@treeseed/sdk 0.4.12 → 0.5.0

package/dist/operations-registry.js

@@ -3,22 +3,30 @@ function operation(spec) {
 }
 const TRESEED_OPERATION_SPECS = [
   operation({ id: "workspace.status", name: "status", aliases: [], group: "Workflow", summary: "Show Treeseed project health and the current task state.", description: "Report branch/task state, runtime readiness, preview/deploy state, auth readiness, and recommended next operations.", provider: "default", related: ["tasks", "switch", "config"] }),
-  operation({ id: "branch.tasks", name: "tasks", aliases: [], group: "Workflow", summary: "List task branches and preview metadata.", description: "List task-based preview Git branches from local and origin, excluding protected and deprecated refs.", provider: "default", related: ["status", "switch", "close"] }),
-  operation({ id: "branch.switch", name: "switch", aliases: [], group: "Workflow", summary: "Create or resume a task branch.", description: "Create a new task branch from staging or resume an existing local or remote task branch.", provider: "default", related: ["tasks", "dev", "save"] }),
-  operation({ id: "branch.save", name: "save", aliases: [], group: "Workflow", summary: "Verify, commit, sync, push, and refresh preview for the current task.", description: "Run lint, test, and build verification, sync the current branch with origin, push it, and refresh the branch preview when enabled.", provider: "default", related: ["switch", "stage", "status"] }),
-  operation({ id: "branch.close", name: "close", aliases: [], group: "Workflow", summary: "Archive a task branch without merging it.", description: "Destroy branch preview resources, create a deprecated resurrection tag, push the tag, and delete the local and remote branch.", provider: "default", related: ["tasks", "switch", "stage"] }),
-  operation({ id: "branch.stage", name: "stage", aliases: [], group: "Workflow", summary: "Merge the current task into staging and clean it up.", description: "Verify the current task branch, merge it into staging, wait for staging automation, clean preview resources, create a deprecated resurrection tag, and delete the task branch.", provider: "default", related: ["save", "release", "close"] }),
+  operation({ id: "branch.tasks", name: "tasks", aliases: [], group: "Workflow", summary: "List task branches plus package branch alignment.", description: "List task branches from market and checked-out package repos, including preview metadata and branch/pointer alignment state.", provider: "default", related: ["status", "switch", "close"] }),
+  operation({ id: "branch.switch", name: "switch", aliases: [], group: "Workflow", summary: "Create or resume a recursive task branch.", description: "Create or resume the task branch in market and any checked-out package repos, with optional preview provisioning.", provider: "default", related: ["tasks", "dev", "save"] }),
+  operation({ id: "branch.save", name: "save", aliases: [], group: "Workflow", summary: "Recursively verify, commit, and push the current task checkpoint.", description: "Save dirty package repos in dependency order, then verify, commit, push, and optionally refresh preview for market.", provider: "default", related: ["switch", "stage", "status"] }),
+  operation({ id: "branch.close", name: "close", aliases: [], group: "Workflow", summary: "Recursively archive and delete a task branch.", description: "Auto-save if needed, clean preview resources, create deprecated tags, and remove the task branch across market and checked-out package repos.", provider: "default", related: ["tasks", "switch", "stage"] }),
+  operation({ id: "branch.stage", name: "stage", aliases: [], group: "Workflow", summary: "Squash a task branch into staging across market and packages.", description: "Auto-save if needed, squash-merge package task branches into staging first, update market submodule pointers, then squash-merge market into staging and clean up the task branch.", provider: "default", related: ["save", "release", "close"] }),
+  operation({ id: "workspace.resume", name: "resume", aliases: [], group: "Workflow", summary: "Resume an interrupted workflow run.", description: "Continue a failed journaled workflow run from its next incomplete step after validating current workspace preconditions.", provider: "default", related: ["recover", "status"] }),
+  operation({ id: "workspace.recover", name: "recover", aliases: [], group: "Workflow", summary: "Inspect active workflow locks and interrupted runs.", description: "List active workflow locks, resumable interrupted runs, and the exact commands needed to continue or recover the workspace state.", provider: "default", related: ["resume", "status"] }),
   operation({ id: "deploy.rollback", name: "rollback", aliases: [], group: "Workflow", summary: "Roll back staging or production to a recorded deployment.", description: "Redeploy a previously recorded staging or production commit using a temporary checkout of that revision.", provider: "default", related: ["status", "release"] }),
