@treeseed/sdk 0.4.13 → 0.5.0

package/dist/knowledge-coop.d.ts

@@ -0,0 +1,223 @@
+import type { ProjectConnection, RemoteJobStatus } from './sdk-types.ts';
+export declare const KNOWLEDGE_COOP_TEAM_CAPABILITIES: readonly ["launch_projects", "edit_direct", "manage_workstreams", "stage_releases", "publish_releases", "publish_market_listings", "manage_products", "manage_billing", "approve_remote_execution"];
+export declare const KNOWLEDGE_COOP_JOB_STATUSES: readonly ["queued", "running", "waiting_for_approval", "failed", "completed", "rolled_back", "cancelled"];
+export declare const KNOWLEDGE_COOP_WORKSTREAM_STATES: readonly ["drafting", "active_local", "verifying", "saved_remote", "in_staging", "archived"];
+export declare const KNOWLEDGE_COOP_RELEASE_STATES: readonly ["drafting", "waiting_on_verification", "ready_to_publish", "published", "rolled_back"];
+export declare const KNOWLEDGE_COOP_SHARE_PACKAGE_STATES: readonly ["draft", "packaged", "ready_to_publish", "published", "archived", "failed"];
+export declare const KNOWLEDGE_COOP_AGENT_MESSAGE_KINDS: readonly ["informational", "warning", "action_requested", "release_readiness"];
+export type TeamCapability = (typeof KNOWLEDGE_COOP_TEAM_CAPABILITIES)[number];
+export type KnowledgeCoopJobStatus = (typeof KNOWLEDGE_COOP_JOB_STATUSES)[number];
+export type WorkstreamState = (typeof KNOWLEDGE_COOP_WORKSTREAM_STATES)[number];
+export type ReleaseState = (typeof KNOWLEDGE_COOP_RELEASE_STATES)[number];
+export type SharePackageState = (typeof KNOWLEDGE_COOP_SHARE_PACKAGE_STATES)[number];
+export type AgentMessageKind = (typeof KNOWLEDGE_COOP_AGENT_MESSAGE_KINDS)[number];
+export interface LinkedProjectRecordRef {
+    model: 'objective' | 'question' | 'note' | 'proposal' | 'decision';
+    id: string;
+}
+export interface DirectBoardItemSummary {
+    model: 'objective' | 'question' | 'note' | 'proposal' | 'decision';
+    id: string;
+    title: string;
+    status: string | null;
+    updatedAt: string | null;
+    linkedWorkstreamIds: string[];
+    linkedReleaseIds: string[];
+}
+export interface WorkstreamEvent {
+    id: string;
+    workstreamId: string;
+    projectId: string;
+    kind: string;
+    summary: string | null;
+    data: Record<string, unknown>;
+    createdAt: string;
+}
+export interface WorkstreamSummary {
+    id: string;
+    projectId: string;
+    title: string;
+    summary: string | null;
+    state: WorkstreamState;
+    branchName: string | null;
+    branchRef: string | null;
+    owner: string | null;
+    linkedItems: LinkedProjectRecordRef[];
+    verificationStatus: 'completed' | 'failed' | 'waiting' | null;
+    verificationSummary: string | null;
+    lastSaveAt: string | null;
+    lastStageAt: string | null;
+    archivedAt: string | null;
+    createdAt: string;
+    updatedAt: string;
+    metadata?: Record<string, unknown>;
+}
+export interface WorkstreamDetail extends WorkstreamSummary {
+    events: WorkstreamEvent[];
+}
+export interface ReleaseSummary {
+    id: string;
+    projectId: string;
+    version: string;
+    title: string | null;
+    state: ReleaseState;
+    summary: string | null;
+    workstreamIds: string[];
+    releaseTag: string | null;
+    commitSha: string | null;
+    publishedAt: string | null;
+    rolledBackAt: string | null;
+    createdAt: string;
+    updatedAt: string;
+    metadata?: Record<string, unknown>;
+}
+export interface ReleaseDetail extends ReleaseSummary {
+    items: Array<{
+        id: string;
+        workstreamId: string | null;
+        model: string | null;
+        recordId: string | null;
