledger] = await Promise.all([
-    input.adminClient.capacityReservations(input.config.teamId, { projectId: input.config.projectId, workDayId, limit: 100 }),
-    input.adminClient.capacityUsage(input.config.teamId, { projectId: input.config.projectId, workDayId, limit: 100 }),
-    input.adminClient.capacityLedger(input.config.teamId, { projectId: input.config.projectId, workDayId, limit: 100 })
-  ]);
-  const matchingReservations = reservations.payload.items.filter((entry) => entry.assignmentId === input.assignmentId);
-  const matchingUsage = usage.payload.items.filter((entry) => entry.assignmentId === input.assignmentId);
-  const aggregateUsage = matchingUsage.filter((entry) => entry.accountingMode === "aggregate");
-  const matchingLedger = ledger.payload.items.filter((entry) => entry.assignmentId === input.assignmentId);
-  if (matchingReservations.length !== 1 || matchingReservations[0]?.state !== "consumed") {
-    throw new Error("Capacity acceptance did not observe exactly one consumed reservation for its assignment.");
-  }
-  if (aggregateUsage.length !== 1) throw new Error(`Capacity acceptance expected one aggregate usage actual, observed ${aggregateUsage.length}.`);
-  if (matchingLedger.length !== 1) throw new Error(`Capacity acceptance expected one exactly-once ledger settlement, observed ${matchingLedger.length}.`);
-  return {
-    finalStatus,
-    modeRunId: String(completedModeRun.id),
-    modeRunCount: modeRuns.payload.items.length,
-    artifactCount: contentReferences.length,
-    toolEventCount: completedToolIds.length,
-    usageActualCount: matchingUsage.length,
-    ledgerEntryCount: matchingLedger.length
-  };
-}
-export {
-  hasAuthenticatedCommittedContentReferences,
-  verifyCapacityAcceptanceTerminal
-};

package/dist/reconcile/capacity/providers/live-acceptance-provider-config.d.ts

@@ -1 +0,0 @@
-export declare function resolveLiveTestDomain(cwd: string, env: LiveEnv): string;

package/dist/reconcile/capacity/providers/live-acceptance-provider-config.js

@@ -1,20 +0,0 @@
-import { readFileSync } from "node:fs";
-import { join } from "node:path";
-import { configuredLiveAcceptanceValue as configuredValue } from "../../support/acceptance/live-acceptance-values.js";
-function domainFromWorkspace(cwd) {
-  try {
-    const manifest = readFileSync(join(cwd, "treeseed.site.yaml"), "utf8");
-    const match = /^siteUrl:\s*(\S+)/gmu.exec(manifest);
-    if (!match?.[1]) return "";
-    const url = new URL(match[1]);
-    return url.hostname.replace(/^www\./iu, "");
-  } catch {
-    return "";
-  }
-}
-function resolveLiveTestDomain(cwd, env) {
-  return configuredValue(env, ["TREESEED_LIVE_TEST_DOMAIN"]) || configuredValue(env, ["TREESEED_DOMAIN"]) || domainFromWorkspace(cwd);
-}
-export {
-  resolveLiveTestDomain
-};

package/dist/reconcile/hosting/live-acceptance-cloudflare-client.d.ts

@@ -1,29 +0,0 @@
-import { type LiveAcceptanceEnv } from '../support/acceptance/live-acceptance-values.js';
-type LiveEnv = LiveAcceptanceEnv;
-export declare function resolveCloudflareZoneId(domain: string, env: LiveEnv, fetchImpl: typeof fetch): Promise<string>;
-interface CloudflareApiPayload {
-    success?: boolean;
-    errors?: Array<{
-        message?: string;
-    }>;
-    result?: unknown;
-    result_info?: {
-        page?: number;
-        per_page?: number;
-        count?: number;
-        total_count?: number;
-        total_pages?: number;
-    };
-}
-export declare function cloudflareRequestPayload(path: string, env: LiveEnv, fetchImpl: typeof fetch, init?: RequestInit): Promise<CloudflareApiPayload>;
-export declare function cloudflareRequest(path: string, env: LiveEnv, fetchImpl: typeof fetch, init?: RequestInit): Promise<unknown>;
-export declare function cloudflareTunnelRequest(path: string, env: LiveEnv, fetchImpl: typeof fetch, init?: RequestInit): Promise<unknown>;
