@aifabrix/builder 2.49.1 → 2.50.0

package/integration/github/github-system.json

@@ -0,0 +1,82 @@
+{
+  "key": "github",
+  "displayName": "GitHub",
+  "description": "Production GitHub REST integration: repository issues (list/create/update/close), issue comments, and repository lifecycle operations. Uses Miso apiProvider github with GitHub App expiring user tokens.",
+  "type": "custom",
+  "enabled": true,
+  "authentication": {
+    "authType": "apiProvider",
+    "apiProvider": {
+      "apiProviderKey": "github"
+    }
+  },
+  "configuration": [
+    {
+      "name": "BASE_URL",
+      "value": "https://api.github.com",
+      "location": "variable",
+      "required": true
+    },
+    {
+      "name": "GITHUB_OWNER",
+      "value": "{{GITHUB_OWNER}}",
+      "location": "variable",
+      "required": true,
+      "portalInput": {
+        "field": "text",
+        "label": "GitHub repository owner",
+        "placeholder": "Organization or user login (e.g. octocat)",
+        "validation": {
+          "required": true,
+          "minLength": 1
+        }
+      }
+    },
+    {
+      "name": "GITHUB_REPO",
+      "value": "{{GITHUB_REPO}}",
+      "location": "variable",
+      "required": true,
+      "portalInput": {
+        "field": "text",
+        "label": "GitHub repository name",
+        "placeholder": "Repository name without owner (e.g. Hello-World)",
+        "validation": {
+          "required": true,
+          "minLength": 1
+        }
+      }
+    }
+  ],
+  "endpoints": [
+    {
+      "type": "issues",
+      "path": "/issues",
+      "description": "GitHub repository issues",
+      "active": true
+    },
+    {
+      "type": "comments",
+      "path": "/comments",
+      "description": "GitHub issue comments",
+      "active": true
+    }
+  ],
+  "endpointsActive": true,
+  "dataSources": [
+    "github-issues",
+    "github-issue-comments",
+    "github-repository"
+  ],
+  "certification": {
+    "enabled": true,
+    "publicKey": "-----BEGIN PUBLIC KEY-----\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwvWqPVKNUCLAmBIrK0u\nrsxzgtvIiyIFQVc+T5FeBYevUDOoS2VBF0aOCJGGV8P+ARzU7PtaTCZYvRvsmqou\namy+c1+b0kGCObh/gxGGVCFmbH4VCfQ2xkwML8vvAHXBW1v9Abu9EuTv3YpIZUSh\nq+0xuivs3xYwq5Lm/K10WaWzfwbjCND0K7aQmNhQq+n45EjgmkEWV2gQUDyALzsW\nfTikMtbBJEQ8BSCN8uOsZsa8MH2bBFgThIUXX/gxeUIEBfEavi8F3eR2ZC+Q/if2\nJkIwUCcH5nN2jTCDZgt5CLTIhYs51A+1kLTjtCmJ2fMmeV7Wr3DgnzdbM1cHRnT+\nlwIDAQAB\n-----END PUBLIC KEY-----",
+    "algorithm": "RS256",
+    "issuer": "Dataplane - community edition",
+    "version": "1.0.0",
+    "status": "passed",
+    "level": "SILVER",
+    "publicKeyFingerprint": "sha256:e14a67b980051e46d6b15e2c42c57aea6328d8c96622d10f01e4f9c2f22af3c5",
+    "contractHash": "sha256:70531b5131122bd8b93c948dc93506b9d3cce5fe28efa4a28d136022f834ccc5"
+  }
+}

package/integration/hubspot-test/README.md

@@ -131,7 +131,7 @@ aifabrix deploy hubspot-test
 Run positive wizard tests with:
 
 ```bash
-pnpm test:hubspot-wizard:positive
+pnpm run test:hubspot-wizard -- --type positive
 ```
 
 If you see **"Invalid token or insufficient permissions"** or **"Failed to create wizard session"** even though `aifabrix auth status` shows connected, the dataplane may be configured to accept only **client credentials** for the wizard API, not device tokens.

