@aifabrix/builder 2.49.2 → 2.51.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (459) hide show
  1. package/.cursor/plans/157.1-security-quality-violations-by-type.csv +374 -0
  2. package/.cursor/rules/assistant-driven-integration-build.mdc +40 -0
  3. package/.cursor/rules/deploy-rules/docker-image-ip-policy.mdc +49 -0
  4. package/.cursor/rules/plan-rules/application-lifecycle.mdc +30 -0
  5. package/.cursor/rules/plan-rules/plan-frontmatter.mdc +35 -0
  6. package/.cursor/rules/plan-rules/plan-lifecycle.mdc +31 -0
  7. package/.cursor/rules/plan-rules/plan-validation-gate.mdc +34 -0
  8. package/.cursor/skills/README.md +1 -0
  9. package/.dockerignore +52 -0
  10. package/.eslintignore +22 -0
  11. package/README.md +2 -0
  12. package/bin/builder-api-cleanup.js +26 -0
  13. package/bin/builder-api-nest.js +10 -0
  14. package/bin/builder-api-spike.js +19 -0
  15. package/enterprise-knowledge/README.md +50 -0
  16. package/enterprise-knowledge/enterprise-integration-lifecycle/README.md +22 -0
  17. package/enterprise-knowledge/enterprise-integration-lifecycle/application.json +15 -0
  18. package/enterprise-knowledge/enterprise-integration-lifecycle/deploy.js +69 -0
  19. package/enterprise-knowledge/enterprise-integration-lifecycle/enterprise-integration-lifecycle-deploy.json +52 -0
  20. package/enterprise-knowledge/enterprise-integration-lifecycle/enterprise-integration-lifecycle-system.json +29 -0
  21. package/enterprise-knowledge/enterprise-integration-lifecycle/env.template +2 -0
  22. package/integration/README.md +81 -0
  23. package/integration/github/README.md +53 -0
  24. package/integration/github/application.json +21 -0
  25. package/integration/github/deploy.js +72 -0
  26. package/integration/github/env.template +11 -0
  27. package/integration/github/github-datasource-issue-comments.json +239 -0
  28. package/integration/github/github-datasource-issues.json +399 -0
  29. package/integration/github/github-datasource-repository.json +354 -0
  30. package/integration/github/github-deploy.json +1202 -0
  31. package/integration/github/github-system.json +82 -0
  32. package/integration/hubspot-test/README.md +1 -1
  33. package/integration/hubspot-test/create-hubspot.js +1 -16
  34. package/jest.isolated-projects.js +31 -1
  35. package/jest.projects.js +87 -1
  36. package/lib/api/dev-server-https.js +1 -1
  37. package/lib/api/enterprise-knowledge.api.js +63 -0
  38. package/lib/api/evidence-kinds.api.js +128 -0
  39. package/lib/api/evidence.api.js +172 -0
  40. package/lib/api/external-systems.api.js +8 -2
  41. package/lib/api/pipeline.api.js +5 -1
  42. package/lib/api/resource-types.api.js +5 -4
  43. package/lib/api/roles.api.js +121 -0
  44. package/lib/api/types/enterprise-knowledge.types.js +46 -0
  45. package/lib/api/types/evidence-kinds.types.js +42 -0
  46. package/lib/api/types/evidence.types.js +67 -0
  47. package/lib/api/types/resource-types.types.js +2 -0
  48. package/lib/api/types/roles.types.js +36 -0
  49. package/lib/app/certification-verify-rows.js +1 -1
  50. package/lib/app/controller-application-filter.js +36 -0
  51. package/lib/app/deploy.js +1 -1
  52. package/lib/app/list-external-systems.js +130 -0
  53. package/lib/app/list.js +20 -8
  54. package/lib/app/run.js +3 -1
  55. package/lib/app/show-display.js +8 -3
  56. package/lib/app/show-online.js +178 -0
  57. package/lib/app/show.js +39 -90
  58. package/lib/build/builder-api-docker-staging.js +47 -0
  59. package/lib/build/miso-controller-npm-sdk-guard.js +2 -2
  60. package/lib/build/standard-docker-build.js +2 -0
  61. package/lib/certification/merge-certification-from-artifact.js +1 -1
  62. package/lib/certification/post-unified-cert-sync.js +4 -31
  63. package/lib/certification/sync-after-external-command.js +0 -1
  64. package/lib/certification/sync-system-certification.js +0 -3
  65. package/lib/channels/add-channel.js +40 -34
  66. package/lib/channels/approval-guides/chatgpt.js +33 -0
  67. package/lib/channels/approval-guides/credential-portal.js +38 -0
  68. package/lib/channels/approval-guides/index.js +110 -0
  69. package/lib/channels/approval-guides/microsoft-copilot.js +34 -0
  70. package/lib/channels/approval-guides/slack.js +34 -0
  71. package/lib/channels/approval-guides/teams-bot.js +35 -0
  72. package/lib/channels/approval-guides/web-embed.js +32 -0
  73. package/lib/channels/channel-approval-guide.js +11 -0
  74. package/lib/channels/channel-artifact-generator.js +18 -5
  75. package/lib/channels/channel-audit.js +3 -0
  76. package/lib/channels/channel-auth-context.js +1 -1
  77. package/lib/channels/channel-description.js +59 -0
  78. package/lib/channels/channel-integration-generator.js +13 -230
  79. package/lib/channels/channel-integration-template.js +94 -0
  80. package/lib/channels/channel-runtime-resolver.js +43 -3
  81. package/lib/channels/channel-status-display.js +66 -26
  82. package/lib/channels/channel-targets.js +3 -3
  83. package/lib/cli/index.js +31 -3
  84. package/lib/cli/infra-guided.js +5 -1
  85. package/lib/cli/setup-app-external-create.js +111 -0
  86. package/lib/cli/setup-app.help.js +1 -1
  87. package/lib/cli/setup-app.js +60 -130
  88. package/lib/cli/setup-app.test-commands.js +26 -52
  89. package/lib/cli/setup-certification-commands.js +4 -4
  90. package/lib/cli/setup-certification.help.js +9 -9
  91. package/lib/cli/setup-dev.js +30 -9
  92. package/lib/cli/setup-external-system-help.js +4 -6
  93. package/lib/cli/setup-external-system.js +58 -52
  94. package/lib/cli/setup-infra-up-builder-api-action.js +64 -0
