@aifabrix/builder 2.49.2 → 2.51.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (459) hide show
  1. package/.cursor/plans/157.1-security-quality-violations-by-type.csv +374 -0
  2. package/.cursor/rules/assistant-driven-integration-build.mdc +40 -0
  3. package/.cursor/rules/deploy-rules/docker-image-ip-policy.mdc +49 -0
  4. package/.cursor/rules/plan-rules/application-lifecycle.mdc +30 -0
  5. package/.cursor/rules/plan-rules/plan-frontmatter.mdc +35 -0
  6. package/.cursor/rules/plan-rules/plan-lifecycle.mdc +31 -0
  7. package/.cursor/rules/plan-rules/plan-validation-gate.mdc +34 -0
  8. package/.cursor/skills/README.md +1 -0
  9. package/.dockerignore +52 -0
  10. package/.eslintignore +22 -0
  11. package/README.md +2 -0
  12. package/bin/builder-api-cleanup.js +26 -0
  13. package/bin/builder-api-nest.js +10 -0
  14. package/bin/builder-api-spike.js +19 -0
  15. package/enterprise-knowledge/README.md +50 -0
  16. package/enterprise-knowledge/enterprise-integration-lifecycle/README.md +22 -0
  17. package/enterprise-knowledge/enterprise-integration-lifecycle/application.json +15 -0
  18. package/enterprise-knowledge/enterprise-integration-lifecycle/deploy.js +69 -0
  19. package/enterprise-knowledge/enterprise-integration-lifecycle/enterprise-integration-lifecycle-deploy.json +52 -0
  20. package/enterprise-knowledge/enterprise-integration-lifecycle/enterprise-integration-lifecycle-system.json +29 -0
  21. package/enterprise-knowledge/enterprise-integration-lifecycle/env.template +2 -0
  22. package/integration/README.md +81 -0
  23. package/integration/github/README.md +53 -0
  24. package/integration/github/application.json +21 -0
  25. package/integration/github/deploy.js +72 -0
  26. package/integration/github/env.template +11 -0
  27. package/integration/github/github-datasource-issue-comments.json +239 -0
  28. package/integration/github/github-datasource-issues.json +399 -0
  29. package/integration/github/github-datasource-repository.json +354 -0
  30. package/integration/github/github-deploy.json +1202 -0
  31. package/integration/github/github-system.json +82 -0
  32. package/integration/hubspot-test/README.md +1 -1
  33. package/integration/hubspot-test/create-hubspot.js +1 -16
  34. package/jest.isolated-projects.js +31 -1
  35. package/jest.projects.js +87 -1
  36. package/lib/api/dev-server-https.js +1 -1
  37. package/lib/api/enterprise-knowledge.api.js +63 -0
  38. package/lib/api/evidence-kinds.api.js +128 -0
  39. package/lib/api/evidence.api.js +172 -0
  40. package/lib/api/external-systems.api.js +8 -2
  41. package/lib/api/pipeline.api.js +5 -1
  42. package/lib/api/resource-types.api.js +5 -4
  43. package/lib/api/roles.api.js +121 -0
  44. package/lib/api/types/enterprise-knowledge.types.js +46 -0
  45. package/lib/api/types/evidence-kinds.types.js +42 -0
  46. package/lib/api/types/evidence.types.js +67 -0
  47. package/lib/api/types/resource-types.types.js +2 -0
  48. package/lib/api/types/roles.types.js +36 -0
  49. package/lib/app/certification-verify-rows.js +1 -1
  50. package/lib/app/controller-application-filter.js +36 -0
  51. package/lib/app/deploy.js +1 -1
  52. package/lib/app/list-external-systems.js +130 -0
  53. package/lib/app/list.js +20 -8
  54. package/lib/app/run.js +3 -1
  55. package/lib/app/show-display.js +8 -3
  56. package/lib/app/show-online.js +178 -0
  57. package/lib/app/show.js +39 -90
  58. package/lib/build/builder-api-docker-staging.js +47 -0
  59. package/lib/build/miso-controller-npm-sdk-guard.js +2 -2
  60. package/lib/build/standard-docker-build.js +2 -0
  61. package/lib/certification/merge-certification-from-artifact.js +1 -1
  62. package/lib/certification/post-unified-cert-sync.js +4 -31
  63. package/lib/certification/sync-after-external-command.js +0 -1
  64. package/lib/certification/sync-system-certification.js +0 -3
  65. package/lib/channels/add-channel.js +40 -34
  66. package/lib/channels/approval-guides/chatgpt.js +33 -0
  67. package/lib/channels/approval-guides/credential-portal.js +38 -0
  68. package/lib/channels/approval-guides/index.js +110 -0
  69. package/lib/channels/approval-guides/microsoft-copilot.js +34 -0
  70. package/lib/channels/approval-guides/slack.js +34 -0
  71. package/lib/channels/approval-guides/teams-bot.js +35 -0
  72. package/lib/channels/approval-guides/web-embed.js +32 -0
  73. package/lib/channels/channel-approval-guide.js +11 -0
  74. package/lib/channels/channel-artifact-generator.js +18 -5
  75. package/lib/channels/channel-audit.js +3 -0
  76. package/lib/channels/channel-auth-context.js +1 -1
  77. package/lib/channels/channel-description.js +59 -0
  78. package/lib/channels/channel-integration-generator.js +13 -230
  79. package/lib/channels/channel-integration-template.js +94 -0
  80. package/lib/channels/channel-runtime-resolver.js +43 -3
  81. package/lib/channels/channel-status-display.js +66 -26
  82. package/lib/channels/channel-targets.js +3 -3
  83. package/lib/cli/index.js +31 -3
  84. package/lib/cli/infra-guided.js +5 -1
  85. package/lib/cli/setup-app-external-create.js +111 -0
  86. package/lib/cli/setup-app.help.js +1 -1
  87. package/lib/cli/setup-app.js +60 -130
  88. package/lib/cli/setup-app.test-commands.js +26 -52
  89. package/lib/cli/setup-certification-commands.js +4 -4
  90. package/lib/cli/setup-certification.help.js +9 -9
  91. package/lib/cli/setup-dev.js +30 -9
  92. package/lib/cli/setup-external-system-help.js +4 -6
  93. package/lib/cli/setup-external-system.js +58 -52
  94. package/lib/cli/setup-infra-up-builder-api-action.js +64 -0
  95. package/lib/cli/setup-infra-up-platform-action.js +3 -1
  96. package/lib/cli/setup-infra.js +15 -0
  97. package/lib/cli/setup-list.js +43 -0
  98. package/lib/cli/setup-utility-help-after.js +12 -0
  99. package/lib/cli/setup-utility-repair.js +26 -7
  100. package/lib/cli/setup-utility-validate.js +41 -2
  101. package/lib/cli/setup-utility.js +5 -3
  102. package/lib/commands/app.js +15 -43
  103. package/lib/commands/channel-add-setup.js +110 -0
  104. package/lib/commands/channel.js +42 -8
  105. package/lib/commands/datasource-sync-display.js +96 -0
  106. package/lib/commands/datasource-sync-policy.js +210 -0
  107. package/lib/commands/datasource-test-trust-cli.js +6 -6
  108. package/lib/commands/datasource-unified-test-cli.js +2 -1
  109. package/lib/commands/datasource-unified-test-cli.options.js +33 -23
  110. package/lib/commands/deploy-gate-failure-details.js +184 -0
  111. package/lib/commands/deploy-gate-orchestrator.js +368 -0
  112. package/lib/commands/dev-cli-handlers.js +7 -62
  113. package/lib/commands/dev-host-ops-params.js +91 -0
  114. package/lib/commands/dev-host-ops-poll.js +111 -0
  115. package/lib/commands/dev-host-ops.js +107 -94
  116. package/lib/commands/dev-init.js +6 -106
  117. package/lib/commands/dev-refresh.js +197 -0
  118. package/lib/commands/enterprise-knowledge.js +284 -0
  119. package/lib/commands/evidence-cli-leaves.js +250 -0
