@aifabrix/builder 2.55.2 → 2.57.0

package/lib/schema/infrastructure-schema.json

@@ -1,587 +1,1668 @@
 {
   "$schema": "http://json-schema.org/draft-07/schema#",
   "$id": "https://raw.githubusercontent.com/esystemsdev/aifabrix-builder/refs/heads/main/lib/schema/infrastructure-schema.json",
-  "title": "AI Fabrix Infrastructure Configuration Schema",
-  "description": "Infrastructure-level configuration schema for AI Fabrix deployment",
+  "title": "AI Fabrix Installation Infrastructure Manifest",
+  "description": "Committed, non-secret environment-infra.json for an installation workspace under infrastructure/<resource-group>/. Secrets appear only as valueFromEnv references.",
   "metadata": {
     "key": "infrastructure-schema",
-    "name": "Infrastructure Configuration Schema",
-    "description": "JSON schema for validating AI Fabrix infrastructure configuration files",
-    "version": "1.0.0",
+    "name": "Installation Infrastructure Manifest Schema",
+    "description": "JSON schema for infrastructure/<resource-group>/environment-infra.json",
+    "version": "2.0.0",
     "type": "schema",
     "category": "infrastructure",
     "author": "AI Fabrix Team",
     "createdAt": "2024-01-01T00:00:00Z",
-    "updatedAt": "2024-01-01T00:00:00Z",
+    "updatedAt": "2026-09-16T00:00:00Z",
     "compatibility": {
-      "minVersion": "1.0.0",
+      "minVersion": "2.0.0",
       "maxVersion": "2.0.0",
       "deprecated": false
     },
-    "tags": ["schema", "infrastructure", "validation", "configuration"],
+    "tags": [
+      "schema",
+      "infrastructure",
+      "installation",
+      "marketplace"
+    ],
     "dependencies": [],
     "changelog": [
+      {
+        "version": "2.0.0",
+        "date": "2026-09-16T00:00:00Z",
+        "breaking": true,
+        "changes": [
+          "Replaced the environment-configuration shape with the installation workspace manifest (environment-infra.json).",
+          "Removed smtp without replacement.",
+          "Covers every Marketplace template parameter and output with source/description metadata; secure parameters are valueFromEnv references.",
+          "Added vendor, workspace subscription/tenant, acrName, default-off allowMyIp, licenseEdition, onboardingMode, tenant activation, deployment and application variable catalog sections."
+        ]
+      },
       {
         "version": "1.0.0",
         "date": "2024-01-01T00:00:00Z",
+        "breaking": false,
         "changes": [
-          "Initial infrastructure configuration schema",
-          "Added infrastructure resource validation",
-          "Added network configuration validation",
-          "Added deployment configuration validation"
-        ],
-        "breaking": false
+          "Initial infrastructure configuration schema"
+        ]
       }
     ]
   },
-  "type": "object",
-  "required": [
-    "key",
-    "environment",
-    "preset",
-    "serviceName",
-    "location",
-    "deploymentType",
-    "deployment",
-    "subscriptionId",
-    "tenantId"
-  ],
-  "properties": {
-    "key": {
-      "type": "string",
-      "description": "Unique infrastructure identifier (cannot be changed after creation)",
-      "pattern": "^[a-z0-9-]+$",
-      "minLength": 3,
-      "maxLength": 40
-    },
-    "environment": {
-      "type": "string",
-      "description": "Environment",
-      "enum": ["miso", "dev", "tst", "pro"]
-    },
-    "preset": {
-      "type": "string",
-      "description": "Resource preset - determines service configurations and sizing",
-      "enum": ["evaluation", "s", "m", "l", "xl"],
-      "default": "s"
-    },
-    "serviceName": {
-      "type": "string",
-      "description": "Service name",
-      "pattern": "^[a-z0-9-]{3,40}$"
-    },
-    "location": {
-      "type": "string",
-      "description": "Azure region"
+  "definitions": {
+    "entry": {
+      "type": "object",
+      "required": [
+        "value",
+        "source",
+        "description"
+      ],
+      "additionalProperties": false,
+      "properties": {
+        "value": {},
+        "source": {
+          "type": "string",
+          "minLength": 1
+        },
+        "description": {
+          "type": "string",
+          "minLength": 1
+        },
+        "required": {
+          "type": "boolean"
+        }
+      }
     },
-    "subscriptionId": {
-      "type": "string",
-      "description": "Azure subscription ID",
-      "pattern": "^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$"
+    "envReference": {
+      "type": "object",
+      "required": [
+        "valueFromEnv",
+        "source",
+        "description"
+      ],
+      "additionalProperties": false,
+      "properties": {
+        "valueFromEnv": {
+          "type": "string",
+          "pattern": "^[A-Z_][A-Z0-9_]*$"
+        },
+        "source": {
+          "const": "secretEnv"
+        },
+        "required": {
+          "type": "boolean"
+        },
+        "description": {
+          "type": "string",
+          "minLength": 1
+        }
+      }
     },
-    "tenantId": {
-      "type": "string",
-      "description": "Azure tenant ID",
-      "pattern": "^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$"
+    "output": {
+      "type": "object",
+      "required": [
+        "value",
+        "description"
+      ],
+      "additionalProperties": false,
+      "properties": {
+        "value": {
+          "type": [
+            "string",
+            "null"
+          ]
+        },
+        "description": {
+          "type": "string"
+        }
+      }
     },
-    "networkAddressSpace": {
-      "type": "string",
-      "description": "Network address space",
-      "pattern": "^(\\d{1,3}\\.){3}\\d{1,3}(\\/\\d{1,2})?$"
+    "variable": {
+      "type": "object",
+      "required": [
+        "valueFromEnv",
+        "requiredBy",
+        "source",
+        "description"
+      ],
+      "additionalProperties": false,
+      "properties": {
+        "valueFromEnv": {
+          "type": "string",
+          "pattern": "^[A-Z_][A-Z0-9_]*$"
+        },
+        "requiredBy": {
+          "type": "array",
+          "uniqueItems": true,
+          "items": {
+            "type": "string",
+            "pattern": "^[a-z0-9-]+$"
+          }
+        },
+        "environments": {
+          "type": "array",
+          "uniqueItems": true,
+          "items": {
+            "enum": [
+              "dev",
+              "tst",
+              "pro"
+            ]
+          }
+        },
+        "source": {
+          "type": "string"
+        },
+        "description": {
+          "type": "string"
+        },
+        "resolution": {
+          "enum": [
+            "resolved",
+            "missing"
+          ]
+        }
+      }
     },
-    "customDomain": {
