typically, there should be one manifest.json in XPK, if not, i think the web app can't be packaged into a XPK.
@mbbill right?