@aifabrix/builder 2.32.3 → 2.33.1

package/package.json

@@ -1,13 +1,15 @@
 {
   "name": "@aifabrix/builder",
-  "version": "2.32.3",
+  "version": "2.33.1",
   "description": "AI Fabrix Local Fabric & Deployment SDK",
   "main": "lib/index.js",
   "bin": {
-    "aifabrix": "bin/aifabrix.js"
+    "aifabrix": "bin/aifabrix.js",
+    "aifx": "bin/aifabrix.js"
   },
   "scripts": {
     "test": "node tests/scripts/test-wrapper.js",
+    "test:ci": "bash tests/scripts/ci-simulate.sh",
     "test:coverage": "jest --config jest.config.coverage.js --coverage --runInBand",
     "test:coverage:nyc": "nyc --reporter=text --reporter=lcov --reporter=html jest --config jest.config.coverage.js --runInBand",
     "test:watch": "jest --watch",

package/templates/applications/README.md.hbs

@@ -18,11 +18,11 @@ npm install -g @aifabrix/builder
 # Check your environment
 aifabrix doctor
 
-# Login to controller (offline tokens are default)
+# Login to controller (offline tokens are default; sets controller and environment in config)
 aifabrix login --method device --environment dev --controller http://localhost:3000
 
-# Register your application (gets you credentials automatically)
-aifabrix app register {{appName}} --environment dev
+# Register your application (gets you credentials; uses controller and environment from config)
+aifabrix app register {{appName}}
 ```
 
 ### 3. Build & Run Locally
@@ -38,7 +38,7 @@ aifabrix resolve {{appName}}
 aifabrix run {{appName}}
 ```
 
-**Access your app:** http://localhost:{{port}}
+**Access your app:** http://localhost:{{localPort}}
 
 **View logs:**
 ```bash
@@ -60,8 +60,8 @@ aifabrix build {{appName}} --tag v1.0.0
 # Push to registry
 aifabrix push {{appName}} --registry {{registry}} --tag "v1.0.0,latest"
 
-# Deploy to miso-controller
-aifabrix deploy {{appName}} --controller https://controller.aifabrix.ai --environment dev
+# Deploy (controller and environment from config; set via aifabrix login or aifabrix auth config)
+aifabrix deploy {{appName}}
 ```
 
 ---
@@ -74,7 +74,7 @@ After registering your app, you automatically get credentials in your secret fil
 
 **Rotate credentials if needed:**
 ```bash
-aifabrix app rotate-secret {{appName}} --environment dev
+aifabrix app rotate-secret {{appName}}
 ```
 
 ---
@@ -95,12 +95,12 @@ aifabrix resolve {{appName}}                      # Generate .env file
 aifabrix json {{appName}}                         # Preview deployment JSON
 aifabrix genkey {{appName}}                       # Generate deployment key
 aifabrix push {{appName}} --registry {{registry}} # Push to ACR
-aifabrix deploy {{appName}} --controller <url>    # Deploy to Azure
+aifabrix deploy {{appName}}                       # Deploy (controller/env from config)
 
 # Management
-aifabrix app register {{appName}} --environment dev
-aifabrix app list --environment dev
-aifabrix app rotate-secret {{appName}} --environment dev
+aifabrix app register {{appName}}
+aifabrix app list
+aifabrix app rotate-secret {{appName}}
 
 # Utilities
 aifabrix doctor                                   # Check environment
@@ -119,7 +119,7 @@ aifabrix build {{appName}} --language typescript  # Override language detection
 ### Run Options
 
 ```bash
-aifabrix run {{appName}} --port {{port}}          # Custom port
+aifabrix run {{appName}} --port {{localPort}}   # Override local port
 aifabrix run {{appName}} --debug                  # Debug output
 ```
 
