@cloudgrid-io/mcp 0.12.0 → 0.14.0

package/src/corpus/templates/blog-cms/services/web/app/page.js

@@ -0,0 +1,56 @@
+// Home page: a server component reads published posts straight from Mongo and
+// renders the post list. Data persists across refresh and across users because
+// it lives in the grid-shared Mongo, not in memory.
+import Link from "next/link";
+import { getDb } from "../lib/db.js";
+
+export const dynamic = "force-dynamic";
+
+async function listPublished() {
+  const db = await getDb();
+  const items = await db
+    .collection("posts")
+    .find({ published: true })
+    .sort({ createdAt: -1 })
+    .toArray();
+  return items.map((p) => ({
+    id: p._id.toString(),
+    title: p.title,
+    slug: p.slug,
+    tags: Array.isArray(p.tags) ? p.tags : [],
+    createdAt: p.createdAt ? new Date(p.createdAt).toISOString() : null,
+  }));
+}
+
+export default async function Page() {
+  const posts = await listPublished();
+  return (
+    <main>
+      <h1>Blog</h1>
+      <p className="hint">Persisted in the grid-shared Mongo — survives refresh.</p>
+      <nav>
+        <Link href="/admin">Admin</Link>
+      </nav>
+      {posts.length === 0 && <p className="empty">No published posts yet.</p>}
+      {posts.map((p) => (
+        <article key={p.id}>
+          <h2>
+            <Link href={`/posts/${encodeURIComponent(p.slug)}`}>{p.title}</Link>
+          </h2>
+          {p.createdAt && (
+            <p className="meta">{new Date(p.createdAt).toLocaleDateString()}</p>
+          )}
+          {p.tags.length > 0 && (
+            <p className="tags">
+              {p.tags.map((t) => (
+                <span key={t} className="tag">
+                  {t}
+                </span>
+              ))}
+            </p>
+          )}
+        </article>
+      ))}
+    </main>
+  );
+}

package/src/corpus/templates/blog-cms/services/web/app/posts/[slug]/page.js

@@ -0,0 +1,45 @@
+// Single-post page: a server component reads one published post by its slug.
+import Link from "next/link";
+import { notFound } from "next/navigation";
+import { getDb } from "../../../lib/db.js";
+
+export const dynamic = "force-dynamic";
+
+async function getPost(slug) {
+  const db = await getDb();
+  const p = await db.collection("posts").findOne({ slug, published: true });
+  if (!p) return null;
+  return {
+    title: p.title,
+    body: p.body,
+    tags: Array.isArray(p.tags) ? p.tags : [],
+    createdAt: p.createdAt ? new Date(p.createdAt).toISOString() : null,
+  };
+}
+
+export default async function PostPage({ params }) {
+  const { slug } = await params;
+  const post = await getPost(slug);
+  if (!post) notFound();
+  return (
+    <main>
+      <nav>
+        <Link href="/">← All posts</Link>
+      </nav>
+      <h1>{post.title}</h1>
+      {post.createdAt && (
+        <p className="meta">{new Date(post.createdAt).toLocaleDateString()}</p>
+      )}
+      {post.tags.length > 0 && (
+        <p className="tags">
+          {post.tags.map((t) => (
+            <span key={t} className="tag">
+              {t}
+            </span>
+          ))}
+        </p>
+      )}
+      <div className="post-body">{post.body}</div>
+    </main>
+  );
+}

