@treeseed/sdk 0.13.0-rc.61 → 0.13.0-rc.63

package/dist/.treeseed-build-complete.json

@@ -1 +1 @@
-{"completedAt":"2026-08-31T10:45:52.624Z"}
+{"completedAt":"2026-08-31T11:48:08.628Z"}

package/dist/capacity-provider/sandbox-contracts.d.ts

@@ -186,13 +186,13 @@ export declare const sandboxAssignmentSchema: z.ZodObject<{
         allowedServices: string[];
         connectedDevelopmentSessionId?: string | undefined;
     };
+    profile: string;
     outputs: {
         path: string;
         id: string;
         mediaType: string;
         maxBytes: number;
     }[];
-    profile: string;
     guestImage: string;
     guestImageDigest: string;
     runnerId: string;
@@ -254,13 +254,13 @@ export declare const sandboxAssignmentSchema: z.ZodObject<{
         allowedServices: string[];
         connectedDevelopmentSessionId?: string | undefined;
     };
+    profile: string;
     outputs: {
         path: string;
         id: string;
         mediaType: string;
         maxBytes: number;
     }[];
-    profile: string;
     guestImage: string;
     guestImageDigest: string;
     runnerId: string;

package/dist/deployment/schemas.d.ts

@@ -485,7 +485,7 @@ export declare const hostComponentSchema: z.ZodObject<{
         storageBytes?: number | undefined;
     };
     enabled: boolean;
-    track: "stable" | "development";
+    track: "development" | "stable";
     aliases: Record<string, string>;
     configuration: Record<string, unknown>;
     connections: Record<string, {
@@ -516,7 +516,7 @@ export declare const hostComponentSchema: z.ZodObject<{
     profile?: string | undefined;
 }, {
     enabled: boolean;
-    track: "stable" | "development";
+    track: "development" | "stable";
     resources?: {
         cpuCores?: number | undefined;
         memoryBytes?: number | undefined;
@@ -630,6 +630,9 @@ export declare const hostConfigurationSchema: z.ZodObject<{
             pollSeconds: 60;
         }>;
     }, "strict", z.ZodTypeAny, {
+        development: {
+            pollSeconds: 60;
+        };
         stable: {
             metadataPollSeconds: number;
             maintenanceWindow: {
@@ -638,11 +641,11 @@ export declare const hostConfigurationSchema: z.ZodObject<{
                 jitterMinutes: number;
             };
         };
+        defaultTrack: "development" | "stable";
+    }, {
         development: {
             pollSeconds: 60;
         };
-        defaultTrack: "stable" | "development";
-    }, {
         stable: {
             metadataPollSeconds: number;
             maintenanceWindow: {
@@ -651,10 +654,7 @@ export declare const hostConfigurationSchema: z.ZodObject<{
                 jitterMinutes: number;
             };
         };
-        development: {
-            pollSeconds: 60;
-        };
-        defaultTrack: "stable" | "development";
+        defaultTrack: "development" | "stable";
     }>;
     components: z.ZodRecord<z.ZodString, z.ZodObject<{
         enabled: z.ZodBoolean;
@@ -841,7 +841,7 @@ export declare const hostConfigurationSchema: z.ZodObject<{
             storageBytes?: number | undefined;
         };
         enabled: boolean;
-        track: "stable" | "development";
+        track: "development" | "stable";
         aliases: Record<string, string>;
         configuration: Record<string, unknown>;
         connections: Record<string, {
@@ -872,7 +872,7 @@ export declare const hostConfigurationSchema: z.ZodObject<{
         profile?: string | undefined;
     }, {
         enabled: boolean;
-        track: "stable" | "development";
+        track: "development" | "stable";
         resources?: {
             cpuCores?: number | undefined;
             memoryBytes?: number | undefined;
@@ -1461,7 +1461,7 @@ export declare const hostConfigurationSchema: z.ZodObject<{
             storageBytes?: number | undefined;
         };
         enabled: boolean;
-        track: "stable" | "development";
+        track: "development" | "stable";
         aliases: Record<string, string>;
         configuration: Record<string, unknown>;
         connections: Record<string, {
@@ -1507,6 +1507,9 @@ export declare const hostConfigurationSchema: z.ZodObject<{
     generation: number;
     configurationId: string;
     updates: {
+        development: {
+            pollSeconds: 60;
+        };
         stable: {
             metadataPollSeconds: number;
             maintenanceWindow: {
