@supacloud/compiler 0.47.2 → 0.48.0

package/dist/index.js

@@ -262,6 +262,9 @@ function validateFeatureSpec(spec, module) {
   if (!spec.name.trim() || spec.states.length === 0 || spec.states.some((state) => !state.trim()) || new Set(spec.states).size !== spec.states.length) {
     error("invalid-feature-states", "Feature name and states must be non-empty; states must be unique.");
   }
+  if (spec.tenantField !== undefined && !/^[A-Za-z_][A-Za-z0-9_]*$/.test(spec.tenantField)) {
+    error("feature-tenant-boundary-invalid", `Feature ${spec.name} declares an unsafe tenant field.`);
+  }
   const names = new Set;
   for (const transition of spec.transitions) {
     if (!transition.name.trim() || names.has(transition.name)) {
@@ -274,8 +277,41 @@ function validateFeatureSpec(spec, module) {
     if (transition.permission !== undefined && !transition.permission.trim()) {
       error("feature-governance-drift", `Transition ${transition.name} declares an empty permission.`);
     }
+    if (transition.persistence) {
+      const persistence = transition.persistence;
+      if (persistence.boundary === "database" && (persistence.optimisticLock !== "required" || !/^[A-Za-z_][A-Za-z0-9_]*$/.test(persistence.versionField ?? "") || !/^[A-Za-z_][A-Za-z0-9_]*$/.test(persistence.tenantField ?? "") || !/^[A-Za-z_][A-Za-z0-9_]*$/.test(persistence.stateField ?? "") || new Set([persistence.tenantField, persistence.versionField, persistence.stateField]).size !== 3 || persistence.receipt !== "required" || persistence.reconciliation !== "none")) {
+        error("feature-persistence-invalid", `Database transition ${transition.name} requires distinct safe tenant/version/state fields, optimistic locking, and a receipt, without reconciliation.`);
+      }
+      if (persistence.boundary === "database" && spec.tenantField !== persistence.tenantField) {
+        error("feature-tenant-boundary-drift", `Database transition ${transition.name} tenant field must match Feature ${spec.name} tenantField.`);
+      }
+      if (persistence.boundary === "external" && (persistence.optimisticLock !== "none" || persistence.versionField !== undefined || persistence.tenantField !== undefined || persistence.stateField !== undefined || persistence.receipt !== "required" || persistence.reconciliation !== "required")) {
+        error("feature-persistence-invalid", `External transition ${transition.name} requires a receipt and reconciliation, without database optimistic locking.`);
+      }
+      if (persistence.boundary === "external" && !transition.job) {
+        error("feature-job-unresolved", `External transition ${transition.name} must bind a reconciliation Job.`);
+      }
+      if (!transition.command) {
+        error("feature-command-unresolved", `Persistent transition ${transition.name} must reference a command.`);
+      }
+      if (!transition.permission?.trim()) {
+        error("feature-governance-drift", `Persistent transition ${transition.name} must declare a permission.`);
+      }
+    }
     if (!module)
       continue;
+    if (transition.persistence?.boundary === "database") {
+      for (const query of module.queries) {
+        if (query.tenantScope !== "required") {
+          error("feature-query-tenant-boundary", `Query ${query.className} in Feature ${spec.name} must declare tenantScope: "required".`);
+        }
+      }
+      for (const job of module.jobs ?? []) {
+        if (job.tenantScope !== "required") {
+          error("feature-job-tenant-boundary", `Job ${job.className} in Feature ${spec.name} must declare tenantScope: "required".`);
+        }
+      }
+    }
     const commands = module.commands.filter((command) => command.className === transition.command || command.name === transition.command);
     const command = commands[0];
     if (transition.command && commands.length !== 1) {
@@ -290,23 +326,59 @@ function validateFeatureSpec(spec, module) {
           error("feature-governance-drift", `Transition ${transition.name} ${key} differs from command ${command.className}.`);
         }
       }
+      if (transition.persistence) {
+        if (transition.persistence.boundary === "database" && command.transaction !== "required") {
+          error("feature-persistence-drift", `Database transition ${transition.name} requires command ${command.className} to declare transaction: "required".`);
+        }
+        if (command.tenantScope !== "required") {
+          error("feature-command-tenant-boundary", `Command ${command.className} in Feature ${spec.name} must declare tenantScope: "required".`);
+        }
+        if (transition.persistence.boundary === "external" && command.transaction !== "none") {
+          error("feature-persistence-drift", `External transition ${transition.name} requires command ${command.className} to declare transaction: "none".`);
+        }
+        if (command.idempotency !== "required" || !command.audit) {
+          error("feature-persistence-drift", `Persistent transition ${transition.name} requires command ${command.className} to declare idempotency and audit.`);
+        }
+      }
+    }
+    if (transition.job) {
+      const jobs = (module.jobs ?? []).filter((job) => job.className === transition.job || job.name === transition.job);
+      if (jobs.length !== 1) {
+        error("feature-job-unresolved", `Transition ${transition.name} must reference exactly one Job in module ${module.name}.`);
+      } else {
+        const job = jobs[0];
+        if (job.tenantScope !== "required") {
+          error("feature-job-tenant-boundary", `Job ${job.className} in Feature ${spec.name} must declare tenantScope: "required".`);
+        }
+        if (job.idempotency !== "required") {
+          error("feature-job-idempotency", `Job ${job.className} in Feature ${spec.name} must declare idempotency: "required".`);
+        }
+        if (job.mode === undefined) {
+          error("feature-job-mode", `Job ${job.className} in Feature ${spec.name} must declare mode: "task" or "workflow".`);
+        }
+        if (job.input === undefined || job.schemaKinds?.input !== "declared") {
+          error("feature-job-contract", `Job ${job.className} in Feature ${spec.name} must declare a non-opaque input schema.`);
+        }
+        const provider = module.providers.find((candidate) => candidate.token === job.className || candidate.useClass === job.className);