package/jest.isolated-projects.js

@@ -16,6 +16,7 @@ const ISOLATED_SUITE_ENTRIES = [
   ['test-e2e-external', ['**/tests/lib/commands/test-e2e-external.test.js']],
   ['repair-openapi-sync', ['**/tests/lib/commands/repair-openapi-sync.test.js']],
   ['paths-app-listing', ['**/tests/lib/utils/paths-app-listing.test.js']],
+  ['app-path-resolve', ['**/tests/lib/app-path-resolve.test.js']],
   ['paths-system-builder-resolution', ['**/tests/lib/utils/paths-system-builder-resolution.test.js']],
   ['manifest-location', ['**/tests/lib/utils/manifest-location.test.js']],
   ['installation-log', ['**/tests/lib/utils/installation-log.test.js']],
@@ -52,6 +53,12 @@ const ISOLATED_SUITE_ENTRIES = [
     ]
   ],
   ['urls-local-registry', ['**/tests/lib/utils/urls-local-registry.test.js']],
+  ['compose-local-data-mount', ['**/tests/lib/utils/compose-local-data-mount.test.js']],
+  ['repair-capability-openapi-warnings', ['**/tests/lib/commands/repair-capability-openapi-warnings.test.js']],
+  ['enterprise-knowledge-paths', ['**/tests/lib/enterprise-knowledge-paths.test.js']],
+  ['governance-fixture-subjects', ['**/tests/lib/commands/governance-fixture-subjects.test.js']],
+  ['enterprise-knowledge-generate-manifest', ['**/tests/lib/commands/enterprise-knowledge-generate-manifest.test.js']],
+  ['plan-prevalidate-gates', ['**/tests/lib/plan-prevalidate-gates.test.js']],
   ['aifabrix-runtime-config-dir', ['**/tests/lib/utils/aifabrix-runtime-config-dir.test.js']],
   ['platform-env-template-kv-catalog', ['**/tests/lib/parameters/platform-env-template-kv-catalog.test.js']],
   ['resolve-infra-state-paths', ['**/tests/lib/infrastructure/resolve-infra-state-paths.test.js']],
@@ -90,6 +97,7 @@ const ISOLATED_SUITE_ENTRIES = [
   ['generator-validation', ['**/tests/lib/generator/generator-validation.test.js']],
   ['secrets-databaselog', ['**/tests/lib/core/secrets-databaselog.test.js']],
   ['schema-241-alignment', ['**/tests/lib/validation/schema-241-alignment.test.js']],
+  ['miso-controller-npm-sdk-guard', ['**/tests/lib/build/miso-controller-npm-sdk-guard.test.js']],
   ['hubspot-e2e-com-v2', ['**/tests/lib/validation/hubspot-e2e-com-v2.test.js']],
   ['runtime-configuration-download', ['**/tests/lib/utils/runtime-configuration-download.test.js']],
   ['schema-resolver-order', ['**/tests/lib/utils/schema-resolver-order.test.js']],
@@ -132,7 +140,29 @@ const ISOLATED_SUITE_ENTRIES = [
     'channel-real-fs',
     [
       '**/tests/lib/channels/channel-integration-generator.test.js',
-      '**/tests/lib/channels/channel-artifact-generator.test.js'
+      '**/tests/lib/channels/channel-artifact-generator.test.js',
+      '**/tests/lib/channels/channel-integration-template.test.js'
+    ]
+  ],
+  [
+    'builder-api-real-fs',
+    [
+      '**/tests/lib/programmatic/**/*.test.js',
+      '**/tests/packages/builder-api/e2e.test.js',
+      '**/tests/lib/commands/manifest-cli-integration-path.test.js',
+      '**/tests/lib/commands/manifest-cli-commands.test.js',
+      '**/tests/lib/commands/repair-datasource-operation-security.test.js',
+      '**/tests/lib/commands/repair-orchestration-datasource-split.test.js',
+      '**/tests/lib/commands/repair-openapi-export.test.js',
+      '**/tests/lib/commands/repair-rbac-platform-preset.test.js',
+      '**/tests/packages/builder-api/e2e-workspace-lock.test.js',
+      '**/tests/lib/utils/paths-reload-source.test.js',
+      '**/tests/lib/platform-integrations-manifest.test.js',
+      '**/tests/lib/generator/deploy-script.test.js',
+      '**/tests/lib/commands/repair-deploy-script.test.js',
+      '**/tests/scripts/stage_builder_api_for_docker.test.js',
+      '**/tests/lib/scripts/sync-builder-api-template.test.js',
+      '**/tests/lib/evidence/evidence-service.test.js'
     ]
   ]
 ];