-export declare function withCloudflareTransientRetry<T>(operation: () => Promise<T>, options?: {
-    attempts?: number;
-    delayMs?: number;
-}): Promise<T>;
-export declare function cloudflareRawRequest(path: string, env: LiveEnv, fetchImpl: typeof fetch, init?: RequestInit): Promise<string>;
-export declare function cloudflareName(value: unknown): string;
-export declare function cloudflareId(value: unknown): string;
-export declare function cloudflareListItems(value: unknown, keys?: string[]): any[];
-export {};

package/dist/reconcile/hosting/live-acceptance-cloudflare-client.js

@@ -1,119 +0,0 @@
-import { resolveCloudflareTunnelApiToken } from "../../configuration/service-credentials.js";
-import { configuredLiveAcceptanceValue as configuredValue } from "../support/acceptance/live-acceptance-values.js";
-function sleep(ms) {
-  return new Promise((resolve) => setTimeout(resolve, ms));
-}
-async function resolveCloudflareZoneId(domain, env, fetchImpl) {
-  const configured = configuredValue(env, ["TREESEED_LIVE_TEST_CLOUDFLARE_ZONE_ID", "CLOUDFLARE_ZONE_ID"]);
-  if (configured) return configured;
-  const zones = await cloudflareRequest("/zones?per_page=100", env, fetchImpl).catch(() => []);
-  if (!Array.isArray(zones)) return "";
-  const candidates = zones.map((entry) => entry && typeof entry === "object" ? entry : null).filter(Boolean);
-  const matched = candidates.find((entry) => typeof entry.name === "string" && (domain === entry.name || domain.endsWith(`.${entry.name}`)));
-  return typeof matched?.id === "string" ? matched.id : "";
-}
-async function cloudflareRequestPayload(path, env, fetchImpl, init = {}) {
-  const token = configuredValue(env, ["TREESEED_CLOUDFLARE_API_TOKEN"]);
-  if (!token) throw new Error("Missing TREESEED_CLOUDFLARE_API_TOKEN.");
-  const response = await fetchImpl(`https://api.cloudflare.com/client/v4${path}`, {
-    ...init,
-    headers: {
-      Accept: "application/json",
-      ...init.body ? { "Content-Type": "application/json" } : {},
-      Authorization: `Bearer ${token}`,
-      ...init.headers ?? {}
-    }
-  });
-  const payload = await response.json().catch(() => ({}));
-  if (!response.ok || payload.success === false) {
-    const errors = Array.isArray(payload.errors) ? payload.errors.map((entry) => entry.message).filter(Boolean).join("; ") : "";
-    throw new Error(`${response.status} ${response.statusText}${errors ? `: ${errors}` : ""}`);
-  }
-  return payload;
-}
-async function cloudflareRequest(path, env, fetchImpl, init = {}) {
-  const payload = await cloudflareRequestPayload(path, env, fetchImpl, init);
-  return payload.result;
-}
-async function cloudflareTunnelRequest(path, env, fetchImpl, init = {}) {
-  const credential = resolveCloudflareTunnelApiToken(env);
-  if (!credential.token) throw new Error("Missing TREESEED_CLOUDFLARE_TUNNEL_API_TOKEN or TREESEED_CLOUDFLARE_API_TOKEN fallback.");
-  return cloudflareRequest(path, { ...env, TREESEED_CLOUDFLARE_API_TOKEN: credential.token }, fetchImpl, init);
-}
-function isTransientCloudflareError(error) {
-  const message = error instanceof Error ? error.message : String(error);
-  return /\b(500|502|503|504|520|521|522|523|524)\b|internal server error|unknown error occurred|temporar(?:y|ily)|timeout|rate limit/iu.test(message);
-}
-async function withCloudflareTransientRetry(operation, options = {}) {
-  const attempts = Math.max(1, options.attempts ?? 4);
-  const delayMs = Math.max(0, options.delayMs ?? 1500);
-  let lastError;
-  for (let attempt = 1; attempt <= attempts; attempt += 1) {
-    try {
-      return await operation();
-    } catch (error) {
-      lastError = error;
-      if (!isTransientCloudflareError(error) || attempt >= attempts) break;
-      await sleep(delayMs * attempt);
-    }
-  }
-  throw lastError instanceof Error ? lastError : new Error(String(lastError));
-}
