Add opt-in AppHost Server v2 to the CLI bundle

.github/workflows/native-hosting-validation.yml

@@ -0,0 +1,80 @@
+# Native.Core.Tests builds AotSmoke but does not execute it. This independent lane
+# executes the published binaries and generated SDK against real Docker, DCP and Chromium.
+name: Native hosting validation
+
+on:
+  pull_request:
+    paths:
+      # Broad source/build coverage intentionally includes transitive MSBuild dependencies,
+      # linked files and runtime-only CLI/Dashboard/codegen inputs without a second project graph.
+      - 'src/**'
+      - 'eng/**'
+      - 'tests/Aspire.Hosting.Native.Core.Tests/**'
+      - 'tests/PolyglotAppHosts/Aspire.Hosting/TypeScript/package.json'
+      - 'tests/Directory.Build.*'
+      - 'tests/Shared/**'
+      - 'Directory.*'
+      - '*.props'
+      - '*.targets'
+      - '.editorconfig'
+      - '.config/**'
+      - 'global.json'
+      - 'NuGet.config'
+      - 'Aspire.slnx'
+      - 'restore.sh'
+      - 'build.sh'
+      - '.github/workflows/native-hosting-validation.yml'
+  push:
+    branches: [main, 'release/**']
+    paths:
+      - 'src/**'
+      - 'eng/**'
+      - 'tests/Aspire.Hosting.Native.Core.Tests/**'
+      - 'tests/PolyglotAppHosts/Aspire.Hosting/TypeScript/package.json'
+      - 'tests/Directory.Build.*'
+      - 'tests/Shared/**'
+      - 'Directory.*'
+      - '*.props'
+      - '*.targets'
+      - '.editorconfig'
+      - '.config/**'
+      - 'global.json'
+      - 'NuGet.config'
+      - 'Aspire.slnx'
+      - 'restore.sh'
+      - 'build.sh'
+      - '.github/workflows/native-hosting-validation.yml'
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+concurrency:
+  group: native-hosting-${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  native_hosting:
+    name: Native AOT, generated SDK, Docker, DCP, CLI and Dashboard
+    runs-on: ubuntu-latest
+    timeout-minutes: 35
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
+      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+        with:
+          node-version: '24'
+      - name: Execute native hosting validation
+        run: bash eng/scripts/test-native-hosting.sh linux-x64
+      - name: Upload native hosting evidence
+        if: always()
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        with:
+          name: native-hosting-linux-x64
+          path: |
+            artifacts/native-hosting/ci/logs/
+            artifacts/native-hosting/native-dashboard.png
+            artifacts/native-hosting/ci/cli-apphost/*proof.json
+          if-no-files-found: warn
+          retention-days: 7

Aspire.slnx

@@ -47,6 +47,7 @@
     <Project Path="src/Aspire.Dashboard/Aspire.Dashboard.csproj" />
     <Project Path="src/Aspire.Hosting.Analyzers/Aspire.Hosting.Analyzers.csproj" />
     <Project Path="src/Aspire.Hosting.AppHost/Aspire.Hosting.AppHost.csproj" />
+    <Project Path="src/Aspire.Hosting.Ats.Abstractions/Aspire.Hosting.Ats.Abstractions.csproj" />
     <Project Path="src/Aspire.Hosting.Blazor/Aspire.Hosting.Blazor.csproj" />
     <Project Path="src/Aspire.Hosting.Browsers/Aspire.Hosting.Browsers.csproj" />
     <Project Path="src/Aspire.Hosting.DevTunnels/Aspire.Hosting.DevTunnels.csproj" />
@@ -65,6 +66,9 @@
     <Project Path="src/Aspire.Hosting.Milvus/Aspire.Hosting.Milvus.csproj" />
     <Project Path="src/Aspire.Hosting.MongoDB/Aspire.Hosting.MongoDB.csproj" />
     <Project Path="src/Aspire.Hosting.MySql/Aspire.Hosting.MySql.csproj" />
+    <Project Path="src/Aspire.Hosting.Native.CodeGeneration/Aspire.Hosting.Native.CodeGeneration.csproj" />
+    <Project Path="src/Aspire.Hosting.Native.Core/Aspire.Hosting.Native.Core.csproj" />
+    <Project Path="src/Aspire.Hosting.Native.Server/Aspire.Hosting.Native.Server.csproj" />
     <Project Path="src/Aspire.Hosting.Nats/Aspire.Hosting.Nats.csproj" />
     <Project Path="src/Aspire.Hosting.OpenAI/Aspire.Hosting.OpenAI.csproj" />
     <Project Path="src/Aspire.Hosting.Oracle/Aspire.Hosting.Oracle.csproj" />
@@ -579,6 +583,7 @@
     <Project Path="tests/Aspire.Hosting.Milvus.Tests/Aspire.Hosting.Milvus.Tests.csproj" />
     <Project Path="tests/Aspire.Hosting.MongoDB.Tests/Aspire.Hosting.MongoDB.Tests.csproj" />
     <Project Path="tests/Aspire.Hosting.MySql.Tests/Aspire.Hosting.MySql.Tests.csproj" />
+    <Project Path="tests/Aspire.Hosting.Native.Core.Tests/Aspire.Hosting.Native.Core.Tests.csproj" />
     <Project Path="tests/Aspire.Hosting.Nats.Tests/Aspire.Hosting.Nats.Tests.csproj" />
     <Project Path="tests/Aspire.Hosting.OpenAI.Tests/Aspire.Hosting.OpenAI.Tests.csproj" />
     <Project Path="tests/Aspire.Hosting.Oracle.Tests/Aspire.Hosting.Oracle.Tests.csproj" />

