@ninedeploy/schemas 0.2.7 → 0.3.4

package/dist/ninedeployManifest.js

@@ -0,0 +1,284 @@
+import { z } from 'zod';
+import { envVarName, httpPath, repoBaseDir, slug } from './common.js';
+/**
+ * `.ninedeploy` manifest schema — project-side declarative config for how
+ * NineDeploy should build, run and route a service. Committed to the repo,
+ * so it must NEVER carry secrets, tokens or connection strings; the loader
+ * enforces that with a regex scan (see apps/server/src/lib/secretScan.ts).
+ *
+ * Merge precedence at apply time: panel/DB > manifest > auto-detect. The
+ * manifest fills empty panel fields; an operator who explicitly set something
+ * in the panel wins.
+ */
+// ── Runtime ────────────────────────────────────────────────────────────────
+export const runtimeType = z.enum([
+    'auto',
+    'node',
+    'python',
+    'go',
+    'ruby',
+    'php',
+    'java',
+    'rust',
+    'static',
+]);
+export const runtime = z
+    .object({
+    type: runtimeType.default('auto'),
+    /**
+     * Pinned language version. Format `<major>` or `<major>.<minor>` or
+     * `<major>.<minor>.<patch>`. For example `20`, `20.18`, `3.12`.
+     */
+    version: z
+        .string()
+        .regex(/^\d+(?:\.\d+){0,2}$/, 'must be a numeric version like 20 or 3.12')
+        .max(20)
+        .optional(),
+})
+    .strict();
+// ── Build ──────────────────────────────────────────────────────────────────
+export const build = z
+    .object({
+    install: z.string().min(1).max(500).optional(),
+    build: z.string().min(1).max(500).optional(),
+    start: z.string().min(1).max(500).optional(),
+    baseDir: repoBaseDir.optional(),
+    dockerfile: z.string().min(1).max(200).optional(),
+})
+    .strict();
+// ── Run ────────────────────────────────────────────────────────────────────
+export const restartPolicy = z
+    .union([
+    z.enum(['no', 'always', 'unless-stopped']),
+    z
+        .string()
+        .regex(/^on-failure(?::[1-9]\d{0,2})?$/, 'must be on-failure or on-failure:N (1-999, no leading zero)'),
+])
+    .optional();
+export const run = z
+    .object({
+    port: z.number().int().min(1).max(65535).optional(),
+    healthcheck: httpPath.optional(),
+    restart: restartPolicy,
+})
+    .strict();
+// ── Static ─────────────────────────────────────────────────────────────────
+const noTraversalSegments = (value) => !value.split('/').some((segment) => segment === '..' || segment === '.');
+const isRelativePath = (value) => !value.startsWith('/');
+export const staticConfig = z
+    .object({
+    spa: z.boolean().default(false),
+    root: z
+        .string()
+        .min(1)
+        .max(200)
+        .regex(/^[A-Za-z0-9._/-]+$/, 'must be a relative path with allowed characters')
+        .refine(noTraversalSegments, { message: 'path must not contain . or .. segments' })
+        .refine(isRelativePath, { message: 'path must be relative (no leading "/")' })
+        .optional(),
+})
+    .strict();
+// ── Env ────────────────────────────────────────────────────────────────────
+export const env = z
+    .object({
+    /** Required env var names. Values stay in the panel's env vault. */
+    required: z.array(envVarName.max(100)).max(100).default([]),
+    /** Managed-DB attach alias: env-key → attachment-env-key. */
+    aliases: z.record(z.string(), envVarName).optional(),
+})
+    .strict();
+// ── Phases (Nixpacks ince ayar) ────────────────────────────────────────────
+export const phases = z
+    .object({
+    setup: z
+        .object({
+        pkgs: z.array(z.string().min(1).max(100)).max(50).default([]),
+    })
+        .strict()
+        .optional(),
+    build: z
+        .object({
+        cmds: z.array(z.string().min(1).max(500)).max(20).default([]),
+    })
+        .strict()
+        .optional(),
+})
+    .strict();
+// ── Resources ──────────────────────────────────────────────────────────────
+export const resources = z
+    .object({
+    cpuShares: z.number().int().min(0).max(262144).optional(),
+    memMb: z.number().int().min(0).max(1_048_576).optional(),
+})
+    .strict();
+// ── Hooks ──────────────────────────────────────────────────────────────────
+export const hooks = z
+    .object({
+    preBuild: z.string().min(1).max(500).optional(),
+    postBuild: z.string().min(1).max(500).optional(),
+    preStop: z.string().min(1).max(500).optional(),
+})
+    .strict();
+// ── Watch (monorepo) ──────────────────────────────────────────────────────
+export const watch = z
+    .object({
+    paths: z.array(z.string().min(1).max(200)).max(50).default([]),
+})
+    .strict();
+// ── Routes ─────────────────────────────────────────────────────────────────
+export const rateLimit = z
+    .object({
+    average: z.number().int().min(0).max(100_000),
+    burst: z.number().int().min(0).max(100_000),
+})
+    .strict();
+export const route = z
+    .object({
+    host: z
+        .string()
+        .min(3)
+        .max(253)
+        .regex(/^(?=.{1,253}$)(?:[A-Za-z0-9](?:[A-Za-z0-9-]{0,61}[A-Za-z0-9])?)(?:\.(?:[A-Za-z0-9](?:[A-Za-z0-9-]{0,61}[A-Za-z0-9])?))*$/, 'must be a valid hostname'),