  95. package/lib/cli/setup-infra-up-platform-action.js +3 -1
  96. package/lib/cli/setup-infra.js +15 -0
  97. package/lib/cli/setup-list.js +43 -0
  98. package/lib/cli/setup-utility-help-after.js +12 -0
  99. package/lib/cli/setup-utility-repair.js +26 -7
  100. package/lib/cli/setup-utility-validate.js +41 -2
  101. package/lib/cli/setup-utility.js +5 -3
  102. package/lib/commands/app.js +15 -43
  103. package/lib/commands/channel-add-setup.js +110 -0
  104. package/lib/commands/channel.js +42 -8
  105. package/lib/commands/datasource-sync-display.js +96 -0
  106. package/lib/commands/datasource-sync-policy.js +210 -0
  107. package/lib/commands/datasource-test-trust-cli.js +6 -6
  108. package/lib/commands/datasource-unified-test-cli.js +2 -1
  109. package/lib/commands/datasource-unified-test-cli.options.js +33 -23
  110. package/lib/commands/deploy-gate-failure-details.js +184 -0
  111. package/lib/commands/deploy-gate-orchestrator.js +368 -0
  112. package/lib/commands/dev-cli-handlers.js +7 -62
  113. package/lib/commands/dev-host-ops-params.js +91 -0
  114. package/lib/commands/dev-host-ops-poll.js +111 -0
  115. package/lib/commands/dev-host-ops.js +107 -94
  116. package/lib/commands/dev-init.js +6 -106
  117. package/lib/commands/dev-refresh.js +197 -0
  118. package/lib/commands/enterprise-knowledge.js +284 -0
  119. package/lib/commands/evidence-cli-leaves.js +250 -0
  120. package/lib/commands/evidence-kind.js +428 -0
  121. package/lib/commands/evidence.js +51 -0
  122. package/lib/commands/governance-cli-shared.js +2 -2
  123. package/lib/commands/governance-command-action.js +5 -3
  124. package/lib/commands/governance-fixture-subjects.js +85 -0
  125. package/lib/commands/governance.js +1 -1
  126. package/lib/commands/lifecycle-command-action.js +2 -2
  127. package/lib/commands/lifecycle-external.js +3 -3
  128. package/lib/commands/manifest-cli-auth.js +29 -0
  129. package/lib/commands/manifest-cli-commands.js +170 -0
  130. package/lib/commands/manifest-cli-integration-path.js +63 -0
  131. package/lib/commands/manifest.js +21 -0
  132. package/lib/commands/protection-cli-leaves.js +3 -3
  133. package/lib/commands/repair-auth-apply.js +15 -1
  134. package/lib/commands/repair-authentications-454.js +169 -0
  135. package/lib/commands/repair-capability-openapi-warnings.js +126 -0
  136. package/lib/commands/repair-datasource-apply.js +135 -0
  137. package/lib/commands/repair-datasource-auto-rbac.js +62 -1
  138. package/lib/commands/repair-datasource-http-service-contract.js +239 -0
  139. package/lib/commands/repair-datasource-operation-security.js +180 -0
  140. package/lib/commands/repair-datasource-run.js +7 -2
  141. package/lib/commands/repair-datasource-sync-operations.js +177 -0
  142. package/lib/commands/repair-datasource-webhooks-sync-bridge.js +133 -0
  143. package/lib/commands/repair-datasource.js +12 -68
  144. package/lib/commands/repair-env-template.js +11 -1
  145. package/lib/commands/repair-external-run.js +121 -31
  146. package/lib/commands/repair-internal.js +1 -1
  147. package/lib/commands/repair-openapi-export.js +156 -0
  148. package/lib/commands/repair-openapi-sync.js +33 -8
  149. package/lib/commands/repair-orchestration-datasource-split.js +259 -0
  150. package/lib/commands/repair-persist.js +22 -1
  151. package/lib/commands/repair-rbac-platform-preset.js +204 -0
  152. package/lib/commands/repair-rbac-reader-roles.js +191 -0
  153. package/lib/commands/repair-rbac.js +163 -86
  154. package/lib/commands/repair-steps.js +83 -18
  155. package/lib/commands/repair-system-permissions.js +1 -0
  156. package/lib/commands/repair.js +1 -1
  157. package/lib/commands/resource-type.js +166 -44
  158. package/lib/commands/role.js +452 -0
  159. package/lib/commands/run-post-publish-data-sync.js +68 -0
  160. package/lib/commands/setup-modes.js +1 -1
  161. package/lib/commands/setup.js +1 -1
  162. package/lib/commands/test-e2e-external.js +21 -8
  163. package/lib/commands/test-governance-cli-options.js +2 -2
  164. package/lib/commands/test-trust-cli-options.js +2 -2
  165. package/lib/commands/up-builder-api-bootstrap.js +71 -0
  166. package/lib/commands/up-builder-api-provision.js +241 -0
  167. package/lib/commands/up-builder-api.js +88 -0
  168. package/lib/commands/up-common.js +25 -1
  169. package/lib/commands/upload-credential-push-log.js +117 -0
  170. package/lib/commands/upload-data-sync-finalize.js +60 -0
  171. package/lib/commands/upload-probe.js +66 -0
  172. package/lib/commands/upload-publish-context.js +4 -1
  173. package/lib/commands/upload-sidecar-followups.js +55 -27
  174. package/lib/commands/upload.js +116 -157
  175. package/lib/commands/validate-json.js +230 -0
  176. package/lib/commands/verify-governance-combined-external.js +1 -1
  177. package/lib/commands/verify-governance-db.js +2 -2
  178. package/lib/commands/verify-operations-command-action.js +2 -2
  179. package/lib/commands/verify-operations-step-plan.js +79 -41
  180. package/lib/commands/verify-operations-steps.js +2 -2
  181. package/lib/commands/verify-trust-command-action.js +1 -1
  182. package/lib/commands/wizard-core.js +1 -1
  183. package/lib/commands/wizard-headless.js +2 -1
  184. package/lib/core/admin-secrets.js +2 -6
  185. package/lib/core/audit-logger.js +1 -1
  186. package/lib/core/secrets-env-content.js +10 -4
  187. package/lib/core/secrets-env-write.js +2 -13
  188. package/lib/core/secrets-load.js +1 -3
  189. package/lib/datasource/agent-trust-run.js +3 -3
  190. package/lib/datasource/capability/relate-operations.js +1 -1