  120. package/lib/commands/evidence-kind.js +428 -0
  121. package/lib/commands/evidence.js +51 -0
  122. package/lib/commands/governance-cli-shared.js +2 -2
  123. package/lib/commands/governance-command-action.js +5 -3
  124. package/lib/commands/governance-fixture-subjects.js +85 -0
  125. package/lib/commands/governance.js +1 -1
  126. package/lib/commands/lifecycle-command-action.js +2 -2
  127. package/lib/commands/lifecycle-external.js +3 -3
  128. package/lib/commands/manifest-cli-auth.js +29 -0
  129. package/lib/commands/manifest-cli-commands.js +170 -0
  130. package/lib/commands/manifest-cli-integration-path.js +63 -0
  131. package/lib/commands/manifest.js +21 -0
  132. package/lib/commands/protection-cli-leaves.js +3 -3
  133. package/lib/commands/repair-auth-apply.js +15 -1
  134. package/lib/commands/repair-authentications-454.js +169 -0
  135. package/lib/commands/repair-capability-openapi-warnings.js +126 -0
  136. package/lib/commands/repair-datasource-apply.js +135 -0
  137. package/lib/commands/repair-datasource-auto-rbac.js +62 -1
  138. package/lib/commands/repair-datasource-http-service-contract.js +239 -0
  139. package/lib/commands/repair-datasource-operation-security.js +180 -0
  140. package/lib/commands/repair-datasource-run.js +7 -2
  141. package/lib/commands/repair-datasource-sync-operations.js +177 -0
  142. package/lib/commands/repair-datasource-webhooks-sync-bridge.js +133 -0
  143. package/lib/commands/repair-datasource.js +12 -68
  144. package/lib/commands/repair-env-template.js +11 -1
  145. package/lib/commands/repair-external-run.js +121 -31
  146. package/lib/commands/repair-internal.js +1 -1
  147. package/lib/commands/repair-openapi-export.js +156 -0
  148. package/lib/commands/repair-openapi-sync.js +33 -8
  149. package/lib/commands/repair-orchestration-datasource-split.js +259 -0
  150. package/lib/commands/repair-persist.js +22 -1
  151. package/lib/commands/repair-rbac-platform-preset.js +204 -0
  152. package/lib/commands/repair-rbac-reader-roles.js +191 -0
  153. package/lib/commands/repair-rbac.js +163 -86
  154. package/lib/commands/repair-steps.js +83 -18
  155. package/lib/commands/repair-system-permissions.js +1 -0
  156. package/lib/commands/repair.js +1 -1
  157. package/lib/commands/resource-type.js +166 -44
  158. package/lib/commands/role.js +452 -0
  159. package/lib/commands/run-post-publish-data-sync.js +68 -0
  160. package/lib/commands/setup-modes.js +1 -1
  161. package/lib/commands/setup.js +1 -1
  162. package/lib/commands/test-e2e-external.js +21 -8
  163. package/lib/commands/test-governance-cli-options.js +2 -2
  164. package/lib/commands/test-trust-cli-options.js +2 -2
  165. package/lib/commands/up-builder-api-bootstrap.js +71 -0
  166. package/lib/commands/up-builder-api-provision.js +241 -0
  167. package/lib/commands/up-builder-api.js +88 -0
  168. package/lib/commands/up-common.js +25 -1
  169. package/lib/commands/upload-credential-push-log.js +117 -0
  170. package/lib/commands/upload-data-sync-finalize.js +60 -0
  171. package/lib/commands/upload-probe.js +66 -0
  172. package/lib/commands/upload-publish-context.js +4 -1
  173. package/lib/commands/upload-sidecar-followups.js +55 -27
  174. package/lib/commands/upload.js +116 -157
  175. package/lib/commands/validate-json.js +230 -0
  176. package/lib/commands/verify-governance-combined-external.js +1 -1
  177. package/lib/commands/verify-governance-db.js +2 -2
  178. package/lib/commands/verify-operations-command-action.js +2 -2
  179. package/lib/commands/verify-operations-step-plan.js +79 -41
  180. package/lib/commands/verify-operations-steps.js +2 -2
  181. package/lib/commands/verify-trust-command-action.js +1 -1
  182. package/lib/commands/wizard-core.js +1 -1
  183. package/lib/commands/wizard-headless.js +2 -1
  184. package/lib/core/admin-secrets.js +2 -6
  185. package/lib/core/audit-logger.js +1 -1
  186. package/lib/core/secrets-env-content.js +10 -4
  187. package/lib/core/secrets-env-write.js +2 -13
  188. package/lib/core/secrets-load.js +1 -3
  189. package/lib/datasource/agent-trust-run.js +3 -3
  190. package/lib/datasource/capability/relate-operations.js +1 -1
  191. package/lib/datasource/deploy.js +3 -1
  192. package/lib/datasource/test-e2e.js +6 -1
  193. package/lib/datasource/unified-validation-run-body.js +4 -1
  194. package/lib/datasource/unified-validation-run.js +1 -1
  195. package/lib/deployment/deploy-poll-ui.js +73 -12
  196. package/lib/deployment/deployer-poll-run.js +113 -0
  197. package/lib/deployment/deployer.js +17 -87
  198. package/lib/evidence/dataplane-context.js +21 -0
  199. package/lib/evidence/evidence-display.js +78 -0
  200. package/lib/evidence/evidence-service.js +392 -0
  201. package/lib/external-system/deploy.js +290 -112
  202. package/lib/external-system/download.js +7 -3
  203. package/lib/external-system/test-execution.js +1 -1
  204. package/lib/external-system/test-system-level.js +8 -10
  205. package/lib/external-system/test.js +12 -6
  206. package/lib/generator/deploy-script.js +73 -0
  207. package/lib/generator/external.js +2 -1
  208. package/lib/generator/helpers.js +13 -5
  209. package/lib/generator/index.js +17 -2
  210. package/lib/generator/split-variables.js +9 -3
  211. package/lib/generator/wizard.js +3 -36
  212. package/lib/infrastructure/helpers-docker-check.js +6 -0
  213. package/lib/infrastructure/helpers.js +1 -1
  214. package/lib/internal/fs-real-sync.js +22 -1
  215. package/lib/internal/node-fs.js +2 -0
  216. package/lib/lifecycle/lifecycle-governance-options.js +1 -1
  217. package/lib/lifecycle/verify-step-progress.js +1 -1
  218. package/lib/programmatic/access-log.js +26 -0
  219. package/lib/programmatic/auth-config.js +45 -0
  220. package/lib/programmatic/bearer-auth.js +176 -0
  221. package/lib/programmatic/builder-api-request.js +175 -0
  222. package/lib/programmatic/builder-api-route-dispatch.js +82 -0
  223. package/lib/programmatic/builder-api-runtime-config.js +42 -0
  224. package/lib/programmatic/builder-api-server.js +230 -0
  225. package/lib/programmatic/builder-help-authentication-catalog.js +282 -0
  226. package/lib/programmatic/builder-help-connected-system-ui.js +266 -0
  227. package/lib/programmatic/builder-help-enterprise-sync-fabrix.js +60 -0
  228. package/lib/programmatic/builder-help-envelope.js +36 -0
  229. package/lib/programmatic/builder-help-fixtures.js +200 -0
  230. package/lib/programmatic/builder-help-governance.js +172 -0
  231. package/lib/programmatic/builder-help-schema-catalog.js +92 -0
  232. package/lib/programmatic/builder-help.js +361 -0
  233. package/lib/programmatic/capability-registry.js +77 -0
  234. package/lib/programmatic/command-options.js +32 -0
  235. package/lib/programmatic/enterprise-mcp-client.js +114 -0
  236. package/lib/programmatic/http-problem-details.js +99 -0
  237. package/lib/programmatic/http-route-match.js +40 -0