package/jest.projects.js

@@ -128,6 +128,22 @@ const defaultProject = {
       '\\\\tests\\\\lib\\\\utils\\\\aifabrix-runtime-config-dir.test.js',
       'lib/utils/aifabrix-runtime-config-dir.test.js',
       'aifabrix-runtime-config-dir\\.test\\.js',
+      '/tests/lib/enterprise-knowledge-paths.test.js',
+      '\\\\tests\\\\lib\\\\enterprise-knowledge-paths.test.js',
+      'lib/enterprise-knowledge-paths.test.js',
+      'enterprise-knowledge-paths\\.test\\.js',
+      '/tests/lib/commands/governance-fixture-subjects.test.js',
+      '\\\\tests\\\\lib\\\\commands\\\\governance-fixture-subjects.test.js',
+      'lib/commands/governance-fixture-subjects.test.js',
+      'governance-fixture-subjects\\.test\\.js',
+      '/tests/lib/commands/enterprise-knowledge-generate-manifest.test.js',
+      '\\\\tests\\\\lib\\\\commands\\\\enterprise-knowledge-generate-manifest.test.js',
+      'lib/commands/enterprise-knowledge-generate-manifest.test.js',
+      'enterprise-knowledge-generate-manifest\\.test\\.js',
+      '/tests/lib/plan-prevalidate-gates.test.js',
+      '\\\\tests\\\\lib\\\\plan-prevalidate-gates.test.js',
+      'lib/plan-prevalidate-gates.test.js',
+      'plan-prevalidate-gates\\.test\\.js',
       '/tests/lib/parameters/platform-env-template-kv-catalog.test.js',
       '\\\\tests\\\\lib\\\\parameters\\\\platform-env-template-kv-catalog.test.js',
       'lib/parameters/platform-env-template-kv-catalog.test.js',
@@ -216,6 +232,10 @@ const defaultProject = {
       '\\\\tests\\\\lib\\\\utils\\\\paths-app-listing.test.js',
       'lib/utils/paths-app-listing.test.js',
       'paths-app-listing\\.test\\.js',
+      '/tests/lib/app-path-resolve.test.js',
+      '\\\\tests\\\\lib\\\\app-path-resolve.test.js',
+      'lib/app-path-resolve.test.js',
+      'app-path-resolve\\.test\\.js',
       '/tests/lib/utils/paths-system-builder-resolution.test.js',
       '\\\\tests\\\\lib\\\\utils\\\\paths-system-builder-resolution.test.js',
       'lib/utils/paths-system-builder-resolution.test.js',
@@ -224,6 +244,53 @@ const defaultProject = {
       '\\\\tests\\\\lib\\\\utils\\\\manifest-location.test.js',
       'lib/utils/manifest-location.test.js',
       'manifest-location\\.test\\.js',
+      '/tests/lib/programmatic/',
+      '\\\\tests\\\\lib\\\\programmatic\\\\',
+      '/tests/packages/builder-api/e2e.test.js',
+      '\\\\tests\\\\packages\\\\builder-api\\\\e2e.test.js',
+      'builder-api/e2e\\.test\\.js',
+      '/tests/packages/builder-api/e2e-workspace-lock.test.js',
+      '\\\\tests\\\\packages\\\\builder-api\\\\e2e-workspace-lock.test.js',
+      'builder-api/e2e-workspace-lock\\.test\\.js',
+      '/tests/lib/commands/manifest-cli-integration-path.test.js',
+      '\\\\tests\\\\lib\\\\commands\\\\manifest-cli-integration-path.test.js',
+      'manifest-cli-integration-path\\.test\\.js',
+      '/tests/lib/commands/manifest-cli-commands.test.js',
+      '\\\\tests\\\\lib\\\\commands\\\\manifest-cli-commands.test.js',
+      'manifest-cli-commands\\.test\\.js',
+      '/tests/lib/commands/repair-datasource-operation-security.test.js',
+      '\\\\tests\\\\lib\\\\commands\\\\repair-datasource-operation-security.test.js',
+      'repair-datasource-operation-security\\.test\\.js',
+      '/tests/lib/commands/repair-orchestration-datasource-split.test.js',
+      '\\\\tests\\\\lib\\\\commands\\\\repair-orchestration-datasource-split.test.js',
+      'repair-orchestration-datasource-split\\.test\\.js',
+      '/tests/lib/commands/repair-openapi-export.test.js',
+      '\\\\tests\\\\lib\\\\commands\\\\repair-openapi-export.test.js',
+      'repair-openapi-export\\.test\\.js',
+      '/tests/lib/commands/repair-rbac-platform-preset.test.js',
+      '\\\\tests\\\\lib\\\\commands\\\\repair-rbac-platform-preset.test.js',
+      'repair-rbac-platform-preset\\.test\\.js',
+      '/tests/lib/utils/paths-reload-source.test.js',