  191. package/lib/datasource/deploy.js +3 -1
  192. package/lib/datasource/test-e2e.js +6 -1
  193. package/lib/datasource/unified-validation-run-body.js +4 -1
  194. package/lib/datasource/unified-validation-run.js +1 -1
  195. package/lib/deployment/deploy-poll-ui.js +73 -12
  196. package/lib/deployment/deployer-poll-run.js +113 -0
  197. package/lib/deployment/deployer.js +17 -87
  198. package/lib/evidence/dataplane-context.js +21 -0
  199. package/lib/evidence/evidence-display.js +78 -0
  200. package/lib/evidence/evidence-service.js +392 -0
  201. package/lib/external-system/deploy.js +290 -112
  202. package/lib/external-system/download.js +7 -3
  203. package/lib/external-system/test-execution.js +1 -1
  204. package/lib/external-system/test-system-level.js +8 -10
  205. package/lib/external-system/test.js +12 -6
  206. package/lib/generator/deploy-script.js +73 -0
  207. package/lib/generator/external.js +2 -1
  208. package/lib/generator/helpers.js +13 -5
  209. package/lib/generator/index.js +17 -2
  210. package/lib/generator/split-variables.js +9 -3
  211. package/lib/generator/wizard.js +3 -36
  212. package/lib/infrastructure/helpers-docker-check.js +6 -0
  213. package/lib/infrastructure/helpers.js +1 -1
  214. package/lib/internal/fs-real-sync.js +22 -1
  215. package/lib/internal/node-fs.js +2 -0
  216. package/lib/lifecycle/lifecycle-governance-options.js +1 -1
  217. package/lib/lifecycle/verify-step-progress.js +1 -1
  218. package/lib/programmatic/access-log.js +26 -0
  219. package/lib/programmatic/auth-config.js +45 -0
  220. package/lib/programmatic/bearer-auth.js +176 -0
  221. package/lib/programmatic/builder-api-request.js +175 -0
  222. package/lib/programmatic/builder-api-route-dispatch.js +82 -0
  223. package/lib/programmatic/builder-api-runtime-config.js +42 -0
  224. package/lib/programmatic/builder-api-server.js +230 -0
  225. package/lib/programmatic/builder-help-authentication-catalog.js +282 -0
  226. package/lib/programmatic/builder-help-connected-system-ui.js +266 -0
  227. package/lib/programmatic/builder-help-enterprise-sync-fabrix.js +60 -0
  228. package/lib/programmatic/builder-help-envelope.js +36 -0
  229. package/lib/programmatic/builder-help-fixtures.js +200 -0
  230. package/lib/programmatic/builder-help-governance.js +172 -0
  231. package/lib/programmatic/builder-help-schema-catalog.js +92 -0
  232. package/lib/programmatic/builder-help.js +361 -0
  233. package/lib/programmatic/capability-registry.js +77 -0
  234. package/lib/programmatic/command-options.js +32 -0
  235. package/lib/programmatic/enterprise-mcp-client.js +114 -0
  236. package/lib/programmatic/http-problem-details.js +99 -0
  237. package/lib/programmatic/http-route-match.js +40 -0
  238. package/lib/programmatic/idempotency-cache.js +69 -0
  239. package/lib/programmatic/index.js +53 -0
  240. package/lib/programmatic/integration-path-scope.js +39 -0
  241. package/lib/programmatic/log-redaction.js +66 -0
  242. package/lib/programmatic/manifest-get-section.js +146 -0
  243. package/lib/programmatic/manifest-patch-section.js +252 -0
  244. package/lib/programmatic/manifest-repair.js +122 -0
  245. package/lib/programmatic/manifest-section-dependency-graph.js +160 -0
  246. package/lib/programmatic/manifest-section-io.js +225 -0
  247. package/lib/programmatic/manifest-section-quality.js +171 -0
  248. package/lib/programmatic/manifest-section-registry-data.js +269 -0
  249. package/lib/programmatic/manifest-section-registry.js +222 -0
  250. package/lib/programmatic/nest-http-bridge.js +34 -0
  251. package/lib/programmatic/openapi-component-schemas.js +68 -0
  252. package/lib/programmatic/openapi-description-enricher.js +117 -0
  253. package/lib/programmatic/openapi-descriptions.js +190 -0
  254. package/lib/programmatic/openapi-docs-serving.js +123 -0
  255. package/lib/programmatic/openapi-help-schemas.js +63 -0
  256. package/lib/programmatic/openapi-manifest-schemas.js +141 -0
  257. package/lib/programmatic/openapi-operation-bindings.js +274 -0
  258. package/lib/programmatic/openapi-request-schemas.js +155 -0
  259. package/lib/programmatic/openapi-result-schemas.js +493 -0
  260. package/lib/programmatic/openapi-schema-descriptions-certify.js +139 -0
  261. package/lib/programmatic/openapi-schema-descriptions-core.js +162 -0
  262. package/lib/programmatic/openapi-schema-descriptions-help.js +40 -0
  263. package/lib/programmatic/openapi-schema-descriptions-manifest.js +143 -0
  264. package/lib/programmatic/openapi-schema-descriptions-mcp.js +118 -0
  265. package/lib/programmatic/openapi-schema-descriptions-operations.js +281 -0
  266. package/lib/programmatic/openapi-schema-helpers.js +108 -0
  267. package/lib/programmatic/openapi-spec.js +203 -0
  268. package/lib/programmatic/orchestration-openapi-meta.js +159 -0
  269. package/lib/programmatic/platform-rbac-catalog.js +90 -0
  270. package/lib/programmatic/request-timeout.js +53 -0
  271. package/lib/programmatic/route-handler-map.js +143 -0
  272. package/lib/programmatic/route-handlers-context.js +29 -0
  273. package/lib/programmatic/route-handlers.js +33 -0
  274. package/lib/programmatic/run-certify.js +57 -0
  275. package/lib/programmatic/run-enterprise-mcp.js +32 -0
  276. package/lib/programmatic/run-lifecycle.js +29 -0
  277. package/lib/programmatic/run-repair.js +41 -0
  278. package/lib/programmatic/run-repository-emcp.js +62 -0
  279. package/lib/programmatic/run-template-workspace.js +74 -0
  280. package/lib/programmatic/run-test.js +49 -0