@@ -1515,10 +1518,7 @@ export declare const hostConfigurationSchema: z.ZodObject<{
                 jitterMinutes: number;
             };
         };
-        development: {
-            pollSeconds: 60;
-        };
-        defaultTrack: "stable" | "development";
+        defaultTrack: "development" | "stable";
     };
     fleet: {
         rolloutGroup: string;
@@ -1595,7 +1595,7 @@ export declare const hostConfigurationSchema: z.ZodObject<{
     };
     components: Record<string, {
         enabled: boolean;
-        track: "stable" | "development";
+        track: "development" | "stable";
         resources?: {
             cpuCores?: number | undefined;
             memoryBytes?: number | undefined;
@@ -1647,6 +1647,9 @@ export declare const hostConfigurationSchema: z.ZodObject<{
     generation: number;
     configurationId: string;
     updates: {
+        development: {
+            pollSeconds: 60;
+        };
         stable: {
             metadataPollSeconds: number;
             maintenanceWindow: {
@@ -1655,10 +1658,7 @@ export declare const hostConfigurationSchema: z.ZodObject<{
                 jitterMinutes: number;
             };
         };
-        development: {
-            pollSeconds: 60;
-        };
-        defaultTrack: "stable" | "development";
+        defaultTrack: "development" | "stable";
     };
     fleet: {
         rolloutGroup: string;
@@ -3552,7 +3552,7 @@ export declare const componentReleaseSchema: z.ZodEffects<z.ZodObject<{
         requiresBackup: boolean;
     };
     componentId: string;
-    track: "stable" | "development";
+    track: "development" | "stable";
     applicationVersion: string;
     revision: number;
     stableBase: {
@@ -3681,7 +3681,7 @@ export declare const componentReleaseSchema: z.ZodEffects<z.ZodObject<{
         requiresBackup: boolean;
     };
     componentId: string;
-    track: "stable" | "development";
+    track: "development" | "stable";
     applicationVersion: string;
     revision: number;
     stableBase: {
@@ -3810,7 +3810,7 @@ export declare const componentReleaseSchema: z.ZodEffects<z.ZodObject<{
         requiresBackup: boolean;
     };
     componentId: string;
-    track: "stable" | "development";
+    track: "development" | "stable";
     applicationVersion: string;
     revision: number;
     stableBase: {
@@ -3939,7 +3939,7 @@ export declare const componentReleaseSchema: z.ZodEffects<z.ZodObject<{
         requiresBackup: boolean;
     };
     componentId: string;
-    track: "stable" | "development";
+    track: "development" | "stable";
     applicationVersion: string;
     revision: number;
     stableBase: {
@@ -4113,7 +4113,7 @@ export declare const integrationReleaseSchema: z.ZodEffects<z.ZodObject<{
         commit: string;
     };
     generation: number;
-    track: "stable" | "development";
+    track: "development" | "stable";
     compatibilityId: string;
     deployment: {
         repository: "treeseed-ai/deployment";
@@ -4153,7 +4153,7 @@ export declare const integrationReleaseSchema: z.ZodEffects<z.ZodObject<{
         commit: string;
     };
     generation: number;
-    track: "stable" | "development";
+    track: "development" | "stable";
     compatibilityId: string;
     deployment: {
         repository: "treeseed-ai/deployment";
@@ -4193,7 +4193,7 @@ export declare const integrationReleaseSchema: z.ZodEffects<z.ZodObject<{
         commit: string;
     };
     generation: number;
-    track: "stable" | "development";
+    track: "development" | "stable";
     compatibilityId: string;
     deployment: {
         repository: "treeseed-ai/deployment";
@@ -4233,7 +4233,7 @@ export declare const integrationReleaseSchema: z.ZodEffects<z.ZodObject<{
         commit: string;
     };
     generation: number;
-    track: "stable" | "development";
+    track: "development" | "stable";
     compatibilityId: string;
     deployment: {
         repository: "treeseed-ai/deployment";
@@ -5240,7 +5240,7 @@ export declare const releaseCatalogSchema: z.ZodEffects<z.ZodObject<{
             requiresBackup: boolean;
         };
         componentId: string;
-        track: "stable" | "development";
+        track: "development" | "stable";
         applicationVersion: string;
         revision: number;
         stableBase: {
@@ -5369,7 +5369,7 @@ export declare const releaseCatalogSchema: z.ZodEffects<z.ZodObject<{
             requiresBackup: boolean;