-async function cloudflareRawRequest(path, env, fetchImpl, init = {}) {
-  const token = configuredValue(env, ["TREESEED_CLOUDFLARE_API_TOKEN"]);
-  if (!token) throw new Error("Missing TREESEED_CLOUDFLARE_API_TOKEN.");
-  const response = await fetchImpl(`https://api.cloudflare.com/client/v4${path}`, {
-    ...init,
-    headers: {
-      Accept: "*/*",
-      Authorization: `Bearer ${token}`,
-      ...init.headers ?? {}
-    }
-  });
-  const body = await response.text().catch(() => "");
-  if (!response.ok) {
-    throw new Error(`${response.status} ${response.statusText}${body ? `: ${body.slice(0, 300)}` : ""}`);
-  }
-  return body;
-}
-function cloudflareName(value) {
-  if (value && typeof value === "object") {
-    const record = value;
-    for (const key of ["name", "title", "queue_name"]) {
-      const candidate = record[key];
-      if (typeof candidate === "string" && candidate.trim()) return candidate.trim();
-    }
-  }
-  return "";
-}
-function cloudflareId(value) {
-  if (value && typeof value === "object") {
-    const record = value;
-    for (const key of ["id", "uuid", "queue_id"]) {
-      const candidate = record[key];
-      if (typeof candidate === "string" && candidate.trim()) return candidate.trim();
-    }
-  }
-  return "";
-}
-function cloudflareListItems(value, keys = []) {
-  if (Array.isArray(value)) return value;
-  if (!value || typeof value !== "object") return [];
-  const record = value;
-  for (const key of [...keys, "items", "buckets", "databases", "queues", "widgets", "namespaces"]) {
-    const candidate = record[key];
-    if (Array.isArray(candidate)) return candidate;
-  }
-  return [];
-}
-export {
-  cloudflareId,
-  cloudflareListItems,
-  cloudflareName,
-  cloudflareRawRequest,
-  cloudflareRequest,
-  cloudflareRequestPayload,
-  cloudflareTunnelRequest,
-  resolveCloudflareZoneId,
-  withCloudflareTransientRetry
-};

package/dist/reconcile/hosting/live-acceptance-cloudflare.d.ts

@@ -1,14 +0,0 @@
-import type { CanonicalDrift } from '../support/state/platform.js';
-import type { RunLiveReconcileTestsOptions, LiveReconcileEnvironment, LiveReconcileMode, LiveReconcileScenarioResult } from '../support/acceptance/live-acceptance.js';
-import { type LiveAcceptanceEnv } from '../support/acceptance/live-acceptance-values.js';
-type LiveEnv = LiveAcceptanceEnv;
-type LiveProgress = RunLiveReconcileTestsOptions['onProgress'];
-export declare function runCloudflareCleanup(cwd: string, environment: LiveReconcileEnvironment, prefix: string, mode: LiveReconcileMode, env: LiveEnv, fetchImpl: typeof fetch): Promise<{
-    results: LiveReconcileScenarioResult[];
-    cleanupDrift: CanonicalDrift[];
-}>;
-export declare function runCloudflareAcceptance(cwd: string, environment: LiveReconcileEnvironment, runId: string, prefix: string, env: LiveEnv, fetchImpl: typeof fetch, onProgress?: LiveProgress): Promise<{
-    results: LiveReconcileScenarioResult[];
-    cleanupDrift: CanonicalDrift[];
-}>;
-export {};

package/dist/reconcile/hosting/live-acceptance-cloudflare.js

@@ -1,316 +0,0 @@
-import { resolveLiveTestDomain } from "../capacity/providers/live-acceptance-provider-config.js";
-import {
-  PROVIDER_CAPABILITIES,
-  blocking,
-  emitProgress,
-  node,
-  providerNode,
-  providerPrefixRoot,
-  scenario,
-  waitForLiveObservation
-} from "../runtime/live-acceptance-runtime.js";
-import { configuredLiveAcceptanceValue as configuredValue } from "../support/acceptance/live-acceptance-values.js";
-import {
-  cloudflareId,
-  cloudflareListItems,
-  cloudflareName,
-  cloudflareRawRequest,
-  cloudflareRequest,
-  cloudflareRequestPayload,
-  cloudflareTunnelRequest,
-  resolveCloudflareZoneId,
-  withCloudflareTransientRetry
-} from "./live-acceptance-cloudflare-client.js";
-async function cloudflareAcceptanceMissingConfig(cwd, env, fetchImpl) {
-  const missing = [];
