@aifabrix/builder 2.47.1 → 2.47.3

package/jest.isolated-projects.js

@@ -120,6 +120,7 @@ const ISOLATED_SUITE_ENTRIES = [
   ['paths-jest-sandbox-integration', ['**/tests/lib/utils/paths-jest-sandbox-integration.test.js']],
   ['secrets-remove-all-guard', ['**/tests/lib/commands/secrets-remove-all-guard.test.js']],
   ['app-logs', ['**/tests/lib/commands/app-logs.test.js']],
+  ['app-down', ['**/tests/lib/app/app-down.test.js']],
   [
     'channel-real-fs',
     [

package/jest.projects.js

@@ -351,6 +351,10 @@ const defaultProject = {
       '\\\\tests\\\\lib\\\\commands\\\\app-logs.test.js',
       'lib/commands/app-logs.test.js',
       'app-logs\\.test\\.js',
+      '/tests/lib/app/app-down.test.js',
+      '\\\\tests\\\\lib\\\\app\\\\app-down.test.js',
+      'lib/app/app-down.test.js',
+      'app-down\\.test\\.js',
       '/tests/lib/channels/channel-integration-generator.test.js',
       '\\\\tests\\\\lib\\\\channels\\\\channel-integration-generator.test.js',
       'lib/channels/channel-integration-generator.test.js',

package/lib/app/rotate-secret.js

@@ -166,7 +166,10 @@ function validateResponse(response) {
  * @param {string} apiUrl - API URL
  * @param {string} [message] - Optional message from API
  */
-function displayRotationResults(appKey, environment, credentials, apiUrl, message) {
+function displayRotationResults(appKey, environment, credentials, apiUrl, message, options = {}) {
+  if (options.quiet) {
+    return;
+  }
   logger.log(formatSuccessLine('Secret rotated successfully!\n'));
   logger.log(chalk.bold('📋 Application Details:'));
   logger.log(`   Key:         ${appKey}`);
@@ -273,7 +276,7 @@ async function getRotationAuthToken(controllerUrl, config) {
  * @param {string} actualControllerUrl - Controller URL
  * @throws {Error} If saving fails
  */
-async function saveCredentialsLocally(appKey, credentials, actualControllerUrl) {
+async function saveCredentialsLocally(appKey, credentials, actualControllerUrl, options = {}) {
   const clientIdKey = `${appKey}-client-idKeyVault`;
   const clientSecretKey = `${appKey}-client-secretKeyVault`;
 
@@ -293,10 +296,12 @@ async function saveCredentialsLocally(appKey, credentials, actualControllerUrl)
         logger.warn(chalk.yellow(`⚠  Could not validate env resolution: ${error.message}`));
       }
 
-      logger.log(formatSuccessParagraph('Credentials saved to ~/.aifabrix/secrets.local.yaml'));
-      logger.log(formatSuccessLine('env.template updated with MISO_CLIENTID, MISO_CLIENTSECRET, and MISO_CONTROLLER_URL'));
-      logger.log(formatSuccessLine('Run "aifabrix resolve ' + appKey + '" to materialize an on-disk .env\n'));
-    } else {
+      if (!options.quiet) {
+        logger.log(formatSuccessParagraph('Credentials saved to ~/.aifabrix/secrets.local.yaml'));
+        logger.log(formatSuccessLine('env.template updated with MISO_CLIENTID, MISO_CLIENTSECRET, and MISO_CONTROLLER_URL'));
+        logger.log(formatSuccessLine('Run "aifabrix resolve ' + appKey + '" to materialize an on-disk .env\n'));
+      }
+    } else if (!options.quiet) {
       logger.log(formatSuccessParagraph('Credentials saved to ~/.aifabrix/secrets.local.yaml\n'));
     }
   } catch (error) {
@@ -312,7 +317,7 @@ async function saveCredentialsLocally(appKey, credentials, actualControllerUrl)
  * @param {string} environment - Environment ID or key
  * @param {string} token - Bearer token
  */
-async function executeRotation(appKey, actualControllerUrl, environment, token) {
+async function executeRotation(appKey, actualControllerUrl, environment, token, options = {}) {
   const authConfig = { type: 'bearer', token };
   const response = await rotateApplicationSecret(actualControllerUrl, environment, appKey, authConfig);
 