+        summary: string | null;
+        metadata?: Record<string, unknown>;
+        createdAt: string;
+    }>;
+}
+export interface SharePackageStatus {
+    id: string;
+    projectId: string;
+    kind: 'export' | 'template' | 'knowledge_pack' | 'market_listing';
+    state: SharePackageState;
+    title: string;
+    summary: string | null;
+    version: string | null;
+    outputPath: string | null;
+    artifactKey: string | null;
+    manifestKey: string | null;
+    publishedItemId: string | null;
+    lastError: string | null;
+    createdAt: string;
+    updatedAt: string;
+    metadata?: Record<string, unknown>;
+}
+export interface AgentStatusRecord {
+    agentSlug: string;
+    handler: string;
+    status: 'active' | 'idle' | 'failed' | 'waiting';
+    currentTask: string | null;
+    workstreamId: string | null;
+    lastMessage: string | null;
+    lastRunAt: string | null;
+}
+export interface AgentMessageRecord {
+    id: string;
+    agentSlug: string;
+    kind: AgentMessageKind;
+    type: string;
+    status: string;
+    summary: string;
+    workstreamId: string | null;
+    releaseId: string | null;
+    createdAt: string;
+    metadata?: Record<string, unknown>;
+}
+export interface ProjectConnectionStatus {
+    projectId: string;
+    connection: ProjectConnection | null;
+    connected: boolean;
+    hubMode?: 'treeseed_hosted' | 'customer_hosted' | null;
+    runtimeMode?: 'none' | 'byo_attached' | 'treeseed_managed' | null;
+    runtimeRegistration?: 'optional' | 'required' | 'none' | null;
+    runtimeAttached?: boolean;
+    runtimeReady?: boolean;
+    runnerReady: boolean;
+    projectApiReady: boolean;
+    mode: ProjectConnection['mode'] | 'disconnected';
+}
+export interface ProjectOverviewSummary {
+    projectId: string;
+    teamId: string;
+    health: {
+        state: string;
+        label: string;
+        reason: string;
+    };
+    counts: {
+        objectives: number;
+        questions: number;
+        notes: number;
+        proposals: number;
+        decisions: number;
+        activeWorkstreams: number;
+        agents: number;
+        releases: number;
+    };
+    connection: ProjectConnectionStatus;
+    nextBestAction: string;
+    recentActivity: Array<{
+        kind: string;
+        id: string;
+        title: string;
+        status: string | null;
+        timestamp: string | null;
+        summary: string | null;
+        metadata?: Record<string, unknown>;
+    }>;
+}
+export interface TeamHomeSummary {
+    teamId: string;
+    projects: ProjectOverviewSummary[];
+    inboxCount: number;
+    productsCount: number;
+}
+export interface TeamMemberSummary {
+    id: string;
+    teamId: string;
+    userId: string;
+    status: string;
+    displayName: string | null;
+    email: string | null;
+    roles: string[];
+    createdAt: string;
+    updatedAt: string;
+}
+export interface InboxItem {
+    id: string;
+    teamId: string;
+    projectId: string | null;
+    kind: string;
+    state: KnowledgeCoopJobStatus | string;
+    title: string;
+    summary: string | null;
+    href: string | null;
+    metadata?: Record<string, unknown>;
+    createdAt: string;
+    updatedAt: string;
+}
+export interface LaunchProjectRequest {
+    teamId: string;
+    name: string;
+    slug: string;
+    summary?: string | null;
+    sourceKind: 'blank' | 'template' | 'knowledge_pack';
+    sourceRef?: string | null;
+    hostingMode: 'managed' | 'hybrid' | 'self_hosted';
+    publicSite?: boolean;
+    repoProvider?: 'github';
+    repoVisibility?: 'private' | 'public';