  281. package/lib/programmatic/run-upload.js +63 -0
  282. package/lib/programmatic/run-validate.js +53 -0
  283. package/lib/programmatic/run-wizard.js +40 -0
  284. package/lib/programmatic/system-key.js +48 -0
  285. package/lib/programmatic/wizard-config-normalize.js +118 -0
  286. package/lib/programmatic/workspace-cleanup.js +128 -0
  287. package/lib/programmatic/workspace-context.js +145 -0
  288. package/lib/programmatic/workspace-lock.js +75 -0
  289. package/lib/programmatic/workspace-meta.js +64 -0
  290. package/lib/programmatic/workspace-ops.js +149 -0
  291. package/lib/protection/run-commands-upload-sync.js +35 -0
  292. package/lib/protection/run-commands.js +2 -20
  293. package/lib/protection/upload-batch.js +11 -7
  294. package/lib/resolvers/evidence-kind-file.js +230 -0
  295. package/lib/resolvers/resource-type-file.js +58 -1
  296. package/lib/resolvers/role-file.js +227 -0
  297. package/lib/schema/application-schema.json +22 -2
  298. package/lib/schema/external-datasource.schema.json +245 -2
  299. package/lib/schema/external-system.schema.json +259 -119
  300. package/lib/schema/flag-map-validation-run.json +3 -0
  301. package/lib/schema/infra.parameter.yaml +25 -1
  302. package/lib/schema/type/credential-field-registry.json +21 -5
  303. package/lib/schema/type/document-storage.json +9 -0
  304. package/lib/utils/agent-trust-run-display.js +1 -1
  305. package/lib/utils/api.js +8 -2
  306. package/lib/utils/app-path-resolve.js +168 -0
  307. package/lib/utils/app-register-config.js +4 -3
  308. package/lib/utils/authentication-env-template.js +222 -0
  309. package/lib/utils/cli-sync-options.js +62 -10
  310. package/lib/utils/cli-utils.js +15 -3
  311. package/lib/utils/cli-workspace-options.js +29 -0
  312. package/lib/utils/compose-generate-docker-compose.js +102 -0
  313. package/lib/utils/configuration-env-resolver.js +203 -27
  314. package/lib/utils/datasource-test-run-certificate-tty.js +28 -2
  315. package/lib/utils/datasource-test-run-certification-debug.js +130 -0
  316. package/lib/utils/datasource-test-run-debug-display.js +2 -0
  317. package/lib/utils/datasource-test-run-debug-slice.js +7 -0
  318. package/lib/utils/datasource-test-run-display.js +2 -1
  319. package/lib/utils/dev-ca-install.js +5 -6
  320. package/lib/utils/dev-config.js +2 -2
  321. package/lib/utils/dev-init-ssh-merge.js +165 -23
  322. package/lib/utils/dev-list-sort.js +145 -0
  323. package/lib/utils/dev-pin-share-instructions.js +110 -0
  324. package/lib/utils/dev-platform-tls.js +0 -63
  325. package/lib/utils/dev-ssh-config-helper.js +177 -33
  326. package/lib/utils/docker-build.js +46 -27
  327. package/lib/utils/docker-daemon-tls-ca.js +1 -1
  328. package/lib/utils/docker-exec.js +91 -6
  329. package/lib/utils/enterprise-knowledge-paths.js +142 -0
  330. package/lib/utils/env-copy.js +3 -4
  331. package/lib/utils/env-dotenv-format.js +103 -0
  332. package/lib/utils/error-formatters/error-parser.js +0 -3
  333. package/lib/utils/external-env-template.js +5 -2
  334. package/lib/utils/external-system-display.js +5 -1
  335. package/lib/utils/external-system-readiness-compact-blocks.js +248 -0
  336. package/lib/utils/external-system-readiness-compact-display.js +324 -0
  337. package/lib/utils/external-system-readiness-core.js +16 -0
  338. package/lib/utils/external-system-readiness-deploy-display.js +29 -11
  339. package/lib/utils/external-system-readiness-display-internals.js +3 -1
  340. package/lib/utils/external-system-readiness-display.js +20 -30
  341. package/lib/utils/external-system-system-test-tty-certification.js +135 -0
  342. package/lib/utils/external-system-system-test-tty.js +5 -41
  343. package/lib/utils/health-check-request.js +2 -3
  344. package/lib/utils/help-builder.js +9 -1
  345. package/lib/utils/host-ops-job-labels.js +236 -0
  346. package/lib/utils/host-ops-job-result.js +61 -0
  347. package/lib/utils/host-ops-poll-ui.js +163 -0
  348. package/lib/utils/image-name.js +22 -4
  349. package/lib/utils/integration-path-resolve.js +112 -0
  350. package/lib/utils/logger.js +37 -4
  351. package/lib/utils/manifest-source-emit.js +1 -1
  352. package/lib/utils/paths-reload-source.js +148 -0
  353. package/lib/utils/paths-system-builder-keys.js +25 -0
  354. package/lib/utils/paths.js +183 -30
  355. package/lib/utils/pipeline-upload-auth-retry.js +4 -0
  356. package/lib/utils/postgres-platform-bootstrap.js +24 -17
  357. package/lib/utils/postgres-wipe.js +5 -2
  358. package/lib/utils/remote-dev-auth.js +39 -4
  359. package/lib/utils/resolve-docker-image-ref.js +36 -6
  360. package/lib/utils/runtime-configuration-values.js +64 -2
  361. package/lib/utils/secrets-helpers.js +5 -1
  362. package/lib/utils/ssh-known-hosts.js +130 -0
  363. package/lib/utils/test-target-cli-options.js +75 -0
  364. package/lib/utils/token-manager.js +16 -0
  365. package/lib/utils/upload-sync-options.js +20 -2
  366. package/lib/utils/validation-run-request.js +11 -2
  367. package/lib/validation/external-manifest-validator.js +11 -1
  368. package/lib/validation/openapi-contract-surface-validator.js +430 -0
  369. package/lib/validation/openapi-contract-vendor-validation.js +238 -0
  370. package/lib/validation/validate-external-file.js +160 -0
  371. package/lib/validation/validate.js +6 -117
  372. package/lib/validation/validator.js +6 -5
  373. package/package.json +76 -37
  374. package/packages/builder-api/README.md +120 -0
  375. package/packages/builder-api/package.json +30 -0
  376. package/packages/builder-api/src/app.module.ts +7 -0