+        if (job.tenantScope === "required" && provider && !provider.deps.some((token) => isJobContextToken(token))) {
+          error("feature-job-context", `Job ${job.className} in Feature ${spec.name} must inject JOB_CONTEXT for trusted tenant execution.`);
+        }
+      }
     }
     if (transition.route) {
       const routes = module.controllers.flatMap((controller) => controller.routes.filter((route) => `${route.method} ${joinRoutePaths(controller.path, route.path)}` === transition.route));
       if (routes.length !== 1) {
         error("feature-route-unresolved", `Transition ${transition.name} must reference exactly one route '${transition.route}' in module ${module.name}.`);
-      } else if (command && routes[0]?.command !== command.className) {
+      } else if (command && transition.routeBinding !== "controller" && routes[0]?.command !== command.className) {
         error("feature-route-drift", `Route ${transition.route} is not bound to ${command.className}.`);
+      } else if (transition.routeBinding === "controller" && routes[0]?.command !== undefined) {
+        error("feature-route-drift", `Controller-bound route ${transition.route} must not also declare a framework command binding.`);
       }
     }
   }
   return diagnostics;
 }
 function generateFeatureSource(spec) {
-  const errors = validateFeatureSpec(spec);
-  if (errors.length)
-    throw new Error(errors.map((error) => error.message).join(`
-`));
   if (spec.transitions.some((transition) => !transition.permission)) {
     throw new Error("Spec-to-Code requires an explicit permission for every transition.");
   }
@@ -314,13 +386,34 @@ function generateFeatureSource(spec) {
     ...transition,
     command: `Transition${index + 1}Command`
   }));
+  const errors = validateFeatureSpec({ ...spec, transitions });
+  if (errors.length)
+    throw new Error(errors.map((error) => error.message).join(`
+`));
   if (transitions.some((transition) => transition.route)) {
     throw new Error("Generate the command slice first; existing HTTP routes require explicit schema and handler implementations.");
   }
-  const sourceSpec = { name: spec.name, states: spec.states, transitions: Object.fromEntries(transitions.map((transition) => {
-    const { name, ...options } = transition;
-    return [name, options];
-  })) };
+  const sourceSpec = {
+    name: spec.name,
+    states: spec.states,
+    tenantField: spec.tenantField ?? "tenant_id",
+    transitions: Object.fromEntries(transitions.map((transition) => {
+      const { name, ...options } = transition;
+      const persistence = transition.persistence ?? {
+        boundary: "database",
+        optimisticLock: "required",
+        versionField: "version",
+        tenantField: "tenant_id",
+        stateField: "state",
+        receipt: "required",
+        reconciliation: "none"
+      };
+      return [name, {
+        ...options,
+        persistence
+      }];
+    }))
+  };
   return [
     'import { Command, defineFeatureSlice, defineFeatureSpec } from "@supacloud/app";',
     "",
@@ -331,9 +424,10 @@ function generateFeatureSource(spec) {
       `@Command(${JSON.stringify({
         name: `${spec.name}.${transition.name}`,
         permission: transition.permission,
-        transaction: transition.transaction ?? "none",
-        idempotency: transition.idempotency ?? "none",
-        audit: transition.audit
+        transaction: transition.transaction ?? (transition.persistence?.boundary === "external" ? "none" : "required"),
+        idempotency: transition.idempotency ?? "required",
+        audit: transition.audit ?? `${spec.name}.${transition.name}`,
+        tenantScope: "required"
       })})`,
       `export class ${transition.command} {`,
       `  execute(state: FeatureState): never {`,
@@ -801,13 +895,40 @@ function validateGraph(graph, options = false) {
           permission: `${module.name}.${command.name}`
         });
       }
+      if (command.rpc && command.branches) {
+        error("command-rpc-branches-conflict", `Command ${command.name} cannot declare both rpc and branches.`, module.file, module.line);
+      }
+      const branchAdapters = command.branches ?? [];
+      for (const branch of branchAdapters) {
+        if (typeof options !== "object" || !Object.hasOwn(options.commandCapabilities?.rpc ?? {}, branch.rpc)) {
+          error("command-rpc-unavailable", `Command ${command.name} requires configured RPC adapter '${branch.rpc}'.`, module.file, module.line);
+        }
+      }
       if (command.rpc && (typeof options !== "object" || !Object.hasOwn(options.commandCapabilities?.rpc ?? {}, command.rpc))) {
         error("command-rpc-unavailable", `Command ${command.name} requires configured RPC adapter '${command.rpc}'.`, module.file, module.line);
       }
       if (typeof options === "object" && options.commandCapabilities) {
         const hostCaps = options.commandCapabilities;
         const rpcCaps = command.rpc && Object.hasOwn(hostCaps.rpc ?? {}, command.rpc) ? hostCaps.rpc?.[command.rpc] : undefined;
-        if (hostCaps.requirePersistentAdapters && (command.rpc !== undefined && (!rpcCaps?.boundary || rpcCaps.audit !== true || rpcCaps.idempotency !== true) || hostCaps.permission !== true || !command.permission || !command.audit || command.idempotency !== "required" || command.rpc !== undefined && rpcCaps?.boundary === "database" && (rpcCaps.transaction !== true || command.transaction !== "required") || command.rpc === undefined && (hostCaps.audit !== true || hostCaps.idempotency !== true || hostCaps.transaction !== true || command.transaction !== "required") || command.rpc !== undefined && rpcCaps?.boundary === "external" && rpcCaps.reconcile !== true)) {
+        const branchCaps = branchAdapters.map((branch) => ({
+          branch,
+          capabilities: Object.hasOwn(hostCaps.rpc ?? {}, branch.rpc) ? hostCaps.rpc?.[branch.rpc] : undefined
+        }));
+        for (const { branch, capabilities } of branchCaps) {
+          if (capabilities?.boundary === "external" && (branch.transaction === "required" || capabilities.transaction === true)) {
+            error("command-external-transaction", `Command ${command.name} branch '${branch.when}' calls an external service; use transaction: 'none'.`, module.file, module.line, "Use transaction: 'none' with durable intent and reconciliation.");
+          }
+          if (branch.audit && capabilities?.audit !== true) {
