{
  id          = "0015",
  slug        = "registry-topology",
  description = "Declare registry_provides in .ontology/manifest.ncl with participant id and namespace topology. Domain artifacts now use domains/<participant>/<id>:<version> instead of the flat domains/<id>:<version> namespace.",

  check = {
    tag     = "Grep",
    paths   = [".ontology/manifest.ncl"],
    pattern = "registry_provides",
  },

  instructions = "
## Registry topology declaration (migration 0015)

The provisioning registry now uses participant-scoped namespaces for all artifacts:
  domains/<participant>/<id>:<version>
  modes/<participant>/<id>:<version>  (already correct if you used mode-push)

### Step 1 — Declare registry_provides in .ontology/manifest.ncl

Add inside your make_manifest { ... }:

  registry_provides = m.make_registry_provides {
    participant = \"<your-project-id>\",
    registries  = m.make_registries_config {
      default    = \"primary\",
      registries = [
        m.make_registry_entry {
          id         = \"primary\",
          endpoint   = \"\",
          role       = 'primary,
          tls        = true,
          namespaces = {
            own      = [\"domains/<your-project-id>/\", \"modes/<your-project-id>/\"],
            prefixes = [\"domains/<your-project-id>/\", \"modes/<your-project-id>/\"],
          },
        },
      ],
    },
  },

Set endpoint = \"\" and configure PROVISIONING_REGISTRY at runtime, or fill it in
once the registry hostname is stable.

### Step 2 — Update domain-push calls (participant is now positional arg 2)

  # Before
  domain-push <path> --registry <reg>
  # After
  domain-push <path> <your-project-id> --registry <reg>

### Step 3 — Update domain-pull / describe / verify (use participant/id form)

  # Before: domain-pull <id> <version>
  # After:  domain-pull <participant> <id> <version>
  #         or via: prvng i domain pull <participant>/<id> <version>

### Step 4 — Verify live state

  PROVISIONING_REGISTRY=<host> ore provisioning i list --live
",
}