+    "generated": {
       "type": "object",
-      "description": "Custom domain configuration",
+      "additionalProperties": false,
       "properties": {
-        "enabled": {
-          "type": "boolean"
+        "builderVersion": {
+          "type": "string"
         },
-        "name": {
+        "templateContentVersion": {
+          "type": [
+            "string",
+            "null"
+          ]
+        },
+        "templateSha256": {
+          "type": "string",
+          "pattern": "^[0-9a-f]{64}$"
+        },
+        "generatedAt": {
           "type": "string",
-          "description": "Domain name"
+          "format": "date-time"
+        },
+        "files": {
+          "type": "object",
+          "additionalProperties": {
+            "type": "string",
+            "pattern": "^[0-9a-f]{64}$"
+          }
         }
-      },
-      "required": ["enabled"]
+      }
+    }
+  },
+  "type": "object",
+  "required": [
+    "schemaVersion",
+    "vendor",
+    "resourceGroup",
+    "installId",
+    "subscriptionId",
+    "tenantId",
+    "variables",
+    "generated"
+  ],
+  "properties": {
+    "schemaVersion": {
+      "const": "2.0.0"
     },
-    "frontDoor": {
+    "vendor": {
       "type": "object",
-      "description": "Front Door configuration",
+      "required": [
+        "value",
+        "source",
+        "description"
+      ],
+      "additionalProperties": false,
       "properties": {
-        "tier": {
+        "value": {
+          "enum": [
+            "AZURE",
+            "DOCKER"
+          ]
+        },
+        "source": {
           "type": "string",
-          "enum": ["Standard", "Premium"]
+          "minLength": 1
+        },
+        "description": {
+          "type": "string",
+          "minLength": 1
+        },
+        "required": {
+          "type": "boolean"
         }
-      },
-      "additionalProperties": false
+      }
     },
-    "networking": {
+    "resourceGroup": {
       "type": "object",
-      "description": "Networking configuration",
+      "required": [
+        "value",
+        "source",
+        "description"
+      ],
+      "additionalProperties": false,
       "properties": {
-        "enablePrivateNetworking": {
-          "type": "boolean"
+        "value": {
+          "type": "string",
+          "pattern": "^[a-z][a-z0-9-]{2,39}$"
+        },
+        "source": {
+          "type": "string",
+          "minLength": 1
         },
-        "enableAzureDns": {
+        "description": {
+          "type": "string",
+          "minLength": 1
+        },
+        "required": {
           "type": "boolean"
         }
       }
     },
-    "deployment": {
+    "installId": {
       "type": "object",
-      "description": "Deployment configuration",
-      "required": ["mode"],
+      "required": [
+        "value",
+        "source",
+        "description"
+      ],
+      "additionalProperties": false,
       "properties": {
-        "skipValidation": {
-          "type": "boolean"
+        "value": {
+          "type": "string",
+          "pattern": "^[a-z][a-z0-9-]{2,39}$"
         },
-        "dryRun": {
-          "type": "boolean"
+        "source": {
+          "type": "string",
+          "minLength": 1
         },
-        "mode": {
+        "description": {
           "type": "string",
-          "enum": ["marketplace", "infrastructure"]
+          "minLength": 1
+        },
+        "required": {
+          "type": "boolean"
         }
       }
     },
-    "smtp": {
+    "subscriptionId": {
       "type": "object",
-      "description": "SMTP configuration",
+      "required": [
+        "value",
+        "source",
+        "description"
+      ],
+      "additionalProperties": false,
       "properties": {
-        "enabled": {
-          "type": "boolean"
+        "value": {
+          "type": "string",
+          "pattern": "^$|^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$"
         },
-        "host": {
-          "type": "string"
+        "source": {
+          "type": "string",
+          "minLength": 1
         },
-        "port": {
-          "type": "integer",
-          "minimum": 1,
-          "maximum": 65535
+        "description": {
+          "type": "string",
+          "minLength": 1
         },
-        "user": {
-          "type": "string"
+        "required": {
+          "type": "boolean"
+        }
+      }
+    },
+    "tenantId": {
+      "type": "object",
+      "required": [
+        "value",
+        "source",
+        "description"
+      ],
+      "additionalProperties": false,
+      "properties": {
+        "value": {
+          "type": "string",
+          "pattern": "^$|^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$"
+        },
+        "source": {
+          "type": "string",
+          "minLength": 1
         },
-        "senderEmail": {
+        "description": {
           "type": "string",
-          "format": "email"
+          "minLength": 1
         },
-        "useKeyVault": {
+        "required": {
           "type": "boolean"
         }
       }
     },
-    "containerRegistry": {
+    "acrName": {
       "type": "object",
-      "description": "Container Registry configuration",
+      "required": [
+        "value",
+        "source",
+        "description"
+      ],
+      "additionalProperties": false,
       "properties": {
-        "enabled": {
+        "value": {
+          "type": "string",
+          "pattern": "^$|^[a-zA-Z0-9]{5,50}$"
+        },
+        "source": {
+          "type": "string",
+          "minLength": 1
+        },
+        "description": {
+          "type": "string",
+          "minLength": 1
+        },
+        "required": {
           "type": "boolean"
         }
-      },
-      "additionalProperties": false
+      }
     },
-    "ai": {
+    "allowMyIp": {
       "type": "object",
-      "description": "AI services configuration",
+      "required": [
+        "value",
+        "source",
+        "description"
+      ],
+      "additionalProperties": false,
       "properties": {
-        "enabled": {
+        "value": {
           "type": "boolean"
         },
-        "sku": {
+        "source": {
           "type": "string",
-          "enum": ["S0", "S1", "S2", "S3"]
+          "minLength": 1
         },
-        "kind": {
+        "description": {
           "type": "string",
-          "enum": ["OpenAI", "CognitiveServices"]
+          "minLength": 1
+        },
+        "required": {
+          "type": "boolean"
+        },
+        "resolvedCidr": {
+          "type": [
+            "string",
+            "null"
+          ],
+          "pattern": "^(\\d{1,3}\\.){3}\\d{1,3}/32$"
+        },
+        "resolvedAt": {
+          "type": [
+            "string",
+            "null"
+          ],