+            error("command-audit-unsupported", `Command ${command.name} branch '${branch.when}' declares audit, but runtime audit persistence is unavailable.`, module.file, module.line);
+          }
+          if (branch.idempotency === "required" && capabilities?.idempotency !== true) {
+            error("command-idempotency-unsupported", `Command ${command.name} branch '${branch.when}' declares idempotency, but receipt persistence is unavailable.`, module.file, module.line);
+          }
+          if (branch.transaction === "required" && capabilities?.transaction !== true) {
+            error("command-transaction-unsupported", `Command ${command.name} branch '${branch.when}' declares transaction, but transaction support is unavailable.`, module.file, module.line);
+          }
+        }
+        if (hostCaps.requirePersistentAdapters && (command.rpc !== undefined && (!rpcCaps?.boundary || rpcCaps.audit !== true || rpcCaps.idempotency !== true) || branchCaps.length > 0 && branchCaps.some(({ branch, capabilities }) => !capabilities?.boundary || capabilities.audit !== true || capabilities.idempotency !== true || capabilities.boundary === "database" && (capabilities.transaction !== true || branch.transaction !== "required")) || hostCaps.permission !== true || !command.permission || branchCaps.length === 0 && (!command.audit || command.idempotency !== "required") || branchCaps.length > 0 && branchCaps.some(({ branch }) => !branch.audit || branch.idempotency !== "required") || branchCaps.length > 0 && branchCaps.some(({ capabilities }) => capabilities?.boundary === "external" && capabilities.reconcile !== true) || command.rpc !== undefined && rpcCaps?.boundary === "database" && (rpcCaps.transaction !== true || command.transaction !== "required") || command.rpc === undefined && branchCaps.length === 0 && (hostCaps.audit !== true || hostCaps.idempotency !== true || hostCaps.transaction !== true || command.transaction !== "required") || command.rpc !== undefined && rpcCaps?.boundary === "external" && rpcCaps.reconcile !== true)) {
           error("command-persistence-required", `Command ${command.name} requires an explicit persistent adapter, permission, audit and idempotency policy.`, module.file, module.line, "Register a named database/external adapter, enable permission checks and declare permission, audit and required idempotency on the command.");
         }
         if (rpcCaps?.boundary === "external" && (command.transaction === "required" || rpcCaps.transaction === true)) {
@@ -1283,6 +1404,18 @@ var init_validate = __esm(() => {
     "invalid-feature-transition": { code: "SC6103", docsUrl: "https://supacloud.dev/errors/SC6103" },
     "feature-command-unresolved": { code: "SC6104", docsUrl: "https://supacloud.dev/errors/SC6104" },
     "feature-governance-drift": { code: "SC6105", docsUrl: "https://supacloud.dev/errors/SC6105" },
+    "feature-persistence-invalid": { code: "SC6110", docsUrl: "https://supacloud.dev/errors/SC6110" },
+    "feature-persistence-drift": { code: "SC6111", docsUrl: "https://supacloud.dev/errors/SC6111" },
+    "feature-tenant-boundary-invalid": { code: "SC6112", docsUrl: "https://supacloud.dev/errors/SC6112" },
+    "feature-tenant-boundary-drift": { code: "SC6113", docsUrl: "https://supacloud.dev/errors/SC6113" },
+    "feature-query-tenant-boundary": { code: "SC6114", docsUrl: "https://supacloud.dev/errors/SC6114" },
+    "feature-job-tenant-boundary": { code: "SC6115", docsUrl: "https://supacloud.dev/errors/SC6115" },
+    "feature-command-tenant-boundary": { code: "SC6116", docsUrl: "https://supacloud.dev/errors/SC6116" },
+    "feature-job-unresolved": { code: "SC6117", docsUrl: "https://supacloud.dev/errors/SC6117" },
+    "feature-job-idempotency": { code: "SC6118", docsUrl: "https://supacloud.dev/errors/SC6118" },
+    "feature-job-mode": { code: "SC6119", docsUrl: "https://supacloud.dev/errors/SC6119" },
+    "feature-job-contract": { code: "SC6120", docsUrl: "https://supacloud.dev/errors/SC6120" },
+    "feature-job-context": { code: "SC6121", docsUrl: "https://supacloud.dev/errors/SC6121" },
     "feature-route-unresolved": { code: "SC6106", docsUrl: "https://supacloud.dev/errors/SC6106" },
     "feature-route-drift": { code: "SC6107", docsUrl: "https://supacloud.dev/errors/SC6107" },
     "invalid-feature-spec": { code: "SC6108", docsUrl: "https://supacloud.dev/errors/SC6108" }
@@ -1293,6 +1426,8 @@ var init_validate = __esm(() => {
 function buildContractManifest(graph, artifacts) {
   const commands = [];
   const queries = [];
+  const jobs = [];
+  const features = [];
   const routes = [];
   const permissions = new Set;
   const rpc = [];
@@ -1304,21 +1439,95 @@ function buildContractManifest(graph, artifacts) {
         permissions.add(command.permission);
       if (command.rpc)
         rpc.push({ command: command.name, adapter: command.rpc });
+      for (const branch of command.branches ?? []) {
+        rpc.push({ command: `${command.name} [${branch.when}]`, adapter: branch.rpc });
+      }
       if (command.audit)
         events.push({ name: command.audit, source: "command.audit", command: command.name });
+      for (const branch of command.branches ?? []) {
+        if (branch.audit)
+          events.push({ name: branch.audit, source: "command.branch.audit", command: command.name });
+      }
       commands.push({
         name: command.name,
         className: command.className,
         module: module.name,
         ...command.permission === undefined ? {} : { permission: command.permission },
         ...command.rpc === undefined ? {} : { rpc: command.rpc },
+        ...command.branches === undefined ? {} : {
+          branches: command.branches.map((branch) => ({
+            when: branch.when,
+            adapter: branch.rpc,
+            transaction: branch.transaction,
+            idempotency: branch.idempotency,
+            ...branch.audit === undefined ? {} : { auditEvent: branch.audit },
+            ...branch.boundary === undefined ? {} : { boundary: branch.boundary }
+          }))
+        },
         transaction: command.transaction,
         idempotency: command.idempotency,
+        ...command.tenantScope === undefined ? {} : { tenantScope: command.tenantScope },
         ...command.audit === undefined ? {} : { auditEvent: command.audit }
       });
     }
     for (const query of module.queries) {
