@davidahmann/mill 0.1.4

package/recipes/node-typescript-next-web/package.json

@@ -0,0 +1,39 @@
+{
+  "name": "mill-next-web-template",
+  "version": "0.1.0",
+  "private": true,
+  "type": "module",
+  "engines": {
+    "node": ">=24.18.1 <25"
+  },
+  "packageManager": "npm@11.16.0",
+  "scripts": {
+    "dev": "next dev",
+    "build": "next build",
+    "start": "next start",
+    "format:check": "prettier --check .",
+    "lint": "eslint . --max-warnings 0",
+    "typecheck": "tsc --noEmit",
+    "test:unit": "vitest run test/unit",
+    "test:integration": "vitest run test/integration",
+    "test:browser": "playwright test",
+    "test:package": "npm run build && node scripts/check-package.mjs",
+    "check": "npm run format:check && npm run lint && npm run typecheck && npm run test:unit && npm run test:integration && npm run test:browser && npm run test:package"
+  },
+  "dependencies": {
+    "next": "16.3.4",
+    "react": "19.2.8",
+    "react-dom": "19.2.8"
+  },
+  "devDependencies": {
+    "@playwright/test": "1.62.1",
+    "@types/node": "24.13.3",
+    "@types/react": "19.2.18",
+    "@types/react-dom": "19.2.5",
+    "eslint": "9.39.5",
+    "eslint-config-next": "16.3.4",
+    "prettier": "3.9.6",
+    "typescript": "6.0.3",
+    "vitest": "4.1.11"
+  }
+}

package/recipes/node-typescript-next-web/playwright.config.ts

@@ -0,0 +1,23 @@
+import { defineConfig, devices } from "@playwright/test";
+
+export default defineConfig({
+  testDir: "test/browser",
+  fullyParallel: false,
+  forbidOnly: true,
+  retries: 0,
+  workers: 1,
+  reporter: "line",
+  outputDir: ".mill-output/test-results",
+  use: {
+    baseURL: "http://127.0.0.1:3100",
+    trace: "retain-on-failure",
+  },
+  projects: [{ name: "chromium", use: devices["Desktop Chrome"] }],
+  webServer: {
+    command:
+      "npm run build && mkdir -p .next/standalone/.next && cp -R .next/static .next/standalone/.next/static && HOSTNAME=127.0.0.1 PORT=3100 node .next/standalone/server.js",
+    url: "http://127.0.0.1:3100/api/health",
+    reuseExistingServer: false,
+    timeout: 60_000,
+  },
+});

package/recipes/node-typescript-next-web/recipe.yaml

@@ -0,0 +1,71 @@
+schemaVersion: "1"
+id: node-typescript-next-web
+version: 1.0.0
+status: supported
+observedAt: "2026-09-02T14:15:00.000Z"
+runtime:
+  node: 24.18.1
+  npm: 11.16.0
+stack:
+  next: 16.3.4
+  react: 19.2.8
+  reactDom: 19.2.8
+  typescript: 6.0.3
+  eslint: 9.39.5
+  prettier: 3.9.6
+  vitest: 4.1.11
+  playwright: 1.62.1
+verifierImage: mcr.microsoft.com/playwright:v1.62.1-noble@sha256:dcc5531e97840b9b5e794f2814476b21571c5124a3fca2267d73041f56e7580e
+registry: https://registry.npmjs.org
+licensePolicy:
+  allowed:
+    - 0BSD
+    - Apache-2.0
+    - BSD-2-Clause
+    - BSD-3-Clause
+    - BlueOak-1.0.0
+    - CC-BY-4.0
+    - CC0-1.0
+    - ISC
+    - LGPL-3.0-or-later
+    - MIT
+    - MPL-2.0
+    - Python-2.0
+  reviewedPackages:
+    - { name: next, license: MIT }
+    - { name: react, license: MIT }
+    - { name: react-dom, license: MIT }
+    - { name: "@playwright/test", license: Apache-2.0 }
+commands:
+  required: [check]
+  native:
+    - format:check
+    - lint
+    - typecheck
+    - test:unit
+    - test:integration
+    - test:browser
+    - test:package
+    - check
+oracles:
+  - id: web-title-and-health
+    commandId: test:browser
+    evidencePaths:
+      - app/page.tsx
+      - app/api/health/route.ts
+      - src/health.ts
+      - test/browser/home.spec.ts
+    proves:
+      - the approved product title renders on the delivered web surface
+      - the delivered health endpoint returns the stable healthy payload
+writablePaths: [.mill-output, .next]
+sources:
+  - https://nodejs.org/en/about/previous-releases
+  - https://nextjs.org/docs/app/getting-started/installation
+  - https://nextjs.org/docs/app/getting-started/deploying
+  - https://react.dev/versions
+  - https://registry.npmjs.org/next/16.3.4
+  - https://registry.npmjs.org/react/19.2.8
+  - https://registry.npmjs.org/react-dom/19.2.8
+  - https://registry.npmjs.org/@playwright/test/1.62.1
+  - https://mcr.microsoft.com/v2/playwright/manifests/v1.62.1-noble

