@databricks/appkit 0.83.0 → 0.84.0

package/dist/shared/src/schemas/manifest.d.ts

@@ -13,8 +13,8 @@ declare const resourceFieldEntrySchema: z.ZodObject<{
     type: z.ZodLiteral<"kind">;
     resourceKind: z.ZodEnum<{
       volume: "volume";
-      genie_space: "genie_space";
       warehouse: "warehouse";
+      genie_space: "genie_space";
       postgres_project: "postgres_project";
       postgres_branch: "postgres_branch";
       postgres_database: "postgres_database";
@@ -34,6 +34,14 @@ declare const resourceFieldEntrySchema: z.ZodObject<{
 }, z.core.$strict>;
 declare const pluginManifestSchema: z.ZodObject<{
   scopes: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+    sql: "sql";
+    "sql:restricted-query": "sql:restricted-query";
+    genie: "genie";
+    postgres: "postgres";
+    "model-serving": "model-serving";
+    files: "files";
+    "vector-search": "vector-search";
+    "catalog.connections": "catalog.connections";
     "ai-gateway": "ai-gateway";
     "mcp.external": "mcp.external";
     "mcp.functions": "mcp.functions";
@@ -68,8 +76,8 @@ declare const pluginManifestSchema: z.ZodObject<{
           type: z.ZodLiteral<"kind">;
           resourceKind: z.ZodEnum<{
             volume: "volume";
-            genie_space: "genie_space";
             warehouse: "warehouse";
+            genie_space: "genie_space";
             postgres_project: "postgres_project";
             postgres_branch: "postgres_branch";
             postgres_database: "postgres_database";
@@ -109,8 +117,8 @@ declare const pluginManifestSchema: z.ZodObject<{
           type: z.ZodLiteral<"kind">;
           resourceKind: z.ZodEnum<{
             volume: "volume";
-            genie_space: "genie_space";
             warehouse: "warehouse";
+            genie_space: "genie_space";
             postgres_project: "postgres_project";
             postgres_branch: "postgres_branch";
             postgres_database: "postgres_database";
@@ -149,8 +157,8 @@ declare const pluginManifestSchema: z.ZodObject<{
           type: z.ZodLiteral<"kind">;
           resourceKind: z.ZodEnum<{
             volume: "volume";
-            genie_space: "genie_space";
             warehouse: "warehouse";
+            genie_space: "genie_space";
             postgres_project: "postgres_project";
             postgres_branch: "postgres_branch";
             postgres_database: "postgres_database";
@@ -171,9 +179,9 @@ declare const pluginManifestSchema: z.ZodObject<{
       type: z.ZodLiteral<"sql_warehouse">;
     }, z.core.$strict>, z.ZodObject<{
       permission: z.ZodEnum<{
+        CAN_QUERY: "CAN_QUERY";
         CAN_VIEW: "CAN_VIEW";
         CAN_MANAGE: "CAN_MANAGE";
-        CAN_QUERY: "CAN_QUERY";
       }>;
       alias: z.ZodString;
       resourceKey: z.ZodString;
@@ -190,8 +198,8 @@ declare const pluginManifestSchema: z.ZodObject<{
           type: z.ZodLiteral<"kind">;
           resourceKind: z.ZodEnum<{
             volume: "volume";
-            genie_space: "genie_space";
             warehouse: "warehouse";
+            genie_space: "genie_space";
             postgres_project: "postgres_project";
             postgres_branch: "postgres_branch";
             postgres_database: "postgres_database";
@@ -230,8 +238,8 @@ declare const pluginManifestSchema: z.ZodObject<{
           type: z.ZodLiteral<"kind">;
           resourceKind: z.ZodEnum<{
             volume: "volume";
-            genie_space: "genie_space";
             warehouse: "warehouse";
+            genie_space: "genie_space";
             postgres_project: "postgres_project";
             postgres_branch: "postgres_branch";
             postgres_database: "postgres_database";
@@ -269,8 +277,8 @@ declare const pluginManifestSchema: z.ZodObject<{
           type: z.ZodLiteral<"kind">;
           resourceKind: z.ZodEnum<{
             volume: "volume";
-            genie_space: "genie_space";
             warehouse: "warehouse";
+            genie_space: "genie_space";
             postgres_project: "postgres_project";
             postgres_branch: "postgres_branch";
             postgres_database: "postgres_database";
@@ -308,8 +316,8 @@ declare const pluginManifestSchema: z.ZodObject<{
