oxy-app-builder

name	oxy-app-builder
description	Build and edit Oxy data app YAML files (*.app.yml) that visualize data through tasks and displays. Use when users ask to create dashboards, data apps, reports, interactive analytics interfaces, or to add filters/dropdowns/date pickers/controls to an app. Helps define SQL/workflow/agent tasks, interactive controls, and render outputs as tables, charts, and markdown.

Oxy App Builder

You are an expert at building Oxy data apps - interactive dashboards that combine data tasks with visualizations. Your role is to help users create *.app.yml files that transform data into insights through tables, charts, and markdown content.

What is an Oxy App?

An Oxy app is a YAML file that defines:

1. Tasks - Operations that produce data (SQL queries, workflows, semantic queries, agents)
2. Displays - Visualizations that render task outputs (tables, charts, markdown)

The mental model: Task -> Output -> Display

Two different "apps" in Oxy — don't confuse them

Oxy has two app models. This skill builds the first; know the second exists so you point users to the right one (and never claim "there is no oxy-app.json").

	Declarative app (*.app.yml)	Custom-code app (oxy-app.json)
What it is	Tasks + displays in YAML	A React/TS/Vite front-end bundle
Build step	None	vite build -> dist/
Identified by	the *.app.yml file itself	an oxy-app.json manifest at the app root
Reaches the instance via	committed into an oxy project (config.yml + *.app.yml), rendered by oxy serve --enterprise	oxy publish uploads the built bundle as a draft; an admin promotes it live
Use when	dashboards expressible as tasks+displays	bespoke UI beyond tables/charts/markdown

oxy-app.json is real and is the deploy manifest for the custom-code path — see ## Deploying custom-code apps (oxy-app.json) below. The rest of this skill is about the declarative *.app.yml path.

App YAML Structure

# Optional metadata
name: app_name                # snake_case identifier
description: |                # Multi-line description
  What this app does...

# Optional: interactive controls (dropdowns, date pickers, toggles).
# See "## Interactive Controls" below. May also be declared inline in `display:`.
controls:
  - name: region
    type: select
    options: [All, North, South]
    default: "All"

# Required: Array of tasks (min 1)
tasks:
  - name: task_name           # Unique, snake_case
    type: execute_sql         # Task type
    database: clickhouse      # Database to query
    sql_query: |              # Inline SQL
      SELECT * FROM table

# Required: Array of displays (min 1)
display:
  - type: table
    title: "Results"
    data: task_name           # Reference task by name

Only these top-level keys are accepted (AppConfig uses deny_unknown_fields): name, title, description, controls, tasks, display, published. Any other top-level key fails validation.

Task Types

1. execute_sql - Direct SQL Execution

- name: sales_by_region
  type: execute_sql
  database: clickhouse        # or: postgres, bigquery, local (DuckDB)
  sql_query: |
    SELECT region, SUM(amount) as total
    FROM sales
    GROUP BY region

Or reference a SQL file:

- name: sales_report
  type: execute_sql
  database: clickhouse
  sql_file: queries/sales_report.sql

2. workflow - Invoke Sub-Workflow

- name: data_prep
  type: workflow
  src: workflows/data_prep.workflow.yml
  variables:
    start_date: "2024-01-01"
    min_threshold: 100

Reference workflow task outputs: workflow_name.inner_task_name

3. semantic_query - Query Semantic Layer

- name: revenue_by_month
  type: semantic_query
  topic: sales_mrr
  dimensions:
    - sales.month
  measures:
    - sales.total_revenue
    - sales.order_count
  filters:
    - field: sales.year
      op: eq
      value: 2024
  orders:
    - field: sales.month
      direction: asc

4. agent - AI-Powered Analysis

- name: generate_insights
  type: agent
  agent_ref: analyst.agent.yml
  inputs:
    - sales_data
    - customer_data
  prompt: |
    Analyze the provided data and generate 3-5 key insights
    about sales trends and customer behavior.