docs/ci/test-trigger-map.md

@@ -102,6 +102,43 @@ The map stays small by keeping each dependency in the layer that can prove it:
 Unconditional baseline builds are not selector targets. Gated reusable
 workflows are routed to the target they implement or serve.
 
+### Independent native hosting lane
+
+[`native-hosting-validation.yml`](../../.github/workflows/native-hosting-validation.yml)
+is a dedicated PR/push/manual workflow, not a `tests.yml` selector target. Its
+path filters conservatively cover all `src/**` and `eng/**`, root build/restore
+inputs, shared test inputs, and `tests/Aspire.Hosting.Native.Core.Tests/**`.
+The TypeScript Polyglot AppHost manifest copied into the CLI fixture is also
+explicitly routed to this lane.
+This deliberately includes transitive build dependencies and runtime-only
+generated SDK, CLI, Dashboard, and smoke fixtures without maintaining another
+project dependency list. Its workflow is classified in `ignore`; the general
+workflow rule and the harness's path rule still select infrastructure validation.
+
+The lane runs the published Native AOT executable smoke and all six TypeScript
+smoke entry points using fresh generated SDK output, real Docker/DCP workloads,
+the repo-built CLI/Dashboard, and headless Chromium. Building `AotSmoke` through
+a project reference is not a substitute for executing this lane. Its existing
+cleanup assertions remain enabled. Evidence is uploaded even on failure.
+
+Run the same harness locally with Node.js 24+, Docker, and Native AOT build
+prerequisites:
+
+```bash
+bash eng/scripts/test-native-hosting.sh linux-x64
+# On an Apple Silicon host:
+bash eng/scripts/test-native-hosting.sh osx-arm64
+```
+
+The harness restores the repository, builds CLI/Dashboard in Debug using the
+default framework, publishes server/smoke in Release for net10, and installs
+isolated npm/browser dependencies under `artifacts/native-hosting/ci` without
+editing repository manifests. It executes RPC, runtime, workloads, revisions,
+CLI, and auxiliary protocol/command scenarios; workload/revision/CLI scenarios
+require the actual browser Dashboard. Logs and AppHost proof JSON are retained.
+After pushing changes, inspect this workflow's real run and uploaded evidence;
+local script or routing-test success alone does not prove GitHub CI passed.
+
 ## Rule categories
 
 Rules are **additive**: a changed file activates the union of targets from every

docs/specs/appmodel.md

@@ -1,6 +1,7 @@
 # Aspire Resource Model: Concepts, Design, and Authoring Guidance
 > **Audience** – Aspire integrators, advanced users, and contributors who are defining custom resource types, implementing publishers, or working across both runtime and publish workflows.  
 > This documentation's focus is on hosting integrations *NOT* client integrations.
+> For the ATS-native model being explored in the native hosting proof of concept, see [App Model v2](appmodelv2.md). That document describes proposed contracts, not supported APIs.
 > *Just getting started? Jump straight to [Quick Start](#quick-start) and come back later for the deep‑dive.*
 
 ---