package/src/corpus/templates/blog-cms/services/web/lib/db.js

@@ -0,0 +1,32 @@
+// Cached MongoDB client for the App Router.
+//
+// The grid injects the connection string as the DATABASE_MONGODB_URL environment
+// variable (plus the legacy MONGODB_URL alias) at dev-time (`grid dev`) and
+// runtime (after `grid plug`). Read the canonical var first, fall back to the
+// legacy alias. Never hardcode a connection string here and never commit a secret.
+//
+// The env var and client are resolved LAZILY (inside getDb), never at module top
+// level — otherwise `next build` throws when it imports this module for route
+// analysis, before the grid injects the var.
+import { MongoClient } from "mongodb";
+
+function clientPromise() {
+  const uri = process.env.DATABASE_MONGODB_URL || process.env.MONGODB_URL;
+  if (!uri) {
+    throw new Error(
+      "DATABASE_MONGODB_URL is not set. The grid injects it automatically — run " +
+        "this app with `grid dev` locally, or deploy it with `grid plug` (the grid " +
+        "injects the DB connection string at runtime). Do not set it by hand.",
+    );
+  }
+  if (!globalThis.__mongoClientPromise) {
+    globalThis.__mongoClientPromise = new MongoClient(uri).connect();
+  }
+  return globalThis.__mongoClientPromise;
+}
+
+export async function getDb() {
+  const client = await clientPromise();
+  // The default DB comes from the connection-string path segment the grid injects.
+  return client.db();
+}

package/src/corpus/templates/blog-cms/services/web/package.json

@@ -0,0 +1,16 @@
+{
+  "name": "blog-cms",
+  "version": "0.1.0",
+  "private": true,
+  "scripts": {
+    "dev": "next dev",
+    "build": "next build",
+    "start": "next start"
+  },
+  "dependencies": {
+    "next": "^15.1.0",
+    "react": "^19.0.0",
+    "react-dom": "^19.0.0",
+    "mongodb": "^6.12.0"
+  }
+}

