@miosa/cli 1.1.5 → 1.1.6

package/README.md

@@ -135,6 +135,75 @@ The default contract requires HTTP 200 from `/`.
 Each verification writes a durable, machine-readable receipt under `.miosa/receipts`.
 That receipt is the acceptance evidence for the release.
 
+### Capability-gated release contract
+
+Use `miosa.app.yml` as the primary typed contract when a release depends on routes, secrets, databases, migrations, connectors, jobs, business capabilities, or approval policy.
+
+Every mutation resolves one exact organization, workspace, application, environment, and deployment.
+
+The organization option is the canonical name for the existing tenant identity, while `--tenant` remains a compatibility alias.
+
+```yaml
+schema_version: 1
+name: clinic-intake
+organization: 06737e41-32a2-4c66-bf42-a2e123456789
+workspace: e0211a62-b08e-402a-a171-b6c123456789
+application: clinic-intake
+environment: production
+
+services:
+  web:
+    command: npm start
+    port: 3000
+
+capabilities:
+  routes:
+    - id: homepage
+      path: /
+      expected_status: [200]
+  secrets:
+    - SESSION_SECRET
+  database:
+    required: true
+    health_path: /api/health
+    migration:
+      required: true
+      compatibility: backward_compatible
+  connectors:
+    - id: oauth
+  jobs:
+    - id: daily-sync
+  business:
+    - id: customer-sync
+      path: /api/capabilities/customer-sync
+      expected_status: [200]
+
+policy:
+  approvals_required: 1
+  allowed_environments: [production]
+  require_immutable_release: true
+  require_rollback_path: true
+```
+
+The change workflow saves the same immutable plan locally and in the control-plane operation ledger.
+
+Approvals are bound to the plan fingerprint, and exact apply is idempotent.
+
+```bash
+miosa blueprint validate . --json
+miosa changes plan <release-id> . --json
+miosa changes approve <plan-id> . --actor <identity> --json
+miosa changes apply <plan-id> . --json
+miosa evidence show <receipt-id> . --json
+miosa drift detect <plan-id> . --json
+```
+
+Pre-promotion gates check immutable release identity, secrets, database attachment, migration evidence, connectors, jobs, policy, and declared business capability evidence.
+
+Post-promotion acceptance verifies the active release, running artifact, public routes, data bindings, placement, and declared capabilities.
+
+If acceptance fails, the CLI requests the exact saved rollback version and records whether restoration was confirmed.
+
 Point the CLI at any repo and it handles the rest: framework detection, build wiring, GitHub webhook setup, and live log streaming.
 
 For production app hosting, MIOSA recommends App Engine. It runs apps on the

package/dist/app-contract.d.ts

@@ -0,0 +1,92 @@
+import { type AppCapabilitiesManifest, type AppPolicyManifest, type MiosaAppManifest } from "./app-manifest.js";
+export interface ApplicationScope {
+    organization: string;
+    workspace: string;
+    application: string;
+    environment: string;
+    deployment_id: string;
+}
+export type CandidateReleaseState = "planned" | "approved" | "applying" | "verified" | "blocked" | "failed";
+export interface PlanApproval {
+    actor: string;
+    approved_at: string;
+    plan_fingerprint: string;
+}
+export interface SavedApplicationPlan {
+    schema_version: 1;
+    plan_id: string;
+    fingerprint: string;
+    control_plane_plan_id?: string;
+    scope: ApplicationScope;
+    release: {
+        id: string;
+        version_id: string;
+        artifact_sha256: string;
+        rollback_version_id: string | null;
+    };
+    desired_state: {
+        route: {
+            public_url: string | null;
+        };
+        archive: {
+            artifact_sha256: string;
+        };
+        host: {
+            id: string | null;
+            status: string;
+            appliance_status: string;
+        };
+        database: {
+            attached: boolean;
+        };
+        connectors: {
+            ids: string[];
+        };
+        jobs: {
+            ids: string[];
+        };
+        policy: {
+            fingerprint: string;
+        };
+    };
+    capabilities: AppCapabilitiesManifest;
+    policy: AppPolicyManifest;
+    state: CandidateReleaseState;
+    approvals: PlanApproval[];
+    created_at: string;
+    updated_at: string;
+}
+export interface DriftItem {
+    path: string;
+    expected: unknown;
+    actual: unknown;
+    severity: "blocking" | "warning";
+    reconcile: string;
+}
+export declare function contractFingerprint(value: unknown): string;
+export declare function resolveApplicationContract(appDir: string, link: {
+    deploymentId?: string;
+    name?: string;
+    environment?: string;
+    workspaceId?: string;
+    organizationId?: string;
+}): {