-      queries.push({ name: query.name, className: query.className, module: module.name });
+      queries.push({
+        name: query.name,
+        className: query.className,
+        module: module.name,
+        ...query.tenantScope === undefined ? {} : { tenantScope: query.tenantScope }
+      });
+    }
+    for (const job of module.jobs ?? []) {
+      jobs.push({
+        name: job.name,
+        className: job.className,
+        module: module.name,
+        ...job.input === undefined ? {} : { input: job.input },
+        ...job.schemaKinds?.input === undefined ? {} : { inputKind: job.schemaKinds.input },
+        ...job.output === undefined ? {} : { output: job.output },
+        ...job.schemaKinds?.output === undefined ? {} : { outputKind: job.schemaKinds.output },
+        ...job.mode === undefined ? {} : { mode: job.mode },
+        ...job.idempotency === undefined ? {} : { idempotency: job.idempotency },
+        ...job.tenantScope === undefined ? {} : { tenantScope: job.tenantScope }
+      });
+    }
+    if (module.featureSpec) {
+      features.push({
+        name: module.featureSpec.name,
+        states: [...module.featureSpec.states],
+        ...module.featureSpec.tenantField === undefined ? {} : { tenantField: module.featureSpec.tenantField },
+        transitions: module.featureSpec.transitions.map((transition) => {
+          const job = transition.job === undefined ? undefined : (module.jobs ?? []).find((candidate) => candidate.className === transition.job || candidate.name === transition.job);
+          return {
+            name: transition.name,
+            from: transition.from,
+            to: transition.to,
+            ...transition.permission === undefined ? {} : { permission: transition.permission },
+            ...transition.command === undefined ? {} : { command: transition.command },
+            ...transition.route === undefined ? {} : { route: transition.route },
+            ...transition.routeBinding === undefined ? {} : { routeBinding: transition.routeBinding },
+            ...transition.transaction === undefined ? {} : { transaction: transition.transaction },
+            ...transition.idempotency === undefined ? {} : { idempotency: transition.idempotency },
+            ...transition.audit === undefined ? {} : { audit: transition.audit },
+            ...transition.job === undefined ? {} : { job: transition.job },
+            ...job === undefined ? {} : {
+              jobDetails: {
+                name: job.name,
+                className: job.className,
+                ...job.input === undefined ? {} : { input: job.input },
+                ...job.schemaKinds?.input === undefined ? {} : { inputKind: job.schemaKinds.input },
+                ...job.output === undefined ? {} : { output: job.output },
+                ...job.schemaKinds?.output === undefined ? {} : { outputKind: job.schemaKinds.output },
+                ...job.mode === undefined ? {} : { mode: job.mode },
+                ...job.idempotency === undefined ? {} : { idempotency: job.idempotency },
+                ...job.tenantScope === undefined ? {} : { tenantScope: job.tenantScope }
+              }
+            },
+            ...transition.persistence === undefined ? {} : { persistence: transition.persistence }
+          };
+        })
+      });
     }
     for (const controller of module.controllers) {
       for (const route of controller.routes) {
@@ -1349,6 +1558,8 @@ function buildContractManifest(graph, artifacts) {
   }
   commands.sort((left, right) => left.name.localeCompare(right.name));
   queries.sort((left, right) => left.name.localeCompare(right.name));
+  jobs.sort((left, right) => left.name.localeCompare(right.name));
+  features.sort((left, right) => left.name.localeCompare(right.name));
   routes.sort((left, right) => `${left.method} ${left.path}`.localeCompare(`${right.method} ${right.path}`));
   rpc.sort((left, right) => left.command.localeCompare(right.command));
   events.sort((left, right) => left.name.localeCompare(right.name));
@@ -1356,6 +1567,8 @@ function buildContractManifest(graph, artifacts) {
     version: 1,
     commands,
     queries,
+    jobs,
+    features,
     routes,
     permissions: [...permissions].sort(),
     rpc,
@@ -1503,6 +1716,7 @@ function renderApplication(graph, options) {
     name: command.name,
     permission: command.permission ?? null,
     rpc: command.rpc ?? null,
+    branches: command.branches ?? [],
     transaction: command.transaction ?? null,
     audit: command.audit ?? null,
     idempotency: command.idempotency ?? null
@@ -1929,7 +2143,9 @@ ${indent(item, 2)}`).join(",")}
         `transaction: ${JSON.stringify(command.transaction)}`,
         ...command.audit ? [`audit: ${JSON.stringify(command.audit)}`] : [],
         `idempotency: ${JSON.stringify(command.idempotency)}`,
+        ...command.tenantScope ? [`tenantScope: ${JSON.stringify(command.tenantScope)}`] : [],
         ...command.rpc ? [`rpc: ${JSON.stringify(command.rpc)}`] : [],
+        ...command.branches && command.branches.length > 0 ? [`branches: ${JSON.stringify(command.branches)}`] : [],
         ...command.standalone ? ["standalone: true"] : [],
         ...command.aspects && command.aspects.length > 0 ? [`aspects: ${this.renderAspects(command.aspects)}`, `aspectPipeline: ${this.renderAspectPipeline(command.aspects)}`] : []
       ];
@@ -1962,6 +2178,8 @@ ${indent(item, 2)}`).join(",")}
         fields.push(`maxAttempts: ${job.maxAttempts}`);
       if (job.idempotency !== undefined)
         fields.push(`idempotency: ${JSON.stringify(job.idempotency)}`);
+      if (job.tenantScope !== undefined)
+        fields.push(`tenantScope: ${JSON.stringify(job.tenantScope)}`);
       if (job.aspects && job.aspects.length > 0) {
         fields.push(`aspects: ${this.renderAspects(job.aspects)}`);
         fields.push(`aspectPipeline: ${this.renderAspectPipeline(job.aspects)}`);
@@ -3665,17 +3883,28 @@ var HEADER = "// GENERATED BY @supacloud/compiler — do not edit", INTERFACES =
 
 export interface CompiledCommand {
   rpc?: string;
+  branches?: readonly CompiledCommandBranch[];
   className: string;
   name: string;
   permission: string;
   transaction: "required" | "none";
   audit?: string;
   idempotency: "required" | "none";
+  tenantScope?: "required" | "none";
   standalone?: boolean;
   aspects?: CompiledAspect[];
   aspectPipeline?: CompiledAspectPipeline;
 }
 
+export interface CompiledCommandBranch {