+      '\\\\tests\\\\lib\\\\utils\\\\paths-reload-source.test.js',
+      'paths-reload-source\\.test\\.js',
+      '/tests/lib/platform-integrations-manifest.test.js',
+      '\\\\tests\\\\lib\\\\platform-integrations-manifest.test.js',
+      'platform-integrations-manifest\\.test\\.js',
+      '/tests/lib/generator/deploy-script.test.js',
+      '\\\\tests\\\\lib\\\\generator\\\\deploy-script.test.js',
+      'generator/deploy-script\\.test\\.js',
+      '/tests/lib/commands/repair-deploy-script.test.js',
+      '\\\\tests\\\\lib\\\\commands\\\\repair-deploy-script.test.js',
+      'repair-deploy-script\\.test\\.js',
+      '/tests/scripts/stage_builder_api_for_docker.test.js',
+      '\\\\tests\\\\scripts\\\\stage_builder_api_for_docker.test.js',
+      'stage_builder_api_for_docker\\.test\\.js',
+      '/tests/lib/scripts/sync-builder-api-template.test.js',
+      '\\\\tests\\\\lib\\\\scripts\\\\sync-builder-api-template.test.js',
+      'sync-builder-api-template\\.test\\.js',
+      '/tests/lib/evidence/evidence-service.test.js',
+      '\\\\tests\\\\lib\\\\evidence\\\\evidence-service.test.js',
+      'evidence-service\\.test\\.js',
       '/tests/lib/utils/installation-log.test.js',
       '\\\\tests\\\\lib\\\\utils\\\\installation-log.test.js',
       'lib/utils/installation-log.test.js',
@@ -268,6 +335,10 @@ const defaultProject = {
       '\\\\tests\\\\lib\\\\validation\\\\schema-241-alignment.test.js',
       'lib/validation/schema-241-alignment.test.js',
       'schema-241-alignment\\.test\\.js',
+      '/tests/lib/build/miso-controller-npm-sdk-guard.test.js',
+      '\\\\tests\\\\lib\\\\build\\\\miso-controller-npm-sdk-guard.test.js',
+      'lib/build/miso-controller-npm-sdk-guard.test.js',
+      'miso-controller-npm-sdk-guard\\.test\\.js',
       '/tests/lib/validation/hubspot-e2e-com-v2.test.js',
       '\\\\tests\\\\lib\\\\validation\\\\hubspot-e2e-com-v2.test.js',
       'lib/validation/hubspot-e2e-com-v2.test.js',
@@ -375,13 +446,25 @@ const defaultProject = {
       '\\\\tests\\\\lib\\\\channels\\\\channel-integration-generator.test.js',
       'lib/channels/channel-integration-generator.test.js',
       'channel-integration-generator\\.test\\.js',
+      '/tests/lib/channels/channel-integration-template.test.js',
+      '\\\\tests\\\\lib\\\\channels\\\\channel-integration-template.test.js',
+      'lib/channels/channel-integration-template.test.js',
+      'channel-integration-template\\.test\\.js',
       '/tests/lib/channels/channel-artifact-generator.test.js',
       '\\\\tests\\\\lib\\\\channels\\\\channel-artifact-generator.test.js',
       'lib/channels/channel-artifact-generator.test.js',
       'channel-artifact-generator\\.test\\.js',
       '/tests/setup-ci-live-fabrix-guard.test.js',
       '\\\\tests\\\\setup-ci-live-fabrix-guard.test.js',
-      'setup-ci-live-fabrix-guard\\.test\\.js'
+      'setup-ci-live-fabrix-guard\\.test\\.js',
+      '/tests/lib/utils/compose-local-data-mount.test.js',
+      '\\\\tests\\\\lib\\\\utils\\\\compose-local-data-mount.test.js',
+      'lib/utils/compose-local-data-mount.test.js',
+      'compose-local-data-mount\\.test\\.js',
+      '/tests/lib/commands/repair-capability-openapi-warnings.test.js',
+      '\\\\tests\\\\lib\\\\commands\\\\repair-capability-openapi-warnings.test.js',
+      'lib/commands/repair-capability-openapi-warnings.test.js',
+      'repair-capability-openapi-warnings\\.test\\.js'
     ];
     if (process.env.INCLUDE_LOCAL_TESTS !== 'true') {
       patterns.push('/tests/local/');
@@ -389,6 +472,9 @@ const defaultProject = {
     }
     return patterns;
   })(),
+  modulePathIgnorePatterns: [
+    '<rootDir>/docker-builder-api-staging/'
+  ],
   setupFiles: ['<rootDir>/tests/capture-real-fs.js'],
   setupFilesAfterEnv: ['<rootDir>/tests/setup.js'],
   testTimeout: isCI ? 15000 : 8000,