  377. package/packages/builder-api/src/auth/auth.module.ts +5 -0
  378. package/packages/builder-api/src/external-system/external-system.module.ts +5 -0
  379. package/packages/builder-api/src/main.ts +16 -0
  380. package/packages/builder-api/tsconfig.json +15 -0
  381. package/scripts/check-builder-api-architecture-grep.js +79 -0
  382. package/scripts/docker_image_content_gate.js +47 -0
  383. package/scripts/docker_image_content_gate.sh +5 -0
  384. package/scripts/export-builder-api-evidence.js +262 -0
  385. package/scripts/lib/builder-api-docker-staging-copy.js +60 -0
  386. package/scripts/lib/builder-api-docker-staging-core.js +183 -0
  387. package/scripts/lib/docker-image-content-gate-core.js +166 -0
  388. package/scripts/lib/plan-actor.js +109 -0
  389. package/scripts/lib/plan-config.js +20 -0
  390. package/scripts/lib/plan-gates.js +154 -0
  391. package/scripts/lib/plan-meta.js +104 -0
  392. package/scripts/lib/plan-parse.js +162 -0
  393. package/scripts/lib/plan-prevalidate-gates.js +337 -0
  394. package/scripts/lib/plan-run-core.js +125 -0
  395. package/scripts/lib/plan-run-report.js +119 -0
  396. package/scripts/plan-approve.js +24 -0
  397. package/scripts/plan-archive.js +49 -0
  398. package/scripts/plan-run.js +13 -0
  399. package/scripts/plan-set-actor.js +21 -0
  400. package/scripts/plan-validate.js +80 -0
  401. package/scripts/pnpm/af.mjs +110 -0
  402. package/scripts/pnpm/check-quiet.mjs +32 -0
  403. package/scripts/pnpm/dev-install.mjs +29 -0
  404. package/scripts/pnpm/dev-reload.mjs +18 -0
  405. package/scripts/pnpm/help.mjs +55 -0
  406. package/scripts/pnpm/lib/dev-reload-core.mjs +189 -0
  407. package/scripts/pnpm/lib/dev-reload-log-capture.mjs +67 -0
  408. package/scripts/pnpm/lib/dev-reload-log-utils.mjs +32 -0
  409. package/scripts/pnpm/lib/resolve-aifabrix-bin.mjs +124 -0
  410. package/scripts/pnpm/lib/resolve-app-url.mjs +183 -0
  411. package/scripts/pnpm/lib/spinner.mjs +42 -0
  412. package/scripts/stage_builder_api_for_docker.js +65 -0
  413. package/scripts/sync-builder-api-template.js +44 -0
  414. package/templates/README.md +3 -0
  415. package/templates/applications/builder-api/Dockerfile +38 -0
  416. package/templates/applications/builder-api/application.yaml +75 -0
  417. package/templates/applications/builder-api/env.template +48 -0
  418. package/templates/applications/dataplane/application.yaml +27 -5
  419. package/templates/applications/dataplane/env.template +38 -15
  420. package/templates/applications/dataplane/rbac.yaml +85 -3
  421. package/templates/applications/miso-controller/application.yaml +10 -1
  422. package/templates/applications/miso-controller/env.template +11 -10
  423. package/templates/applications/miso-controller/rbac.yaml +72 -0
  424. package/templates/channels/README.md +18 -0
  425. package/templates/channels/ai-fabrix-icon.jpg +0 -0
  426. package/templates/channels/chatgpt/install.template.md.hbs +21 -24
  427. package/templates/channels/chatgpt/integration/README.md +11 -0
  428. package/templates/channels/chatgpt/integration/application.json +15 -0
  429. package/templates/channels/chatgpt/integration/chatgpt-system.json +29 -0
  430. package/templates/channels/chatgpt/integration/env.template +4 -0
  431. package/templates/channels/microsoft-copilot/install.template.md.hbs +20 -25
  432. package/templates/channels/microsoft-copilot/integration/README.md +11 -0
  433. package/templates/channels/microsoft-copilot/integration/application.json +15 -0
  434. package/templates/channels/microsoft-copilot/integration/env.template +6 -0
  435. package/templates/channels/microsoft-copilot/integration/microsoft-copilot-system.json +34 -0
  436. package/templates/channels/slack/install.template.md.hbs +48 -18
  437. package/templates/channels/slack/integration/README.md +38 -0
  438. package/templates/channels/slack/integration/application.json +18 -0
  439. package/templates/channels/slack/integration/env.template +29 -0
  440. package/templates/channels/slack/integration/slack-datasource-conversations.json +226 -0
  441. package/templates/channels/slack/integration/slack-datasource-messages.json +269 -0
  442. package/templates/channels/slack/integration/slack-system.json +144 -0
  443. package/templates/channels/slack/manifest.template.json.hbs +20 -10
  444. package/templates/channels/teams-bot/install.template.md.hbs +31 -17
  445. package/templates/channels/teams-bot/integration/README.md +18 -0
  446. package/templates/channels/teams-bot/integration/application.json +17 -0
  447. package/templates/channels/teams-bot/integration/env.template +5 -0
  448. package/templates/channels/teams-bot/integration/teams-bot-system.json +55 -0
  449. package/templates/channels/teams-bot/manifest.template.json.hbs +27 -0
  450. package/templates/channels/web-embed/install.template.md.hbs +16 -26
  451. package/templates/channels/web-embed/integration/README.md +11 -0
  452. package/templates/channels/web-embed/integration/application.json +15 -0
  453. package/templates/channels/web-embed/integration/env.template +4 -0
  454. package/templates/channels/web-embed/integration/web-embed-system.json +29 -0
  455. package/templates/openapi/redoc_page.html +86 -0
  456. package/templates/python/docker-compose.hbs +11 -0
  457. package/templates/python/requirements.txt +2 -2
  458. package/templates/typescript/docker-compose.hbs +11 -0
  459. package/lib/certification/cli-cert-sync-skip.js +0 -21
@@ -0,0 +1,200 @@
1
+ /**
2
+ * Golden examples and evidence pattern loaders for builder-api help (plan 154.6).
