@supacloud/compiler 0.22.0 → 0.24.0

package/dist/cli.js

@@ -78,6 +78,83 @@ function findClosestMatch(target, candidates) {
 }
 var REQUEST_CONTEXT_TOKEN_NAME = "supacloud.request-context", JOB_CONTEXT_TOKEN_NAME = "supacloud.job-context";
 
+// src/contract-manifest.ts
+function buildContractManifest(graph, artifacts) {
+  const commands = [];
+  const queries = [];
+  const routes = [];
+  const permissions = new Set;
+  const rpc = [];
+  const events = [];
+  const fixtures = new Set;
+  for (const module of graph.modules) {
+    for (const command of module.commands) {
+      if (command.permission)
+        permissions.add(command.permission);
+      if (command.rpc)
+        rpc.push({ command: command.name, adapter: command.rpc });
+      if (command.audit)
+        events.push({ name: command.audit, source: "command.audit", command: command.name });
+      commands.push({
+        name: command.name,
+        className: command.className,
+        module: module.name,
+        ...command.permission === undefined ? {} : { permission: command.permission },
+        ...command.rpc === undefined ? {} : { rpc: command.rpc },
+        transaction: command.transaction,
+        idempotency: command.idempotency,
+        ...command.audit === undefined ? {} : { auditEvent: command.audit }
+      });
+    }
+    for (const query of module.queries) {
+      queries.push({ name: query.name, className: query.className, module: module.name });
+    }
+    for (const controller of module.controllers) {
+      for (const route of controller.routes) {
+        const command = route.command ? module.commands.find((candidate) => candidate.className === route.command) : undefined;
+        if (command?.permission)
+          permissions.add(command.permission);
+        if (route.contract?.evidence)
+          fixtures.add(route.contract.evidence);
+        routes.push({
+          method: route.method,
+          path: joinRoutePaths(controller.path, route.path),
+          module: module.name,
+          controller: controller.className,
+          handler: route.handler,
+          ...route.command === undefined ? {} : { command: route.command },
+          ...command?.permission === undefined ? {} : { permission: command.permission },
+          requestSchemas: Object.fromEntries(["body", "params", "query", "headers", "cookie"].flatMap((key) => route[key] === undefined ? [] : [[key, route[key]]])),
+          ...route.response === undefined ? {} : { responseSchema: route.response },
+          ...route.contract?.evidence === undefined ? {} : { evidence: route.contract.evidence }
+        });
+      }
+    }
+  }
+  commands.sort((left, right) => left.name.localeCompare(right.name));
+  queries.sort((left, right) => left.name.localeCompare(right.name));
+  routes.sort((left, right) => `${left.method} ${left.path}`.localeCompare(`${right.method} ${right.path}`));
+  rpc.sort((left, right) => left.command.localeCompare(right.command));
+  events.sort((left, right) => left.name.localeCompare(right.name));
+  return {
+    version: 1,
+    commands,
+    queries,
+    routes,
+    permissions: [...permissions].sort(),
+    rpc,
+    events,
+    fixtures: [...fixtures].sort(),
+    artifacts: {
+      ...artifacts,
+      sdk: "generated-client",
+      openapiDocument: "generated",
+      permissionManifest: "generated"
+    }
+  };
+}
+var init_contract_manifest = () => {};
+
 // src/generate.ts
 import { createHash as createHash4 } from "node:crypto";
 import { access, mkdir, rename, unlink, writeFile } from "node:fs/promises";
@@ -197,17 +274,38 @@ function renderApplication(graph, options) {
     ""
   ].join(`
 `);
+  const commandGovernance = graph.modules.flatMap((module) => module.commands.map((command) => ({
+    module: module.name,
+    className: command.className,
+    name: command.name,
+    permission: command.permission ?? null,
+    rpc: command.rpc ?? null,
+    transaction: command.transaction ?? null,
+    audit: command.audit ?? null,
+    idempotency: command.idempotency ?? null
+  }))).sort((left, right) => `${left.module}:${left.name}`.localeCompare(`${right.module}:${right.name}`));
   const manifest = {
     version: 1,
     modules: graph.modules,
-    externalTokens: graph.externalTokens
+    externalTokens: graph.externalTokens,
+    commandGovernance: {
+      defaults: { authorization: "required", audit: "required", idempotency: "required", transaction: "required" },
+      commands: commandGovernance
+    }
   };
   const clientCode = options.generateClient ? renderClient(graph, options) : undefined;
   const openApiCode = options.generateOpenApi ? renderOpenApi(graph, options) : undefined;
   const permissionsCode = options.generatePermissions ? renderPermissions(graph) : undefined;
+  const contractsManifest = buildContractManifest(graph, {
+    client: clientCode !== undefined,
+    openapi: openApiCode !== undefined,
+    permissions: permissionsCode !== undefined
+  });
   return {
     applicationCode: code,
     manifestJson: JSON.stringify(manifest, null, 2) + `
+`,
+    contractsManifestJson: JSON.stringify(contractsManifest, null, 2) + `
 `,
     ...clientCode === undefined ? {} : { clientCode },
     ...openApiCode === undefined ? {} : { openApiCode },
@@ -219,9 +317,11 @@ async function generateApplication(graph, options) {
   await mkdir(options.outDir, { recursive: true });
   const applicationPath = join2(options.outDir, "application.ts");
   const manifestPath = join2(options.outDir, "app.manifest.json");
+  const contractsManifestPath = join2(options.outDir, "contracts.manifest.json");
   const writeCandidates = [
     { path: applicationPath, content: rendered.applicationCode },
-    { path: manifestPath, content: rendered.manifestJson }
+    { path: manifestPath, content: rendered.manifestJson },
+    { path: contractsManifestPath, content: rendered.contractsManifestJson }
   ];
   if (rendered.clientCode) {
     writeCandidates.push({ path: join2(options.outDir, "client.ts"), content: rendered.clientCode });
@@ -2082,7 +2182,9 @@ function destroyScopeInstances(
   scopeDestructions.set(scope, destruction);
   return destruction;
 }`;
-var init_generate = () => {};
+var init_generate = __esm(() => {
+  init_contract_manifest();
+});
 