-  if (!configuredValue(env, ["TREESEED_CLOUDFLARE_API_TOKEN"])) missing.push("TREESEED_CLOUDFLARE_API_TOKEN");
-  if (!configuredValue(env, ["TREESEED_CLOUDFLARE_ACCOUNT_ID"])) missing.push("TREESEED_CLOUDFLARE_ACCOUNT_ID");
-  const domain = resolveLiveTestDomain(cwd, env);
-  if (!domain) {
-    missing.push("TREESEED_LIVE_TEST_DOMAIN or treeseed.site.yaml siteUrl");
-  } else if (configuredValue(env, ["TREESEED_CLOUDFLARE_API_TOKEN"]) && !await resolveCloudflareZoneId(domain, env, fetchImpl)) {
-    missing.push("TREESEED_LIVE_TEST_CLOUDFLARE_ZONE_ID or visible Cloudflare zone for live-test domain");
-  }
-  return missing;
-}
-async function runCloudflareCleanup(cwd, environment, prefix, mode, env, fetchImpl) {
-  const accountId = configuredValue(env, ["TREESEED_CLOUDFLARE_ACCOUNT_ID"]);
-  const domain = resolveLiveTestDomain(cwd, env);
-  const zoneId = domain ? await resolveCloudflareZoneId(domain, env, fetchImpl) : configuredValue(env, ["TREESEED_LIVE_TEST_CLOUDFLARE_ZONE_ID", "CLOUDFLARE_ZONE_ID"]);
-  const destroyed = [];
-  const cleanupDrift = [];
-  const prefixRoot = mode === "cleanup" ? providerPrefixRoot(environment, "cloudflare") : prefix;
-  const attempt = async (type, id, fn) => {
-    try {
-      await fn();
-      destroyed.push(node("cloudflare", environment, type, id, { deleted: true }));
-    } catch (error) {
-      cleanupDrift.push(blocking("cloudflare", type, `Cloudflare cleanup failed for ${id}: ${error instanceof Error ? error.message : String(error)}`));
-    }
-  };
-  const list = async (type, path, keys = []) => {
-    try {
-      return cloudflareListItems(await cloudflareRequest(path, env, fetchImpl), keys);
-    } catch (error) {
-      cleanupDrift.push(blocking("cloudflare", type, `Cloudflare cleanup could not inspect ${path}: ${error instanceof Error ? error.message : String(error)}`));
-      return [];
-    }
-  };
-  const listPaginated = async (type, path, keys = [], perPage = 10) => {
-    const items = [];
-    let totalPages = 1;
-    for (let page = 1; page <= totalPages; page += 1) {
-      const separator = path.includes("?") ? "&" : "?";
-      const pagePath = `${path}${separator}page=${page}&per_page=${perPage}`;
-      try {
-        const payload = await cloudflareRequestPayload(pagePath, env, fetchImpl);
-        items.push(...cloudflareListItems(payload.result, keys));
-        const reportedTotalPages = payload.result_info?.total_pages;
-        if (typeof reportedTotalPages === "number" && Number.isFinite(reportedTotalPages) && reportedTotalPages > totalPages) {
-          totalPages = Math.min(Math.ceil(reportedTotalPages), 100);
-        }
-      } catch (error) {
-        cleanupDrift.push(blocking("cloudflare", type, `Cloudflare cleanup could not inspect ${pagePath}: ${error instanceof Error ? error.message : String(error)}`));
-        break;
-      }
-    }
-    return items;
-  };
-  if (!configuredValue(env, ["TREESEED_CLOUDFLARE_API_TOKEN"]) || !accountId) {
-    cleanupDrift.push(blocking("cloudflare", "account", "Cloudflare cleanup requires TREESEED_CLOUDFLARE_API_TOKEN and TREESEED_CLOUDFLARE_ACCOUNT_ID."));
-  }
-  if (accountId && configuredValue(env, ["TREESEED_CLOUDFLARE_API_TOKEN"])) {
-    if (mode === "acceptance") {
-      await attempt("worker", prefix, () => cloudflareRequest(`/accounts/${accountId}/workers/scripts/${prefix}`, env, fetchImpl, { method: "DELETE" }).catch((error) => {
-        const message = error instanceof Error ? error.message : String(error);
-        if (/404|not found/iu.test(message)) return null;
-        throw error;
-      }));
-    }
-    for (const worker of await list("worker", `/accounts/${accountId}/workers/services?per_page=100`)) {
-      const name = cloudflareName(worker);
-      if (name.startsWith(prefixRoot)) await attempt("worker", name, () => cloudflareRequest(`/accounts/${accountId}/workers/scripts/${name}`, env, fetchImpl, { method: "DELETE" }));