   operation({ id: "workspace.doctor", name: "doctor", aliases: [], group: "Validation", summary: "Diagnose Treeseed tooling, auth, and workflow readiness.", description: "Collect doctor-style diagnostics for workspace readiness and optional safe repairs.", provider: "default", related: ["status", "config"] }),
   operation({ id: "auth.login", name: "auth:login", aliases: [], group: "Validation", summary: "Authenticate against the configured Treeseed API.", description: "Start the device login flow against the active Treeseed API host and persist the returned session locally.", provider: "default", related: ["auth:check", "auth:whoami", "auth:logout"] }),
   operation({ id: "auth.logout", name: "auth:logout", aliases: [], group: "Validation", summary: "Clear locally stored Treeseed API credentials.", description: "Remove the persisted local device-flow session for the active Treeseed API host.", provider: "default", related: ["auth:login", "auth:whoami"] }),
   operation({ id: "auth.whoami", name: "auth:whoami", aliases: [], group: "Validation", summary: "Inspect the active Treeseed API identity.", description: "Use the persisted local remote session to query the active Treeseed API principal.", provider: "default", related: ["auth:login", "status"] }),
+  operation({ id: "secrets.status", name: "secrets:status", aliases: [], group: "Validation", summary: "Inspect the local wrapped machine-key session.", description: "Report whether the local key agent is running, whether the wrapped machine key exists, and whether the secret session is unlocked.", provider: "default", related: ["secrets:unlock", "secrets:lock"] }),
+  operation({ id: "secrets.unlock", name: "secrets:unlock", aliases: [], group: "Validation", summary: "Unlock the local Treeseed secret session.", description: "Unlock the host-local Treeseed key agent from an interactive passphrase prompt or an explicit startup passphrase env var.", provider: "default", related: ["secrets:status", "secrets:lock", "secrets:migrate-key"] }),
+  operation({ id: "secrets.lock", name: "secrets:lock", aliases: [], group: "Validation", summary: "Lock the local Treeseed secret session.", description: "Clear the in-memory machine key from the host-local Treeseed key agent.", provider: "default", related: ["secrets:status", "secrets:unlock"] }),
+  operation({ id: "secrets.migrateKey", name: "secrets:migrate-key", aliases: [], group: "Validation", summary: "Wrap a legacy plaintext machine key.", description: "Replace the legacy plaintext machine-key file with the wrapped passphrase-protected format used by the Treeseed key agent.", provider: "default", related: ["secrets:unlock", "secrets:rotate-passphrase"] }),
+  operation({ id: "secrets.rotatePassphrase", name: "secrets:rotate-passphrase", aliases: [], group: "Validation", summary: "Rotate the wrapped machine-key passphrase.", description: "Re-wrap the existing machine key with a newly entered passphrase without changing the underlying machine key.", provider: "default", related: ["secrets:unlock", "secrets:rotate-machine-key"] }),
+  operation({ id: "secrets.rotateMachineKey", name: "secrets:rotate-machine-key", aliases: [], group: "Validation", summary: "Rotate the encrypted machine key itself.", description: "Generate a new machine key, re-encrypt stored local secrets and remote auth sessions, and re-wrap the result with the configured passphrase.", provider: "default", related: ["config", "secrets:rotate-passphrase"] }),
   operation({ id: "template.list", name: "template", aliases: [], group: "Utilities", summary: "List, inspect, and validate templates from the Treeseed catalog.", description: "Use remote template metadata to list templates, show one template, or validate local template artifacts.", provider: "default", related: ["init", "sync"] }),
   operation({ id: "template.sync", name: "sync", aliases: [], group: "Validation", summary: "Validate or reconcile the managed template surface for the current site.", description: "Use remote template metadata plus the local scaffold artifact to check or apply updates to the managed scaffold surface.", provider: "default", related: ["template", "init", "status"] }),
   operation({ id: "project.init", name: "init", aliases: [], group: "Workflow", summary: "Scaffold a new Treeseed tenant project.", description: "Create a new Treeseed tenant directory from a remote-catalog template backed by the packaged scaffold artifact.", provider: "default", related: ["config", "switch", "dev"] }),
-  operation({ id: "project.config", name: "config", aliases: [], group: "Workflow", summary: "Configure and test the runtime foundation.", description: "Apply safe repairs, collect environment values, write local machine config, generate local env files, initialize environments, sync providers, and run doctor-style checks.", provider: "default", related: ["status", "switch", "dev"] }),