+    enableDefaultAgents?: boolean;
+    initialObjectives?: string[];
+}
+export interface LaunchProjectResult {
+    project: {
+        id: string;
+        teamId: string;
+        slug: string;
+        name: string;
+        description: string | null;
+    };
+    connection: ProjectConnection | null;
+    launchJobId: string | null;
+    overview: ProjectOverviewSummary | null;
+}
+export declare function normalizeKnowledgeCoopJobStatus(status: string | null | undefined): KnowledgeCoopJobStatus;
+export declare function normalizeRemoteJobStatus(status: RemoteJobStatus): KnowledgeCoopJobStatus;

package/dist/knowledge-coop.js

@@ -0,0 +1,82 @@
+const KNOWLEDGE_COOP_TEAM_CAPABILITIES = [
+  "launch_projects",
+  "edit_direct",
+  "manage_workstreams",
+  "stage_releases",
+  "publish_releases",
+  "publish_market_listings",
+  "manage_products",
+  "manage_billing",
+  "approve_remote_execution"
+];
+const KNOWLEDGE_COOP_JOB_STATUSES = [
+  "queued",
+  "running",
+  "waiting_for_approval",
+  "failed",
+  "completed",
+  "rolled_back",
+  "cancelled"
+];
+const KNOWLEDGE_COOP_WORKSTREAM_STATES = [
+  "drafting",
+  "active_local",
+  "verifying",
+  "saved_remote",
+  "in_staging",
+  "archived"
+];
+const KNOWLEDGE_COOP_RELEASE_STATES = [
+  "drafting",
+  "waiting_on_verification",
+  "ready_to_publish",
+  "published",
+  "rolled_back"
+];
+const KNOWLEDGE_COOP_SHARE_PACKAGE_STATES = [
+  "draft",
+  "packaged",
+  "ready_to_publish",
+  "published",
+  "archived",
+  "failed"
+];
+const KNOWLEDGE_COOP_AGENT_MESSAGE_KINDS = [
+  "informational",
+  "warning",
+  "action_requested",
+  "release_readiness"
+];
+function normalizeKnowledgeCoopJobStatus(status) {
+  switch (String(status ?? "").trim()) {
+    case "running":
+      return "running";
+    case "waiting_for_approval":
+      return "waiting_for_approval";
+    case "failed":
+      return "failed";
+    case "completed":
+      return "completed";
+    case "rolled_back":
+      return "rolled_back";
+    case "cancelled":
+      return "cancelled";
+    case "claimed":
+    case "pending":
+    default:
+      return "queued";
+  }
+}
+function normalizeRemoteJobStatus(status) {
+  return normalizeKnowledgeCoopJobStatus(status);
+}
+export {
+  KNOWLEDGE_COOP_AGENT_MESSAGE_KINDS,
+  KNOWLEDGE_COOP_JOB_STATUSES,
+  KNOWLEDGE_COOP_RELEASE_STATES,
+  KNOWLEDGE_COOP_SHARE_PACKAGE_STATES,
+  KNOWLEDGE_COOP_TEAM_CAPABILITIES,
+  KNOWLEDGE_COOP_WORKSTREAM_STATES,
+  normalizeKnowledgeCoopJobStatus,
+  normalizeRemoteJobStatus
+};

package/dist/model-registry.js

@@ -107,6 +107,85 @@ function buildBuiltinModelRegistry(repoRoot) {
       contentCollection: "questions",
       contentDir: path.join(root, "questions")
     },
+    proposal: {
+      name: "proposal",
+      aliases: ["proposals"],
+      storage: "content",
+      operations: ["get", "read", "search", "follow", "pick", "create", "update"],
+      graph: graph({
+        entityType: "Proposal",
+        titleField: "title",
+        tagField: "tags",
+        enableSections: true,
+        referenceFields: [
+          { field: "related_objectives", edgeType: "REFERENCES", targetModels: ["objective"], multiple: true },
+          { field: "related_questions", edgeType: "REFERENCES", targetModels: ["question"], multiple: true },
+          { field: "related_notes", edgeType: "REFERENCES", targetModels: ["note"], multiple: true },
+          { field: "related_books", edgeType: "REFERENCES", targetModels: ["book"], multiple: true },
+          { field: "decision", edgeType: "REFERENCES", targetModels: ["decision"] },