@@ -133,8 +133,8 @@ aifabrix push {{appName}} --registry {{registry}} --tag "v1.0.0,latest,stable"
 ### Deploy Options
 
 ```bash
-aifabrix deploy {{appName}} --controller <url> --environment dev
-aifabrix deploy {{appName}} --controller <url> --environment dev --no-poll
+aifabrix deploy {{appName}}                       # Uses controller and environment from config
+aifabrix deploy {{appName}} --no-poll             # Deploy without polling for status
 ```
 
 ### Login Methods
@@ -159,13 +159,15 @@ aifabrix-home: "/custom/path"
 aifabrix-secrets: "/path/to/secrets.yaml"
 ```
 
+Controller URL and environment (for `deploy`, `app register`, etc.) are set via `aifabrix login` or `aifabrix auth config --set-controller <url> --set-environment <env>`.
+
 ---
 
 ## Troubleshooting
 
 - **"Docker not running"** → Start Docker Desktop
 - **"Not logged in"** → Run `aifabrix login` first
-- **"Port already in use"** → Use `--port` flag or change `build.localPort` in `variables.yaml` (default: {{port}})
+- **"Port already in use"** → Use `aifabrix run {{appName}} --port <port>` or set `build.localPort` in `variables.yaml` (default: {{localPort}})
 - **"Authentication failed"** → Run `aifabrix login` again
 - **"Build fails"** → Check Docker is running and `aifabrix-secrets` in `config.yaml` is configured correctly
 - **"Can't connect"** → Verify infrastructure is running{{#if hasDatabase}} and PostgreSQL is accessible{{/if}}
@@ -203,4 +205,4 @@ aifabrix genkey {{appName}}
 
 ---
 
-**Application**: {{appName}} | **Port**: {{port}} | **Registry**: {{registry}} | **Image**: {{imageName}}:latest
+**Application**: {{appName}} | **Port**: {{localPort}} | **Registry**: {{registry}} | **Image**: {{imageName}}:latest

package/templates/applications/miso-controller/env.template

@@ -21,7 +21,7 @@ ONBOARDING_INFRASTRUCTURE_NAME=
 # Password for the initial administrator user (username: admin)
 ONBOARDING_ADMIN_PASSWORD=kv://miso-controller-admin-passwordKeyVault
 
-# Optional admin email for onboarding (default: admin@aifabrix.ai)
+# Optional admin email for onboarding (default: admin@aifabrix.dev)
 ONBOARDING_ADMIN_EMAIL=kv://miso-controller-admin-emailKeyVault
 
 # =============================================================================

package/templates/applications/miso-controller/rbac.yaml

@@ -2,37 +2,37 @@ roles:
   - name: 'AI Fabrix Platform Admin'
     value: 'aifabrix-platform-admin'
     description: 'Full platform infrastructure management and enterprise controller access'
-    Groups: ['AI-Fabrix-Platform-Admins']
+    groups: ['AI-Fabrix-Platform-Admins']
 
   - name: 'AI Fabrix Security Admin'
     value: 'aifabrix-security-admin'
     description: 'Security and compliance management for enterprise controller'
-    Groups: ['AI-Fabrix-Security-Admins']
+    groups: ['AI-Fabrix-Security-Admins']
 
   - name: 'AI Fabrix Infrastructure Admin'
     value: 'aifabrix-infrastructure-admin'
     description: 'Infrastructure deployment and management across environments'
-    Groups: ['AI-Fabrix-Infrastructure-Admins']
+    groups: ['AI-Fabrix-Infrastructure-Admins']
 
   - name: 'AI Fabrix Deployment Admin'
     value: 'aifabrix-deployment-admin'
     description: 'Application deployment orchestration and environment management'
-    Groups: ['AI-Fabrix-Deployment-Admins']
+    groups: ['AI-Fabrix-Deployment-Admins']
 
   - name: 'AI Fabrix Compliance Admin'