+  operation({ id: "project.config", name: "config", aliases: [], group: "Workflow", summary: "Configure and test the runtime foundation.", description: "Apply safe repairs, collect environment values, write local machine config, initialize environments, sync providers, and run doctor-style checks.", provider: "default", related: ["status", "switch", "dev"] }),
   operation({ id: "project.export", name: "export", aliases: [], group: "Utilities", summary: "Export a Markdown snapshot of the current codebase.", description: "Generate a Markdown codebase snapshot for the selected directory using the SDK-owned repomix integration and store it under .treeseed/exports.", provider: "default", related: ["status", "config"] }),
-  operation({ id: "deploy.release", name: "release", aliases: [], group: "Workflow", summary: "Promote staging to production with a version bump.", description: "Validate staging, apply one version bump, tag the release, merge staging into main, push, and rely on production deploy automation.", provider: "default", related: ["stage", "status", "rollback"] }),
+  operation({ id: "deploy.release", name: "release", aliases: [], group: "Workflow", summary: "Release changed packages and market from staging to production.", description: "Select changed packages plus dependents, validate publish workflows, release packages first, then promote market from staging to main with aligned package pointers.", provider: "default", related: ["stage", "status", "rollback"] }),
   operation({ id: "deploy.destroy", name: "destroy", aliases: [], group: "Workflow", summary: "Destroy a persistent environment and its local state.", description: "Delete the selected persistent environment resources and remove the local deploy state after confirmation.", provider: "default", related: ["config", "status"] }),
   operation({ id: "local.dev", name: "dev", aliases: [], group: "Local Development", summary: "Start the unified local Treeseed development environment.", description: "Start the unified local Treeseed development environment.", provider: "default" }),
   operation({ id: "local.devWatch", name: "dev:watch", aliases: [], group: "Local Development", summary: "Start local development with rebuild and watch mode.", description: "Start local development with rebuild and watch mode.", provider: "default" }),
@@ -38,7 +46,6 @@ const TRESEED_OPERATION_SPECS = [
   operation({ id: "release.verify", name: "test:release:full", aliases: ["release:verify"], group: "Release Utilities", summary: "Run the full release verification path.", description: "Run the full release verification path.", provider: "default" }),
   operation({ id: "release.publishChanged", name: "release:publish:changed", aliases: [], group: "Release Utilities", summary: "Publish changed Treeseed workspace packages.", description: "Publish changed Treeseed workspace packages.", provider: "default" }),
   operation({ id: "tools.astro", name: "astro", aliases: [], group: "Passthrough", summary: "Pass through to the packaged Astro CLI wrapper.", description: "Pass through to the packaged Astro CLI wrapper.", provider: "default" }),
-  operation({ id: "tools.syncDevvars", name: "sync:devvars", aliases: [], group: "Utilities", summary: "Regenerate .dev.vars from local configuration.", description: "Regenerate .dev.vars from local configuration.", provider: "default" }),
   operation({ id: "services.mailpitUp", name: "mailpit:up", aliases: [], group: "Utilities", summary: "Start the package-managed Mailpit service.", description: "Start the package-managed Mailpit service.", provider: "default" }),
   operation({ id: "services.mailpitDown", name: "mailpit:down", aliases: [], group: "Utilities", summary: "Stop the package-managed Mailpit service.", description: "Stop the package-managed Mailpit service.", provider: "default" }),
   operation({ id: "services.mailpitLogs", name: "mailpit:logs", aliases: [], group: "Utilities", summary: "Show Mailpit logs.", description: "Show Mailpit logs.", provider: "default" }),

package/dist/operations-types.d.ts

@@ -1,5 +1,5 @@
 export type TreeseedOperationGroup = 'Workflow' | 'Local Development' | 'Validation' | 'Release Utilities' | 'Utilities' | 'Passthrough';
-export type TreeseedOperationId = 'workspace.status' | 'workspace.doctor' | 'branch.tasks' | 'branch.switch' | 'branch.save' | 'branch.close' | 'branch.stage' | 'deploy.release' | 'deploy.rollback' | 'deploy.destroy' | 'template.list' | 'template.show' | 'template.validate' | 'template.sync' | 'project.init' | 'project.config' | 'local.dev' | 'local.devWatch' | 'local.build' | 'local.check' | 'local.preview' | 'local.lint' | 'local.test' | 'validation.testUnit' | 'validation.preflight' | 'validation.authCheck' | 'auth.login' | 'auth.logout' | 'auth.whoami' | 'release.testE2e' | 'release.testE2eLocal' | 'release.testE2eStaging' | 'release.testE2eFull' | 'release.testFast' | 'release.verify' | 'release.publishChanged' | 'services.mailpitUp' | 'services.mailpitDown' | 'services.mailpitLogs' | 'data.d1MigrateLocal' | 'content.cleanupMarkdown' | 'content.cleanupMarkdownCheck' | 'project.export' | 'tools.astro' | 'tools.syncDevvars' | 'tools.starlightPatch' | 'agents.run';