+    path: z
+        .string()
+        .min(1)
+        .max(200)
+        .regex(/^\/.*$/, 'must start with "/"')
+        .default('/'),
+    ssl: z.boolean().default(true),
+    redirectWww: z.boolean().optional(),
+    headers: z.record(z.string().min(1).max(200), z.string().min(1).max(2000)).optional(),
+    ipAllowlist: z
+        .array(z
+        .string()
+        .min(1)
+        .max(64)
+        .regex(/^[\d./]+$/, 'must be a CIDR like 1.2.3.4/32'))
+        .max(50)
+        .optional(),
+    rateLimit: rateLimit.optional(),
+})
+    .strict();
+// ── Previews ──────────────────────────────────────────────────────────────
+export const previews = z
+    .object({
+    enabled: z.boolean().default(false),
+    /**
+     * Hostname template. `{n}` is replaced by the PR number. Example:
+     * `pr-{n}.previews.example.com`. Must contain `{n}` when enabled.
+     */
+    pattern: z
+        .string()
+        .min(1)
+        .max(200)
+        .regex(/^[A-Za-z0-9._/{}*-]+$/, 'must be a hostname template (letters, digits, dot, dash, underscore, slash, brace, asterisk)')
+        .refine(noTraversalSegments, { message: 'pattern must not contain . or .. segments' })
+        .optional(),
+    maxActive: z.number().int().min(1).max(50).default(5),
+    autoDestroyOnClose: z.boolean().default(true),
+})
+    .strict()
+    .refine((p) => !p.enabled || (p.pattern != null && p.pattern.includes('{n}')), {
+    message: 'previews.pattern must contain {n} when previews.enabled is true',
+    path: ['pattern'],
+});
+// ── Volume ────────────────────────────────────────────────────────────────
+export const volumeBackups = z
+    .object({
+    schedule: z
+        .string()
+        .min(1)
+        .max(100)
+        .regex(/^[\d*\/,\-A-Za-z\s]+$/, 'must look like a cron expression (digits, *, /, comma, dash, letters, space)'),
+    retention: z.number().int().min(1).max(365).default(7),
+})
+    .strict();
+export const volume = z
+    .object({
+    mount: z
+        .string()
+        .min(1)
+        .max(200)
+        .regex(/^[A-Za-z0-9._/-]+$/, 'must be a path inside the container')
+        .refine(noTraversalSegments, { message: 'mount must not contain . or .. segments' })
+        .optional(),
+    backups: volumeBackups.optional(),
+})
+    .strict();
+// ── Database (managed DB attach hint) ─────────────────────────────────────
+export const database = z
+    .object({
+    ref: slug,
+    env: envVarName,
+})
+    .strict();
+// ── Network ───────────────────────────────────────────────────────────────
+export const network = z
+    .object({
+    publishPort: z.number().int().min(1).max(65535).optional(),
+    aliases: z.array(z.string().min(1).max(100).regex(/^[A-Za-z0-9._-]+$/)).max(20).default([]),
+})
+    .strict();
+// ── Notifications (channel-name references) ──────────────────────────────
+export const notifications = z
+    .object({
+    onDeploy: z.array(z.string().min(1).max(100)).max(20).default([]),
+    onFailure: z.array(z.string().min(1).max(100)).max(20).default([]),
+    onAlert: z.array(z.string().min(1).max(100)).max(20).default([]),
+})
+    .strict();
+// ── Alerts ────────────────────────────────────────────────────────────────
+export const alertWhen = z.enum([
+    'deployFailed',
+    'restartLoop',
+    'highMemory',
+    'highCpu',
+    'certExpiry',
+]);
+export const alert = z
+    .object({
+    when: alertWhen,
+    channel: z.string().min(1).max(100),
+    thresholdPct: z.number().int().min(1).max(100).optional(),
+})
+    .strict()
+    .refine((a) => a.when !== 'highMemory' && a.when !== 'highCpu' ? true : a.thresholdPct != null, {
+    message: 'thresholdPct is required for highMemory/highCpu alerts',
+    path: ['thresholdPct'],
+});
+// ── Top-level manifest ────────────────────────────────────────────────────
+export const ninedeployManifest = z
+    .object({
+    version: z.literal('1'),
+    runtime: runtime.optional(),
+    build: build.optional(),
+    run: run.optional(),
+    static: staticConfig.optional(),
+    env: env.optional(),
+    phases: phases.optional(),
+    resources: resources.optional(),
+    hooks: hooks.optional(),
+    watch: watch.optional(),
+    routes: z.array(route).max(50).optional(),
+    previews: previews.optional(),
+    volume: volume.optional(),
+    database: database.optional(),
+    network: network.optional(),
+    notifications: notifications.optional(),
+    alerts: z.array(alert).max(20).optional(),
+})
+    .strict();
+/**
+ * The list of filenames the loader checks, in priority order. The first one
+ * found in the repo root is used.
+ */
+export const NINEDEPLOY_MANIFEST_FILENAMES = [
+    '.ninedeploy',
+    '.ninedeploy.yml',
+    '.ninedeploy.yaml',
+    'ninedeploy.yml',
+    'ninedeploy.yaml',
+];
+/** Maximum allowed size of a `.ninedeploy` file (bytes). Larger files are refused. */
+export const NINEDEPLOY_MANIFEST_MAX_BYTES = 16 * 1024;
+//# sourceMappingURL=ninedeployManifest.js.map

