@treeseed/sdk 0.6.16 → 0.6.17

package/dist/platform/deploy-config.js

@@ -57,6 +57,9 @@ const webSurfaceCacheFieldAliases = {
   contentPages: { key: "contentPages", aliases: ["content_pages"] },
   r2PublishedObjects: { key: "r2PublishedObjects", aliases: ["r2_published_objects"] }
 };
+const localRuntimeFieldAliases = {
+  runtime: { key: "runtime", aliases: ["runtime", "runtime_mode", "runtimeMode"] }
+};
 const webCachePolicyFieldAliases = {
   browserTtlSeconds: { key: "browserTtlSeconds", aliases: ["browser_ttl_seconds"] },
   edgeTtlSeconds: { key: "edgeTtlSeconds", aliases: ["edge_ttl_seconds"] },
@@ -326,6 +329,18 @@ function parseServiceEnvironmentConfig(value, label) {
     railwayEnvironment: optionalString(record.railwayEnvironment)
   };
 }
+function parseLocalRuntimeConfig(value, label) {
+  const record = normalizeAliasedRecord(
+    localRuntimeFieldAliases,
+    optionalRecord(value, label) ?? {}
+  );
+  if (!value || Object.keys(record).length === 0) {
+    return void 0;
+  }
+  return {
+    runtime: optionalEnum(record.runtime, `${label}.runtime`, ["auto", "provider", "local"])
+  };
+}
 function parseManagedServiceConfig(value, label) {
   const record = optionalRecord(value, label);
   if (!record) {
@@ -359,6 +374,7 @@ function parseManagedServiceConfig(value, label) {
       runtimeMode: optionalString(railway.runtimeMode),
       schedule: Array.isArray(railway.schedule) ? railway.schedule.map((entry) => optionalString(entry)).filter(Boolean) : optionalString(railway.schedule)
     },
+    local: parseLocalRuntimeConfig(record.local, `${label}.local`),
     environments: {
       local: parseServiceEnvironmentConfig(environments.local, `${label}.environments.local`),
       staging: parseServiceEnvironmentConfig(environments.staging, `${label}.environments.staging`),
@@ -394,6 +410,7 @@ function parsePlatformSurfaceConfig(value, label) {
     rootDir: optionalString(record.rootDir),
     publicBaseUrl: optionalString(record.publicBaseUrl),
     localBaseUrl: optionalString(record.localBaseUrl),
+    local: parseLocalRuntimeConfig(record.local, `${label}.local`),
     environments: (() => {
       const environments = optionalRecord(record.environments, `${label}.environments`);
       if (!environments) {

package/dist/reconcile/builtin-adapters.js

@@ -835,7 +835,6 @@ function reconcileCloudflareTarget(input, { dryRun = false } = {}) {
     current.url = `https://${current.projectName}.pages.dev`;
   };
   runStep("kv-form-guard", () => ensureKv("FORM_GUARD_KV"));
-  runStep("kv-session", () => ensureKv("SESSION"));
   runStep("d1", ensureD1);
   runStep("queue", ensureQueue);
   runStep("r2", ensureR2Bucket);
@@ -932,16 +931,6 @@ function observeCloudflareUnit(input) {
         warnings: []
       };
     }
-    case "kv-session": {
-      const liveNamespace = kvNamespaces.find((entry) => entry?.title === state.kvNamespaces?.SESSION?.name);
-      return {
-        exists: Boolean(liveNamespace || hasLiveResourceId(state.kvNamespaces?.SESSION?.id)),
-        status: liveNamespace ? "ready" : "pending",
-        live: { ...state.kvNamespaces?.SESSION ?? {} },
-        locators: { id: liveNamespace?.id ?? state.kvNamespaces?.SESSION?.id ?? null },
-        warnings: []
-      };
-    }
     case "pages-project": {
       const liveProject = pagesProjects.find((entry) => entry?.name === state.pages?.projectName);
       return {
@@ -1029,9 +1018,8 @@ function verifyCloudflareUnitOnce(input, postconditions) {
         })
       ]);
     }
-    case "kv-form-guard":
-    case "kv-session": {
-      const binding = input.unit.unitType === "kv-form-guard" ? "FORM_GUARD_KV" : "SESSION";
+    case "kv-form-guard": {
+      const binding = "FORM_GUARD_KV";
       const namespace = state.kvNamespaces?.[binding];
       const live = getCloudflareKvById(env, namespace?.id) ?? kvNamespaces.find((entry) => entry?.title === namespace?.name);
       return summarizeVerification(input.unit.unitId, [
@@ -1209,7 +1197,6 @@ function buildCloudflareAdapter(unitType) {
             { key: "database.binding", description: "D1 binding matches desired config" }
           ];
         case "kv-form-guard":
-        case "kv-session":
           return [
             { key: "kv.exists", description: "KV namespace exists by title and id" },
             { key: "kv.binding", description: "KV binding matches desired config" }
@@ -2109,7 +2096,6 @@ function createCloudflareReconcileAdapters() {
     buildCloudflareAdapter("database"),
     buildCloudflareAdapter("content-store"),
     buildCloudflareAdapter("kv-form-guard"),
-    buildCloudflareAdapter("kv-session"),
     buildCloudflareAdapter("pages-project"),
     buildCloudflareAdapter("edge-worker"),
     buildCustomDomainAdapter("custom-domain:web", "cloudflare"),