@@ -324,8 +329,8 @@ async function executeRotation(appKey, actualControllerUrl, environment, token)
   }
 
   const { credentials, message } = validateResponse(response);
-  await saveCredentialsLocally(appKey, credentials, actualControllerUrl);
-  displayRotationResults(appKey, environment, credentials, actualControllerUrl, message);
+  await saveCredentialsLocally(appKey, credentials, actualControllerUrl, options);
+  displayRotationResults(appKey, environment, credentials, actualControllerUrl, message, options);
   // Clear cached client token so next deploy uses new credentials (avoids "Invalid or expired credentials" when running deploy/up-dataplane immediately after rotate)
   await clearClientToken(environment, appKey);
 }
@@ -338,8 +343,10 @@ async function executeRotation(appKey, actualControllerUrl, environment, token)
  * @param {Object} [_options] - Command options (reserved)
  * @throws {Error} If rotation fails
  */
-async function rotateSecret(appKey, _options = {}) {
-  logger.log(chalk.yellow('⚠  This will invalidate the old ClientSecret!\n'));
+async function rotateSecret(appKey, options = {}) {
+  if (!options.quiet) {
+    logger.log(chalk.yellow('⚠  This will invalidate the old ClientSecret!\n'));
+  }
 
   const { ensureSecretsEncryptionKey } = require('../core/config');
   await ensureSecretsEncryptionKey();
@@ -349,7 +356,7 @@ async function rotateSecret(appKey, _options = {}) {
   const { token, actualControllerUrl } = await getRotationAuthToken(controllerUrl, config);
 
   try {
-    await executeRotation(appKey, actualControllerUrl, environment, token);
+    await executeRotation(appKey, actualControllerUrl, environment, token, options);
   } catch (error) {
     logger.error(formatBlockingError(`Failed to rotate secret via controller: ${actualControllerUrl}`));
     logger.error(chalk.gray(`Error: ${error.message}`));

package/lib/app/run-resolve-image.js

@@ -10,7 +10,6 @@ const config = require('../core/config');
 const { resolveDockerImageRef } = require('../utils/resolve-docker-image-ref');
 const { checkImageExists } = require('../utils/app-run-containers');
 const { buildDevImageRepositoryPath } = require('../utils/image-name');
-const { wantsLocalDockerImageDiscovery } = require('../utils/build-resolve-image');
 
 /**
  * @param {string} appName
@@ -42,7 +41,7 @@ async function resolveRunImageWithLocalFallback(appName, appConfig, runOptions =
 
   const baseRef = resolveDockerImageRef(appName, appConfig, opts);
 
-  if (opts.base === true || !wantsLocalDockerImageDiscovery(appConfig)) {
+  if (opts.base === true) {
     return baseRef;
   }
 