package/recipes/node-typescript-next-web/scripts/check-package.mjs

@@ -0,0 +1,3 @@
+import { access } from "node:fs/promises";
+
+await access(new URL("../.next/standalone/server.js", import.meta.url));

package/recipes/node-typescript-next-web/src/health.ts

@@ -0,0 +1,3 @@
+export function healthPayload() {
+  return { status: "ok" } as const;
+}

package/recipes/node-typescript-next-web/test/browser/home.spec.ts

@@ -0,0 +1,14 @@
+import { expect, test } from "@playwright/test";
+
+test("renders the approved product title and a healthy API", async ({
+  page,
+  request,
+}) => {
+  await page.goto("/");
+  await expect(page.getByRole("heading", { level: 1 })).toHaveText(
+    __MILL_PRODUCT_TITLE_LITERAL__,
+  );
+  const response = await request.get("/api/health");
+  expect(response.ok()).toBe(true);
+  await expect(response.json()).resolves.toEqual({ status: "ok" });
+});

package/recipes/node-typescript-next-web/test/integration/health-route.test.ts

@@ -0,0 +1,11 @@
+import { describe, expect, it } from "vitest";
+
+import { GET } from "../../app/api/health/route";
+
+describe("GET /api/health", () => {
+  it("returns the public health contract", async () => {
+    const response = GET();
+    expect(response.status).toBe(200);
+    await expect(response.json()).resolves.toEqual({ status: "ok" });
+  });
+});

package/recipes/node-typescript-next-web/test/unit/health.test.ts

@@ -0,0 +1,9 @@
+import { describe, expect, it } from "vitest";
+
+import { healthPayload } from "../../src/health";
+
+describe("healthPayload", () => {
+  it("reports a stable healthy state", () => {
+    expect(healthPayload()).toEqual({ status: "ok" });
+  });
+});

package/recipes/node-typescript-next-web/tsconfig.json

@@ -0,0 +1,33 @@
+{
+  "compilerOptions": {
+    "target": "ES2022",
+    "lib": ["dom", "dom.iterable", "es2022"],
+    "allowJs": false,
+    "skipLibCheck": true,
+    "strict": true,
+    "noEmit": true,
+    "esModuleInterop": true,
+    "module": "esnext",
+    "moduleResolution": "bundler",
+    "resolveJsonModule": true,
+    "isolatedModules": true,
+    "jsx": "react-jsx",
+    "incremental": false,
+    "plugins": [
+      {
+        "name": "next"
+      }
+    ],
+    "paths": {
+      "@/*": ["./*"]
+    }
+  },
+  "include": [
+    "next-env.d.ts",
+    "**/*.ts",
+    "**/*.tsx",
+    ".next/types/**/*.ts",
+    ".next/dev/types/**/*.ts"
+  ],
+  "exclude": ["node_modules"]
+}