package/lib/api/dev-server-https.js

@@ -8,7 +8,7 @@
 const https = require('https');
 const tls = require('tls');
 
-const DEFAULT_TIMEOUT_MS = 15000;
+const DEFAULT_TIMEOUT_MS = 60000;
 
 /**
  * Merge Mozilla roots (bundled in Node) with the dev Builder Server root CA.

package/lib/api/dev.api.js

@@ -391,6 +391,7 @@ async function deleteSecret(serverUrl, clientCertPem, key, serverCaPem, secretsE
 }
 
 module.exports = {
+  request,
   issueCert,
   getHealth,
   getSettings,

package/lib/api/enterprise-knowledge.api.js

@@ -0,0 +1,63 @@
+/**
+ * @fileoverview Enterprise Knowledge dataplane API (456.16)
+ * @author AI Fabrix Team
+ * @version 1.0.0
+ */
+
+'use strict';
+
+const { createDataplaneApiClient } = require('./index');
+const { unwrapApiData } = require('../utils/external-system-readiness-core');
+
+const BASE = '/api/v1/enterprise-knowledge';
+
+/**
+ * @param {*} res
+ * @returns {*}
+ */
+function unwrapBody(res) {
+  return unwrapApiData(res) ?? res;
+}
+
+/**
+ * @param {*} res
+ * @param {string} action
+ * @returns {*}
+ */
+function assertApiSuccess(res, action) {
+  if (res && res.success === false) {
+    const message = res.formattedError || res.error || `${action} failed`;
+    const err = new Error(message);
+    err.status = res.status;
+    err.errorData = res.errorData;
+    throw err;
+  }
+  return res;
+}
+
+/**
+ * Preview full Enterprise Knowledge manifest (does not persist or publish).
+ * @requiresPermission {Dataplane} external-system:publish
+ * @async
+ * @function postGenerateManifest
+ * @param {string} dataplaneUrl
+ * @param {Object} authConfig
+ * @param {import('./types/enterprise-knowledge.types').GenerateManifestRequest} body
+ * @param {Object} [options]
+ * @param {string} [options.controllerUrl]
+ * @returns {Promise<import('./types/enterprise-knowledge.types').GenerateManifestResponse>}
+ */
+async function postGenerateManifest(dataplaneUrl, authConfig, body, options = {}) {
+  const client = createDataplaneApiClient(dataplaneUrl, authConfig, {
+    controllerUrl: options.controllerUrl || null
+  });
+  const res = assertApiSuccess(
+    await client.post(`${BASE}/generate-manifest`, { body }),
+    'Generate Enterprise Knowledge manifest preview'
+  );
+  return unwrapBody(res);
+}
+
+module.exports = {
+  postGenerateManifest
+};