           type: z.ZodLiteral<"kind">;
           resourceKind: z.ZodEnum<{
             volume: "volume";
-            genie_space: "genie_space";
             warehouse: "warehouse";
+            genie_space: "genie_space";
             postgres_project: "postgres_project";
             postgres_branch: "postgres_branch";
             postgres_database: "postgres_database";
@@ -347,8 +355,8 @@ declare const pluginManifestSchema: z.ZodObject<{
           type: z.ZodLiteral<"kind">;
           resourceKind: z.ZodEnum<{
             volume: "volume";
-            genie_space: "genie_space";
             warehouse: "warehouse";
+            genie_space: "genie_space";
             postgres_project: "postgres_project";
             postgres_branch: "postgres_branch";
             postgres_database: "postgres_database";
@@ -386,8 +394,8 @@ declare const pluginManifestSchema: z.ZodObject<{
           type: z.ZodLiteral<"kind">;
           resourceKind: z.ZodEnum<{
             volume: "volume";
-            genie_space: "genie_space";
             warehouse: "warehouse";
+            genie_space: "genie_space";
             postgres_project: "postgres_project";
             postgres_branch: "postgres_branch";
             postgres_database: "postgres_database";
@@ -425,8 +433,8 @@ declare const pluginManifestSchema: z.ZodObject<{
           type: z.ZodLiteral<"kind">;
           resourceKind: z.ZodEnum<{
             volume: "volume";
-            genie_space: "genie_space";
             warehouse: "warehouse";
+            genie_space: "genie_space";
             postgres_project: "postgres_project";
             postgres_branch: "postgres_branch";
             postgres_database: "postgres_database";
@@ -447,10 +455,10 @@ declare const pluginManifestSchema: z.ZodObject<{
       type: z.ZodLiteral<"postgres">;
     }, z.core.$strict>, z.ZodObject<{
       permission: z.ZodEnum<{
+        CAN_EDIT: "CAN_EDIT";
         CAN_VIEW: "CAN_VIEW";
         CAN_MANAGE: "CAN_MANAGE";
         CAN_RUN: "CAN_RUN";
-        CAN_EDIT: "CAN_EDIT";
       }>;
       alias: z.ZodString;
       resourceKey: z.ZodString;
@@ -467,8 +475,8 @@ declare const pluginManifestSchema: z.ZodObject<{
           type: z.ZodLiteral<"kind">;
           resourceKind: z.ZodEnum<{
             volume: "volume";
-            genie_space: "genie_space";
             warehouse: "warehouse";
+            genie_space: "genie_space";
             postgres_project: "postgres_project";
             postgres_branch: "postgres_branch";
             postgres_database: "postgres_database";
@@ -489,8 +497,8 @@ declare const pluginManifestSchema: z.ZodObject<{
       type: z.ZodLiteral<"genie_space">;
     }, z.core.$strict>, z.ZodObject<{
       permission: z.ZodEnum<{
-        CAN_MANAGE: "CAN_MANAGE";
         CAN_EDIT: "CAN_EDIT";
+        CAN_MANAGE: "CAN_MANAGE";
         CAN_READ: "CAN_READ";
       }>;
       alias: z.ZodString;
@@ -508,8 +516,8 @@ declare const pluginManifestSchema: z.ZodObject<{
           type: z.ZodLiteral<"kind">;
           resourceKind: z.ZodEnum<{
             volume: "volume";
-            genie_space: "genie_space";
             warehouse: "warehouse";
+            genie_space: "genie_space";
             postgres_project: "postgres_project";
             postgres_branch: "postgres_branch";
             postgres_database: "postgres_database";
@@ -547,8 +555,8 @@ declare const pluginManifestSchema: z.ZodObject<{
           type: z.ZodLiteral<"kind">;
           resourceKind: z.ZodEnum<{
             volume: "volume";
-            genie_space: "genie_space";
             warehouse: "warehouse";
+            genie_space: "genie_space";
             postgres_project: "postgres_project";
             postgres_branch: "postgres_branch";
             postgres_database: "postgres_database";
@@ -589,8 +597,8 @@ declare const pluginManifestSchema: z.ZodObject<{
           type: z.ZodLiteral<"kind">;
           resourceKind: z.ZodEnum<{
             volume: "volume";
-            genie_space: "genie_space";
             warehouse: "warehouse";
+            genie_space: "genie_space";
             postgres_project: "postgres_project";
             postgres_branch: "postgres_branch";