+    manifest: MiosaAppManifest;
+    scope: ApplicationScope;
+    capabilities: AppCapabilitiesManifest;
+    policy: AppPolicyManifest;
+};
+export declare function createSavedPlan(appDir: string, input: {
+    scope: ApplicationScope;
+    release: SavedApplicationPlan["release"];
+    desired_state: SavedApplicationPlan["desired_state"];
+    capabilities: AppCapabilitiesManifest;
+    policy: AppPolicyManifest;
+}): SavedApplicationPlan;
+export declare function savePlan(appDir: string, plan: SavedApplicationPlan): string;
+export declare function loadPlan(appDir: string, planId: string): SavedApplicationPlan;
+export declare function assertPlanIntegrity(plan: SavedApplicationPlan): void;
+export declare function approvePlan(appDir: string, plan: SavedApplicationPlan, actor: string): SavedApplicationPlan;
+export declare function assertPlanApplicable(plan: SavedApplicationPlan, actualScope: ApplicationScope): void;
+export declare function detectContractDrift(expected: Record<string, unknown>, actual: Record<string, unknown>, prefix?: string): DriftItem[];
+//# sourceMappingURL=app-contract.d.ts.map

package/dist/app-contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-contract.d.ts","sourceRoot":"","sources":["../src/app-contract.ts"],"names":[],"mappings":"AAGA,OAAO,EAEL,KAAK,uBAAuB,EAC5B,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACtB,MAAM,mBAAmB,CAAC;AAG3B,MAAM,WAAW,gBAAgB;IAC/B,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,MAAM,qBAAqB,GAC7B,SAAS,GACT,UAAU,GACV,UAAU,GACV,UAAU,GACV,SAAS,GACT,QAAQ,CAAC;AAEb,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,oBAAoB;IACnC,cAAc,EAAE,CAAC,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,KAAK,EAAE,gBAAgB,CAAC;IACxB,OAAO,EAAE;QACP,EAAE,EAAE,MAAM,CAAC;QACX,UAAU,EAAE,MAAM,CAAC;QACnB,eAAe,EAAE,MAAM,CAAC;QACxB,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;KACpC,CAAC;IACF,aAAa,EAAE;QACb,KAAK,EAAE;YAAE,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;SAAE,CAAC;QACrC,OAAO,EAAE;YAAE,eAAe,EAAE,MAAM,CAAA;SAAE,CAAC;QACrC,IAAI,EAAE;YAAE,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;YAAC,MAAM,EAAE,MAAM,CAAC;YAAC,gBAAgB,EAAE,MAAM,CAAA;SAAE,CAAC;QACtE,QAAQ,EAAE;YAAE,QAAQ,EAAE,OAAO,CAAA;SAAE,CAAC;QAChC,UAAU,EAAE;YAAE,GAAG,EAAE,MAAM,EAAE,CAAA;SAAE,CAAC;QAC9B,IAAI,EAAE;YAAE,GAAG,EAAE,MAAM,EAAE,CAAA;SAAE,CAAC;QACxB,MAAM,EAAE;YAAE,WAAW,EAAE,MAAM,CAAA;SAAE,CAAC;KACjC,CAAC;IACF,YAAY,EAAE,uBAAuB,CAAC;IACtC,MAAM,EAAE,iBAAiB,CAAC;IAC1B,KAAK,EAAE,qBAAqB,CAAC;IAC7B,SAAS,EAAE,YAAY,EAAE,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,EAAE,UAAU,GAAG,SAAS,CAAC;IACjC,SAAS,EAAE,MAAM,CAAC;CACnB;AAkCD,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAI1D;AAED,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,MAAM,EACd,IAAI,EAAE;IACJ,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,GACA;IACD,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,KAAK,EAAE,gBAAgB,CAAC;IACxB,YAAY,EAAE,uBAAuB,CAAC;IACtC,MAAM,EAAE,iBAAiB,CAAC;CAC3B,CAsDA;AA8BD,wBAAgB,eAAe,CAC7B,MAAM,EAAE,MAAM,EACd,KAAK,EAAE;IACL,KAAK,EAAE,gBAAgB,CAAC;IACxB,OAAO,EAAE,oBAAoB,CAAC,SAAS,CAAC,CAAC;IACzC,aAAa,EAAE,oBAAoB,CAAC,eAAe,CAAC,CAAC;IACrD,YAAY,EAAE,uBAAuB,CAAC;IACtC,MAAM,EAAE,iBAAiB,CAAC;CAC3B,GACA,oBAAoB,CAuCtB;AAED,wBAAgB,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,oBAAoB,GAAG,MAAM,CAM3E;AAED,wBAAgB,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,oBAAoB,CAM7E;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,oBAAoB,GAAG,IAAI,CAQpE;AAED,wBAAgB,WAAW,CACzB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,oBAAoB,EAC1B,KAAK,EAAE,MAAM,GACZ,oBAAoB,CAsBtB;AAED,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,oBAAoB,EAC1B,WAAW,EAAE,gBAAgB,GAC5B,IAAI,CAeN;AAED,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,MAAM,SAAK,GACV,SAAS,EAAE,CAkCb"}

package/dist/app-contract.js

@@ -0,0 +1,219 @@
+import { createHash, randomUUID } from "node:crypto";
+import fs from "node:fs";
+import path from "node:path";
+import { loadAppManifest, } from "./app-manifest.js";
+import { UserError } from "./errors.js";
+const DEFAULT_CAPABILITIES = {
+    routes: [
+        {
+            id: "root",
+            path: "/",
+            expected_status: [200],
+            required: true,
+        },
+    ],
+    secrets: [],
+    connectors: [],
+    jobs: [],
+    business: [],
+};
+const DEFAULT_POLICY = {
+    approvals_required: 1,
+    allowed_environments: [],
+    require_immutable_release: true,
+    require_rollback_path: true,
+};
+function stable(value) {
+    if (Array.isArray(value))
+        return value.map(stable);
+    if (!value || typeof value !== "object")
+        return value;
+    return Object.fromEntries(Object.entries(value)
+        .sort(([left], [right]) => left.localeCompare(right))
+        .map(([key, nested]) => [key, stable(nested)]));
