@miosa/cli 1.1.4 → 1.1.6

package/README.md

@@ -86,6 +86,124 @@ Use `m7i.2xlarge` for the supported baseline tier.
 
 ## Deploy — 60 seconds to first deploy
 
+### Safe application release workflow
+
+Use the application workflow for normal preview, production, and recovery operations.
+It keeps the source directory linked to one exact MIOSA deployment and refuses to report production success until the immutable release, artifact digest, route contract, App Engine placement, database attachment, and required configuration are proven.
+
+```bash
+miosa app link . --app <deployment-id> --environment production
+miosa app pull .
+miosa app preview . --json
+miosa app verify <release-id> . --json
+miosa app promote <release-id> . --yes --json
+```
+
+Promotion and rollback always target an exact release ID.
+They persist an operation record and idempotency key under `.miosa/operations`, so a request timeout can be inspected or resumed without creating duplicate deployment work.
+
+```bash
+miosa app recover <operation-id> . --json
+miosa app recover <operation-id> . --resume --json
+miosa app rollback <release-id> . --yes --json
+```
+
+Declare application-specific acceptance requirements in `.miosa/acceptance.json`.
+The default contract requires HTTP 200 from `/`.
+
+```json
+{
+  "schema_version": 1,
+  "routes": [
+    {
+      "id": "access",
+      "path": "/access",
+      "expected_status": [200],
+      "body_contains": ["Open the working brief"],
+      "content_type": "text/html",
+      "required": true
+    }
+  ],
+  "required_env": ["DATABASE_URL", "BRIEF_AUTH_SECRET"],
+  "database": {
+    "required": true,
+    "health_path": "/api/health"
+  }
+}
+```
+
+Each verification writes a durable, machine-readable receipt under `.miosa/receipts`.
+That receipt is the acceptance evidence for the release.
+
+### Capability-gated release contract
+
+Use `miosa.app.yml` as the primary typed contract when a release depends on routes, secrets, databases, migrations, connectors, jobs, business capabilities, or approval policy.
+
+Every mutation resolves one exact organization, workspace, application, environment, and deployment.
+
+The organization option is the canonical name for the existing tenant identity, while `--tenant` remains a compatibility alias.
+
+```yaml
+schema_version: 1
+name: clinic-intake
+organization: 06737e41-32a2-4c66-bf42-a2e123456789
+workspace: e0211a62-b08e-402a-a171-b6c123456789
+application: clinic-intake
+environment: production
+
+services:
+  web:
+    command: npm start
+    port: 3000
+
+capabilities:
+  routes:
+    - id: homepage
+      path: /
+      expected_status: [200]
+  secrets:
+    - SESSION_SECRET
+  database:
+    required: true
+    health_path: /api/health
+    migration:
+      required: true
+      compatibility: backward_compatible
+  connectors:
+    - id: oauth
+  jobs:
+    - id: daily-sync
+  business:
+    - id: customer-sync
+      path: /api/capabilities/customer-sync
+      expected_status: [200]
+
+policy:
+  approvals_required: 1
+  allowed_environments: [production]
+  require_immutable_release: true
+  require_rollback_path: true
+```
+
+The change workflow saves the same immutable plan locally and in the control-plane operation ledger.
+
+Approvals are bound to the plan fingerprint, and exact apply is idempotent.
+
+```bash
+miosa blueprint validate . --json
+miosa changes plan <release-id> . --json
+miosa changes approve <plan-id> . --actor <identity> --json
+miosa changes apply <plan-id> . --json
+miosa evidence show <receipt-id> . --json
+miosa drift detect <plan-id> . --json
+```
+
+Pre-promotion gates check immutable release identity, secrets, database attachment, migration evidence, connectors, jobs, policy, and declared business capability evidence.
+
+Post-promotion acceptance verifies the active release, running artifact, public routes, data bindings, placement, and declared capabilities.
+
+If acceptance fails, the CLI requests the exact saved rollback version and records whether restoration was confirmed.
+
 Point the CLI at any repo and it handles the rest: framework detection, build wiring, GitHub webhook setup, and live log streaming.
 