+          "format": "date-time"
+        },
+        "resolver": {
+          "type": [
+            "string",
+            "null"
+          ]
         }
-      },
-      "additionalProperties": false
+      }
     },
-    "storage": {
+    "preset": {
       "type": "object",
-      "description": "Storage configuration",
+      "required": [
+        "value",
+        "source",
+        "description"
+      ],
+      "additionalProperties": false,
       "properties": {
-        "postgres": {
-          "type": "string",
-          "description": "PostgreSQL storage size (e.g., 128GB, 1TB)",
-          "pattern": "^\\d+(GB|TB)$"
+        "value": {
+          "enum": [
+            "s",
+            "m",
+            "l",
+            "xl"
+          ]
         },
-        "blob": {
+        "source": {
           "type": "string",
-          "description": "Blob storage size (e.g., 128GB, 1TB)",
-          "pattern": "^\\d+(GB|TB)$"
+          "minLength": 1
         },
-        "fileShare": {
+        "description": {
           "type": "string",
-          "description": "File share storage size (e.g., 64GB, 512GB)",
-          "pattern": "^\\d+(GB|TB)$"
+          "minLength": 1
+        },
+        "required": {
+          "type": "boolean"
         }
-      },
-      "additionalProperties": false
+      }
     },
-    "serviceMapping": {
+    "parameters": {
       "type": "object",
-      "description": "Service mapping configuration based on preset and environment",
+      "additionalProperties": false,
+      "required": [
+        "infrastructureNameOverride",
+        "location",
+        "tags",
+        "enableAppInsights",
+        "enableAzureOpenAI",
+        "enablePartnerCenterAttribution",
+        "enablePostgresPublicAccess",
+        "allowedIPs",
+        "adminPassword",
+        "deploymentEnvironment",
+        "keycloakVerifyAudience",
+        "encryptionKey",
+        "acrLoginServer",
+        "acrAdminUsername",
+        "acrAdminPassword",
+        "acrResourceId",
+        "deployRoleAssignments",
+        "moriBaseUrl",
+        "moriCallbackApiKey",
+        "entraCallbackStateSecret",
+        "entraIdClientId",
+        "entraIdClientSecret",
+        "entraIdTenantId",
+        "licenseEdition",
+        "onboardingMode",
+        "misoImageTag",
+        "keycloakImageTag"
+      ],
       "properties": {
-        "appServicePlan": {
+        "infrastructureNameOverride": {
           "type": "object",
+          "required": [
+            "value",
+            "source",
+            "description"
+          ],
+          "additionalProperties": false,
           "properties": {
-            "sku": { "type": "string" },
-            "instances": {
-              "type": "object",
-              "properties": {
-                "min": { "type": "integer" },
-                "max": { "type": "integer" }
-              }
+            "value": {
+              "type": [
+                "string",
+                "boolean",
+                "number",
+                "object",
+                "array"
+              ]
+            },
+            "source": {
+              "type": "string",
+              "minLength": 1
+            },
+            "description": {
+              "type": "string",
+              "minLength": 1
+            },
+            "required": {
+              "type": "boolean"
             }
           }
         },
-        "redis": {
+        "location": {
           "type": "object",
+          "required": [
+            "value",
+            "source",
+            "description"
+          ],
+          "additionalProperties": false,
           "properties": {
-            "enabled": { "type": "boolean" },
-            "sku": { "type": "string" }
+            "value": {
+              "type": [
+                "string",
+                "boolean",
+                "number",
+                "object",
+                "array"
+              ]
+            },
+            "source": {
+              "type": "string",
+              "minLength": 1
+            },
+            "description": {
+              "type": "string",
+              "minLength": 1
+            },
+            "required": {
+              "type": "boolean"
+            }
           }
         },
-        "postgres": {
+        "tags": {
           "type": "object",
+          "required": [
+            "value",
+            "source",
+            "description"
+          ],
+          "additionalProperties": false,
           "properties": {
-            "sku": { "type": "string" },
-            "storage": { "type": "string" }
+            "value": {
+              "type": [
+                "string",
+                "boolean",
+                "number",
+                "object",
+                "array"
+              ]
+            },
+            "source": {
+              "type": "string",
+              "minLength": 1
+            },
+            "description": {
+              "type": "string",
+              "minLength": 1
+            },
+            "required": {
+              "type": "boolean"
+            }
           }
         },
-        "storage": {
+        "enableAppInsights": {
           "type": "object",
+          "required": [
+            "value",
+            "source",
+            "description"
+          ],
+          "additionalProperties": false,
           "properties": {
-            "size": { "type": "string" }
+            "value": {
+              "type": [
+                "string",
+                "boolean",
+                "number",
+                "object",
+                "array"
+              ]
+            },
+            "source": {
+              "type": "string",
+              "minLength": 1
+            },
+            "description": {
+              "type": "string",
+              "minLength": 1
+            },
+            "required": {
+              "type": "boolean"
+            }
           }
         },
-        "frontDoor": {
+        "enableAzureOpenAI": {
           "type": "object",
+          "required": [
+            "value",
+            "source",
+            "description"
+          ],
+          "additionalProperties": false,
           "properties": {
-            "enabled": { "type": "boolean" },
-            "tier": { "type": "string" }
+            "value": {
+              "type": [
+                "string",
+                "boolean",
+                "number",
+                "object",
+                "array"
+              ]
+            },
+            "source": {
+              "type": "string",
+              "minLength": 1
+            },
+            "description": {
+              "type": "string",
+              "minLength": 1
+            },
+            "required": {
