@ogygie/core 0.3.0 → 0.4.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ogygie/core",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "description": "Ogygie framework core: manifest/spec/error schemas, generic tenancy and gate tooling. Ships TypeScript sources — Ogygie products run tsx/vitest by construction (D1).",
   "license": "MIT",
   "type": "module",

package/src/manifest.schema.test.ts

@@ -349,3 +349,27 @@ describe("manifest — bloc vocabulary (spec product-vocabulary-gate B2)", () =>
     expect(issue?.path.join(".")).toBe("vocabulary.entries.1.canonical");
   });
 });
+
+describe("manifest — apps vendored (spec product-vocabulary-gate B3, v3)", () => {
+  function manifestWithApp(app: Record<string, unknown>) {
+    return {
+      version: 1,
+      product: { name: "acme", description: "SaaS générique servant de fixture aux tests du manifeste." },
+      apps: [{ name: "tooling", path: "packages/tooling", type: "front", entryPoint: "packages/tooling/src/main.tsx", ...app }],
+      features: [],
+      conventions: { agentsMd: "AGENTS.md", failuresMd: "FAILURES.md", specsFolder: "specs/" },
+    };
+  }
+
+  it("une app déclarée vendored: true est acceptée", () => {
+    expect(OgygieManifestSchema.safeParse(manifestWithApp({ vendored: true })).success).toBe(true);
+  });
+
+  it("une app sans le champ reste la norme (le produit maintient son code)", () => {
+    expect(OgygieManifestSchema.safeParse(manifestWithApp({})).success).toBe(true);
+  });
+
+  it("MUTATION : `vendored: false` est refusé — pas de troisième état", () => {
+    expect(OgygieManifestSchema.safeParse(manifestWithApp({ vendored: false })).success).toBe(false);
+  });
+});

package/src/manifest.schema.ts

@@ -159,6 +159,19 @@ export const OgygieManifestSchema = z.object({
       path: z.string(),
       type: z.enum(["api", "front", "gateway"]),
       entryPoint: z.string(),
+      /**
+       * Code the product HOSTS without maintaining it — imported as-is from
+       * elsewhere, the framework's own dev tooling being the typical case.
+       * A vendored app is skipped by the vocabulary gate: a product's business
+       * vocabulary has no claim over code it will never rename.
+       *
+       * A literal `true`, like `shared` on a table: an app is either vendored
+       * (and says so) or the product's own (and stays silent) — no third
+       * state. The derogation is declared here, machine-readably, and the gate
+       * ANNOUNCES it on every run — one that stops being visible is one that
+       * gets forgotten.
+       */
+      vendored: z.literal(true).optional(),
     }),
   ),
   features: z.array(FeatureManifestSchema),