-    }
-    for (const project of await listPaginated("pages", `/accounts/${accountId}/pages/projects`)) {
-      const name = cloudflareName(project);
-      if (name.startsWith(prefixRoot)) await attempt("pages", name, () => cloudflareRequest(`/accounts/${accountId}/pages/projects/${name}`, env, fetchImpl, { method: "DELETE" }));
-    }
-    for (const bucket of await list("r2", `/accounts/${accountId}/r2/buckets?per_page=100`, ["buckets"])) {
-      const name = cloudflareName(bucket);
-      if (name.startsWith(prefixRoot)) await attempt("r2", name, () => cloudflareRequest(`/accounts/${accountId}/r2/buckets/${name}`, env, fetchImpl, { method: "DELETE" }));
-    }
-    try {
-      const tunnels = cloudflareListItems(await cloudflareTunnelRequest(`/accounts/${accountId}/cfd_tunnel?is_deleted=false&per_page=100`, env, fetchImpl));
-      for (const tunnel of tunnels) {
-        const name = cloudflareName(tunnel);
-        const id = cloudflareId(tunnel);
-        if (name.startsWith(prefixRoot) && id) await attempt("tunnel", id, () => cloudflareTunnelRequest(`/accounts/${accountId}/cfd_tunnel/${id}`, env, fetchImpl, { method: "DELETE" }));
-      }
-    } catch (error) {
-      cleanupDrift.push(blocking("cloudflare", "tunnel", `Cloudflare cleanup could not inspect Tunnel resources: ${error instanceof Error ? error.message : String(error)}`));
-    }
-    for (const namespace of await list("kv", `/accounts/${accountId}/storage/kv/namespaces?per_page=100`)) {
-      const name = cloudflareName(namespace);
-      const id = cloudflareId(namespace);
-      if (name.startsWith(prefixRoot) && id) await attempt("kv", id, () => cloudflareRequest(`/accounts/${accountId}/storage/kv/namespaces/${id}`, env, fetchImpl, { method: "DELETE" }));
-    }
-    for (const database of await list("d1", `/accounts/${accountId}/d1/database?per_page=100`)) {
-      const name = cloudflareName(database);
-      const id = cloudflareId(database);
-      if (name.startsWith(prefixRoot) && id) await attempt("d1", id, () => cloudflareRequest(`/accounts/${accountId}/d1/database/${id}`, env, fetchImpl, { method: "DELETE" }));
-    }
-    for (const queue of await list("queue", `/accounts/${accountId}/queues?per_page=100`, ["queues"])) {
-      const name = cloudflareName(queue);
-      const id = cloudflareId(queue);
-      if (name.startsWith(prefixRoot) && id) await attempt("queue", id, () => cloudflareRequest(`/accounts/${accountId}/queues/${id}`, env, fetchImpl, { method: "DELETE" }));
-    }
-    for (const widget of await list("turnstile", `/accounts/${accountId}/challenges/widgets?per_page=100`)) {
-      const name = cloudflareName(widget);
-      const id = cloudflareId(widget);
-      if (name.startsWith(prefixRoot) && id) await attempt("turnstile", id, () => cloudflareRequest(`/accounts/${accountId}/challenges/widgets/${id}`, env, fetchImpl, { method: "DELETE" }));
-    }
-  }
-  if (zoneId && configuredValue(env, ["TREESEED_CLOUDFLARE_API_TOKEN"])) {
-    for (const record of await list("dns", `/zones/${zoneId}/dns_records?per_page=100`)) {
-      const name = cloudflareName(record);
-      const id = cloudflareId(record);
-      if (name.startsWith(prefixRoot) && id) await attempt("dns", id, () => cloudflareRequest(`/zones/${zoneId}/dns_records/${id}`, env, fetchImpl, { method: "DELETE" }));
-    }
-  }
-  const results = PROVIDER_CAPABILITIES.cloudflare.map((capability) => scenario({
-    provider: "cloudflare",
-    mode,
-    prefix,
-    capability,
-    ok: cleanupDrift.length === 0,
-    phase: "cleanup",
-    action: destroyed.some((resource) => resource.type === capability) ? "delete" : "noop",
-    reason: cleanupDrift.length === 0 ? `Cloudflare cleanup removed ${destroyed.filter((resource) => resource.type === capability).length} ${capability} resource(s).` : "Cloudflare cleanup left blocking drift.",
