guest: enforce app compose version policy

[kvinwang]

Summary

• Parse app-compose.json manifest_version as a string, while keeping legacy numeric 1/2 compatibility and rejecting numeric 3+.
• Add guest-side manifest gating:
  • reject manifests above guest MAX_SUPPORTED_MANIFEST_VERSION
  • reject any manifest that contains requirements unless manifest_version == "3"
• Add requirements support:
  • requirements.os_version uses Rust semver requirement syntax, e.g. ">=0.6.0, <0.7.0"
  • requirements.platforms reuses existing AttestationMode deserialize values, e.g. "dstack-gcp-tdx"
  • omitted platforms means any platform; explicit platforms: [] means no platform is supported
• Update dstack-vmm to emit string manifest version "3" for OS images >= 0.6.0, while preserving legacy numeric 2 for older images.
• Update Rust/Go/JS/Python SDK and UI AppCompose types for manifest_version and requirements.

Example

{
  "manifest_version": "3",
  "requirements": {
    "os_version": ">=0.6.0",
    "platforms": ["dstack-gcp-tdx"]
  }
}

Validation

• cargo fmt --all --check
• git diff --check
• cargo test -p dstack-types
• cargo test -p dstack-util
• cargo test -p dstack-attest compatibility_tests::attestation_mode_deserializes_canonical_names
• cargo check -p dstack-vmm -p dstack-guest-agent
• cargo clippy -- -D warnings -D clippy::expect_used -D clippy::unwrap_used --allow unused_variables
• cargo test --all-features --no-run
• cd vmm/ui && npm run build
• cd sdk/go && go test ./dstack -run '^$'
• python3 -m py_compile sdk/python/src/dstack_sdk/get_compose_hash.py sdk/python/src/dstack_sdk/__init__.py
• GitHub CI: all checks passing

[Copilot]

Pull request overview

This PR updates the AppCompose schema to treat manifest_version as a string (while still accepting legacy numeric 1/2 on input) and enforces version-based policies in the guest during system setup, including a new os_version_policy.min constraint.

Changes:

• Canonicalize manifest_version parsing to a string with legacy numeric 1/2 compatibility and add manifest_version_u32() helper in dstack-types.
• Enforce a guest-side maximum supported manifest version and enforce os_version_policy.min (before KMS/env/docker setup) in dstack-util system setup.
• Update SDK/UI AppCompose types to support string manifest_version and the new os_version_policy field.

Reviewed changes

Copilot reviewed 7 out of 7 changed files in this pull request and generated 2 comments.

Show a summary per file

File	Description
vmm/ui/src/composables/useVmManager.ts	Extends UI AppCompose typing for string/number manifest_version and optional os_version_policy.min.
sdk/python/src/dstack_sdk/get_compose_hash.py	Extends Python AppCompose typing for string/number manifest_version and adds os_version_policy.
sdk/js/src/get-compose-hash.ts	Extends JS SDK AppCompose typing for string/number manifest_version and adds os_version_policy.
sdk/go/dstack/compose_hash.go	Updates Go SDK AppCompose to accept string/number manifest_version and adds os_version_policy support.
guest-agent/src/rpc_service.rs	Updates guest-agent test AppCompose construction for new Rust AppCompose fields/types.
dstack-util/src/system_setup.rs	Adds guest enforcement for max supported manifest version + os_version_policy.min, and validates early in system setup.
dstack-types/src/lib.rs	Changes Rust AppCompose manifest_version to canonical string form with custom deserialization + adds os_version_policy.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Pull request overview

Copilot reviewed 7 out of 7 changed files in this pull request and generated 2 comments.