{ "schema_version": 3, "catalog_version": "2026-08-29.1", "modules": { "app_shell": { "description": "Release-owned CRM shell identity and seed-once current navigation initialization; saved navigation remains Runtime-owned.", "dataset_class": "release_configuration", "execution_owner": "deploy_pipeline", "dispatcher_adapter": null, "data_sources": [ "configs/pingcap-crm-app-shell.json" ], "adapter_paths": [ "scripts/apply_runtime_app_shell.py", "deployments/offline/runtime/deploy_offline_env.py", "scripts/serviceification_d3_engine.py", "scripts/manage_test1_apprelease.py", "scripts/manage_test2_apprelease.py" ], "authoritative_paths": [ "stack.lock.json" ], "selection_schema": {}, "declared_stats": { "application_shells": 1 } }, "credits_approval_seed": { "description": "Credits approval definitions, nodes, actions, and notification templates.", "dataset_class": "business_reference_data", "execution_owner": "seed_dispatcher", "dispatcher_adapter": "scripted_seed_v1", "data_sources": [ "deployments/offline/runtime/seeds/credits-approvals.seed.json" ], "adapter_paths": [ "scripts/apply_credits_approval_seed_adapter.py", "deployments/offline/runtime/apply_credits_approval_seed.py", "deployments/offline/runtime/deploy_offline_env.py" ], "authoritative_paths": [], "selection_schema": {}, "declared_stats": { "email_templates": 4, "process_actions": 18, "process_definitions": 2, "process_nodes": 6 } }, "credits_permissions_seed": { "description": "Credits permission matrix definitions: permission sets, object permissions, and field permissions.", "dataset_class": "business_reference_data", "execution_owner": "seed_dispatcher", "dispatcher_adapter": "scripted_seed_v1", "data_sources": [ "deployments/offline/runtime/seeds/credits-permissions.seed.json" ], "adapter_paths": [ "scripts/apply_credits_permissions_seed_adapter.py", "deployments/offline/runtime/apply_credits_permissions_seed.py", "deployments/offline/runtime/deploy_offline_env.py" ], "authoritative_paths": [], "selection_schema": {}, "declared_stats": { "field_permissions": 29, "object_permissions": 5, "permission_sets": 5 } }, "deploy_baseline": { "description": "Shared deterministic baseline required by EXP, test, and staging environments.", "dataset_class": "environment_baseline", "execution_owner": "seed_dispatcher", "dispatcher_adapter": "deploy_baseline_v1", "data_sources": [ "deployments/offline/runtime/seeds/deploy-baseline.seed.yaml" ], "adapter_paths": [ "scripts/apply_deploy_seed.py", "scripts/apply_deploy_baseline.py", "scripts/apply_exp_bulk_baseline.sh", "scripts/apply_exp_bulk_baseline.py", "deployments/offline/runtime/deploy_offline_env.py" ], "authoritative_paths": [], "selection_schema": {}, "declared_stats": { "baseline_records": 25, "objects": 6 } }, "exp_baseline": { "description": "EXP-only reusable environment baseline.", "dataset_class": "environment_baseline", "execution_owner": "seed_dispatcher", "dispatcher_adapter": "exp_baseline_v1", "data_sources": [ "deployments/offline/runtime/seeds/exp-baseline.seed.yaml" ], "adapter_paths": [ "scripts/apply_exp_baseline.py", "scripts/apply_exp_bulk_baseline.sh", "scripts/apply_exp_bulk_baseline.py", "deployments/offline/runtime/deploy_offline_env.py" ], "authoritative_paths": [], "selection_schema": {}, "declared_stats": { "app_shells": 1, "baseline_records": 18, "collapsed_aliases": 0, "conflicting_duplicate_match_groups": 0, "duplicate_match_groups": 0, "lookup_records": 1, "objects": 6, "physical_records": 18 } }, "exp_hubspot_owner_bindings": { "description": "EXP owner-to-CRM-principal bootstrap mappings.", "dataset_class": "integration_reference_data", "execution_owner": "seed_dispatcher", "dispatcher_adapter": "scripted_seed_partition_v1", "data_sources": [ "deployments/offline/runtime/seeds/exp-hubspot-owner-bindings.json" ], "adapter_paths": [ "scripts/apply_exp_hubspot_owner_bindings_adapter.py", "deployments/offline/runtime/deploy_offline_env.py" ], "authoritative_paths": [], "selection_schema": {}, "declared_stats": { "binding_mappings": 52 } }, "hubspot_owner_directory_lifecycle_sync": { "description": "Pack-declared post-backend-health owner directory lifecycle job.", "dataset_class": "lifecycle_job", "execution_owner": "deploy_pipeline", "dispatcher_adapter": null, "data_sources": [ "packs/PingCAP-HubSpot-Companion/deploy/post_activation_jobs.json", "packs/PingCAP-HubSpot-Companion/flows/HubSpot_Owner_Directory_Sync.flow.json" ], "adapter_paths": [ "deployments/offline/runtime/deploy_offline_env.py" ], "authoritative_paths": [ "packs/PingCAP-HubSpot-Companion/pack.json" ], "selection_schema": {}, "declared_stats": { "post_activation_jobs": 1 } }, "identity_sync_policy": { "description": "L2-owned SCIM identity policy singleton, zero-access first-onboarding Profile, and exact least-privilege native SCIM service Profile with protected-principal resolution.", "dataset_class": "tenant_policy", "execution_owner": "seed_dispatcher", "dispatcher_adapter": "scripted_seed_v1", "data_sources": [ "packs/Salesforce-PingCAP-L2/identity-sync-policy.seed.json" ], "adapter_paths": [ "scripts/apply_identity_sync_policy.py", "deployments/offline/runtime/deploy_offline_env.py" ], "authoritative_paths": [ "packs/Salesforce-PingCAP-L2/pack.json" ], "selection_schema": {}, "declared_stats": { "identity_sync_settings": 1, "onboarding_profiles": 1, "service_profiles": 1, "service_users": 1 } }, "pack_reference_data": { "description": "Governed business reference data with explicit object-level profile selection.", "dataset_class": "business_reference_data", "execution_owner": "seed_dispatcher", "dispatcher_adapter": "pack_reference_data_v1", "data_sources": [ "deployments/offline/runtime/reference-data/industry-vertical.json", "deployments/offline/runtime/reference-data/country-region.json", "deployments/offline/runtime/reference-data/approval-email-templates.json", "deployments/offline/runtime/reference-data/email-template-catalog.json", "deployments/offline/runtime/reference-data/dated-conversion-rate.json" ], "adapter_paths": [ "scripts/apply_deploy_seed.py", "scripts/apply_pack_reference_data.sh", "scripts/apply_pack_reference_data.py" ], "authoritative_paths": [ "deployments/offline/runtime/reference-data/manifest.json" ], "selection_schema": { "objects": { "type": "string_list", "allowlist": [ "Industry_Vertical__c", "Countries_Region__c", "Country_Dictionary__c", "ReportFolder", "_System_EmailTemplate", "Dated_Conversion_Rate__c" ] } }, "declared_stats": { "objects": 6, "records": 846 } }, "pingcap_region_owner_rules": { "description": "Fixed PingCAP Lead region-to-owner routing reference data.", "dataset_class": "business_reference_data", "execution_owner": "seed_dispatcher", "dispatcher_adapter": "scripted_seed_v1", "data_sources": [ "deployments/offline/runtime/seeds/pingcap-region-owner-rules.seed.yaml" ], "adapter_paths": [ "scripts/apply_pingcap_region_owner_rules.py", "deployments/offline/runtime/deploy_offline_env.py" ], "authoritative_paths": [], "selection_schema": {}, "declared_stats": { "baseline_records": 6, "lookup_records": 6 } }, "connected_apps": { "description": "Fixed PingCAP Connected Apps (Zeno and Tony staging) and their run-as principals, seeded for staging and EXP so they survive deployment resets.", "dataset_class": "business_reference_data", "execution_owner": "seed_dispatcher", "dispatcher_adapter": "scripted_seed_v1", "data_sources": [ "deployments/offline/runtime/seeds/connected-apps.seed.yaml" ], "adapter_paths": [ "scripts/apply_connected_apps.py", "deployments/offline/runtime/deploy_offline_env.py" ], "authoritative_paths": [], "selection_schema": {}, "declared_stats": { "connected_apps": 2, "seed_users": 2 } }, "account_approval_notify": { "description": "Process-level StepApproval binding of the Account notify Flow to the regional Account approval processes.", "dataset_class": "business_reference_data", "execution_owner": "seed_dispatcher", "dispatcher_adapter": "scripted_seed_v1", "data_sources": [ "deployments/offline/runtime/seeds/account-approvals-notify.seed.json" ], "adapter_paths": [ "scripts/apply_account_approval_notify_seed_adapter.py", "deployments/offline/runtime/apply_account_approval_notify_seed.py", "deployments/offline/runtime/deploy_offline_env.py" ], "authoritative_paths": [], "selection_schema": {}, "declared_stats": { "process_actions": 5 } } }, "profiles": { "local": { "invocations": [ { "invocation_id": "local.app_shell.d3_post_pack_install", "module_id": "app_shell", "phase": "d3_post_pack_install", "order": 10, "condition": { "type": "always" }, "selection": {} } ] }, "ci": { "invocations": [] }, "test": { "invocations": [ { "invocation_id": "test.app_shell.d3_runtime_apply", "module_id": "app_shell", "phase": "d3_runtime_apply", "order": 10, "condition": { "type": "always" }, "selection": {} }, { "invocation_id": "test.pack_reference_data.governed_reference_data", "module_id": "pack_reference_data", "phase": "governed_reference_data", "order": 15, "condition": { "type": "all", "conditions": [ { "type": "env_flag", "name": "SKIP_BACKEND_START", "default": false, "equals": false }, { "type": "env_flag", "name": "DEPLOY_PACK_REFERENCE_DATA_APPLY", "default": true, "equals": true } ] }, "selection": { "objects": [ "Industry_Vertical__c", "Dated_Conversion_Rate__c" ] } }, { "invocation_id": "test.credits_permissions.governed_reference_data", "module_id": "credits_permissions_seed", "phase": "governed_reference_data", "order": 20, "condition": { "type": "env_flag", "name": "APPLY_TEST_CREDITS_PERMISSIONS_SEED", "default": true, "equals": true }, "selection": {} }, { "invocation_id": "test.app_shell.test1_apprelease", "module_id": "app_shell", "phase": "test1_apprelease", "order": 30, "condition": { "type": "always" }, "selection": {} }, { "invocation_id": "test.app_shell.test2_apprelease", "module_id": "app_shell", "phase": "test2_apprelease", "order": 40, "condition": { "type": "always" }, "selection": {} } ] }, "exp": { "invocations": [ { "invocation_id": "exp.owner_directory_lifecycle.post_owner_bindings", "module_id": "hubspot_owner_directory_lifecycle_sync", "phase": "post_owner_bindings", "order": 60, "condition": { "type": "always" }, "selection": {} } ] }, "staging": { "invocations": [ { "invocation_id": "staging.app_shell.d3_runtime_apply", "module_id": "app_shell", "phase": "d3_runtime_apply", "order": 10, "condition": { "type": "always" }, "selection": {} }, { "invocation_id": "staging.deploy_baseline.post_reference_data", "module_id": "deploy_baseline", "phase": "environment_baseline", "order": 30, "condition": { "type": "all", "conditions": [ { "type": "env_flag", "name": "SKIP_BACKEND_START", "default": false, "equals": false }, { "type": "env_flag", "name": "APPLY_SHARED_DEPLOY_BASELINE", "default": true, "equals": true } ] }, "selection": {} }, { "invocation_id": "staging.connected_apps.d3_pre_ingress", "module_id": "connected_apps", "phase": "d3_connected_apps", "order": 46, "condition": { "type": "env_flag", "name": "APPLY_CONNECTED_APPS", "default": true, "equals": true }, "selection": {} }, { "invocation_id": "staging.identity_sync_policy.d3_pre_ingress", "module_id": "identity_sync_policy", "phase": "d3_identity_sync_policy", "order": 