package/dist/reconcile/contracts.d.ts

@@ -3,7 +3,7 @@ export type TreeseedReconcileProviderId = string;
 export type TreeseedReconcileActionKind = 'noop' | 'create' | 'update' | 'reuse' | 'drift_correct' | 'destroy';
 export type TreeseedReconcileStatusKind = 'pending' | 'ready' | 'drifted' | 'error';
 export type TreeseedReconcileVerificationSource = 'cli' | 'api' | 'sdk' | 'derived';
-export type TreeseedReconcileUnitType = 'web-ui' | 'api-runtime' | 'manager-runtime' | 'worker-runtime' | 'workday-start-runtime' | 'workday-report-runtime' | 'edge-worker' | 'content-store' | 'queue' | 'database' | 'kv-form-guard' | 'kv-session' | 'pages-project' | 'custom-domain:web' | 'custom-domain:api' | 'dns-record' | 'railway-service:api' | 'railway-service:manager' | 'railway-service:worker' | 'railway-service:workday-start' | 'railway-service:workday-report';
+export type TreeseedReconcileUnitType = 'web-ui' | 'api-runtime' | 'manager-runtime' | 'worker-runtime' | 'workday-start-runtime' | 'workday-report-runtime' | 'edge-worker' | 'content-store' | 'queue' | 'database' | 'kv-form-guard' | 'pages-project' | 'custom-domain:web' | 'custom-domain:api' | 'dns-record' | 'railway-service:api' | 'railway-service:manager' | 'railway-service:worker' | 'railway-service:workday-start' | 'railway-service:workday-report';
 export type TreeseedReconcileTarget = {
     kind: 'persistent';
     scope: 'local' | 'staging' | 'prod';

package/dist/reconcile/desired-state.d.ts

@@ -84,6 +84,9 @@ export declare function deriveTreeseedDesiredUnits({ tenantRoot, target, }: {
                 rootDir: string | undefined;
                 publicBaseUrl: string | undefined;
                 localBaseUrl: string | undefined;
+                local: {
+                    runtime: string | undefined;
+                } | undefined;
                 environments: {
                     local: {
                         baseUrl: string | undefined;
@@ -135,6 +138,9 @@ export declare function deriveTreeseedDesiredUnits({ tenantRoot, target, }: {
                 provider: string | undefined;
                 rootDir: string | undefined;
                 publicBaseUrl: string | undefined;
+                local: {
+                    runtime: string | undefined;
+                } | undefined;
                 cloudflare: {
                     workerName: string | undefined;
                 };

package/dist/reconcile/desired-state.js

@@ -78,18 +78,6 @@ function deriveTreeseedDesiredUnits({
     secrets: {},
     metadata: { bootstrapSystem: "web" }
   });
-  const sessionKvId = add({
-    unitId: createTreeseedReconcileUnitId("kv-session", legacyState.kvNamespaces.SESSION.name),
-    unitType: "kv-session",
-    provider: "cloudflare",
-    identity,
-    target,
-    logicalName: legacyState.kvNamespaces.SESSION.name,
-    dependencies: [],
-    spec: { binding: "SESSION", name: legacyState.kvNamespaces.SESSION.name },
-    secrets: {},
-    metadata: { bootstrapSystem: "web" }
-  });
   const contentStoreId = add({
     unitId: createTreeseedReconcileUnitId("content-store", legacyState.content.bucketName ?? deployConfig.slug),
     unitType: "content-store",
@@ -132,7 +120,7 @@ function deriveTreeseedDesiredUnits({
     identity,
     target,
     logicalName: legacyState.workerName,
-    dependencies: [queueId, databaseId, formGuardKvId, sessionKvId, contentStoreId, pagesProjectId],
+    dependencies: [queueId, databaseId, formGuardKvId, contentStoreId, pagesProjectId],
     spec: {
       workerName: legacyState.workerName
     },