+}
+export function contractFingerprint(value) {
+    return createHash("sha256")
+        .update(JSON.stringify(stable(value)))
+        .digest("hex");
+}
+export function resolveApplicationContract(appDir, link) {
+    const loaded = loadAppManifest(appDir);
+    const manifest = loaded?.manifest ?? {};
+    const conflicts = [
+        conflict("organization", manifest.organization, link.organizationId),
+        conflict("workspace", manifest.workspace, link.workspaceId),
+        conflict("application", manifest.application, link.name),
+        conflict("environment", manifest.environment, link.environment),
+    ].filter((value) => Boolean(value));
+    if (conflicts.length > 0) {
+        throw new UserError(`Application scope conflicts with the linked deployment: ${conflicts.join("; ")}.`, "Update miosa.app.yml or relink the directory. MIOSA will not guess mutation scope.");
+    }
+    const organization = manifest.organization ?? link.organizationId;
+    const workspace = manifest.workspace ?? link.workspaceId;
+    const application = manifest.application ?? link.name;
+    const environment = manifest.environment ?? link.environment;
+    const deploymentId = link.deploymentId;
+    const missing = [
+        !organization ? "organization" : null,
+        !workspace ? "workspace" : null,
+        !application ? "application" : null,
+        !environment ? "environment" : null,
+        !deploymentId ? "deployment" : null,
+    ].filter((value) => Boolean(value));
+    if (missing.length > 0) {
+        throw new UserError(`Application scope is ambiguous: missing ${missing.join(", ")}.`, "Declare organization, workspace, application, and environment in miosa.app.yml, then run `miosa app link`.");
+    }
+    if (!organization ||
+        !workspace ||
+        !application ||
+        !environment ||
+        !deploymentId) {
+        throw new UserError("Application scope could not be resolved.");
+    }
+    return {
+        manifest,
+        scope: {
+            organization,
+            workspace,
+            application,
+            environment,
+            deployment_id: deploymentId,
+        },
+        capabilities: manifest.capabilities ?? DEFAULT_CAPABILITIES,
+        policy: { ...DEFAULT_POLICY, ...manifest.policy },
+    };
+}
+function conflict(field, declared, linked) {
+    return declared && linked && declared !== linked
+        ? `${field} declares ${declared} but link resolves ${linked}`
+        : null;
+}
+function planDir(appDir) {
+    return path.join(appDir, ".miosa", "plans");
+}
+function planPayload(plan) {
+    return {
+        schema_version: plan.schema_version,
+        plan_id: plan.plan_id,
+        scope: plan.scope,
+        release: plan.release,
+        desired_state: plan.desired_state,
+        capabilities: plan.capabilities,
+        policy: plan.policy,
+    };
+}
+export function createSavedPlan(appDir, input) {
+    if (!input.release.version_id || !input.release.artifact_sha256) {
+        throw new UserError("A saved plan requires an immutable version ID and artifact digest.");
+    }
+    if (input.policy.allowed_environments.length > 0 &&
+        !input.policy.allowed_environments.includes(input.scope.environment)) {
+        throw new UserError(`Policy does not allow environment ${input.scope.environment}.`);
+    }
+    if (input.policy.require_rollback_path && !input.release.rollback_version_id) {
+        throw new UserError("Policy requires an exact rollback version before this plan can be saved.");
+    }
+    const now = new Date().toISOString();
+    const base = {
+        schema_version: 1,
+        plan_id: `plan_${randomUUID()}`,
+        scope: input.scope,
+        release: input.release,
+        desired_state: input.desired_state,
+        capabilities: input.capabilities,
+        policy: input.policy,
+    };
+    const plan = {
+        ...base,
+        fingerprint: contractFingerprint(planPayload(base)),
+        state: "planned",
+        approvals: [],
+        created_at: now,
+        updated_at: now,
+    };
+    savePlan(appDir, plan);
+    return plan;
+}
+export function savePlan(appDir, plan) {
+    const dir = planDir(appDir);
+    fs.mkdirSync(dir, { recursive: true, mode: 0o700 });
+    const file = path.join(dir, `${plan.plan_id}.json`);
+    fs.writeFileSync(file, `${JSON.stringify(plan, null, 2)}\n`, { mode: 0o600 });
+    return file;
+}
+export function loadPlan(appDir, planId) {
+    const file = path.join(planDir(appDir), `${planId}.json`);
+    if (!fs.existsSync(file))
+        throw new UserError(`Saved plan not found: ${planId}`);
+    const plan = JSON.parse(fs.readFileSync(file, "utf8"));
+    assertPlanIntegrity(plan);
+    return plan;
+}