+          { field: "supersedes", edgeType: "SUPERSEDES", targetModels: ["proposal"], multiple: true },
+          { field: "primary_contributor", edgeType: "REFERENCES", targetModels: ["person", "agent"] }
+        ]
+      }),
+      fields: {
+        title: field("title", { filterable: true, sortable: true, contentKeys: ["title"], writeContentKey: "title" }),
+        status: field("status", { filterable: true, contentKeys: ["status"], writeContentKey: "status" }),
+        tags: field("tags", { filterable: true, comparableAs: "string_array", contentKeys: ["tags"], writeContentKey: "tags" }),
+        date: field("date", { filterable: true, sortable: true, comparableAs: "date", contentKeys: ["date"], writeContentKey: "date" }),
+        proposal_type: field("proposal_type", { aliases: ["proposalType"], filterable: true, contentKeys: ["proposal_type", "proposalType"], writeContentKey: "proposal_type" }),
+        related_objectives: field("related_objectives", { aliases: ["relatedObjectives"], filterable: true, comparableAs: "string_array", contentKeys: ["related_objectives", "relatedObjectives"], writeContentKey: "related_objectives" }),
+        related_questions: field("related_questions", { aliases: ["relatedQuestions"], filterable: true, comparableAs: "string_array", contentKeys: ["related_questions", "relatedQuestions"], writeContentKey: "related_questions" }),
+        related_notes: field("related_notes", { aliases: ["relatedNotes"], filterable: true, comparableAs: "string_array", contentKeys: ["related_notes", "relatedNotes"], writeContentKey: "related_notes" }),
+        related_books: field("related_books", { aliases: ["relatedBooks"], filterable: true, comparableAs: "string_array", contentKeys: ["related_books", "relatedBooks"], writeContentKey: "related_books" }),
+        decision: field("decision", { filterable: true, contentKeys: ["decision"], writeContentKey: "decision" }),
+        updated_at: field("updated_at", { aliases: ["updated", "updatedAt"], sortable: true, comparableAs: "date", contentKeys: ["updated_at", "updated", "updatedAt"], writeContentKey: "updated_at" })
+      },
+      filterableFields: ["title", "status", "tags", "date", "proposal_type", "related_objectives", "related_questions", "related_notes", "related_books", "decision"],
+      sortableFields: ["title", "date", "updated_at"],
+      pickField: "date",
+      contentCollection: "proposals",
+      contentDir: path.join(root, "proposals")
+    },
+    decision: {
+      name: "decision",
+      aliases: ["decisions"],
+      storage: "content",
+      operations: ["get", "read", "search", "follow", "pick", "create", "update"],
+      graph: graph({
+        entityType: "Decision",
+        titleField: "title",
+        tagField: "tags",
+        enableSections: true,
+        referenceFields: [
+          { field: "related_objectives", edgeType: "REFERENCES", targetModels: ["objective"], multiple: true },
+          { field: "related_questions", edgeType: "REFERENCES", targetModels: ["question"], multiple: true },
+          { field: "related_notes", edgeType: "REFERENCES", targetModels: ["note"], multiple: true },
+          { field: "related_proposals", edgeType: "REFERENCES", targetModels: ["proposal"], multiple: true },
+          { field: "related_books", edgeType: "REFERENCES", targetModels: ["book"], multiple: true },
+          { field: "supersedes", edgeType: "SUPERSEDES", targetModels: ["decision"], multiple: true },
+          { field: "primary_contributor", edgeType: "REFERENCES", targetModels: ["person", "agent"] }
+        ]
+      }),