Reference agent output in markdown: {{generate_insights}}

Display Types

markdown - Rich Text Content

- type: markdown
  content: |
    # Dashboard Title

    Analysis period: **Q4 2024**

    ## Key Findings
    {{agent_task_name}}

With title:

- type: markdown
  title: "Key Insights"
  content: "{{insights_task}}"

table - Tabular Data

- type: table
  title: "Sales Summary"
  data: sales_by_region        # Reference task name

line_chart - Trend Lines

- type: line_chart
  title: "Revenue Over Time"
  data: monthly_revenue
  x: month                     # Column for x-axis
  y: total_revenue             # Column for y-axis
  x_axis_label: "Month"
  y_axis_label: "Revenue ($)"
  series: region               # Optional: group into multiple lines

bar_chart - Category Comparison

- type: bar_chart
  title: "Sales by Region"
  data: regional_sales
  x: region
  y: total_sales
  series: product_category     # Optional: grouped/stacked bars

pie_chart - Distribution

- type: pie_chart
  title: "Market Share"
  data: market_data
  name: company                # Category column
  value: market_share          # Value column

row - Side-by-Side Layout

Render multiple displays in one horizontal row:

- type: row
  columns: 2                   # Optional; defaults to the number of children. Must be >= 1.
  children:
    - type: bar_chart
      title: "Revenue by Category"
      data: by_category
      x: category
      y: revenue
    - type: pie_chart
      title: "Revenue by Region"
      data: by_region
      name: region
      value: revenue

children is a list of display blocks (charts, tables, markdown, or control blocks). Use rows to place KPI tables or paired charts next to each other.

Chart column gotchas

Time-dimension granularity suffix. When a semantic_query task uses time_dimensions: with granularity:, the output column gets an extra __<granularity> suffix appended. Example:

tasks:
  - name: trend
    type: semantic_query
    topic: orders
    time_dimensions:
      - dimension: orders.created_date
        granularity: month
    measures: [orders.total_revenue]

display:
  - type: line_chart
    data: trend
    x: orders__created_date__month   # NOT orders__created_date
    y: orders__total_revenue

Omitting the suffix produces a "column not found" Binder error in the in-browser DuckDB chart engine and the chart silently fails to render.

Never put a raw UUID/FK on a chart axis or table row label. When the primary entity's key: is an opaque ID (guid, restaurant_id, customer_id, order_id, …), do NOT use that field as the chart x:, name:, or as the only identifier in a table — the dashboard will render uninformative UUIDs.

Two ways to surface a human-readable label instead:

1. Preferred — semantic_query via foreign entity. If a joined view exposes a name dimension (e.g. restaurants.location_name), make sure the FK side declares the joined view as a type: foreign entity (see the semantic-layer skill), include both views in the topic, and pull the name through: dimensions: [restaurants.location_name] instead of dimensions: [orders.restaurant_id]. Output column is then restaurants__location_name.

2. Fallback — execute_sql with a JOIN. When semantic_query can't reach the name (no foreign entity, no multi-view topic), use execute_sql with an explicit JOIN to the lookup table and SELECT the name column directly.

If neither path is available (no name field exists in any related view), fall back to the FK but warn in the markdown header that rows are keyed by ID — never silently render UUIDs as a chart axis.

Interactive Controls

Controls are interactive widgets (dropdowns, date pickers, toggles) rendered as a bar above the dashboard. When the user changes a control, every task whose SQL references that control re-runs and the charts/tables update live. Control values reach task SQL through Jinja: {{ controls.<name> }}.

Three control types

Widget kind	Renders as	Value type	Use for
select	Dropdown	string	Pick one option from a list
date	Date picker	string YYYY-MM-DD	Pick a date
toggle	On/off switch	boolean	Yes/no filters

Declaring controls — two forms

There are two equivalent places to declare a control. Prefer the inline form — it is what the canonical Oxy demo apps use.

1. Inline in the display: list (recommended). Add - type: control blocks, normally at the top of display: so they render as a control bar above the charts:

display:
  - type: control
    name: region            # referenced in SQL as {{ controls.region }}
    control_type: select    # <-- control_type, NOT type
    label: Region           # shown next to the widget
    options: [All, North, South, East, West]
    default: "All"

  - type: control
    name: start_date
    control_type: date
    label: From Date
    default: "2024-01-01"

  - type: control
    name: holidays_only
    control_type: toggle
    label: Holidays Only
    default: false
  # ...markdown / charts / tables follow

CRITICAL GOTCHA — the #1 controls mistake. Inside a - type: control block, the widget kind is set with the key control_type:, not type:. The type: key is already consumed by the display discriminant (type: control). Writing type: select inside a - type: control block is invalid.