+              "type": "boolean"
+            }
           }
         },
-        "monitoring": {
+        "enablePartnerCenterAttribution": {
           "type": "object",
+          "required": [
+            "value",
+            "source",
+            "description"
+          ],
+          "additionalProperties": false,
           "properties": {
-            "applicationInsights": { "type": "boolean" },
-            "logAnalytics": { "type": "boolean" },
-            "alerts": { "type": "boolean" },
-            "dashboards": { "type": "boolean" }
+            "value": {
+              "type": [
+                "string",
+                "boolean",
+                "number",
+                "object",
+                "array"
+              ]
+            },
+            "source": {
+              "type": "string",
+              "minLength": 1
+            },
+            "description": {
+              "type": "string",
+              "minLength": 1
+            },
+            "required": {
+              "type": "boolean"
+            }
           }
         },
-        "networking": {
+        "enablePostgresPublicAccess": {
           "type": "object",
+          "required": [
+            "value",
+            "source",
+            "description"
+          ],
+          "additionalProperties": false,
           "properties": {
-            "enablePrivateNetworking": { "type": "boolean" },
-            "enableAzureDns": { "type": "boolean" },
-            "privateEndpoints": { "type": "boolean" }
+            "value": {
+              "type": [
+                "boolean",
+                "array"
+              ],
+              "items": {
+                "type": "string",
+                "pattern": "^[0-9./*-]+$"
+              }
+            },
+            "source": {
+              "type": "string",
+              "minLength": 1
+            },
+            "description": {
+              "type": "string",
+              "minLength": 1
+            },
+            "required": {
+              "type": "boolean"
+            }
           }
-        }
-      }
-    },
-    "modules": {
-      "type": "object",
-      "description": "Infrastructure modules configuration",
-      "properties": {
-        "core": {
+        },
+        "allowedIPs": {
           "type": "object",
+          "required": [
+            "value",
+            "source",
+            "description"
+          ],
+          "additionalProperties": false,
           "properties": {
-            "resourceGroup": {
-              "type": "object",
-              "properties": {
-                "enabled": { "type": "boolean" },
-                "required": { "type": "boolean" },
-                "description": { "type": "string" }
+            "value": {
+              "type": [
+                "boolean",
+                "array"
+              ],
+              "items": {
+                "type": "string",
+                "pattern": "^[0-9./*-]+$"
               }
             },
-            "network": {
-              "type": "object",
-              "properties": {
-                "enabled": { "type": "boolean" },
-                "required": { "type": "boolean" },
-                "description": { "type": "string" }
-              }
+            "source": {
+              "type": "string",
+              "minLength": 1
             },
-            "keyVault": {
-              "type": "object",
-              "properties": {
-                "enabled": { "type": "boolean" },
-                "required": { "type": "boolean" },
-                "description": { "type": "string" }
-              }
+            "description": {
+              "type": "string",
+              "minLength": 1
             },
-            "managedIdentity": {
-              "type": "object",
-              "properties": {
-                "enabled": { "type": "boolean" },
-                "required": { "type": "boolean" },
-                "description": { "type": "string" }
-              }
+            "required": {
+              "type": "boolean"
+            }
+          }
+        },
+        "adminPassword": {
+          "$ref": "#/definitions/envReference"
+        },
+        "deploymentEnvironment": {
+          "type": "object",
+          "required": [
+            "value",
+            "source",
+            "description"
+          ],
+          "additionalProperties": false,
+          "properties": {
+            "value": {
+              "type": [
+                "string",
+                "boolean",
+                "number",
+                "object",
+                "array"
+              ]
             },
-            "appServicePlan": {
-              "type": "object",
-              "properties": {
-                "enabled": { "type": "boolean" },
-                "required": { "type": "boolean" },
-                "description": { "type": "string" }
-              }
+            "source": {
+              "type": "string",
+              "minLength": 1
+            },
+            "description": {
+              "type": "string",
+              "minLength": 1
+            },
+            "required": {
+              "type": "boolean"
             }
           }
         },
-        "storage": {
+        "keycloakVerifyAudience": {
           "type": "object",
+          "required": [
+            "value",
+            "source",
+            "description"
+          ],
+          "additionalProperties": false,
           "properties": {
-            "storageAccount": {
-              "type": "object",
-              "properties": {
-                "enabled": { "type": "boolean" },
-                "required": { "type": "boolean" },
-                "description": { "type": "string" },
-                "default": { "type": "boolean" }
-              }
+            "value": {
+              "type": [
+                "string",
+                "boolean",
+                "number",
+                "object",
+                "array"
+              ]
             },
-            "blobStorage": {
-              "type": "object",
-              "properties": {
-                "enabled": { "type": "boolean" },
-                "required": { "type": "boolean" },
-                "description": { "type": "string" },
-                "default": { "type": "boolean" },
-                "dependsOn": {
-                  "type": "array",
-                  "items": { "type": "string" }
-                }
-              }
+            "source": {
+              "type": "string",
+              "minLength": 1
             },
-            "fileShare": {
-              "type": "object",
-              "properties": {
-                "enabled": { "type": "boolean" },
-                "required": { "type": "boolean" },