package/lib/build/docker-build-args.js

@@ -0,0 +1,83 @@
+/**
+ * Docker build-arg resolution from resolved env and shell overlays.
+ *
+ * @fileoverview Build-time args for `aifabrix build` / docker build
+ * @author AI Fabrix Team
+ * @version 1.0.0
+ */
+
+'use strict';
+
+const path = require('path');
+const secretsEnvWrite = require('../core/secrets-env-write');
+const { assertMisoControllerNpmSdkDeps } = require('./miso-controller-npm-sdk-guard');
+
+const MISO_CONTROLLER_UI_BUILD_ARG_KEYS = [
+  'MISO_RELATIVE_PATH',
+  'MISO_WEB_SERVER_URL',
+  'VITE_BASE_PATH',
+  'KEYCLOAK_SERVER_URL',
+  'KEYCLOAK_REALM',
+  'KEYCLOAK_CLIENT_ID'
+];
+
+/**
+ * @param {Object.<string, string>} buildArgs
+ * @param {Object.<string, string>} envMap
+ */
+function applyMisoControllerUiBuildArgs(buildArgs, envMap) {
+  for (const key of MISO_CONTROLLER_UI_BUILD_ARG_KEYS) {
+    const value = envMap[key];
+    if (typeof value === 'string' && value.trim() && !value.includes('://')) {
+      buildArgs[key] = value.trim();
+    }
+  }
+  if (!buildArgs.VITE_BASE_PATH && buildArgs.MISO_RELATIVE_PATH) {
+    buildArgs.VITE_BASE_PATH = buildArgs.MISO_RELATIVE_PATH;
+  }
+  if (!buildArgs.VITE_BASE_PATH && buildArgs.MISO_WEB_SERVER_URL) {
+    try {
+      const pathname = new URL(buildArgs.MISO_WEB_SERVER_URL).pathname.replace(/\/+$/, '');
+      if (pathname && pathname !== '/') {
+        buildArgs.VITE_BASE_PATH = pathname;
+      }
+    } catch {
+      // ignore invalid public URL
+    }
+  }
+}
+
+/**
+ * Resolve Docker build-args from resolved env map and merged BASH_* secrets.
+ *
+ * @param {string} appName
+ * @param {string} [contextPath] Docker build context (repo root for miso-controller)
+ * @returns {Promise<Object.<string, string>>}
+ */
+async function resolveDockerBuildArgsForApp(appName, contextPath) {
+  const envMap = await secretsEnvWrite.resolveAndGetEnvMap(appName, { environment: 'docker' });
+  const { getBashPrefixedProcessEnvOverlay } = require('../utils/bash-secret-env');
+  const bashOverlay = await getBashPrefixedProcessEnvOverlay(null, appName);
+  const buildArgs = {};
+  if (envMap.NPM_TOKEN) buildArgs.NPM_TOKEN = envMap.NPM_TOKEN;
+  if (envMap.PYPI_TOKEN) buildArgs.PYPI_TOKEN = envMap.PYPI_TOKEN;
+  for (const [k, v] of Object.entries(bashOverlay)) {
+    if (v && buildArgs[k] === undefined) buildArgs[k] = v;
+  }
+  const shellNpm = typeof process.env.NPM_TOKEN === 'string' ? process.env.NPM_TOKEN.trim() : '';
+  const shellPypi = typeof process.env.PYPI_TOKEN === 'string' ? process.env.PYPI_TOKEN.trim() : '';
+  if (shellNpm) buildArgs.NPM_TOKEN = shellNpm;
+  if (shellPypi) buildArgs.PYPI_TOKEN = shellPypi;
+  if (appName === 'miso-controller') {
+    applyMisoControllerUiBuildArgs(buildArgs, envMap);
+  }
+  if (appName === 'miso-controller' && contextPath) {
+    assertMisoControllerNpmSdkDeps(path.resolve(contextPath));
+  }
+  return buildArgs;
+}
+
+module.exports = {
+  resolveDockerBuildArgsForApp,
+  applyMisoControllerUiBuildArgs
+};

package/lib/build/index.js

@@ -35,9 +35,8 @@ const dockerBuild = require('../utils/docker-build');
 const buildCopy = require('../utils/build-copy');
 const { resolveBuildDockerTagNames } = require('../utils/build-resolve-image');
 const buildHelpers = require('../utils/build-helpers');
-const secretsEnvWrite = require('../core/secrets-env-write');
 const { ensureRunSecretsForApp } = require('../app/run-env-compose');
-const { assertMisoControllerNpmSdkDeps } = require('./miso-controller-npm-sdk-guard');
+const { resolveDockerBuildArgsForApp } = require('./docker-build-args');
 
 /**
  * Loads application config for an application
@@ -394,33 +393,6 @@ async function handleDockerfileGeneration(appName, params, options, buildHelpers
   }, generateDockerfile);
 }
 
-/**
- * Resolve Docker build-args from resolved env map and merged BASH_* secrets.
- * @param {string} appName
- * @param {string} [contextPath] Docker build context (repo root for miso-controller)
- * @returns {Promise<Object.<string, string>>}
- */
-async function resolveDockerBuildArgsForApp(appName, contextPath) {
-  const envMap = await secretsEnvWrite.resolveAndGetEnvMap(appName, { environment: 'docker' });
-  const { getBashPrefixedProcessEnvOverlay } = require('../utils/bash-secret-env');
-  const bashOverlay = await getBashPrefixedProcessEnvOverlay(null, appName);
-  const buildArgs = {};
-  if (envMap.NPM_TOKEN) buildArgs.NPM_TOKEN = envMap.NPM_TOKEN;
-  if (envMap.PYPI_TOKEN) buildArgs.PYPI_TOKEN = envMap.PYPI_TOKEN;
-  for (const [k, v] of Object.entries(bashOverlay)) {
-    if (v && buildArgs[k] === undefined) buildArgs[k] = v;
-  }
-  // Exported shell tokens win (local dev: export NPM_TOKEN=... before af build / docker build).
-  const shellNpm = typeof process.env.NPM_TOKEN === 'string' ? process.env.NPM_TOKEN.trim() : '';
-  const shellPypi = typeof process.env.PYPI_TOKEN === 'string' ? process.env.PYPI_TOKEN.trim() : '';
-  if (shellNpm) buildArgs.NPM_TOKEN = shellNpm;
-  if (shellPypi) buildArgs.PYPI_TOKEN = shellPypi;
-  if (appName === 'miso-controller' && contextPath) {
-    assertMisoControllerNpmSdkDeps(path.resolve(contextPath));
-  }
-  return buildArgs;
-}
-
 /**
  * Standard Docker build path after CLI header is printed (non-external apps).
  * @param {string} appName