package/lib/api/evidence.api.js

@@ -0,0 +1,172 @@
+/**
+ * @fileoverview Evidence Fabrix v2 API (dataplane /api/v1/evidence/*).
+ * @author AI Fabrix Team
+ * @version 1.0.0
+ */
+
+'use strict';
+
+const { createDataplaneApiClient } = require('./index');
+const { unwrapApiData } = require('../utils/external-system-readiness-core');
+
+const BASE = '/api/v1/evidence';
+
+/**
+ * @param {*} res
+ * @returns {*}
+ */
+function unwrapBody(res) {
+  return unwrapApiData(res) ?? res;
+}
+
+/**
+ * @param {*} res
+ * @param {string} action
+ * @returns {*}
+ */
+function assertApiSuccess(res, action) {
+  if (res && res.success === false) {
+    const message = res.formattedError || res.error || `${action} failed`;
+    const err = new Error(message);
+    err.status = res.status;
+    err.errorData = res.errorData;
+    throw err;
+  }
+  return res;
+}
+
+/**
+ * @param {string} dataplaneUrl
+ * @param {Object} authConfig
+ * @param {Object} [options]
+ * @param {string} [options.controllerUrl]
+ * @returns {import('./index').ApiClient}
+ */
+function createEvidenceClient(dataplaneUrl, authConfig, options = {}) {
+  return createDataplaneApiClient(dataplaneUrl, authConfig, {
+    controllerUrl: options.controllerUrl || null
+  });
+}
+
+/**
+ * @param {string} dataplaneUrl
+ * @param {Object} authConfig
+ * @param {import('./types/evidence.types').EvidenceListParams} [params]
+ * @param {Object} [options]
+ * @returns {Promise<import('./types/evidence.types').EvidenceRow[]>}
+ */
+async function listEvidence(dataplaneUrl, authConfig, params = {}, options = {}) {
+  const client = createEvidenceClient(dataplaneUrl, authConfig, options);
+  const query = {};
+  if (params.resourceType) query.resourceType = params.resourceType;
+  if (params.roleKey) query.roleKey = params.roleKey;
+  if (params.genericOnly === true) query.genericOnly = true;
+  if (params.status) query.status = params.status;
+  const res = assertApiSuccess(
+    await client.get(BASE, { params: query }),
+    'List evidence'
+  );
+  const body = unwrapBody(res);
+  return Array.isArray(body?.data) ? body.data : [];
+}
+
+/**
+ * @param {string} dataplaneUrl
+ * @param {Object} authConfig
+ * @param {string} evidenceId
+ * @param {Object} [options]
+ * @returns {Promise<import('./types/evidence.types').EvidenceRow>}
+ */
+async function getEvidence(dataplaneUrl, authConfig, evidenceId, options = {}) {
+  const client = createEvidenceClient(dataplaneUrl, authConfig, options);
+  const res = assertApiSuccess(
+    await client.get(`${BASE}/${encodeURIComponent(evidenceId)}`),
+    'Get evidence'
+  );
+  return unwrapBody(res);
+}
+
+/**
+ * @param {string} dataplaneUrl
+ * @param {Object} authConfig
+ * @param {import('./types/evidence.types').EvidenceCreatePayload} payload
+ * @param {Object} [options]
+ * @returns {Promise<import('./types/evidence.types').EvidenceRow>}
+ */
+async function insertEvidence(dataplaneUrl, authConfig, payload, options = {}) {
+  const client = createEvidenceClient(dataplaneUrl, authConfig, options);
+  const res = assertApiSuccess(
+    await client.post(BASE, { body: payload }),
+    'Insert evidence'
+  );
+  return unwrapBody(res);
+}
+
+/**
+ * @param {string} dataplaneUrl
+ * @param {Object} authConfig
+ * @param {string} evidenceId
+ * @param {import('./types/evidence.types').EvidenceUpdatePayload} payload
+ * @param {Object} [options]
+ * @returns {Promise<import('./types/evidence.types').EvidenceRow>}
+ */
+async function updateEvidence(dataplaneUrl, authConfig, evidenceId, payload, options = {}) {
+  const client = createEvidenceClient(dataplaneUrl, authConfig, options);
+  const res = assertApiSuccess(
+    await client.patch(`${BASE}/${encodeURIComponent(evidenceId)}`, { body: payload }),
+    'Update evidence'
+  );
+  return unwrapBody(res);
+}
+
+/**
+ * @param {string} dataplaneUrl
+ * @param {Object} authConfig
+ * @param {string} evidenceId
+ * @param {Object} [options]
+ * @returns {Promise<void>}
+ */
+async function deleteEvidence(dataplaneUrl, authConfig, evidenceId, options = {}) {
+  const client = createEvidenceClient(dataplaneUrl, authConfig, options);
+  assertApiSuccess(
+    await client.delete(`${BASE}/${encodeURIComponent(evidenceId)}`),
+    'Delete evidence'
+  );
+}
+
+/**
+ * @param {string} dataplaneUrl
+ * @param {Object} authConfig
+ * @param {Object[]} rows
+ * @param {Object} [options]
+ * @param {string} [options.controllerUrl]
+ * @param {boolean} [options.dryRun]
+ * @returns {Promise<{ inserted: number, updated: number, dryRun: boolean, data: import('./types/evidence.types').EvidenceRow[] }>}
+ */
+async function loadEvidenceBulk(dataplaneUrl, authConfig, rows, options = {}) {
+  const client = createEvidenceClient(dataplaneUrl, authConfig, options);
+  const params = {};
+  if (options.dryRun === true) {
+    params.dryRun = true;
+  }
+  const res = assertApiSuccess(
+    await client.post(`${BASE}/load`, { body: { data: rows }, params }),
+    'Load evidence'
+  );
+  const body = unwrapBody(res);
+  return {
+    inserted: Number(body?.inserted || 0),
+    updated: Number(body?.updated || 0),
+    dryRun: Boolean(body?.dryRun),
+    data: Array.isArray(body?.data) ? body.data : []
+  };
+}
+
+module.exports = {
+  listEvidence,
+  getEvidence,
+  insertEvidence,
+  updateEvidence,
+  deleteEvidence,
+  loadEvidenceBulk
+};