3
+ *
4
+ * @fileoverview Fixture-backed help topics
5
+ * @author AI Fabrix Team
6
+ * @version 1.0.0
7
+ */
8
+
9
+ 'use strict';
10
+
11
+ const fs = require('fs');
12
+ const path = require('path');
13
+ const { buildHelpEnvelope } = require('./builder-help-envelope');
14
+
15
+ const REPO_ROOT = path.join(__dirname, '..', '..');
16
+ const GOLDEN_DIR = path.join(REPO_ROOT, 'docs', 'builder-help', 'golden-examples');
17
+ const EVIDENCE_PATH = path.join(REPO_ROOT, 'docs', 'builder-help', 'evidence-patterns.json');
18
+
19
+ /** @type {Record<string, Object>|null} */
20
+ let evidenceCache = null;
21
+ /** @type {Record<string, Object>|null} */
22
+ let goldenCache = null;
23
+
24
+ /**
25
+ * @param {string} message
26
+ * @returns {Error}
27
+ */
28
+ function validationError(message) {
29
+ const err = new Error(message);
30
+ err.statusCode = 400;
31
+ return err;
32
+ }
33
+
34
+ /**
35
+ * @param {string} message
36
+ * @returns {Error}
37
+ */
38
+ function notFoundError(message) {
39
+ const err = new Error(message);
40
+ err.statusCode = 404;
41
+ return err;
42
+ }
43
+
44
+ /**
45
+ * @returns {Record<string, Object>}
46
+ */
47
+ function loadGoldenExamplesMap() {
48
+ if (goldenCache) {
49
+ return goldenCache;
50
+ }
51
+ /** @type {Record<string, Object>} */
52
+ const map = {};
53
+ for (const file of fs.readdirSync(GOLDEN_DIR).sort()) {
54
+ if (!file.endsWith('.json')) {
55
+ continue;
56
+ }
57
+ const doc = JSON.parse(fs.readFileSync(path.join(GOLDEN_DIR, file), 'utf8'));
58
+ map[doc.key || path.basename(file, '.json')] = doc;
59
+ }
60
+ goldenCache = map;
61
+ return map;
62
+ }
63
+
64
+ /**
65
+ * @param {Object} item
66
+ * @param {Object} query
67
+ * @returns {boolean}
68
+ */
69
+ function matchesResourceRoleFilter(item, query) {
70
+ if (query.resourceType && item.resourceType !== query.resourceType) {
71
+ return false;
72
+ }
73
+ if (query.role && item.role !== query.role) {
74
+ return false;
75
+ }
76
+ return true;
77
+ }
78
+
79
+ /**
80
+ * @param {Object} query
81
+ * @returns {Object}
82
+ */
83
+ function buildGoldenExamplesTopic(query) {
84
+ const map = loadGoldenExamplesMap();
85
+ const examples = Object.values(map)
86
+ .filter((item) => matchesResourceRoleFilter(item, query))
87
+ .map((item) => ({
88
+ key: item.key,
89
+ title: item.title,
90
+ summary: item.summary,
91
+ resourceType: item.resourceType,
92
+ role: item.role,
93
+ roleAssistantExamples: item.roleAssistantExamples || [],
94
+ recommendedSectionKeys: item.recommendedSectionKeys || []
95
+ }))
96
+ .sort((a, b) => a.key.localeCompare(b.key));
97
+ return buildHelpEnvelope({
98
+ topic: 'goldenExamples',
99
+ key: 'goldenExamples',
100
+ title: 'Golden manifest examples',
101
+ summary: 'Reference patterns for common external integration shapes.',
102
+ data: { examples },
103
+ related: ['goldenExample', 'workflow', 'subscriptionGuide'],
104
+ recommendedNext: ['goldenExample', 'evidencePatterns', 'schemaCatalog']
105
+ });
106
+ }
107
+
108
+ /**
109
+ * @param {Object} query
110
+ * @returns {Object}
111
+ */
112
+ function buildGoldenExampleTopic(query) {
113
+ if (!query.exampleKey) {
114
+ throw validationError('exampleKey is required when topic=goldenExample');
115
+ }
116
+ const map = loadGoldenExamplesMap();
117
+ const doc = map[String(query.exampleKey)];
118
+ if (!doc) {
119
+ throw notFoundError(`Unknown exampleKey: ${query.exampleKey}`);
120
+ }
121
+ return buildHelpEnvelope({
122
+ topic: 'goldenExample',
123
+ key: String(query.exampleKey),
124
+ title: doc.title,
125
+ summary: doc.summary,
126
+ data: { example: doc },
127
+ related: ['goldenExamples', 'section'],
128
+ recommendedNext: ['section', 'workflow']
129
+ });
130
+ }
131
+
132
+ /**
133
+ * @returns {Object}
134
+ */
135
+ function loadEvidencePatternsDoc() {
136
+ if (evidenceCache) {
137
+ return evidenceCache;
138
+ }
139
+ evidenceCache = JSON.parse(fs.readFileSync(EVIDENCE_PATH, 'utf8'));
140
+ return evidenceCache;
141
+ }
142
+
143
+ /**
144
+ * @param {Object} query
145
+ * @returns {Object}
146
+ */
147
+ function buildEvidencePatternsTopic(query) {
148
+ const doc = loadEvidencePatternsDoc();
149
+ const patterns = (doc.patterns || [])
150
+ .filter((item) => matchesResourceRoleFilter(item, query))
151
+ .map((item) => ({
152
+ key: item.key,
153
+ title: item.title,
154
+ summary: item.summary,
155
+ role: item.role,
156
+ resourceType: item.resourceType,
157
+ relatedTopics: item.relatedTopics || []
158
+ }))
159
+ .sort((a, b) => a.key.localeCompare(b.key));
160
+ return buildHelpEnvelope({
161
+ topic: 'evidencePatterns',
162
+ key: 'evidencePatterns',
163
+ title: 'Evidence patterns',
164
+ summary: 'Expected agent evidence steps for manifest editing workflows.',
165
+ data: { schemaVersion: doc.schemaVersion, patterns },
166
+ related: ['evidencePattern', 'workflow'],
167
+ recommendedNext: ['evidencePattern', 'goldenExamples']
168
+ });
169
+ }
170
+
171
+ /**
172
+ * @param {Object} query
173
+ * @returns {Object}
174
+ */
175
+ function buildEvidencePatternTopic(query) {
176
+ if (!query.exampleKey) {
177
+ throw validationError('exampleKey is required when topic=evidencePattern');
178
+ }
179
+ const doc = loadEvidencePatternsDoc();
180
+ const pattern = (doc.patterns || []).find((item) => item.key === String(query.exampleKey));
181
+ if (!pattern) {
182
+ throw notFoundError(`Unknown evidence pattern key: ${query.exampleKey}`);
183
+ }
184
+ return buildHelpEnvelope({
185
+ topic: 'evidencePattern',
186
+ key: String(query.exampleKey),
187
+ title: pattern.title,
188
+ summary: pattern.summary,
189
+ data: { pattern },
190
+ related: ['evidencePatterns', 'workflow'],
191
+ recommendedNext: ['workflow', 'repairRules']
192
+ });
193
+ }
194
+
195
+ module.exports = {
196
+ buildGoldenExamplesTopic,
197
+ buildGoldenExampleTopic,
198
+ buildEvidencePatternsTopic,
199
+ buildEvidencePatternTopic
200
+ };
@@ -0,0 +1,172 @@
1
+ /**
2
+ * Governance help topics for builder-api LLM bootstrap (plan 154.7).