package/lib/cli/setup-app.js

@@ -324,7 +324,7 @@ function setupBuildRunLogsDownCommands(program) {
     .option('-t, --tag <tag>', 'Image tag (default: latest). Set image.tag in application.yaml to match for deploy.')
     .option(
       '--base',
-      'When manifest omits image: also tag the base repository after a developer-scoped build (ignored when application.yaml defines image)'
+      'Build/run the manifest base image (no -devN suffix). Default local build uses a developer-scoped repository when developer-id > 0.'
     )
     .action(async(appName, options) => {
       try {

package/lib/commands/teardown.js

@@ -35,6 +35,7 @@ const {
   formatProgress,
   successGlyph
 } = require('../utils/cli-test-layout-chalk');
+const { applySecretsUrlFromRemote } = require('../utils/config-paths');
 
 /** File name kept by teardown (lowercase exact match). */
 const PRESERVE_FILE = 'config.yaml';
@@ -149,6 +150,26 @@ function cleanMaterializedBuilderTrees() {
   return { removed, failed };
 }
 
+/**
+ * Fix preserved `config.yaml` after teardown: remote dev shared secrets API URL and cleared device tokens.
+ *
+ * @async
+ * @returns {Promise<boolean>} True when config was saved
+ */
+async function sanitizePreservedConfigAfterTeardown() {
+  const cfg = await config.getConfig();
+  const beforeSecrets = cfg['aifabrix-secrets'];
+  applySecretsUrlFromRemote(cfg);
+  let changed = cfg['aifabrix-secrets'] !== beforeSecrets;
+  if (cfg.device && typeof cfg.device === 'object' && Object.keys(cfg.device).length > 0) {
+    cfg.device = {};
+    changed = true;
+  }
+  if (!changed) return false;
+  await config.saveConfig(cfg);
+  return true;
+}
+
 /**
  * Stop infra with `down-infra -v` semantics. Tolerates already-down state.
  * @async
@@ -291,14 +312,13 @@ async function handleTeardown(options = {}) {
     await stopInfraQuietly();
     const { removed, failed } = cleanFilesWithSpinner();
     const builderClean = cleanMaterializedBuilderTrees();
-    for (const p of builderClean.removed) {
-      removed.push(p);
-    }
-    for (const p of builderClean.failed) {
-      failed.push(p);
-    }
+    mergeBuilderCleanResults(removed, failed, builderClean);
     const devStr = await buildDeveloperLabel();
+    const configFixed = await sanitizePreservedConfigAfterTeardown();
     logTeardownFooter({ devStr, removedCount: removed.length, failedCount: failed.length });
+    if (configFixed) {
+      logger.log(formatSuccessLine('Restored remote shared secrets URL in config.yaml'));
+    }
 
     logger.log(formatSuccessParagraph('aifabrix teardown complete.'));
   } finally {
@@ -306,10 +326,20 @@ async function handleTeardown(options = {}) {
   }
 }
 
+function mergeBuilderCleanResults(removed, failed, builderClean) {
+  for (const p of builderClean.removed) {
+    removed.push(p);
+  }
+  for (const p of builderClean.failed) {
+    failed.push(p);
+  }
+}
+
 module.exports = {
   handleTeardown,
   cleanAifabrixSystemDir,
   cleanMaterializedBuilderTrees,
+  sanitizePreservedConfigAfterTeardown,
   stopInfraQuietly,
   PRESERVE_FILE,
   PRESERVE_CERTS_DIR