package/lib/api/external-systems.api.js

@@ -116,12 +116,18 @@ async function deleteExternalSystem(dataplaneUrl, systemIdOrKey, authConfig) {
  * @param {string} dataplaneUrl - Dataplane base URL
  * @param {string} systemIdOrKey - System ID or key
  * @param {Object} authConfig - Authentication configuration
+ * @param {Object} [requestOptions] - Optional query params
+ * @param {string} [requestOptions.versionTarget] - running | latest | explicit version id
  * @returns {Promise<Object>} Config response with application schema and dataSources
  * @throws {Error} If request fails
  */
-async function getExternalSystemConfig(dataplaneUrl, systemIdOrKey, authConfig) {
+async function getExternalSystemConfig(dataplaneUrl, systemIdOrKey, authConfig, requestOptions = {}) {
   const client = createDataplaneApiClient(dataplaneUrl, authConfig);
-  return await client.get(`/api/v1/external/systems/${systemIdOrKey}/config`);
+  const query = {};
+  if (requestOptions.versionTarget) {
+    query.versionTarget = String(requestOptions.versionTarget);
+  }
+  return await client.get(`/api/v1/external/systems/${systemIdOrKey}/config`, { query });
 }
 
 /**

package/lib/api/host-ops.api.js

@@ -0,0 +1,69 @@
+/**
+ * @fileoverview Builder Server host-ops API
+ * @author AI Fabrix Team
+ * @version 1.0.0
+ */
+
+const devApi = require('./dev.api');
+
+/**
+ * Create host-ops job. POST /api/dev/host-ops/jobs
+ * @param {string} serverUrl
+ * @param {string} clientCertPem
+ * @param {Object} body - { type, params }
+ * @param {string} [serverCaPem]
+ * @returns {Promise<{ jobId: string, status: string }>}
+ */
+async function createHostOpsJob(serverUrl, clientCertPem, body, serverCaPem) {
+  const base = devApi.normalizeBaseUrl(serverUrl);
+  return devApi.request(devApi.buildUrl(base, '/api/dev/host-ops/jobs'), {
+    method: 'POST',
+    headers: { 'X-Client-Cert': devApi.encodeCertForHeader(clientCertPem) },
+    body,
+    serverCaPem
+  });
+}
+
+/**
+ * Get host-ops job. GET /api/dev/host-ops/jobs/:jobId
+ * @param {string} serverUrl
+ * @param {string} clientCertPem
+ * @param {string} jobId
+ * @param {string} [serverCaPem]
+ * @returns {Promise<Object>}
+ */
+async function getHostOpsJob(serverUrl, clientCertPem, jobId, serverCaPem) {
+  const base = devApi.normalizeBaseUrl(serverUrl);
+  return devApi.request(
+    devApi.buildUrl(base, `/api/dev/host-ops/jobs/${encodeURIComponent(jobId)}`),
+    {
+      method: 'GET',
+      headers: { 'X-Client-Cert': devApi.encodeCertForHeader(clientCertPem) },
+      serverCaPem
+    }
+  );
+}
+
+/**
+ * Queue preflight (check-only job). POST /api/dev/host-ops/preflight
+ * @param {string} serverUrl
+ * @param {string} clientCertPem
+ * @param {Object} body - { type, params }
+ * @param {string} [serverCaPem]
+ * @returns {Promise<{ jobId: string, status: string }>}
+ */
+async function preflightHostOps(serverUrl, clientCertPem, body, serverCaPem) {
+  const base = devApi.normalizeBaseUrl(serverUrl);
+  return devApi.request(devApi.buildUrl(base, '/api/dev/host-ops/preflight'), {
+    method: 'POST',
+    headers: { 'X-Client-Cert': devApi.encodeCertForHeader(clientCertPem) },
+    body,
+    serverCaPem
+  });
+}
+
+module.exports = {
+  createHostOpsJob,
+  getHostOpsJob,
+  preflightHostOps
+};

package/lib/api/resource-types.api.js

@@ -69,6 +69,7 @@ async function createResourceType(controllerUrl, authConfig, body) {
   if (body.category) payload.category = body.category;
   if (body.defaultRiskLevel) payload.defaultRiskLevel = body.defaultRiskLevel;
   if (body.status) payload.status = body.status;
+  if (body.domain) payload.domain = body.domain;
   return await client.post(BASE, { body: payload });
 }