-                "description": { "type": "string" },
-                "default": { "type": "boolean" },
-                "dependsOn": {
-                  "type": "array",
-                  "items": { "type": "string" }
-                }
-              }
+            "description": {
+              "type": "string",
+              "minLength": 1
+            },
+            "required": {
+              "type": "boolean"
             }
           }
         },
-        "database": {
+        "encryptionKey": {
+          "$ref": "#/definitions/envReference"
+        },
+        "acrLoginServer": {
           "type": "object",
+          "required": [
+            "value",
+            "source",
+            "description"
+          ],
+          "additionalProperties": false,
           "properties": {
-            "postgresServer": {
-              "type": "object",
-              "properties": {
-                "enabled": { "type": "boolean" },
-                "required": { "type": "boolean" },
-                "description": { "type": "string" },
-                "default": { "type": "boolean" }
-              }
+            "value": {
+              "type": [
+                "string",
+                "null"
+              ]
             },
-            "postgresDatabases": {
-              "type": "object",
-              "properties": {
-                "enabled": { "type": "boolean" },
-                "required": { "type": "boolean" },
-                "description": { "type": "string" },
-                "default": { "type": "boolean" },
-                "dependsOn": {
-                  "type": "array",
-                  "items": { "type": "string" }
-                }
-              }
+            "source": {
+              "type": "string",
+              "minLength": 1
             },
-            "postgresAccess": {
-              "type": "object",
-              "properties": {
-                "enabled": { "type": "boolean" },
-                "required": { "type": "boolean" },
-                "description": { "type": "string" },
-                "default": { "type": "boolean" },
-                "dependsOn": {
-                  "type": "array",
-                  "items": { "type": "string" }
-                }
-              }
+            "description": {
+              "type": "string",
+              "minLength": 1
+            },
+            "required": {
+              "type": "boolean"
             }
           }
         },
-        "cache": {
+        "acrAdminUsername": {
           "type": "object",
+          "required": [
+            "value",
+            "source",
+            "description"
+          ],
+          "additionalProperties": false,
           "properties": {
-            "redis": {
-              "type": "object",
-              "properties": {
-                "enabled": { "type": "boolean" },
-                "required": { "type": "boolean" },
-                "description": { "type": "string" },
-                "default": { "type": "boolean" }
-              }
+            "value": {
+              "const": ""
+            },
+            "source": {
+              "type": "string",
+              "minLength": 1
+            },
+            "description": {
+              "type": "string",
+              "minLength": 1
+            },
+            "required": {
+              "type": "boolean"
             }
           }
         },
-        "networking": {
+        "acrAdminPassword": {
           "type": "object",
+          "required": [
+            "value",
+            "source",
+            "description"
+          ],
+          "additionalProperties": false,
           "properties": {
-            "frontDoor": {
-              "type": "object",
-              "properties": {
-                "enabled": { "type": "boolean" },
-                "required": { "type": "boolean" },
-                "description": { "type": "string" },
-                "default": { "type": "boolean" }
-              }
+            "value": {
+              "const": ""
             },
-            "customDomain": {
-              "type": "object",
-              "properties": {
-                "enabled": { "type": "boolean" },
-                "required": { "type": "boolean" },
-                "description": { "type": "string" },
-                "default": { "type": "boolean" },
-                "standalone": { "type": "boolean" },
-                "directWebAppBinding": { "type": "boolean" }
-              }
+            "source": {
+              "type": "string",
+              "minLength": 1
             },
-            "privateEndpoints": {
-              "type": "object",
-              "properties": {
-                "enabled": { "type": "boolean" },
-                "required": { "type": "boolean" },
-                "description": { "type": "string" },
-                "default": { "type": "boolean" }
-              }
+            "description": {
+              "type": "string",
+              "minLength": 1
             },
-            "dnsZones": {
-              "type": "object",
-              "properties": {
-                "enabled": { "type": "boolean" },
-                "required": { "type": "boolean" },
-                "description": { "type": "string" },
-                "default": { "type": "boolean" },
-                "dependsOn": {
-                  "type": "array",
-                  "items": { "type": "string" }
-                }
-              }
+            "required": {
+              "type": "boolean"
             }
           }
         },
-        "monitoring": {
+        "acrResourceId": {
           "type": "object",
+          "required": [
+            "value",
+            "source",
+            "description"
+          ],
+          "additionalProperties": false,
           "properties": {
-            "applicationInsights": {
-              "type": "object",
-              "properties": {
-                "enabled": { "type": "boolean" },
-                "required": { "type": "boolean" },
-                "description": { "type": "string" },
-                "default": { "type": "boolean" }
-              }
+            "value": {
+              "type": [
+                "string",
+                "null"
+              ]
             },
-            "logAnalytics": {
-              "type": "object",
-              "properties": {
-                "enabled": { "type": "boolean" },
-                "required": { "type": "boolean" },
-                "description": { "type": "string" },
-                "default": { "type": "boolean" }
-              }
+            "source": {
+              "type": "string",
+              "minLength": 1
             },
-            "alerts": {