+export type TreeseedOperationId = 'workspace.status' | 'workspace.doctor' | 'branch.tasks' | 'branch.switch' | 'branch.save' | 'branch.close' | 'branch.stage' | 'deploy.release' | 'deploy.rollback' | 'deploy.destroy' | 'workspace.resume' | 'workspace.recover' | 'template.list' | 'template.show' | 'template.validate' | 'template.sync' | 'project.init' | 'project.config' | 'local.dev' | 'local.devWatch' | 'local.build' | 'local.check' | 'local.preview' | 'local.lint' | 'local.test' | 'validation.testUnit' | 'validation.preflight' | 'validation.authCheck' | 'auth.login' | 'auth.logout' | 'auth.whoami' | 'release.testE2e' | 'release.testE2eLocal' | 'release.testE2eStaging' | 'release.testE2eFull' | 'release.testFast' | 'release.verify' | 'release.publishChanged' | 'services.mailpitUp' | 'services.mailpitDown' | 'services.mailpitLogs' | 'data.d1MigrateLocal' | 'content.cleanupMarkdown' | 'content.cleanupMarkdownCheck' | 'project.export' | 'tools.astro' | 'tools.syncDevvars' | 'tools.starlightPatch' | 'agents.run';
 export type TreeseedOperationProviderId = 'default';
 export type TreeseedOperationMetadata = {
     id: TreeseedOperationId;
@@ -49,7 +49,7 @@ export type TreeseedOperationContext = {
     confirm?: TreeseedOperationConfirm;
     transport?: 'sdk' | 'cli' | 'api';
 };
-export type TreeseedOperationFailureCode = 'validation_failed' | 'merge_conflict' | 'missing_runtime_auth' | 'deployment_timeout' | 'confirmation_required' | 'unsupported_transport' | 'unsupported_state' | 'provider_resolution_failed';
+export type TreeseedOperationFailureCode = 'validation_failed' | 'merge_conflict' | 'missing_runtime_auth' | 'deployment_timeout' | 'confirmation_required' | 'unsupported_transport' | 'unsupported_state' | 'workflow_locked' | 'resume_unavailable' | 'workflow_contract_missing' | 'provider_resolution_failed';
 export declare class TreeseedOperationError extends Error {
     code: TreeseedOperationFailureCode;
     operation: string;

package/dist/platform/contracts.d.ts

@@ -1,11 +1,13 @@
-export type TreeseedFeatureName = 'docs' | 'books' | 'notes' | 'questions' | 'objectives' | 'agents' | 'forms';
-export type TreeseedContentCollection = 'pages' | 'notes' | 'questions' | 'objectives' | 'people' | 'agents' | 'books' | 'docs' | 'templates' | 'knowledge_packs' | 'workdays';
+export type TreeseedFeatureName = 'docs' | 'books' | 'notes' | 'questions' | 'objectives' | 'proposals' | 'decisions' | 'agents' | 'forms';
+export type TreeseedContentCollection = 'pages' | 'notes' | 'questions' | 'objectives' | 'proposals' | 'decisions' | 'people' | 'agents' | 'books' | 'docs' | 'templates' | 'knowledge_packs' | 'workdays';
 export interface TreeseedFeatureModules {
     docs?: boolean;
     books?: boolean;
     notes?: boolean;
     questions?: boolean;
     objectives?: boolean;
+    proposals?: boolean;
+    decisions?: boolean;
     agents?: boolean;
     forms?: boolean;
     [key: string]: boolean | undefined;
@@ -15,6 +17,8 @@ export interface TreeseedContentMap {
     notes: string;
     questions: string;
     objectives: string;
+    proposals: string;
+    decisions: string;
     people: string;
     agents: string;
     books: string;
@@ -118,7 +122,23 @@ export interface TreeseedPlatformSurfaceConfig {
     rootDir?: string;
     publicBaseUrl?: string;
     localBaseUrl?: string;
+    cache?: TreeseedWebSurfaceCacheConfig;
 }
+export interface TreeseedWebCachePolicyConfig {
+    browserTtlSeconds?: number;
+    edgeTtlSeconds?: number;
+    staleWhileRevalidateSeconds?: number;
+    staleIfErrorSeconds?: number;
+}
+export interface TreeseedWebSourcePageCacheConfig extends TreeseedWebCachePolicyConfig {
+    paths?: string[];
+}
+export interface TreeseedWebSurfaceCacheConfig {
+    sourcePages?: TreeseedWebSourcePageCacheConfig;
+    contentPages?: TreeseedWebCachePolicyConfig;
+    r2PublishedObjects?: TreeseedWebCachePolicyConfig;
+}
+export type TreeseedContentServingMode = 'local_collections' | 'published_runtime';
 export interface TreeseedCloudflareR2Config {
     binding?: string;
     bucketName?: string;
@@ -136,6 +156,9 @@ export interface TreeseedCloudflarePagesConfig {
 }
 export type TreeseedHostingKind = 'market_control_plane' | 'hosted_project' | 'self_hosted_project';
 export type TreeseedHostingRegistration = 'optional' | 'none';
+export type TreeseedHubMode = 'treeseed_hosted' | 'customer_hosted';
+export type TreeseedRuntimeMode = 'none' | 'byo_attached' | 'treeseed_managed';
+export type TreeseedRuntimeRegistration = 'optional' | 'required' | 'none';
 export interface TreeseedHostingConfig {
     kind: TreeseedHostingKind;
     registration?: TreeseedHostingRegistration;
@@ -143,6 +166,16 @@ export interface TreeseedHostingConfig {
     teamId?: string;
     projectId?: string;
 }
+export interface TreeseedHubConfig {
+    mode: TreeseedHubMode;
+}
+export interface TreeseedRuntimeConfig {
+    mode: TreeseedRuntimeMode;
+    registration?: TreeseedRuntimeRegistration;
+    marketBaseUrl?: string;
+    teamId?: string;
+    projectId?: string;
+}