         };
         componentId: string;
-        track: "stable" | "development";
+        track: "development" | "stable";
         applicationVersion: string;
         revision: number;
         stableBase: {
@@ -5498,7 +5498,7 @@ export declare const releaseCatalogSchema: z.ZodEffects<z.ZodObject<{
             requiresBackup: boolean;
         };
         componentId: string;
-        track: "stable" | "development";
+        track: "development" | "stable";
         applicationVersion: string;
         revision: number;
         stableBase: {
@@ -5627,7 +5627,7 @@ export declare const releaseCatalogSchema: z.ZodEffects<z.ZodObject<{
             requiresBackup: boolean;
         };
         componentId: string;
-        track: "stable" | "development";
+        track: "development" | "stable";
         applicationVersion: string;
         revision: number;
         stableBase: {
@@ -5761,7 +5761,7 @@ export declare const releaseCatalogSchema: z.ZodEffects<z.ZodObject<{
             requiresBackup: boolean;
         };
         componentId: string;
-        track: "stable" | "development";
+        track: "development" | "stable";
         applicationVersion: string;
         revision: number;
         stableBase: {
@@ -5785,7 +5785,7 @@ export declare const releaseCatalogSchema: z.ZodEffects<z.ZodObject<{
     }[];
     createdAt: string;
     generation: number;
-    track: "stable" | "development";
+    track: "development" | "stable";
     compatibilityId: string;
     catalogDigest: string;
     stableBase: {
@@ -5903,7 +5903,7 @@ export declare const releaseCatalogSchema: z.ZodEffects<z.ZodObject<{
             requiresBackup: boolean;
         };
         componentId: string;
-        track: "stable" | "development";
+        track: "development" | "stable";
         applicationVersion: string;
         revision: number;
         stableBase: {
@@ -5927,7 +5927,7 @@ export declare const releaseCatalogSchema: z.ZodEffects<z.ZodObject<{
     }[];
     createdAt: string;
     generation: number;
-    track: "stable" | "development";
+    track: "development" | "stable";
     compatibilityId: string;
     catalogDigest: string;
     stableBase: {
@@ -6045,7 +6045,7 @@ export declare const releaseCatalogSchema: z.ZodEffects<z.ZodObject<{
             requiresBackup: boolean;
         };
         componentId: string;
-        track: "stable" | "development";
+        track: "development" | "stable";
         applicationVersion: string;
         revision: number;
         stableBase: {
@@ -6069,7 +6069,7 @@ export declare const releaseCatalogSchema: z.ZodEffects<z.ZodObject<{
     }[];
     createdAt: string;
     generation: number;
-    track: "stable" | "development";
+    track: "development" | "stable";
     compatibilityId: string;
     catalogDigest: string;
     stableBase: {
@@ -6187,7 +6187,7 @@ export declare const releaseCatalogSchema: z.ZodEffects<z.ZodObject<{
             requiresBackup: boolean;
         };
         componentId: string;
-        track: "stable" | "development";
+        track: "development" | "stable";
         applicationVersion: string;
         revision: number;
         stableBase: {
@@ -6211,7 +6211,7 @@ export declare const releaseCatalogSchema: z.ZodEffects<z.ZodObject<{
     }[];
     createdAt: string;
     generation: number;
-    track: "stable" | "development";
+    track: "development" | "stable";
     compatibilityId: string;
     catalogDigest: string;
     stableBase: {
@@ -6293,12 +6293,12 @@ export declare const hostBootstrapSchema: z.ZodObject<{
     }, "strict", z.ZodTypeAny, {
         repository: string;
         origin: "TreeSeed Deployment";
-        suite: "stable" | "development";
+        suite: "development" | "stable";
         keyFingerprint: string;
     }, {
         repository: string;
         origin: "TreeSeed Deployment";
-        suite: "stable" | "development";
+        suite: "development" | "stable";
         keyFingerprint: string;
     }>;
     packages: z.ZodArray<z.ZodObject<{
@@ -6352,7 +6352,7 @@ export declare const hostBootstrapSchema: z.ZodObject<{
     apt: {
         repository: string;
         origin: "TreeSeed Deployment";
-        suite: "stable" | "development";
+        suite: "development" | "stable";
         keyFingerprint: string;
     };
     credentialPolicy: {
@@ -6376,7 +6376,7 @@ export declare const hostBootstrapSchema: z.ZodObject<{