     value: 'aifabrix-compliance-admin'
     description: 'ISO 27001 compliance monitoring and audit management'
-    Groups: ['AI-Fabrix-Compliance-Admins']
+    groups: ['AI-Fabrix-Compliance-Admins']
 
   - name: 'AI Fabrix Developer'
     value: 'aifabrix-developer'
     description: 'Developer access to deploy applications via GitHub Actions'
-    Groups: ['AI-Fabrix-Developers']
+    groups: ['AI-Fabrix-Developers']
 
   - name: 'AI Fabrix Observer'
     value: 'aifabrix-observer'
     description: 'Read-only access to monitoring, logs, and compliance reports'
-    Groups: ['AI-Fabrix-Observers']
+    groups: ['AI-Fabrix-Observers']
 
 permissions:
   # Service User Management

package/templates/external-system/README.md.hbs

@@ -0,0 +1,99 @@
+# {{displayName}}
+
+{{description}}
+
+## System Information
+
+- **System Key**: `{{systemKey}}`
+- **System Type**: `{{systemType}}`
+- **Datasources**: {{datasourceCount}}
+
+## Files
+
+- `variables.yaml` – Application configuration with `app` and `externalIntegration` blocks
+- `{{systemKey}}-system.json` – External system definition (authentication, OpenAPI/MCP, RBAC)
+{{#each datasources}}
+- `{{fileName}}` – Datasource: {{displayName}}
+{{/each}}
+- `env.template` – Environment variables template (secrets, API keys)
+- `{{systemKey}}-deploy.json` – Deployment manifest (generated by `aifabrix json`)
+
+Optional: `rbac.yaml` – Roles and permissions merged into the system when present.
+
+## Quick Start
+
+### 1. Create External System
+
+```bash
+aifabrix create {{appName}} --type external
+```
+
+Or use the interactive wizard:
+
+```bash
+aifabrix wizard --app {{appName}}
+```
+
+### 2. Configure Authentication and Datasources
+
+Edit files in `integration/{{appName}}/`:
+
+- **Authentication**: `{{systemKey}}-system.json` (auth type, credentials placeholders)
+- **Field mappings**: `{{systemKey}}-datasource-*.json` (dimensions, attributes, operations)
+
+### 3. Validate Configuration
+
+```bash
+aifabrix validate {{appName}} --type external
+```
+
+### 4. Generate Deployment Manifest
+
+```bash
+aifabrix json {{appName}} --type external
+```
+
+This creates `{{systemKey}}-deploy.json` in `integration/{{appName}}/`.
+
+### 5. Deploy
+
+Controller URL and environment are read from config. Configure and log in first:
+
+```bash
+aifabrix auth config --set-controller <url> --set-environment dev
+aifabrix login
+```
+
+Then deploy:
+
+```bash
+aifabrix deploy {{appName}}
+```
+
+## Testing
+
+### Unit Tests (Local Validation, No API)
+
+```bash
+aifabrix test {{appName}}
+```
+
+### Integration Tests (Via Dataplane)
+
+```bash
+aifabrix test-integration {{appName}}
+```
+
+## Deployment
+
+Deploy via miso-controller pipeline (same as regular apps). Auth and controller come from `aifabrix login` and `aifabrix auth config`:
+
+```bash
+aifabrix deploy {{appName}}
+```
+
+## Troubleshooting
+
+- **Validation errors**: Run `aifabrix validate {{appName}} --type external` to see schema and manifest errors.
+- **Deployment / auth**: Run `aifabrix auth config --set-controller <url> --set-environment <env>` and `aifabrix login` before `aifabrix deploy`.
+- **File not found**: Run commands from the project root (where `package.json` and `integration/` live).

package/templates/github/ci.yaml.hbs

@@ -12,4 +12,47 @@ jobs:
         with:
           node-version: '20'
       - name: Run tests