 export interface TreeseedManagedServiceEnvironmentConfig {
     baseUrl?: string;
     domain?: string;
@@ -172,7 +205,6 @@ export interface TreeseedManagedServiceConfig {
 }
 export interface TreeseedManagedServicesConfig {
     api?: TreeseedManagedServiceConfig;
-    agents?: TreeseedManagedServiceConfig;
     [key: string]: TreeseedManagedServiceConfig | undefined;
 }
 export interface TreeseedPlatformSurfacesConfig {
@@ -196,6 +228,7 @@ export interface TreeseedProviderSelections {
         runtime: string;
         publish: string;
         docs?: string;
+        serving?: TreeseedContentServingMode;
     };
     site?: string;
 }
@@ -209,8 +242,11 @@ export interface TreeseedDeployConfig {
     siteUrl: string;
     contactEmail: string;
     hosting?: TreeseedHostingConfig;
+    hub: TreeseedHubConfig;
+    runtime: TreeseedRuntimeConfig;
     cloudflare: {
         accountId: string;
+        zoneId?: string;
         workerName?: string;
         queueName?: string;
         dlqName?: string;

package/dist/platform/deploy-config.d.ts

@@ -1,6 +1,17 @@
-import type { TreeseedDeployConfig } from './contracts.ts';
+import type { TreeseedDeployConfig, TreeseedWebCachePolicyConfig } from './contracts.ts';
 export declare function resolveTreeseedDeployConfigPath(configPath?: string): string;
 export declare function resolveTreeseedDeployConfigPathFromRoot(tenantRoot: string, configPath?: string): string;
 export declare function deriveCloudflareWorkerName(config: TreeseedDeployConfig): string;
+export declare function resolveTreeseedWebCachePolicy(config: TreeseedDeployConfig): {
+    sourcePages: {
+        paths: string[];
+        browserTtlSeconds: number;
+        edgeTtlSeconds: number;
+        staleWhileRevalidateSeconds: number;
+        staleIfErrorSeconds: number;
+    };
+    contentPages: Required<TreeseedWebCachePolicyConfig>;
+    r2PublishedObjects: Required<TreeseedWebCachePolicyConfig>;
+};
 export declare function loadTreeseedDeployConfig(configPath?: string): TreeseedDeployConfig;
 export declare function loadTreeseedDeployConfigFromPath(resolvedConfigPath: string): TreeseedDeployConfig;

package/dist/platform/deploy-config.js

@@ -18,8 +18,19 @@ const hostingFieldAliases = {
   teamId: { key: "teamId", aliases: ["team_id"] },
   projectId: { key: "projectId", aliases: ["project_id"] }
 };
+const hubFieldAliases = {
+  mode: { key: "mode", aliases: ["mode"] }
+};
+const runtimeFieldAliases = {
+  mode: { key: "mode", aliases: ["mode"] },
+  registration: { key: "registration", aliases: ["registration"] },
+  marketBaseUrl: { key: "marketBaseUrl", aliases: ["market_base_url"] },
+  teamId: { key: "teamId", aliases: ["team_id"] },
+  projectId: { key: "projectId", aliases: ["project_id"] }
+};
 const cloudflareFieldAliases = {
   accountId: { key: "accountId", aliases: ["account_id"] },
+  zoneId: { key: "zoneId", aliases: ["zone_id"] },
   workerName: { key: "workerName", aliases: ["worker_name"] },
   queueName: { key: "queueName", aliases: ["queue_name"] },
   dlqName: { key: "dlqName", aliases: ["dlq_name"] },
@@ -41,7 +52,26 @@ const cloudflareR2FieldAliases = {
   previewRootTemplate: { key: "previewRootTemplate", aliases: ["preview_root_template", "preview_root"] },
   previewTtlHours: { key: "previewTtlHours", aliases: ["preview_ttl_hours"] }
 };
+const webSurfaceCacheFieldAliases = {
+  sourcePages: { key: "sourcePages", aliases: ["source_pages"] },
+  contentPages: { key: "contentPages", aliases: ["content_pages"] },
+  r2PublishedObjects: { key: "r2PublishedObjects", aliases: ["r2_published_objects"] }
+};
+const webCachePolicyFieldAliases = {
+  browserTtlSeconds: { key: "browserTtlSeconds", aliases: ["browser_ttl_seconds"] },
+  edgeTtlSeconds: { key: "edgeTtlSeconds", aliases: ["edge_ttl_seconds"] },
+  staleWhileRevalidateSeconds: { key: "staleWhileRevalidateSeconds", aliases: ["stale_while_revalidate_seconds"] },
+  staleIfErrorSeconds: { key: "staleIfErrorSeconds", aliases: ["stale_if_error_seconds"] },
+  paths: { key: "paths", aliases: ["paths"] }
+};
 const CLOUDFLARE_ACCOUNT_ID_PLACEHOLDER = "replace-with-cloudflare-account-id";
+const TREESEED_DEFAULT_SOURCE_PAGE_PURGE_PATHS = ["/", "/contact", "/404"];
+const TREESEED_DEFAULT_LONG_LIVED_CACHE_POLICY = {
+  browserTtlSeconds: 0,
+  edgeTtlSeconds: 31536e3,
+  staleWhileRevalidateSeconds: 86400,
+  staleIfErrorSeconds: 86400
+};
 function expectString(value, label) {
   if (typeof value !== "string" || !value.trim()) {
     throw new Error(`Invalid deploy config: expected ${label} to be a non-empty string.`);
@@ -67,6 +97,15 @@ function optionalPositiveNumber(value, label) {
   }
   return value;
 }
+function optionalNonNegativeNumber(value, label) {
+  if (value === void 0) {
+    return void 0;
+  }
+  if (typeof value !== "number" || !Number.isFinite(value) || value < 0) {
+    throw new Error(`Invalid deploy config: expected ${label} to be a non-negative number when provided.`);
+  }
+  return value;
+}
 function optionalEnum(value, label, allowed) {
   if (value === void 0) {