+      fields: {
+        title: field("title", { filterable: true, sortable: true, contentKeys: ["title"], writeContentKey: "title" }),
+        status: field("status", { filterable: true, contentKeys: ["status"], writeContentKey: "status" }),
+        tags: field("tags", { filterable: true, comparableAs: "string_array", contentKeys: ["tags"], writeContentKey: "tags" }),
+        date: field("date", { filterable: true, sortable: true, comparableAs: "date", contentKeys: ["date"], writeContentKey: "date" }),
+        decision_type: field("decision_type", { aliases: ["decisionType"], filterable: true, contentKeys: ["decision_type", "decisionType"], writeContentKey: "decision_type" }),
+        authority: field("authority", { filterable: true, contentKeys: ["authority"], writeContentKey: "authority" }),
+        related_objectives: field("related_objectives", { aliases: ["relatedObjectives"], filterable: true, comparableAs: "string_array", contentKeys: ["related_objectives", "relatedObjectives"], writeContentKey: "related_objectives" }),
+        related_questions: field("related_questions", { aliases: ["relatedQuestions"], filterable: true, comparableAs: "string_array", contentKeys: ["related_questions", "relatedQuestions"], writeContentKey: "related_questions" }),
+        related_notes: field("related_notes", { aliases: ["relatedNotes"], filterable: true, comparableAs: "string_array", contentKeys: ["related_notes", "relatedNotes"], writeContentKey: "related_notes" }),
+        related_proposals: field("related_proposals", { aliases: ["relatedProposals"], filterable: true, comparableAs: "string_array", contentKeys: ["related_proposals", "relatedProposals"], writeContentKey: "related_proposals" }),
+        related_books: field("related_books", { aliases: ["relatedBooks"], filterable: true, comparableAs: "string_array", contentKeys: ["related_books", "relatedBooks"], writeContentKey: "related_books" }),
+        updated_at: field("updated_at", { aliases: ["updated", "updatedAt"], sortable: true, comparableAs: "date", contentKeys: ["updated_at", "updated", "updatedAt"], writeContentKey: "updated_at" })
+      },
+      filterableFields: ["title", "status", "tags", "date", "decision_type", "authority", "related_objectives", "related_questions", "related_notes", "related_proposals", "related_books"],
+      sortableFields: ["title", "date", "updated_at"],
+      pickField: "date",
+      contentCollection: "decisions",
+      contentDir: path.join(root, "decisions")
+    },
     book: {
       name: "book",
       aliases: ["books"],

package/dist/operations/providers/default.js

@@ -9,8 +9,17 @@ import {
 } from "../../operations-registry.js";
 import {
   clearTreeseedRemoteSession,
+  inspectTreeseedKeyAgentStatus,
+  lockTreeseedSecretSession,
+  migrateTreeseedMachineKeyToWrapped,
+  resolveTreeseedLaunchEnvironment,
   resolveTreeseedRemoteConfig,
-  setTreeseedRemoteSession
+  rotateTreeseedMachineKey,
+  rotateTreeseedMachineKeyPassphrase,
+  setTreeseedRemoteSession,
+  TREESEED_MACHINE_KEY_PASSPHRASE_ENV,
+  TreeseedKeyAgentError,
+  unlockTreeseedSecretSessionFromEnv
 } from "../../operations/services/config-runtime.js";
 import {
   createPersistentDeployTarget,
@@ -37,6 +46,7 @@ import {
   syncTemplateProject,
   validateTemplateProduct
 } from "../../operations/services/template-registry.js";
+import { validateKnowledgeCoopManagedLaunchPrerequisites } from "../../operations/services/knowledge-coop-launch.js";
 import {
   collectCliPreflight,
   formatCliPreflightReport
@@ -68,11 +78,15 @@ function failureResult(metadata, message, options = {}) {