package/dist/reconcile/engine.d.ts

@@ -91,6 +91,9 @@ export declare function observeTreeseedUnits({ tenantRoot, target, env, systems,
                 rootDir: string | undefined;
                 publicBaseUrl: string | undefined;
                 localBaseUrl: string | undefined;
+                local: {
+                    runtime: string | undefined;
+                } | undefined;
                 environments: {
                     local: {
                         baseUrl: string | undefined;
@@ -142,6 +145,9 @@ export declare function observeTreeseedUnits({ tenantRoot, target, env, systems,
                 provider: string | undefined;
                 rootDir: string | undefined;
                 publicBaseUrl: string | undefined;
+                local: {
+                    runtime: string | undefined;
+                } | undefined;
                 cloudflare: {
                     workerName: string | undefined;
                 };
@@ -274,6 +280,9 @@ export declare function planTreeseedReconciliation({ tenantRoot, target, env, sy
                 rootDir: string | undefined;
                 publicBaseUrl: string | undefined;
                 localBaseUrl: string | undefined;
+                local: {
+                    runtime: string | undefined;
+                } | undefined;
                 environments: {
                     local: {
                         baseUrl: string | undefined;
@@ -325,6 +334,9 @@ export declare function planTreeseedReconciliation({ tenantRoot, target, env, sy
                 provider: string | undefined;
                 rootDir: string | undefined;
                 publicBaseUrl: string | undefined;
+                local: {
+                    runtime: string | undefined;
+                } | undefined;
                 cloudflare: {
                     workerName: string | undefined;
                 };

package/dist/reconcile/state.js

@@ -118,9 +118,10 @@ function migrateLegacyDeployStateUnits(legacyState, target) {
     };
   }
   for (const [binding, namespace] of Object.entries(legacyState.kvNamespaces ?? {})) {
+    if (binding !== "FORM_GUARD_KV") continue;
     const record = namespace;
     if (!record?.name) continue;
-    const unitType = binding === "FORM_GUARD_KV" ? "kv-form-guard" : "kv-session";
+    const unitType = "kv-form-guard";
     units[`${unitType}:${record.name}`] = {
       unitId: `${unitType}:${record.name}`,
       unitType,

package/dist/reconcile/units.js

@@ -10,7 +10,6 @@ const TRESEED_RECONCILE_UNIT_TYPES = [
   "queue",
   "database",
   "kv-form-guard",
-  "kv-session",
   "pages-project",
   "custom-domain:web",
   "custom-domain:api",

package/dist/scripts/tenant-d1-migrate-local.js

@@ -1,9 +1,12 @@
 import { resolve } from 'node:path';
 import { runLocalD1Migrations } from '../operations/services/d1-migration.js';
-import { ensureGeneratedWranglerConfig } from '../operations/services/deploy.js';
+import { createPersistentDeployTarget, ensureGeneratedWranglerConfig } from '../operations/services/deploy.js';
 const tenantRoot = process.cwd();
 const migrationsRoot = resolve(tenantRoot, 'migrations');
-const { wranglerPath: wranglerConfig } = ensureGeneratedWranglerConfig(tenantRoot);
+const { wranglerPath: wranglerConfig } = ensureGeneratedWranglerConfig(tenantRoot, {
+    target: createPersistentDeployTarget('local'),
+    env: process.env,
+});
 runLocalD1Migrations({
     cwd: tenantRoot,
     wranglerConfig,

package/dist/scripts/tenant-destroy.js

@@ -61,7 +61,9 @@ function printDangerMessage(deployConfig, state, expectedConfirmation) {
     console.error(`  Worker: ${state.workerName ?? deriveCloudflareWorkerName(deployConfig)}`);
     console.error(`  D1: ${state.d1Databases.SITE_DATA_DB.databaseName}`);
     console.error(`  KV FORM_GUARD_KV: ${state.kvNamespaces.FORM_GUARD_KV.name}`);
-    console.error(`  KV SESSION: ${state.kvNamespaces.SESSION.name}`);
+    if (state.kvNamespaces.SESSION?.name) {
+        console.error(`  KV SESSION (deprecated): ${state.kvNamespaces.SESSION.name}`);
+    }
     console.error('  This action is irreversible.');
     console.error(`  To continue, type exactly: ${expectedConfirmation}`);
 }