  238. package/lib/programmatic/idempotency-cache.js +69 -0
  239. package/lib/programmatic/index.js +53 -0
  240. package/lib/programmatic/integration-path-scope.js +39 -0
  241. package/lib/programmatic/log-redaction.js +66 -0
  242. package/lib/programmatic/manifest-get-section.js +146 -0
  243. package/lib/programmatic/manifest-patch-section.js +252 -0
  244. package/lib/programmatic/manifest-repair.js +122 -0
  245. package/lib/programmatic/manifest-section-dependency-graph.js +160 -0
  246. package/lib/programmatic/manifest-section-io.js +225 -0
  247. package/lib/programmatic/manifest-section-quality.js +171 -0
  248. package/lib/programmatic/manifest-section-registry-data.js +269 -0
  249. package/lib/programmatic/manifest-section-registry.js +222 -0
  250. package/lib/programmatic/nest-http-bridge.js +34 -0
  251. package/lib/programmatic/openapi-component-schemas.js +68 -0
  252. package/lib/programmatic/openapi-description-enricher.js +117 -0
  253. package/lib/programmatic/openapi-descriptions.js +190 -0
  254. package/lib/programmatic/openapi-docs-serving.js +123 -0
  255. package/lib/programmatic/openapi-help-schemas.js +63 -0
  256. package/lib/programmatic/openapi-manifest-schemas.js +141 -0
  257. package/lib/programmatic/openapi-operation-bindings.js +274 -0
  258. package/lib/programmatic/openapi-request-schemas.js +155 -0
  259. package/lib/programmatic/openapi-result-schemas.js +493 -0
  260. package/lib/programmatic/openapi-schema-descriptions-certify.js +139 -0
  261. package/lib/programmatic/openapi-schema-descriptions-core.js +162 -0
  262. package/lib/programmatic/openapi-schema-descriptions-help.js +40 -0
  263. package/lib/programmatic/openapi-schema-descriptions-manifest.js +143 -0
  264. package/lib/programmatic/openapi-schema-descriptions-mcp.js +118 -0
  265. package/lib/programmatic/openapi-schema-descriptions-operations.js +281 -0
  266. package/lib/programmatic/openapi-schema-helpers.js +108 -0
  267. package/lib/programmatic/openapi-spec.js +203 -0
  268. package/lib/programmatic/orchestration-openapi-meta.js +159 -0
  269. package/lib/programmatic/platform-rbac-catalog.js +90 -0
  270. package/lib/programmatic/request-timeout.js +53 -0
  271. package/lib/programmatic/route-handler-map.js +143 -0
  272. package/lib/programmatic/route-handlers-context.js +29 -0
  273. package/lib/programmatic/route-handlers.js +33 -0
  274. package/lib/programmatic/run-certify.js +57 -0
  275. package/lib/programmatic/run-enterprise-mcp.js +32 -0
  276. package/lib/programmatic/run-lifecycle.js +29 -0
  277. package/lib/programmatic/run-repair.js +41 -0
  278. package/lib/programmatic/run-repository-emcp.js +62 -0
  279. package/lib/programmatic/run-template-workspace.js +74 -0
  280. package/lib/programmatic/run-test.js +49 -0
  281. package/lib/programmatic/run-upload.js +63 -0
  282. package/lib/programmatic/run-validate.js +53 -0
  283. package/lib/programmatic/run-wizard.js +40 -0
  284. package/lib/programmatic/system-key.js +48 -0
  285. package/lib/programmatic/wizard-config-normalize.js +118 -0
  286. package/lib/programmatic/workspace-cleanup.js +128 -0
  287. package/lib/programmatic/workspace-context.js +145 -0
  288. package/lib/programmatic/workspace-lock.js +75 -0
  289. package/lib/programmatic/workspace-meta.js +64 -0
  290. package/lib/programmatic/workspace-ops.js +149 -0
  291. package/lib/protection/run-commands-upload-sync.js +35 -0
  292. package/lib/protection/run-commands.js +2 -20
  293. package/lib/protection/upload-batch.js +11 -7
  294. package/lib/resolvers/evidence-kind-file.js +230 -0
  295. package/lib/resolvers/resource-type-file.js +58 -1
  296. package/lib/resolvers/role-file.js +227 -0
  297. package/lib/schema/application-schema.json +22 -2
  298. package/lib/schema/external-datasource.schema.json +245 -2
  299. package/lib/schema/external-system.schema.json +259 -119
  300. package/lib/schema/flag-map-validation-run.json +3 -0
  301. package/lib/schema/infra.parameter.yaml +25 -1
  302. package/lib/schema/type/credential-field-registry.json +21 -5
  303. package/lib/schema/type/document-storage.json +9 -0
  304. package/lib/utils/agent-trust-run-display.js +1 -1
  305. package/lib/utils/api.js +8 -2
  306. package/lib/utils/app-path-resolve.js +168 -0
  307. package/lib/utils/app-register-config.js +4 -3
  308. package/lib/utils/authentication-env-template.js +222 -0
  309. package/lib/utils/cli-sync-options.js +62 -10
  310. package/lib/utils/cli-utils.js +15 -3
  311. package/lib/utils/cli-workspace-options.js +29 -0
  312. package/lib/utils/compose-generate-docker-compose.js +102 -0
  313. package/lib/utils/configuration-env-resolver.js +203 -27
  314. package/lib/utils/datasource-test-run-certificate-tty.js +28 -2
  315. package/lib/utils/datasource-test-run-certification-debug.js +130 -0
  316. package/lib/utils/datasource-test-run-debug-display.js +2 -0
  317. package/lib/utils/datasource-test-run-debug-slice.js +7 -0
  318. package/lib/utils/datasource-test-run-display.js +2 -1
  319. package/lib/utils/dev-ca-install.js +5 -6
  320. package/lib/utils/dev-config.js +2 -2
  321. package/lib/utils/dev-init-ssh-merge.js +165 -23
  322. package/lib/utils/dev-list-sort.js +145 -0
  323. package/lib/utils/dev-pin-share-instructions.js +110 -0
  324. package/lib/utils/dev-platform-tls.js +0 -63
  325. package/lib/utils/dev-ssh-config-helper.js +177 -33
  326. package/lib/utils/docker-build.js +46 -27
  327. package/lib/utils/docker-daemon-tls-ca.js +1 -1
  328. package/lib/utils/docker-exec.js +91 -6
  329. package/lib/utils/enterprise-knowledge-paths.js +142 -0
  330. package/lib/utils/env-copy.js +3 -4
  331. package/lib/utils/env-dotenv-format.js +103 -0
  332. package/lib/utils/error-formatters/error-parser.js +0 -3
  333. package/lib/utils/external-env-template.js +5 -2
  334. package/lib/utils/external-system-display.js +5 -1
  335. package/lib/utils/external-system-readiness-compact-blocks.js +248 -0
  336. package/lib/utils/external-system-readiness-compact-display.js +324 -0
  337. package/lib/utils/external-system-readiness-core.js +16 -0
  338. package/lib/utils/external-system-readiness-deploy-display.js +29 -11
  339. package/lib/utils/external-system-readiness-display-internals.js +3 -1
  340. package/lib/utils/external-system-readiness-display.js +20 -30
  341. package/lib/utils/external-system-system-test-tty-certification.js +135 -0
  342. package/lib/utils/external-system-system-test-tty.js +5 -41
  343. package/lib/utils/health-check-request.js +2 -3
  344. package/lib/utils/help-builder.js +9 -1
  345. package/lib/utils/host-ops-job-labels.js +236 -0
  346. package/lib/utils/host-ops-job-result.js +61 -0
  347. package/lib/utils/host-ops-poll-ui.js +163 -0
  348. package/lib/utils/image-name.js +22 -4
  349. package/lib/utils/integration-path-resolve.js +112 -0
  350. package/lib/utils/logger.js +37 -4
  351. package/lib/utils/manifest-source-emit.js +1 -1