 function contextEnv(context) {
   return { ...process.env, ...context.env ?? {} };
 }
+function operationEnv(context) {
+  const tenantConfigPath = resolve(context.cwd, "treeseed.site.yaml");
+  return existsSync(tenantConfigPath) ? resolveTreeseedLaunchEnvironment({ tenantRoot: context.cwd, scope: "local", baseEnv: contextEnv(context) }) : contextEnv(context);
+}
 function runNodeScript(metadata, scriptName, args, context) {
   if (context.spawn) {
     const result2 = context.spawn(process.execPath, [packageScriptPath(scriptName), ...args], {
       cwd: context.cwd,
-      env: contextEnv(context),
+      env: operationEnv(context),
       stdio: "inherit"
     });
     return operationResult(metadata, {
@@ -85,7 +99,7 @@ function runNodeScript(metadata, scriptName, args, context) {
   }
   const result = spawnSync(process.execPath, [packageScriptPath(scriptName), ...args], {
     cwd: context.cwd,
-    env: contextEnv(context),
+    env: operationEnv(context),
     encoding: "utf8",
     stdio: "pipe"
   });
@@ -198,11 +212,30 @@ class PreflightOperation extends BaseOperation {
       cwd: context.cwd,
       requireAuth: input.requireAuth ?? this.requireAuth
     });
+    const launch = input.launch === true || input.managedLaunch === true ? validateKnowledgeCoopManagedLaunchPrerequisites(context.cwd) : null;
     const stdout = [formatCliPreflightReport(report)];
+    if (launch) {
+      stdout.push(
+        "",
+        "Knowledge Coop managed launch preflight",
+        `- ok: ${launch.ok ? "yes" : "no"}`,
+        `- commands: git=${launch.commands.git ? "ok" : "missing"}, gh=${launch.commands.gh ? "ok" : "missing"}, wrangler=${launch.commands.wrangler ? "ok" : "missing"}, railway=${launch.commands.railway ? "ok" : "missing"}`
+      );
+      if (launch.missingConfig.length > 0) {
+        stdout.push(...launch.missingConfig.map((item) => `- missing config: ${item}`));
+      }
+      if (launch.providerChecks.issues.length > 0) {
+        stdout.push(...launch.providerChecks.issues.map((item) => `- provider issue: ${item}`));
+      }
+    }
     for (const line of stdout) context.write?.(line, "stdout");
-    return operationResult(this.metadata, report, {
-      ok: report.ok,
-      exitCode: report.ok ? 0 : 1,
+    const ok = report.ok && (!launch || launch.ok);
+    return operationResult(this.metadata, {
+      ...report,
+      launch
+    }, {
+      ok,
+      exitCode: ok ? 0 : 1,
       stdout,
       stderr: []
     });
@@ -350,6 +383,87 @@ class AuthWhoAmIOperation extends BaseOperation {
     });
   }
 }
+class SecretsStatusOperation extends BaseOperation {
+  async execute(_input, context) {
+    return operationResult(this.metadata, {
+      status: inspectTreeseedKeyAgentStatus(context.cwd)
+    });
+  }
+}
+class SecretsUnlockOperation extends BaseOperation {
+  async execute(input, context) {
+    try {
+      const status = unlockTreeseedSecretSessionFromEnv(context.cwd, {
+        allowMigration: input.allowMigration !== false,
+        createIfMissing: input.createIfMissing !== false
+      });
+      return operationResult(this.metadata, { status });
+    } catch (error) {
+      if (error instanceof TreeseedKeyAgentError) {
+        return failureResult(this.metadata, error.message, { meta: { code: error.code, details: error.details ?? null } });
+      }
+      throw error;
+    }
+  }
+}
+class SecretsLockOperation extends BaseOperation {
+  async execute(_input, context) {
+    try {
+      return operationResult(this.metadata, {
+        status: lockTreeseedSecretSession(context.cwd)