+  when: string;
+  rpc: string;
+  transaction?: "required" | "none" | string;
+  audit?: string;
+  idempotency?: "required" | "none" | string;
+  boundary?: "database" | "external";
+}
+
 export interface CompiledJob {
   className: string;
   name: string;
@@ -3687,6 +3916,7 @@ export interface CompiledJob {
   timeoutSec?: number;
   maxAttempts?: number;
   idempotency?: "required" | "none";
+  tenantScope?: "required" | "none";
   aspects?: CompiledAspect[];
   aspectPipeline?: CompiledAspectPipeline;
 }
@@ -15088,6 +15318,7 @@ function createContextPack(graph, subject) {
   } : undefined;
   const files = [...new Set(modules.flatMap((module) => [
     module.file,
+    ...module.featureSpec?.file ? [module.featureSpec.file] : [],
     ...module.providers.map((provider) => provider.file),
     ...module.controllers.map((controller) => controller.file),
     ...graph.moduleHandlerFiles?.[module.name] ?? [],
@@ -15942,7 +16173,7 @@ async function readDeliverySelection(manifestPath, target) {
   return { root, object, planned };
 }
 async function readVerifiedDeliveryFiles(root, object, target, selectedPaths) {
-  if (object.files.length > 1024 || object.files.some((file) => file.bytes > 64 * 1024 * 1024) || object.files.reduce((bytes, file) => bytes + file.bytes, 0) > 128 * 1024 * 1024) {
+  if (object.files.length > 1024 || object.files.some((file) => file.bytes > DELIVERY_ARTIFACT_MAX_FILE_BYTES) || object.files.reduce((bytes, file) => bytes + file.bytes, 0) > DELIVERY_ARTIFACT_MAX_TOTAL_BYTES) {
     throw new Error("Artifact inventory exceeds limits.");
   }
   const objectRoot = join8(root, "objects", object.objectId);
@@ -15981,10 +16212,12 @@ async function readVerifiedDeliveryFiles(root, object, target, selectedPaths) {
   }
   return retained;
 }
-var JSON_LIMIT = 1048576;
+var JSON_LIMIT = 1048576, DELIVERY_ARTIFACT_MAX_FILE_BYTES, DELIVERY_ARTIFACT_MAX_TOTAL_BYTES;
 var init_delivery_artifact = __esm(() => {
   init_delivery_build_schema();
   init_delivery_files();
+  DELIVERY_ARTIFACT_MAX_FILE_BYTES = 500 * 1024 * 1024;
+  DELIVERY_ARTIFACT_MAX_TOTAL_BYTES = 500 * 1024 * 1024;
 });
 
 // node_modules/@supacloud/delivery/src/application-release.ts
@@ -16843,6 +17076,7 @@ var init_delivery_migration_plan = () => {};
 
 // node_modules/@supacloud/delivery/src/index.ts
 var init_src = __esm(() => {
+  init_delivery_artifact();
   init_delivery_artifact();
   init_worker_execution();
   init_worker_execution();
@@ -18765,6 +18999,7 @@ async function analyzeProject(rootDir, include, cache, changedPaths, effectOptio
         if (meta && booleanProp(meta, "standalone")) {
           const permission = stringLiteralProp(meta, "permission");
           const rpc = checkedRpc(meta, ctx);
+          const branches = checkedBranches(meta, ctx);
           const audit = stringLiteralProp(meta, "audit");
           const standaloneName = stringLiteralProp(meta, "name") ?? classInfo.decl.name?.text ?? name;
           const standaloneUses = parseInfraResourceUseRefs(infraResourceProp(meta, "uses", ctx), ctx, `command ${standaloneName}`, sourcePath(ctx.rootDir, classInfo.file), lineOf(classInfo.decl));
@@ -18774,6 +19009,7 @@ async function analyzeProject(rootDir, include, cache, changedPaths, effectOptio
             name: standaloneName,
             ...permission === undefined ? {} : { permission },
             ...rpc === undefined ? {} : { rpc },
+            ...branches === undefined ? {} : { branches },
             transaction: checkedCommandMode(meta, "transaction", ctx, classInfo.decl.name?.text ?? name) ?? "none",
             ...audit === undefined ? {} : { audit },
             idempotency: checkedCommandMode(meta, "idempotency", ctx, classInfo.decl.name?.text ?? name) ?? "none",
@@ -19105,18 +19341,22 @@ function parseModule(candidate, nameByNode, ctx) {
         const aspects = parseAspectRefs(getProp(meta, "aspects"), ctx, `command ${cls.name?.text ?? "<anonymous>"}`);
         const permission = stringLiteralProp(meta, "permission");
         const rpc = checkedRpc(meta, ctx);
+        const branches = checkedBranches(meta, ctx);
         const audit = stringLiteralProp(meta, "audit");
         const commandName = stringLiteralProp(meta, "name") ?? cls.name?.text ?? "<anonymous>";
         const uses = parseInfraResourceUseRefs(infraResourceProp(meta, "uses", ctx), ctx, `command ${commandName}`, sourcePath(ctx.rootDir, cls.getSourceFile().fileName), lineOf(cls));
         rejectUndeclaredResourceUses(uses, moduleResourceNames, ctx, `command ${commandName}`, sourcePath(ctx.rootDir, cls.getSourceFile().fileName), lineOf(cls));
+        const tenantScope = commandModeProp(meta, "tenantScope");
         commands.push({
           className: cls.name?.text ?? "<anonymous>",
           name: commandName,
           ...permission === undefined ? {} : { permission },
           ...rpc === undefined ? {} : { rpc },
+          ...branches === undefined ? {} : { branches },
           transaction: checkedCommandMode(meta, "transaction", ctx, cls.name?.text ?? "<anonymous>") ?? "none",
           ...audit === undefined ? {} : { audit },
           idempotency: checkedCommandMode(meta, "idempotency", ctx, cls.name?.text ?? "<anonymous>") ?? "none",
+          ...tenantScope === undefined ? {} : { tenantScope },
           ...booleanProp(meta, "standalone") ? { standalone: true } : {},
           ...uses.length > 0 ? { uses } : {},
           ...aspects.length > 0 ? { aspects } : {}
@@ -19147,12 +19387,14 @@ function parseModule(candidate, nameByNode, ctx) {
         const contract = parseJobOptions(meta, className, ctx);
         const jobUses = parseInfraResourceUseRefs(infraResourceProp(meta, "uses", ctx), ctx, `job ${stringLiteralProp(meta, "name") ?? className}`, sourcePath(ctx.rootDir, cls.getSourceFile().fileName), lineOf(cls));
         rejectUndeclaredResourceUses(jobUses, moduleResourceNames, ctx, `job ${stringLiteralProp(meta, "name") ?? className}`, sourcePath(ctx.rootDir, cls.getSourceFile().fileName), lineOf(cls));
+        const tenantScope = commandModeProp(meta, "tenantScope");
         jobs.push({
           className,
           name: stringLiteralProp(meta, "name") ?? className,
           serviceKey: camelName(provider?.token ?? className),
           scope,
           ...contract,
+          ...tenantScope === undefined ? {} : { tenantScope },