  352. package/lib/utils/paths-reload-source.js +148 -0
  353. package/lib/utils/paths-system-builder-keys.js +25 -0
  354. package/lib/utils/paths.js +183 -30
  355. package/lib/utils/pipeline-upload-auth-retry.js +4 -0
  356. package/lib/utils/postgres-platform-bootstrap.js +24 -17
  357. package/lib/utils/postgres-wipe.js +5 -2
  358. package/lib/utils/remote-dev-auth.js +39 -4
  359. package/lib/utils/resolve-docker-image-ref.js +36 -6
  360. package/lib/utils/runtime-configuration-values.js +64 -2
  361. package/lib/utils/secrets-helpers.js +5 -1
  362. package/lib/utils/ssh-known-hosts.js +130 -0
  363. package/lib/utils/test-target-cli-options.js +75 -0
  364. package/lib/utils/token-manager.js +16 -0
  365. package/lib/utils/upload-sync-options.js +20 -2
  366. package/lib/utils/validation-run-request.js +11 -2
  367. package/lib/validation/external-manifest-validator.js +11 -1
  368. package/lib/validation/openapi-contract-surface-validator.js +430 -0
  369. package/lib/validation/openapi-contract-vendor-validation.js +238 -0
  370. package/lib/validation/validate-external-file.js +160 -0
  371. package/lib/validation/validate.js +6 -117
  372. package/lib/validation/validator.js +6 -5
  373. package/package.json +76 -37
  374. package/packages/builder-api/README.md +120 -0
  375. package/packages/builder-api/package.json +30 -0
  376. package/packages/builder-api/src/app.module.ts +7 -0
  377. package/packages/builder-api/src/auth/auth.module.ts +5 -0
  378. package/packages/builder-api/src/external-system/external-system.module.ts +5 -0
  379. package/packages/builder-api/src/main.ts +16 -0
  380. package/packages/builder-api/tsconfig.json +15 -0
  381. package/scripts/check-builder-api-architecture-grep.js +79 -0
  382. package/scripts/docker_image_content_gate.js +47 -0
  383. package/scripts/docker_image_content_gate.sh +5 -0
  384. package/scripts/export-builder-api-evidence.js +262 -0
  385. package/scripts/lib/builder-api-docker-staging-copy.js +60 -0
  386. package/scripts/lib/builder-api-docker-staging-core.js +183 -0
  387. package/scripts/lib/docker-image-content-gate-core.js +166 -0
  388. package/scripts/lib/plan-actor.js +109 -0
  389. package/scripts/lib/plan-config.js +20 -0
  390. package/scripts/lib/plan-gates.js +154 -0
  391. package/scripts/lib/plan-meta.js +104 -0
  392. package/scripts/lib/plan-parse.js +162 -0
  393. package/scripts/lib/plan-prevalidate-gates.js +337 -0
  394. package/scripts/lib/plan-run-core.js +125 -0
  395. package/scripts/lib/plan-run-report.js +119 -0
  396. package/scripts/plan-approve.js +24 -0
  397. package/scripts/plan-archive.js +49 -0
  398. package/scripts/plan-run.js +13 -0
  399. package/scripts/plan-set-actor.js +21 -0
  400. package/scripts/plan-validate.js +80 -0
  401. package/scripts/pnpm/af.mjs +110 -0
  402. package/scripts/pnpm/check-quiet.mjs +32 -0
  403. package/scripts/pnpm/dev-install.mjs +29 -0
  404. package/scripts/pnpm/dev-reload.mjs +18 -0
  405. package/scripts/pnpm/help.mjs +55 -0
  406. package/scripts/pnpm/lib/dev-reload-core.mjs +189 -0
  407. package/scripts/pnpm/lib/dev-reload-log-capture.mjs +67 -0
  408. package/scripts/pnpm/lib/dev-reload-log-utils.mjs +32 -0
  409. package/scripts/pnpm/lib/resolve-aifabrix-bin.mjs +124 -0
  410. package/scripts/pnpm/lib/resolve-app-url.mjs +183 -0
  411. package/scripts/pnpm/lib/spinner.mjs +42 -0
  412. package/scripts/stage_builder_api_for_docker.js +65 -0
  413. package/scripts/sync-builder-api-template.js +44 -0
  414. package/templates/README.md +3 -0
  415. package/templates/applications/builder-api/Dockerfile +38 -0
  416. package/templates/applications/builder-api/application.yaml +75 -0
  417. package/templates/applications/builder-api/env.template +48 -0
  418. package/templates/applications/dataplane/application.yaml +27 -5
  419. package/templates/applications/dataplane/env.template +38 -15
  420. package/templates/applications/dataplane/rbac.yaml +85 -3
  421. package/templates/applications/miso-controller/application.yaml +10 -1
  422. package/templates/applications/miso-controller/env.template +11 -10
  423. package/templates/applications/miso-controller/rbac.yaml +72 -0
  424. package/templates/channels/README.md +18 -0
  425. package/templates/channels/ai-fabrix-icon.jpg +0 -0
  426. package/templates/channels/chatgpt/install.template.md.hbs +21 -24
  427. package/templates/channels/chatgpt/integration/README.md +11 -0
  428. package/templates/channels/chatgpt/integration/application.json +15 -0
  429. package/templates/channels/chatgpt/integration/chatgpt-system.json +29 -0
  430. package/templates/channels/chatgpt/integration/env.template +4 -0
  431. package/templates/channels/microsoft-copilot/install.template.md.hbs +20 -25
  432. package/templates/channels/microsoft-copilot/integration/README.md +11 -0
  433. package/templates/channels/microsoft-copilot/integration/application.json +15 -0
  434. package/templates/channels/microsoft-copilot/integration/env.template +6 -0
  435. package/templates/channels/microsoft-copilot/integration/microsoft-copilot-system.json +34 -0
  436. package/templates/channels/slack/install.template.md.hbs +48 -18
  437. package/templates/channels/slack/integration/README.md +38 -0
  438. package/templates/channels/slack/integration/application.json +18 -0
  439. package/templates/channels/slack/integration/env.template +29 -0
  440. package/templates/channels/slack/integration/slack-datasource-conversations.json +226 -0
  441. package/templates/channels/slack/integration/slack-datasource-messages.json +269 -0
  442. package/templates/channels/slack/integration/slack-system.json +144 -0
  443. package/templates/channels/slack/manifest.template.json.hbs +20 -10
  444. package/templates/channels/teams-bot/install.template.md.hbs +31 -17
  445. package/templates/channels/teams-bot/integration/README.md +18 -0
  446. package/templates/channels/teams-bot/integration/application.json +17 -0
  447. package/templates/channels/teams-bot/integration/env.template +5 -0
  448. package/templates/channels/teams-bot/integration/teams-bot-system.json +55 -0
  449. package/templates/channels/teams-bot/manifest.template.json.hbs +27 -0
  450. package/templates/channels/web-embed/install.template.md.hbs +16 -26
  451. package/templates/channels/web-embed/integration/README.md +11 -0
  452. package/templates/channels/web-embed/integration/application.json +15 -0
  453. package/templates/channels/web-embed/integration/env.template +4 -0
  454. package/templates/channels/web-embed/integration/web-embed-system.json +29 -0
  455. package/templates/openapi/redoc_page.html +86 -0
  456. package/templates/python/docker-compose.hbs +11 -0
  457. package/templates/python/requirements.txt +2 -2
  458. package/templates/typescript/docker-compose.hbs +11 -0
  459. package/lib/certification/cli-cert-sync-skip.js +0 -21
@@ -0,0 +1,337 @@
1
+ /**
2
+ * @fileoverview Pre-implementation plan validation gates (/validate-plan).