             postgres_database: "postgres_database";
@@ -630,8 +638,8 @@ declare const pluginManifestSchema: z.ZodObject<{
           type: z.ZodLiteral<"kind">;
           resourceKind: z.ZodEnum<{
             volume: "volume";
-            genie_space: "genie_space";
             warehouse: "warehouse";
+            genie_space: "genie_space";
             postgres_project: "postgres_project";
             postgres_branch: "postgres_branch";
             postgres_database: "postgres_database";
@@ -670,8 +678,8 @@ declare const pluginManifestSchema: z.ZodObject<{
           type: z.ZodLiteral<"kind">;
           resourceKind: z.ZodEnum<{
             volume: "volume";
-            genie_space: "genie_space";
             warehouse: "warehouse";
+            genie_space: "genie_space";
             postgres_project: "postgres_project";
             postgres_branch: "postgres_branch";
             postgres_database: "postgres_database";
@@ -692,9 +700,9 @@ declare const pluginManifestSchema: z.ZodObject<{
       type: z.ZodLiteral<"sql_warehouse">;
     }, z.core.$strict>, z.ZodObject<{
       permission: z.ZodEnum<{
+        CAN_QUERY: "CAN_QUERY";
         CAN_VIEW: "CAN_VIEW";
         CAN_MANAGE: "CAN_MANAGE";
-        CAN_QUERY: "CAN_QUERY";
       }>;
       alias: z.ZodString;
       resourceKey: z.ZodString;
@@ -711,8 +719,8 @@ declare const pluginManifestSchema: z.ZodObject<{
           type: z.ZodLiteral<"kind">;
           resourceKind: z.ZodEnum<{
             volume: "volume";
-            genie_space: "genie_space";
             warehouse: "warehouse";
+            genie_space: "genie_space";
             postgres_project: "postgres_project";
             postgres_branch: "postgres_branch";
             postgres_database: "postgres_database";
@@ -751,8 +759,8 @@ declare const pluginManifestSchema: z.ZodObject<{
           type: z.ZodLiteral<"kind">;
           resourceKind: z.ZodEnum<{
             volume: "volume";
-            genie_space: "genie_space";
             warehouse: "warehouse";
+            genie_space: "genie_space";
             postgres_project: "postgres_project";
             postgres_branch: "postgres_branch";
             postgres_database: "postgres_database";
@@ -790,8 +798,8 @@ declare const pluginManifestSchema: z.ZodObject<{
           type: z.ZodLiteral<"kind">;
           resourceKind: z.ZodEnum<{
             volume: "volume";
-            genie_space: "genie_space";
             warehouse: "warehouse";
+            genie_space: "genie_space";
             postgres_project: "postgres_project";
             postgres_branch: "postgres_branch";
             postgres_database: "postgres_database";
@@ -829,8 +837,8 @@ declare const pluginManifestSchema: z.ZodObject<{
           type: z.ZodLiteral<"kind">;
           resourceKind: z.ZodEnum<{
             volume: "volume";
-            genie_space: "genie_space";
             warehouse: "warehouse";
+            genie_space: "genie_space";
             postgres_project: "postgres_project";
             postgres_branch: "postgres_branch";
             postgres_database: "postgres_database";
@@ -868,8 +876,8 @@ declare const pluginManifestSchema: z.ZodObject<{
           type: z.ZodLiteral<"kind">;
           resourceKind: z.ZodEnum<{
             volume: "volume";
-            genie_space: "genie_space";
             warehouse: "warehouse";
+            genie_space: "genie_space";
             postgres_project: "postgres_project";
             postgres_branch: "postgres_branch";
             postgres_database: "postgres_database";
@@ -907,8 +915,8 @@ declare const pluginManifestSchema: z.ZodObject<{
           type: z.ZodLiteral<"kind">;
           resourceKind: z.ZodEnum<{
             volume: "volume";
-            genie_space: "genie_space";
             warehouse: "warehouse";
+            genie_space: "genie_space";
             postgres_project: "postgres_project";
             postgres_branch: "postgres_branch";
             postgres_database: "postgres_database";
@@ -946,8 +954,8 @@ declare const pluginManifestSchema: z.ZodObject<{
           type: z.ZodLiteral<"kind">;
           resourceKind: z.ZodEnum<{
             volume: "volume";
-            genie_space: "genie_space";