package/src/corpus/templates/booking-system/AGENTS.md

@@ -0,0 +1,189 @@
+# AGENTS.md — booking-system (BLUEPRINT)
+
+A structure guide for building an appointment / reservation booking system on
+CloudGrid. This is a **blueprint**, not runnable app code: it tells you the exact
+file tree, data model, and CloudGrid wiring to build so it deploys correctly.
+Build the app yourself following this guide — do not expect prewritten routes.
+
+The proven runtime shape is the same as `app-with-data` (Next.js + Mongo under
+`services/web/`); this blueprint layers booking domain logic, Stripe payments,
+an auth provider, and a reminder cron on top.
+
+---
+
+## 1. File tree
+
+App code MUST live under `services/<name>/` — `path:` in `cloudgrid.yaml` is the
+URL mount, NOT the filesystem path. The service named `web` → the CLI looks for
+`services/web/`. Files at the repo root fail with
+`Error: Service directory not found: …/services/web`.
+
+```
+cloudgrid.yaml                                  # name + services.web (nextjs) + needs:{database:true} + vault:
+AGENTS.md                                       # this guide
+services/web/package.json                       # next, react, react-dom, mongodb, stripe, auth provider SDK
+services/web/lib/db.js                          # lazy Mongo client from DATABASE_MONGODB_URL (legacy MONGODB_URL fallback)
+services/web/lib/availability.js                # slot generation + double-booking check (core booking logic)
+services/web/lib/stripe.js                      # lazy Stripe client from process.env.STRIPE_KEY (vault-injected)
+services/web/lib/auth.js                        # auth-provider server helpers (session, current user) from AUTH_PROVIDER_KEY
+services/web/app/layout.js                      # root layout + inline CSS
+services/web/app/page.js                        # server component: services list + open slots for a chosen day
+services/web/app/book/[serviceId]/page.js       # booking flow for one service (pick slot → checkout)
+services/web/app/booking-form.js                # client component: slot picker → POST /api/bookings
+services/web/app/api/services/route.js          # GET list bookable services; POST admin-create (auth-gated)
+services/web/app/api/availability/route.js      # GET open slots for { serviceId, date } (reads availability.js)
+services/web/app/api/bookings/route.js          # GET my bookings; POST create (holds slot, starts Stripe checkout)
+services/web/app/api/bookings/[id]/route.js     # GET one; PATCH reschedule/cancel; DELETE cancel
+services/web/app/api/webhooks/stripe/route.js   # POST Stripe webhook: on checkout.session.completed → confirm booking
+#
+# ── CRON (intended shape, NOT yet deployable — see §7 + platform issue #1543) ──
+# services/reminders/package.json                # mongodb (+ email/SMS SDK)
+# services/reminders/index.js                     # batch job: find bookings due a reminder, send, mark reminded
+```
+
+---
+
+## 2. MongoDB collections + fields
+
+The grid provisions shared Mongo from `needs: { database: true }`. Suggested
+collections (all `_id` is a Mongo ObjectId; store dates as real `Date`s, in UTC):
+
+**`services`** — the bookable offerings.
+- `name` (string) — e.g. "60-min consultation"
+- `durationMinutes` (number) — slot length
+- `priceCents` (number) — amount charged at checkout (0 = free, skip Stripe)
+- `active` (boolean) — hidden from booking UI when false
+- `ownerId` (string) — auth-provider user id of the provider/staff
+- `createdAt` (Date)
+
+**`availabilityRules`** — recurring weekly windows a service can be booked in.
+- `serviceId` (ObjectId → services)
+- `weekday` (0–6, Sun–Sat)
+- `startMinute` / `endMinute` (minutes from local midnight, in `timezone`)
+- `timezone` (IANA string, e.g. "America/New_York")
+
+**`bookings`** — a reserved slot. This is the source of truth for double-booking.
+- `serviceId` (ObjectId → services)
+- `customerId` (string) — auth-provider user id, or null for guest
+- `customerEmail` (string) — for the reminder + confirmation
+- `startAt` / `endAt` (Date, UTC) — the exact reserved window
+- `status` (string) — `pending` (slot held, awaiting payment) → `confirmed`
+  (paid / free) → `cancelled` | `completed`
+- `stripeSessionId` (string, nullable) — links to the Checkout session
+- `reminderSentAt` (Date, nullable) — set by the reminder cron; prevents dupes
+- `createdAt` (Date)
+
+**Double-booking guard:** a slot is free only if no `bookings` doc for that
+`serviceId` overlaps `[startAt, endAt)` with `status in {pending, confirmed}`.
+Enforce it at write time — do the overlap query and the `insertOne` guarded by a
+**unique index** on `{ serviceId: 1, startAt: 1 }` so two concurrent requests
+cannot both take the same slot (the loser gets a duplicate-key error → return
+409). `availability.js` generates candidate slots from `availabilityRules` and
+subtracts the taken `bookings`.
+
+---
+
+## 3. How CloudGrid injects things
+
+You do NOT provision infra or set connection strings/secrets by hand. Declared in
+`cloudgrid.yaml`, the platform injects env vars at `grid dev` and after `grid plug`:
+
+- **Database (`needs: { database: true }`)** → `DATABASE_MONGODB_URL` (plus the