package/dist/ninedeployManifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ninedeployManifest.js","sourceRoot":"","sources":["../src/ninedeployManifest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AAEtE;;;;;;;;;GASG;AAEH,8EAA8E;AAC9E,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,IAAI,CAAC;IAChC,MAAM;IACN,MAAM;IACN,QAAQ;IACR,IAAI;IACJ,MAAM;IACN,KAAK;IACL,MAAM;IACN,MAAM;IACN,QAAQ;CACT,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC;KACrB,MAAM,CAAC;IACN,IAAI,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;IACjC;;;OAGG;IACH,OAAO,EAAE,CAAC;SACP,MAAM,EAAE;SACR,KAAK,CAAC,qBAAqB,EAAE,2CAA2C,CAAC;SACzE,GAAG,CAAC,EAAE,CAAC;SACP,QAAQ,EAAE;CACd,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,8EAA8E;AAC9E,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC;KACnB,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC9C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC5C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC5C,OAAO,EAAE,WAAW,CAAC,QAAQ,EAAE;IAC/B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CAClD,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,8EAA8E;AAC9E,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC;KAC3B,KAAK,CAAC;IACL,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,gBAAgB,CAAC,CAAC;IAC1C,CAAC;SACE,MAAM,EAAE;SACR,KAAK,CACJ,gCAAgC,EAChC,6DAA6D,CAC9D;CACJ,CAAC;KACD,QAAQ,EAAE,CAAC;AAId,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC;KACjB,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE;IACnD,WAAW,EAAE,QAAQ,CAAC,QAAQ,EAAE;IAChC,OAAO,EAAE,aAAa;CACvB,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,8EAA8E;AAC9E,MAAM,mBAAmB,GAAG,CAAC,KAAa,EAAW,EAAE,CACrD,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,GAAG,CAAC,CAAC;AAE3E,MAAM,cAAc,GAAG,CAAC,KAAa,EAAW,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;AAE1E,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC;KAC1B,MAAM,CAAC;IACN,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAC/B,IAAI,EAAE,CAAC;SACJ,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,GAAG,CAAC;SACR,KAAK,CAAC,oBAAoB,EAAE,iDAAiD,CAAC;SAC9E,MAAM,CAAC,mBAAmB,EAAE,EAAE,OAAO,EAAE,wCAAwC,EAAE,CAAC;SAClF,MAAM,CAAC,cAAc,EAAE,EAAE,OAAO,EAAE,wCAAwC,EAAE,CAAC;SAC7E,QAAQ,EAAE;CACd,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,8EAA8E;AAC9E,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC;KACjB,MAAM,CAAC;IACN,oEAAoE;IACpE,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC3D,6DAA6D;IAC7D,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,UAAU,CAAC,CAAC,QAAQ,EAAE;CACrD,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,8EAA8E;AAC9E,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC;KACpB,MAAM,CAAC;IACN,KAAK,EAAE,CAAC;SACL,MAAM,CAAC;QACN,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;KAC9D,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;IACb,KAAK,EAAE,CAAC;SACL,MAAM,CAAC;QACN,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;KAC9D,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;CACd,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,8EAA8E;AAC9E,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC;KACvB,MAAM,CAAC;IACN,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE;IACzD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE;CACzD,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,8EAA8E;AAC9E,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC;KACnB,MAAM,CAAC;IACN,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC/C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAChD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CAC/C,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,6EAA6E;AAC7E,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC;KACnB,MAAM,CAAC;IACN,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CAC/D,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,8EAA8E;AAC9E,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC;KACvB,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC;IAC7C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC;CAC5C,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC;KACnB,MAAM,CAAC;IACN,IAAI,EAAE,CAAC;SACJ,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,GAAG,CAAC;SACR,KAAK,CACJ,0HAA0H,EAC1H,0BAA0B,CAC3B;IACH,IAAI,EAAE,CAAC;SACJ,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,GAAG,CAAC;SACR,KAAK,CAAC,QAAQ,EAAE,qBAAqB,CAAC;SACtC,OAAO,CAAC,GAAG,CAAC;IACf,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAC9B,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACnC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE;IACrF,WAAW,EAAE,CAAC;SACX,KAAK,CACJ,CAAC;SACE,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,EAAE,CAAC;SACP,KAAK,CAAC,WAAW,EAAE,gCAAgC,CAAC,CACxD;SACA,GAAG,CAAC,EAAE,CAAC;SACP,QAAQ,EAAE;IACb,SAAS,EAAE,SAAS,CAAC,QAAQ,EAAE;CAChC,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,6EAA6E;AAC7E,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC;KACtB,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACnC;;;OAGG;IACH,OAAO,EAAE,CAAC;SACP,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,GAAG,CAAC;SACR,KAAK,CACJ,uBAAuB,EACvB,8FAA8F,CAC/F;SACA,MAAM,CAAC,mBAAmB,EAAE,EAAE,OAAO,EAAE,2CAA2C,EAAE,CAAC;SACrF,QAAQ,EAAE;IACb,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACrD,kBAAkB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;CAC9C,CAAC;KACD,MAAM,EAAE;KACR,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,IAAI,IAAI,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE;IAC7E,OAAO,EAAE,iEAAiE;IAC1E,IAAI,EAAE,CAAC,SAAS,CAAC;CAClB,CAAC,CAAC;AAGL,6EAA6E;AAC7E,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC;KAC3B,MAAM,CAAC;IACN,QAAQ,EAAE,CAAC;SACR,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,GAAG,CAAC;SACR,KAAK,CACJ,uBAAuB,EACvB,8EAA8E,CAC/E;IACH,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;CACvD,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC;KACpB,MAAM,CAAC;IACN,KAAK,EAAE,CAAC;SACL,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,GAAG,CAAC;SACR,KAAK,CAAC,oBAAoB,EAAE,qCAAqC,CAAC;SAClE,MAAM,CAAC,mBAAmB,EAAE,EAAE,OAAO,EAAE,yCAAyC,EAAE,CAAC;SACnF,QAAQ,EAAE;IACb,OAAO,EAAE,aAAa,CAAC,QAAQ,EAAE;CAClC,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,6EAA6E;AAC7E,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC;KACtB,MAAM,CAAC;IACN,GAAG,EAAE,IAAI;IACT,GAAG,EAAE,UAAU;CAChB,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,6EAA6E;AAC7E,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC;KACrB,MAAM,CAAC;IACN,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE;IAC1D,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CAC5F,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,4EAA4E;AAC5E,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC;KAC3B,MAAM,CAAC;IACN,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACjE,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAClE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACjE,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,6EAA6E;AAC7E,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,CAAC,IAAI,CAAC;IAC9B,cAAc;IACd,aAAa;IACb,YAAY;IACZ,SAAS;IACT,YAAY;CACb,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC;KACnB,MAAM,CAAC;IACN,IAAI,EAAE,SAAS;IACf,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACnC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CAC1D,CAAC;KACD,MAAM,EAAE;KACR,MAAM,CACL,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,IAAI,IAAI,EACjF;IACE,OAAO,EAAE,wDAAwD;IACjE,IAAI,EAAE,CAAC,cAAc,CAAC;CACvB,CACF,CAAC;AAGJ,6EAA6E;AAC7E,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC;KAChC,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;IACvB,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE;IAC3B,KAAK,EAAE,KAAK,CAAC,QAAQ,EAAE;IACvB,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE;IACnB,MAAM,EAAE,YAAY,CAAC,QAAQ,EAAE;IAC/B,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE;IACnB,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE;IACzB,SAAS,EAAE,SAAS,CAAC,QAAQ,EAAE;IAC/B,KAAK,EAAE,KAAK,CAAC,QAAQ,EAAE;IACvB,KAAK,EAAE,KAAK,CAAC,QAAQ,EAAE;IACvB,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IACzC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE;IAC7B,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE;IACzB,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE;IAC7B,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE;IAC3B,aAAa,EAAE,aAAa,CAAC,QAAQ,EAAE;IACvC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC1C,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ;;;GAGG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG;IAC3C,aAAa;IACb,iBAAiB;IACjB,kBAAkB;IAClB,gBAAgB;IAChB,iBAAiB;CACT,CAAC;AAGX,sFAAsF;AACtF,MAAM,CAAC,MAAM,6BAA6B,GAAG,EAAE,GAAG,IAAI,CAAC"}