package/dist/sdk.js

@@ -9,7 +9,7 @@ import { findDispatchCapability } from "./dispatch.js";
 import { RemoteTreeseedClient, RemoteTreeseedDispatchClient } from "./remote.js";
 import { executeSdkOperation } from "./sdk-dispatch.js";
 import { TreeseedOperationsSdk } from "./operations/runtime.js";
-import { WranglerD1Database } from "./wrangler-d1.js";
+import { NodeSqliteD1Database } from "./db/node-sqlite.js";
 function normalizeAgentSpec(entry) {
   if (!entry) {
     return null;
@@ -59,11 +59,7 @@ class AgentSdk {
   }
   static createLocal(options) {
     const repoRoot = resolveSdkRepoRoot(options.repoRoot);
-    const d1 = new WranglerD1Database(
-      options.databaseName ?? "karyon-docs-site-data",
-      repoRoot,
-      options.persistTo
-    );
+    const d1 = new NodeSqliteD1Database(options.persistTo ?? options.databaseName ?? ".treeseed/generated/environments/local/site-data.sqlite");
     return new AgentSdk({
       repoRoot,
       database: new CloudflareD1AgentDatabase(d1),

package/dist/types/cloudflare.d.ts

@@ -48,7 +48,6 @@ export interface CloudflareRuntime {
     env: {
         FORM_GUARD_KV: KvNamespaceLike;
         SITE_DATA_DB: D1DatabaseLike;
-        SESSION: KvNamespaceLike;
         ASSETS?: CloudflareRuntimeAssets;
         [key: string]: unknown;
     };

package/dist/workflow/operations.d.ts

@@ -1,7 +1,7 @@
 import { resolveTreeseedWorkflowState, type TreeseedWorkflowStatusOptions } from '../workflow-state.ts';
 import { type TreeseedWorkflowRunCommand, type TreeseedWorkflowRunJournal } from './runs.ts';
 import { type TreeseedWorkflowMode } from './session.ts';
-import type { TreeseedCloseInput, TreeseedConfigInput, TreeseedDestroyInput, TreeseedExportInput, TreeseedReleaseInput, TreeseedRecoverInput, TreeseedResumeInput, TreeseedSaveInput, TreeseedStageInput, TreeseedSwitchInput, TreeseedTaskBranchMetadata, TreeseedWorkflowContext, TreeseedWorkflowDevInput, TreeseedWorkflowOperationId, TreeseedWorkflowResult, TreeseedWorkflowWorktreeMode } from '../workflow.ts';
+import type { TreeseedCloseInput, TreeseedCiInput, TreeseedConfigInput, TreeseedDestroyInput, TreeseedExportInput, TreeseedReleaseInput, TreeseedRecoverInput, TreeseedResumeInput, TreeseedSaveInput, TreeseedStageInput, TreeseedSwitchInput, TreeseedTaskBranchMetadata, TreeseedWorkflowContext, TreeseedWorkflowDevInput, TreeseedWorkflowOperationId, TreeseedWorkflowResult, TreeseedWorkflowWorktreeMode } from '../workflow.ts';
 type WorkflowWrite = NonNullable<TreeseedWorkflowContext['write']>;
 type WorkflowStatePayload = ReturnType<typeof resolveTreeseedWorkflowState>;
 export type TreeseedWorkflowErrorCode = 'validation_failed' | 'merge_conflict' | 'missing_runtime_auth' | 'deployment_timeout' | 'confirmation_required' | 'unsupported_transport' | 'unsupported_state' | 'workflow_locked' | 'resume_unavailable' | 'workflow_contract_missing' | 'github_workflow_failed' | 'github_auth_unavailable';
@@ -44,6 +44,7 @@ type WorkflowRepoReport = {
     workflowGates: Array<Record<string, unknown>>;
 };
 export declare function workflowStatus(helpers: WorkflowOperationHelpers, input?: TreeseedWorkflowStatusOptions): Promise<TreeseedWorkflowResult<import("../workflow-state.ts").TreeseedWorkflowState>>;
+export declare function workflowCi(helpers: WorkflowOperationHelpers, input?: TreeseedCiInput): Promise<TreeseedWorkflowResult<TreeseedCiResult>>;
 export declare function workflowTasks(helpers: WorkflowOperationHelpers): Promise<TreeseedWorkflowResult<{
     tasks: TreeseedTaskBranchMetadata[];
     workstreams: Array<{