+  legacy `MONGODB_URL` alias). Read it **lazily inside a getter**, never at module
+  top level — a top-level read fails `next build`, which imports the module for
+  route analysis before the grid injects the var:
+  ```js
+  // services/web/lib/db.js
+  const uri = process.env.DATABASE_MONGODB_URL || process.env.MONGODB_URL;
+  ```
+- **Secrets (`vault:` block)** → each mapped item becomes the named env var:
+  `STRIPE_KEY`, `STRIPE_WEBHOOK_SECRET`, `AUTH_PROVIDER_KEY`. Add the underlying
+  vault items with `grid secrets set <item> <value>` (or the vault UI) BEFORE
+  plug, so resolution succeeds. Never hardcode a key; never commit `.env`.
+- **AI (`needs: { ai: true }`, if you add it)** → `AI_GATEWAY_URL`, used via
+  `@cloudgrid-io/ai`. Not required for a basic booking system.
+
+Read every injected var lazily (inside getters), same rule as the DB.
+
+---
+
+## 4. Wiring auth + payments
+
+**Auth (provider SDK — Clerk / Auth0 / similar).** Put the secret key in the
+`vault:` block as `AUTH_PROVIDER_KEY` and read it lazily in
+`services/web/lib/auth.js`. Use the provider's Next.js middleware/server helpers
+to gate: booking creation (attach `customerId`), "my bookings", and admin service
+management. Public browse of services + open slots can stay unauthenticated.
+Guest booking is allowed if you capture `customerEmail` and leave `customerId`
+null. Store only the provider's user id in Mongo — never mirror passwords.
+
+**Payments (Stripe).** Put the live key in `vault:` as `STRIPE_KEY` and the
+webhook signing secret as `STRIPE_WEBHOOK_SECRET`; read both lazily in
+`services/web/lib/stripe.js`. Flow:
+1. `POST /api/bookings` — validate the slot is still free, insert the booking as
+   `status: "pending"` (holding it via the unique index), then create a Stripe
+   **Checkout Session** for `priceCents`, store `stripeSessionId` on the booking,
+   and return the session URL for the client to redirect to. (If `priceCents` is
+   0, skip Stripe and mark `confirmed` immediately.)
+2. `POST /api/webhooks/stripe` — verify the signature with
+   `STRIPE_WEBHOOK_SECRET`, and on `checkout.session.completed` flip the matching
+   booking to `status: "confirmed"`. This webhook — not the browser redirect — is
+   the source of truth for payment. Expire/cancel stale `pending` bookings so a
+   held slot is released if checkout is abandoned (a job for the reminder cron, or
+   an on-read sweep).
+
+---
+
+## 5. Deploy steps
+
+1. `grid init` — scaffolds the entity + `.cloudgrid/link.json`; writes a
+   `cloudgrid.yaml` with an empty `services: {}`. Run this FIRST (plug needs a
+   linked directory).
+2. Fill it in: build the files under `services/web/` and set `cloudgrid.yaml` to
+   this template's shape (`services.web` nextjs + `needs: { database: true }` +
+   the `vault:` block).
+3. `grid secrets set stripe-live-key <sk_live_…>` and the other vault items, so
+   the `vault:` mappings resolve at deploy.
+4. (Optional) `grid dev` — runs Next.js locally with `DATABASE_MONGODB_URL` and
+   the vault env vars injected against dev resources. Good for testing the slot
+   logic before shipping.
+5. `grid plug` — builds + deploys. A runtime deploy is **async**: the first
+   response is `status: "building"`, not a live URL. Poll `grid status` (or the
+   returned poll_url) until live; surface a liveness signal while it builds, never
+   a bare silent wait. Return the live app URL only once it is up.
+6. Iterate by re-plugging the SAME entity — it updates the same URL.
+
+---
+
+## 6. Edition note
+
+This is a built + deployed container (runtime app), so it requires the **local
+edition** (Claude Desktop / Claude Code) or the CLI. The **hosted edition**
+(Claude Web / hosted MCP) is inline/static-only and CANNOT build a runtime app —
+on hosted, the most you can ship is a static preview page, not the real booking
+backend.
+
+---
+
+## 7. Reminder cron — intended shape, NOT yet deployable (platform issue #1543)
+
+The design calls for a scheduled job that sends appointment reminders (e.g. email
+/ SMS 24h and 1h before `startAt`) and sweeps abandoned `pending` bookings.
+
+**Intended shape** (mirrors the commented `reminders:` service in
+`cloudgrid.yaml`):
+- A second service `services/reminders/` of `type: cron`, `run: job` (batch, no
+  HTTP), on a `schedule` like `*/15 * * * *`.
+- On each run: connect to Mongo via the same `DATABASE_MONGODB_URL`; find
+  `confirmed` bookings whose `startAt` is within a reminder window and
+  `reminderSentAt` is null; send via an email/SMS provider (key from `vault:`);
+  set `reminderSentAt`. Also cancel `pending` bookings older than the hold
+  timeout to free the slot.
+
+**Status: PENDING.** cron-service deploy is currently blocked by **platform issue
+#1543** — `grid plug` will reject a `type: cron` service until it lands. Keep the
+`reminders:` service COMMENTED in `cloudgrid.yaml` and ship the `web` service
+alone for now. Until #1543 is fixed, run reminders as a stopgap: an on-read sweep
+inside `GET /api/bookings`, or an external scheduler hitting a protected
+`POST /api/cron/reminders` route on the web service. Swap to the real cron
+service once the issue is resolved.