+export function assertPlanIntegrity(plan) {
+    const fingerprint = contractFingerprint(planPayload(plan));
+    if (fingerprint !== plan.fingerprint) {
+        throw new UserError(`Saved plan ${plan.plan_id} has changed since it was created.`, "Create and approve a new plan. Exact apply never accepts a modified plan.");
+    }
+}
+export function approvePlan(appDir, plan, actor) {
+    assertPlanIntegrity(plan);
+    const approval = {
+        actor,
+        approved_at: new Date().toISOString(),
+        plan_fingerprint: plan.fingerprint,
+    };
+    const approvals = [
+        ...plan.approvals.filter((item) => item.actor !== actor),
+        approval,
+    ];
+    const next = {
+        ...plan,
+        approvals,
+        state: approvals.length >= plan.policy.approvals_required
+            ? "approved"
+            : "planned",
+        updated_at: approval.approved_at,
+    };
+    savePlan(appDir, next);
+    return next;
+}
+export function assertPlanApplicable(plan, actualScope) {
+    assertPlanIntegrity(plan);
+    if (contractFingerprint(plan.scope) !== contractFingerprint(actualScope)) {
+        throw new UserError(`Saved plan ${plan.plan_id} does not match the active organization, workspace, application, environment, and deployment.`);
+    }
+    if (plan.approvals.length < plan.policy.approvals_required) {
+        throw new UserError(`Saved plan ${plan.plan_id} has ${plan.approvals.length} approvals, but policy requires ${plan.policy.approvals_required}.`);
+    }
+    if (!plan.approvals.every((item) => item.plan_fingerprint === plan.fingerprint)) {
+        throw new UserError(`Saved plan ${plan.plan_id} contains a stale approval.`);
+    }
+}
+export function detectContractDrift(expected, actual, prefix = "") {
+    const items = [];
+    for (const key of Object.keys(expected).sort()) {
+        const pathName = prefix ? `${prefix}.${key}` : key;
+        const expectedValue = expected[key];
+        const actualValue = actual[key];
+        if (expectedValue &&
+            typeof expectedValue === "object" &&
+            !Array.isArray(expectedValue) &&
+            actualValue &&
+            typeof actualValue === "object" &&
+            !Array.isArray(actualValue)) {
+            items.push(...detectContractDrift(expectedValue, actualValue, pathName));
+        }
+        else if (contractFingerprint(expectedValue) !== contractFingerprint(actualValue)) {
+            items.push({
+                path: pathName,
+                expected: expectedValue,
+                actual: actualValue,
+                severity: "blocking",
+                reconcile: `restore ${pathName} to the saved plan value`,
+            });
+        }
+    }
+    return items;
+}
+//# sourceMappingURL=app-contract.js.map

package/dist/app-contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-contract.js","sourceRoot":"","sources":["../src/app-contract.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EACL,eAAe,GAIhB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AA6DxC,MAAM,oBAAoB,GAA4B;IACpD,MAAM,EAAE;QACN;YACE,EAAE,EAAE,MAAM;YACV,IAAI,EAAE,GAAG;YACT,eAAe,EAAE,CAAC,GAAG,CAAC;YACtB,QAAQ,EAAE,IAAI;SACf;KACF;IACD,OAAO,EAAE,EAAE;IACX,UAAU,EAAE,EAAE;IACd,IAAI,EAAE,EAAE;IACR,QAAQ,EAAE,EAAE;CACb,CAAC;AAEF,MAAM,cAAc,GAAsB;IACxC,kBAAkB,EAAE,CAAC;IACrB,oBAAoB,EAAE,EAAE;IACxB,yBAAyB,EAAE,IAAI;IAC/B,qBAAqB,EAAE,IAAI;CAC5B,CAAC;AAEF,SAAS,MAAM,CAAC,KAAc;IAC5B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACnD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACtD,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC;SAC7C,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;SACpD,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CACjD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAAc;IAChD,OAAO,UAAU,CAAC,QAAQ,CAAC;SACxB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;SACrC,MAAM,CAAC,KAAK,CAAC,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,MAAc,EACd,IAMC;IAOD,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,MAAM,EAAE,QAAQ,IAAI,EAAE,CAAC;IACxC,MAAM,SAAS,GAAG;QAChB,QAAQ,CAAC,cAAc,EAAE,QAAQ,CAAC,YAAY,EAAE,IAAI,CAAC,cAAc,CAAC;QACpE,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,WAAW,CAAC;QAC3D,QAAQ,CAAC,aAAa,EAAE,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC;QACxD,QAAQ,CAAC,aAAa,EAAE,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC;KAChE,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IACrD,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,SAAS,CACjB,2DAA2D,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAClF,oFAAoF,CACrF,CAAC;IACJ,CAAC;IACD,MAAM,YAAY,GAAG,QAAQ,CAAC,YAAY,IAAI,IAAI,CAAC,cAAc,CAAC;IAClE,MAAM,SAAS,GAAG,QAAQ,CAAC,SAAS,IAAI,IAAI,CAAC,WAAW,CAAC;IACzD,MAAM,WAAW,GAAG,QAAQ,CAAC,WAAW,IAAI,IAAI,CAAC,IAAI,CAAC;