package/dist/project.d.ts

@@ -7,8 +7,8 @@ import { z } from 'zod';
 export declare const createProject: z.ZodObject<{
     name: z.ZodString;
     slug: z.ZodOptional<z.ZodString>;
-    description: z.ZodOptional<z.ZodString>;
-    workspaceId: z.ZodOptional<z.ZodNumber>;
+    description: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    workspaceId: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
 }, z.core.$strip>;
 export type CreateProject = z.infer<typeof createProject>;
 export type CreateProjectInput = CreateProject;
@@ -23,6 +23,8 @@ export type ProjectPatchInput = ProjectPatch;
 export interface ProjectEntry {
     id: number;
     workspaceId?: number | null;
+    /** Display name of the owning workspace. Resolved server-side. */
+    workspaceName?: string | null;
     name: string;
     slug: string;
     description: string | null;

package/dist/project.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"project.d.ts","sourceRoot":"","sources":["../src/project.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB;;;;GAIG;AAEH,eAAO,MAAM,aAAa;;;;;iBAKxB,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAC1D,MAAM,MAAM,kBAAkB,GAAG,aAAa,CAAC;AAE/C,eAAO,MAAM,YAAY;;;;iBAMoD,CAAC;AAC9E,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AACxD,MAAM,MAAM,iBAAiB,GAAG,YAAY,CAAC;AAE7C,sDAAsD;AACtD,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB"}
+{"version":3,"file":"project.d.ts","sourceRoot":"","sources":["../src/project.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB;;;;GAIG;AAEH,eAAO,MAAM,aAAa;;;;;iBAKxB,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAC1D,MAAM,MAAM,kBAAkB,GAAG,aAAa,CAAC;AAE/C,eAAO,MAAM,YAAY;;;;iBAMoD,CAAC;AAC9E,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AACxD,MAAM,MAAM,iBAAiB,GAAG,YAAY,CAAC;AAE7C,sDAAsD;AACtD,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,kEAAkE;IAClE,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB"}

