@rizom/ops 0.2.0-alpha.318 → 0.2.0-alpha.319

package/dist/load-registry.d.ts

@@ -76,6 +76,7 @@ export interface ResolvedUserIdentity {
     handle: string;
     cohort: string;
     brainVersion: string;
+    bundleContract: PilotConfig["bundleContract"];
     bundles: CanonicalBundleId[];
     add: string[];
     remove: string[];

package/dist/schema.d.ts

@@ -3,10 +3,16 @@ export declare const exactVersionSchema: z.ZodString;
 export declare const handleSchema: z.ZodString;
 export declare const secretNameSchema: z.ZodString;
 export declare const agePublicKeySchema: z.ZodString;
+export declare const CAPABILITY_BUNDLE_CONTRACT: "capability-bundles-v1";
 export declare const canonicalBundleIdSchema: z.ZodEnum<{
     core: "core";
+    media: "media";
+    automation: "automation";
+    web: "web";
+    chat: "chat";
     site: "site";
     publishing: "publishing";
+    federation: "federation";
     team: "team";
 }>;
 export type CanonicalBundleId = z.output<typeof canonicalBundleIdSchema>;
@@ -24,6 +30,7 @@ export declare const profileKindSchema: z.ZodEnum<{
 }>;
 export interface PilotConfig {
     brainVersion: string;
+    bundleContract: typeof CAPABILITY_BUNDLE_CONTRACT;
     bundles: CanonicalBundleId[];
     add?: string[] | undefined;
     remove?: string[] | undefined;

package/dist/stage-legacy-crossover.d.ts

@@ -1,3 +1,4 @@
+import { type CapabilityBundleReview } from "./capability-bundle-migration";
 import { type SiteOverrideConfig } from "./schema";
 export interface StagedCrossover {
     outputDir: string;
@@ -9,9 +10,11 @@ interface ReviewedSitePinManifest {
 export type ReviewedSitePins = ReviewedSitePinManifest["sites"];
 export interface StageLegacyCrossoverOptions {
     sitePins?: ReviewedSitePins | undefined;
+    bundleReview?: CapabilityBundleReview | undefined;
 }
 export declare function parseReviewedSitePins(input: string): ReviewedSitePins;
 export declare function loadReviewedSitePins(filePath: string): Promise<ReviewedSitePins>;
+export declare function loadCapabilityBundleReview(filePath: string): Promise<CapabilityBundleReview>;
 /**
  * Build a complete review copy without mutating the source repository.
  * This is offline migration tooling; active desired-state loading is canonical-only.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rizom/ops",
-  "version": "0.2.0-alpha.318",
+  "version": "0.2.0-alpha.319",
   "description": "Operator CLI for managing private brain fleet registry repos",
   "keywords": [
     "brains",

package/templates/rover-pilot/docs/canonical-crossover-record.md

@@ -21,6 +21,7 @@ Do not include secret values, private keys, access tokens, or decrypted user con
 - Canonical review commit:
 - Secret-free review diff SHA-256:
 - Identity-review evidence SHA-256:
+- Reviewed source-to-target bundle manifest SHA-256:
 - Reviewed hosted-site pin manifest SHA-256:
 - Source and review worktrees clean:
 
@@ -64,6 +65,8 @@ Record every image. Tags alone are not immutable evidence.
 - Secret selector names and encrypted secret artifacts unchanged:
 - Per-user runtime-version and site-package tag inputs reviewed:
 - No plaintext source secrets copied into the review artifact:
+- Every generated config declares `bundleContract: capability-bundles-v1`:
+- Pilot and explicit cohort source selections exactly matched the reviewed manifest:
 - No removed model, preset, or old-format schema discriminator remains:
 - Every external hosted site and theme package has an exact reviewed pin:
 

package/templates/rover-pilot/pilot.yaml

@@ -1,9 +1,13 @@
 brainVersion: 0.1.1-alpha.14
+bundleContract: capability-bundles-v1
 githubOrg: <github-org>
 contentRepoPrefix: rover-
 domainSuffix: .rizom.ai
 bundles:
   - core
+  - media
+  - web
+  - chat
 aiApiKey: AI_API_KEY
 gitSyncToken: GIT_SYNC_TOKEN
 contentRepoAdminToken: CONTENT_REPO_ADMIN_TOKEN