 // src/graphql-client.ts
 var GRAPHQL_CLIENT_SOURCE = `
@@ -3953,7 +4055,7 @@ function validateGraph(graph, options = false) {
       if (typeof options === "object" && options.commandCapabilities) {
         const hostCaps = options.commandCapabilities;
         const rpcCaps = command.rpc && Object.hasOwn(hostCaps.rpc ?? {}, command.rpc) ? hostCaps.rpc?.[command.rpc] : undefined;
-        if (hostCaps.requirePersistentAdapters && (!rpcCaps?.boundary || rpcCaps.audit !== true || rpcCaps.idempotency !== true || hostCaps.permission !== true || !command.permission || !command.audit || command.idempotency !== "required" || rpcCaps.boundary === "database" && (rpcCaps.transaction !== true || command.transaction !== "required"))) {
+        if (hostCaps.requirePersistentAdapters && (command.rpc !== undefined && (!rpcCaps?.boundary || rpcCaps.audit !== true || rpcCaps.idempotency !== true) || hostCaps.permission !== true || !command.permission || !command.audit || command.idempotency !== "required" || command.rpc !== undefined && rpcCaps?.boundary === "database" && (rpcCaps.transaction !== true || command.transaction !== "required") || command.rpc === undefined && (hostCaps.audit !== true || hostCaps.idempotency !== true || hostCaps.transaction !== true || command.transaction !== "required"))) {
           error("command-persistence-required", `Command ${command.name} requires an explicit persistent adapter, permission, audit and idempotency policy.`, module.file, module.line, "Register a named database/external adapter, enable permission checks and declare permission, audit and required idempotency on the command.");
         }
         if (rpcCaps?.boundary === "external" && (command.transaction === "required" || rpcCaps.transaction === true)) {
@@ -6923,10 +7025,20 @@ function validateRouteContracts(graph) {
 }
 