package/src/corpus/templates/booking-system/README.md

@@ -0,0 +1,17 @@
+# booking-system template — appointment / reservation booking (BLUEPRINT)
+
+A blueprint for a persistent booking system on CloudGrid: a Next.js app under
+`services/web/` backed by grid-shared Mongo (`services`, `availabilityRules`,
+`bookings` collections) with slot-availability logic, Stripe checkout for paid
+appointments, an auth provider for accounts, and a reminder cron for scheduled
+notifications. It exists because reservations must survive refresh and be shared
+across sessions — a runtime app, not a static page — and because the payment +
+scheduling wiring is CloudGrid-specific (vault-injected secrets, injected
+`DATABASE_MONGODB_URL`, a cron service).
+
+> **This is a blueprint: structure + cloudgrid.yaml, adapt and build.** It ships
+> the annotated `cloudgrid.yaml` and `AGENTS.md` (file tree, data model, and
+> CloudGrid wiring) — NOT prewritten app code. Read `AGENTS.md`, then build the
+> app under `services/web/` following it. Note: the reminder **cron service is
+> not yet deployable** (platform issue #1543) — see `AGENTS.md` §7 for the
+> intended shape and the stopgap.

package/src/corpus/templates/booking-system/cloudgrid.yaml

@@ -0,0 +1,248 @@
+# ============================================================================
+# cloudgrid.yaml — Complete Example
+# ============================================================================
+#
+# This file shows EVERY field the platform supports, with comments explaining
+# each one. It is a reference — no real project would use all of these at once.
+#
+# STANDARD: every CloudGrid template ships its cloudgrid.yaml in THIS full form.
+# Uncomment ONLY the fields the archetype needs (always: name + services; plus
+# needs: for runtime apps). Leave everything else commented. Comments are
+# ignored by the parser, so the file deploys to exactly the active fields.
+#
+# Only two fields are required: name and services. Everything else is optional.
+# Full docs: docs/cloudgrid-yaml-reference.md
+# ============================================================================
+
+
+# ─── IDENTITY ───────────────────────────────────────────────────────────────
+
+# Entity slug (REQUIRED). 2-42 chars, lowercase alphanumeric + hyphens.
+# Must start and end with a letter or digit.
+# Becomes part of your public URL: <name>-<4hex>.<org>.cloudgrid.io
+name: booking-system
+
+# One-line summary. Max 280 chars. If omitted, Grid Brain auto-generates one.
+# description: Order processing API for the e-commerce platform
+
+# Single emoji or short text shown as the entity icon. Max 64 chars.
+# icon: "📦"
+
+# Entity type: 'app' (default) or 'agent'. An agent is an app with an agent: block.
+# kind: app
+
+
+# ─── NETWORKING ─────────────────────────────────────────────────────────────
+
+# Whether this entity serves public HTTP traffic.
+# true = public URL + Ingress (default). false = internal only.
+# expose: true
+
+# Additional domain names this entity serves on (the platform URL is always active).
+# custom_domains:
+#   - orders.example.com
+#   - shop.example.com
+
+
+# ─── HEALTH PROBE (entity-level override) ──────────────────────────────────
+
+# Override the default health check for the entire entity.
+# probe:
+#   path: /healthz               # HTTP path to probe (default: /).
+#   expected: "<500"             # '<500' (default), '200', '2xx'.
+
+
+# ─── DEPLOY NOTIFICATIONS ──────────────────────────────────────────────────
+
+# Slack notification to the org's default channel on deploy failure.
+# true = notify (default), false = silent.
+# notify: true
+
+