package/dist/workflow/operations.js

@@ -66,7 +66,13 @@ import {
   squashMergeBranchIntoStaging,
   syncBranchWithOrigin
 } from "../operations/services/git-workflow.js";
-import { getGitHubAutomationMode, resolveGitHubRepositorySlug, waitForGitHubWorkflowCompletion } from "../operations/services/github-automation.js";
+import { getGitHubAutomationMode, resolveGitHubRepositorySlug } from "../operations/services/github-automation.js";
+import {
+  formatGitHubActionsGateFailure,
+  inspectGitHubActionsVerification,
+  skippedGitHubActionsGate,
+  waitForGitHubActionsGate
+} from "../operations/services/github-actions-verification.js";
 import { loadCliDeployConfig, packageScriptPath, resolveWranglerBin } from "../operations/services/runtime-tools.js";
 import { runTenantDeployPreflight, runWorkspaceReleasePreflight, runWorkspaceSavePreflight } from "../operations/services/save-deploy-preflight.js";
 import { collectCliPreflight } from "../operations/services/workspace-preflight.js";
@@ -309,32 +315,6 @@ function helpersForCwd(helpers, cwd) {
 function shouldDispatchSwitchToManagedWorktree(root, input, env) {
   return !isManagedWorkflowWorktree(root) && effectiveWorkflowWorktreeMode(input.worktreeMode, env) === "on";
 }
-function skippedWorkflowGate(gate, reason) {
-  return {
-    name: gate.name,
-    repository: gate.repository ?? null,
-    workflow: gate.workflow,
-    branch: gate.branch,
-    headSha: gate.headSha,
-    status: "skipped",
-    reason,
-    conclusion: null,
-    runId: null,
-    url: null
-  };
-}
-function workflowGateFailureMessage(gate, result) {
-  const repository = String(result.repository ?? gate.repository ?? gate.name);
-  const runId = typeof result.runId === "number" || typeof result.runId === "string" ? String(result.runId) : "";
-  const url = typeof result.url === "string" && result.url ? `
-${result.url}` : "";
-  const failedJobs = Array.isArray(result.failedJobs) ? result.failedJobs.map((job) => stringRecord(job)?.name).filter((name) => typeof name === "string" && name.length > 0) : [];
-  const jobLine = failedJobs.length > 0 ? `
-Failed jobs: ${failedJobs.join(", ")}` : "";
-  const command = runId ? `
-Inspect with: gh run view ${runId} --repo ${repository} --log-failed` : "";
-  return `${gate.name} ${gate.workflow} completed with conclusion ${String(result.conclusion ?? "unknown")} in ${repository}.${url}${jobLine}${command}`;
-}
 function assertHostedGitHubWorkflowAuthReady(operation, root) {
   if (getGitHubAutomationMode() === "stub") {
     return null;
@@ -370,7 +350,7 @@ function assertHostedGitHubWorkflowAuthReady(operation, root) {
 }
 async function waitForWorkflowGates(operation, gates, ciMode, options = {}) {
   if (ciMode === "off" || process.env.TREESEED_STAGE_WAIT_MODE === "skip") {
-    return gates.map((gate) => skippedWorkflowGate(gate, ciMode === "off" ? "disabled" : "stubbed"));
+    return gates.map((gate) => skippedGitHubActionsGate(gate, ciMode === "off" ? "disabled" : "stubbed"));
   }
   if (gates.length === 0) {
     return [];
@@ -394,12 +374,7 @@ async function waitForWorkflowGates(operation, gates, ciMode, options = {}) {
         continue;
       }
     }
-    const result = await waitForGitHubWorkflowCompletion(gate.repoPath, {
-      repository: gate.repository,
-      workflow: gate.workflow,
-      headSha: gate.headSha,
-      branch: gate.branch
-    });
+    const result = await waitForGitHubActionsGate(gate);
     const normalized = {
       name: gate.name,
       ...result,
@@ -408,7 +383,7 @@ async function waitForWorkflowGates(operation, gates, ciMode, options = {}) {
       headSha: String(result.headSha ?? gate.headSha)
     };
     if (normalized.status === "completed" && normalized.conclusion !== "success") {
-      workflowError(operation, "github_workflow_failed", workflowGateFailureMessage(gate, normalized), {
+      workflowError(operation, "github_workflow_failed", formatGitHubActionsGateFailure(gate, normalized), {
         details: { gate, workflow: normalized }
       });
     }
@@ -711,6 +686,86 @@ function createStatusResult(cwd, options = {}) {
     includeFinalState: false
   });
 }
+function normalizeCiScope(value) {
+  return value === "root" || value === "packages" ? value : "workspace";
+}
+function normalizeCiLogLines(value) {
+  const parsed = typeof value === "number" ? value : typeof value === "string" ? Number.parseInt(value, 10) : 120;
+  return Number.isFinite(parsed) ? Math.max(20, Math.min(1e3, Math.floor(parsed))) : 120;