 // src/compile.ts
+function withDefaultGovernance(options) {
+  return options.commandCapabilities === undefined ? { ...options, commandCapabilities: {
+    requirePersistentAdapters: true,
+    permission: true,
+    audit: true,
+    idempotency: true,
+    transaction: true
+  } } : options;
+}
 async function renderOptionalGraphql(options) {
   return options.graphql ? (await Promise.resolve().then(() => (init_graphql(), exports_graphql))).renderGraphql(options) : { diagnostics: [], files: {} };
 }
 async function compileProject(options) {
+  options = withDefaultGovernance(options);
   const graph = await analyzeProject(options.rootDir, options.include, options.cache, options.changedPaths);
   const diagnostics = [
     ...graph.diagnostics ?? [],
@@ -6961,6 +7073,7 @@ async function compileProject(options) {
       "client.ts": rendered.clientCode,
       "openapi.ts": rendered.openApiCode,
       "permissions.ts": rendered.permissionsCode,
+      "contracts.manifest.json": rendered.contractsManifestJson,
       "graphql.ts": graphql.files["graphql.ts"],
       "graphql.documents.ts": graphql.files["graphql.documents.ts"]
     }, options.strict ?? false));
@@ -6988,6 +7101,7 @@ async function compileProject(options) {
   return { diagnostics, graph, written, ...stats ? { stats } : {} };
 }
 async function checkProject(options) {
+  options = withDefaultGovernance(options);
   const graph = await analyzeProject(options.rootDir, options.include, options.cache, options.changedPaths);
   const diagnostics = [
     ...graph.diagnostics ?? [],
@@ -7029,7 +7143,8 @@ async function checkProject(options) {
   const expectedFiles = {
     ...graphql.files,
     "application.ts": rendered.applicationCode,
-    "app.manifest.json": rendered.manifestJson
+    "app.manifest.json": rendered.manifestJson,
+    "contracts.manifest.json": rendered.contractsManifestJson
   };
   if (rendered.clientCode) {
     expectedFiles["client.ts"] = rendered.clientCode;
@@ -11017,6 +11132,13 @@ var DEFAULT_SUPACLOUD_CONFIG = {
   generateOpenApi: true,
   generatePermissions: true,
   treeShakeUnusedProviders: true,
+  commandCapabilities: {
+    requirePersistentAdapters: true,
+    permission: true,
+    audit: true,
+    idempotency: true,
+    transaction: true
+  },
   moduleBoundaryPreset: "modular-monolith"
 };
 function defineSupacloudConfig(config = {}) {
@@ -11100,7 +11222,7 @@ function resolveSupacloudConfig(config = {}, cwd = process.cwd()) {
     ...resolved.openApi === undefined ? {} : { openApi: resolved.openApi },
     generatePermissions: resolved.generatePermissions ?? DEFAULT_SUPACLOUD_CONFIG.generatePermissions,
     moduleBoundaryPreset: resolved.moduleBoundaryPreset ?? DEFAULT_SUPACLOUD_CONFIG.moduleBoundaryPreset,
-    commandCapabilities: resolved.commandCapabilities,
+    commandCapabilities: resolved.commandCapabilities ?? DEFAULT_SUPACLOUD_CONFIG.commandCapabilities,
     ...resolved.moduleBoundaries ? { moduleBoundaries: resolved.moduleBoundaries } : {},
     ...resolved.typeSafety ? { typeSafety: resolved.typeSafety } : {},
     ...resolved.allowRouteCommandBindings === undefined ? {} : { allowRouteCommandBindings: resolved.allowRouteCommandBindings },
@@ -12173,9 +12295,9 @@ function compilerVersion() {
 }
 function migrationDependencies() {
   return {
-    "@supacloud/app": "0.14.0",
+    "@supacloud/app": "0.16.0",
     "@supacloud/compiler": compilerVersion(),
-    "@supacloud/elysia": "0.17.0",
+    "@supacloud/elysia": "0.18.0",
     elysia: "1.4.30",
     typescript: "7.0.2"
   };