3
+ *
4
+ * @fileoverview Platform roles, resource types, dimensions, channel onboarding
5
+ * @author AI Fabrix Team
6
+ * @version 1.0.0
7
+ */
8
+
9
+ 'use strict';
10
+
11
+ const fs = require('fs');
12
+ const path = require('path');
13
+ const { buildHelpEnvelope } = require('./builder-help-envelope');
14
+ const { listPlatformRoles } = require('./platform-rbac-catalog');
15
+ const { CHANNEL_TARGET_KEYS, CHANNEL_TARGETS } = require('../channels/channel-targets');
16
+
17
+ const BUILDER_HELP_DIR = path.join(__dirname, '..', '..', 'docs', 'builder-help');
18
+ const HELP_MD_DIR = path.join(__dirname, 'help-content');
19
+
20
+ /**
21
+ * @param {string} fileName
22
+ * @returns {{ bodyText: string, sections: Array<{ title: string, body: string }> }}
23
+ */
24
+ function parseMarkdownHelpFile(fileName) {
25
+ const raw = fs.readFileSync(path.join(HELP_MD_DIR, fileName), 'utf8');
26
+ let bodyText = raw.replace(/\[([^\]]+)\]\([^)]+\)/g, '$1');
27
+ bodyText = bodyText.replace(/https?:\/\/\S+/g, '');
28
+ const sections = [];
29
+ const lines = bodyText.split('\n');
30
+ let current = null;
31
+ for (const line of lines) {
32
+ if (line.startsWith('## ')) {
33
+ if (current) sections.push(current);
34
+ current = { title: line.slice(3).trim(), body: '' };
35
+ continue;
36
+ }
37
+ if (current) current.body += `${line}\n`;
38
+ }
39
+ if (current) sections.push(current);
40
+ for (const s of sections) s.body = s.body.trim();
41
+ return { bodyText: bodyText.trim(), sections };
42
+ }
43
+
44
+ /**
45
+ * @returns {Object}
46
+ */
47
+ function loadPlatformRolesFixture() {
48
+ return JSON.parse(fs.readFileSync(path.join(BUILDER_HELP_DIR, 'platform-roles.json'), 'utf8'));
49
+ }
50
+
51
+ /**
52
+ * @returns {Object}
53
+ */
54
+ function loadResourceTypeCatalog() {
55
+ return JSON.parse(fs.readFileSync(path.join(BUILDER_HELP_DIR, 'resource-type-catalog.json'), 'utf8'));
56
+ }
57
+
58
+ /**
59
+ * @returns {Object}
60
+ */
61
+ function buildPlatformRolesTopic() {
62
+ const fixture = loadPlatformRolesFixture();
63
+ return buildHelpEnvelope({
64
+ topic: 'platformRoles',
65
+ key: 'platformRoles',
66
+ title: 'Platform RBAC roles',
67
+ summary:
68
+ 'Eight platform roles shared with dataplane rbac.yaml. Use rbacPreset platform for facade APIs instead of per-system admin/reader.',
69
+ data: {
70
+ roles: listPlatformRoles(),
71
+ permissionMatrix: fixture.permissionMatrix || [],
72
+ rbacPreset: 'platform',
73
+ forbiddenPatterns: ['{systemKey}-admin', '{systemKey}-reader']
74
+ },
75
+ related: ['workflow', 'repairRules', 'section', 'resourceTypeCatalog'],
76
+ recommendedNext: ['topic=section&sectionKey=system.rolesPermissions', 'topic=resourceTypeCatalog']
77
+ });
78
+ }
79
+
80
+ /**
81
+ * @param {Object} query
82
+ * @returns {Object}
83
+ */
84
+ function buildResourceTypeCatalogTopic(query) {
85
+ const catalog = loadResourceTypeCatalog();
86
+ let rows = catalog.resourceTypes || [];
87
+ if (query.category) {
88
+ rows = rows.filter((r) => r.category === query.category);
89
+ }
90
+ if (query.resourceType) {
91
+ rows = rows.filter((r) => r.key === query.resourceType);
92
+ }
93
+ return buildHelpEnvelope({
94
+ topic: 'resourceTypeCatalog',
95
+ key: query.category || query.resourceType || 'all',
96
+ title: 'Resource type catalog',
97
+ summary:
98
+ 'Taxonomy-only catalog keys for datasource.resourceType. Challenge generic document when a business token fits.',
99
+ data: {
100
+ schemaVersion: catalog.schemaVersion,
101
+ minimumSystemKeys: catalog.minimumSystemKeys,
102
+ resourceTypes: rows,
103
+ orchestrationRecommendation: {
104
+ entityType: 'none',
105
+ suggestedResourceType: 'workspace',
106
+ rationale: 'Facade orchestration APIs that expose workspace manifest operations'
107
+ }
108
+ },
109
+ related: ['schemaCatalog', 'dimensionsGuide', 'goldenExamples'],
110
+ recommendedNext: ['topic=section&sectionKey=datasource.resourceType']
111
+ });
112
+ }
113
+
114
+ /**
115
+ * @returns {Object}
116
+ */
117
+ function buildDimensionsGuideTopic() {
118
+ const parsed = parseMarkdownHelpFile('dimensions-guide.md');
119
+ return buildHelpEnvelope({
120
+ topic: 'dimensionsGuide',
121
+ key: 'dimensionsGuide',
122
+ title: 'Dimensions and ABAC grounding',
123
+ summary: 'When and how to declare dimensions; challenge missing governance attributes before protection.',
124
+ data: {
125
+ bodyText: parsed.bodyText,