IACtD,MAAM,WAAW,GAAG,QAAQ,CAAC,WAAW,IAAI,IAAI,CAAC,WAAW,CAAC;IAC7D,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;IACvC,MAAM,OAAO,GAAG;QACd,CAAC,YAAY,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI;QACrC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI;QAC/B,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI;QACnC,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI;QACnC,CAAC,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI;KACpC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IACrD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,SAAS,CACjB,2CAA2C,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAChE,4GAA4G,CAC7G,CAAC;IACJ,CAAC;IACD,IACE,CAAC,YAAY;QACb,CAAC,SAAS;QACV,CAAC,WAAW;QACZ,CAAC,WAAW;QACZ,CAAC,YAAY,EACb,CAAC;QACD,MAAM,IAAI,SAAS,CAAC,0CAA0C,CAAC,CAAC;IAClE,CAAC;IACD,OAAO;QACL,QAAQ;QACR,KAAK,EAAE;YACL,YAAY;YACZ,SAAS;YACT,WAAW;YACX,WAAW;YACX,aAAa,EAAE,YAAY;SAC5B;QACD,YAAY,EAAE,QAAQ,CAAC,YAAY,IAAI,oBAAoB;QAC3D,MAAM,EAAE,EAAE,GAAG,cAAc,EAAE,GAAG,QAAQ,CAAC,MAAM,EAAE;KAClD,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CACf,KAAa,EACb,QAA4B,EAC5B,MAA0B;IAE1B,OAAO,QAAQ,IAAI,MAAM,IAAI,QAAQ,KAAK,MAAM;QAC9C,CAAC,CAAC,GAAG,KAAK,aAAa,QAAQ,sBAAsB,MAAM,EAAE;QAC7D,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,SAAS,OAAO,CAAC,MAAc;IAC7B,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,WAAW,CAClB,IAAqG;IAErG,OAAO;QACL,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,MAAM,EAAE,IAAI,CAAC,MAAM;KACpB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,MAAc,EACd,KAMC;IAED,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC;QAChE,MAAM,IAAI,SAAS,CACjB,oEAAoE,CACrE,CAAC;IACJ,CAAC;IACD,IACE,KAAK,CAAC,MAAM,CAAC,oBAAoB,CAAC,MAAM,GAAG,CAAC;QAC5C,CAAC,KAAK,CAAC,MAAM,CAAC,oBAAoB,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,EACpE,CAAC;QACD,MAAM,IAAI,SAAS,CACjB,qCAAqC,KAAK,CAAC,KAAK,CAAC,WAAW,GAAG,CAChE,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,CAAC,qBAAqB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,mBAAmB,EAAE,CAAC;QAC7E,MAAM,IAAI,SAAS,CACjB,0EAA0E,CAC3E,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,IAAI,GAAG;QACX,cAAc,EAAE,CAAU;QAC1B,OAAO,EAAE,QAAQ,UAAU,EAAE,EAAE;QAC/B,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,CAAC;IACF,MAAM,IAAI,GAAyB;QACjC,GAAG,IAAI;QACP,WAAW,EAAE,mBAAmB,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QACnD,KAAK,EAAE,SAAS;QAChB,SAAS,EAAE,EAAE;QACb,UAAU,EAAE,GAAG;QACf,UAAU,EAAE,GAAG;KAChB,CAAC;IACF,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACvB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,MAAc,EAAE,IAA0B;IACjE,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5B,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,OAAO,CAAC,CAAC;IACpD,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC9E,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,MAAc,EAAE,MAAc;IACrD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,OAAO,CAAC,CAAC;IAC1D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,yBAAyB,MAAM,EAAE,CAAC,CAAC;IACjF,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAyB,CAAC;IAC/E,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAC1B,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,IAA0B;IAC5D,MAAM,WAAW,GAAG,mBAAmB,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3D,IAAI,WAAW,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,IAAI,SAAS,CACjB,cAAc,IAAI,CAAC,OAAO,oCAAoC,EAC9D,2EAA2E,CAC5E,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,WAAW,CACzB,MAAc,EACd,IAA0B,EAC1B,KAAa;IAEb,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAC1B,MAAM,QAAQ,GAAiB;QAC7B,KAAK;QACL,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrC,gBAAgB,EAAE,IAAI,CAAC,WAAW;KACnC,CAAC;IACF,MAAM,SAAS,GAAG;QAChB,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,KAAK,KAAK,CAAC;QACxD,QAAQ;KACT,CAAC;IACF,MAAM,IAAI,GAAyB;QACjC,GAAG,IAAI;QACP,SAAS;QACT,KAAK,EACH,SAAS,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,kBAAkB;YAChD,CAAC,CAAC,UAAU;YACZ,CAAC,CAAC,SAAS;QACf,UAAU,EAAE,QAAQ,CAAC,WAAW;KACjC,CAAC;IACF,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACvB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,IAA0B,EAC1B,WAA6B;IAE7B,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAC1B,IAAI,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,mBAAmB,CAAC,WAAW,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,SAAS,CACjB,cAAc,IAAI,CAAC,OAAO,+FAA+F,CAC1H,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC;QAC3D,MAAM,IAAI,SAAS,CACjB,cAAc,IAAI,CAAC,OAAO,QAAQ,IAAI,CAAC,SAAS,CAAC,MAAM,mCAAmC,IAAI,CAAC,MAAM,CAAC,kBAAkB,GAAG,CAC5H,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,gBAAgB,KAAK,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QAChF,MAAM,IAAI,SAAS,CAAC,cAAc,IAAI,CAAC,OAAO,6BAA6B,CAAC,CAAC;IAC/E,