package/dist/project.js

@@ -8,8 +8,8 @@ import { slug } from './common.js';
 export const createProject = z.object({
     name: z.string().trim().min(2).max(63),
     slug: slug.optional(),
-    description: z.string().trim().max(500).optional(),
-    workspaceId: z.number().int().positive().optional(),
+    description: z.string().trim().max(500).nullable().optional(),
+    workspaceId: z.number().int().positive().nullable().optional(),
 });
 export const projectPatch = z
     .object({

package/dist/project.js.map

@@ -1 +1 @@
-{"version":3,"file":"project.js","sourceRoot":"","sources":["../src/project.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AAEnC;;;;GAIG;AAEH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IACtC,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;IACrB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAClD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACpD,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC;KAC1B,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IACjD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC7D,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAC/D,CAAC;KACD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC,CAAC"}
+{"version":3,"file":"project.js","sourceRoot":"","sources":["../src/project.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AAEnC;;;;GAIG;AAEH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IACtC,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;IACrB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC7D,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAC/D,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC;KAC1B,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IACjD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC7D,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAC/D,CAAC;KACD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC,CAAC"}

package/dist/runtimeVersions.d.ts

@@ -0,0 +1,102 @@
+/**
+ * Curated runtime version catalog — the single source of truth for every
+ * language version NineDeploy suggests anywhere in the product (Manifest
+ * Creator presets, the CLI's `starterManifest`, the runtime version picker).
+ *
+ * Why this file exists: these versions used to be hand-written literals
+ * duplicated across `apps/web` and `packages/sdk`. Nobody owned them, so
+ * they drifted until the shipped defaults pinned runtimes that had gone
+ * end-of-life. Everything now derives from this one table.
+ *
+ * The catalog is *advisory*, never a constraint. `runtime.version` in the
+ * manifest schema stays free-form (`^\d+(?:\.\d+){0,2}$`), so an operator
+ * can pin any version their build needs — including an EOL one. What the
+ * catalog buys us is a sensible default plus an honest warning when the
+ * pinned version is no longer supported upstream.
+ *
+ * ── Maintaining this file ────────────────────────────────────────────────
+ * Bump `RUNTIME_CATALOG_REVIEWED` whenever you touch the table, and check
+ * it against upstream release schedules:
+ *   Node    https://nodejs.org/en/about/previous-releases
+ *   Python  https://devguide.python.org/versions/
+ *   Go      https://go.dev/doc/devel/release
+ *   Ruby    https://www.ruby-lang.org/en/downloads/branches/
+ *   PHP     https://www.php.net/supported-versions.php
+ *   Java    https://adoptium.net/support/
+ *   Rust    https://www.rust-lang.org/
+ */
+import type { RuntimeType } from './ninedeployManifest.js';
+/**
+ * ISO date the table below was last checked against upstream schedules.
+ * Surfaced in the UI so a stale catalog is visible rather than silent.
+ */
+export declare const RUNTIME_CATALOG_REVIEWED = "2026-08-26";
+/**
+ * Upstream support state of a version, ordered from healthiest to worst.
+ *
+ * - `current`     — newest stable release; ahead of the recommended pin.
+ * - `lts`         — long-term-support line; the safe production choice.
+ * - `maintenance` — still supported, but no longer the primary line.
+ * - `security`    — security fixes only; no bug fixes.
+ * - `eol`         — unsupported upstream. Usable, but nothing gets patched.
+ */
+export type RuntimeSupport = 'current' | 'lts' | 'maintenance' | 'security' | 'eol';
+export interface RuntimeVersionOption {
+    /** Value written into `runtime.version` — matches the manifest regex. */
+    version: string;
+    /** Human label for the picker, e.g. "24 — Active LTS". */
+    label: string;
+    support: RuntimeSupport;
+    /** ISO date support ends (or ended). Omitted when upstream has not set one. */
+    eol?: string;
+}
+export interface RuntimeVersionCatalogEntry {
+    /** Display name used in advisory messages, e.g. "Node.js". */
+    name: string;
+    /** The version presets and the "recommended" hint use. Must appear in `options`. */
+    recommended: string;
+    /** Newest first — the picker renders them in this order. */
+    options: readonly RuntimeVersionOption[];
+}
+/**
+ * Versions offered per runtime. Only runtimes we can meaningfully pin appear
+ * here; `auto` and `static` have no version axis and are absent by design.
+ *
+ * Each list keeps a couple of EOL entries on purpose: teams migrating an
+ * existing app need to reproduce their current runtime before they can move
+ * off it, and an undocumented version they have to guess at is worse than a
+ * documented one carrying a warning.
+ */
+export declare const RUNTIME_VERSION_CATALOG: Partial<Record<RuntimeType, RuntimeVersionCatalogEntry>>;
+/** Versions offered for a runtime type. Empty for types with no version axis. */
+export declare function runtimeVersionOptions(type: RuntimeType): readonly RuntimeVersionOption[];
+/**
+ * The version presets pin for a runtime, or `undefined` when the type has no
+ * version axis (`auto`, `static`) — in which case the manifest should omit
+ * `runtime.version` entirely and let Nixpacks decide.
+ */
+export declare function recommendedRuntimeVersion(type: RuntimeType): string | undefined;
+/**
+ * Resolve an operator-typed version to its catalog entry.
+ *
+ * Matching is longest-prefix on dot boundaries, so `20.18.1` resolves to
+ * Node's `20` entry and `3.12.4` to Python's `3.12` — pinning a patch
+ * release still yields the right support status. The dot boundary is what
+ * keeps `2` from matching `20`.
+ */
+export declare function findRuntimeVersion(type: RuntimeType, version: string): RuntimeVersionOption | undefined;
+/** A note to show next to the version field. `error` is not a blocker — only a warning. */
+export interface RuntimeVersionAdvisory {
+    level: 'error' | 'warn' | 'info';
+    message: string;
+}
+/**
+ * Describe the health of a pinned version, or `null` when there is nothing
+ * worth saying (supported version, no version pinned, runtime with no
+ * version axis).
+ *
+ * Deliberately never rejects: an EOL pin is a warning, not an error, because
+ * reproducing a legacy runtime is a legitimate reason to deploy one.
+ */
+export declare function runtimeVersionAdvisory(type: RuntimeType, version: string | undefined): RuntimeVersionAdvisory | null;
+//# sourceMappingURL=runtimeVersions.d.ts.map