3
+ */
4
+
5
+ /* eslint-disable valid-jsdoc, require-jsdoc */
6
+
7
+ 'use strict';
8
+
9
+ const {
10
+ statSync,
11
+ mkdirSync,
12
+ writeFileSync
13
+ } = require('../../lib/internal/fs-real-sync');
14
+ const path = require('path');
15
+ const { loadPlanFile, hasSurface } = require('./plan-parse');
16
+
17
+ const REPO_ROOT = path.resolve(__dirname, '../..');
18
+ const PREVALIDATE_REPORT_DIR = path.join(REPO_ROOT, 'temp/plan-prevalidation');
19
+
20
+ /**
21
+ * @param {unknown} value
22
+ * @returns {string}
23
+ */
24
+ function escapeMarkdownCell(value) {
25
+ return String(value ?? '')
26
+ .replace(/\r?\n+/g, ' ')
27
+ .replace(/\|/g, '\\|')
28
+ .trim();
29
+ }
30
+
31
+ /**
32
+ * @typedef {{ label: string, status: 'pass' | 'fail' | 'warn' | 'skip', detail?: string }} GateResult
33
+ */
34
+
35
+ /**
36
+ * @param {string} label
37
+ * @param {'pass' | 'fail' | 'warn' | 'skip'} status
38
+ * @param {string} [detail]
39
+ * @returns {GateResult}
40
+ */
41
+ function gate(label, status, detail) {
42
+ return { label, status, detail };
43
+ }
44
+
45
+ /**
46
+ * @param {string} body
47
+ * @param {string} heading
48
+ * @returns {boolean}
49
+ */
50
+ function hasHeading(body, heading) {
51
+ const re = new RegExp(`^## ${heading.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')}\\s*$`, 'm');
52
+ return re.test(body);
53
+ }
54
+
55
+ /**
56
+ * @param {string} body
57
+ * @returns {string | null}
58
+ */
59
+ function extractReportStatus(body) {
60
+ const reportMatch = body.match(/## Plan Validation Report[\s\S]*?\*\*Status\*\*:\s*(.+)/i);
61
+ if (!reportMatch) {
62
+ return null;
63
+ }
64
+ const line = reportMatch[1].trim();
65
+ if (/VALIDATED/i.test(line) && !/NEEDS|INCOMPLETE/i.test(line)) {
66
+ return 'validated';
67
+ }
68
+ if (/NEEDS UPDATES/i.test(line)) {
69
+ return 'needs-updates';
70
+ }
71
+ if (/INCOMPLETE/i.test(line)) {
72
+ return 'incomplete';
73
+ }
74
+ return null;
75
+ }
76
+
77
+ /**
78
+ * @param {string} body
79
+ * @param {string} subsection
80
+ * @returns {boolean}
81
+ */
82
+ function hasReportSubsection(body, subsection) {
83
+ const reportIdx = body.indexOf('## Plan Validation Report');
84
+ if (reportIdx < 0) {
85
+ return false;
86
+ }
87
+ const report = body.slice(reportIdx);
88
+ const re = new RegExp(`^### ${subsection.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')}`, 'm');
89
+ return re.test(report);
90
+ }
91
+
92
+ /**
93
+ * @param {string} planPath
94
+ * @param {string | undefined} lastValidatedAt
95
+ * @returns {boolean}
96
+ */
97
+ function isValidationStale(planPath, lastValidatedAt) {
98
+ if (!lastValidatedAt) {
99
+ return false;
100
+ }
101
+ const validatedMs = Date.parse(String(lastValidatedAt));
102
+ if (Number.isNaN(validatedMs)) {
103
+ return false;
104
+ }
105
+ const mtime = statSync(planPath).mtimeMs;
106
+ return mtime > validatedMs + 86400000;
107
+ }
108
+
109
+ /**
110
+ * @param {string} body
111
+ * @returns {boolean}
112
+ */
113
+ function needsManualSection(body, meta) {
114
+ const reportIdx = body.indexOf('## Plan Validation Report');
115
+ const planBody = reportIdx >= 0 ? body.slice(0, reportIdx) : body;
116
+ const todos = Array.isArray(meta.todos) ? meta.todos : [];
117
+ const todoText = todos.map((t) => `${t.content} ${t.id}`).join(' ');
118
+ const combined = `${planBody}\n${todoText}`;
119
+ return /manual|pilot|live proof|e2e smoke|container proof|dev-reload/i.test(combined);
120
+ }
121
+
122
+ /**
123
+ * @param {Record<string, unknown>} meta
124
+ * @returns {boolean}
125
+ */
126
+ function isCodePlan(meta) {
127
+ return meta.planType === 'code';
128
+ }
129
+
130
+ /**
131
+ * @param {Record<string, unknown>} meta
132
+ * @returns {boolean}
133
+ */
134
+ function isMetaPlan(meta) {
135
+ return meta.planType === 'meta';
136
+ }
137
+
138
+ /**
139
+ * @param {string} planPath
140
+ * @param {{ allowNeedsUpdates?: boolean, repoProfile?: string }} [opts]
141
+ */
142
+ function runPrevalidateGates(planPath, opts = {}) {
143
+ const loaded = loadPlanFile(planPath);
144
+ if (!loaded) {
145
+ return {
146
+ gates: [gate('plan-parse', 'fail', 'invalid or missing frontmatter')],
147
+ reportStatus: 'incomplete',
148
+ planValidatedStatus: 'incomplete',
149
+ meta: {},
150
+ body: ''
151
+ };
152
+ }
153
+
154
+ const { meta, body } = loaded;
155
+ const gates = [];
156
+ const code = isCodePlan(meta);
157
+ const metaPlan = isMetaPlan(meta);
158
+
159
+ if (!meta.name && !meta.overview) {
160
+ gates.push(gate('frontmatter-name', 'fail', 'name or overview required'));
161
+ } else {
162
+ gates.push(gate('frontmatter-name', 'pass'));
163
+ }
164
+
165
+ if (!Array.isArray(meta.todos) || meta.todos.length === 0) {
166
+ gates.push(gate('todos', 'fail', 'frontmatter todos required'));
167
+ } else {
168
+ gates.push(gate('todos', 'pass', `${meta.todos.length} todo(s)`));
169
+ }
170
+
171
+ const scopeSections = ['Scope', 'Rules and Standards', 'Before Development', 'Definition of Done'];
172
+ for (const section of scopeSections) {
173
+ if (!hasHeading(body, section)) {
174
+ gates.push(gate(`section-${section}`, 'fail', `missing ## ${section}`));
175
+ } else {
176
+ gates.push(gate(`section-${section}`, 'pass'));
177
+ }
178
+ }
179
+
180
+ if (hasHeading(body, 'Scope')) {
181
+ const scopeOk =
182
+ /### In scope/i.test(body) && /### Out of scope/i.test(body);
183
+ gates.push(
184
+ scopeOk
185
+ ? gate('scope-boundaries', 'pass')
186
+ : gate('scope-boundaries', 'fail', 'Scope needs ### In scope and ### Out of scope')
187
+ );
188
+ }
189
+
190
+ if (code) {
191
+ for (const section of ['Architecture alignment', 'Code reuse scan', 'Expected Automated Tests']) {