             warehouse: "warehouse";
+            genie_space: "genie_space";
             postgres_project: "postgres_project";
             postgres_branch: "postgres_branch";
             postgres_database: "postgres_database";
@@ -968,10 +976,10 @@ declare const pluginManifestSchema: z.ZodObject<{
       type: z.ZodLiteral<"postgres">;
     }, z.core.$strict>, z.ZodObject<{
       permission: z.ZodEnum<{
+        CAN_EDIT: "CAN_EDIT";
         CAN_VIEW: "CAN_VIEW";
         CAN_MANAGE: "CAN_MANAGE";
         CAN_RUN: "CAN_RUN";
-        CAN_EDIT: "CAN_EDIT";
       }>;
       alias: z.ZodString;
       resourceKey: z.ZodString;
@@ -988,8 +996,8 @@ declare const pluginManifestSchema: z.ZodObject<{
           type: z.ZodLiteral<"kind">;
           resourceKind: z.ZodEnum<{
             volume: "volume";
-            genie_space: "genie_space";
             warehouse: "warehouse";
+            genie_space: "genie_space";
             postgres_project: "postgres_project";
             postgres_branch: "postgres_branch";
             postgres_database: "postgres_database";
@@ -1010,8 +1018,8 @@ declare const pluginManifestSchema: z.ZodObject<{
       type: z.ZodLiteral<"genie_space">;
     }, z.core.$strict>, z.ZodObject<{
       permission: z.ZodEnum<{
-        CAN_MANAGE: "CAN_MANAGE";
         CAN_EDIT: "CAN_EDIT";
+        CAN_MANAGE: "CAN_MANAGE";
         CAN_READ: "CAN_READ";
       }>;
       alias: z.ZodString;
@@ -1029,8 +1037,8 @@ declare const pluginManifestSchema: z.ZodObject<{
           type: z.ZodLiteral<"kind">;
           resourceKind: z.ZodEnum<{
             volume: "volume";
-            genie_space: "genie_space";
             warehouse: "warehouse";
+            genie_space: "genie_space";
             postgres_project: "postgres_project";
             postgres_branch: "postgres_branch";
             postgres_database: "postgres_database";
@@ -1068,8 +1076,8 @@ declare const pluginManifestSchema: z.ZodObject<{
           type: z.ZodLiteral<"kind">;
           resourceKind: z.ZodEnum<{
             volume: "volume";
-            genie_space: "genie_space";
             warehouse: "warehouse";
+            genie_space: "genie_space";
             postgres_project: "postgres_project";
             postgres_branch: "postgres_branch";
             postgres_database: "postgres_database";

package/dist/shared/src/schemas/manifest.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"manifest.d.ts","names":[],"sources":["../../../../../shared/src/schemas/manifest.ts"],"mappings":";;;cAuXa,wBAAA,EAAwB,CAAA,CAAA,SAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAsUxB,oBAAA,EAAoB,CAAA,CAAA,SAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAshBrB,kBAAA,GAAqB,CAAA,CAAE,KAAA,QAAa,wBAAA;AAAA,KAOpC,cAAA,GAAiB,CAAA,CAAE,KAAA,QAAa,oBAAA"}
+{"version":3,"file":"manifest.d.ts","names":[],"sources":["../../../../../shared/src/schemas/manifest.ts"],"mappings":";;;cAwea,wBAAA,EAAwB,CAAA,CAAA,SAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAsUxB,oBAAA,EAAoB,CAAA,CAAA,SAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAikBrB,kBAAA,GAAqB,CAAA,CAAE,KAAA,QAAa,wBAAA;AAAA,KAOpC,cAAA,GAAiB,CAAA,CAAE,KAAA,QAAa,oBAAA"}

package/dist/shared/src/schemas/manifest.js

@@ -46,6 +46,20 @@ const resourceTypeSchema = z.enum([
 	"experiment",
 	"app"
 ]).describe("Type of Databricks resource");
+/** Apps user_api_scopes for resource types with confirmed OBO support. */
+const SCOPE_BY_TYPE = {
+	sql_warehouse: "sql",
+	serving_endpoint: "model-serving",
+	genie_space: "genie",
+	volume: "files",
+	vector_search_index: "vector-search",
+	uc_connection: "catalog.connections"
+};
+const APP_ONLY_RESOURCE_TYPES = new Set([
+	"secret",
+	"database",
+	"postgres"
+]);
 /** Capabilities that need a user_api_scope but have no resource ID. */
 const capabilityScopeSchema = z.enum([
 	"ai-gateway",
@@ -56,6 +70,23 @@ const capabilityScopeSchema = z.enum([
 	"catalog.schemas:read",
 	"catalog.tables:read"
 ]);
+/**
+* Every Apps user_api_scope (short names; the long forms such as
+* `dashboards.genie` are deprecated aliases). A plugin declares one in its
+* `scopes` when it always calls on behalf of the user, or when the capability
+* has no resource ID.