 For production app hosting, MIOSA recommends App Engine. It runs apps on the

package/dist/app-contract.d.ts

@@ -0,0 +1,92 @@
+import { type AppCapabilitiesManifest, type AppPolicyManifest, type MiosaAppManifest } from "./app-manifest.js";
+export interface ApplicationScope {
+    organization: string;
+    workspace: string;
+    application: string;
+    environment: string;
+    deployment_id: string;
+}
+export type CandidateReleaseState = "planned" | "approved" | "applying" | "verified" | "blocked" | "failed";
+export interface PlanApproval {
+    actor: string;
+    approved_at: string;
+    plan_fingerprint: string;
+}
+export interface SavedApplicationPlan {
+    schema_version: 1;
+    plan_id: string;
+    fingerprint: string;
+    control_plane_plan_id?: string;
+    scope: ApplicationScope;
+    release: {
+        id: string;
+        version_id: string;
+        artifact_sha256: string;
+        rollback_version_id: string | null;
+    };
+    desired_state: {
+        route: {
+            public_url: string | null;
+        };
+        archive: {
+            artifact_sha256: string;
+        };
+        host: {
+            id: string | null;
+            status: string;
+            appliance_status: string;
+        };
+        database: {
+            attached: boolean;
+        };
+        connectors: {
+            ids: string[];
+        };
+        jobs: {
+            ids: string[];
+        };
+        policy: {
+            fingerprint: string;
+        };
+    };
+    capabilities: AppCapabilitiesManifest;
+    policy: AppPolicyManifest;
+    state: CandidateReleaseState;
+    approvals: PlanApproval[];
+    created_at: string;
+    updated_at: string;
+}
+export interface DriftItem {
+    path: string;
+    expected: unknown;
+    actual: unknown;
+    severity: "blocking" | "warning";
+    reconcile: string;
+}
+export declare function contractFingerprint(value: unknown): string;
+export declare function resolveApplicationContract(appDir: string, link: {
+    deploymentId?: string;
+    name?: string;
+    environment?: string;
+    workspaceId?: string;
+    organizationId?: string;
+}): {
+    manifest: MiosaAppManifest;
+    scope: ApplicationScope;
+    capabilities: AppCapabilitiesManifest;
+    policy: AppPolicyManifest;
+};
+export declare function createSavedPlan(appDir: string, input: {
+    scope: ApplicationScope;
+    release: SavedApplicationPlan["release"];
+    desired_state: SavedApplicationPlan["desired_state"];
+    capabilities: AppCapabilitiesManifest;
+    policy: AppPolicyManifest;
+}): SavedApplicationPlan;
+export declare function savePlan(appDir: string, plan: SavedApplicationPlan): string;
+export declare function loadPlan(appDir: string, planId: string): SavedApplicationPlan;
+export declare function assertPlanIntegrity(plan: SavedApplicationPlan): void;
+export declare function approvePlan(appDir: string, plan: SavedApplicationPlan, actor: string): SavedApplicationPlan;
+export declare function assertPlanApplicable(plan: SavedApplicationPlan, actualScope: ApplicationScope): void;
+export declare function detectContractDrift(expected: Record<string, unknown>, actual: Record<string, unknown>, prefix?: string): DriftItem[];
+//# sourceMappingURL=app-contract.d.ts.map

package/dist/app-contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-contract.d.ts","sourceRoot":"","sources":["../src/app-contract.ts"],"names":[],"mappings":"AAGA,OAAO,EAEL,KAAK,uBAAuB,EAC5B,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACtB,MAAM,mBAAmB,CAAC;AAG3B,MAAM,WAAW,gBAAgB;IAC/B,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,MAAM,qBAAqB,GAC7B,SAAS,GACT,UAAU,GACV,UAAU,GACV,UAAU,GACV,SAAS,GACT,QAAQ,CAAC;AAEb,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,oBAAoB;IACnC,cAAc,EAAE,CAAC,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,KAAK,EAAE,gBAAgB,CAAC;IACxB,OAAO,EAAE;QACP,EAAE,EAAE,MAAM,CAAC;QACX,UAAU,EAAE,MAAM,CAAC;QACnB,eAAe,EAAE,MAAM,CAAC;QACxB,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;KACpC,CAAC;IACF,aAAa,EAAE;QACb,KAAK,EAAE;YAAE,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;SAAE,CAAC;QACrC,OAAO,EAAE;YAAE,eAAe,EAAE,MAAM,CAAA;SAAE,CAAC;QACrC,IAAI,EAAE;YAAE,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;YAAC,MAAM,EAAE,MAAM,CAAC;YAAC,gBAAgB,EAAE,MAAM,CAAA;SAAE,CAAC;QACtE,QAAQ,EAAE;YAAE,QAAQ,EAAE,OAAO,CAAA;SAAE,CAAC;QAChC,UAAU,EAAE;YAAE,GAAG,EAAE,MAAM,EAAE,CAAA;SAAE,CAAC;QAC9B,IAAI,EAAE;YAAE,GAAG,EAAE,MAAM,EAAE,CAAA;SAAE,CAAC;QACxB,MAAM,EAAE;YAAE,WAAW,EAAE,MAAM,CAAA;SAAE,CAAC;KACjC,CAAC;IACF,YAAY,EAAE,uBAAuB,CAAC;IACtC,MAAM,EAAE,iBAAiB,CAAC;IAC1B,KAAK,EAAE,qBAAqB,CAAC;IAC7B,SAAS,EAAE,YAAY,EAAE,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,EAAE,UAAU,GAAG,SAAS,CAAC;IACjC,SAAS,EAAE,MAAM,CAAC;CACnB;AAkCD,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAI1D;AAED,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,MAAM,EACd,IAAI,EAAE;IACJ,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,GACA;IACD,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,KAAK,EAAE,gBAAgB,CAAC;IACxB,YAAY,EAAE,uBAAuB,CAAC;IACtC,MAAM,EAAE,iBAAiB,CAAC;CAC3B,CAsDA;AA8BD,wBAAgB,eAAe,CAC7B,MAAM,EAAE,MAAM,EACd,KAAK,EAAE;IACL,KAAK,EAAE,gBAAgB,CAAC;IACxB,OAAO,EAAE,oBAAoB,CAAC,SAAS,CAAC,CAAC;IACzC,aAAa,EAAE,oBAAoB,CAAC,eAAe,CAAC,CAAC;IACrD,YAAY,EAAE,uBAAuB,CAAC;IACtC,MAAM,EAAE,iBAAiB,CAAC;CAC3B,GACA,oBAAoB,CAuCtB;AAED,wBAAgB,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,oBAAoB,GAAG,MAAM,CAM3E;AAED,wBAAgB,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,oBAAoB,CAM7E;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,oBAAoB,GAAG,IAAI,CAQpE;AAED,wBAAgB,WAAW,CACzB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,oBAAoB,EAC1B,KAAK,EAAE,MAAM,GACZ,oBAAoB,CAsBtB;AAED,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,oBAAoB,EAC1B,WAAW,EAAE,gBAAgB,GAC5B,IAAI,CAeN;AAED,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,MAAM,SAAK,GACV,SAAS,EAAE,CAkCb"}