-              "type": "object",
-              "properties": {
-                "enabled": { "type": "boolean" },
-                "required": { "type": "boolean" },
-                "description": { "type": "string" },
-                "default": { "type": "boolean" },
-                "dependsOn": {
-                  "type": "array",
-                  "items": { "type": "string" }
-                }
-              }
+            "description": {
+              "type": "string",
+              "minLength": 1
             },
-            "dashboards": {
-              "type": "object",
-              "properties": {
-                "enabled": { "type": "boolean" },
-                "required": { "type": "boolean" },
-                "description": { "type": "string" },
-                "default": { "type": "boolean" },
-                "dependsOn": {
-                  "type": "array",
-                  "items": { "type": "string" }
-                }
-              }
+            "required": {
+              "type": "boolean"
             }
           }
         },
-        "containerRegistry": {
+        "deployRoleAssignments": {
           "type": "object",
+          "required": [
+            "value",
+            "source",
+            "description"
+          ],
+          "additionalProperties": false,
           "properties": {
-            "acr": {
-              "type": "object",
-              "properties": {
-                "enabled": { "type": "boolean" },
-                "required": { "type": "boolean" },
-                "description": { "type": "string" },
-                "default": { "type": "boolean" }
-              }
+            "value": {
+              "type": [
+                "string",
+                "boolean",
+                "number",
+                "object",
+                "array"
+              ]
+            },
+            "source": {
+              "type": "string",
+              "minLength": 1
+            },
+            "description": {
+              "type": "string",
+              "minLength": 1
+            },
+            "required": {
+              "type": "boolean"
+            }
+          }
+        },
+        "moriBaseUrl": {
+          "type": "object",
+          "required": [
+            "value",
+            "source",
+            "description"
+          ],
+          "additionalProperties": false,
+          "properties": {
+            "value": {
+              "type": [
+                "string",
+                "boolean",
+                "number",
+                "object",
+                "array"
+              ]
+            },
+            "source": {
+              "type": "string",
+              "minLength": 1
+            },
+            "description": {
+              "type": "string",
+              "minLength": 1
+            },
+            "required": {
+              "type": "boolean"
+            }
+          }
+        },
+        "moriCallbackApiKey": {
+          "$ref": "#/definitions/envReference"
+        },
+        "entraCallbackStateSecret": {
+          "type": "object",
+          "required": [
+            "value",
+            "source",
+            "description"
+          ],
+          "additionalProperties": false,
+          "properties": {
+            "value": {
+              "type": "null"
+            },
+            "source": {
+              "type": "string",
+              "minLength": 1
+            },
+            "description": {
+              "type": "string",
+              "minLength": 1
+            },
+            "required": {
+              "type": "boolean"
+            },
+            "requiredAt": {
+              "const": "tenantActivation"
+            }
+          }
+        },
+        "entraIdClientId": {
+          "type": "object",
+          "required": [
+            "value",
+            "source",
+            "description"
+          ],
+          "additionalProperties": false,
+          "properties": {
+            "value": {
+              "type": "null"
+            },
+            "source": {
+              "type": "string",
+              "minLength": 1
+            },
+            "description": {
+              "type": "string",
+              "minLength": 1
+            },
+            "required": {
+              "type": "boolean"
+            },
+            "requiredAt": {
+              "const": "tenantActivation"
+            }
+          }
+        },
+        "entraIdClientSecret": {
+          "type": "object",
+          "required": [
+            "value",
+            "source",
+            "description"
+          ],
+          "additionalProperties": false,
+          "properties": {
+            "value": {
+              "type": "null"
+            },
+            "source": {
+              "type": "string",
+              "minLength": 1
+            },
+            "description": {
+              "type": "string",
+              "minLength": 1
+            },
+            "required": {
+              "type": "boolean"
+            },
+            "requiredAt": {
+              "const": "tenantActivation"
+            }
+          }
+        },
+        "entraIdTenantId": {
+          "type": "object",
+          "required": [
+            "value",
+            "source",
+            "description"
+          ],
+          "additionalProperties": false,
+          "properties": {
+            "value": {
+              "type": "null"
+            },
+            "source": {
+              "type": "string",
+              "minLength": 1
+            },
+            "description": {
+              "type": "string",
+              "minLength": 1
+            },
+            "required": {
+              "type": "boolean"
+            },
+            "requiredAt": {
+              "const": "tenantActivation"
+            }
+          }
+        },
+        "licenseEdition": {
+          "type": "object",
+          "required": [
+            "value",
+            "source",
+            "description"
+          ],
+          "additionalProperties": false,
+          "properties": {
+            "value": {
+              "type": "string",
+              "pattern": "^(COMMUNITY|STANDARD|ENTERPRISE|[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})$"
+            },
+            "source": {
+              "type": "string",
+              "minLength": 1
+            },
+            "description": {
+              "type": "string",
+              "minLength": 1
+            },
+            "required": {
+              "type": "boolean"
+            }
+          }
+        },
+        "onboardingMode": {
+          "type": "object",
+          "required": [
+            "value",
+            "source",
+            "description"
+          ],