package/dist/runtimeVersions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtimeVersions.d.ts","sourceRoot":"","sources":["../src/runtimeVersions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAE3D;;;GAGG;AACH,eAAO,MAAM,wBAAwB,eAAe,CAAC;AAErD;;;;;;;;GAQG;AACH,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,KAAK,GAAG,aAAa,GAAG,UAAU,GAAG,KAAK,CAAC;AAEpF,MAAM,WAAW,oBAAoB;IACnC,yEAAyE;IACzE,OAAO,EAAE,MAAM,CAAC;IAChB,0DAA0D;IAC1D,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,cAAc,CAAC;IACxB,+EAA+E;IAC/E,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,0BAA0B;IACzC,8DAA8D;IAC9D,IAAI,EAAE,MAAM,CAAC;IACb,oFAAoF;IACpF,WAAW,EAAE,MAAM,CAAC;IACpB,4DAA4D;IAC5D,OAAO,EAAE,SAAS,oBAAoB,EAAE,CAAC;CAC1C;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,uBAAuB,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,0BAA0B,CAAC,CA4E5F,CAAC;AAEF,iFAAiF;AACjF,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,WAAW,GAAG,SAAS,oBAAoB,EAAE,CAExF;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,WAAW,GAAG,MAAM,GAAG,SAAS,CAE/E;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,WAAW,EACjB,OAAO,EAAE,MAAM,GACd,oBAAoB,GAAG,SAAS,CAIlC;AAED,2FAA2F;AAC3F,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,CAAC;IACjC,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,WAAW,EACjB,OAAO,EAAE,MAAM,GAAG,SAAS,GAC1B,sBAAsB,GAAG,IAAI,CA+B/B"}