package/schemas/README.md

@@ -0,0 +1,64 @@
+# Mill contract schemas
+
+These JSON Schema 2020-12 files define Mill's compact durable repository
+contracts. Schema major `1` is fail-closed: unknown fields are rejected. YAML
+documents use the same data model.
+
+- `managed-repository.schema.json`
+- `source-manifest.schema.json`
+- `product-contract.schema.json`
+- `specification-proposal.schema.json`
+- `blueprint.schema.json`
+- `scenario-set.schema.json`
+- `outcome-plan.schema.json`
+- `impact-manifest.schema.json`
+- `mill-config.schema.json`
+- `mill-lock.schema.json`
+- `recipe-manifest.schema.json`
+- `repository-integration-plan.schema.json`
+- `task-packet.schema.json`
+- `context-manifest.schema.json`
+- `worker-profile.schema.json`
+- `worker-invocation.schema.json`
+- `validation-evidence.schema.json`
+- `review-result.schema.json`
+- `delivery-record.schema.json`
+- `audit-report.schema.json`
+- `support-tuple.schema.json`
+- `public-alpha-qualification.schema.json`
+- `release-evidence.schema.json`
+
+Task packets are Git-owned approval contracts. Context manifests, validation
+evidence, review results, and delivery records are schema-versioned operational
+artifacts bound to an exact task/base/candidate and external-effect identity.
+SQLite runs and events, credentials, prompts, raw model streams, and raw command
+output are deliberately not repository contracts and are never accepted as
+authority.
+
+Task packet version `1` remains byte-stable for in-flight Wave 1-3 runs but
+cannot start new work. Version `2` is the continuity contract: it requires an
+approved impact manifest and explicit acceptance, invariant, scenario, coverage,
+and evidence bindings. Every new run requires version `2`.
+
+Recipe manifests bind the one supported generated stack, exact assets, and named
+behavior-specific oracles. Approved scenarios must select a matching recipe
+oracle before generated tasks can use its command evidence. Repository
+integration plans bind greenfield or adoption target identity, approval,
+generator version, file actions, recipe identity, and baseline posture.
+`mill.lock` records the installed integration and ownership map. Verifier
+dependency targets are currently the literal `node_modules`; writable paths are
+comma-free top-level directories because they become explicit read-only or tmpfs
+OCI mounts. Dependency configuration also binds the supported npm manager and
+exact HTTPS registry origin; those fields participate in snapshot identity.
+
+Audit reports bind nine bounded readiness categories to a clean exact candidate.
+Support tuples bind the observed host, runtime, container, worker, forge, and
+recipe and expire explicitly. Public-alpha qualification requires a continuous
+accepted sequence of at least five changes, a rejected/recovered seeded fault,
+complete canaries, and every audit category. Release evidence reconstructs the
+reviewed/main/tag identity and the two-builder, selected-artifact,
+qualification, SBOM, registry, and GitHub Release chain.
+
+JSON Schemas are generated from the runtime Zod contracts in input mode. Run
+`npm run schemas:generate` after an intentional contract change;
+`npm run schemas:check` fails if committed JSON and runtime validation drift.

package/schemas/audit-report.schema.json

@@ -0,0 +1,59 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "type": "object",
+  "properties": {
+    "schemaVersion": { "type": "string", "const": "1" },
+    "candidate": {
+      "type": "object",
+      "properties": {
+        "commit": { "type": "string", "pattern": "^[a-f0-9]{40}$" },
+        "tree": { "type": "string", "pattern": "^[a-f0-9]{40}$" }
+      },
+      "required": ["commit", "tree"],
+      "additionalProperties": false
+    },
+    "generatedAt": {
+      "type": "string",
+      "format": "date-time",
+      "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d:[0-5]\\d(?:\\.\\d+)?(?:Z))$"
+    },
+    "status": { "type": "string", "enum": ["passed", "blocked"] },
+    "checks": {
+      "minItems": 9,
+      "type": "array",
+      "items": {
+        "type": "object",
+        "properties": {
+          "id": { "type": "string", "pattern": "^[a-z0-9][a-z0-9._-]*$" },
+          "category": {
+            "type": "string",
+            "enum": [
+              "product",
+              "code",
+              "ux",
+              "accessibility",
+              "security",
+              "dependencies",
+              "architecture",
+              "operations",
+              "release"
+            ]
+          },
+          "status": { "type": "string", "enum": ["passed", "blocked"] },
+          "summary": { "type": "string", "minLength": 1 },
+          "evidence": {
+            "minItems": 1,
+            "type": "array",
+            "items": { "type": "string", "minLength": 1 }
+          }
+        },
+        "required": ["id", "category", "status", "summary", "evidence"],
+        "additionalProperties": false
+      }
+    }
+  },
+  "required": ["schemaVersion", "candidate", "generatedAt", "status", "checks"],
+  "additionalProperties": false,
+  "$id": "https://github.com/davidahmann/mill/schemas/audit-report.schema.json",
+  "title": "AuditReport"
+}

