OneCloud Capability Manifest

{
  "manifestId": "forwaid-onecloud-capability-manifest-v0.1",
  "status": "read_only_preview",
  "owner": "1-2-2 FORWAID A-side",
  "consumer": "1-2-3 OneCloud / 1claws",
  "principle": "Cloud owns capability definition; OneCloud owns local shape and sync.",
  "generatedFrom": {
    "multiSurfaceSnapshotId": "platform-multisurface-capability-v0.1",
    "entitlementSnapshotId": "platform-entitlement-read-model-v0.1",
    "sourceToOutputModelId": "platform-source-to-output-read-model-v0.1",
    "remoteDropsCapabilityId": "PLT-CODEX-001"
  },
  "capabilities": [
    {
      "capabilityId": "PLT-SHELL-001",
      "label": "Pad shell",
      "accessMode": "open_deep_link",
      "deepLink": "/home",
      "readModelRef": "platform-multisurface-capability-v0.1",
      "oneCloudUse": "Embed or open the main Pad shell and inspect cloud-owned surfaces.",
      "currentStatus": "ready_to_open",
      "triggerPolicy": "no_trigger",
      "writePolicy": "no_write"
    },
    {
      "capabilityId": "PLT-DRIVE-001",
      "label": "Drive / Sync preview",
      "accessMode": "read_status",
      "deepLink": "/drive/status",
      "readModelRef": "platform-source-to-output-read-model-v0.1",
      "oneCloudUse": "Show source-to-output status, upload analysis preview, and save queue state.",
      "currentStatus": "read_only_preview",
      "triggerPolicy": "no_trigger",
      "writePolicy": "no_write"
    },
    {
      "capabilityId": "PLT-DOCK-001",
      "label": "Dock / Studio workflow",
      "accessMode": "read_status",
      "deepLink": "/studio/status",
      "readModelRef": "platform-studio-dock-workflow-v0.1",
      "oneCloudUse": "Show Dock intake, Sync routing, Studio workflow, Drive output, Pod preview, and Remote Drops gates.",
      "handoffContract": {
        "targetAccountId": "acct-6-1-1-qianxin",
        "targetAccountLabel": "6-1-1 潜心教育",
        "driveDocumentId": "CM-DRIVE-DOC-PREVIEW-001",
        "driveQueueId": "CM-DRIVE-SAVE-QUEUE-mock-account-001",
        "driveHandoffId": "CM-DRIVE-HANDOFF-CM-DRIVE-SAVE-QUEUE-mock-account-001",
        "customerInstanceRoute": "/client/fuzhou",
        "podRoute": "/client/fuzhou/pad",
        "persistenceGate": "drive_persistence_disabled"
      },
      "currentStatus": "read_only_preview",
      "triggerPolicy": "no_trigger",
      "writePolicy": "no_write"
    },
    {
      "capabilityId": "PLT-STORE-001",
      "label": "Official Store",
      "accessMode": "open_deep_link",
      "deepLink": "/store",
      "readModelRef": "platform-entitlement-read-model-v0.1",
      "oneCloudUse": "Open official App catalog, App Detail, install request, and entitlement preview.",
      "currentStatus": "ready_to_open",
      "triggerPolicy": "no_trigger",
      "writePolicy": "no_write"
    },
    {
      "capabilityId": "PLT-CART-001",
      "label": "Cart / Orders",
      "accessMode": "read_status",
      "deepLink": "/store/orders",
      "readModelRef": "platform-entitlement-read-model-v0.1",
      "oneCloudUse": "Inspect cart, billing draft, entitlement gate, and output handoff preview.",
      "handoffContract": {
        "targetAccountId": "acct-6-1-1-qianxin",
        "targetAccountLabel": "潜心教育",
        "driveDocumentId": "CM-DRIVE-DOC-PREVIEW-001",
        "driveQueueId": "CM-DRIVE-SAVE-QUEUE-mock-account-001",
        "driveHandoffId": "CM-DRIVE-HANDOFF-CM-DRIVE-SAVE-QUEUE-mock-account-001",
        "customerInstanceRoute": "/client/fuzhou",
        "podRoute": "/client/fuzhou/pad",
        "persistenceGate": "drive_persistence_disabled"
      },
      "currentStatus": "read_only_preview",
      "triggerPolicy": "no_trigger",
      "writePolicy": "no_write"
    },
    {
      "capabilityId": "PLT-ACCOUNT-001",
      "label": "Account / Entitlement status",
      "accessMode": "read_status",
      "deepLink": "/account/status",