+      });
+    } catch (error) {
+      if (error instanceof TreeseedKeyAgentError) {
+        return failureResult(this.metadata, error.message, { meta: { code: error.code, details: error.details ?? null } });
+      }
+      throw error;
+    }
+  }
+}
+class SecretsMigrateKeyOperation extends BaseOperation {
+  async execute(input, context) {
+    const passphrase = String(input.passphrase ?? context.env?.[TREESEED_MACHINE_KEY_PASSPHRASE_ENV] ?? "").trim();
+    if (!passphrase) {
+      return failureResult(this.metadata, `Set ${TREESEED_MACHINE_KEY_PASSPHRASE_ENV} or pass { passphrase } when migrating the machine key.`);
+    }
+    try {
+      return operationResult(this.metadata, migrateTreeseedMachineKeyToWrapped(context.cwd, passphrase));
+    } catch (error) {
+      if (error instanceof TreeseedKeyAgentError) {
+        return failureResult(this.metadata, error.message, { meta: { code: error.code, details: error.details ?? null } });
+      }
+      throw error;
+    }
+  }
+}
+class SecretsRotatePassphraseOperation extends BaseOperation {
+  async execute(input, context) {
+    const passphrase = String(input.passphrase ?? context.env?.[TREESEED_MACHINE_KEY_PASSPHRASE_ENV] ?? "").trim();
+    if (!passphrase) {
+      return failureResult(this.metadata, `Set ${TREESEED_MACHINE_KEY_PASSPHRASE_ENV} or pass { passphrase } when rotating the wrapped-key passphrase.`);
+    }
+    try {
+      return operationResult(this.metadata, rotateTreeseedMachineKeyPassphrase(context.cwd, passphrase));
+    } catch (error) {
+      if (error instanceof TreeseedKeyAgentError) {
+        return failureResult(this.metadata, error.message, { meta: { code: error.code, details: error.details ?? null } });
+      }
+      throw error;
+    }
+  }
+}
+class SecretsRotateMachineKeyOperation extends BaseOperation {
+  async execute(_input, context) {
+    try {
+      return operationResult(this.metadata, rotateTreeseedMachineKey(context.cwd));
+    } catch (error) {
+      if (error instanceof TreeseedKeyAgentError) {
+        return failureResult(this.metadata, error.message, { meta: { code: error.code, details: error.details ?? null } });
+      }
+      throw error;
+    }
+  }
+}
 class RollbackOperation extends BaseOperation {
   async execute(input, context) {
     const scope = typeof input.environment === "string" ? input.environment : null;
@@ -469,6 +583,12 @@ class DefaultTreeseedOperationsProvider {
       new AuthLoginOperation("auth:login"),
       new AuthLogoutOperation("auth:logout"),
       new AuthWhoAmIOperation("auth:whoami"),
+      new SecretsStatusOperation("secrets:status"),
+      new SecretsUnlockOperation("secrets:unlock"),
+      new SecretsLockOperation("secrets:lock"),
+      new SecretsMigrateKeyOperation("secrets:migrate-key"),
+      new SecretsRotatePassphraseOperation("secrets:rotate-passphrase"),
+      new SecretsRotateMachineKeyOperation("secrets:rotate-machine-key"),
       new RollbackOperation("rollback"),
       new ScriptOperation("build", "tenant-build"),
       new ScriptOperation("check", "tenant-check"),
@@ -486,7 +606,6 @@ class DefaultTreeseedOperationsProvider {
       new ScriptOperation("test:release:full", "workspace-release-verify", ["--full-smoke"]),
       new ScriptOperation("release:publish:changed", "workspace-publish-changed-packages"),
       new ScriptOperation("astro", "tenant-astro-command"),
-      new ScriptOperation("sync:devvars", "sync-dev-vars"),
       new MailpitUpOperation("mailpit:up"),
       new MailpitDownOperation("mailpit:down"),
       new MailpitLogsOperation("mailpit:logs"),