package/dist/runtimeVersions.js

@@ -0,0 +1,153 @@
+/**
+ * ISO date the table below was last checked against upstream schedules.
+ * Surfaced in the UI so a stale catalog is visible rather than silent.
+ */
+export const RUNTIME_CATALOG_REVIEWED = '2026-08-26';
+/**
+ * Versions offered per runtime. Only runtimes we can meaningfully pin appear
+ * here; `auto` and `static` have no version axis and are absent by design.
+ *
+ * Each list keeps a couple of EOL entries on purpose: teams migrating an
+ * existing app need to reproduce their current runtime before they can move
+ * off it, and an undocumented version they have to guess at is worse than a
+ * documented one carrying a warning.
+ */
+export const RUNTIME_VERSION_CATALOG = {
+    node: {
+        name: 'Node.js',
+        recommended: '24',
+        options: [
+            { version: '26', label: '26 — Current', support: 'current', eol: '2029-04-30' },
+            { version: '24', label: '24 — Active LTS', support: 'lts', eol: '2028-04-30' },
+            { version: '22', label: '22 — Maintenance LTS', support: 'maintenance', eol: '2027-04-30' },
+            { version: '20', label: '20 — end-of-life', support: 'eol', eol: '2026-04-30' },
+            { version: '18', label: '18 — end-of-life', support: 'eol', eol: '2025-04-30' },
+        ],
+    },
+    python: {
+        name: 'Python',
+        recommended: '3.14',
+        options: [
+            { version: '3.14', label: '3.14 — latest stable', support: 'current', eol: '2030-10-31' },
+            { version: '3.13', label: '3.13 — bugfix', support: 'maintenance', eol: '2029-10-31' },
+            { version: '3.12', label: '3.12 — security fixes only', support: 'security', eol: '2028-10-31' },
+            { version: '3.11', label: '3.11 — security fixes only', support: 'security', eol: '2027-10-31' },
+        ],
+    },
+    go: {
+        name: 'Go',
+        recommended: '1.27',
+        options: [
+            { version: '1.27', label: '1.27 — latest stable', support: 'current' },
+            { version: '1.26', label: '1.26 — supported', support: 'maintenance' },
+            { version: '1.25', label: '1.25 — end-of-life', support: 'eol' },
+            { version: '1.24', label: '1.24 — end-of-life', support: 'eol' },
+        ],
+    },
+    ruby: {
+        name: 'Ruby',
+        recommended: '3.4',
+        options: [
+            { version: '4.0', label: '4.0 — latest stable', support: 'current' },
+            { version: '3.4', label: '3.4 — normal maintenance', support: 'maintenance' },
+            { version: '3.3', label: '3.3 — security fixes only', support: 'security', eol: '2027-03-31' },
+            { version: '3.2', label: '3.2 — end-of-life', support: 'eol', eol: '2026-04-01' },
+        ],
+    },
+    php: {
+        name: 'PHP',
+        recommended: '8.4',
+        options: [
+            { version: '8.5', label: '8.5 — active support', support: 'current', eol: '2029-12-31' },
+            { version: '8.4', label: '8.4 — active support', support: 'maintenance', eol: '2028-12-31' },
+            { version: '8.3', label: '8.3 — security fixes only', support: 'security', eol: '2027-12-31' },
+            { version: '8.2', label: '8.2 — security fixes only', support: 'security', eol: '2026-12-31' },
+            { version: '8.1', label: '8.1 — end-of-life', support: 'eol', eol: '2025-12-31' },
+        ],
+    },
+    java: {
+        name: 'Java',
+        recommended: '25',
+        options: [
+            { version: '26', label: '26 — latest feature release (non-LTS)', support: 'current' },
+            { version: '25', label: '25 — LTS', support: 'lts', eol: '2031-09-30' },
+            { version: '21', label: '21 — LTS', support: 'lts', eol: '2029-12-31' },
+            { version: '17', label: '17 — LTS', support: 'maintenance', eol: '2027-10-31' },
+        ],
+    },
+    rust: {
+        name: 'Rust',
+        // Rust ships a new stable every six weeks and backports nothing, so any
+        // version below the newest stable is unsupported by definition. Expect
+        // this list to need a bump more often than the others.
+        recommended: '1.98',
+        options: [
+            { version: '1.98', label: '1.98 — latest stable', support: 'current' },
+            { version: '1.97', label: '1.97 — superseded', support: 'eol' },
+            { version: '1.96', label: '1.96 — superseded', support: 'eol' },
+            { version: '1.95', label: '1.95 — superseded', support: 'eol' },
+        ],
+    },
+};
+/** Versions offered for a runtime type. Empty for types with no version axis. */
+export function runtimeVersionOptions(type) {
+    return RUNTIME_VERSION_CATALOG[type]?.options ?? [];
+}
+/**
+ * The version presets pin for a runtime, or `undefined` when the type has no
+ * version axis (`auto`, `static`) — in which case the manifest should omit
+ * `runtime.version` entirely and let Nixpacks decide.
+ */
+export function recommendedRuntimeVersion(type) {
+    return RUNTIME_VERSION_CATALOG[type]?.recommended;
+}
+/**
+ * Resolve an operator-typed version to its catalog entry.
+ *
+ * Matching is longest-prefix on dot boundaries, so `20.18.1` resolves to
+ * Node's `20` entry and `3.12.4` to Python's `3.12` — pinning a patch
+ * release still yields the right support status. The dot boundary is what
+ * keeps `2` from matching `20`.
+ */
+export function findRuntimeVersion(type, version) {
+    return [...runtimeVersionOptions(type)]
+        .sort((a, b) => b.version.length - a.version.length)
+        .find((o) => version === o.version || version.startsWith(`${o.version}.`));
+}
+/**
+ * Describe the health of a pinned version, or `null` when there is nothing
+ * worth saying (supported version, no version pinned, runtime with no
+ * version axis).
+ *
+ * Deliberately never rejects: an EOL pin is a warning, not an error, because
+ * reproducing a legacy runtime is a legitimate reason to deploy one.
+ */
+export function runtimeVersionAdvisory(type, version) {
+    const entry = RUNTIME_VERSION_CATALOG[type];
+    if (!entry || !version)
+        return null;
+    const match = findRuntimeVersion(type, version);
+    if (!match) {
+        return {
+            level: 'info',
+            message: `${entry.name} ${version} is not in NineDeploy's catalog (last reviewed ${RUNTIME_CATALOG_REVIEWED}). The build will still try it — Nixpacks resolves the version itself.`,
+        };
+    }
+    // One shared clause for both levels: upstream dates are a label, not a
+    // tense, so the same wording works whether the date is past or future.
+    const support = match.eol ? ` Upstream support: ${match.eol}.` : '';
+    if (match.support === 'eol') {
+        return {
+            level: 'error',
+            message: `${entry.name} ${match.version} is end-of-life and no longer receives security patches. You can still deploy it — ${entry.recommended} is the recommended pin.${support}`,
+        };
+    }
+    if (match.support === 'security') {
+        return {
+            level: 'warn',
+            message: `${entry.name} ${match.version} receives security fixes only — no bug fixes. Recommended pin: ${entry.recommended}.${support}`,
+        };
+    }
+    return null;
+}
+//# sourceMappingURL=runtimeVersions.js.map