           ...jobUses.length > 0 ? { uses: jobUses } : {},
           ...aspects.length > 0 ? { aspects } : {}
         });
@@ -19162,9 +19404,11 @@ function parseModule(candidate, nameByNode, ctx) {
     if (queryDec) {
       const meta = decoratorObjectArg(queryDec);
       if (meta) {
+        const tenantScope = commandModeProp(meta, "tenantScope");
         queries.push({
           className: cls.name?.text ?? "<anonymous>",
-          name: stringLiteralProp(meta, "name") ?? cls.name?.text ?? "<anonymous>"
+          name: stringLiteralProp(meta, "name") ?? cls.name?.text ?? "<anonymous>",
+          ...tenantScope === undefined ? {} : { tenantScope }
         });
       }
     }
@@ -19219,6 +19463,7 @@ function parseFeatureSpec(input, ctx, seen = new Set) {
   if (!ts7.isObjectLiteralExpression(input))
     return invalid();
   const name = stringLiteralProp(input, "name");
+  const tenantField = stringLiteralProp(input, "tenantField");
   const statesExpr = getProp(input, "states");
   const transitionObject = getProp(input, "transitions");
   if (!name || !statesExpr || !ts7.isArrayLiteralExpression(statesExpr) || statesExpr.elements.some((state) => !ts7.isStringLiteral(state)) || !transitionObject || !ts7.isObjectLiteralExpression(transitionObject) || input.properties.some((property) => !ts7.isPropertyAssignment(property))) {
@@ -19237,15 +19482,23 @@ function parseFeatureSpec(input, ctx, seen = new Set) {
     const options = property.initializer;
     const from = stringLiteralProp(options, "from");
     const to = stringLiteralProp(options, "to");
-    if (!from || !to || options.properties.some((prop) => !ts7.isPropertyAssignment(prop)) || ["permission", "command", "route", "audit"].some((key) => getProp(options, key) && !stringLiteralProp(options, key)) || ["transaction", "idempotency"].some((key) => getProp(options, key) && !commandModeProp(options, key))) {
+    if (!from || !to || options.properties.some((prop) => !ts7.isPropertyAssignment(prop)) || ["permission", "command", "route", "routeBinding", "audit", "job"].some((key) => getProp(options, key) && !stringLiteralProp(options, key)) || ["transaction", "idempotency"].some((key) => getProp(options, key) && !commandModeProp(options, key))) {
       return invalid();
     }
     const permission = stringLiteralProp(options, "permission");
     const command = stringLiteralProp(options, "command");
     const route = stringLiteralProp(options, "route");
+    const routeBinding = stringLiteralProp(options, "routeBinding");
+    if (routeBinding !== undefined && routeBinding !== "command" && routeBinding !== "controller")
+      return invalid();
     const transaction = commandModeProp(options, "transaction");
     const idempotency = commandModeProp(options, "idempotency");
     const audit = stringLiteralProp(options, "audit");
+    const job = stringLiteralProp(options, "job");
+    const persistenceExpr = getProp(options, "persistence");
+    const persistence = persistenceExpr && ts7.isObjectLiteralExpression(persistenceExpr) ? parseFeaturePersistence(persistenceExpr) : undefined;
+    if (persistenceExpr && !persistence)
+      return invalid();
     transitions.push({
       name: propertyName(property.name),
       from,
@@ -19253,12 +19506,44 @@ function parseFeatureSpec(input, ctx, seen = new Set) {
       ...permission === undefined ? {} : { permission },
       ...command === undefined ? {} : { command },
       ...route === undefined ? {} : { route },
+      ...routeBinding === undefined ? {} : { routeBinding },
       ...transaction === undefined ? {} : { transaction },
       ...idempotency === undefined ? {} : { idempotency },
-      ...audit === undefined ? {} : { audit }
+      ...audit === undefined ? {} : { audit },
+      ...job === undefined ? {} : { job },
+      ...persistence === undefined ? {} : { persistence }
     });
   }
-  return { name, states, transitions, file: sourcePath(ctx.rootDir, input.getSourceFile().fileName), line: lineOf(input) };
+  return {
+    name,
+    states,
+    ...tenantField === undefined ? {} : { tenantField },
+    transitions,
+    file: sourcePath(ctx.rootDir, input.getSourceFile().fileName),
+    line: lineOf(input)
+  };
+}
+function parseFeaturePersistence(input) {
+  if (input.properties.some((property) => !ts7.isPropertyAssignment(property)))
+    return;
+  const boundary = stringLiteralProp(input, "boundary");
+  const optimisticLock = commandModeProp(input, "optimisticLock");
+  const versionField = stringLiteralProp(input, "versionField");
+  const tenantField = stringLiteralProp(input, "tenantField");
+  const stateField = stringLiteralProp(input, "stateField");
+  const receipt = commandModeProp(input, "receipt");
+  const reconciliation = commandModeProp(input, "reconciliation");
+  if (boundary !== "database" && boundary !== "external" || optimisticLock !== "required" && optimisticLock !== "none" || receipt !== "required" && receipt !== "none" || reconciliation !== "required" && reconciliation !== "none")
+    return;
+  return {
+    boundary,
+    optimisticLock,
+    ...versionField === undefined ? {} : { versionField },
+    ...tenantField === undefined ? {} : { tenantField },
+    ...stateField === undefined ? {} : { stateField },
+    receipt,
+    reconciliation
+  };
 }
 function resolveStaticObjectLiteral(input, ctx, seen = new Set) {
   if (!input || seen.has(input))
@@ -20685,6 +20970,75 @@ function checkedRpc(meta, ctx) {
   });
   return;
 }
+function checkedBranches(meta, ctx) {
+  const expression = getProp(meta, "branches");
+  if (!expression)
+    return;
+  if (!ts7.isArrayLiteralExpression(expression)) {
+    ctx.diagnostics.push({
+      severity: "error",
+      code: "invalid-command-branches",
+      file: sourcePath(ctx.rootDir, expression.getSourceFile().fileName),
+      line: lineOf(expression),
+      message: "Command branches must be an explicit object array.",
+      suggestion: "Declare each branch as { when, rpc, transaction, audit, idempotency, boundary }."
+    });
+    return;
+  }
+  const branches = [];
+  for (const item of expression.elements) {
+    if (!ts7.isObjectLiteralExpression(item)) {
+      ctx.diagnostics.push({
+        severity: "error",
+        code: "invalid-command-branches",
+        file: sourcePath(ctx.rootDir, item.getSourceFile().fileName),
+        line: lineOf(item),
+        message: "Command branches entries must be object literals."