     apt: {
         repository: string;
         origin: "TreeSeed Deployment";
-        suite: "stable" | "development";
+        suite: "development" | "stable";
         keyFingerprint: string;
     };
     credentialPolicy: {
@@ -6436,7 +6436,7 @@ export declare const hostUpdateSchema: z.ZodObject<{
         eligibleAt: string;
         jitterSeconds: number;
     };
-    track: "stable" | "development";
+    track: "development" | "stable";
     updateId: string;
     fromCatalogDigest: string;
     toCatalogDigest: string;
@@ -6454,7 +6454,7 @@ export declare const hostUpdateSchema: z.ZodObject<{
         eligibleAt: string;
         jitterSeconds: number;
     };
-    track: "stable" | "development";
+    track: "development" | "stable";
     updateId: string;
     fromCatalogDigest: string;
     toCatalogDigest: string;

package/dist/platform/verification.js

@@ -2,11 +2,72 @@ import { createHash } from "node:crypto";
 import { existsSync, lstatSync, readFileSync } from "node:fs";
 import { extname, relative, resolve } from "node:path";
 import { execFileSync } from "node:child_process";
+import { parse } from "yaml";
+import { hostTemplateSchema, integrationLockSchema } from "./contracts.js";
+import { inventorySchema, profileSchema } from "./schemas.js";
 const allowedRoots = /* @__PURE__ */ new Set([".github", "config", "docs", "profiles", "seeds", "templates"]);
-const allowedFiles = /* @__PURE__ */ new Set([".gitignore", "AGENTS.md", "LICENSE", "LICENSE.md", "README.md", "treeseed.site.yaml"]);
+const allowedFiles = /* @__PURE__ */ new Set([".gitignore", "AGENTS.md", "LICENSE", "LICENSE.md", "README.md", "skills-lock.json", "treeseed.site.yaml"]);
 const allowedExtensions = /* @__PURE__ */ new Set([".md", ".yaml", ".yml", ".json", ".lock", ".toml"]);
 const forbiddenExtensions = /* @__PURE__ */ new Set([".js", ".jsx", ".mjs", ".cjs", ".ts", ".tsx", ".py", ".sh", ".go", ".rs", ".java"]);
 const personalPath = /(?:^|[\s'"`:=])(?:\/home\/[^/\s]+|\/Users\/[^/\s]+|[A-Za-z]:\\Users\\[^\\\s]+)/u;
+function semanticDiagnostics(root, tracked) {
+  const diagnostics = [];
+  const document = (path) => parse(readFileSync(resolve(root, path), "utf8"));
+  const report = (code, path, message) => diagnostics.push({ code, path, message });
+  const safe = (path, load) => {
+    try {
+      return load();
+    } catch (error) {
+      report("declaration_invalid", path, error instanceof Error ? error.message : String(error));
+      return void 0;
+    }
+  };
+  const profiles = /* @__PURE__ */ new Map();
+  for (const path of [...tracked].filter((value) => /^profiles\/[^/]+\.ya?ml$/u.test(value))) {
+    const profile = safe(path, () => profileSchema.parse(document(path)));
+    if (profile) profiles.set(profile.id, profile);
+  }
+  const sitePath = "treeseed.site.yaml";
+  if (!tracked.has(sitePath)) return diagnostics;
+  const site = safe(sitePath, () => document(sitePath));
+  if (!site) return diagnostics;
+  const development = site.development;
+  const inventoryPath = development?.local?.inventory?.path;
+  let projectSlugs = /* @__PURE__ */ new Set();
+  if (development?.local?.inventory?.source !== "seed" || !inventoryPath || !tracked.has(inventoryPath)) {
+    report("inventory_reference_invalid", sitePath, "The local inventory must reference a tracked seed declaration.");
+  } else {
+    const inventory = safe(inventoryPath, () => inventorySchema.parse(document(inventoryPath)));
+    if (inventory) projectSlugs = new Set(inventory.resources.projects.map((project) => project.slug));
+  }
+  for (const [id, profile] of profiles) {
+    for (const project of profile.sources.projects) if (!projectSlugs.has(project)) report("profile_project_unknown", `profiles/${id}.yaml`, `Profile project ${project} is absent from the portable inventory.`);
+    for (const parent of profile.extends) if (!profiles.has(parent)) report("profile_parent_unknown", `profiles/${id}.yaml`, `Profile parent ${parent} does not exist.`);
+  }
+  const integrations = site.integrations;
+  const integrationDigests = /* @__PURE__ */ new Map();
+  for (const path of Object.values(integrations ?? {}).filter((value) => value.includes("/integrations/"))) {
+    if (!tracked.has(path)) {
+      report("integration_reference_invalid", sitePath, `Integration lock ${path} is not tracked.`);
+      continue;
+    }
+    const lock = safe(path, () => integrationLockSchema.parse(document(path)));