+# ─── SCALING ────────────────────────────────────────────────────────────────
+
+# Replica scaling intent.
+#   'auto'  — platform decides from the grid tier (default).
+#   'alert' — single-replica, emit a SPOF warning at plug time.
+#   1-10    — explicit replica count, clamped to the grid max.
+# scale: auto
+
+
+# ─── INFRASTRUCTURE NEEDS ──────────────────────────────────────────────────
+#
+# Declare infrastructure; the platform provisions it and injects connection
+# details as env vars. Nine needs: database, cache, kv, queue, pubsub, vector,
+# object_storage, disk, ai. Simplest form is `true`.
+#
+# needs:
+#   # database — MongoDB. Injects DATABASE_MONGODB_URL (+ legacy MONGODB_URL).
+#   #   true | pool | dedicated | { tier: external, secret: MY_DB }
+#   database: true
+#   # cache — Redis, LRU eviction (derived data). Injects CACHE_REDIS_URL (+ REDIS_URL).
+#   #   true | redis | { engine: external, secret: MY_REDIS_URL }
+#   cache: true
+#   # kv — Redis, no eviction (durable: flags, idempotency). Injects KV_REDIS_URL.
+#   kv: true
+#   # queue — Redis job-queue substrate (BullMQ). Injects QUEUE_REDIS_URL.
+#   queue: true
+#   # pubsub — Redis broadcast pub/sub. Injects PUBSUB_REDIS_URL.
+#   pubsub: true
+#   # vector — pgvector on Postgres. Injects VECTOR_PGVECTOR_URL (+ PGVECTOR_URL).
+#   #   true | pgvector | { engine: pgvector, dim: 1536 }
+#   vector: pgvector
+#   # object_storage — GCS bucket. Injects OBJECT_STORAGE_GCS_BUCKET, _GCS_REGION.
+#   #   true | { size: 10Gi }
+#   object_storage: true
+#   # disk — persistent FS mount (PVC). Injects DISK_PATH. Pins to 1 replica.
+#   #   true | { size: 1Gi, mount: /var/data }  (forbidden: /proc /sys /dev)
+#   disk: true
+#   # ai — AI Gateway via @cloudgrid-io/ai. Injects AI_GATEWAY_URL. true | false.
+#   ai: true
+
+
+# ─── INTER-ENTITY COMMUNICATION ────────────────────────────────────────────
+
+# Entities this app calls (outbound). Service-account token injected per pair.
+# calls:
+#   - org:atomic/billing-api
+
+# Inbound caller policy — who can call YOUR entity.
+# callers:
+#   policy: auto                 # 'auto' | 'manual' (default).
+#   scope: org                   # 'org' (default) | 'space' | 'explicit'.
+#   fallback: deny               # 'deny' (default) | 'warn'.
+#   # allowed_apps:              # required only when scope: explicit
+#   #   - org:atomic/frontend
+
+
+# ─── VAULT ──────────────────────────────────────────────────────────────────
+#
+# Map org vault items to env vars. Keys UPPER_SNAKE_CASE; values = vault item keys.
+# A booking system typically needs payment + auth provider secrets. These are the
+# CloudGrid-correct way to inject them — the platform resolves each vault item and
+# sets the named env var at runtime. Add the vault items with `grid secrets set`
+# (or via the vault UI) BEFORE plug so resolution succeeds.
+vault:
+  STRIPE_KEY: stripe-live-key
+  STRIPE_WEBHOOK_SECRET: stripe-webhook-secret
+  AUTH_PROVIDER_KEY: auth-provider-key
+
+
+# ─── CONNECTORS AND HOOKS ──────────────────────────────────────────────────
+
+# connectors:
+#   - id: team-slack
+#     target: org                # 'system' | 'org'.
+#     channel: "#deploys"
+# hooks:
+#   - on: deploy.failed          # release.published | deploy.failed | feedback.received | entity.created
+#     via: team-slack
+#     template: "Deploy failed for {entity_name}: {error}"
+#     channel: "#alerts"
+# triggers:
+#   - from: team-slack
+#     event: message
+#     channel: "#support"
+#     route: /webhooks/slack
+
+
+# ─── LOCAL DEVELOPMENT ──────────────────────────────────────────────────────
+
+# Config for `grid dev`. Redact fields in dev data snapshots.