package/dist/app-contract.js

@@ -0,0 +1,219 @@
+import { createHash, randomUUID } from "node:crypto";
+import fs from "node:fs";
+import path from "node:path";
+import { loadAppManifest, } from "./app-manifest.js";
+import { UserError } from "./errors.js";
+const DEFAULT_CAPABILITIES = {
+    routes: [
+        {
+            id: "root",
+            path: "/",
+            expected_status: [200],
+            required: true,
+        },
+    ],
+    secrets: [],
+    connectors: [],
+    jobs: [],
+    business: [],
+};
+const DEFAULT_POLICY = {
+    approvals_required: 1,
+    allowed_environments: [],
+    require_immutable_release: true,
+    require_rollback_path: true,
+};
+function stable(value) {
+    if (Array.isArray(value))
+        return value.map(stable);
+    if (!value || typeof value !== "object")
+        return value;
+    return Object.fromEntries(Object.entries(value)
+        .sort(([left], [right]) => left.localeCompare(right))
+        .map(([key, nested]) => [key, stable(nested)]));
+}
+export function contractFingerprint(value) {
+    return createHash("sha256")
+        .update(JSON.stringify(stable(value)))
+        .digest("hex");
+}
+export function resolveApplicationContract(appDir, link) {
+    const loaded = loadAppManifest(appDir);
+    const manifest = loaded?.manifest ?? {};
+    const conflicts = [
+        conflict("organization", manifest.organization, link.organizationId),
+        conflict("workspace", manifest.workspace, link.workspaceId),
+        conflict("application", manifest.application, link.name),
+        conflict("environment", manifest.environment, link.environment),
+    ].filter((value) => Boolean(value));
+    if (conflicts.length > 0) {
+        throw new UserError(`Application scope conflicts with the linked deployment: ${conflicts.join("; ")}.`, "Update miosa.app.yml or relink the directory. MIOSA will not guess mutation scope.");
+    }
+    const organization = manifest.organization ?? link.organizationId;
+    const workspace = manifest.workspace ?? link.workspaceId;
+    const application = manifest.application ?? link.name;
+    const environment = manifest.environment ?? link.environment;
+    const deploymentId = link.deploymentId;
+    const missing = [
+        !organization ? "organization" : null,
+        !workspace ? "workspace" : null,
+        !application ? "application" : null,
+        !environment ? "environment" : null,
+        !deploymentId ? "deployment" : null,
+    ].filter((value) => Boolean(value));
+    if (missing.length > 0) {
+        throw new UserError(`Application scope is ambiguous: missing ${missing.join(", ")}.`, "Declare organization, workspace, application, and environment in miosa.app.yml, then run `miosa app link`.");
+    }
+    if (!organization ||
+        !workspace ||
+        !application ||
+        !environment ||
+        !deploymentId) {
+        throw new UserError("Application scope could not be resolved.");
+    }
+    return {
+        manifest,
+        scope: {
+            organization,
+            workspace,
+            application,
+            environment,
+            deployment_id: deploymentId,
+        },
+        capabilities: manifest.capabilities ?? DEFAULT_CAPABILITIES,
+        policy: { ...DEFAULT_POLICY, ...manifest.policy },
+    };
+}
+function conflict(field, declared, linked) {
+    return declared && linked && declared !== linked
+        ? `${field} declares ${declared} but link resolves ${linked}`
+        : null;
+}
+function planDir(appDir) {
+    return path.join(appDir, ".miosa", "plans");
+}
+function planPayload(plan) {
+    return {
+        schema_version: plan.schema_version,
+        plan_id: plan.plan_id,
+        scope: plan.scope,
+        release: plan.release,
+        desired_state: plan.desired_state,
+        capabilities: plan.capabilities,
+        policy: plan.policy,
+    };
+}
+export function createSavedPlan(appDir, input) {
+    if (!input.release.version_id || !input.release.artifact_sha256) {
+        throw new UserError("A saved plan requires an immutable version ID and artifact digest.");
+    }
+    if (input.policy.allowed_environments.length > 0 &&
+        !input.policy.allowed_environments.includes(input.scope.environment)) {
+        throw new UserError(`Policy does not allow environment ${input.scope.environment}.`);
+    }
+    if (input.policy.require_rollback_path && !input.release.rollback_version_id) {
+        throw new UserError("Policy requires an exact rollback version before this plan can be saved.");
+    }
+    const now = new Date().toISOString();
+    const base = {
+        schema_version: 1,
+        plan_id: `plan_${randomUUID()}`,
+        scope: input.scope,
+        release: input.release,
+        desired_state: input.desired_state,
+        capabilities: input.capabilities,
+        policy: input.policy,
+    };
+    const plan = {
+        ...base,
+        fingerprint: contractFingerprint(planPayload(base)),
+        state: "planned",
+        approvals: [],
+        created_at: now,
+        updated_at: now,
+    };
+    savePlan(appDir, plan);
+    return plan;
+}
+export function savePlan(appDir, plan) {
+    const dir = planDir(appDir);
+    fs.mkdirSync(dir, { recursive: true, mode: 0o700 });
+    const file = path.join(dir, `${plan.plan_id}.json`);
+    fs.writeFileSync(file, `${JSON.stringify(plan, null, 2)}\n`, { mode: 0o600 });
+    return file;
+}
+export function loadPlan(appDir, planId) {
+    const file = path.join(planDir(appDir), `${planId}.json`);
+    if (!fs.existsSync(file))
+        throw new UserError(`Saved plan not found: ${planId}`);
+    const plan = JSON.parse(fs.readFileSync(file, "utf8"));
+    assertPlanIntegrity(plan);
+    return plan;
+}
+export function assertPlanIntegrity(plan) {
+    const fingerprint = contractFingerprint(planPayload(plan));
+    if (fingerprint !== plan.fingerprint) {
+        throw new UserError(`Saved plan ${plan.plan_id} has changed since it was created.`, "Create and approve a new plan. Exact apply never accepts a modified plan.");
+    }
+}
+export function approvePlan(appDir, plan, actor) {
+    assertPlanIntegrity(plan);
+    const approval = {
+        actor,
+        approved_at: new Date().toISOString(),
+        plan_fingerprint: plan.fingerprint,
+    };
+    const approvals = [
+        ...plan.approvals.filter((item) => item.actor !== actor),
+        approval,
+    ];
+    const next = {
+        ...plan,
+        approvals,
+        state: approvals.length >= plan.policy.approvals_required
+            ? "approved"
+            : "planned",
+        updated_at: approval.approved_at,
+    };
+    savePlan(appDir, next);
+    return next;
+}
+export function assertPlanApplicable(plan, actualScope) {
+    assertPlanIntegrity(plan);
+    if (contractFingerprint(plan.scope) !== contractFingerprint(actualScope)) {
+        throw new UserError(`Saved plan ${plan.plan_id} does not match the active organization, workspace, application, environment, and deployment.`);
+    }
+    if (plan.approvals.length < plan.policy.approvals_required) {
+        throw new UserError(`Saved plan ${plan.plan_id} has ${plan.approvals.length} approvals, but policy requires ${plan.policy.approvals_required}.`);
+    }
+    if (!plan.approvals.every((item) => item.plan_fingerprint === plan.fingerprint)) {
+        throw new UserError(`Saved plan ${plan.plan_id} contains a stale approval.`);
+    }
+}
+export function detectContractDrift(expected, actual, prefix = "") {
+    const items = [];
+    for (const key of Object.keys(expected).sort()) {
+        const pathName = prefix ? `${prefix}.${key}` : key;
+        const expectedValue = expected[key];
+        const actualValue = actual[key];
+        if (expectedValue &&
+            typeof expectedValue === "object" &&
+            !Array.isArray(expectedValue) &&
+            actualValue &&
+            typeof actualValue === "object" &&
+            !Array.isArray(actualValue)) {
+            items.push(...detectContractDrift(expectedValue, actualValue, pathName));
+        }
+        else if (contractFingerprint(expectedValue) !== contractFingerprint(actualValue)) {
+            items.push({
+                path: pathName,
+                expected: expectedValue,
+                actual: actualValue,
+                severity: "blocking",
+                reconcile: `restore ${pathName} to the saved plan value`,
+            });
+        }
+    }
+    return items;
+}
+//# sourceMappingURL=app-contract.js.map