47, "condition": { "type": "env_flag", "name": "APPLY_IDENTITY_SYNC_POLICY", "default": false, "equals": true }, "selection": {} } ] }, "production": { "invocations": [ { "invocation_id": "production.app_shell.d3_runtime_apply", "module_id": "app_shell", "phase": "d3_runtime_apply", "order": 10, "condition": { "type": "always" }, "selection": {} } ] } }, "expected_callsites": [ { "callsite_id": "d3.pre_catalog_inspection_authority", "path": "scripts/serviceification_d3_engine.py", "marker": " inspection_fixtures = apply_test2_inspection_catalog_fixtures(\n", "expected_count": 1, "expected_python_calls": 1, "module_id": "", "exclusion_id": "d3_inspection_catalog_authority", "invocation_ids": [] }, { "callsite_id": "test.pack_reference_data", "path": "scripts/serviceification_d3_engine.py", "marker": " evidence = apply_seed(\n dispatch_env,\n l2_root,\n profile=\"test\",\n phase=\"governed_reference_data\",\n", "expected_count": 1, "expected_python_calls": 1, "module_id": "pack_reference_data", "exclusion_id": "", "invocation_ids": [ "test.pack_reference_data.governed_reference_data" ] }, { "callsite_id": "test.credits_permissions", "path": "scripts/serviceification_d3_engine.py", "marker": " evidence = apply_seed(\n dispatch_env,\n l2_root,\n profile=\"test\",\n phase=\"governed_reference_data\",\n", "expected_count": 1, "expected_python_calls": 1, "module_id": "credits_permissions_seed", "exclusion_id": "", "invocation_ids": [ "test.credits_permissions.governed_reference_data" ] }, { "callsite_id": "exp.owner_directory_lifecycle", "path": "deployments/offline/runtime/deploy_offline_env.py", "marker": " run_deploy_time_hubspot_owner_directory_lifecycle_sync(\n", "expected_count": 1, "module_id": "hubspot_owner_directory_lifecycle_sync", "exclusion_id": "", "invocation_ids": [ "exp.owner_directory_lifecycle.post_owner_bindings" ] }, { "callsite_id": "d3.app_shell", "path": "scripts/serviceification_d3_engine.py", "marker": " result = offline.apply_runtime_app_shell(\n", "expected_count": 1, "expected_python_calls": 1, "module_id": "app_shell", "exclusion_id": "", "invocation_ids": [ "local.app_shell.d3_post_pack_install", "test.app_shell.d3_runtime_apply", "staging.app_shell.d3_runtime_apply", "production.app_shell.d3_runtime_apply" ] }, { "callsite_id": "staging.deploy_baseline", "path": "deployments/offline/runtime/deploy_staging_env.py", "marker": " return deploy_offline_env.apply_deploy_seed_phase(\n envv,\n downstream_build_root,\n profile=\"staging\",\n phase=\"environment_baseline\",\n", "expected_count": 1, "expected_python_calls": 1, "module_id": "deploy_baseline", "exclusion_id": "", "invocation_ids": [ "staging.deploy_baseline.post_reference_data" ] }, { "callsite_id": "staging.d3_connected_apps", "path": "scripts/run_serviceification_d3_staging.py", "marker": " evidence = impl.offline.apply_deploy_seed_phase(\n dispatch_env,\n l2_root,\n profile=\"staging\",\n phase=\"d3_connected_apps\",\n", "expected_count": 1, "expected_python_calls": 2, "module_id": "connected_apps", "exclusion_id": "", "invocation_ids": [ "staging.connected_apps.d3_pre_ingress" ] }, { "callsite_id": "staging.d3_identity_sync_policy", "path": "scripts/run_serviceification_d3_staging.py", "marker": " evidence = impl.offline.apply_deploy_seed_phase(\n dispatch_env,\n l2_root,\n profile=\"staging\",\n phase=\"d3_identity_sync_policy\",\n", "expected_count": 1, "expected_python_calls": 2, "module_id": "identity_sync_policy", "exclusion_id": "", "invocation_ids": [ "staging.identity_sync_policy.d3_pre_ingress" ] }, { "callsite_id": "staging.hubspot_emea_owner_binding_reconcile", "path": "scripts/run_serviceification_d3_staging.py", "marker": " _converge_staging_hubspot_emea_owner_binding(context)\n", "expected_count": 