@aifabrix/builder 2.49.2 → 2.51.0

package/templates/channels/chatgpt/install.template.md.hbs

@@ -1,33 +1,30 @@
-# {{appName}} — assistant channel install
+# {{appName}} — ChatGPT assistant channel install
 
 {{appDescription}}
 
 Environment: **{{environment}}** · Credential key: `{{credentialKey}}`
 
-## Platform callback URLs
+## Connect ChatGPT workspace (admin)
 
-Configure these in your Slack app, Teams bot registration, or platform admin console. Do not embed secrets in generated files — use AI Fabrix credential storage only.
+1. Sign in to [OpenAI Platform](https://platform.openai.com/) or your **ChatGPT Enterprise** workspace admin console.
+2. Create a custom GPT, workspace connector, or MCP integration using the generated manifest from `dist/channels/chatgpt/channel-chatgpt.json`.
+3. Configure the **OpenAPI specification URL** and **MCP endpoint** from **Platform endpoints** below.
+4. Complete OAuth or API key setup as required by your ChatGPT deployment model.
+5. Save the **API key** or **OAuth client credentials** in AI Fabrix: [Authentication settings]({{credentialPortalUrl}})
+6. Publish the connector to your workspace and complete admin approval if your organization requires it.
 
-{{#if eventsUrl}}
-- **Events:** {{eventsUrl}}
-{{/if}}
-{{#if interactionUrl}}
-- **Interactivity:** {{interactionUrl}}
-{{/if}}
-{{#if commandUrl}}
-- **Slash commands:** {{commandUrl}}
-{{/if}}
-{{#if oauthCallbackUrl}}
-- **OAuth redirect:** {{oauthCallbackUrl}}
-{{/if}}
-{{#if messagesUrl}}
-- **Bot messages:** {{messagesUrl}}
+## Platform endpoints
+
+Configure these on the ChatGPT connector / custom GPT. Do not embed secrets in generated files — use AI Fabrix credential storage only.
+
+{{#if openapiUrl}}
+- **OpenAPI spec:** {{openapiUrl}}
 {{/if}}
-{{#if notificationsUrl}}
-- **Notifications:** {{notificationsUrl}}
+{{#if mcpUrl}}
+- **MCP:** {{mcpUrl}}
 {{/if}}
-{{#if botConfigUrl}}
-- **Bot config:** {{botConfigUrl}}
+{{#if actionsBaseUrl}}
+- **Actions base:** {{actionsBaseUrl}}
 {{/if}}
 
 ## Assistant catalog
@@ -36,14 +33,14 @@ Runtime lists **assistants** available to each user from:
 
 {{assistantCatalogUrl}}
 
-## After admin approval
+## After workspace approval
 
 ```bash
-aifabrix app add-channel {{channelTarget}} --name "{{baseName}}"
+aifabrix channel add {{channelTarget}} --name "{{baseName}}"
 ```
 
 Optional validation:
 
 ```bash
-aifabrix app add-channel {{channelTarget}} --name "{{baseName}}" --probe
+aifabrix channel add {{channelTarget}} --name "{{baseName}}" --probe
 ```

package/templates/channels/chatgpt/integration/README.md

@@ -0,0 +1,11 @@
+# ChatGPT assistant channel (lab fixture)
+
+SSOT for `aifabrix channel scaffold chatgpt` templates (`make sync-json` → builder).
+
+```bash
+cd aifabrix-dataplane
+aifabrix validate chatgpt
+aifabrix upload chatgpt --probe
+aifabrix deploy chatgpt
+aifabrix app add-channel chatgpt --name "Your Assistant"
+```

package/templates/channels/chatgpt/integration/application.json

@@ -0,0 +1,15 @@
+{
+  "app": {
+    "key": "chatgpt",
+    "displayName": "ChatGPT assistant channel",
+    "description": "Assistant communication channel — deploy then app add-channel",
+    "type": "external"
+  },
+  "externalIntegration": {
+    "schemaBasePath": "./",
+    "systems": ["chatgpt-system.json"],
+    "dataSources": [],
+    "autopublish": true,
+    "version": "1.0.0"
+  }
+}

package/templates/channels/chatgpt/integration/chatgpt-system.json

@@ -0,0 +1,29 @@
+{
+  "key": "chatgpt",
+  "displayName": "ChatGPT assistant channel",
+  "description": "Communication external system for ChatGPT assistant channel install",
+  "type": "custom",
+  "systemKind": "communication",
+  "enabled": true,
+  "authentication": {
+    "authType": "credential",
+    "credential": {
+      "credentialKey": "chatgpt-channel",
+      "displayName": "ChatGPT assistant channel",
+      "method": "apikey",
+      "writeOnce": true,
+      "variables": {
+        "baseUrl": "https://api.openai.com/v1"
+      },
+      "security": {
+        "apiKey": "kv://chatgpt/apiKey"
+      },
+      "formFields": [
+        { "name": "apiKey", "required": true }
+      ]
+    }
+  },
+  "configuration": [],
+  "dataSources": [],
+  "endpointsActive": false
+}