package/dist/app-contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-contract.js","sourceRoot":"","sources":["../src/app-contract.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EACL,eAAe,GAIhB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AA6DxC,MAAM,oBAAoB,GAA4B;IACpD,MAAM,EAAE;QACN;YACE,EAAE,EAAE,MAAM;YACV,IAAI,EAAE,GAAG;YACT,eAAe,EAAE,CAAC,GAAG,CAAC;YACtB,QAAQ,EAAE,IAAI;SACf;KACF;IACD,OAAO,EAAE,EAAE;IACX,UAAU,EAAE,EAAE;IACd,IAAI,EAAE,EAAE;IACR,QAAQ,EAAE,EAAE;CACb,CAAC;AAEF,MAAM,cAAc,GAAsB;IACxC,kBAAkB,EAAE,CAAC;IACrB,oBAAoB,EAAE,EAAE;IACxB,yBAAyB,EAAE,IAAI;IAC/B,qBAAqB,EAAE,IAAI;CAC5B,CAAC;AAEF,SAAS,MAAM,CAAC,KAAc;IAC5B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACnD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACtD,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC;SAC7C,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;SACpD,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CACjD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAAc;IAChD,OAAO,UAAU,CAAC,QAAQ,CAAC;SACxB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;SACrC,MAAM,CAAC,KAAK,CAAC,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,MAAc,EACd,IAMC;IAOD,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,MAAM,EAAE,QAAQ,IAAI,EAAE,CAAC;IACxC,MAAM,SAAS,GAAG;QAChB,QAAQ,CAAC,cAAc,EAAE,QAAQ,CAAC,YAAY,EAAE,IAAI,CAAC,cAAc,CAAC;QACpE,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,WAAW,CAAC;QAC3D,QAAQ,CAAC,aAAa,EAAE,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC;QACxD,QAAQ,CAAC,aAAa,EAAE,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC;KAChE,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IACrD,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,SAAS,CACjB,2DAA2D,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAClF,oFAAoF,CACrF,CAAC;IACJ,CAAC;IACD,MAAM,YAAY,GAAG,QAAQ,CAAC,YAAY,IAAI,IAAI,CAAC,cAAc,CAAC;IAClE,MAAM,SAAS,GAAG,QAAQ,CAAC,SAAS,IAAI,IAAI,CAAC,WAAW,CAAC;IACzD,MAAM,WAAW,GAAG,QAAQ,CAAC,WAAW,IAAI,IAAI,CAAC,IAAI,CAAC;IACtD,MAAM,WAAW,GAAG,QAAQ,CAAC,WAAW,IAAI,IAAI,CAAC,WAAW,CAAC;IAC7D,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;IACvC,MAAM,OAAO,GAAG;QACd,CAAC,YAAY,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI;QACrC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI;QAC/B,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI;QACnC,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI;QACnC,CAAC,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI;KACpC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IACrD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,SAAS,CACjB,2CAA2C,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAChE,4GAA4G,CAC7G,CAAC;IACJ,CAAC;IACD,IACE,CAAC,YAAY;QACb,CAAC,SAAS;QACV,CAAC,WAAW;QACZ,CAAC,WAAW;QACZ,CAAC,YAAY,EACb,CAAC;QACD,MAAM,IAAI,SAAS,CAAC,0CAA0C,CAAC,CAAC;IAClE,CAAC;IACD,OAAO;QACL,QAAQ;QACR,KAAK,EAAE;YACL,YAAY;YACZ,SAAS;YACT,WAAW;YACX,WAAW;YACX,aAAa,EAAE,YAAY;SAC5B;QACD,YAAY,EAAE,QAAQ,CAAC,YAAY,IAAI,oBAAoB;QAC3D,MAAM,EAAE,EAAE,GAAG,cAAc,EAAE,GAAG,QAAQ,CAAC,MAAM,EAAE;KAClD,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CACf,KAAa,EACb,QAA4B,EAC5B,MAA0B;IAE1B,OAAO,QAAQ,IAAI,MAAM,IAAI,QAAQ,KAAK,MAAM;QAC9C,CAAC,CAAC,GAAG,KAAK,aAAa,QAAQ,sBAAsB,MAAM,EAAE;QAC7D,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,SAAS,OAAO,CAAC,MAAc;IAC7B,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,WAAW,CAClB,IAAqG;IAErG,OAAO;QACL,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,MAAM,EAAE,IAAI,CAAC,MAAM;KACpB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,MAAc,EACd,KAMC;IAED,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC;QAChE,MAAM,IAAI,SAAS,CACjB,oEAAoE,CACrE,CAAC;IACJ,CAAC;IACD,IACE,KAAK,CAAC,MAAM,CAAC,oBAAoB,CAAC,MAAM,GAAG,CAAC;QAC5C,CAAC,KAAK,CAAC,MAAM,CAAC,oBAAoB,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,EACpE,CAAC;QACD,MAAM,IAAI,SAAS,CACjB,qCAAqC,KAAK,CAAC,KAAK,CAAC,WAAW,GAAG,CAChE,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,CAAC,qBAAqB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,mBAAmB,EAAE,CAAC;QAC7E,MAAM,IAAI,SAAS,CACjB,0EAA0E,CAC3E,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,IAAI,GAAG;QACX,cAAc,EAAE,CAAU;QAC1B,OAAO,EAAE,QAAQ,UAAU,EAAE,EAAE;QAC/B,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,CAAC;IACF,MAAM,IAAI,GAAyB;QACjC,GAAG,IAAI;QACP,WAAW,EAAE,mBAAmB,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QACnD,KAAK,EAAE,SAAS;QAChB,SAAS,EAAE,EAAE;QACb,UAAU,EAAE,GAAG;QACf,UAAU,EAAE,GAAG;KAChB,CAAC;IACF,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACvB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,MAAc,EAAE,IAA0B;IACjE,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5B,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,OAAO,CAAC,CAAC;IACpD,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC9E,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,MAAc,EAAE,MAAc;IACrD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,OAAO,CAAC,CAAC;IAC1D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,yBAAyB,MAAM,EAAE,CAAC,CAAC;IACjF,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAyB,CAAC;IAC/E,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAC1B,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,IAA0B;IAC5D,MAAM,WAAW,GAAG,mBAAmB,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3D,IAAI,WAAW,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,IAAI,SAAS,CACjB,cAAc,IAAI,CAAC,OAAO,oCAAoC,EAC9D,2EAA2E,CAC5E,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,WAAW,CACzB,MAAc,EACd,IAA0B,EAC1B,KAAa;IAEb,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAC1B,MAAM,QAAQ,GAAiB;QAC7B,KAAK;QACL,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrC,gBAAgB,EAAE,IAAI,CAAC,WAAW;KACnC,CAAC;IACF,MAAM,SAAS,GAAG;QAChB,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,KAAK,KAAK,CAAC;QACxD,QAAQ;KACT,CAAC;IACF,MAAM,IAAI,GAAyB;QACjC,GAAG,IAAI;QACP,SAAS;QACT,KAAK,EACH,SAAS,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,kBAAkB;YAChD,CAAC,CAAC,UAAU;YACZ,CAAC,CAAC,SAAS;QACf,UAAU,EAAE,QAAQ,CAAC,WAAW;KACjC,CAAC;IACF,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACvB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,IAA0B,EAC1B,WAA6B;IAE7B,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAC1B,IAAI,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,mBAAmB,CAAC,WAAW,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,SAAS,CACjB,cAAc,IAAI,CAAC,OAAO,+FAA+F,CAC1H,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC;QAC3D,MAAM,IAAI,SAAS,CACjB,cAAc,IAAI,CAAC,OAAO,QAAQ,IAAI,CAAC,SAAS,CAAC,MAAM,mCAAmC,IAAI,CAAC,MAAM,CAAC,kBAAkB,GAAG,CAC5H,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,gBAAgB,KAAK,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QAChF,MAAM,IAAI,SAAS,CAAC,cAAc,IAAI,CAAC,OAAO,6BAA6B,CAAC,CAAC;IAC/E,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,QAAiC,EACjC,MAA+B,EAC/B,MAAM,GAAG,EAAE;IAEX,MAAM,KAAK,GAAgB,EAAE,CAAC;IAC9B,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAC/C,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;QACnD,MAAM,aAAa,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QACpC,MAAM,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAChC,IACE,aAAa;YACb,OAAO,aAAa,KAAK,QAAQ;YACjC,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC;YAC7B,WAAW;YACX,OAAO,WAAW,KAAK,QAAQ;YAC/B,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,EAC3B,CAAC;YACD,KAAK,CAAC,IAAI,CACR,GAAG,mBAAmB,CACpB,aAAwC,EACxC,WAAsC,EACtC,QAAQ,CACT,CACF,CAAC;QACJ,CAAC;aAAM,IACL,mBAAmB,CAAC,aAAa,CAAC,KAAK,mBAAmB,CAAC,WAAW,CAAC,EACvE,CAAC;YACD,KAAK,CAAC,IAAI,CAAC;gBACT,IAAI,EAAE,QAAQ;gBACd,QAAQ,EAAE,aAAa;gBACvB,MAAM,EAAE,WAAW;gBACnB,QAAQ,EAAE,UAAU;gBACpB,SAAS,EAAE,WAAW,QAAQ,0BAA0B;aACzD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/app-manifest.d.ts