      "readModelRef": "platform-entitlement-read-model-v0.1",
      "oneCloudUse": "Inspect account tree, customer ownership, distribution upstream, enablement queue, and mutation gates.",
      "currentStatus": "read_only_preview",
      "triggerPolicy": "no_trigger",
      "writePolicy": "no_write"
    },
    {
      "capabilityId": "PLT-INSTANCE-001",
      "label": "Customer instance validation",
      "accessMode": "read_status",
      "deepLink": "/instances/status",
      "readModelRef": "forwaid-customer-instance-validation-v0.1",
      "oneCloudUse": "Inspect customer instance route readiness, owner-thread mapping, Mart/Pod links, and Founder test queue.",
      "currentStatus": "read_only_preview",
      "triggerPolicy": "no_trigger",
      "writePolicy": "no_write"
    },
    {
      "capabilityId": "PLT-TEST-001",
      "label": "Founder remote test checklist",
      "accessMode": "read_status",
      "deepLink": "/test/status",
      "readModelRef": "forwaid-founder-remote-test-checklist-v0.1",
      "oneCloudUse": "Open the ordered Founder remote smoke checklist after GitHub push and manual Lovable publish.",
      "currentStatus": "read_only_preview",
      "triggerPolicy": "no_trigger",
      "writePolicy": "no_write"
    },
    {
      "capabilityId": "PLT-STATUS-001",
      "label": "Status hub",
      "accessMode": "read_status",
      "deepLink": "/status",
      "readModelRef": "forwaid-status-hub-page",
      "oneCloudUse": "Open the single status hub that links Founder test, Release Gate, OneCloud, instances, account, Drive, Studio, and Store orders.",
      "currentStatus": "read_only_preview",
      "triggerPolicy": "no_trigger",
      "writePolicy": "no_write"
    },
    {
      "capabilityId": "PLT-POD-001",
      "label": "Pod cockpit",
      "accessMode": "open_deep_link",
      "deepLink": "/pod",
      "readModelRef": "platform-multisurface-capability-v0.1",
      "oneCloudUse": "Open the phone-safe cockpit for status, blockers, and Founder decisions.",
      "currentStatus": "ready_to_open",
      "triggerPolicy": "no_trigger",
      "writePolicy": "no_write"
    },
    {
      "capabilityId": "PLT-CODEX-001",
      "label": "Remote Codex Drops Gateway",
      "accessMode": "prepare_local_node",
      "deepLink": "/home?view=dock",
      "readModelRef": "same_machine_rehearsal_pass_remote_transport_pending",
      "oneCloudUse": "Prepare readonly Drop roundtrip, runner heartbeat, callback readback, and allowlist display.",
      "currentStatus": "gate_pending",
      "triggerPolicy": "local_node_after_gate",
      "writePolicy": "callback_file_only_after_gate"
    }
  ],
  "statusEndpoints": [
    {
      "endpoint": "/onecloud/manifest",
      "label": "Capability manifest page",
      "reads": [
        "platform-multisurface-capability-v0.1",
        "platform-entitlement-read-model-v0.1",
        "platform-source-to-output-read-model-v0.1",
        "same_machine_rehearsal_pass_remote_transport_pending"
      ],
      "currentState": "available_as_page_json_preview",
      "enablementGate": "Already safe: page-rendered JSON preview only, no server write."
    },
    {
      "endpoint": "/onecloud/status",
      "label": "Unified status endpoint",
      "reads": [
        "capability manifest",
        "Store entitlement",
        "Drive queue",
        "Remote Drops gate"
      ],
      "currentState": "available_as_page_json_preview",
      "enablementGate": "Safe as page-rendered JSON preview; machine-readable API remains disabled."
    },
    {
      "endpoint": "/release/status",
      "label": "Release Gate status page",
      "reads": [
        "A-side readiness",
        "Store entitlement",
        "Drive queue",
        "Remote Drops gate"
      ],
      "currentState": "available_as_page_json_preview",
      "enablementGate": "Safe as page-rendered JSON preview; no production approval, deploy, billing, or customer send."