192
+ gates.push(
193
+ hasHeading(body, section)
194
+ ? gate(`section-${section}`, 'pass')
195
+ : gate(`section-${section}`, 'fail', `code plan missing ## ${section}`)
196
+ );
197
+ }
198
+ if (!hasHeading(body, 'File Size Reduction Candidates')) {
199
+ gates.push(gate('file-size-section', 'warn', 'missing ## File Size Reduction Candidates'));
200
+ } else {
201
+ gates.push(gate('file-size-section', 'pass'));
202
+ }
203
+ if (hasSurface(meta, 'api') && !meta.apiTiers) {
204
+ gates.push(gate('api-tiers', 'fail', 'api surface requires apiTiers in frontmatter'));
205
+ } else if (hasSurface(meta, 'api')) {
206
+ gates.push(gate('api-tiers', 'pass'));
207
+ } else {
208
+ gates.push(gate('api-tiers', 'skip', 'no api surface'));
209
+ }
210
+ } else if (metaPlan) {
211
+ gates.push(gate('architecture-section', 'skip', 'meta plan'));
212
+ gates.push(gate('reuse-section', 'skip', 'meta plan'));
213
+ gates.push(gate('automated-tests-section', 'skip', 'meta plan'));
214
+ } else {
215
+ gates.push(gate('code-sections', 'skip', `planType=${meta.planType || 'unknown'}`));
216
+ }
217
+
218
+ if (code && needsManualSection(body, meta) && !hasHeading(body, 'Manual testing')) {
219
+ gates.push(gate('manual-testing-section', 'fail', 'manual scope detected — add ## Manual testing'));
220
+ } else if (metaPlan) {
221
+ gates.push(gate('manual-testing-section', 'skip', 'meta plan'));
222
+ } else if (needsManualSection(body, meta)) {
223
+ gates.push(gate('manual-testing-section', 'pass'));
224
+ } else {
225
+ gates.push(gate('manual-testing-section', 'skip', 'no manual scope'));
226
+ }
227
+
228
+ if (!hasHeading(body, 'Plan Validation Report')) {
229
+ gates.push(gate('validation-report', 'fail', 'missing ## Plan Validation Report'));
230
+ } else {
231
+ gates.push(gate('validation-report', 'pass'));
232
+ const reportStatus = extractReportStatus(body);
233
+ if (!reportStatus) {
234
+ gates.push(gate('report-status', 'fail', 'report missing **Status**: VALIDATED line'));
235
+ } else if (reportStatus === 'validated') {
236
+ gates.push(gate('report-status', 'pass', 'VALIDATED'));
237
+ } else if (reportStatus === 'needs-updates') {
238
+ gates.push(
239
+ gate('report-status', opts.allowNeedsUpdates ? 'warn' : 'fail', 'NEEDS UPDATES')
240
+ );
241
+ } else {
242
+ gates.push(gate('report-status', 'fail', 'INCOMPLETE'));
243
+ }
244
+
245
+ if (code) {
246
+ for (const sub of [
247
+ 'Architecture alignment',
248
+ 'Code reuse scan',
249
+ 'Testing strategy',
250
+ 'Manual testing and approval'
251
+ ]) {
252
+ gates.push(
253
+ hasReportSubsection(body, sub)
254
+ ? gate(`report-${sub}`, 'pass')
255
+ : gate(`report-${sub}`, 'fail', `report missing ### ${sub}`)
256
+ );
257
+ }
258
+ }
259
+ }
260
+
261
+ if (isValidationStale(planPath, meta.lastValidatedAt)) {
262
+ gates.push(gate('staleness', 'fail', 'plan modified after lastValidatedAt — re-validate'));
263
+ } else if (meta.lastValidatedAt) {
264
+ gates.push(gate('staleness', 'pass'));
265
+ } else {
266
+ gates.push(gate('staleness', 'skip', 'not yet validated'));
267
+ }
268
+
269
+ const hasFail = gates.some((g) => g.status === 'fail');
270
+ const hasWarn = gates.some((g) => g.status === 'warn');
271
+ let planValidatedStatus = 'validated';
272
+ if (hasFail) {
273
+ planValidatedStatus = 'incomplete';
274
+ } else if (hasWarn) {
275
+ planValidatedStatus = 'needs-updates';
276
+ }
277
+
278
+ const reportStatus = extractReportStatus(body) || planValidatedStatus;
279
+ if (reportStatus !== 'validated') {
280
+ planValidatedStatus = reportStatus === 'needs-updates' ? 'needs-updates' : 'incomplete';
281
+ }
282
+ if (hasFail) {
283
+ planValidatedStatus = 'incomplete';
284
+ }
285
+
286
+ return { gates, reportStatus, planValidatedStatus, meta, body };
287
+ }
288
+
289
+ /**
290
+ * @param {object} params
291
+ * @returns {string}
292
+ */
293
+ function buildPrevalidateReport(params) {
294
+ const { planPath, planName, actor, runAt, gates, planValidatedStatus, reportStatus } = params;
295
+ const lines = [
296
+ '# Plan pre-validation summary',
297
+ '',
298
+ '| Field | Value |',
299
+ '| --- | --- |',
300
+ `| **Plan** | \`${planName}\` |`,
301
+ `| **Stamp status** | \`${planValidatedStatus}\` |`,
302
+ `| **Report status** | \`${reportStatus || 'unknown'}\` |`,
303
+ `| **Run at** | ${runAt} |`,
304
+ `| **Validated by** | ${actor || '_not set_'} |`,
305
+ `| **Plan file** | \`${path.relative(REPO_ROOT, planPath)}\` |`,
306
+ '',
307
+ '## Gates',
308
+ '',
309
+ '| Gate | Result | Detail |',
310
+ '| --- | --- | --- |'
311
+ ];
312
+ for (const g of gates) {
313
+ lines.push(`| ${escapeMarkdownCell(g.label)} | ${escapeMarkdownCell(g.status)} | ${escapeMarkdownCell(g.detail || '')} |`);
314
+ }
315
+ return `${lines.join('\n')}\n`;
316
+ }
317
+
318
+ /**
319
+ * @param {string} content
320
+ * @param {string} planBaseName
321
+ */
322
+ function writePrevalidateReport(content, planBaseName) {
323
+ mkdirSync(PREVALIDATE_REPORT_DIR, { recursive: true });
324
+ const stamp = new Date().toISOString().replace(/[:.]/g, '-').slice(0, 19);
325
+ writeFileSync(path.join(PREVALIDATE_REPORT_DIR, `${planBaseName}.${stamp}.md`), content, 'utf8');
326
+ writeFileSync(path.join(PREVALIDATE_REPORT_DIR, 'LATEST.md'), content, 'utf8');
327
+ }
328
+
329
+ module.exports = {
330
+ PREVALIDATE_REPORT_DIR,
331
+ runPrevalidateGates,
332
+ buildPrevalidateReport,
333
+ writePrevalidateReport,
334
+ hasHeading,
335
+ extractReportStatus,
336
+ isValidationStale
337
+ };
@@ -0,0 +1,125 @@
1
+ /**
2
+ * @fileoverview Plan run and archive core (miso / builder).