+      });
+      continue;
+    }
+    const when = stringLiteralProp(item, "when");
+    const rpc = stringLiteralProp(item, "rpc");
+    const transaction = checkedCommandMode(item, "transaction", ctx, "command branch") ?? "none";
+    const audit = stringLiteralProp(item, "audit");
+    const idempotency = checkedCommandMode(item, "idempotency", ctx, "command branch") ?? "none";
+    const boundary = stringLiteralProp(item, "boundary");
+    const validBoundary = boundary === undefined || boundary === "database" || boundary === "external";
+    const validWhen = when !== undefined && /^(?:[A-Za-z_$][\w$]*)(?:\.[A-Za-z_$][\w$]*)*\s*===\s*(?:"(?:[^"\\]|\\.)*"|'(?:[^'\\]|\\.)*')$/.test(when);
+    if (!when || !validWhen || !rpc?.trim() || !validBoundary) {
+      ctx.diagnostics.push({
+        severity: "error",
+        code: "invalid-command-branches",
+        file: sourcePath(ctx.rootDir, item.getSourceFile().fileName),
+        line: lineOf(item),
+        message: "Command branches require a restricted equality selector, a non-empty rpc, and a valid boundary.",
+        suggestion: `Use when: 'resource === "value"' (or body.resource/params.resource/query.resource), plus a named RPC adapter.`
+      });
+      continue;
+    }
+    branches.push({
+      when,
+      rpc,
+      transaction,
+      ...audit === undefined ? {} : { audit },
+      idempotency,
+      ...boundary === undefined ? {} : { boundary }
+    });
+  }
+  if (branches.length === 0)
+    return [];
+  if (new Set(branches.map((branch) => branch.when)).size !== branches.length) {
+    ctx.diagnostics.push({
+      severity: "error",
+      code: "duplicate-command-branch",
+      file: sourcePath(ctx.rootDir, expression.getSourceFile().fileName),
+      line: lineOf(expression),
+      message: "Command branches must use distinct selectors.",
+      suggestion: "Make each branch selector mutually distinct."
+    });
+  }
+  return branches;
+}
 function classDeps(cls, ctx) {
   const injectable = parseInjectableOptions(cls, ctx);
   const ctor = cls.members.find(ts7.isConstructorDeclaration);
@@ -24096,10 +24450,10 @@ import { readFileSync as readFileSync4 } from "node:fs";
 import { resolve as resolve17 } from "node:path";
 
 // src/migration-app-version.ts
-var MIGRATION_APP_VERSION = "0.28.2";
+var MIGRATION_APP_VERSION = "0.29.0";
 
 // src/migration-elysia-version.ts
-var MIGRATION_ELYSIA_VERSION = "0.33.4";
+var MIGRATION_ELYSIA_VERSION = "0.34.0";
 
 // src/migration-policy.ts
 var cachedCompilerVersion;
@@ -25068,6 +25422,163 @@ function isRecord2(value) {
 function arrayLength(value) {
   return Array.isArray(value) ? value.length : undefined;
 }
+function safeField(value) {
+  return typeof value === "string" && /^[A-Za-z_][A-Za-z0-9_]*$/.test(value);
+}
+function validFeaturePersistence(value) {
+  if (!isRecord2(value))
+    return false;
+  const boundary = value["boundary"];
+  const receipt = value["receipt"];
+  const reconciliation = value["reconciliation"];
+  if (boundary === "database") {
+    const fields = [value["tenantField"], value["versionField"], value["stateField"]];
+    return value["optimisticLock"] === "required" && fields.every(safeField) && new Set(fields).size === 3 && receipt === "required" && reconciliation === "none";
+  }
+  if (boundary === "external") {
+    return value["optimisticLock"] === "none" && value["versionField"] === undefined && value["tenantField"] === undefined && value["stateField"] === undefined && receipt === "required" && reconciliation === "required";
+  }
+  return false;
+}
+function validCommandInventory(value) {
+  const names = new Set;
+  const classes = new Set;
+  return Array.isArray(value) && value.every((command) => {
+    if (!isRecord2(command) || typeof command["name"] !== "string" || command["name"].trim() === "" || typeof command["className"] !== "string" || command["className"].trim() === "" || typeof command["module"] !== "string" || command["module"].trim() === "" || typeof command["permission"] !== "string" || command["permission"].trim() === "" || command["transaction"] !== "required" && command["transaction"] !== "none" || command["idempotency"] !== "required" && command["idempotency"] !== "none" || command["tenantScope"] !== undefined && command["tenantScope"] !== "required" && command["tenantScope"] !== "none")
+      return false;
+    if (names.has(command["name"]) || classes.has(command["className"]))
+      return false;
+    if (command["rpc"] !== undefined && (typeof command["rpc"] !== "string" || command["rpc"].trim() === ""))
+      return false;
+    if (command["auditEvent"] !== undefined && (typeof command["auditEvent"] !== "string" || command["auditEvent"].trim() === ""))
+      return false;
+    names.add(command["name"]);
+    classes.add(command["className"]);
+    return true;
+  });
+}
+function validFeatureInventory(value, jobs, commands, routes, rpc) {
+  const featureNames = new Set;
+  return Array.isArray(value) && value.every((feature) => {
+    if (!isRecord2(feature) || typeof feature["name"] !== "string" || feature["name"].trim() === "")
+      return false;
+    if (featureNames.has(feature["name"]))
+      return false;
+    featureNames.add(feature["name"]);
+    if (feature["tenantField"] !== undefined && !safeField(feature["tenantField"]))
+      return false;
+    const states = feature["states"];
+    const transitions = feature["transitions"];
+    if (!Array.isArray(states) || states.length === 0 || states.some((state) => typeof state !== "string" || state.trim() === "") || new Set(states).size !== states.length || !Array.isArray(transitions))
+      return false;
+    const transitionNames = new Set;
+    return transitions.every((transition) => {
+      if (!isRecord2(transition) || typeof transition["name"] !== "string" || transition["name"].trim() === "" || typeof transition["from"] !== "string" || !states.includes(transition["from"]) || typeof transition["to"] !== "string" || !states.includes(transition["to"]))
+        return false;
+      if (transitionNames.has(transition["name"]))
+        return false;
+      transitionNames.add(transition["name"]);
+      const persistence = transition["persistence"];
+      if (persistence !== undefined) {
+        if (!isRecord2(persistence) || !validFeaturePersistence(persistence))
+          return false;
+        if (typeof transition["command"] !== "string" || transition["command"].trim() === "" || typeof transition["permission"] !== "string" || transition["permission"].trim() === "")
+          return false;
+        if (persistence["boundary"] === "database" && feature["tenantField"] !== persistence["tenantField"])
+          return false;
+      }
+      const commandName = transition["command"];
+      if (commandName !== undefined) {
+        const command = commands.find((candidate) => isRecord2(candidate) && (candidate["name"] === commandName || candidate["className"] === commandName));
