Expose portable Platform verification and worksets

[adrianwebb]

Outcome

Publishes trsd platform verify and safe plan/apply workset commands backed by SDK 0.13.0-rc.61, plus a repository-versioned composite Action for installing one exact CLI release.

Work authority

• Work item / Issue: Expose Platform verify, workset, and custom-project commands from published SDK contracts #85
• Proposal / decision: User-approved TreeSeed Platform Streamlining and Production-Release Plan
• Assignment / checkpoint: CLI delivery item 3 in Epic: streamline Platform into the production configuration and documentation plane platform#280
• Actor: OpenAI Codex
• Human authority: Adrian Webb
• Agent / capacity provider: OpenAI Codex / local authorized development environment
• Exact base ref: staging at 75315cb
• Exact head ref: codex/platform-commands-85 at d1dcd17

Contributor mode (select one):

• Human-authored
• Agent-assisted under human authority
• Agent-authored under human authority

Plan

Consume the exact published SDK Platform export, expose API-independent verification and exact-ref workset planning/application, regenerate the canonical command artifacts, and publish a pinned setup Action. Project-create planning is visible but apply remains intentionally fail-closed until its API reconciliation operation is published.

Changes and commits

• d1dcd17 updates CLI to 0.13.0-rc.39 and SDK 0.13.0-rc.61.
• Adds local Platform handlers with explicit --plan versus --apply --yes behavior.
• Adds clean-clone verification and clone/apply/replay-noop tests using an isolated local remote.
• Adds .github/actions/setup-cli/action.yml, requiring an exact semantic version.
• Regenerates command reference, completion, and command-tree artifacts.

Verification

• npm run verify:direct
• 70 tests passed, including packed-install executable smoke tests.
• File-length and file-architecture policies passed.
• CLI artifact @treeseed/cli@0.13.0-rc.39 packed successfully.
• Workset acceptance proves plan=clone, apply=clone, and unchanged replay=noop.

Risk and rollback

The workset handler cannot reset or delete a checkout and requires explicit apply confirmation. Project-create mutation remains blocked. Revert d1dcd17 to remove the additive command surface and restore SDK rc60.

Completion summary

The published operator surface can now verify and materialize Platform from a seed before any local API exists. API-backed project creation remains tracked in CLI #85 and the owner API/template issues.

Submission checklist

• The change is bounded to the stated work item and target repository.
• Exact base and head refs are recorded and the branch is ready for review.
• Verification and compatibility evidence are recorded above.
• No plaintext secrets, credentials, machine state, or unrelated residue are included.
• Plan, status, commits, and completion summary form a complete durable record.
• Rollback or recovery steps are documented and executable.