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,QAAiC,EACjC,MAA+B,EAC/B,MAAM,GAAG,EAAE;IAEX,MAAM,KAAK,GAAgB,EAAE,CAAC;IAC9B,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAC/C,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;QACnD,MAAM,aAAa,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QACpC,MAAM,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAChC,IACE,aAAa;YACb,OAAO,aAAa,KAAK,QAAQ;YACjC,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC;YAC7B,WAAW;YACX,OAAO,WAAW,KAAK,QAAQ;YAC/B,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,EAC3B,CAAC;YACD,KAAK,CAAC,IAAI,CACR,GAAG,mBAAmB,CACpB,aAAwC,EACxC,WAAsC,EACtC,QAAQ,CACT,CACF,CAAC;QACJ,CAAC;aAAM,IACL,mBAAmB,CAAC,aAAa,CAAC,KAAK,mBAAmB,CAAC,WAAW,CAAC,EACvE,CAAC;YACD,KAAK,CAAC,IAAI,CAAC;gBACT,IAAI,EAAE,QAAQ;gBACd,QAAQ,EAAE,aAAa;gBACvB,MAAM,EAAE,WAAW;gBACnB,QAAQ,EAAE,UAAU;gBACpB,SAAS,EAAE,WAAW,QAAQ,0BAA0B;aACzD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/app-manifest.d.ts

@@ -2,6 +2,10 @@ export declare const APP_MANIFEST_FILES: readonly ["miosa.app.yml", "miosa.app.y
 export interface MiosaAppManifest {
     schema_version?: number;
     name?: string;
+    organization?: string;
+    workspace?: string;
+    application?: string;
+    environment?: string;
     template?: string;
     framework?: string;
     workdir?: string;
@@ -29,6 +33,52 @@ export interface MiosaAppManifest {
     dependencies?: ProjectDependenciesManifest;
     services?: Record<string, ProjectServiceManifest>;
     requirements?: ProjectRequirementsManifest;
+    capabilities?: AppCapabilitiesManifest;
+    policy?: AppPolicyManifest;
+}
+export interface AppCapabilitiesManifest {
+    routes: Array<{
+        id: string;
+        path: string;
+        expected_status: number[];
+        body_contains?: string[];
+        content_type?: string;
+        required?: boolean;
+    }>;
+    secrets: Array<{
+        name: string;
+        required?: boolean;
+    }>;
+    database?: {
+        required: boolean;
+        health_path?: string;
+        migration?: {
+            required?: boolean;
+            command?: string;
+            compatibility?: "backward_compatible" | "incompatible";
+        };
+    };
+    connectors: Array<{
+        id: string;
+        required?: boolean;
+    }>;
+    jobs: Array<{
+        id: string;
+        required?: boolean;
+    }>;
+    business: Array<{
+        id: string;
+        path: string;
+        expected_status: number[];
+        body_contains?: string[];
+        required?: boolean;
+    }>;
+}
+export interface AppPolicyManifest {
+    approvals_required: number;
+    allowed_environments: string[];
+    require_immutable_release: boolean;
+    require_rollback_path: boolean;
 }
 export interface ProjectSandboxManifest {
     name?: string;

package/dist/app-manifest.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"app-manifest.d.ts","sourceRoot":"","sources":["../src/app-manifest.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,kBAAkB,gEAIrB,CAAC;AAEX,MAAM,WAAW,gBAAgB;IAC/B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC;IACzB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE;QACV,QAAQ,CAAC,EAAE,cAAc,CAAC;QAC1B,OAAO,CAAC,EAAE,cAAc,CAAC;QACzB,MAAM,CAAC,EAAE,cAAc,CAAC;QACxB,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,SAAS,CAAC,EAAE;QACV,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,CAAC;IACF,OAAO,CAAC,EAAE,sBAAsB,CAAC;IACjC,IAAI,CAAC,EAAE,mBAAmB,CAAC;IAC3B,YAAY,CAAC,EAAE,2BAA2B,CAAC;IAC3C,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;IAClD,YAAY,CAAC,EAAE,2BAA2B,CAAC;CAC5C;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,MAAM,WAAW,2BAA2B;IAC1C,OAAO,EAAE,MAAM,GAAG,KAAK,CAAC;CACzB;AAED,MAAM,WAAW,sBAAsB;IACrC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE;QACP,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;CACH;AAED,MAAM,WAAW,2BAA2B;IAC1C,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;CACb;AAaD,MAAM,MAAM,cAAc,GACtB,KAAK,GACL,IAAI,GACJ;IACE,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB,CAAC;AAEN,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,gBAAgB,CAAC;CAC5B;AAED,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,iBAAiB,GAAG,IAAI,CAQrE;AAED,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,iBAAiB,CAgBlE;AAED,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,GACd,gBAAgB,CAMlB;AAED,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,gBAAgB,GACzB,uBAAuB,EAAE,CA0E3B;AAED,wBAAgB,iBAAiB,CAAC,QAAQ,CAAC,EAAE,gBAAgB,GAAG,IAAI,GAAG,MAAM,GAAG,SAAS,CAExF;AAED,wBAAgB,YAAY,CAAC,QAAQ,CAAC,EAAE,gBAAgB,GAAG,IAAI,GAAG,MAAM,GAAG,SAAS,CAEnF;AAED,wBAAgB,oBAAoB,CAClC,QAAQ,CAAC,EAAE,gBAAgB,GAAG,IAAI,GACjC,MAAM,GAAG,SAAS,CAEpB;AAED,wBAAgB,kBAAkB,CAChC,QAAQ,CAAC,EAAE,gBAAgB,GAAG,IAAI,GACjC,MAAM,GAAG,SAAS,CAEpB;AAED,wBAAgB,oBAAoB,CAClC,QAAQ,CAAC,EAAE,gBAAgB,GAAG,IAAI,GACjC,MAAM,GAAG,SAAS,CAEpB;AAED,wBAAgB,kBAAkB,CAChC,QAAQ,CAAC,EAAE,gBAAgB,GAAG,IAAI,GACjC,MAAM,GAAG,SAAS,CAEpB;AAED,wBAAgB,cAAc,CAC5B,QAAQ,CAAC,EAAE,gBAAgB,GAAG,IAAI,GACjC,MAAM,GAAG,SAAS,CAEpB;AAED,wBAAgB,iBAAiB,CAC/B,QAAQ,CAAC,EAAE,gBAAgB,GAAG,IAAI,GACjC,gBAAgB,CAAC,WAAW,CAAC,GAAG,SAAS,CAE3C"}