package/lib/commands/up-dataplane-credentials.js

@@ -0,0 +1,104 @@
+/**
+ * Post-deploy dataplane pipeline credential alignment.
+ *
+ * Controller deploy/onboarding can reset the stored ClientSecret without updating
+ * ~/.aifabrix/secrets.local.yaml. Probe the token endpoint after deploy and rotate
+ * when local credentials no longer match the controller.
+ *
+ * @fileoverview up-dataplane credential probe and sync
+ * @author AI Fabrix Team
+ * @version 1.0.0
+ */
+
+const chalk = require('chalk');
+const { makeApiCall } = require('../utils/api');
+const { loadClientCredentials } = require('../utils/token-manager');
+const { rotateSecret } = require('../app/rotate-secret');
+const logger = require('../utils/logger');
+const { formatSuccessLine } = require('../utils/cli-test-layout-chalk');
+
+const DATAPLANE_APP_KEY = 'dataplane';
+const MISALIGN_ERROR =
+  'Dataplane pipeline credentials are not aligned with the controller. ' +
+  'Run: aifabrix app rotate-secret dataplane && aifabrix run dataplane';
+
+/**
+ * @param {string} controllerUrl
+ * @returns {string}
+ */
+function normalizeControllerUrl(controllerUrl) {
+  return String(controllerUrl || '').replace(/\/+$/, '');
+}
+
+/**
+ * Exchange dataplane client id/secret for a controller token (probe only).
+ * @async
+ * @param {string} controllerUrl
+ * @param {{ clientId: string, clientSecret: string }} credentials
+ * @returns {Promise<boolean>}
+ */
+async function probeDataplaneClientToken(controllerUrl, credentials) {
+  if (!credentials?.clientId || !credentials?.clientSecret) {
+    return false;
+  }
+  const response = await makeApiCall(`${normalizeControllerUrl(controllerUrl)}/api/v1/auth/token`, {
+    method: 'POST',
+    headers: {
+      'Content-Type': 'application/json',
+      'x-client-id': credentials.clientId,
+      'x-client-secret': credentials.clientSecret
+    }
+  });
+  return response.success === true;
+}
+
+/**
+ * @async
+ * @param {string} controllerUrl
+ * @returns {Promise<boolean>}
+ */
+async function credentialsAcceptToken(controllerUrl) {
+  const credentials = await loadClientCredentials(DATAPLANE_APP_KEY);
+  if (!credentials) {
+    return false;
+  }
+  return probeDataplaneClientToken(controllerUrl, credentials);
+}
+
+/**
+ * After deploy, verify dataplane pipeline credentials; rotate when misaligned.
+ * @async
+ * @param {Object} options - up-dataplane / platform install options
+ * @param {string} controllerUrl
+ * @returns {Promise<void>}
+ * @throws {Error} When credentials remain misaligned after rotate
+ */
+async function alignDataplaneCredentialsAfterDeploy(options, controllerUrl) {
+  const quiet = options.platformInstall === true || options.quiet === true;
+  const aligned = await credentialsAcceptToken(controllerUrl);
+  if (aligned) {
+    if (!quiet) {
+      logger.log(formatSuccessLine('Dataplane pipeline credentials verified.'));
+    }
+    return;
+  }
+
+  if (!quiet) {
+    logger.log(chalk.blue('Aligning dataplane pipeline credentials with controller...'));
+  }
+  await rotateSecret(DATAPLANE_APP_KEY, { ...options, quiet });
+
+  const stillMisaligned = !(await credentialsAcceptToken(controllerUrl));
+  if (stillMisaligned) {
+    throw new Error(MISALIGN_ERROR);
+  }
+  if (!quiet) {
+    logger.log(formatSuccessLine('Dataplane pipeline credentials aligned.'));
+  }
+}
+
+module.exports = {
+  alignDataplaneCredentialsAfterDeploy,
+  probeDataplaneClientToken,
+  credentialsAcceptToken
+};

package/lib/commands/up-dataplane.js

@@ -3,9 +3,8 @@ const { formatSuccessLine, formatSuccessParagraph } = require('../utils/cli-test
  * AI Fabrix Builder - Up Dataplane Command
  *
  * Always local deployment: requires dev infra (same gate as up-miso), then registers or
- * rotates dataplane in dev, sends deployment manifest to Miso Controller, then runs dataplane
- * locally (same as aifabrix deploy dataplane --local). If app is already registered, uses
- * rotate-secret; otherwise registers.
+ * rotates dataplane in dev, sends deployment manifest to Miso Controller, aligns pipeline
+ * credentials when deploy changed controller secrets, then runs dataplane locally.
  *
  * @fileoverview up-dataplane command implementation
  * @author AI Fabrix Team
@@ -35,6 +34,7 @@ const {
   validateEnvOutputPathFolderOrNull,
   refreshUrlsLocalRegistryForCurrentProject
 } = require('./up-common');
+const { alignDataplaneCredentialsAfterDeploy } = require('./up-dataplane-credentials');
 
 const CONTROLLER_HEALTH_PATH = '/health';
 