@@ -2,6 +2,10 @@ export declare const APP_MANIFEST_FILES: readonly ["miosa.app.yml", "miosa.app.y
 export interface MiosaAppManifest {
     schema_version?: number;
     name?: string;
+    organization?: string;
+    workspace?: string;
+    application?: string;
+    environment?: string;
     template?: string;
     framework?: string;
     workdir?: string;
@@ -29,6 +33,52 @@ export interface MiosaAppManifest {
     dependencies?: ProjectDependenciesManifest;
     services?: Record<string, ProjectServiceManifest>;
     requirements?: ProjectRequirementsManifest;
+    capabilities?: AppCapabilitiesManifest;
+    policy?: AppPolicyManifest;
+}
+export interface AppCapabilitiesManifest {
+    routes: Array<{
+        id: string;
+        path: string;
+        expected_status: number[];
+        body_contains?: string[];
+        content_type?: string;
+        required?: boolean;
+    }>;
+    secrets: Array<{
+        name: string;
+        required?: boolean;
+    }>;
+    database?: {
+        required: boolean;
+        health_path?: string;
+        migration?: {
+            required?: boolean;
+            command?: string;
+            compatibility?: "backward_compatible" | "incompatible";
+        };
+    };
+    connectors: Array<{
+        id: string;
+        required?: boolean;
+    }>;
+    jobs: Array<{
+        id: string;
+        required?: boolean;
+    }>;
+    business: Array<{
+        id: string;
+        path: string;
+        expected_status: number[];
+        body_contains?: string[];
+        required?: boolean;
+    }>;
+}
+export interface AppPolicyManifest {
+    approvals_required: number;
+    allowed_environments: string[];
+    require_immutable_release: boolean;
+    require_rollback_path: boolean;
 }
 export interface ProjectSandboxManifest {
     name?: string;