1, "expected_python_calls": 1, "module_id": "", "exclusion_id": "staging_hubspot_owner_binding_reconcile", "invocation_ids": [], "required_after_invocation_id": "staging.deploy_baseline.post_reference_data" }, { "callsite_id": "test1.app_shell", "path": "scripts/manage_test1_apprelease.py", "marker": " app_shell = apply_runtime_app_shell(\n", "expected_count": 1, "expected_python_calls": 1, "module_id": "app_shell", "exclusion_id": "", "invocation_ids": [ "test.app_shell.test1_apprelease" ] }, { "callsite_id": "test2.app_shell", "path": "scripts/manage_test2_apprelease.py", "marker": " app_shell = apply_runtime_app_shell(\n", "expected_count": 1, "expected_python_calls": 1, "module_id": "app_shell", "exclusion_id": "", "invocation_ids": [ "test.app_shell.test2_apprelease" ] } ], "excluded_mutations": [ { "exclusion_id": "standalone_l0_worker_release", "description": "Advance installed Worker release bindings during a stopped L0 code upgrade.", "owner": "controlplane_runtime_work_ownership", "reason": "Control-plane release lifecycle, not Seed data. L0 upgrade calls the existing work-ownership CAS and verifies its result against authority; it preserves installation metadata and never writes ownership tables directly.", "source_paths": [ "scripts/standalone_l0_release.py", "scripts/local_l0.py", ".github/workflows/deploy-test2-l0.yml" ] }, { "exclusion_id": "standalone_apprelease_publisher_trust", "description": "Publisher-key transition for a selected signed AppRelease not yet admitted by Catalog.", "owner": "controlplane_catalog_publisher_authority", "reason": "Release-authority lifecycle, not Seed data. Standalone upgrade invokes the existing Controlplane publisher-trust CAS with the observed prior keys and epoch; it never writes Catalog trust tables directly.", "source_paths": [ "scripts/standalone_apprelease_publisher.py", "scripts/manage_test1_apprelease.py", "scripts/manage_test2_apprelease.py" ] }, { "exclusion_id": "apac_sub_unit_reconcile", "description": "Best-effort APAC field/FLS/sharing convergence.", "owner": "environment_reconcile", "reason": "This is repair/convergence behavior, not deterministic Seed data.", "source_paths": [ "deployments/offline/runtime/reconcile/reconcile_apac_sub_unit.py", "deployments/offline/runtime/deploy_staging_env.py" ] }, { "exclusion_id": "d3_inspection_catalog_authority", "description": "Pre-Catalog inspection metadata required by D3 post-deploy functional cases.", "owner": "serviceification_d3_inspection", "reason": "These deterministic case fixtures must enter the immutable Catalog before successor Runtime startup; they are inspection authority, not a shared environment baseline or a Dispatcher Seed module.", "source_paths": [ "deployments/offline/runtime/fixtures/test2-inspection/catalog-authority.sql", "scripts/run_serviceification_d3_staging.py", "scripts/run_serviceification_d3_test.py", "scripts/serviceification_d3_engine.py" ] }, { "exclusion_id": "staging_hubspot_owner_binding_reconcile", "description": "Receipt-backed correction of one exact Formal Staging HubSpot owner binding.", "owner": "environment_reconcile", "reason": "This is a bounded warm-environment compare-and-swap repair after the governed baseline Seed, not shared deterministic Seed data. It can replace only deleted sandbox owner 1107072774 or the previously reviewed but provider-mismatched owner 44888233 for the uniquely resolved active EMEA principal and records exact post-state in the v3 staging receipt.", "source_paths": [ "scripts/run_serviceification_d3_staging.py" ] }, { "exclusion_id": "database_reset_or_branch_restore", "description": "Database