@@ -262,6 +262,8 @@ async function handleUpDataplane(options = {}) {
   await deployDataplaneToController({ ...options, envKey: environmentKey });
   logger.log('');
 
+  await alignDataplaneCredentialsAfterDeploy(options, controllerUrl);
+
   const { runEnvKey, portOverride } = await computeDataplaneRunOverrides(options);
 
   await app.runApp('dataplane', {

package/lib/utils/build-resolve-image.js

@@ -11,7 +11,7 @@
 const chalk = require('chalk');
 const logger = require('./logger');
 const { execWithDockerEnv } = require('./docker-exec');
-const { buildDevImageName } = require('./image-name');
+const { buildDevImageName, buildDevImageRepositoryPath } = require('./image-name');
 const {
   getRepositoryPathFromConfig,
   resolveDockerImageRef
@@ -166,8 +166,8 @@ async function discoverLocalBaseImageRepository(appName, developerId) {
 
 /**
  * Resolve local `docker build -t` repository path(s) from the manifest or discovery.
- * When `application.yaml` declares `image`, the manifest ref is used exactly (registry + name).
- * Developer-scoped `-devN` suffixes apply only when the manifest omits `image` and Docker is scanned.
+ * When `application.yaml` declares `image`, local builds still use a `-dev<id>` repository
+ * suffix for developer id > 0 unless `--base` is set (manifest ref is used exactly for base builds).
  *
  * @param {string} appName
  * @param {Object} variables - application manifest
@@ -176,9 +176,19 @@ async function discoverLocalBaseImageRepository(appName, developerId) {
  * @returns {Promise<{ buildImageName: string, compatBaseName: string|null }>}
  */
 async function resolveBuildDockerTagNames(appName, variables, developerId, options = {}) {
+  const idNum = typeof developerId === 'string' ? parseInt(developerId, 10) : Number(developerId);
+  const scopeForDeveloper =
+    Number.isFinite(idNum) && idNum > 0 && options.base !== true;
+
   if (!wantsLocalDockerImageDiscovery(variables)) {
     const { imageName } = resolveDockerImageRef(appName, variables, options);
-    return { buildImageName: imageName, compatBaseName: null };
+    if (!scopeForDeveloper) {
+      return { buildImageName: imageName, compatBaseName: null };
+    }
+    return {
+      buildImageName: buildDevImageRepositoryPath(imageName, developerId),
+      compatBaseName: null
+    };
   }
   const baseRepo = await resolveBuildImageRepositoryName(appName, variables, developerId);
   const buildImageName = buildDevImageName(baseRepo, developerId);

package/lib/utils/config-paths.js

@@ -356,10 +356,11 @@ function hostnameFromUrl(url) {
 
 function applySecretsUrlFromRemote(config) {
   const remoteServer = config['remote-server'];
-  const secretsPath = config['aifabrix-secrets'];
-  if (!remoteServer || !secretsPath || isHttpUrl(secretsPath)) return;
+  if (!remoteServer) return;
   const base = typeof remoteServer === 'string' ? remoteServer.trim().replace(/\/+$/, '') : '';
   if (!base) return;
+  const secretsPath = config['aifabrix-secrets'];
+  if (secretsPath && isHttpUrl(secretsPath)) return;
   config['aifabrix-secrets'] = `${base}/api/dev/secrets`;
 }
 
@@ -421,6 +422,8 @@ module.exports = {
   setPathConfig,
   createPathConfigFunctions,
   resolveEnvConfigPathToAbsolute,
-  SETTINGS_RESPONSE_KEYS
+  SETTINGS_RESPONSE_KEYS,
+  applySecretsUrlFromRemote,
+  applySyncAndDockerFromHost
 };
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aifabrix/builder",
-  "version": "2.47.1",
+  "version": "2.47.3",
   "description": "AI Fabrix Local Fabric & Deployment SDK",
   "main": "lib/index.js",
   "bin": {

package/.npmrc.token

@@ -1 +0,0 @@
-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