+        if (!isRecord2(command))
+          return false;
+        if (transition["permission"] !== undefined && command["permission"] !== transition["permission"])
+          return false;
+        if (transition["transaction"] !== undefined && command["transaction"] !== transition["transaction"])
+          return false;
+        if (transition["idempotency"] !== undefined && command["idempotency"] !== transition["idempotency"])
+          return false;
+        if (transition["audit"] !== undefined && command["auditEvent"] !== transition["audit"])
+          return false;
+        if (persistence !== undefined) {
+          const adapter = command["rpc"];
+          if (typeof adapter !== "string" || adapter.trim() === "" || !rpc.some((candidate) => isRecord2(candidate) && candidate["command"] === command["name"] && candidate["adapter"] === adapter) || command["idempotency"] !== "required" || command["tenantScope"] !== "required" || typeof command["auditEvent"] !== "string" || command["auditEvent"].trim() === "")
+            return false;
+          const expectedTransaction = persistence["boundary"] === "database" ? "required" : "none";
+          if (command["transaction"] !== expectedTransaction)
+            return false;
+        }
+      }
+      const routeName = transition["route"];
+      const routeBinding = transition["routeBinding"];
+      if (routeBinding !== undefined && routeBinding !== "command" && routeBinding !== "controller")
+        return false;
+      if (routeName !== undefined) {
+        const route = routes.find((candidate) => isRecord2(candidate) && `${candidate["method"]} ${candidate["path"]}` === routeName);
+        if (!isRecord2(route))
+          return false;
+        if (routeBinding === "controller") {
+          if (route["command"] !== undefined)
+            return false;
+        } else if (route["command"] !== commandName) {
+          return false;
+        }
+      }
+      const job = transition["job"];
+      if (job === undefined)
+        return true;
+      const details = transition["jobDetails"];
+      const inventory = jobs.find((candidate) => isRecord2(candidate) && (candidate["name"] === job || candidate["className"] === job));
+      const contractFields = ["input", "inputKind", "output", "outputKind", "mode", "idempotency", "tenantScope"];
+      return typeof job === "string" && job.trim() !== "" && isRecord2(details) && isRecord2(inventory) && (details["name"] === job || details["className"] === job) && typeof details["className"] === "string" && details["className"].trim() !== "" && details["inputKind"] === "declared" && (details["mode"] === "task" || details["mode"] === "workflow") && details["idempotency"] === "required" && details["tenantScope"] === "required" && contractFields.every((field) => details[field] === inventory[field]);
+    });
+  });
+}
+function validJobInventory(value) {
+  const names = new Set;
+  const classes = new Set;
+  return Array.isArray(value) && value.every((job) => {
+    if (!isRecord2(job) || typeof job["name"] !== "string" || job["name"].trim() === "" || typeof job["className"] !== "string" || job["className"].trim() === "" || typeof job["module"] !== "string" || job["module"].trim() === "")
+      return false;
+    if (names.has(job["name"]) || classes.has(job["className"]))
+      return false;
+    names.add(job["name"]);
+    classes.add(job["className"]);
+    if (job["input"] !== undefined && (typeof job["input"] !== "string" || job["input"].trim() === ""))
+      return false;
+    if (job["inputKind"] !== undefined && job["inputKind"] !== "opaque" && job["inputKind"] !== "declared")
+      return false;
+    if (job["output"] !== undefined && (typeof job["output"] !== "string" || job["output"].trim() === ""))
+      return false;
+    if (job["outputKind"] !== undefined && job["outputKind"] !== "opaque" && job["outputKind"] !== "declared")
+      return false;
+    if (job["mode"] !== undefined && job["mode"] !== "task" && job["mode"] !== "workflow")
+      return false;
+    if (job["idempotency"] !== undefined && job["idempotency"] !== "required" && job["idempotency"] !== "none")
+      return false;
+    return job["tenantScope"] === undefined || job["tenantScope"] === "required" || job["tenantScope"] === "none";
+  });
+}
+function validRpcInventory(value, commandInventory) {
+  const commandNames = new Set;
+  const adapters = new Set;
+  return Array.isArray(value) && value.every((rpc) => {
+    if (!isRecord2(rpc) || typeof rpc["command"] !== "string" || rpc["command"].trim() === "" || typeof rpc["adapter"] !== "string" || rpc["adapter"].trim() === "")
+      return false;
+    if (commandNames.has(rpc["command"]) || adapters.has(rpc["adapter"]))
+      return false;
+    const command = commandInventory.find((candidate) => isRecord2(candidate) && candidate["name"] === rpc["command"] && candidate["rpc"] === rpc["adapter"]);
+    if (!isRecord2(command))
+      return false;
+    commandNames.add(rpc["command"]);
+    adapters.add(rpc["adapter"]);
+    return true;
+  }) && commandInventory.every((command) => {
+    if (!isRecord2(command) || command["rpc"] === undefined)
+      return true;
+    return value.some((rpc) => isRecord2(rpc) && rpc["command"] === command["name"] && rpc["adapter"] === command["rpc"]);
+  });
+}
 async function sha2566(path) {
   return createHash11("sha256").update(await readFile11(path)).digest("hex");
 }
@@ -25137,19 +25648,24 @@ async function assessMigration(options) {
   };
   try {
     const parsed = JSON.parse(await readFile11(contractsManifestPath, "utf8"));
-    if (!isRecord2(parsed) || parsed["version"] !== 1)
+    if (!isRecord2(parsed) || parsed["version"] !== 1 || !validJobInventory(parsed["jobs"]) || !validCommandInventory(parsed["commands"]) || !Array.isArray(parsed["routes"]) || !validRpcInventory(parsed["rpc"], parsed["commands"]) || !validFeatureInventory(parsed["features"], parsed["jobs"], parsed["commands"], parsed["routes"], parsed["rpc"])) {
       throw new Error("invalid manifest");
+    }
     const commands = arrayLength(parsed["commands"]);
+    const jobs = arrayLength(parsed["jobs"]);
     const routes = arrayLength(parsed["routes"]);
     const permissions = arrayLength(parsed["permissions"]);
+    const features = arrayLength(parsed["features"]);
     contractsManifest = {
       path: contractsManifestPath,
       present: true,
       sha256: await sha2566(contractsManifestPath),
       version: 1,
       ...commands === undefined ? {} : { commands },
+      ...jobs === undefined ? {} : { jobs },
       ...routes === undefined ? {} : { routes },
-      ...permissions === undefined ? {} : { permissions }
+      ...permissions === undefined ? {} : { permissions },
+      ...features === undefined ? {} : { features }
     };
   } catch {
     findings.push({