3
+ */
4
+
5
+ 'use strict';
6
+
7
+ const fs = require('fs');
8
+ const path = require('path');
9
+ const { DONE_DIR, REQUIRE_APPROVAL_TO_ARCHIVE } = require('./plan-config');
10
+ const { resolvePlanPath, patchPlanMeta, die } = require('./plan-meta');
11
+ const { loadPlanFile } = require('./plan-parse');
12
+ const { runAllGates } = require('./plan-gates');
13
+ const { buildSummaryMarkdown, writeReport } = require('./plan-run-report');
14
+ const { resolveActor } = require('./plan-actor');
15
+
16
+ /**
17
+ * @param {import('./plan-gates').GateResult[]} gates
18
+ */
19
+ function gatesPassing(gates) {
20
+ return gates.filter((g) => g.status === 'fail').length === 0;
21
+ }
22
+
23
+ /**
24
+ * @param {string} planInput
25
+ * @param {{ actorName?: string }} [opts]
26
+ */
27
+ function runPlan(planInput, opts = {}) {
28
+ const planPath = resolvePlanPath(planInput);
29
+ const actorInfo = resolveActor(opts.actorName);
30
+ const runAt = new Date().toISOString();
31
+ const planName = path.basename(planPath, '.plan.md');
32
+ console.log(`Validating: ${planName}\n`);
33
+
34
+ const result = runAllGates(planPath);
35
+
36
+ let overallStatus = 'PASS';
37
+ if (!gatesPassing(result.gates)) {
38
+ overallStatus = 'FAIL';
39
+ } else if (result.gates.some((g) => g.status === 'warn')) {
40
+ overallStatus = 'PASS_WITH_WARNINGS';
41
+ }
42
+ if (result.blockingPending.length) {
43
+ overallStatus = 'FAIL';
44
+ }
45
+
46
+ for (const g of result.gates) {
47
+ const prefix =
48
+ g.status === 'pass' ? '✔' : g.status === 'warn' ? '⚠' : g.status === 'skip' ? '○' : '✖';
49
+ console.log(`${prefix} ${g.label}${g.detail ? ` — ${g.detail}` : ''}`);
50
+ }
51
+
52
+ const summary = buildSummaryMarkdown({
53
+ planPath,
54
+ planName,
55
+ actor: actorInfo?.displayName,
56
+ runAt,
57
+ gates: result.gates,
58
+ todos: result.todos,
59
+ blockingPending: result.blockingPending,
60
+ manualPending: result.manualPending,
61
+ overallStatus
62
+ });
63
+ writeReport(summary, planName);
64
+
65
+ if (!gatesPassing(result.gates) || result.blockingPending.length) {
66
+ process.exit(1);
67
+ }
68
+
69
+ return { planPath, planName, summary, overallStatus };
70
+ }
71
+
72
+ /**
73
+ * @param {string} planInput
74
+ * @param {string} [summary]
75
+ * @param {{ allowUnapproved?: boolean }} [opts]
76
+ */
77
+ function archivePlan(planInput, summary, opts = {}) {
78
+ const planPath = resolvePlanPath(planInput);
79
+ const planName = path.basename(planPath, '.plan.md');
80
+ const loaded = loadPlanFile(planPath);
81
+ if (
82
+ REQUIRE_APPROVAL_TO_ARCHIVE &&
83
+ loaded &&
84
+ !loaded.meta.approvedBy &&
85
+ !opts.allowUnapproved
86
+ ) {
87
+ die('Plan not approved — run plan-approve first or use --allow-unapproved');
88
+ }
89
+
90
+ fs.mkdirSync(DONE_DIR, { recursive: true });
91
+ const dest = path.join(DONE_DIR, path.basename(planPath));
92
+ if (fs.existsSync(dest)) {
93
+ die(`Already archived: ${dest}`);
94
+ }
95
+ fs.renameSync(planPath, dest);
96
+ if (summary) {
97
+ fs.writeFileSync(path.join(DONE_DIR, `${planName}.validation.md`), summary, 'utf8');
98
+ }
99
+ console.log(`✔ Archived → ${dest}`);
100
+ return dest;
101
+ }
102
+
103
+ /**
104
+ * @param {string} planInput
105
+ * @param {string} [actorOverride]
106
+ */
107
+ function approvePlan(planInput, actorOverride) {
108
+ const planPath = resolvePlanPath(planInput);
109
+ const actor = resolveActor(actorOverride);
110
+ const name = actor?.displayName || actorOverride;
111
+ if (!name) {
112
+ die('Set actor first: node scripts/plan-set-actor.js "Your Name"');
113
+ }
114
+ const today = new Date().toISOString().slice(0, 10);
115
+ patchPlanMeta(planPath, 'approvedBy', name);
116
+ patchPlanMeta(planPath, 'approvedAt', today);
117
+ patchPlanMeta(planPath, 'status', 'approved');
118
+ console.log(`✔ Approved ${path.basename(planPath)} by ${name} on ${today}`);
119
+ }
120
+
121
+ module.exports = {
122
+ runPlan,
123
+ archivePlan,
124
+ approvePlan
125
+ };
@@ -0,0 +1,119 @@
1
+ /**
2
+ * @fileoverview Plan run report writer (shared).