+}
+function normalizeCiWorkflows(input) {
+  const raw = input.workflows ?? input.workflow ?? [];
+  return (Array.isArray(raw) ? raw : [raw]).map((workflow) => String(workflow ?? "").trim()).filter(Boolean);
+}
+function defaultCiWorkflows(kind, branch) {
+  if (kind === "package") {
+    return ["verify.yml"];
+  }
+  const workflows = ["verify.yml"];
+  if (branch === STAGING_BRANCH || branch === PRODUCTION_BRANCH) {
+    workflows.push("deploy.yml");
+  }
+  return workflows;
+}
+function githubRepositoryForRepo(repoDir) {
+  try {
+    return resolveGitHubRepositorySlug(repoDir);
+  } catch {
+    return null;
+  }
+}
+function ciTargetForRepo(repo, kind, input, workflowOverrides) {
+  const branch = typeof input.branch === "string" && input.branch.trim() ? input.branch.trim() : repo.branchName;
+  const workflows = workflowOverrides.length > 0 ? workflowOverrides : defaultCiWorkflows(kind, branch);
+  return {
+    name: repo.name,
+    repoPath: repo.path,
+    repository: githubRepositoryForRepo(repo.path),
+    branch,
+    headSha: branch ? headCommit(repo.path) : null,
+    workflows,
+    kind
+  };
+}
+function ciTargetsForSession(session, input) {
+  const scope = normalizeCiScope(input.scope);
+  const workflows = normalizeCiWorkflows(input);
+  const targets = [];
+  if (scope === "workspace" || scope === "root") {
+    targets.push(ciTargetForRepo(session.rootRepo, "root", input, workflows));
+  }
+  if (scope === "workspace" || scope === "packages") {
+    targets.push(...session.packageRepos.map((repo) => ciTargetForRepo(repo, "package", input, workflows)));
+  }
+  return { scope, targets };
+}
+async function createCiResult(cwd, input) {
+  const session = resolveTreeseedWorkflowSession(cwd);
+  const { scope, targets } = ciTargetsForSession(session, input);
+  const strict = input.strict === true;
+  const includeLogs = input.logs === true || input.includeLogs === true;
+  const report = await inspectGitHubActionsVerification(targets, {
+    includeLogs,
+    logLines: normalizeCiLogLines(input.logLines)
+  });
+  const hasFailures = report.failures.length > 0;
+  const hasPending = report.summary.pending > 0;
+  const exitCode = hasFailures || strict && hasPending ? 1 : 0;
+  const payload = {
+    ...report,
+    mode: session.mode,
+    branch: typeof input.branch === "string" && input.branch.trim() ? input.branch.trim() : session.branchName,
+    scope,
+    strict,
+    hasFailures,
+    hasPending,
+    exitCode
+  };
+  return buildWorkflowResult("ci", cwd, payload, {
+    includeFinalState: false,
+    summary: hasFailures ? "Treeseed CI found remote GitHub Actions failures." : strict && hasPending ? "Treeseed CI found pending remote GitHub Actions runs." : "Treeseed CI status is clear."
+  });
+}
 function createTasksResult(cwd) {
   const tenantRoot = cwd;
   const repoDir = gitWorkflowRoot(tenantRoot);
@@ -1642,6 +1697,30 @@ async function workflowStatus(helpers, input = {}) {
     });
   });
 }
+async function workflowCi(helpers, input = {}) {
+  return withContextEnv(helpers.context.env, async () => {
+    try {
+      const resolved = resolveTreeseedWorkflowPaths(helpers.cwd());
+      const branch = currentBranch(repoRoot(resolved.cwd)) || null;
+      const scope = branch === PRODUCTION_BRANCH ? "prod" : branch === STAGING_BRANCH ? "staging" : "local";
+      const env = resolved.tenantRoot ? resolveTreeseedLaunchEnvironment({
+        tenantRoot: resolved.cwd,
+        scope,
+        baseEnv: { ...process.env, ...helpers.context.env ?? {} }
+      }) : { ...process.env, ...helpers.context.env ?? {} };
+      return await withContextEnv(env, () => createCiResult(helpers.cwd(), input));
+    } catch (error) {
+      if (error instanceof TreeseedWorkflowError) {
+        throw error;
+      }
+      const message = error instanceof Error ? error.message : String(error);
+      if (/GH_TOKEN|GITHUB_TOKEN|GitHub authentication|authenticated|Bad credentials|Requires authentication/iu.test(message)) {
+        workflowError("ci", "github_auth_unavailable", message, { exitCode: 2 });
+      }
+      workflowError("ci", "validation_failed", message, { exitCode: 2 });
+    }
+  });
+}
 async function workflowTasks(helpers) {
   return withContextEnv(helpers.context.env, () => createTasksResult(helpers.cwd()));
 }
@@ -3826,6 +3905,7 @@ async function workflowDestroy(helpers, input) {
 }
 export {
   TreeseedWorkflowError,
+  workflowCi,
   workflowClose,
   workflowConfig,
   workflowDestroy,