-    destroyedResources: destroyed.filter((resource) => resource.type === capability)
-  }));
-  return { results, cleanupDrift };
-}
-async function runCloudflareAcceptance(cwd, environment, runId, prefix, env, fetchImpl, onProgress) {
-  const mode = "acceptance";
-  const missing = await cloudflareAcceptanceMissingConfig(cwd, env, fetchImpl);
-  if (missing.length > 0) {
-    return {
-      results: PROVIDER_CAPABILITIES.cloudflare.map((capability) => scenario({ provider: "cloudflare", mode, prefix, capability, ok: false, phase: "blocked", action: "blocked", reason: `Missing Cloudflare acceptance configuration: ${missing.join(", ")}.` })),
-      cleanupDrift: []
-    };
-  }
-  emitProgress(onProgress, { provider: "cloudflare", mode, environment, runId, resourcePrefix: prefix, phase: "cleanup", message: `cloudflare: removing old live-test resources for ${prefix}` });
-  await runCloudflareCleanup(cwd, environment, prefix, mode, env, fetchImpl);
-  const accountId = configuredValue(env, ["TREESEED_CLOUDFLARE_ACCOUNT_ID"]);
-  const domain = resolveLiveTestDomain(cwd, env);
-  const zoneId = await resolveCloudflareZoneId(domain, env, fetchImpl);
-  const results = [];
-  const created = [];
-  const attempt = async (capability, type, create, verify) => {
-    const started = /* @__PURE__ */ new Date();
-    const startedMs = performance.now();
-    emitProgress(onProgress, { provider: "cloudflare", mode, environment, runId, resourcePrefix: prefix, capability, phase: "create", message: `cloudflare:${capability}: create/update started` });
-    try {
-      const result = await create();
-      emitProgress(onProgress, { provider: "cloudflare", mode, environment, runId, resourcePrefix: prefix, capability, phase: "verify", message: `cloudflare:${capability}: waiting for live observation` });
-      const observed = await verify(result);
-      const completed = /* @__PURE__ */ new Date();
-      const createdNode = providerNode("cloudflare", environment, type, `${prefix}:${type}`, { result, observed });
-      created.push(createdNode);
-      const durationMs = Math.max(1, Math.ceil(performance.now() - startedMs));
-      results.push(scenario({
-        provider: "cloudflare",
-        mode,
-        prefix,
-        capability,
-        ok: true,
-        phase: capability === "cache-rules" ? "verify" : "create",
-        action: capability === "cache-rules" ? "noop" : "create",
-        reason: capability === "cache-rules" ? "Cloudflare acceptance observed cache-rules API access." : `Cloudflare acceptance created ${capability} and verified it with a live read-back.`,
-        locators: { accountId, zoneId },
-        createdResources: capability === "cache-rules" ? [] : [createdNode],
-        startedAt: started.toISOString(),
-        completedAt: completed.toISOString(),
-        durationMs
-      }));
-      emitProgress(onProgress, { provider: "cloudflare", mode, environment, runId, resourcePrefix: prefix, capability, phase: "complete", elapsedMs: durationMs, message: `cloudflare:${capability}: ok in ${durationMs}ms` });
-    } catch (error) {
-      const completed = /* @__PURE__ */ new Date();
-      const durationMs = Math.max(1, Math.ceil(performance.now() - startedMs));
-      const reason = error instanceof Error ? error.message : String(error);
-      const providerLimited = capability === "cache-rules" && /403|forbidden|authentication/iu.test(reason);
-      results.push(scenario({
-        provider: "cloudflare",
-        mode,
-        prefix,
-        capability,
-        ok: false,
-        phase: "blocked",
-        action: "blocked",
-        reason: providerLimited ? `${reason}. Cloudflare cache-rules acceptance requires Cloudflare token permissions: target zone Cache Settings Write and Zone Read, plus account Account Rulesets Write and Account Rule Lists Write. Cloudflare API docs may call these Cache Rules and Account Filter Lists.` : reason,