+# dev:
+#   snapshot:
+#     mask:
+#       - users.email
+#       - users.phone
+
+
+# ─── AGENT METADATA ────────────────────────────────────────────────────────
+
+# An agent is an app with kind: agent (above) and an agent: block.
+# agent:
+#   purpose: Sync customer data from external CRM every night
+#   schedule: "0 2 * * *"
+#   trigger: webhook
+
+
+# ─── PRIVATE RESOURCE AUTO-DEPENDENCIES ────────────────────────────────────
+
+# When true (default), private resources are auto-injected as depends_on.
+# auto_depends_on_private_requires: true
+
+
+# ─── SERVICES (REQUIRED) ───────────────────────────────────────────────────
+#
+# At least one service is required. Key = service name (slug rules).
+# Types: node, nextjs, python, static, cron.
+#
+services:
+  web:
+    # type (REQUIRED): node | nextjs | python | static | cron
+    type: nextjs
+    # HTTP route: '/' | '/api' | false (internal) | omitted (=false + warning).
+    # Only one service per entity can claim '/'.
+    path: /
+    # Container port (default 8080; read process.env.PORT). Not for cron.
+    # port: 3000
+    # nextjs only: base_image: distroless (default) | alpine
+    # base_image: distroless
+    # node only: lang: javascript (default) | typescript
+    # lang: typescript
+    # Custom source location (default services/<name>/). '.' = project root.
+    # source:
+    #   path: src/worker
+    # Health probe: false/omitted (TCP) | true (/health) | "/path" | {path,expected}
+    # health:
+    #   path: /api/health
+    #   expected: "200"
+    # Static runtime env vars (strings). Reserved: PORT, APP_NAME, SERVICE_NAME,
+    # NODE_ENV, MONGODB_URL, REDIS_URL, AI_GATEWAY_URL, N8N_WEBHOOK_URL, CLOUDGRID_*.
+    # env:
+    #   LOG_LEVEL: info
+    # Sibling services/private resources that must be Ready first (no cron, no cycles).
+    # depends_on:
+    #   - worker
+    # Per-service needs override (merges with app-level needs).
+    # needs:
+    #   queue: true
+    # Static-only build step:
+    # build:
+    #   command: npm run build
+    #   output: dist
+    #   env:
+    #     VITE_API_URL: https://api.example.com
+    # node_version: "22"          # static build step: '18'|'20'|'22'|'24' (quoted)
+    # Cron-only: schedule (REQUIRED), timezone (UTC|EST|PST), run (job | https URL)
+    # schedule: "0 9 * * 1"
+    # timezone: UTC
+    # run: job
+    # Verbose per-service persistence (prefer needs.disk):
+    # persist:
+    #   - name: scratch
+    #     path: /tmp/scratch
+    #     size: 500Mi
+
+  # ─── CRON SERVICE (INTENDED SHAPE — NOT YET DEPLOYABLE) ───────────────────
+  # A booking system needs a scheduled job to send appointment reminders. This is
+  # the intended shape. cron deploy is currently PENDING platform issue #1543 — do
+  # NOT uncomment this yet; plug will reject a cron service until #1543 lands.
+  # See AGENTS.md for the reminder-job design.
+  # reminders:
+  #   type: cron
+  #   schedule: "*/15 * * * *"   # every 15 min: scan for bookings needing a reminder
+  #   timezone: UTC
+  #   run: job                   # runs services/reminders/ as a batch job (no HTTP)
+
+
+needs:
+  database: true
+
+
+# ============================================================================
+# NOTES
+# - NOT here: org:/entity_id: (→ .cloudgrid/link.json), secrets (→ grid secrets set),
+#   Dockerfile (platform generates from services.*.type).
+# - Deploy: grid plug   |   Local with grid resources: grid dev
+# - Full reference: docs/cloudgrid-yaml-reference.md  |  CLI: docs/cli-reference.md
+# ============================================================================