-        run: npm test
+        run: npm test
+
+  deploy:
+    name: Deploy to AI Fabrix
+    runs-on: ubuntu-latest
+    needs: test
+    # Note: This workflow deploys to ACR (Azure Container Registry) and Azure
+    # For local deployment, use 'aifabrix deploy {{appName}}' directly from your machine
+    steps:
+      - uses: actions/checkout@v4
+      
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+      
+      - name: Install AI Fabrix Builder
+        run: npm install -g @aifabrix/builder
+      
+      - name: Authenticate with Controller
+        run: |
+          set -e
+          aifabrix login \
+            --method credentials \
+            --app {{appName}} \
+            --client-id ${{ secrets.DEV_MISO_CLIENTID }} \
+            --client-secret ${{ secrets.DEV_MISO_CLIENTSECRET }} \
+            --controller ${{ secrets.MISO_CONTROLLER_URL }} \
+            --environment dev
+      
+      - name: Validate Application Manifest
+        run: |
+          set -e
+          aifabrix validate {{appName}}
+      
+      - name: Build Docker Image
+        run: |
+          set -e
+          aifabrix build {{appName}} --tag ${{ github.sha }}
+      
+      - name: Deploy Application
+        run: |
+          set -e
+          aifabrix deploy {{appName}}

package/templates/github/release.yaml.hbs

@@ -56,3 +56,47 @@ jobs:
           body: Release {{appName}} ${{ github.ref }}
           draft: false
           prerelease: false
+
+  deploy:
+    name: Deploy to AI Fabrix
+    runs-on: ubuntu-latest
+    needs: create-release
+    # Note: This workflow deploys to ACR (Azure Container Registry) and Azure
+    # For local deployment, use 'aifabrix deploy {{appName}}' directly from your machine
+    steps:
+      - uses: actions/checkout@v4
+      
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+      
+      - name: Install AI Fabrix Builder
+        run: npm install -g @aifabrix/builder
+      
+      - name: Authenticate with Controller
+        run: |
+          set -e
+          aifabrix login \
+            --method credentials \
+            --app {{appName}} \
+            --client-id ${{ secrets.PRO_MISO_CLIENTID }} \
+            --client-secret ${{ secrets.PRO_MISO_CLIENTSECRET }} \
+            --controller ${{ secrets.MISO_CONTROLLER_URL }} \
+            --environment pro
+      
+      - name: Validate Application Manifest
+        run: |
+          set -e
+          aifabrix validate {{appName}}
+      
+      - name: Build Docker Image
+        run: |
+          set -e
+          TAG_VERSION=${GITHUB_REF#refs/tags/v}
+          aifabrix build {{appName}} --tag $TAG_VERSION
+      
+      - name: Deploy Application
+        run: |
+          set -e
+          aifabrix deploy {{appName}}

package/templates/infra/compose.yaml.hbs

@@ -96,6 +96,41 @@ services:
     networks:
       - {{networkName}}
 
+{{#if traefik.enabled}}
+  # Traefik Reverse Proxy
+  traefik:
+    image: traefik:v3.6
+    container_name: {{#if (eq devId 0)}}aifabrix-traefik{{else}}aifabrix-dev{{devId}}-traefik{{/if}}
+    command:
+      - "--providers.docker=true"
+      - "--providers.docker.exposedbydefault=false"
+      - "--providers.docker.network={{networkName}}"
+      - "--entrypoints.web.address=:80"
+      - "--entrypoints.websecure.address=:443"
+{{#if traefik.certStore}}
+{{#if traefik.certFile}}