package/dist/app-manifest.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"app-manifest.d.ts","sourceRoot":"","sources":["../src/app-manifest.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,kBAAkB,gEAIrB,CAAC;AAEX,MAAM,WAAW,gBAAgB;IAC/B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC;IACzB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE;QACV,QAAQ,CAAC,EAAE,cAAc,CAAC;QAC1B,OAAO,CAAC,EAAE,cAAc,CAAC;QACzB,MAAM,CAAC,EAAE,cAAc,CAAC;QACxB,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,SAAS,CAAC,EAAE;QACV,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,CAAC;IACF,OAAO,CAAC,EAAE,sBAAsB,CAAC;IACjC,IAAI,CAAC,EAAE,mBAAmB,CAAC;IAC3B,YAAY,CAAC,EAAE,2BAA2B,CAAC;IAC3C,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;IAClD,YAAY,CAAC,EAAE,2BAA2B,CAAC;CAC5C;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,MAAM,WAAW,2BAA2B;IAC1C,OAAO,EAAE,MAAM,GAAG,KAAK,CAAC;CACzB;AAED,MAAM,WAAW,sBAAsB;IACrC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE;QACP,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;CACH;AAED,MAAM,WAAW,2BAA2B;IAC1C,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;CACb;AAaD,MAAM,MAAM,cAAc,GACtB,KAAK,GACL,IAAI,GACJ;IACE,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB,CAAC;AAEN,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,gBAAgB,CAAC;CAC5B;AAED,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,iBAAiB,GAAG,IAAI,CAQrE;AAED,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,iBAAiB,CAgBlE;AAED,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,GACd,gBAAgB,CAMlB;AAED,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,gBAAgB,GACzB,uBAAuB,EAAE,CA0E3B;AAED,wBAAgB,iBAAiB,CAAC,QAAQ,CAAC,EAAE,gBAAgB,GAAG,IAAI,GAAG,MAAM,GAAG,SAAS,CAExF;AAED,wBAAgB,YAAY,CAAC,QAAQ,CAAC,EAAE,gBAAgB,GAAG,IAAI,GAAG,MAAM,GAAG,SAAS,CAEnF;AAED,wBAAgB,oBAAoB,CAClC,QAAQ,CAAC,EAAE,gBAAgB,GAAG,IAAI,GACjC,MAAM,GAAG,SAAS,CAEpB;AAED,wBAAgB,kBAAkB,CAChC,QAAQ,CAAC,EAAE,gBAAgB,GAAG,IAAI,GACjC,MAAM,GAAG,SAAS,CAEpB;AAED,wBAAgB,oBAAoB,CAClC,QAAQ,CAAC,EAAE,gBAAgB,GAAG,IAAI,GACjC,MAAM,GAAG,SAAS,CAEpB;AAED,wBAAgB,kBAAkB,CAChC,QAAQ,CAAC,EAAE,gBAAgB,GAAG,IAAI,GACjC,MAAM,GAAG,SAAS,CAEpB;AAED,wBAAgB,cAAc,CAC5B,QAAQ,CAAC,EAAE,gBAAgB,GAAG,IAAI,GACjC,MAAM,GAAG,SAAS,CAEpB;AAED,wBAAgB,iBAAiB,CAC/B,QAAQ,CAAC,EAAE,gBAAgB,GAAG,IAAI,GACjC,gBAAgB,CAAC,WAAW,CAAC,GAAG,SAAS,CAE3C"}
+{"version":3,"file":"app-manifest.d.ts","sourceRoot":"","sources":["../src/app-manifest.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,kBAAkB,gEAIrB,CAAC;AAEX,MAAM,WAAW,gBAAgB;IAC/B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC;IACzB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE;QACV,QAAQ,CAAC,EAAE,cAAc,CAAC;QAC1B,OAAO,CAAC,EAAE,cAAc,CAAC;QACzB,MAAM,CAAC,EAAE,cAAc,CAAC;QACxB,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,SAAS,CAAC,EAAE;QACV,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,CAAC;IACF,OAAO,CAAC,EAAE,sBAAsB,CAAC;IACjC,IAAI,CAAC,EAAE,mBAAmB,CAAC;IAC3B,YAAY,CAAC,EAAE,2BAA2B,CAAC;IAC3C,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;IAClD,YAAY,CAAC,EAAE,2BAA2B,CAAC;IAC3C,YAAY,CAAC,EAAE,uBAAuB,CAAC;IACvC,MAAM,CAAC,EAAE,iBAAiB,CAAC;CAC5B;AAED,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,KAAK,CAAC;QACZ,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;QACb,eAAe,EAAE,MAAM,EAAE,CAAC;QAC1B,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;QACzB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,EAAE,OAAO,CAAC;KACpB,CAAC,CAAC;IACH,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IACrD,QAAQ,CAAC,EAAE;QACT,QAAQ,EAAE,OAAO,CAAC;QAClB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,SAAS,CAAC,EAAE;YACV,QAAQ,CAAC,EAAE,OAAO,CAAC;YACnB,OAAO,CAAC,EAAE,MAAM,CAAC;YACjB,aAAa,CAAC,EAAE,qBAAqB,GAAG,cAAc,CAAC;SACxD,CAAC;KACH,CAAC;IACF,UAAU,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IACtD,IAAI,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAChD,QAAQ,EAAE,KAAK,CAAC;QACd,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;QACb,eAAe,EAAE,MAAM,EAAE,CAAC;QAC1B,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;QACzB,QAAQ,CAAC,EAAE,OAAO,CAAC;KACpB,CAAC,CAAC;CACJ;AAED,MAAM,WAAW,iBAAiB;IAChC,kBAAkB,EAAE,MAAM,CAAC;IAC3B,oBAAoB,EAAE,MAAM,EAAE,CAAC;IAC/B,yBAAyB,EAAE,OAAO,CAAC;IACnC,qBAAqB,EAAE,OAAO,CAAC;CAChC;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,MAAM,WAAW,2BAA2B;IAC1C,OAAO,EAAE,MAAM,GAAG,KAAK,CAAC;CACzB;AAED,MAAM,WAAW,sBAAsB;IACrC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE;QACP,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;CACH;AAED,MAAM,WAAW,2BAA2B;IAC1C,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;CACb;AAaD,MAAM,MAAM,cAAc,GACtB,KAAK,GACL,IAAI,GACJ;IACE,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB,CAAC;AAEN,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,gBAAgB,CAAC;CAC5B;AAED,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,iBAAiB,GAAG,IAAI,CAQrE;AAED,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,iBAAiB,CAgBlE;AAED,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,GACd,gBAAgB,CAMlB;AAED,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,gBAAgB,GACzB,uBAAuB,EAAE,CAiG3B;AAED,wBAAgB,iBAAiB,CAAC,QAAQ,CAAC,EAAE,gBAAgB,GAAG,IAAI,GAAG,MAAM,GAAG,SAAS,CAExF;AAED,wBAAgB,YAAY,CAAC,QAAQ,CAAC,EAAE,gBAAgB,GAAG,IAAI,GAAG,MAAM,GAAG,SAAS,CAEnF;AAED,wBAAgB,oBAAoB,CAClC,QAAQ,CAAC,EAAE,gBAAgB,GAAG,IAAI,GACjC,MAAM,GAAG,SAAS,CAEpB;AAED,wBAAgB,kBAAkB,CAChC,QAAQ,CAAC,EAAE,gBAAgB,GAAG,IAAI,GACjC,MAAM,GAAG,SAAS,CAEpB;AAED,wBAAgB,oBAAoB,CAClC,QAAQ,CAAC,EAAE,gBAAgB,GAAG,IAAI,GACjC,MAAM,GAAG,SAAS,CAEpB;AAED,wBAAgB,kBAAkB,CAChC,QAAQ,CAAC,EAAE,gBAAgB,GAAG,IAAI,GACjC,MAAM,GAAG,SAAS,CAEpB;AAED,wBAAgB,cAAc,CAC5B,QAAQ,CAAC,EAAE,gBAAgB,GAAG,IAAI,GACjC,MAAM,GAAG,SAAS,CAEpB;AAED,wBAAgB,iBAAiB,CAC/B,QAAQ,CAAC,EAAE,gBAAgB,GAAG,IAAI,GACjC,gBAAgB,CAAC,WAAW,CAAC,GAAG,SAAS,CAE3C"}