package/dist/config.d.ts

@@ -23,7 +23,7 @@ export interface SupaCloudConfig {
     commandCapabilities?: CommandExecutionCapabilities;
     treeShakeUnusedProviders?: boolean;
 }
-export declare const DEFAULT_SUPACLOUD_CONFIG: Required<Omit<SupaCloudConfig, "include" | "moduleBoundaryPreset" | "commandCapabilities" | "moduleBoundaries" | "typeSafety" | "delivery" | "allowRouteCommandBindings" | "disallowControllerDirectDb" | "detectOrphanModules" | "openApi">> & {
+export declare const DEFAULT_SUPACLOUD_CONFIG: Required<Omit<SupaCloudConfig, "include" | "moduleBoundaryPreset" | "moduleBoundaries" | "typeSafety" | "delivery" | "allowRouteCommandBindings" | "disallowControllerDirectDb" | "detectOrphanModules" | "openApi">> & {
     include: string[];
     moduleBoundaryPreset: ModuleBoundaryPresetName;
 };

package/dist/contract-manifest.d.ts

@@ -0,0 +1,51 @@
+import type { ApplicationGraph } from "./types";
+export interface ContractManifest {
+    version: 1;
+    commands: Array<{
+        name: string;
+        className: string;
+        module: string;
+        permission?: string;
+        rpc?: string;
+        transaction: "required" | "none";
+        idempotency: "required" | "none";
+        auditEvent?: string;
+    }>;
+    queries: Array<{
+        name: string;
+        className: string;
+        module: string;
+    }>;
+    routes: Array<{
+        method: string;
+        path: string;
+        module: string;
+        controller: string;
+        handler: string;
+        command?: string;
+        permission?: string;
+        requestSchemas: Partial<Record<"body" | "params" | "query" | "headers" | "cookie", string>>;
+        responseSchema?: string;
+        evidence?: string;
+    }>;
+    permissions: string[];
+    rpc: Array<{
+        command: string;
+        adapter: string;
+    }>;
+    events: Array<{
+        name: string;
+        source: string;
+        command: string;
+    }>;
+    fixtures: string[];
+    artifacts: {
+        client: boolean;
+        openapi: boolean;
+        permissions: boolean;
+        sdk: "generated-client";
+        openapiDocument: "generated";
+        permissionManifest: "generated";
+    };
+}
+export declare function buildContractManifest(graph: ApplicationGraph, artifacts: Pick<ContractManifest["artifacts"], "client" | "openapi" | "permissions">): ContractManifest;

package/dist/generate.d.ts

@@ -14,6 +14,7 @@ export interface GenerateOptions {
 export interface RenderedArtifacts {
     applicationCode: string;
     manifestJson: string;
+    contractsManifestJson: string;
     clientCode?: string;
     openApiCode?: string;
     permissionsCode?: string;

package/dist/index.d.ts

@@ -22,6 +22,8 @@ export { TraitCompiler } from "./traits";
 export type { TraitCompilation, TraitHandler, TraitKind, TraitRecord } from "./traits";
 export { generateApplication, renderApplication, renderClient, renderOpenApi } from "./generate";
 export type { GenerateOptions, RenderedArtifacts } from "./generate";
+export { buildContractManifest } from "./contract-manifest";
+export type { ContractManifest } from "./contract-manifest";
 export { diffOpenApiDocuments, exportGeneratedOpenApiJson, formatOpenApiDiff, loadGeneratedOpenApiDocument, parseOpenApiDocument, readOpenApiJson, serializeOpenApiJson, writeOpenApiJson, OpenApiDocumentError, } from "./openapi-tools";
 export type { OpenApiDiffChange, OpenApiDiffResult, OpenApiDocument, OpenApiExportOptions, OpenApiJsonWriteResult, OpenApiObject, } from "./openapi-tools";
 export type { ContextPack, DoctorResult, ExecutionPlan } from "./inspect";

package/dist/index.js

@@ -77,6 +77,83 @@ function findClosestMatch(target, candidates) {
 }
 var REQUEST_CONTEXT_TOKEN_NAME = "supacloud.request-context", JOB_CONTEXT_TOKEN_NAME = "supacloud.job-context";
 