3
+ */
4
+
5
+ 'use strict';
6
+
7
+ const fs = require('fs');
8
+ const path = require('path');
9
+ const { REPORT_DIR } = require('./plan-config');
10
+
11
+ /**
12
+ * @param {unknown} value
13
+ * @returns {string}
14
+ */
15
+ function escapeMarkdownCell(value) {
16
+ return String(value ?? '')
17
+ .replace(/\r?\n+/g, ' ')
18
+ .replace(/\|/g, '\\|')
19
+ .trim();
20
+ }
21
+
22
+ /**
23
+ * @param {object} params
24
+ * @returns {string}
25
+ */
26
+ function buildSummaryMarkdown(params) {
27
+ const {
28
+ planPath,
29
+ planName,
30
+ actor,
31
+ runAt,
32
+ gates,
33
+ todos,
34
+ blockingPending,
35
+ manualPending,
36
+ overallStatus
37
+ } = params;
38
+
39
+ const lines = [
40
+ '# Plan validation summary',
41
+ '',
42
+ '| Field | Value |',
43
+ '| --- | --- |',
44
+ `| **Plan** | \`${planName}\` |`,
45
+ `| **Status** | **${overallStatus}** |`,
46
+ `| **Run at** | ${runAt} |`,
47
+ `| **Validated by** | ${actor || '_not set_'} |`,
48
+ `| **Plan file** | \`${planPath}\` |`,
49
+ '',
50
+ '## Quality gates',
51
+ '',
52
+ '| Gate | Result | Detail |',
53
+ '| --- | --- | --- |'
54
+ ];
55
+
56
+ for (const g of gates) {
57
+ const icon = g.status === 'pass' ? 'pass' : g.status === 'warn' ? 'warn' : 'FAIL';
58
+ lines.push(`| ${escapeMarkdownCell(g.label)} | ${icon} | ${escapeMarkdownCell(g.detail || '')} |`);
59
+ }
60
+
61
+ lines.push('', '## Todos', '', '| ID | Status | Content |', '| --- | --- | --- |');
62
+ for (const t of todos) {
63
+ lines.push(
64
+ `| ${escapeMarkdownCell(t.id)} | ${escapeMarkdownCell(t.status)} | ${escapeMarkdownCell(t.content).slice(0, 100)} |`
65
+ );
66
+ }
67
+
68
+ if (blockingPending.length) {
69
+ lines.push('', '### Blocking', '');
70
+ for (const t of blockingPending) {
71
+ lines.push(`- **${t.id}**: ${t.content}`);
72
+ }
73
+ }
74
+ if (manualPending.length) {
75
+ lines.push('', '### Manual (non-blocking)', '');
76
+ for (const t of manualPending) {
77
+ lines.push(`- **${t.id}**: ${t.content}`);
78
+ }
79
+ }
80
+
81
+ return `${lines.join('\n')}\n`;
82
+ }
83
+
84
+ /**
85
+ * @param {string} content
86
+ * @param {string} planBaseName
87
+ */
88
+ function writeReport(content, planBaseName) {
89
+ fs.mkdirSync(REPORT_DIR, { recursive: true });
90
+ const stamp = new Date().toISOString().replace(/[:.]/g, '-').slice(0, 19);
91
+ fs.writeFileSync(path.join(REPORT_DIR, `${planBaseName}.${stamp}.md`), content, 'utf8');
92
+ fs.writeFileSync(path.join(REPORT_DIR, 'LATEST.md'), content, 'utf8');
93
+ console.log('Report: temp/plan-validation/LATEST.md');
94
+ }
95
+
96
+ /**
97
+ * @param {string} planBaseName
98
+ * @returns {{ summary: string, overallStatus: string } | null}
99
+ */
100
+ function readLatestReportForPlan(planBaseName) {
101
+ const latest = path.join(REPORT_DIR, 'LATEST.md');
102
+ if (!fs.existsSync(latest)) {
103
+ return null;
104
+ }
105
+ const summary = fs.readFileSync(latest, 'utf8');
106
+ const planMatch = summary.match(/\|\s*\*\*Plan\*\*\s*\|\s*`([^`]+)`\s*\|/);
107
+ if (!planMatch || planMatch[1] !== planBaseName) {
108
+ return null;
109
+ }
110
+ const statusMatch = summary.match(/\|\s*\*\*Status\*\*\s*\|\s*\*\*([^*]+)\*\*\s*\|/);
111
+ const overallStatus = statusMatch ? statusMatch[1].trim() : '';
112
+ return { summary, overallStatus };
113
+ }
114
+
115
+ module.exports = {
116
+ buildSummaryMarkdown,
117
+ writeReport,
118
+ readLatestReportForPlan
119
+ };
@@ -0,0 +1,24 @@
1
+ #!/usr/bin/env node
2
+ /* eslint-disable no-console */
3
+ 'use strict';
4
+
5
+ const { resolvePlanPath, patchPlanMeta, die } = require('./lib/plan-meta');
6
+ const { resolveActor } = require('./lib/plan-actor');
7
+
8
+ const planInput = process.argv[2];
9
+ if (!planInput) {
10
+ die('Usage: node scripts/plan-approve.js <plan-path-or-id>');
11
+ }
12
+
13
+ const planPath = resolvePlanPath(planInput);
14
+ const actor = resolveActor(process.argv[3]);
15
+ const name = actor?.displayName || process.argv[3];
16
+ if (!name) {
17
+ die('Set actor first via /validate-implementation (plan-set-actor)');
18
+ }
19
+
20
+ const today = new Date().toISOString().slice(0, 10);
21
+ patchPlanMeta(planPath, 'approvedBy', name);
22
+ patchPlanMeta(planPath, 'approvedAt', today);
23
+ patchPlanMeta(planPath, 'status', 'approved');
24
+ console.log(`✔ Approved ${planPath} by ${name} on ${today}`);
@@ -0,0 +1,49 @@
1
+ #!/usr/bin/env node
2
+ /* eslint-disable no-console */
3
+ 'use strict';
4
+
5
+ const { runPlan, archivePlan } = require('./lib/plan-run-core');
6
+ const { resolvePlanPath } = require('./lib/plan-meta');
7
+ const { readLatestReportForPlan } = require('./lib/plan-run-report');
8
+ const path = require('path');
9
+
10
+ const args = process.argv.slice(2);
11
+ const planInput = args.find((a) => !a.startsWith('--'));
12
+ const allowUnapproved = args.includes('--allow-unapproved');
13
+ const revalidate = args.includes('--revalidate');
14
+
15
+ if (!planInput) {
16
+ console.error(
17
+ 'Usage: node scripts/plan-archive.js <plan-path-or-id> [--allow-unapproved] [--revalidate]'
18
+ );
19
+ process.exit(1);
20
+ }
21
+
22
+ const planPath = resolvePlanPath(planInput);
23
+ const planName = path.basename(planPath, '.plan.md');
24
+
25
+ let summary = '';
26
+ let runSummary = '';
27
+
28
+ if (!revalidate) {
29
+ const cached = readLatestReportForPlan(planName);
30
+ if (cached) {
31
+ if (cached.overallStatus !== 'PASS' && cached.overallStatus !== 'PASS_WITH_WARNINGS') {
32
+ console.error(
33
+ `Latest report for ${planName} is ${cached.overallStatus} — run plan-run.js or use --revalidate after fixing`
34
+ );
35
+ process.exit(1);
36
+ }
37
+ summary = cached.summary;
38
+ console.log('Using cached report: temp/plan-validation/LATEST.md');
39
+ }
40
+ }
41
+
42
+ if (!summary) {
43
+ const result = runPlan(planInput);
44
+ runSummary = result.summary;
45
+ summary = runSummary;
46
+ }
47
+
48
+ archivePlan(planPath, summary, { allowUnapproved });
49
+ console.log(`Plan archived: ${planName}`);
@@ -0,0 +1,13 @@
1
+ #!/usr/bin/env node
2
+ /* eslint-disable no-console */
3
+ 'use strict';
4
+
5
+ const { runPlan } = require('./lib/plan-run-core');
6
+
7
+ const planInput = process.argv[2];
8
+ if (!planInput) {
9
+ console.error('Usage: node scripts/plan-run.js <plan-path-or-id>');
10
+ process.exit(1);
11
+ }
12
+
13
+ runPlan(planInput);
@@ -0,0 +1,21 @@
1
+ #!/usr/bin/env node
2
+ /* eslint-disable no-console */
3
+ /**
4
+ * Save plan validator display name to ~/.aifabrix/plan-actor.yaml (shared across repos).
5
+ *
6
+ * @example node scripts/plan-set-actor.js "Your Name"
7
+ */
8
+
9
+ 'use strict';
10
+
11
+ const { saveActor } = require('./lib/plan-actor');
12
+
13
+ const name = process.argv.slice(2).join(' ').trim();
14
+ if (!name) {
15
+ console.error('Usage: node scripts/plan-set-actor.js "Your Name"');
16
+ process.exit(1);
17
+ }
18
+
19
+ const actorPath = saveActor(name);
20
+ console.log(`✔ Saved actor: ${name}`);
21
+ console.log(` ${actorPath}`);