+          "additionalProperties": false,
+          "properties": {
+            "value": {
+              "enum": [
+                "saasDirect",
+                "customerOwned"
+              ]
+            },
+            "source": {
+              "type": "string",
+              "minLength": 1
+            },
+            "description": {
+              "type": "string",
+              "minLength": 1
+            },
+            "required": {
+              "type": "boolean"
+            }
+          }
+        },
+        "misoImageTag": {
+          "type": "object",
+          "required": [
+            "value",
+            "source",
+            "description"
+          ],
+          "additionalProperties": false,
+          "properties": {
+            "value": {
+              "type": [
+                "string",
+                "boolean",
+                "number",
+                "object",
+                "array"
+              ]
+            },
+            "source": {
+              "type": "string",
+              "minLength": 1
+            },
+            "description": {
+              "type": "string",
+              "minLength": 1
+            },
+            "required": {
+              "type": "boolean"
+            }
+          }
+        },
+        "keycloakImageTag": {
+          "type": "object",
+          "required": [
+            "value",
+            "source",
+            "description"
+          ],
+          "additionalProperties": false,
+          "properties": {
+            "value": {
+              "type": [
+                "string",
+                "boolean",
+                "number",
+                "object",
+                "array"
+              ]
+            },
+            "source": {
+              "type": "string",
+              "minLength": 1
+            },
+            "description": {
+              "type": "string",
+              "minLength": 1
+            },
+            "required": {
+              "type": "boolean"
             }
           }
         }
       }
-    }
-  },
-  "allOf": [
-    {
-      "if": {
-        "properties": {
-          "customDomain": {
-            "properties": {
-              "enabled": {
-                "const": true
-              }
+    },
+    "outputs": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "resourceGroupName",
+        "vnetId",
+        "keyVaultName",
+        "scriptStorageAccountName",
+        "flowiseFileShareName",
+        "managedIdentityName",
+        "appServicePlanName",
+        "webAppName",
+        "webAppUrl",
+        "postgresServerName",
+        "postgresServerFqdn",
+        "postgresMisoDatabaseName",
+        "postgresLogsDatabaseName",
+        "postgresKeycloakDatabaseName",
+        "keycloakWebAppName",
+        "keycloakWebAppUrl",
+        "keycloakRealmUrl",
+        "keycloakAdminUser",
+        "portalUrl"
+      ],
+      "properties": {
+        "resourceGroupName": {
+          "$ref": "#/definitions/output"
+        },
+        "vnetId": {
+          "$ref": "#/definitions/output"
+        },
+        "keyVaultName": {
+          "$ref": "#/definitions/output"
+        },
+        "scriptStorageAccountName": {
+          "$ref": "#/definitions/output"
+        },
+        "flowiseFileShareName": {
+          "$ref": "#/definitions/output"
+        },
+        "managedIdentityName": {
+          "$ref": "#/definitions/output"
+        },
+        "appServicePlanName": {
+          "$ref": "#/definitions/output"
+        },
+        "webAppName": {
+          "$ref": "#/definitions/output"
+        },
+        "webAppUrl": {
+          "$ref": "#/definitions/output"
+        },
+        "postgresServerName": {
+          "$ref": "#/definitions/output"
+        },
+        "postgresServerFqdn": {
+          "$ref": "#/definitions/output"
+        },
+        "postgresMisoDatabaseName": {
+          "$ref": "#/definitions/output"
+        },
+        "postgresLogsDatabaseName": {
+          "$ref": "#/definitions/output"
+        },
+        "postgresKeycloakDatabaseName": {
+          "$ref": "#/definitions/output"
+        },
+        "keycloakWebAppName": {
+          "$ref": "#/definitions/output"
+        },
+        "keycloakWebAppUrl": {
+          "$ref": "#/definitions/output"
+        },
+        "keycloakRealmUrl": {
+          "$ref": "#/definitions/output"
+        },
+        "keycloakAdminUser": {
+          "$ref": "#/definitions/output"
+        },
+        "portalUrl": {
+          "$ref": "#/definitions/output"
+        }
+      }
+    },
+    "controllerUrl": {
+      "type": "object",
+      "required": [
+        "value",
+        "source",
+        "description"
+      ],
+      "additionalProperties": false,
+      "properties": {
+        "value": {
+          "type": [
+            "string",
+            "null"
+          ],
+          "pattern": "^https://"
+        },
+        "source": {
+          "type": "string",
+          "minLength": 1
+        },
+        "description": {
+          "type": "string",
+          "minLength": 1
+        },
+        "required": {
+          "type": "boolean"
+        }
+      }
+    },
+    "tenantActivation": {
+      "type": "object",
+      "required": [
+        "status",
+        "url"
+      ],
+      "additionalProperties": false,
+      "properties": {
+        "status": {
+          "type": "object",
+          "required": [
+            "value",
+            "source",
+            "description"
+          ],
+          "additionalProperties": false,
+          "properties": {
+            "value": {
+              "enum": [
+                "pending",
+                "active",
+                "inactive",
+                "unknown"
+              ]
+            },
+            "source": {
+              "type": "string",
+              "minLength": 1
+            },
+            "description": {
+              "type": "string",
+              "minLength": 1
+            },
+            "required": {
+              "type": "boolean"
+            },
+            "checkedAt": {
+              "type": "string",
+              "format": "date-time"
+            }
+          }
+        },
+        "url": {
+          "type": "object",
+          "required": [
+            "value",
+            "source",
+            "description"
+          ],
+          "additionalProperties": false,
+          "properties": {
+            "value": {
+              "type": [
+                "string",
+                "null"
+              ],
+              "pattern": "^https://"
+            },
+            "source": {
+              "type": "string",
+              "minLength": 1
+            },
+            "description": {
+              "type": "string",
+              "minLength": 1