-        locators: { accountId, zoneId },
-        startedAt: started.toISOString(),
-        completedAt: completed.toISOString(),
-        durationMs
-      }));
-      emitProgress(onProgress, { provider: "cloudflare", mode, environment, runId, resourcePrefix: prefix, capability, phase: "blocked", elapsedMs: durationMs, message: `cloudflare:${capability}: blocked after ${durationMs}ms - ${providerLimited ? "missing cache-rules permissions" : reason}` });
-    }
-  };
-  await attempt("worker", "worker", () => cloudflareRequest(`/accounts/${accountId}/workers/scripts/${prefix}`, env, fetchImpl, {
-    method: "PUT",
-    headers: { "Content-Type": "application/javascript" },
-    body: 'addEventListener("fetch", event => event.respondWith(new Response("treeseed-live-test-worker")));'
-  }), () => waitForLiveObservation(
-    `Cloudflare worker ${prefix}`,
-    () => cloudflareRawRequest(`/accounts/${accountId}/workers/scripts/${prefix}`, env, fetchImpl),
-    (value) => typeof value === "string" && value.includes("treeseed-live-test-worker")
-  ));
-  await attempt("pages", "pages", () => withCloudflareTransientRetry(() => cloudflareRequest(`/accounts/${accountId}/pages/projects`, env, fetchImpl, {
-    method: "POST",
-    body: JSON.stringify({ name: prefix, production_branch: "main" })
-  })), () => waitForLiveObservation(
-    `Cloudflare Pages project ${prefix}`,
-    () => cloudflareRequest(`/accounts/${accountId}/pages/projects/${prefix}`, env, fetchImpl),
-    (value) => Boolean(value && typeof value === "object")
-  ));
-  await attempt("kv", "kv", () => cloudflareRequest(`/accounts/${accountId}/storage/kv/namespaces`, env, fetchImpl, {
-    method: "POST",
-    body: JSON.stringify({ title: prefix })
-  }), () => waitForLiveObservation(
-    `Cloudflare KV namespace ${prefix}`,
-    () => cloudflareRequest(`/accounts/${accountId}/storage/kv/namespaces?per_page=100`, env, fetchImpl),
-    (value) => Array.isArray(value) && value.some((entry) => cloudflareName(entry) === prefix)
-  ));
-  await attempt("r2", "r2", () => cloudflareRequest(`/accounts/${accountId}/r2/buckets/${prefix}`, env, fetchImpl, { method: "PUT" }), () => waitForLiveObservation(
-    `Cloudflare R2 bucket ${prefix}`,
-    () => cloudflareRequest(`/accounts/${accountId}/r2/buckets/${prefix}`, env, fetchImpl),
-    (value) => Boolean(value && typeof value === "object")
-  ));
-  await attempt("d1", "d1", () => cloudflareRequest(`/accounts/${accountId}/d1/database`, env, fetchImpl, {
-    method: "POST",
-    body: JSON.stringify({ name: prefix })
-  }), (createdResult) => {
-    const id = cloudflareId(createdResult);
-    return waitForLiveObservation(
-      `Cloudflare D1 database ${prefix}`,
-      () => id ? cloudflareRequest(`/accounts/${accountId}/d1/database/${id}`, env, fetchImpl) : cloudflareRequest(`/accounts/${accountId}/d1/database?per_page=100`, env, fetchImpl),
-      (value) => Boolean(value && typeof value === "object") || Array.isArray(value) && value.some((entry) => cloudflareName(entry) === prefix)
-    );
-  });
-  await attempt("queue", "queue", () => cloudflareRequest(`/accounts/${accountId}/queues`, env, fetchImpl, {
-    method: "POST",
-    body: JSON.stringify({ queue_name: prefix })
-  }), () => waitForLiveObservation(
-    `Cloudflare Queue ${prefix}`,
-    () => cloudflareRequest(`/accounts/${accountId}/queues?per_page=100`, env, fetchImpl),
-    (value) => Array.isArray(value) && value.some((entry) => cloudflareName(entry) === prefix)
-  ));
-  await attempt("turnstile", "turnstile", () => cloudflareRequest(`/accounts/${accountId}/challenges/widgets`, env, fetchImpl, {
-    method: "POST",
-    body: JSON.stringify({ name: prefix, domains: [`${prefix}.${domain}`], mode: "managed" })
-  }), () => waitForLiveObservation(