+{"version":3,"file":"app-manifest.d.ts","sourceRoot":"","sources":["../src/app-manifest.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,kBAAkB,gEAIrB,CAAC;AAEX,MAAM,WAAW,gBAAgB;IAC/B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC;IACzB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE;QACV,QAAQ,CAAC,EAAE,cAAc,CAAC;QAC1B,OAAO,CAAC,EAAE,cAAc,CAAC;QACzB,MAAM,CAAC,EAAE,cAAc,CAAC;QACxB,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,SAAS,CAAC,EAAE;QACV,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,CAAC;IACF,OAAO,CAAC,EAAE,sBAAsB,CAAC;IACjC,IAAI,CAAC,EAAE,mBAAmB,CAAC;IAC3B,YAAY,CAAC,EAAE,2BAA2B,CAAC;IAC3C,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;IAClD,YAAY,CAAC,EAAE,2BAA2B,CAAC;IAC3C,YAAY,CAAC,EAAE,uBAAuB,CAAC;IACvC,MAAM,CAAC,EAAE,iBAAiB,CAAC;CAC5B;AAED,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,KAAK,CAAC;QACZ,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;QACb,eAAe,EAAE,MAAM,EAAE,CAAC;QAC1B,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;QACzB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,EAAE,OAAO,CAAC;KACpB,CAAC,CAAC;IACH,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IACrD,QAAQ,CAAC,EAAE;QACT,QAAQ,EAAE,OAAO,CAAC;QAClB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,SAAS,CAAC,EAAE;YACV,QAAQ,CAAC,EAAE,OAAO,CAAC;YACnB,OAAO,CAAC,EAAE,MAAM,CAAC;YACjB,aAAa,CAAC,EAAE,qBAAqB,GAAG,cAAc,CAAC;SACxD,CAAC;KACH,CAAC;IACF,UAAU,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IACtD,IAAI,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAChD,QAAQ,EAAE,KAAK,CAAC;QACd,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;QACb,eAAe,EAAE,MAAM,EAAE,CAAC;QAC1B,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;QACzB,QAAQ,CAAC,EAAE,OAAO,CAAC;KACpB,CAAC,CAAC;CACJ;AAED,MAAM,WAAW,iBAAiB;IAChC,kBAAkB,EAAE,MAAM,CAAC;IAC3B,oBAAoB,EAAE,MAAM,EAAE,CAAC;IAC/B,yBAAyB,EAAE,OAAO,CAAC;IACnC,qBAAqB,EAAE,OAAO,CAAC;CAChC;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,MAAM,WAAW,2BAA2B;IAC1C,OAAO,EAAE,MAAM,GAAG,KAAK,CAAC;CACzB;AAED,MAAM,WAAW,sBAAsB;IACrC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE;QACP,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;CACH;AAED,MAAM,WAAW,2BAA2B;IAC1C,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;CACb;AAaD,MAAM,MAAM,cAAc,GACtB,KAAK,GACL,IAAI,GACJ;IACE,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB,CAAC;AAEN,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,gBAAgB,CAAC;CAC5B;AAED,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,iBAAiB,GAAG,IAAI,CAQrE;AAED,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,iBAAiB,CAgBlE;AAED,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,GACd,gBAAgB,CAMlB;AAED,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,gBAAgB,GACzB,uBAAuB,EAAE,CAiG3B;AAED,wBAAgB,iBAAiB,CAAC,QAAQ,CAAC,EAAE,gBAAgB,GAAG,IAAI,GAAG,MAAM,GAAG,SAAS,CAExF;AAED,wBAAgB,YAAY,CAAC,QAAQ,CAAC,EAAE,gBAAgB,GAAG,IAAI,GAAG,MAAM,GAAG,SAAS,CAEnF;AAED,wBAAgB,oBAAoB,CAClC,QAAQ,CAAC,EAAE,gBAAgB,GAAG,IAAI,GACjC,MAAM,GAAG,SAAS,CAEpB;AAED,wBAAgB,kBAAkB,CAChC,QAAQ,CAAC,EAAE,gBAAgB,GAAG,IAAI,GACjC,MAAM,GAAG,SAAS,CAEpB;AAED,wBAAgB,oBAAoB,CAClC,QAAQ,CAAC,EAAE,gBAAgB,GAAG,IAAI,GACjC,MAAM,GAAG,SAAS,CAEpB;AAED,wBAAgB,kBAAkB,CAChC,QAAQ,CAAC,EAAE,gBAAgB,GAAG,IAAI,GACjC,MAAM,GAAG,SAAS,CAEpB;AAED,wBAAgB,cAAc,CAC5B,QAAQ,CAAC,EAAE,gBAAgB,GAAG,IAAI,GACjC,MAAM,GAAG,SAAS,CAEpB;AAED,wBAAgB,iBAAiB,CAC/B,QAAQ,CAAC,EAAE,gBAAgB,GAAG,IAAI,GACjC,gBAAgB,CAAC,WAAW,CAAC,GAAG,SAAS,CAE3C"}

package/dist/app-manifest.js

@@ -115,6 +115,29 @@ export function validateProjectManifest(manifest) {
             usedPorts.set(service.port, name);
         }
     }
+    const capabilityIds = new Set();
+    for (const capability of [
+        ...(manifest.capabilities?.routes ?? []),
+        ...(manifest.capabilities?.business ?? []),
+    ]) {
+        if (capabilityIds.has(capability.id)) {
+            issues.push({
+                code: "CAPABILITY_ID_DUPLICATE",
+                path: `capabilities.${capability.id}`,
+                message: `capability ID ${capability.id} is duplicated`,
+                fix: "Give every route and business capability a unique stable ID.",
+            });
+        }
+        capabilityIds.add(capability.id);
+        if (!capability.path.startsWith("/")) {
+            issues.push({
+                code: "CAPABILITY_PATH_INVALID",
+                path: `capabilities.${capability.id}.path`,
+                message: "capability probe paths must start with /",