2. Top-level controls: array (alternative). A sibling of tasks: and display:. Here each entry uses plain type: for the widget kind:

controls:
  - name: region
    type: select            # <-- plain `type:` in the top-level array
    label: Region
    options: [All, North, South, East, West]
    default: "All"

tasks: [...]
display: [...]

Pick one form per app. The two are merged at load time — declaring the same control in both places duplicates the widget.

Control fields

Field	Required	Applies to	Notes
name	yes	all	Identifier, referenced as {{ controls.<name> }}. snake_case.
control_type	yes	inline	select | date | toggle. (Top-level array uses type: instead.)
label	no	all	Human label next to the widget. Defaults to name.
default	no	all	Initial value. Quote strings; toggle default is true/false. May use Jinja.
options	no	select	Static list of dropdown choices.
source	no	select	Name of a task whose first column populates the dropdown dynamically.

Populating a select from data (source)

Set source: to a task name; the dropdown is filled from that task's first column. Add a task that returns the distinct values — and include any sentinel row (like All) yourself:

tasks:
  - name: store_list          # feeds the dropdown
    type: execute_sql
    database: local
    sql_query: |
      SELECT 'All' AS Store
      UNION ALL
      SELECT DISTINCT CAST(Store AS VARCHAR) FROM 'sales.csv' ORDER BY Store

display:
  - type: control
    name: store
    control_type: select
    label: Store
    source: store_list        # use `source:`, not `options:`
    default: "All"

Use source: OR options:, not both.

Referencing controls in SQL

Inject control values into any execute_sql task with Jinja:

SELECT region, SUM(revenue) AS total
FROM sales
WHERE sale_date >= {{ controls.start_date | sqlquote }}
  AND ({{ controls.region | sqlquote }} = 'All' OR region = {{ controls.region | sqlquote }})
  {% if controls.holidays_only %}AND period = 'Holiday'{% endif %}
GROUP BY region

Rules — this is where the agent goes wrong:

1. Always pipe string/date values through | sqlquote. It wraps the value in single quotes and escapes embedded quotes (O'Brien → 'O''Brien').
2. Never add your own quotes around a sqlquote value. '{{ controls.x | sqlquote }}' produces ''value'' — broken SQL. sqlquote already supplies the surrounding quotes.
3. Optional-filter idiom. A select can't be empty, so use an All sentinel: ({{ controls.x | sqlquote }} = 'All' OR col = {{ controls.x | sqlquote }}). Include All in options: or in the source query.
4. Toggle filters go inside an {% if %} block: {% if controls.flag %}AND ...{% endif %} — the body is included only when on.
5. Date values are strings. Compare against date columns directly (col >= {{ controls.d | sqlquote }}) or cast explicitly (TRY_CAST({{ controls.d | sqlquote }} AS DATE)).

Supported Jinja is intentionally minimal

Client-mode tasks (the default) re-run in the browser's DuckDB WASM engine, which understands only these four Jinja forms:

• {{ controls.x }} — raw substitution
• {{ controls.x | sqlquote }} — quoted SQL string literal
• {{ controls.x | default('v') }} — substitution with fallback
• {% if controls.x %}...{% endif %} — truthy-only conditional

Anything else — {% for %} loops, {% if a == b %} comparisons, {% else %} / {% elif %}, other filters — is not supported and breaks the live re-run. Keep control templating to those four forms; put comparison logic in SQL (CASE, OR), not in Jinja.

default: and options: values may use Jinja evaluated once at app load — most usefully now():

  - type: control
    name: year
    control_type: select
    options: ["All", "{{ now(fmt='%Y') }}", "{{ now(fmt='%Y') | int - 1 }}"]
    default: "All"

Task execution mode (mode)