+    if (!lock) continue;
+    const digest = `sha256:${createHash("sha256").update(JSON.stringify(lock.components)).digest("hex")}`;
+    if (digest !== lock.digest) report("integration_digest_mismatch", path, "Integration lock digest does not bind its exact component list.");
+    integrationDigests.set(lock.release.replace(/-\d+$/u, ""), lock.digest);
+  }
+  for (const path of [...tracked].filter((value) => /^config\/hosts\/[^/]+\.ya?ml$/u.test(value))) {
+    const host = safe(path, () => hostTemplateSchema.parse(document(path)));
+    if (!host) continue;
+    for (const profile of host.profiles) if (!profiles.has(profile)) report("host_profile_unknown", path, `Host template profile ${profile} does not exist.`);
+    if (![...integrationDigests.values()].includes(host.integration.digest)) report("host_integration_unknown", path, "Host template integration digest is not present in a referenced integration lock.");
+  }
+  const production = site.production;
+  if (production && production.mutation !== "blocked") report("production_not_fail_closed", sitePath, "Production mutation must remain blocked until promotion gates pass.");
+  if (production?.topology && !tracked.has(production.topology)) report("topology_reference_invalid", sitePath, "Production topology must reference a tracked declaration.");
+  return diagnostics;
+}
 function verifyPlatformRepository(root = process.cwd()) {
   const absoluteRoot = resolve(root);
   const listed = execFileSync("git", ["ls-files", "-z"], { cwd: absoluteRoot, encoding: "utf8" }).split("\0").filter(Boolean).sort();
@@ -14,7 +75,15 @@ function verifyPlatformRepository(root = process.cwd()) {
   const hash = createHash("sha256");
   for (const path of listed) {
     const fullPath = resolve(absoluteRoot, path);
-    if (!fullPath.startsWith(`${absoluteRoot}/`) || lstatSync(fullPath).isSymbolicLink()) {
+    if (!fullPath.startsWith(`${absoluteRoot}/`)) {
+      diagnostics.push({ code: "path_not_portable", path, message: "Tracked paths must stay beneath the repository and cannot be symbolic links." });
+      continue;
+    }
+    if (!existsSync(fullPath)) {
+      diagnostics.push({ code: "tracked_file_missing", path, message: "Tracked Platform files must exist in the working tree." });
+      continue;
+    }
+    if (lstatSync(fullPath).isSymbolicLink()) {
       diagnostics.push({ code: "path_not_portable", path, message: "Tracked paths must stay beneath the repository and cannot be symbolic links." });
       continue;
     }
@@ -23,12 +92,11 @@ function verifyPlatformRepository(root = process.cwd()) {
     if (!allowedFiles.has(path) && !allowedRoots.has(rootSegment)) diagnostics.push({ code: "content_root_forbidden", path, message: "Platform may contain only declarations, documentation, locks, and GitHub configuration." });
     if (forbiddenExtensions.has(extension)) diagnostics.push({ code: "implementation_forbidden", path, message: "Executable implementation belongs in its owning package." });
     if (!allowedFiles.has(path) && !allowedExtensions.has(extension)) diagnostics.push({ code: "file_type_forbidden", path, message: "This tracked file type is outside the declarative Platform boundary." });
-    if (existsSync(fullPath)) {
-      const source = readFileSync(fullPath);
-      hash.update(relative(absoluteRoot, fullPath)).update("\0").update(source);
-      if (personalPath.test(source.toString("utf8"))) diagnostics.push({ code: "personal_path_forbidden", path, message: "Committed home-directory paths are forbidden." });
-    }
+    const source = readFileSync(fullPath);
+    hash.update(relative(absoluteRoot, fullPath)).update("\0").update(source);
+    if (personalPath.test(source.toString("utf8"))) diagnostics.push({ code: "personal_path_forbidden", path, message: "Committed home-directory paths are forbidden." });
   }
+  diagnostics.push(...semanticDiagnostics(absoluteRoot, new Set(listed)));
   return { schemaVersion: "treeseed.platform-verification/v1", root: absoluteRoot, digest: `sha256:${hash.digest("hex")}`, ok: diagnostics.length === 0, diagnostics };
 }
 export {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@treeseed/sdk",
-  "version": "0.13.0-rc.61",
+  "version": "0.13.0-rc.63",
   "description": "Portable TreeSeed contracts, standards, and typed remote control-plane clients.",
   "license": "Apache-2.0",
   "repository": {