reset, TiDB branch reset, and backup branch refresh.", "owner": "release_pipeline", "reason": "Topology and rollback state transitions must remain outside the Seed dispatcher.", "source_paths": [ "deployments/offline/runtime/common.py" ] }, { "exclusion_id": "legacy_unique_duplicate_repair", "description": "RepairLegacyUniqueDuplicates destructive legacy-data remediation.", "owner": "separately_reviewed_remediation", "reason": "Production duplicate cleanup requires a separate conflict report and approval; it is never Seed.", "source_paths": [ "deployments/offline/runtime/common.py" ] }, { "exclusion_id": "named_credential_secret_provisioning", "description": "Runtime secret materialization for named credentials.", "owner": "secret_provisioning", "reason": "Secrets are runtime inputs and must never enter tracked Seed data or Seed artifacts.", "source_paths": [ "deployments/offline/runtime/common.py", "deployments/offline/runtime/deploy_staging_env.py" ] }, { "exclusion_id": "order_layout_orderitem_operational_reconcile", "description": "Opt-in, receipt-backed correction of the admin-owned Order related list from the retired custom object to OrderItem.", "owner": "layout_bundle_migration", "reason": "This is a separately reviewed one-time layout migration and detached initial-revision lineage, not deterministic Seed data or an automatic deploy mutation.", "source_paths": [ "deployments/offline/runtime/reconcile/order_layout_orderitem.v1.json", "deployments/offline/runtime/reconcile/reconcile_order_layout_orderitem.py", "docs/migration/order-layout-orderitem-reconcile.md" ] }, { "exclusion_id": "pack_install_and_control_plane_migrations", "description": "Pack install/reapply, setup apply, backfills, and derived-state refresh.", "owner": "control_plane", "reason": "Pack lifecycle migrations and backfills are control-plane operations, not Seed modules.", "source_paths": [ "deployments/offline/runtime/common.py", "deployments/offline/runtime/deploy_offline_env.py", "deployments/offline/runtime/deploy_staging_env.py", "scripts/run_serviceification_d3_prod.py" ] }, { "exclusion_id": "patch_bundle_replay", "description": "Manifest-backed operational patch replay.", "owner": "patch_bundle_migration", "reason": "Patch bundles are independently governed one-time migrations and cannot become Seed modules or ordinary release inputs implicitly.", "source_paths": [ "deployments/offline/runtime/deploy_staging_env.py", "deployments/offline/runtime/deployment_patch_replay.py", "scripts/run_patch_bundle.py", "scripts/run_serviceification_d3_prod.py", "scripts/run_serviceification_d3_staging.py", "scripts/run_serviceification_d3_test.py", "scripts/serviceification_d3_test_patch.py" ] }, { "exclusion_id": "quote_approval_action_wrapper_reconcile", "description": "Live-byte-preserving convergence of four Quote approval action-reference wrappers.", "owner": "environment_reconcile", "reason": "This is a bounded warm-environment compatibility repair with transactional compare-and-swap guards, not baseline Seed ownership.", "source_paths": [ "deployments/offline/runtime/reconcile/quote_approval_action_wrapper_reference.json", "deployments/offline/runtime/reconcile/quote_approval_action_wrappers.v2.json", "deployments/offline/runtime/reconcile/reconcile_quote_approval_action_wrappers.py" ] }, { "exclusion_id": "test_hubspot_property_provisioning", "description": "Capability-gated HubSpot sandbox property schema provisioning for fixed Test slots.", "owner": "test_environment_integration", "reason": "This reconciles external HubSpot property definitions from a reviewed manifest; it is not NexusCRM environment baseline data.", "source_paths": [ "scripts/provision_hubspot_properties.py" ] } ] }