package/dist/app-manifest.js

@@ -115,6 +115,29 @@ export function validateProjectManifest(manifest) {
             usedPorts.set(service.port, name);
         }
     }
+    const capabilityIds = new Set();
+    for (const capability of [
+        ...(manifest.capabilities?.routes ?? []),
+        ...(manifest.capabilities?.business ?? []),
+    ]) {
+        if (capabilityIds.has(capability.id)) {
+            issues.push({
+                code: "CAPABILITY_ID_DUPLICATE",
+                path: `capabilities.${capability.id}`,
+                message: `capability ID ${capability.id} is duplicated`,
+                fix: "Give every route and business capability a unique stable ID.",
+            });
+        }
+        capabilityIds.add(capability.id);
+        if (!capability.path.startsWith("/")) {
+            issues.push({
+                code: "CAPABILITY_PATH_INVALID",
+                path: `capabilities.${capability.id}.path`,
+                message: "capability probe paths must start with /",
+                fix: `Set the ${capability.id} probe to an absolute application path.`,
+            });
+        }
+    }
     return issues;
 }
 export function manifestProbePath(manifest) {
@@ -156,6 +179,8 @@ function normalizeManifest(value) {
     const dependencies = recordValue(row["dependencies"]);
     const requirements = recordValue(row["requirements"]);
     const services = normalizeServices(recordValue(row["services"]));
+    const capabilities = normalizeCapabilities(recordValue(row["capabilities"]));
+    const policy = normalizePolicy(recordValue(row["policy"]));
     const workdir = stringValue(sandbox?.["workdir"] ?? row["workdir"] ?? row["workspace"] ?? row["root"]) ?? "/workspace";
     const install = dependencies?.["install"] === false || row["install"] === false
         ? false
@@ -163,6 +188,10 @@ function normalizeManifest(value) {
     return {
         schema_version: numberValue(row["schema_version"]),
         name: stringValue(row["name"]),
+        organization: stringValue(row["organization"]),
+        workspace: stringValue(row["workspace"]),
+        application: stringValue(row["application"]),
+        environment: stringValue(row["environment"]),
         template: stringValue(row["template"] ?? row["template_id"]),
         framework: stringValue(row["framework"]),
         workdir,
@@ -198,6 +227,83 @@ function normalizeManifest(value) {
             secrets: stringArray(requirements?.["secrets"]),
             database: requirements?.["database"] === true,
         },
+        capabilities,
+        policy,
+    };
+}
+function normalizeCapabilities(value) {
+    if (!value)
+        return undefined;
+    const database = recordValue(value["database"]);
+    const migration = recordValue(database?.["migration"]);
+    return {
+        routes: normalizeProbeCapabilities(value["routes"]),
+        secrets: normalizeNamedCapabilities(value["secrets"], "name"),
+        database: database
+            ? {
+                required: database["required"] === true,
+                health_path: stringValue(database["health_path"]),
+                migration: migration
+                    ? {
+                        required: migration["required"] === true,
+                        command: stringValue(migration["command"]),
+                        compatibility: migration["compatibility"] === "backward_compatible" ||
+                            migration["compatibility"] === "incompatible"
+                            ? migration["compatibility"]
+                            : undefined,
+                    }
+                    : undefined,
+            }
+            : undefined,
+        connectors: normalizeNamedCapabilities(value["connectors"], "id"),
+        jobs: normalizeNamedCapabilities(value["jobs"], "id"),
+        business: normalizeProbeCapabilities(value["business"]),
+    };
+}
+function normalizeProbeCapabilities(value) {
+    if (!Array.isArray(value))
+        return [];
+    return value.flatMap((candidate) => {
+        const row = recordValue(candidate);
+        const id = stringValue(row?.["id"]);
+        const routePath = stringValue(row?.["path"]);
+        const statuses = Array.isArray(row?.["expected_status"])
+            ? row["expected_status"].filter((status) => typeof status === "number" && Number.isInteger(status))
+            : [];
+        if (!id || !routePath || statuses.length === 0)
+            return [];
+        return [{
+                id,
+                path: routePath,
+                expected_status: statuses,
+                body_contains: stringArray(row?.["body_contains"]),
+                content_type: stringValue(row?.["content_type"]),
+                required: row?.["required"] !== false,
+            }];
+    });
+}
+function normalizeNamedCapabilities(value, key) {
+    if (!Array.isArray(value))
+        return [];
+    return value.flatMap((candidate) => {
+        if (typeof candidate === "string" && candidate.trim()) {
+            return [{ [key]: candidate.trim(), required: true }];
+        }
+        const row = recordValue(candidate);
+        const name = stringValue(row?.[key]);
+        if (!name)
+            return [];
+        return [{ [key]: name, required: row?.["required"] !== false }];
+    });
+}
+function normalizePolicy(value) {
+    if (!value)
+        return undefined;
+    return {
+        approvals_required: numberValue(value["approvals_required"]) ?? 1,
+        allowed_environments: stringArray(value["allowed_environments"]),
+        require_immutable_release: value["require_immutable_release"] !== false,
+        require_rollback_path: value["require_rollback_path"] !== false,
     };
 }
 function normalizeServices(value) {