Every task takes an optional mode: — client (default) or server — that controls how it re-runs when a control changes:

• client — the browser re-runs the SQL in DuckDB WASM. Fast, no server round-trip. Works only for execute_sql tasks with an inline sql_query against a local DuckDB database (CSV/Parquet sources).
• server — the server re-executes the task. Required for tasks that query an external warehouse (postgres, clickhouse, bigquery, Snowflake), use sql_file:, or are workflow / semantic_query / agent tasks.

tasks:
  - name: revenue
    type: execute_sql
    database: clickhouse
    mode: server            # external DB -> must be server
    sql_query: |
      SELECT ... WHERE store = {{ controls.store | sqlquote }}

Tasks against non-local databases are forced to server mode regardless of the YAML, so when in doubt set mode: server — it always works. For local-DuckDB apps, leave mode unset (it defaults to client).

Controls validation note

oxy validate checks control structure only. It does not verify that a {{ controls.x }} reference matches a declared control, or that source: names a real task — those fail only at runtime. After adding controls, smoke-test the app in the UI and change each control to confirm dependent tasks re-run.

SQL dialect notes

When you author or profile SQL inside an execute_sql task — or when you query the warehouse to check shape/distribution before picking fields — match the dialect to the configured database. The most common gotchas:

Dialect	DATE_TRUNC form	Stddev fn
BigQuery	DATE_TRUNC(<col>, MONTH) (column first, no quotes)	STDDEV(<col>)
Snowflake	DATE_TRUNC('month', <col>)	STDDEV(<col>)
Postgres	DATE_TRUNC('month', <col>)	STDDEV(<col>)
DuckDB	DATE_TRUNC('month', <col>)	STDDEV(<col>)
ClickHouse	toStartOfMonth(<col>)	stddevPop(<col>) (lowercase)

Other places .app.yml SQL diverges across dialects:

• Identifier quoting — "col" in Postgres/Snowflake; `col` in BigQuery/MySQL.
• Casting — CAST(x AS DATE) is portable; x::date is Postgres-only.
• Date arithmetic — INTERVAL '1 day' works in Postgres/DuckDB; BigQuery uses DATE_ADD(d, INTERVAL 1 DAY).

Profiling template

Before committing to a measure or entity for a chart or ranked table, profile the underlying data so you don't ship a flat-line trend or a top-10 with one row in it. One consolidated SELECT is enough:

SELECT
  COUNT(*) AS rows,
  COUNT(DISTINCT <entity_expr>) AS entity_card,
  MIN(<time_expr>) AS min_date,
  MAX(<time_expr>) AS max_date,
  COUNT(DISTINCT DATE_TRUNC('month', <time_expr>)) AS month_count,
  MIN(<measure_expr>) AS min_val,
  MAX(<measure_expr>) AS max_val,
  STDDEV(<measure_expr>) AS measure_stddev
FROM <table>

Substitute <entity_expr>, <time_expr>, <measure_expr>, and <table> with the view's actual expr: strings — never guess column names. Apply the dialect substitutions above when the warehouse is BigQuery or ClickHouse.

A topic is fit for ranking and trend visualizations when:

• rows >= 100,
• month_count >= 3 (enough time for a meaningful trend),
• measure_stddev > 0 (not a flat measure that draws as a horizontal line at one value),
• entity_card is between 5 and 500 (top/bottom-N actually differ).

Failure recovery

Profiling queries fail mid-build for routine reasons — dialect mismatch, type-cast errors, an aggregation function the warehouse doesn't expose. The recovery rule is:

1. Simplify and retry once — drop STDDEV, drop month_count, or replace DATE_TRUNC with the dialect equivalent. At most two attempts per topic in total.
2. Skip the topic on the second failure — never loop on the same failing query. Move on to the next candidate; if none qualify, omit the affected block entirely rather than ship a misleading chart.

This rule applies anywhere in .app.yml authoring where you query the warehouse before committing layout decisions.

Workflow for Building Apps

ALWAYS Follow This Process:

1. Understand Requirements

   • What insights does the user need?
   • What data sources are available?
   • What visualizations make sense?