package/schemas/blueprint.schema.json

@@ -0,0 +1,34 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "type": "object",
+  "properties": {
+    "schemaVersion": { "type": "string", "const": "1" },
+    "id": { "type": "string", "minLength": 1 },
+    "productContractDigest": {
+      "type": "string",
+      "pattern": "^sha256:[a-f0-9]{64}$"
+    },
+    "recipe": { "type": "string", "minLength": 1 },
+    "recipeVersion": { "type": "string", "minLength": 1 },
+    "runtime": { "type": "string", "minLength": 1 },
+    "architecture": {
+      "minItems": 1,
+      "type": "array",
+      "items": { "type": "string", "minLength": 1 }
+    },
+    "risks": { "type": "array", "items": { "type": "string", "minLength": 1 } }
+  },
+  "required": [
+    "schemaVersion",
+    "id",
+    "productContractDigest",
+    "recipe",
+    "recipeVersion",
+    "runtime",
+    "architecture",
+    "risks"
+  ],
+  "additionalProperties": false,
+  "$id": "https://github.com/davidahmann/mill/schemas/blueprint.schema.json",
+  "title": "Blueprint"
+}

package/schemas/context-manifest.schema.json

@@ -0,0 +1,88 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "type": "object",
+  "properties": {
+    "schemaVersion": { "type": "string", "const": "1" },
+    "taskDigest": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" },
+    "baseCommit": { "type": "string", "pattern": "^[a-f0-9]{40}$" },
+    "provider": { "type": "string", "const": "openai" },
+    "adapter": { "type": "string", "const": "codex-cli" },
+    "authOwner": { "type": "string", "const": "operator" },
+    "isolation": { "type": "string", "const": "attended-trusted-host" },
+    "modelIdentity": { "type": "string", "const": "provider-mutable" },
+    "included": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "properties": {
+          "path": { "type": "string", "minLength": 1 },
+          "digest": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" }
+        },
+        "required": ["path", "digest"],
+        "additionalProperties": false
+      }
+    },
+    "excludedPatterns": {
+      "type": "array",
+      "items": { "type": "string", "minLength": 1 }
+    },
+    "disclosure": {
+      "type": "array",
+      "items": { "type": "string", "minLength": 1 }
+    },
+    "contextEpoch": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" },
+    "effectiveInstructions": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "properties": {
+          "path": { "type": "string", "minLength": 1 },
+          "digest": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" }
+        },
+        "required": ["path", "digest"],
+        "additionalProperties": false
+      }
+    },
+    "providerVisibleScope": {
+      "type": "object",
+      "properties": {
+        "repositoryScope": { "type": "string", "const": "worktree" },
+        "suppliedPaths": {
+          "type": "array",
+          "items": { "type": "string", "minLength": 1 }
+        },
+        "writablePatterns": {
+          "type": "array",
+          "items": {
+            "type": "string",
+            "pattern": "^(?!\\/)(?!.*(?:^|\\/)\\.\\.(?:\\/|$))[^*?[\\]\\\\]+(?:\\/\\*\\*)?$"
+          }
+        },
+        "observedReads": { "type": "string", "const": "unavailable" }
+      },
+      "required": [
+        "repositoryScope",
+        "suppliedPaths",
+        "writablePatterns",
+        "observedReads"
+      ],
+      "additionalProperties": false
+    }
+  },
+  "required": [
+    "schemaVersion",
+    "taskDigest",
+    "baseCommit",
+    "provider",
+    "adapter",
+    "authOwner",
+    "isolation",
+    "modelIdentity",
+    "included",
+    "excludedPatterns",
+    "disclosure"
+  ],
+  "additionalProperties": false,
+  "$id": "https://github.com/davidahmann/mill/schemas/context-manifest.schema.json",
+  "title": "ContextManifest"
+}