+            },
+            "required": {
+              "type": "boolean"
             }
           }
         }
-      },
-      "then": {
-        "required": ["customDomain"],
-        "properties": {
-          "customDomain": {
-            "required": ["name"]
+      }
+    },
+    "deployment": {
+      "type": "object",
+      "required": [
+        "status"
+      ],
+      "additionalProperties": false,
+      "properties": {
+        "status": {
+          "type": "object",
+          "required": [
+            "value",
+            "source",
+            "description"
+          ],
+          "additionalProperties": false,
+          "properties": {
+            "value": {
+              "enum": [
+                "not-deployed",
+                "running",
+                "succeeded",
+                "failed"
+              ]
+            },
+            "source": {
+              "type": "string",
+              "minLength": 1
+            },
+            "description": {
+              "type": "string",
+              "minLength": 1
+            },
+            "required": {
+              "type": "boolean"
+            }
           }
+        },
+        "name": {
+          "type": [
+            "string",
+            "null"
+          ]
+        },
+        "id": {
+          "type": [
+            "string",
+            "null"
+          ]
+        },
+        "correlationId": {
+          "type": [
+            "string",
+            "null"
+          ]
+        },
+        "inputHash": {
+          "type": [
+            "string",
+            "null"
+          ],
+          "pattern": "^[0-9a-f]{64}$"
+        },
+        "completedAt": {
+          "type": [
+            "string",
+            "null"
+          ],
+          "format": "date-time"
+        }
+      }
+    },
+    "moriBaseUrl": {
+      "type": "object",
+      "required": [
+        "value",
+        "source",
+        "description"
+      ],
+      "additionalProperties": false,
+      "properties": {
+        "value": {
+          "type": "string",
+          "pattern": "^$|^https://"
+        },
+        "source": {
+          "type": "string",
+          "minLength": 1
+        },
+        "description": {
+          "type": "string",
+          "minLength": 1
+        },
+        "required": {
+          "type": "boolean"
         }
       }
     },
+    "marketplaceSubscriptionId": {
+      "type": "object",
+      "required": [
+        "value",
+        "source",
+        "description"
+      ],
+      "additionalProperties": false,
+      "properties": {
+        "value": {
+          "type": "string",
+          "maxLength": 255
+        },
+        "source": {
+          "type": "string",
+          "minLength": 1
+        },
+        "description": {
+          "type": "string",
+          "minLength": 1
+        },
+        "required": {
+          "type": "boolean"
+        }
+      }
+    },
+    "registration": {
+      "type": "object",
+      "required": [
+        "status"
+      ],
+      "additionalProperties": false,
+      "properties": {
+        "status": {
+          "type": "object",
+          "required": [
+            "value",
+            "source",
+            "description"
+          ],
+          "additionalProperties": false,
+          "properties": {
+            "value": {
+              "enum": [
+                "not-registered",
+                "requested",
+                "registered",
+                "conflict",
+                "failed"
+              ]
+            },
+            "source": {
+              "type": "string",
+              "minLength": 1
+            },
+            "description": {
+              "type": "string",
+              "minLength": 1
+            },
+            "required": {
+              "type": "boolean"
+            }
+          }
+        },
+        "evidence": {
+          "type": [
+            "object",
+            "null"
+          ],
+          "additionalProperties": false,
+          "properties": {
+            "apiKeyId": {
+              "type": [
+                "string",
+                "null"
+              ]
+            },
+            "keyPrefix": {
+              "type": [
+                "string",
+                "null"
+              ]
+            },
+            "createdAt": {
+              "type": [
+                "string",
+                "null"
+              ]
+            },
+            "installation": {
+              "type": [
+                "object",
+                "null"
+              ]
+            },
+            "entitlement": {
+              "type": [
+                "object",
+                "null"
+              ]
+            }
+          }
+        }
+      }
+    },
+    "variables": {
+      "type": "object",
+      "additionalProperties": false,
+      "patternProperties": {
+        "^[A-Z_][A-Z0-9_]*$": {
+          "$ref": "#/definitions/variable"
+        }
+      }
+    },
+    "generated": {
+      "$ref": "#/definitions/generated"
+    }
+  },
+  "additionalProperties": false,
+  "allOf": [
     {
       "if": {
         "properties": {
-          "frontDoor": {
+          "vendor": {
             "properties": {
-              "enablePrivateLink": {
-                "const": true
+              "value": {
+                "const": "AZURE"
               }
             }
           }
         }
       },
       "then": {
-        "properties": {
-          "frontDoor": {
-            "properties": {
-              "tier": {
-                "const": "Premium"
-              }
+        "required": [
+          "acrName",
+          "allowMyIp",
+          "preset",
+          "parameters",
+          "outputs",
+          "controllerUrl",
+          "tenantActivation",
+          "deployment"
+        ],
+        "not": {
+          "anyOf": [
+            {
+              "required": [
+                "moriBaseUrl"
+              ]
+            },
+            {
+              "required": [
+                "registration"
+              ]
+            },
+            {
+              "required": [
+                "marketplaceSubscriptionId"
+              ]
             }
-          }
+          ]
+        }
+      },
+      "else": {
+        "required": [
+          "moriBaseUrl",
+          "marketplaceSubscriptionId",
+          "registration"
+        ],
+        "not": {
+          "anyOf": [
+            {
+              "required": [
+                "parameters"
+              ]
+            },
+            {
+              "required": [
+                "outputs"
+              ]
+            },
+            {
+              "required": [
+                "acrName"
+              ]
+            }
+          ]
         }
       }
     }