     return void 0;
@@ -138,9 +177,85 @@ function parseHostingConfig(value) {
       "self_hosted_project"
     ]) ?? "self_hosted_project",
     registration: optionalEnum(record.registration, "hosting.registration", ["optional", "none"]) ?? "none",
-    marketBaseUrl: optionalString(record.marketBaseUrl),
-    teamId: optionalString(record.teamId),
-    projectId: optionalString(record.projectId)
+    marketBaseUrl: optionalString(process.env.TREESEED_MARKET_API_BASE_URL) ?? optionalString(record.marketBaseUrl),
+    teamId: optionalString(process.env.TREESEED_HOSTING_TEAM_ID) ?? optionalString(record.teamId),
+    projectId: optionalString(process.env.TREESEED_PROJECT_ID) ?? optionalString(record.projectId)
+  };
+}
+function normalizePlanesFromLegacyHosting(hosting) {
+  if (!hosting) {
+    return {
+      hub: { mode: "treeseed_hosted" },
+      runtime: { mode: "none", registration: "none" }
+    };
+  }
+  if (hosting.kind === "market_control_plane" || hosting.kind === "hosted_project") {
+    return {
+      hub: { mode: "treeseed_hosted" },
+      runtime: {
+        mode: "treeseed_managed",
+        registration: hosting.kind === "market_control_plane" ? "none" : hosting.registration ?? "none",
+        marketBaseUrl: hosting.marketBaseUrl,
+        teamId: hosting.teamId,
+        projectId: hosting.projectId
+      }
+    };
+  }
+  return {
+    hub: { mode: "customer_hosted" },
+    runtime: {
+      mode: "byo_attached",
+      registration: hosting.registration ?? "none",
+      marketBaseUrl: hosting.marketBaseUrl,
+      teamId: hosting.teamId,
+      projectId: hosting.projectId
+    }
+  };
+}
+function normalizeLegacyHostingFromPlanes(hub, runtime) {
+  if (runtime.mode === "treeseed_managed" && hub.mode === "treeseed_hosted") {
+    return {
+      kind: "hosted_project",
+      registration: runtime.registration === "required" ? "optional" : runtime.registration ?? "none",
+      marketBaseUrl: runtime.marketBaseUrl,
+      teamId: runtime.teamId,
+      projectId: runtime.projectId
+    };
+  }
+  return {
+    kind: "self_hosted_project",
+    registration: runtime.registration === "required" ? "optional" : runtime.registration ?? "none",
+    marketBaseUrl: runtime.marketBaseUrl,
+    teamId: runtime.teamId,
+    projectId: runtime.projectId
+  };
+}
+function parseHubConfig(value, fallback) {
+  const record = normalizeAliasedRecord(
+    hubFieldAliases,
+    optionalRecord(value, "hub") ?? {}
+  );
+  if (!value || Object.keys(record).length === 0) {
+    return fallback;
+  }
+  return {
+    mode: optionalEnum(record.mode, "hub.mode", ["treeseed_hosted", "customer_hosted"]) ?? fallback.mode
+  };
+}
+function parseRuntimeConfig(value, fallback) {
+  const record = normalizeAliasedRecord(
+    runtimeFieldAliases,
+    optionalRecord(value, "runtime") ?? {}
+  );
+  if (!value || Object.keys(record).length === 0) {
+    return fallback;
+  }
+  return {
+    mode: optionalEnum(record.mode, "runtime.mode", ["none", "byo_attached", "treeseed_managed"]) ?? fallback.mode,
+    registration: optionalEnum(record.registration, "runtime.registration", ["optional", "required", "none"]) ?? fallback.registration ?? "none",
+    marketBaseUrl: optionalString(process.env.TREESEED_MARKET_API_BASE_URL) ?? fallback.marketBaseUrl,
+    teamId: optionalString(process.env.TREESEED_HOSTING_TEAM_ID) ?? fallback.teamId,
+    projectId: optionalString(process.env.TREESEED_PROJECT_ID) ?? fallback.projectId
   };
 }
 function parseProviderSelections(value) {
@@ -192,7 +307,12 @@ function parseProviderSelections(value) {
       docs: expectString(
         contentProviders.docs ?? contentProviders.runtime ?? TREESEED_DEFAULT_PROVIDER_SELECTIONS.content.docs ?? TREESEED_DEFAULT_PROVIDER_SELECTIONS.content.runtime,
         "providers.content.docs"
-      )
+      ),
+      serving: optionalEnum(
+        contentProviders.serving,
+        "providers.content.serving",
+        ["local_collections", "published_runtime"]
+      ) ?? TREESEED_DEFAULT_PROVIDER_SELECTIONS.content.serving
     },
     site: expectString(record.site ?? TREESEED_DEFAULT_PROVIDER_SELECTIONS.site, "providers.site")
   };
@@ -246,6 +366,11 @@ function parseManagedServicesConfig(value) {
     ])
   );
 }
+function inferManagedRuntimeFromServices(services) {
+  return Object.values(services ?? {}).some(
+    (service) => service && service.enabled !== false && (service.provider ?? "railway") === "railway"
+  );
+}
 function parsePlatformSurfaceConfig(value, label) {
   const record = optionalRecord(value, label);
   if (!record) {
@@ -256,8 +381,47 @@ function parsePlatformSurfaceConfig(value, label) {
     provider: optionalString(record.provider),
     rootDir: optionalString(record.rootDir),
     publicBaseUrl: optionalString(record.publicBaseUrl),
-    localBaseUrl: optionalString(record.localBaseUrl)
+    localBaseUrl: optionalString(record.localBaseUrl),
+    cache: parseWebSurfaceCacheConfig(record.cache, `${label}.cache`)
+  };
+}
+function parseWebSurfaceCacheConfig(value, label) {