package/dist/workflow-support.d.ts

@@ -2,6 +2,7 @@ export { applyTreeseedConfigValues, applyTreeseedEnvironmentToProcess, applyTree
 export { exportTreeseedCodebase } from './operations/services/export-runtime.ts';
 export { assertDeploymentInitialized, cleanupDestroyedState, createBranchPreviewDeployTarget, createPersistentDeployTarget, deployTargetLabel, destroyCloudflareResources, ensureGeneratedWranglerConfig, finalizeDeploymentState, loadDeployState, printDeploySummary, printDestroySummary, provisionCloudflareResources, runRemoteD1Migrations, syncCloudflareSecrets, validateDeployPrerequisites, validateDestroyPrerequisites, } from './operations/services/deploy.ts';
 export { assertCleanWorktree, assertFeatureBranch, branchExists, checkoutBranch, createDeprecatedTaskTag, createFeatureBranchFromStaging, currentManagedBranch, deleteLocalBranch, deleteRemoteBranch, ensureLocalBranchTracking, gitWorkflowRoot, listTaskBranches, mergeCurrentBranchIntoStaging, mergeStagingIntoMain, prepareReleaseBranches, PRODUCTION_BRANCH, pushBranch, remoteBranchExists, STAGING_BRANCH, syncBranchWithOrigin, waitForStagingAutomation, } from './operations/services/git-workflow.ts';
+export { dockerIsAvailable, stopKnownMailpitContainers, type TreeseedMailpitContainer, } from './operations/services/mailpit-runtime.ts';
 export { loadCliDeployConfig, packageScriptPath, resolveWranglerBin, } from './operations/services/runtime-tools.ts';
 export { configuredRailwayServices, deployRailwayService, validateRailwayDeployPrerequisites, } from './operations/services/railway-deploy.ts';
 export { ensureRailwayEnvironment, ensureRailwayProject, ensureRailwayService, getRailwayAuthProfile, listRailwayEnvironments, listRailwayProjects, listRailwayServices, listRailwayVariables, railwayGraphqlRequest, resolveRailwayApiToken, resolveRailwayApiUrl, resolveRailwayWorkspace, resolveRailwayWorkspaceContext, upsertRailwayVariables, } from './operations/services/railway-api.ts';

package/dist/workflow-support.js

@@ -80,6 +80,10 @@ import {
   syncBranchWithOrigin,
   waitForStagingAutomation
 } from "./operations/services/git-workflow.js";
+import {
+  dockerIsAvailable,
+  stopKnownMailpitContainers
+} from "./operations/services/mailpit-runtime.js";
 import {
   loadCliDeployConfig,
   packageScriptPath,
@@ -206,6 +210,7 @@ export {
   destroyCloudflareResources,
   destroyTreeseedTargetUnits,
   discoverWorkspaceLinks,
+  dockerIsAvailable,
   ensureGeneratedWranglerConfig,
   ensureLocalBranchTracking,
   ensureLocalWorkspaceLinks,
@@ -283,6 +288,7 @@ export {
   runWorkspaceReleasePreflight,
   runWorkspaceSavePreflight,
   setTreeseedRemoteSession,
+  stopKnownMailpitContainers,
   syncBranchWithOrigin,
   syncCloudflareSecrets,
   unlinkLocalWorkspaceLinks,