+                fix: `Set the ${capability.id} probe to an absolute application path.`,
+            });
+        }
+    }
     return issues;
 }
 export function manifestProbePath(manifest) {
@@ -156,6 +179,8 @@ function normalizeManifest(value) {
     const dependencies = recordValue(row["dependencies"]);
     const requirements = recordValue(row["requirements"]);
     const services = normalizeServices(recordValue(row["services"]));
+    const capabilities = normalizeCapabilities(recordValue(row["capabilities"]));
+    const policy = normalizePolicy(recordValue(row["policy"]));
     const workdir = stringValue(sandbox?.["workdir"] ?? row["workdir"] ?? row["workspace"] ?? row["root"]) ?? "/workspace";
     const install = dependencies?.["install"] === false || row["install"] === false
         ? false
@@ -163,6 +188,10 @@ function normalizeManifest(value) {
     return {
         schema_version: numberValue(row["schema_version"]),
         name: stringValue(row["name"]),
+        organization: stringValue(row["organization"]),
+        workspace: stringValue(row["workspace"]),
+        application: stringValue(row["application"]),
+        environment: stringValue(row["environment"]),
         template: stringValue(row["template"] ?? row["template_id"]),
         framework: stringValue(row["framework"]),
         workdir,
@@ -198,6 +227,83 @@ function normalizeManifest(value) {
             secrets: stringArray(requirements?.["secrets"]),
             database: requirements?.["database"] === true,
         },
+        capabilities,
+        policy,
+    };
+}
+function normalizeCapabilities(value) {
+    if (!value)
+        return undefined;
+    const database = recordValue(value["database"]);
+    const migration = recordValue(database?.["migration"]);
+    return {
+        routes: normalizeProbeCapabilities(value["routes"]),
+        secrets: normalizeNamedCapabilities(value["secrets"], "name"),
+        database: database
+            ? {
+                required: database["required"] === true,
+                health_path: stringValue(database["health_path"]),
+                migration: migration
+                    ? {
+                        required: migration["required"] === true,
+                        command: stringValue(migration["command"]),
+                        compatibility: migration["compatibility"] === "backward_compatible" ||
+                            migration["compatibility"] === "incompatible"
+                            ? migration["compatibility"]
+                            : undefined,
+                    }
+                    : undefined,
+            }
+            : undefined,
+        connectors: normalizeNamedCapabilities(value["connectors"], "id"),
+        jobs: normalizeNamedCapabilities(value["jobs"], "id"),
+        business: normalizeProbeCapabilities(value["business"]),
+    };
+}
+function normalizeProbeCapabilities(value) {
+    if (!Array.isArray(value))
+        return [];
+    return value.flatMap((candidate) => {
+        const row = recordValue(candidate);
+        const id = stringValue(row?.["id"]);
+        const routePath = stringValue(row?.["path"]);
+        const statuses = Array.isArray(row?.["expected_status"])
+            ? row["expected_status"].filter((status) => typeof status === "number" && Number.isInteger(status))
+            : [];
+        if (!id || !routePath || statuses.length === 0)
+            return [];
+        return [{
+                id,
+                path: routePath,
+                expected_status: statuses,
+                body_contains: stringArray(row?.["body_contains"]),
+                content_type: stringValue(row?.["content_type"]),
+                required: row?.["required"] !== false,
+            }];
+    });
+}
+function normalizeNamedCapabilities(value, key) {
+    if (!Array.isArray(value))
+        return [];
+    return value.flatMap((candidate) => {
+        if (typeof candidate === "string" && candidate.trim()) {
+            return [{ [key]: candidate.trim(), required: true }];
+        }
+        const row = recordValue(candidate);
+        const name = stringValue(row?.[key]);
+        if (!name)
+            return [];
+        return [{ [key]: name, required: row?.["required"] !== false }];
+    });
+}
+function normalizePolicy(value) {
+    if (!value)
+        return undefined;
+    return {
+        approvals_required: numberValue(value["approvals_required"]) ?? 1,
+        allowed_environments: stringArray(value["allowed_environments"]),
+        require_immutable_release: value["require_immutable_release"] !== false,
+        require_rollback_path: value["require_rollback_path"] !== false,
     };
 }
 function normalizeServices(value) {