+  const record = normalizeAliasedRecord(
+    webSurfaceCacheFieldAliases,
+    optionalRecord(value, label) ?? {}
+  );
+  if (!value || Object.keys(record).length === 0) {
+    return void 0;
+  }
+  return {
+    sourcePages: parseWebCachePolicyRecord(record.sourcePages, `${label}.sourcePages`, {
+      paths: TREESEED_DEFAULT_SOURCE_PAGE_PURGE_PATHS
+    }),
+    contentPages: parseWebCachePolicyRecord(record.contentPages, `${label}.contentPages`),
+    r2PublishedObjects: parseWebCachePolicyRecord(record.r2PublishedObjects, `${label}.r2PublishedObjects`)
+  };
+}
+function parseWebCachePolicyRecord(value, label, options = {}) {
+  const record = normalizeAliasedRecord(
+    webCachePolicyFieldAliases,
+    optionalRecord(value, label) ?? {}
+  );
+  if (!value || Object.keys(record).length === 0) {
+    return options.paths ? { paths: [...options.paths] } : void 0;
+  }
+  const parsed = {
+    browserTtlSeconds: optionalNonNegativeNumber(record.browserTtlSeconds, `${label}.browserTtlSeconds`),
+    edgeTtlSeconds: optionalNonNegativeNumber(record.edgeTtlSeconds, `${label}.edgeTtlSeconds`),
+    staleWhileRevalidateSeconds: optionalNonNegativeNumber(
+      record.staleWhileRevalidateSeconds,
+      `${label}.staleWhileRevalidateSeconds`
+    ),
+    staleIfErrorSeconds: optionalNonNegativeNumber(record.staleIfErrorSeconds, `${label}.staleIfErrorSeconds`)
   };
+  if (options.paths) {
+    parsed.paths = [...new Set(optionalStringArray(record.paths, `${label}.paths`) ?? options.paths)];
+  }
+  return parsed;
 }
 function parsePlatformSurfacesConfig(value) {
   const record = optionalRecord(value, "surfaces");
@@ -298,33 +462,47 @@ function parseDeployConfig(raw) {
     cloudflareR2FieldAliases,
     optionalRecord(cloudflare.r2, "cloudflare.r2") ?? {}
   );
+  const hosting = parseHostingConfig(parsed.hosting);
+  const services = parseManagedServicesConfig(parsed.services);
+  const normalizedPlanes = normalizePlanesFromLegacyHosting(hosting);
+  const inferredPlanes = !hosting && !parsed.hub && !parsed.runtime && inferManagedRuntimeFromServices(services) ? {
+    hub: { mode: "customer_hosted" },
+    runtime: { mode: "treeseed_managed", registration: "none" }
+  } : normalizedPlanes;
+  const hub = parseHubConfig(parsed.hub, inferredPlanes.hub);
+  const runtime = parseRuntimeConfig(parsed.runtime, inferredPlanes.runtime);
   const smtp = optionalRecord(parsed.smtp, "smtp") ?? {};
   const turnstile = optionalRecord(parsed.turnstile, "turnstile") ?? {};
   optionalBoolean(turnstile.enabled, "turnstile.enabled");
+  const normalizedHosting = normalizeLegacyHostingFromPlanes(hub, runtime);
+  const compatibilityHosting = hosting && !parsed.hub && !parsed.runtime ? hosting : normalizedHosting;
   return {
     name: expectString(parsed.name, "name"),
     slug: expectString(parsed.slug, "slug"),
     siteUrl: expectString(parsed.siteUrl, "siteUrl"),
     contactEmail: expectString(parsed.contactEmail, "contactEmail"),
-    hosting: parseHostingConfig(parsed.hosting),
+    hosting: compatibilityHosting,
+    hub,
+    runtime,
     cloudflare: {
-      accountId: optionalCloudflareAccountId(cloudflare.accountId) ?? optionalCloudflareAccountId(process.env.CLOUDFLARE_ACCOUNT_ID) ?? CLOUDFLARE_ACCOUNT_ID_PLACEHOLDER,
+      accountId: optionalCloudflareAccountId(process.env.CLOUDFLARE_ACCOUNT_ID) ?? CLOUDFLARE_ACCOUNT_ID_PLACEHOLDER,
+      zoneId: optionalString(cloudflare.zoneId),
       workerName: optionalString(cloudflare.workerName),
       queueName: optionalString(cloudflare.queueName),
       dlqName: optionalString(cloudflare.dlqName),
       d1Binding: optionalString(cloudflare.d1Binding),
       queueBinding: optionalString(cloudflare.queueBinding),
       pages: cloudflare.pages === void 0 ? void 0 : {
-        projectName: optionalString(cloudflarePages.projectName) ?? optionalString(process.env.TREESEED_CLOUDFLARE_PAGES_PROJECT_NAME),
-        previewProjectName: optionalString(cloudflarePages.previewProjectName) ?? optionalString(process.env.TREESEED_CLOUDFLARE_PAGES_PREVIEW_PROJECT_NAME),
+        projectName: optionalString(process.env.TREESEED_CLOUDFLARE_PAGES_PROJECT_NAME) ?? optionalString(cloudflarePages.projectName),
+        previewProjectName: optionalString(process.env.TREESEED_CLOUDFLARE_PAGES_PREVIEW_PROJECT_NAME) ?? optionalString(cloudflarePages.previewProjectName),
         productionBranch: optionalString(cloudflarePages.productionBranch) ?? "main",
         stagingBranch: optionalString(cloudflarePages.stagingBranch) ?? "staging",
         buildOutputDir: optionalString(cloudflarePages.buildOutputDir)
       },
       r2: cloudflare.r2 === void 0 ? void 0 : {
-        binding: optionalString(cloudflareR2.binding) ?? optionalString(process.env.TREESEED_CONTENT_BUCKET_BINDING),
-        bucketName: optionalString(cloudflareR2.bucketName) ?? optionalString(process.env.TREESEED_CONTENT_BUCKET_NAME),
-        publicBaseUrl: optionalString(cloudflareR2.publicBaseUrl) ?? optionalString(process.env.TREESEED_CONTENT_PUBLIC_BASE_URL),