+// src/contract-manifest.ts
+function buildContractManifest(graph, artifacts) {
+  const commands = [];
+  const queries = [];
+  const routes = [];
+  const permissions = new Set;
+  const rpc = [];
+  const events = [];
+  const fixtures = new Set;
+  for (const module of graph.modules) {
+    for (const command of module.commands) {
+      if (command.permission)
+        permissions.add(command.permission);
+      if (command.rpc)
+        rpc.push({ command: command.name, adapter: command.rpc });
+      if (command.audit)
+        events.push({ name: command.audit, source: "command.audit", command: command.name });
+      commands.push({
+        name: command.name,
+        className: command.className,
+        module: module.name,
+        ...command.permission === undefined ? {} : { permission: command.permission },
+        ...command.rpc === undefined ? {} : { rpc: command.rpc },
+        transaction: command.transaction,
+        idempotency: command.idempotency,
+        ...command.audit === undefined ? {} : { auditEvent: command.audit }
+      });
+    }
+    for (const query of module.queries) {
+      queries.push({ name: query.name, className: query.className, module: module.name });
+    }
+    for (const controller of module.controllers) {
+      for (const route of controller.routes) {
+        const command = route.command ? module.commands.find((candidate) => candidate.className === route.command) : undefined;
+        if (command?.permission)
+          permissions.add(command.permission);
+        if (route.contract?.evidence)
+          fixtures.add(route.contract.evidence);
+        routes.push({
+          method: route.method,
+          path: joinRoutePaths(controller.path, route.path),
+          module: module.name,
+          controller: controller.className,
+          handler: route.handler,
+          ...route.command === undefined ? {} : { command: route.command },
+          ...command?.permission === undefined ? {} : { permission: command.permission },
+          requestSchemas: Object.fromEntries(["body", "params", "query", "headers", "cookie"].flatMap((key) => route[key] === undefined ? [] : [[key, route[key]]])),
+          ...route.response === undefined ? {} : { responseSchema: route.response },
+          ...route.contract?.evidence === undefined ? {} : { evidence: route.contract.evidence }
+        });
+      }
+    }
+  }
+  commands.sort((left, right) => left.name.localeCompare(right.name));
+  queries.sort((left, right) => left.name.localeCompare(right.name));
+  routes.sort((left, right) => `${left.method} ${left.path}`.localeCompare(`${right.method} ${right.path}`));
+  rpc.sort((left, right) => left.command.localeCompare(right.command));
+  events.sort((left, right) => left.name.localeCompare(right.name));
+  return {
+    version: 1,
+    commands,
+    queries,
+    routes,
+    permissions: [...permissions].sort(),
+    rpc,
+    events,
+    fixtures: [...fixtures].sort(),
+    artifacts: {
+      ...artifacts,
+      sdk: "generated-client",
+      openapiDocument: "generated",
+      permissionManifest: "generated"
+    }
+  };
+}
+var init_contract_manifest = () => {};
+
 // src/generate.ts
 import { createHash as createHash4 } from "node:crypto";
 import { access, mkdir, rename, unlink, writeFile } from "node:fs/promises";
@@ -196,17 +273,38 @@ function renderApplication(graph, options) {
     ""
   ].join(`
 `);
+  const commandGovernance = graph.modules.flatMap((module) => module.commands.map((command) => ({
+    module: module.name,
+    className: command.className,
+    name: command.name,
+    permission: command.permission ?? null,
+    rpc: command.rpc ?? null,
+    transaction: command.transaction ?? null,
+    audit: command.audit ?? null,
+    idempotency: command.idempotency ?? null
+  }))).sort((left, right) => `${left.module}:${left.name}`.localeCompare(`${right.module}:${right.name}`));
   const manifest = {
     version: 1,
     modules: graph.modules,
-    externalTokens: graph.externalTokens
+    externalTokens: graph.externalTokens,
+    commandGovernance: {
+      defaults: { authorization: "required", audit: "required", idempotency: "required", transaction: "required" },
+      commands: commandGovernance
+    }
   };
   const clientCode = options.generateClient ? renderClient(graph, options) : undefined;
   const openApiCode = options.generateOpenApi ? renderOpenApi(graph, options) : undefined;
   const permissionsCode = options.generatePermissions ? renderPermissions(graph) : undefined;
+  const contractsManifest = buildContractManifest(graph, {
+    client: clientCode !== undefined,
+    openapi: openApiCode !== undefined,
+    permissions: permissionsCode !== undefined
+  });
   return {
     applicationCode: code,
     manifestJson: JSON.stringify(manifest, null, 2) + `
+`,
+    contractsManifestJson: JSON.stringify(contractsManifest, null, 2) + `
 `,
     ...clientCode === undefined ? {} : { clientCode },
     ...openApiCode === undefined ? {} : { openApiCode },
@@ -218,9 +316,11 @@ async function generateApplication(graph, options) {
   await mkdir(options.outDir, { recursive: true });
   const applicationPath = join2(options.outDir, "application.ts");
   const manifestPath = join2(options.outDir, "app.manifest.json");
+  const contractsManifestPath = join2(options.outDir, "contracts.manifest.json");
   const writeCandidates = [
     { path: applicationPath, content: rendered.applicationCode },
-    { path: manifestPath, content: rendered.manifestJson }
+    { path: manifestPath, content: rendered.manifestJson },
+    { path: contractsManifestPath, content: rendered.contractsManifestJson }
   ];
   if (rendered.clientCode) {
     writeCandidates.push({ path: join2(options.outDir, "client.ts"), content: rendered.clientCode });
@@ -2081,7 +2181,9 @@ function destroyScopeInstances(
   scopeDestructions.set(scope, destruction);
   return destruction;
 }`;
-var init_generate = () => {};
+var init_generate = __esm(() => {
+  init_contract_manifest();
+});
 