+      - "--certificatesstores.{{traefik.certStore}}.defaultcertificate.certfile={{traefik.certFile}}"
+{{/if}}
+{{#if traefik.keyFile}}
+      - "--certificatesstores.{{traefik.certStore}}.defaultcertificate.keyfile={{traefik.keyFile}}"
+{{/if}}
+{{/if}}
+    ports:
+      - "{{traefikHttpPort}}:80"
+      - "{{traefikHttpsPort}}:443"
+    volumes:
+      - /var/run/docker.sock:/var/run/docker.sock:ro
+{{#if traefik.certFile}}
+      - {{traefik.certFile}}:{{traefik.certFile}}:ro
+{{/if}}
+{{#if traefik.keyFile}}
+      - {{traefik.keyFile}}:{{traefik.keyFile}}:ro
+{{/if}}
+    networks:
+      - {{networkName}}
+    restart: unless-stopped
+{{/if}}
+
 volumes:
   {{#if (eq devId 0)}}postgres_data{{else}}dev{{devId}}_postgres_data{{/if}}:
     name: {{#if (eq devId 0)}}infra_postgres_data{{else}}infra_dev{{devId}}_postgres_data{{/if}}

package/templates/python/docker-compose.hbs

@@ -6,6 +6,32 @@ services:
   {{app.key}}:
     image: {{image.name}}:{{image.tag}}
     container_name: {{containerName}}
+    {{#if traefik.enabled}}
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.{{app.key}}.rule=Host(`{{traefik.host}}`) && PathPrefix(`{{traefik.path}}`)"
+      {{#if traefik.tls}}
+      - "traefik.http.routers.{{app.key}}.entrypoints=websecure"
+      - "traefik.http.routers.{{app.key}}.tls=true"
+      {{#if traefik.certStore}}
+      - "traefik.http.routers.{{app.key}}.tls.certstore={{traefik.certStore}}"
+      {{/if}}
+      {{else}}
+      - "traefik.http.routers.{{app.key}}.entrypoints=web"
+      {{/if}}
+      - "traefik.http.services.{{app.key}}.loadbalancer.server.port={{containerPort}}"
+      {{#unless (eq traefik.path "/")}}
+      - "traefik.http.middlewares.{{app.key}}-stripprefix.stripprefix.prefixes={{traefik.path}}"
+      - "traefik.http.routers.{{app.key}}.middlewares={{app.key}}-stripprefix"
+      {{/unless}}
+    {{/if}}
+    {{#if traefik.enabled}}
+    {{#unless (eq traefik.path "/")}}
+    environment:
+      - BASE_PATH={{traefik.path}}
+      - X_FORWARDED_PREFIX={{traefik.path}}
+    {{/unless}}
+    {{/if}}
     env_file:
       - {{envFile}}
     ports:

package/templates/typescript/docker-compose.hbs

@@ -6,6 +6,32 @@ services:
   {{app.key}}:
     image: {{image.name}}:{{image.tag}}
     container_name: {{containerName}}
+    {{#if traefik.enabled}}
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.{{app.key}}.rule=Host(`{{traefik.host}}`) && PathPrefix(`{{traefik.path}}`)"
+      {{#if traefik.tls}}
+      - "traefik.http.routers.{{app.key}}.entrypoints=websecure"
+      - "traefik.http.routers.{{app.key}}.tls=true"
+      {{#if traefik.certStore}}
+      - "traefik.http.routers.{{app.key}}.tls.certstore={{traefik.certStore}}"
+      {{/if}}
+      {{else}}
+      - "traefik.http.routers.{{app.key}}.entrypoints=web"
+      {{/if}}
+      - "traefik.http.services.{{app.key}}.loadbalancer.server.port={{containerPort}}"
+      {{#unless (eq traefik.path "/")}}
+      - "traefik.http.middlewares.{{app.key}}-stripprefix.stripprefix.prefixes={{traefik.path}}"
+      - "traefik.http.routers.{{app.key}}.middlewares={{app.key}}-stripprefix"
+      {{/unless}}
+    {{/if}}
+    {{#if traefik.enabled}}
+    {{#unless (eq traefik.path "/")}}
+    environment:
+      - BASE_PATH={{traefik.path}}
+      - X_FORWARDED_PREFIX={{traefik.path}}
+    {{/unless}}
+    {{/if}}
     env_file:
       - {{envFile}}
     ports: