@verentis/cli 0.2.2 → 0.2.3

package/dist/index.js

@@ -893,14 +893,49 @@ function validateManifest(manifest) {
     if (!manifestPermissions(manifest).length) warning("spec.permissions is empty \u2014 the run token will carry no VFS scopes");
   }
   if (kind === "Application") {
-    if (!spec.entry && !spec["entry-points"]?.length) {
-      error("applications need spec.entry or spec.entry-points[]");
+    const hasIframe = !!spec.entry || !!spec["entry-points"]?.length;
+    const hasInstall = Array.isArray(spec.install) && spec.install.length > 0;
+    const hasScopes = Array.isArray(spec.scopes) && spec.scopes.length > 0;
+    if (!hasIframe && !hasInstall && !hasScopes) {
+      error(
+        "an Application must declare at least one contribution: spec.entry / spec.entry-points[] (iframe UI), spec.install[] (installed files), or spec.scopes[] (identity)"
+      );
     }
   }
+  validateInstallDirectives(spec.install, issues);
   const packaging = manifest.packaging ?? {};
   if (!packaging.publisher) warning("packaging.publisher is not set \u2014 `verentis pack`/`publish` will refuse the package");
   return issues;
 }
+function validateInstallDirectives(install, issues) {
+  if (install === void 0) return;
+  const error = (message) => issues.push({ level: "error", message });
+  if (!Array.isArray(install)) {
+    error("spec.install must be a list of install directives");
+    return;
+  }
+  install.forEach((directive, index) => {
+    const at = `spec.install[${index}]`;
+    if (!directive || typeof directive !== "object") {
+      error(`${at} must be an object with 'from' and 'to'`);
+      return;
+    }
+    if (!directive.from || typeof directive.from !== "string") {
+      error(`${at}.from is required (a path/glob relative to the package payload)`);
+    } else if (directive.from.startsWith("/") || directive.from.split("/").includes("..")) {
+      error(`${at}.from must be a relative path inside the package payload (no leading '/' or '..')`);
+    }
+    if (!directive.to || typeof directive.to !== "string") {
+      error(`${at}.to is required (a workspace-absolute destination path)`);
+    } else {
+      if (!directive.to.startsWith("/")) error(`${at}.to must be a workspace-absolute path (start with '/')`);
+      if (directive.to.split("/").includes("..")) error(`${at}.to must not contain '..'`);
+    }
+    if (directive.mode !== void 0 && directive.mode !== "seed" && directive.mode !== "managed") {
+      error(`${at}.mode must be 'seed' or 'managed' (got '${directive.mode}')`);
+    }
+  });
+}
 var KIND_MAP = {
   application: "Application",
   executionengine: "ExecutionEngine",
@@ -1974,9 +2009,21 @@ async function resolvePayloadFiles(projectDir, manifestPath, manifest) {
 function defaultIncludes(manifest) {
   const sources = /* @__PURE__ */ new Set();
   collectSchemaSources(manifest, sources);
+  collectInstallSources(manifest, sources);
   if (sources.size === 0) return [];
   return [...sources];
 }
+function collectInstallSources(manifest, sources) {
+  const spec = manifest.spec;
+  const install = spec?.install;
+  if (!Array.isArray(install)) return;
+  for (const directive of install) {
+    const from = directive?.from;
+    if (typeof from === "string" && from.length > 0 && !from.startsWith("/")) {
+      sources.add(from);
+    }
+  }
+}
 function collectSchemaSources(node, sources) {
   if (Array.isArray(node)) {
     for (const item of node) collectSchemaSources(item, sources);