126
+ sections: parsed.sections,
127
+ appliesToEntityTypes: ['recordStorage', 'documentStorage', 'serviceContract'],
128
+ forbiddenOnEntityTypes: ['none']
129
+ },
130
+ related: ['evidencePatterns', 'section', 'subscriptionGuide'],
131
+ recommendedNext: ['topic=section&sectionKey=datasource.dimensions', 'topic=evidencePattern&exampleKey=protection-dimension-gate']
132
+ });
133
+ }
134
+
135
+ /**
136
+ * @returns {Object}
137
+ */
138
+ function buildChannelOnboardingTopic() {
139
+ const parsed = parseMarkdownHelpFile('channel-onboarding.md');
140
+ const targets = CHANNEL_TARGET_KEYS.map((key) => {
141
+ const t = CHANNEL_TARGETS[key];
142
+ return {
143
+ key: t.key,
144
+ channelType: t.channelType,
145
+ capabilities: [...t.capabilities],
146
+ approvalRequired: t.approvalRequired,
147
+ experimental: t.experimental
148
+ };
149
+ });
150
+ return buildHelpEnvelope({
151
+ topic: 'channelOnboarding',
152
+ key: 'channelOnboarding',
153
+ title: 'Channel onboarding from work list',
154
+ summary: 'Publish external system from workspace work list, then scaffold assistant channel target.',
155
+ data: {
156
+ bodyText: parsed.bodyText,
157
+ sections: parsed.sections,
158
+ workListRoute: 'GET /workspaces/me/systems',
159
+ channelTargets: targets,
160
+ cliSteps: ['channel scaffold <target>', 'channel add <target>']
161
+ },
162
+ related: ['workflow', 'connectedSystemUi', 'platformRoles'],
163
+ recommendedNext: ['topic=workflow', 'topic=connectedSystemUi']
164
+ });
165
+ }
166
+
167
+ module.exports = {
168
+ buildPlatformRolesTopic,
169
+ buildResourceTypeCatalogTopic,
170
+ buildDimensionsGuideTopic,
171
+ buildChannelOnboardingTopic
172
+ };
@@ -0,0 +1,92 @@
1
+ /**
2
+ * Schema catalog index for builder-api LLM help (plan 154.6).
3
+ *
4
+ * @fileoverview Top-level properties and $defs keys — not full JSON Schema payloads
5
+ * @author AI Fabrix Team
6
+ * @version 1.0.0
7
+ */
8
+
9
+ 'use strict';
10
+
11
+ const fs = require('fs');
12
+ const path = require('path');
13
+
14
+ const SCHEMA_DIR = path.join(__dirname, '..', 'schema');
15
+
16
+ /** @type {Record<string, Object>|null} */
17
+ const catalogCache = {};
18
+
19
+ /**
20
+ * @param {Object} propSchema
21
+ * @returns {string|undefined}
22
+ */
23
+ function summarizeProperty(propSchema) {
24
+ if (!propSchema || typeof propSchema !== 'object') {
25
+ return undefined;
26
+ }
27
+ if (typeof propSchema.description === 'string') {
28
+ return propSchema.description.split('\n')[0].trim();
29
+ }
30
+ if (propSchema.$ref) {
31
+ return `Ref ${String(propSchema.$ref).split('/').pop()}`;
32
+ }
33
+ return undefined;
34
+ }
35
+
36
+ /**
37
+ * @param {'system' | 'datasource'} target
38
+ * @returns {Object}
39
+ */
40
+ function loadSchemaDoc(target) {
41
+ const fileName = target === 'system' ? 'external-system.schema.json' : 'external-datasource.schema.json';
42
+ return JSON.parse(fs.readFileSync(path.join(SCHEMA_DIR, fileName), 'utf8'));
43
+ }
44
+
45
+ /**
46
+ * @param {'system' | 'datasource'} target
47
+ * @returns {Object}
48
+ */
49
+ function buildSchemaCatalogForTarget(target) {
50
+ if (catalogCache[target]) {
51
+ return catalogCache[target];
52
+ }
53
+ const doc = loadSchemaDoc(target);
54
+ const requiredSet = new Set(doc.required || []);
55
+ const rootProperties = Object.keys(doc.properties || {})
56
+ .sort()
57
+ .map((name) => ({
58
+ name,
59
+ required: requiredSet.has(name),
60
+ summary: summarizeProperty(doc.properties[name])
61
+ }));
62
+ const defKeys = Object.keys(doc.$defs || {}).sort();
63
+ const catalog = {
64
+ target,
65
+ schemaId: doc.$id || doc.metadata?.key,
66
+ schemaVersion: doc.metadata?.version,
67
+ rootPropertyCount: rootProperties.length,
68
+ rootProperties,
69
+ defKeys
70
+ };
71
+ catalogCache[target] = catalog;
72
+ return catalog;
73
+ }
74
+
75
+ /**
76
+ * @param {Object} query
77
+ * @returns {Object}
78
+ */
79
+ function buildSchemaCatalogTopicData(query) {
80
+ const filter = query.resourceType === 'system' || query.resourceType === 'datasource' ? query.resourceType : null;
81
+ if (filter) {
82
+ return { catalogs: [buildSchemaCatalogForTarget(filter)] };
83
+ }
84
+ return {
85
+ catalogs: [buildSchemaCatalogForTarget('system'), buildSchemaCatalogForTarget('datasource')]
86
+ };
87
+ }
88
+
89
+ module.exports = {
90
+ buildSchemaCatalogForTarget,
91
+ buildSchemaCatalogTopicData
92
+ };