2. Create a Plan (REQUIRED before writing YAML)

   App: [name]
   Purpose: [1-2 sentences]
   
   Data Sources:
   - [database/table or semantic layer topic]
   
   Tasks:
   1. task_name: [intent] -> [output shape: columns]
   2. task_name: [intent] -> [output shape]
   
   Displays:
   1. [type]: [what it shows] - data: task_name
   2. [type]: [what it shows] - data: task_name
   

3. Get User Sign-Off on Plan

   • Don't write YAML until plan is approved

4. Write the App YAML

   • Follow conventions from examples
   • Ensure task outputs match display requirements

5. Pre-test referenced workflows and agents (REQUIRED before opening the app)

   oxy validate only checks YAML structure — SQL errors won't surface until the app runs in the UI. Run any workflows and agents the app references BEFORE finalizing the app:

   # Test each workflow the app references
   OXY_DATABASE_URL=postgresql://postgres:postgres@localhost:15432/oxy oxy run workflows/my_workflow.workflow.yml
   
   # Test each agent the app references
   OXY_DATABASE_URL=postgresql://postgres:postgres@localhost:15432/oxy oxy run my_agent.agent.yml "summarize last week"
   

   If either fails with a SQL error, fix the workflow or agent first, then return to the app.

6. Validate (REQUIRED)

   • Run oxy validate --file=<path> on the app file
   • Fix any validation errors before proceeding
   • Verify task names match display data references

7. Smoke-test the app end-to-end (REQUIRED before declaring done)

   oxy validate only catches structural YAML errors. It does not catch malformed SQL — broken JOIN syntax, dialect-specific type mismatches, missing ON clauses, type coercion failures — which all fail at task-execution time. The most common failure mode is a brand-new .app.yml that loads as a blank dashboard with a runtime error, because the model wrote SQL that parses but doesn't run on the target warehouse.

   After every write or edit to a .app.yml, run every task end-to-end. Two practical paths:

Data Reference Patterns

Direct task reference:

data: task_name

Workflow task reference (dot notation):

data: workflow_task.inner_task_name

Markdown templating:

content: "Generated by AI: {{agent_task_name}}"

Common Patterns

Pattern 1: SQL -> Table + Chart

name: sales_dashboard

tasks:
  - name: sales_by_region
    type: execute_sql
    database: clickhouse
    sql_query: |
      SELECT region, SUM(amount) as total_sales
      FROM orders
      WHERE order_date >= '2024-01-01'
      GROUP BY region
      ORDER BY total_sales DESC

display:
  - type: markdown
    content: |
      # Sales Dashboard
      Regional sales performance for 2024.

  - type: bar_chart
    title: "Sales by Region"
    data: sales_by_region
    x: region
    y: total_sales

  - type: table
    title: "Regional Details"
    data: sales_by_region

Pattern 2: Multi-Task Dashboard with Trends

name: executive_dashboard

tasks:
  - name: kpi_summary
    type: execute_sql
    database: clickhouse
    sql_query: |
      SELECT
        SUM(revenue) as total_revenue,
        COUNT(DISTINCT customer_id) as customers,
        AVG(order_value) as avg_order
      FROM orders

  - name: monthly_trends
    type: execute_sql
    database: clickhouse
    sql_query: |
      SELECT
        DATE_TRUNC('month', order_date) as month,
        SUM(revenue) as revenue
      FROM orders
      GROUP BY 1
      ORDER BY 1

display:
  - type: markdown
    content: |
      # Executive Dashboard

  - type: table
    title: "Key Metrics"
    data: kpi_summary

  - type: line_chart
    title: "Revenue Trend"
    data: monthly_trends
    x: month
    y: revenue
    x_axis_label: "Month"
    y_axis_label: "Revenue ($)"

Pattern 3: Workflow Orchestration

name: franchise_report

tasks:
  - name: sales
    type: workflow
    src: workflows/sales_analysis.workflow.yml
    variables:
      period: "2024-Q4"

  - name: labor
    type: workflow
    src: workflows/labor_metrics.workflow.yml
    variables:
      min_hours: 50

display:
  - type: table
    title: "Sales by Location"
    data: sales.location_summary      # Dot notation!