-    `Cloudflare Turnstile widget ${prefix}`,
-    () => cloudflareRequest(`/accounts/${accountId}/challenges/widgets?per_page=100`, env, fetchImpl),
-    (value) => Array.isArray(value) && value.some((entry) => cloudflareName(entry) === prefix)
-  ));
-  await attempt("dns", "dns", () => cloudflareRequest(`/zones/${zoneId}/dns_records`, env, fetchImpl, {
-    method: "POST",
-    body: JSON.stringify({ type: "TXT", name: `${prefix}.${domain}`, content: "treeseed-live-test", ttl: 60 })
-  }), (createdResult) => {
-    const id = cloudflareId(createdResult);
-    return waitForLiveObservation(
-      `Cloudflare DNS record ${prefix}.${domain}`,
-      () => id ? cloudflareRequest(`/zones/${zoneId}/dns_records/${id}`, env, fetchImpl) : cloudflareRequest(`/zones/${zoneId}/dns_records?name=${encodeURIComponent(`${prefix}.${domain}`)}`, env, fetchImpl),
-      (value) => Boolean(value && typeof value === "object") || Array.isArray(value) && value.some((entry) => cloudflareName(entry) === `${prefix}.${domain}`)
-    );
-  });
-  await attempt("tunnel", "tunnel", () => cloudflareTunnelRequest(`/accounts/${accountId}/cfd_tunnel`, env, fetchImpl, {
-    method: "POST",
-    body: JSON.stringify({ name: prefix, config_src: "cloudflare" })
-  }), (createdResult) => {
-    const id = cloudflareId(createdResult);
-    return waitForLiveObservation(
-      `Cloudflare Tunnel ${prefix}`,
-      () => cloudflareTunnelRequest(`/accounts/${accountId}/cfd_tunnel?name=${encodeURIComponent(prefix)}&is_deleted=false`, env, fetchImpl),
-      (value) => Array.isArray(value) && value.some((entry) => cloudflareId(entry) === id && cloudflareName(entry) === prefix)
-    );
-  });
-  await attempt("secrets", "secrets", () => cloudflareRequest(`/accounts/${accountId}/workers/scripts/${prefix}/secrets`, env, fetchImpl, {
-    method: "PUT",
-    body: JSON.stringify({ name: "TREESEED_LIVE_TEST_SECRET", text: "redacted-test-value", type: "secret_text" })
-  }), () => waitForLiveObservation(
-    `Cloudflare Worker secret for ${prefix}`,
-    () => cloudflareRequest(`/accounts/${accountId}/workers/scripts/${prefix}/settings`, env, fetchImpl),
-    (value) => Boolean(value && typeof value === "object")
-  ));
-  await attempt("cache-rules", "cache-rules", () => cloudflareRequest(`/zones/${zoneId}/rulesets`, env, fetchImpl, {
-    method: "GET"
-  }), (createdResult) => Promise.resolve(createdResult));
-  emitProgress(onProgress, { provider: "cloudflare", mode, environment, runId, resourcePrefix: prefix, phase: "destroy", message: `cloudflare: cleaning created resources for ${prefix}` });
-  const cleanup = await runCloudflareCleanup(cwd, environment, prefix, mode, env, fetchImpl);
-  return { results, cleanupDrift: cleanup.cleanupDrift };
-}
-export {
-  runCloudflareAcceptance,
-  runCloudflareCleanup
-};

package/dist/reconcile/hosting/live-acceptance-railway.d.ts

@@ -1,14 +0,0 @@
-import { type LiveAcceptanceEnv } from '../support/acceptance/live-acceptance-values.js';
-import type { LiveReconcileEnvironment, LiveReconcileMode, LiveReconcileScenarioResult, RunLiveReconcileTestsOptions } from '../support/acceptance/live-acceptance.js';
-import type { CanonicalDrift } from '../support/state/platform.js';
-type LiveEnv = LiveAcceptanceEnv;
-type LiveProgress = RunLiveReconcileTestsOptions['onProgress'];
-export declare function runRailwayCleanup(environment: LiveReconcileEnvironment, prefix: string, mode: LiveReconcileMode, env: LiveEnv, fetchImpl: typeof fetch): Promise<{
-    results: LiveReconcileScenarioResult[];
-    cleanupDrift: CanonicalDrift[];
-}>;
-export declare function runRailwayAcceptance(cwd: string, environment: LiveReconcileEnvironment, runId: string, prefix: string, env: LiveEnv, fetchImpl: typeof fetch, onProgress?: LiveProgress): Promise<{
-    results: LiveReconcileScenarioResult[];
-    cleanupDrift: CanonicalDrift[];
-}>;
-export {};