+        binding: optionalString(process.env.TREESEED_CONTENT_BUCKET_BINDING),
+        bucketName: optionalString(process.env.TREESEED_CONTENT_BUCKET_NAME),
+        publicBaseUrl: optionalString(process.env.TREESEED_CONTENT_PUBLIC_BASE_URL),
         manifestKeyTemplate: optionalString(cloudflareR2.manifestKeyTemplate) ?? "teams/{teamId}/published/common.json",
         previewRootTemplate: optionalString(cloudflareR2.previewRootTemplate) ?? "teams/{teamId}/previews",
         previewTtlHours: optionalPositiveNumber(cloudflareR2.previewTtlHours, "cloudflare.r2.previewTtlHours") ?? 168
@@ -333,12 +511,12 @@ function parseDeployConfig(raw) {
     plugins: parsePluginReferences(parsed.plugins),
     providers: parseProviderSelections(parsed.providers),
     surfaces: parsePlatformSurfacesConfig(parsed.surfaces),
-    services: parseManagedServicesConfig(parsed.services),
+    services,
     smtp: {
       enabled: optionalBoolean(smtp.enabled, "smtp.enabled")
     },
     turnstile: {
-      enabled: true
+      enabled: optionalBoolean(turnstile.enabled, "turnstile.enabled") ?? false
     },
     export: parseExportConfig(parsed.export)
   };
@@ -357,6 +535,26 @@ function resolveTreeseedDeployConfigPathFromRoot(tenantRoot, configPath = "trees
 function deriveCloudflareWorkerName(config) {
   return config.cloudflare.workerName?.trim() || config.slug;
 }
+function resolveLongLivedCachePolicy(configured) {
+  return {
+    browserTtlSeconds: configured?.browserTtlSeconds ?? TREESEED_DEFAULT_LONG_LIVED_CACHE_POLICY.browserTtlSeconds,
+    edgeTtlSeconds: configured?.edgeTtlSeconds ?? TREESEED_DEFAULT_LONG_LIVED_CACHE_POLICY.edgeTtlSeconds,
+    staleWhileRevalidateSeconds: configured?.staleWhileRevalidateSeconds ?? TREESEED_DEFAULT_LONG_LIVED_CACHE_POLICY.staleWhileRevalidateSeconds,
+    staleIfErrorSeconds: configured?.staleIfErrorSeconds ?? TREESEED_DEFAULT_LONG_LIVED_CACHE_POLICY.staleIfErrorSeconds
+  };
+}
+function resolveTreeseedWebCachePolicy(config) {
+  const cache = config.surfaces?.web?.cache ?? {};
+  const sourcePages = cache.sourcePages;
+  return {
+    sourcePages: {
+      ...resolveLongLivedCachePolicy(sourcePages),
+      paths: [...new Set(sourcePages?.paths ?? TREESEED_DEFAULT_SOURCE_PAGE_PURGE_PATHS)]
+    },
+    contentPages: resolveLongLivedCachePolicy(cache.contentPages),
+    r2PublishedObjects: resolveLongLivedCachePolicy(cache.r2PublishedObjects)
+  };
+}
 function loadTreeseedDeployConfig(configPath = "treeseed.site.yaml") {
   const resolvedConfigPath = resolveTreeseedDeployConfigPath(configPath);
   return loadTreeseedDeployConfigFromPath(resolvedConfigPath);
@@ -379,5 +577,6 @@ export {
   loadTreeseedDeployConfig,
   loadTreeseedDeployConfigFromPath,
   resolveTreeseedDeployConfigPath,
-  resolveTreeseedDeployConfigPathFromRoot
+  resolveTreeseedDeployConfigPathFromRoot,
+  resolveTreeseedWebCachePolicy
 };

package/dist/platform/deploy-runtime.d.ts

@@ -14,6 +14,7 @@ export declare function getTreeseedAgentProviderSelections(): {
 export declare function getTreeseedDeployProvider(): string;
 export declare function getTreeseedContentRuntimeProvider(): string;
 export declare function getTreeseedContentPublishProvider(): string;
+export declare function getTreeseedContentServingMode(): string;
 export declare function getTreeseedDocsProvider(): string;
 export declare function getTreeseedSiteProvider(): string;
 export declare function isTreeseedSmtpEnabled(): boolean;

package/dist/platform/deploy-runtime.js

@@ -17,7 +17,7 @@ function defaultDeployConfig() {
       enabled: false
     },
     turnstile: {
-      enabled: true
+      enabled: false
     }
   };
 }
@@ -58,6 +58,13 @@ function getTreeseedContentRuntimeProvider() {
 function getTreeseedContentPublishProvider() {
   return getTreeseedDeployConfig().providers?.content?.publish ?? TREESEED_DEFAULT_PROVIDER_SELECTIONS.content.publish;
 }
+function getTreeseedContentServingMode() {
+  const override = process.env.TREESEED_CONTENT_SERVING_MODE?.trim();
+  if (override === "local_collections" || override === "published_runtime") {
+    return override;
+  }
+  return getTreeseedDeployConfig().providers?.content?.serving ?? TREESEED_DEFAULT_PROVIDER_SELECTIONS.content.serving;
+}
 function getTreeseedDocsProvider() {
   return getTreeseedDeployConfig().providers?.content?.docs ?? getTreeseedDeployConfig().providers?.content?.runtime ?? TREESEED_DEFAULT_PROVIDER_SELECTIONS.content.docs ?? TREESEED_DEFAULT_PROVIDER_SELECTIONS.content.runtime;
 }
@@ -68,12 +75,13 @@ function isTreeseedSmtpEnabled() {
   return getTreeseedDeployConfig().smtp?.enabled ?? false;
 }
 function isTreeseedTurnstileEnabled() {
-  return getTreeseedDeployConfig().turnstile?.enabled ?? true;
+  return getTreeseedDeployConfig().turnstile?.enabled ?? false;
 }
 export {
   getTreeseedAgentProviderSelections,
   getTreeseedContentPublishProvider,
   getTreeseedContentRuntimeProvider,
+  getTreeseedContentServingMode,
   getTreeseedDeployConfig,
   getTreeseedDeployProvider,
   getTreeseedDocsProvider,