  - type: bar_chart
    title: "Labor Cost %"
    data: labor.cost_analysis
    x: location
    y: labor_cost_pct

Pattern 4: Semantic Query + Agent Insights

name: sales_report

tasks:
  - name: revenue_data
    type: semantic_query
    topic: sales_mrr
    dimensions:
      - sales.month
    measures:
      - sales.total_mrr
    orders:
      - field: sales.month
        direction: asc

  - name: insights
    type: agent
    agent_ref: analyst.agent.yml
    inputs:
      - revenue_data
    prompt: |
      Analyze the revenue data and provide 3 key insights.

display:
  - type: line_chart
    title: "Revenue Over Time"
    data: revenue_data
    x: sales__month
    y: sales__total_mrr

  - type: markdown
    title: "AI Insights"
    content: "{{insights}}"

Pattern 5: Interactive Dashboard with Controls

name: sales_dashboard

tasks:
  # Feeds the region dropdown — first column becomes the options.
  - name: region_list
    type: execute_sql
    database: local
    sql_query: |
      SELECT 'All' AS region
      UNION ALL
      SELECT DISTINCT region FROM sales ORDER BY region

  - name: revenue_by_category
    type: execute_sql
    database: local
    sql_query: |
      SELECT category, SUM(revenue) AS total_revenue
      FROM sales
      WHERE sale_date >= {{ controls.start_date | sqlquote }}
        AND ({{ controls.region | sqlquote }} = 'All'
             OR region = {{ controls.region | sqlquote }})
        {% if controls.holidays_only %}AND period = 'Holiday'{% endif %}
      GROUP BY category
      ORDER BY total_revenue DESC

display:
  # Controls render as a bar at the top. Inline blocks use `control_type:`.
  - type: control
    name: region
    control_type: select
    label: Region
    source: region_list
    default: "All"

  - type: control
    name: start_date
    control_type: date
    label: From Date
    default: "2024-01-01"

  - type: control
    name: holidays_only
    control_type: toggle
    label: Holidays Only
    default: false

  - type: bar_chart
    title: "Revenue by Category"
    data: revenue_by_category
    x: category
    y: total_revenue

See templates/dashboard-with-controls.app.yml for the full version with a row layout.

Best Practices

Task Design

• Unique names: Each task must have a unique name (snake_case)
• Clear output shapes: Know what columns your SQL/query returns
• Match displays: Ensure output columns match chart x/y/series fields

SQL Guidelines

• Use CTEs for complex queries
• Include ORDER BY for predictable results
• Add comments for complex logic: # ==== SECTION ====
• Round numeric outputs: ROUND(value, 2)

Display Organization

• Start with markdown header/intro
• Group related visualizations
• Use markdown dividers: ---
• End with data quality notes if relevant

Chart Column Mapping

Chart Type	Required Fields	Column Mapping
line_chart	x, y, data	x=dimension, y=measure
bar_chart	x, y, data	x=category, y=value
pie_chart	name, value, data	name=label, value=amount

Editing Existing Apps

When editing an existing *.app.yml:

1. Read the current file first
2. Summarize what it does
3. Propose minimal changes
4. Preserve existing style

Only propose broader refactoring if the user explicitly requests it.

Validation Checklist

Before finalizing, ALWAYS run:

oxy validate

Then verify:

• Validation passes with no errors
• All task names are unique and snake_case
• All display data fields reference valid task names
• Chart x/y/series/name/value fields match actual output columns
• SQL is syntactically correct for the target database
• Inline - type: control blocks use control_type: (not type:)
• Every {{ controls.x }} reference matches a declared control name
• String/date controls in SQL use | sqlquote with no extra surrounding quotes
• Each control source: names a real task; control-only Jinja stays within the four supported forms
• Tasks referencing controls against non-local databases set mode: server

Commands

# Validate all YAML configs (agents, workflows, apps)
oxy validate

# Validate a single file
oxy validate --file=my_app.app.yml

Note: Apps are rendered through the Oxy web UI (oxy start --enterprise), not via oxy run. The oxy run command only supports .workflow.yml, .agent.yml, and .sql files.