    },
    {
      "endpoint": "/onecloud/status/store",
      "label": "Store / entitlement status",
      "reads": [
        "platform-entitlement-read-model-v0.1"
      ],
      "currentState": "contract_only_disabled",
      "enablementGate": "Enable as read-only response only; no install, billing, or role mutation."
    },
    {
      "endpoint": "/account/status",
      "label": "Account / entitlement status page",
      "reads": [
        "platform-entitlement-read-model-v0.1"
      ],
      "currentState": "available_as_page_json_preview",
      "enablementGate": "Safe as page-rendered JSON preview; no account create, role mutation, or entitlement unlock."
    },
    {
      "endpoint": "/instances/status",
      "label": "Customer instance validation status page",
      "reads": [
        "forwaid-customer-instance-validation-v0.1"
      ],
      "currentState": "available_as_page_json_preview",
      "enablementGate": "Safe as page-rendered JSON preview; no customer data write, account mutation, or customer send."
    },
    {
      "endpoint": "/test/status",
      "label": "Founder remote test checklist page",
      "reads": [
        "forwaid-founder-remote-test-checklist-v0.1"
      ],
      "currentState": "available_as_page_json_preview",
      "enablementGate": "Safe as page-rendered checklist; requires Founder manual Lovable publish before cloud smoke."
    },
    {
      "endpoint": "/status",
      "label": "Status hub page",
      "reads": [
        "forwaid-founder-remote-test-checklist-v0.1",
        "forwaid-onecloud-unified-status-v0.1",
        "forwaid-onecloud-capability-manifest-v0.1"
      ],
      "currentState": "available_as_page_json_preview",
      "enablementGate": "Safe as page-rendered navigation hub; no mutation, action intent, or production approval."
    },
    {
      "endpoint": "/onecloud/status/source-output",
      "label": "Drive / source-to-output status",
      "reads": [
        "platform-source-to-output-read-model-v0.1"
      ],
      "currentState": "contract_only_disabled",
      "enablementGate": "Enable only after storage and source-ref privacy review stays read-only."
    },
    {
      "endpoint": "/studio/status",
      "label": "Studio / Dock workflow status page",
      "reads": [
        "platform-studio-dock-workflow-v0.1"
      ],
      "currentState": "available_as_page_json_preview",
      "enablementGate": "Safe as page-rendered JSON preview; no worker execution, canvas persistence, Drop create, or customer share."
    },
    {
      "endpoint": "/drive/status",
      "label": "Drive / source-to-output status page",
      "reads": [
        "platform-source-to-output-read-model-v0.1"
      ],
      "currentState": "available_as_page_json_preview",
      "enablementGate": "Safe as page-rendered JSON preview; no upload, storage, bucket, or Drive persistence write."
    },
    {
      "endpoint": "/onecloud/status/remote-drops",
      "label": "Remote Drops release gate status",
      "reads": [
        "same_machine_rehearsal_pass_remote_transport_pending"
      ],
      "currentState": "contract_only_disabled",
      "enablementGate": "Enable read-only status before any create_drop or callback writeback action."
    }
  ],
  "phasePlan": [
    {
      "phase": "Deep links",
      "allowedNow": true,
      "note": "OneCloud can open or embed cloud-owned surfaces immediately."
    },
    {
      "phase": "Read-only manifest",
      "allowedNow": true,
      "note": "OneCloud can read this manifest and map routes/status refs without triggering work."
    },
    {
      "phase": "Status endpoint",
      "allowedNow": false,
      "note": "Add only after the embedded page flow is stable and route consumption is confirmed."
    },
    {
      "phase": "Action intent API",
      "allowedNow": false,
      "note": "Requires Release Gate approval and readonly remote roundtrip evidence first."
    }
  ],
  "noTouchZones": [
    "Auth/RLS/Supabase production",
    "schema migrations",
    "payment/billing",
    "secrets/env",
    "customer-send/live publishing",
    "production data",
    "Remote Drops runner protocol changes",
    "OneCloud local node runtime activation"
  ],
  "nextGate": "OneCloud should consume deep links and this read-only manifest first; action intent waits for Release Gate."
}