 // src/graphql-client.ts
 var GRAPHQL_CLIENT_SOURCE = `
@@ -3948,7 +4050,7 @@ function validateGraph(graph, options = false) {
       if (typeof options === "object" && options.commandCapabilities) {
         const hostCaps = options.commandCapabilities;
         const rpcCaps = command.rpc && Object.hasOwn(hostCaps.rpc ?? {}, command.rpc) ? hostCaps.rpc?.[command.rpc] : undefined;
-        if (hostCaps.requirePersistentAdapters && (!rpcCaps?.boundary || rpcCaps.audit !== true || rpcCaps.idempotency !== true || hostCaps.permission !== true || !command.permission || !command.audit || command.idempotency !== "required" || rpcCaps.boundary === "database" && (rpcCaps.transaction !== true || command.transaction !== "required"))) {
+        if (hostCaps.requirePersistentAdapters && (command.rpc !== undefined && (!rpcCaps?.boundary || rpcCaps.audit !== true || rpcCaps.idempotency !== true) || hostCaps.permission !== true || !command.permission || !command.audit || command.idempotency !== "required" || command.rpc !== undefined && rpcCaps?.boundary === "database" && (rpcCaps.transaction !== true || command.transaction !== "required") || command.rpc === undefined && (hostCaps.audit !== true || hostCaps.idempotency !== true || hostCaps.transaction !== true || command.transaction !== "required"))) {
           error("command-persistence-required", `Command ${command.name} requires an explicit persistent adapter, permission, audit and idempotency policy.`, module.file, module.line, "Register a named database/external adapter, enable permission checks and declare permission, audit and required idempotency on the command.");
         }
         if (rpcCaps?.boundary === "external" && (command.transaction === "required" || rpcCaps.transaction === true)) {
@@ -6920,10 +7022,20 @@ function validateRouteContracts(graph) {
 }
 