package/dist/workflow.d.ts

@@ -1,7 +1,8 @@
 import { resolveTreeseedWorkflowState, type TreeseedWorkflowStatusOptions } from './workflow-state.ts';
 import { listTaskBranches } from './operations/services/git-workflow.ts';
+import type { GitHubActionsVerificationReport } from './operations/services/github-actions-verification.ts';
 import { TreeseedWorkflowError, type TreeseedWorkflowErrorCode } from './workflow/operations.ts';
-export type TreeseedWorkflowOperationId = 'status' | 'config' | 'tasks' | 'switch' | 'dev' | 'save' | 'close' | 'stage' | 'release' | 'resume' | 'recover' | 'destroy' | 'export';
+export type TreeseedWorkflowOperationId = 'status' | 'ci' | 'config' | 'tasks' | 'switch' | 'dev' | 'save' | 'close' | 'stage' | 'release' | 'resume' | 'recover' | 'destroy' | 'export';
 export type TreeseedWorkflowNextStep = {
     operation: string;
     reason?: string;
@@ -112,6 +113,26 @@ export type TreeseedSaveInput = {
     plan?: boolean;
     dryRun?: boolean;
 };
+export type TreeseedCiInput = {
+    failed?: boolean;
+    logs?: boolean;
+    includeLogs?: boolean;
+    logLines?: number | string;
+    scope?: 'workspace' | 'root' | 'packages';
+    workflow?: string | string[];
+    workflows?: string | string[];
+    branch?: string;
+    strict?: boolean;
+};
+export type TreeseedCiResult = GitHubActionsVerificationReport & {
+    mode: 'root-only' | 'recursive-workspace';
+    branch: string | null;
+    scope: 'workspace' | 'root' | 'packages';
+    strict: boolean;
+    hasFailures: boolean;
+    hasPending: boolean;
+    exitCode: number;
+};
 export type TreeseedCloseInput = {
     message: string;
     deletePreview?: boolean;
@@ -227,11 +248,12 @@ export declare class TreeseedWorkflowSdk {
     private readonly context;
     constructor(context?: TreeseedWorkflowContext);
     private helpers;
-    execute(operation: TreeseedWorkflowOperationId, input?: Record<string, unknown>): Promise<TreeseedWorkflowResult<import("./workflow-state.ts").TreeseedWorkflowState> | TreeseedWorkflowResult<{
+    execute(operation: TreeseedWorkflowOperationId, input?: Record<string, unknown>): Promise<TreeseedWorkflowResult<import("./workflow-state.ts").TreeseedWorkflowState> | TreeseedWorkflowResult<TreeseedCiResult> | TreeseedWorkflowResult<{
         tasks: TreeseedTaskBranchMetadata[];
         workstreams: TreeseedWorkflowWorkstreamSummary[];
     }> | TreeseedWorkflowResult<Record<string, unknown>>>;
     status(input?: TreeseedWorkflowStatusOptions): Promise<TreeseedWorkflowResult<ReturnType<typeof resolveTreeseedWorkflowState>>>;
+    ci(input?: TreeseedCiInput): Promise<TreeseedWorkflowResult<TreeseedCiResult>>;
     tasks(): Promise<TreeseedWorkflowResult<{
         tasks: TreeseedTaskBranchMetadata[];
         workstreams: TreeseedWorkflowWorkstreamSummary[];

package/dist/workflow.js

@@ -2,6 +2,7 @@ import { resolveTreeseedWorkflowPaths } from "./workflow/policy.js";
 import {
   TreeseedWorkflowError,
   workflowClose,
+  workflowCi,
   workflowConfig,
   workflowDestroy,
   workflowDev,
@@ -42,6 +43,8 @@ class TreeseedWorkflowSdk {
     switch (operation) {
       case "status":
         return this.status(input);
+      case "ci":
+        return this.ci(input);
       case "tasks":
         return this.tasks();
       case "config":
@@ -73,6 +76,9 @@ class TreeseedWorkflowSdk {
   async status(input = {}) {
     return workflowStatus(this.helpers(), input);
   }
+  async ci(input = {}) {
+    return workflowCi(this.helpers(), input);
+  }
   async tasks() {
     return workflowTasks(this.helpers());
   }