feat(manifest-v2): migrate to universal widget manifest

[rubenvdlinde]

Summary

Phase 2 of the v2 manifest rollout (hydra ADR-036). The v1 manifest is now v2: unified widgets[] array, grid coordinates per widget, the 5-kind component registry, and (where applicable) _note fields on remaining type: "custom" pages.

What changed

• @conduction/nextcloud-vue: ^1.0.0-beta.40 → ^1.0.0-beta.58 (Ajv CSP hotfix from nc-vue #259 included)
• src/manifest.json: codemod-migrated v1 → v2
• src/registry.js (new): 5-kind component registry
• src/main.js + src/App.vue: registry prop wired on CnAppRoot alongside existing customComponents

References

• procest #512 — first reference migration (58 pages, merged today)
• mydash #206 — runtime-manifest reference (merged today)

Hydra labels

Not adding ready-for-code-review / ready-for-security-review — Hydra is paused. Ready for manual review.

Test plan

• npm run build clean
• validateManifestV2(manifest) returns { valid: true, errors: [] }
• App boots in browser; Vue mounts; no new CSP errors

[github-actions]

Quality Report — ConductionNL/openbuilt @ 837485b

Check	PHP	Vue	Security	License	Tests
lint	✅
phpcs	✅
phpmd	✅
psalm	✅
phpstan	✅
phpmetrics	✅
eslint		❌
stylelint		❌
composer			✅	✅ 100/100
npm			❌	❌
PHPUnit					⏭️
Newman					⏭️
Playwright					⏭️

---

Quality workflow — 2026-05-19 15:05 UTC

Download the full PDF report from the workflow artifacts.