package/dist/runtimeVersions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtimeVersions.js","sourceRoot":"","sources":["../src/runtimeVersions.ts"],"names":[],"mappings":"AA6BA;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,YAAY,CAAC;AAgCrD;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAA6D;IAC/F,IAAI,EAAE;QACJ,IAAI,EAAE,SAAS;QACf,WAAW,EAAE,IAAI;QACjB,OAAO,EAAE;YACP,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,YAAY,EAAE;YAC/E,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,iBAAiB,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,YAAY,EAAE;YAC9E,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,sBAAsB,EAAE,OAAO,EAAE,aAAa,EAAE,GAAG,EAAE,YAAY,EAAE;YAC3F,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,kBAAkB,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,YAAY,EAAE;YAC/E,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,kBAAkB,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,YAAY,EAAE;SAChF;KACF;IACD,MAAM,EAAE;QACN,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,MAAM;QACnB,OAAO,EAAE;YACP,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,sBAAsB,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,YAAY,EAAE;YACzF,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,aAAa,EAAE,GAAG,EAAE,YAAY,EAAE;YACtF,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,4BAA4B,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,YAAY,EAAE;YAChG,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,4BAA4B,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,YAAY,EAAE;SACjG;KACF;IACD,EAAE,EAAE;QACF,IAAI,EAAE,IAAI;QACV,WAAW,EAAE,MAAM;QACnB,OAAO,EAAE;YACP,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,sBAAsB,EAAE,OAAO,EAAE,SAAS,EAAE;YACtE,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,kBAAkB,EAAE,OAAO,EAAE,aAAa,EAAE;YACtE,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,oBAAoB,EAAE,OAAO,EAAE,KAAK,EAAE;YAChE,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,oBAAoB,EAAE,OAAO,EAAE,KAAK,EAAE;SACjE;KACF;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,MAAM;QACZ,WAAW,EAAE,KAAK;QAClB,OAAO,EAAE;YACP,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAqB,EAAE,OAAO,EAAE,SAAS,EAAE;YACpE,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,0BAA0B,EAAE,OAAO,EAAE,aAAa,EAAE;YAC7E,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,2BAA2B,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,YAAY,EAAE;YAC9F,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,YAAY,EAAE;SAClF;KACF;IACD,GAAG,EAAE;QACH,IAAI,EAAE,KAAK;QACX,WAAW,EAAE,KAAK;QAClB,OAAO,EAAE;YACP,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,sBAAsB,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,YAAY,EAAE;YACxF,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,sBAAsB,EAAE,OAAO,EAAE,aAAa,EAAE,GAAG,EAAE,YAAY,EAAE;YAC5F,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,2BAA2B,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,YAAY,EAAE;YAC9F,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,2BAA2B,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,YAAY,EAAE;YAC9F,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,YAAY,EAAE;SAClF;KACF;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,MAAM;QACZ,WAAW,EAAE,IAAI;QACjB,OAAO,EAAE;YACP,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,uCAAuC,EAAE,OAAO,EAAE,SAAS,EAAE;YACrF,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,YAAY,EAAE;YACvE,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,YAAY,EAAE;YACvE,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,aAAa,EAAE,GAAG,EAAE,YAAY,EAAE;SAChF;KACF;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,MAAM;QACZ,wEAAwE;QACxE,uEAAuE;QACvE,uDAAuD;QACvD,WAAW,EAAE,MAAM;QACnB,OAAO,EAAE;YACP,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,sBAAsB,EAAE,OAAO,EAAE,SAAS,EAAE;YACtE,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,mBAAmB,EAAE,OAAO,EAAE,KAAK,EAAE;YAC/D,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,mBAAmB,EAAE,OAAO,EAAE,KAAK,EAAE;YAC/D,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,mBAAmB,EAAE,OAAO,EAAE,KAAK,EAAE;SAChE;KACF;CACF,CAAC;AAEF,iFAAiF;AACjF,MAAM,UAAU,qBAAqB,CAAC,IAAiB;IACrD,OAAO,uBAAuB,CAAC,IAAI,CAAC,EAAE,OAAO,IAAI,EAAE,CAAC;AACtD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CAAC,IAAiB;IACzD,OAAO,uBAAuB,CAAC,IAAI,CAAC,EAAE,WAAW,CAAC;AACpD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAChC,IAAiB,EACjB,OAAe;IAEf,OAAO,CAAC,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;SACpC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;SACnD,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;AAC/E,CAAC;AAQD;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CACpC,IAAiB,EACjB,OAA2B;IAE3B,MAAM,KAAK,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC;IAC5C,IAAI,CAAC,KAAK,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAEpC,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAChD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO;YACL,KAAK,EAAE,MAAM;YACb,OAAO,EAAE,GAAG,KAAK,CAAC,IAAI,IAAI,OAAO,kDAAkD,wBAAwB,wEAAwE;SACpL,CAAC;IACJ,CAAC;IAED,uEAAuE;IACvE,uEAAuE;IACvE,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,sBAAsB,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAEpE,IAAI,KAAK,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;QAC5B,OAAO;YACL,KAAK,EAAE,OAAO;YACd,OAAO,EAAE,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,OAAO,sFAAsF,KAAK,CAAC,WAAW,2BAA2B,OAAO,EAAE;SACnL,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;QACjC,OAAO;YACL,KAAK,EAAE,MAAM;YACb,OAAO,EAAE,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,OAAO,kEAAkE,KAAK,CAAC,WAAW,IAAI,OAAO,EAAE;SACxI,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}