Deploying custom-code apps (oxy-app.json)

The declarative *.app.yml path above needs no manifest. The custom-code path — a React/TS/Vite front-end — is deployed with oxy publish, and every publishable app is identified by an oxy-app.json manifest at its root. Reference implementations: ~/repos/module-designs/ (see its DEPLOYMENT.md and any module's oxy-app.json).

The manifest

oxy-app.json lives at the app/module root as the single source of truth the oxy CLI reads for slug/org/build:

{
  "schemaVersion": 2,
  "slug": "compliance",
  "orgSlug": "poke-house-staging",
  "name": "Compliance",
  "description": "Continuous operational compliance across every location.",
  "status": "15 stores · 4 regions · food safety & brand standards",
  "art": "card.png",
  "icon": "icon.svg",
  "ask": {
    "agent": "agents/restaurant_analyst.agentic.yml",
    "suggestedQuestions": [
      "Which stores are at risk this week?",
      "What are the top repeat violations?"
    ]
  },
  "build": { "outDir": "dist" }
}

Field	Required	Purpose
schemaVersion	yes	Manifest version — currently 2.
slug	yes	URL slug (usually the module dir name).
orgSlug	yes	Target org (e.g. poke-house-staging).
name	yes	Display name on the launcher card.
build.outDir	yes	Built-bundle dir — normally dist.
description	no	Launcher-card blurb.
status	no	Launcher-card subtitle line (metrics / tagline).
art	no	Card image filename (module root or public/).
icon	no	Icon filename (e.g. icon.svg).
ask	no	Wires the launcher "ask" box to an agent: { agent: <path to .agentic.yml>, suggestedQuestions: [...] }.

env / target / project are not baked into the manifest — CI or CLI flags supply them (OXY_TARGET, OXY_ORG, OXY_ENV, --project).

Three load-bearing files

A React/Vite app is made publishable by three files (missing any one breaks the publish, not local dev):

1. oxy-app.json at the module root (above).
2. vite.config.ts with two deploy-critical pieces:
   • base: process.env.OXY_APP_BASE_PATH || "/" so code-split chunks resolve under /customer-apps/<org>/<app>/ (local pnpm dev/build fall back to /).
   • a copyOxyAssets() plugin that copies oxy-app.json (plus the icon/art files it references) into dist/ on closeBundle. Load-bearing: oxy publish tars only the built dir, and the server captures launcher-card metadata from the bundle's own oxy-app.json (app_builds.manifest_json) — a manifest left only at the module root never reaches the server.
3. pnpm-workspace.yaml with allowBuilds: { esbuild: true } — pnpm 10+ blocks dependency build scripts by default; esbuild (transitive via Vite) needs its postinstall or vite build fails with ERR_PNPM_IGNORED_BUILDS.

Publish flow

• Run oxy publish from the module dir. It builds, tars dist/, and uploads the app as a draft; an Oxy admin promotes the draft to live in the admin UI (CI never publishes straight to the live channel).
• First publish auto-registers the app when --project is passed — no manual admin registration step.
• In module-designs, this is automated: PRs build + verify the bundle carries its manifest; push to main runs oxy publish per changed app dir.
• CLI version matters: oxy publish requires a recent CLI (module-designs pins 0.5.97). Older binaries (e.g. 0.5.54) predate oxy publish and will not have the subcommand — check oxy --help / oxy publish --help first.

Which path to build

• User wants a dashboard (tables, charts, markdown, filters) → build a *.app.yml (the rest of this skill). No oxy-app.json needed.
• User wants bespoke UI / a coded front-end, or says "publish", "deploy", "oxy-app.json", or points at a module-designs-style React app → that's the custom-code path; author/repair its oxy-app.json + the three files above.

DeepWiki Fallback

For features not covered here, query DeepWiki with:

"I am a user of this project, not its maintainer. Please look at project docs, examples, and json-schemas to answer: [your question]"

Only search oxy-hq/oxy repository.

Quick Reference

See QUICK-REFERENCE.md for:

• Complete schema cheat sheet
• All field options per task/display type
• More example snippets