+*/
+const userApiScopeSchema = z.enum([
+	"sql",
+	"sql:restricted-query",
+	"genie",
+	"postgres",
+	"model-serving",
+	"files",
+	"vector-search",
+	"catalog.connections",
+	...capabilityScopeSchema.options
+]);
 const secretPermissionSchema = z.enum([
 	"READ",
 	"WRITE",
@@ -329,7 +360,7 @@ const pluginScaffoldingRulesSchema = z.object({
 	}
 }).describe("Structured rules for scaffolding agents declared at the plugin level. Each rule is a short directive (≤120 chars).");
 const pluginManifestSchema = z.object({
-	scopes: z.array(capabilityScopeSchema).optional().describe("Capability-only user_api_scopes with no resource ID."),
+	scopes: z.array(userApiScopeSchema).optional().describe("user_api_scopes the plugin always needs, whatever its resources are bound as: calls it makes on behalf of the user unconditionally, or capabilities with no resource ID."),
 	$schema: z.string().optional().describe("Reference to the JSON Schema for validation"),
 	name: z.string().regex(PLUGIN_NAME_PATTERN).describe("Plugin identifier and JS binding. Must start with a lowercase letter; camelCase for multi-word names (e.g. aiSearch)."),
 	displayName: z.string().min(1).describe("Human-readable display name for UI and CLI"),
@@ -392,7 +423,14 @@ const templateResourceRequirementBaseShape = {
 	alias: z.string().min(1).describe("Human-readable label for UI/display only."),
 	resourceKey: z.string().regex(/^[a-z][a-z0-9-]*$/).describe("Stable key for machine use: deduplication, env naming, composite keys."),
 	description: z.string().min(1).describe("Human-readable description of why this resource is needed"),
-	fields: z.record(z.string(), templateFieldEntrySchema).refine((obj) => Object.keys(obj).length >= 1, { message: "fields must contain at least one entry" }).optional().describe("Map of field name to field entry with computed origin.")
+	fields: z.record(z.string(), templateFieldEntrySchema).refine((obj) => Object.keys(obj).length >= 1, { message: "fields must contain at least one entry" }).optional().describe("Map of field name to field entry with computed origin."),
+	scope: z.string().min(1).optional().describe("Apps user_api_scope for this resource type. Present only when the type can run on behalf of the user. Resolved by sync from SCOPE_BY_TYPE."),
+	appOnly: z.literal(true).optional().describe("Present only when the type always runs as the app service principal and must be bound (secret, database, postgres). Resolved by sync from APP_ONLY_RESOURCE_TYPES."),
+	binding: z.object({
+		yamlKey: z.string().min(1).describe("DABs YAML key under the resource entry."),
+		varFields: z.array(z.tuple([z.string(), z.string()])).describe("[manifestField, dabsField] pairs. Each becomes ${var.<resourceKey>_<manifestField>} written to dabsField."),
+		staticFields: z.array(z.tuple([z.string(), z.string()])).optional().describe("[dabsField, value] constant pairs.")
+	}).strict().optional().describe("How this resource type binds in databricks.yml as a DABs app resource. Resolved by sync from DABS_BINDING_BY_TYPE.")
 };
 function makeTemplateResourceVariant(typeLiteral, permission) {
 	return z.object({
@@ -429,7 +467,8 @@ const templatePluginSchema = z.object({
 	resources: z.object({
 		required: z.array(templateResourceRequirementSchema).describe("Resources that must be available for the plugin to function"),
 		optional: z.array(templateResourceRequirementSchema).describe("Resources that enhance functionality but are not mandatory")
-	}).strict().describe("Databricks resource requirements for this plugin")
+	}).strict().describe("Databricks resource requirements for this plugin"),
+	scopes: z.array(userApiScopeSchema).min(1).optional().describe("user_api_scopes the plugin always needs, copied from the plugin manifest. Omitted when empty.")
 }).strict().describe("Plugin manifest with package source information");
 const scaffoldingFlagSchema = z.object({
 	description: z.string().describe("Human-readable description of the flag."),
@@ -472,5 +511,5 @@ const templatePluginsManifestSchema = z.object({
 }).describe("Aggregated plugin manifest for AppKit templates. Read by Databricks CLI during init to discover available plugins and their resource requirements.");
 
 //#endregion
-export { pluginManifestSchema };
+export { APP_ONLY_RESOURCE_TYPES, SCOPE_BY_TYPE, pluginManifestSchema };
 //# sourceMappingURL=manifest.js.map