 // src/compile.ts
+function withDefaultGovernance(options) {
+  return options.commandCapabilities === undefined ? { ...options, commandCapabilities: {
+    requirePersistentAdapters: true,
+    permission: true,
+    audit: true,
+    idempotency: true,
+    transaction: true
+  } } : options;
+}
 async function renderOptionalGraphql(options) {
   return options.graphql ? (await Promise.resolve().then(() => (init_graphql(), exports_graphql))).renderGraphql(options) : { diagnostics: [], files: {} };
 }
 async function compileProject(options) {
+  options = withDefaultGovernance(options);
   const graph = await analyzeProject(options.rootDir, options.include, options.cache, options.changedPaths);
   const diagnostics = [
     ...graph.diagnostics ?? [],
@@ -6958,6 +7070,7 @@ async function compileProject(options) {
       "client.ts": rendered.clientCode,
       "openapi.ts": rendered.openApiCode,
       "permissions.ts": rendered.permissionsCode,
+      "contracts.manifest.json": rendered.contractsManifestJson,
       "graphql.ts": graphql.files["graphql.ts"],
       "graphql.documents.ts": graphql.files["graphql.documents.ts"]
     }, options.strict ?? false));
@@ -6985,6 +7098,7 @@ async function compileProject(options) {
   return { diagnostics, graph, written, ...stats ? { stats } : {} };
 }
 async function checkProject(options) {
+  options = withDefaultGovernance(options);
   const graph = await analyzeProject(options.rootDir, options.include, options.cache, options.changedPaths);
   const diagnostics = [
     ...graph.diagnostics ?? [],
@@ -7026,7 +7140,8 @@ async function checkProject(options) {
   const expectedFiles = {
     ...graphql.files,
     "application.ts": rendered.applicationCode,
-    "app.manifest.json": rendered.manifestJson
+    "app.manifest.json": rendered.manifestJson,
+    "contracts.manifest.json": rendered.contractsManifestJson
   };
   if (rendered.clientCode) {
     expectedFiles["client.ts"] = rendered.clientCode;
@@ -11750,9 +11865,9 @@ function compilerVersion() {
 }
 function migrationDependencies() {
   return {
-    "@supacloud/app": "0.14.0",
+    "@supacloud/app": "0.16.0",
     "@supacloud/compiler": compilerVersion(),
-    "@supacloud/elysia": "0.17.0",
+    "@supacloud/elysia": "0.18.0",
     elysia: "1.4.30",
     typescript: "7.0.2"
   };
@@ -12452,6 +12567,7 @@ function exportGraphDot(graph) {
 
 // src/index.ts
 init_generate();
+init_contract_manifest();
 
 // src/openapi-tools.ts
 import { mkdir as mkdir4, readFile as readFile10, rename as rename6, unlink as unlink3, writeFile as writeFile5 } from "node:fs/promises";
@@ -12973,6 +13089,13 @@ var DEFAULT_SUPACLOUD_CONFIG = {
   generateOpenApi: true,
   generatePermissions: true,
   treeShakeUnusedProviders: true,
+  commandCapabilities: {
+    requirePersistentAdapters: true,
+    permission: true,
+    audit: true,
+    idempotency: true,
+    transaction: true
+  },
   moduleBoundaryPreset: "modular-monolith"
 };
 function defineSupacloudConfig(config = {}) {
@@ -13056,7 +13179,7 @@ function resolveSupacloudConfig(config = {}, cwd = process.cwd()) {
     ...resolved.openApi === undefined ? {} : { openApi: resolved.openApi },
     generatePermissions: resolved.generatePermissions ?? DEFAULT_SUPACLOUD_CONFIG.generatePermissions,
     moduleBoundaryPreset: resolved.moduleBoundaryPreset ?? DEFAULT_SUPACLOUD_CONFIG.moduleBoundaryPreset,
-    commandCapabilities: resolved.commandCapabilities,
+    commandCapabilities: resolved.commandCapabilities ?? DEFAULT_SUPACLOUD_CONFIG.commandCapabilities,
     ...resolved.moduleBoundaries ? { moduleBoundaries: resolved.moduleBoundaries } : {},
     ...resolved.typeSafety ? { typeSafety: resolved.typeSafety } : {},
     ...resolved.allowRouteCommandBindings === undefined ? {} : { allowRouteCommandBindings: resolved.allowRouteCommandBindings },
@@ -13111,6 +13234,7 @@ export {
   TraitCompiler,
   analyzeProject,
   applyDiagnosticFix,
+  buildContractManifest,
   buildDeliveryProject,
   camelName,
   checkProject,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@supacloud/compiler",
-  "version": "0.22.0",
+  "version": "0.24.0",
   "description": "Static compiler for @supacloud/app metadata: builds the application graph from AST, validates it, and generates reflection-free factory code",
   "type": "module",
   "main": "./dist/index.js",