package/templates/channels/chatgpt/integration/env.template

@@ -0,0 +1,4 @@
+# ChatGPT assistant channel — lab fixture secrets
+# aifabrix secret set chatgpt/apiKey "<value>" --shared
+
+KV_CHATGPT_APIKEY=kv://chatgpt/apiKey

package/templates/channels/microsoft-copilot/install.template.md.hbs

@@ -1,33 +1,28 @@
-# {{appName}} — assistant channel install
+# {{appName}} — Microsoft Copilot assistant channel install
 
 {{appDescription}}
 
 Environment: **{{environment}}** · Credential key: `{{credentialKey}}`
 
-## Platform callback URLs
+## Publish the Copilot extension (M365 admin)
 
-Configure these in your Slack app, Teams bot registration, or platform admin console. Do not embed secrets in generated files — use AI Fabrix credential storage only.
+1. Sign in to [Microsoft 365 admin](https://admin.cloud.microsoft.com/) or **Copilot Studio** as a tenant admin.
+2. Create or open a Copilot extensibility project (declarative agent or API plugin).
+3. Import or configure using the generated manifest JSON from `dist/channels/microsoft-copilot/channel-microsoft-copilot.json`.
+4. Point the **OpenAPI** and **action** endpoints to the URLs in **Platform endpoints** below.
+5. Register OAuth client credentials for the API provider connection when the platform prompts for them.
+6. Save the **OAuth client ID** and **client secret** in AI Fabrix: [Authentication settings]({{credentialPortalUrl}})
+7. Submit for M365 admin approval and publish to your organization when review completes.
 
-{{#if eventsUrl}}
-- **Events:** {{eventsUrl}}
-{{/if}}
-{{#if interactionUrl}}
-- **Interactivity:** {{interactionUrl}}
-{{/if}}
-{{#if commandUrl}}
-- **Slash commands:** {{commandUrl}}
-{{/if}}
-{{#if oauthCallbackUrl}}
-- **OAuth redirect:** {{oauthCallbackUrl}}
-{{/if}}
-{{#if messagesUrl}}
-- **Bot messages:** {{messagesUrl}}
-{{/if}}
-{{#if notificationsUrl}}
-- **Notifications:** {{notificationsUrl}}
+## Platform endpoints
+
+Configure these on the Copilot connector / API plugin. Do not embed secrets in generated files — use AI Fabrix credential storage only.
+
+{{#if openapiUrl}}
+- **OpenAPI spec:** {{openapiUrl}}
 {{/if}}
-{{#if botConfigUrl}}
-- **Bot config:** {{botConfigUrl}}
+{{#if actionsBaseUrl}}
+- **Actions base:** {{actionsBaseUrl}}
 {{/if}}
 
 ## Assistant catalog
@@ -36,14 +31,14 @@ Runtime lists **assistants** available to each user from:
 
 {{assistantCatalogUrl}}
 
-## After admin approval
+## After M365 admin approval
 
 ```bash
-aifabrix app add-channel {{channelTarget}} --name "{{baseName}}"
+aifabrix channel add {{channelTarget}} --name "{{baseName}}"
 ```
 
 Optional validation:
 
 ```bash
-aifabrix app add-channel {{channelTarget}} --name "{{baseName}}" --probe
+aifabrix channel add {{channelTarget}} --name "{{baseName}}" --probe
 ```

package/templates/channels/microsoft-copilot/integration/README.md

@@ -0,0 +1,11 @@
+# Microsoft Copilot assistant channel (lab fixture)
+
+SSOT for `aifabrix channel scaffold microsoft-copilot` templates (`make sync-json` → builder).
+
+```bash
+cd aifabrix-dataplane
+aifabrix validate microsoft-copilot
+aifabrix upload microsoft-copilot --probe
+aifabrix deploy microsoft-copilot
+aifabrix app add-channel microsoft-copilot --name "Your Assistant"
+```

package/templates/channels/microsoft-copilot/integration/application.json

@@ -0,0 +1,15 @@
+{
+  "app": {
+    "key": "microsoft-copilot",
+    "displayName": "Microsoft Copilot assistant channel",
+    "description": "Assistant communication channel — deploy then app add-channel",
+    "type": "external"
+  },
+  "externalIntegration": {
+    "schemaBasePath": "./",
+    "systems": ["microsoft-copilot-system.json"],
+    "dataSources": [],
+    "autopublish": true,
+    "version": "1.0.0"
+  }
+}

package/templates/channels/microsoft-copilot/integration/env.template

@@ -0,0 +1,6 @@
+# Microsoft Copilot assistant channel — lab fixture secrets
+# aifabrix secret set microsoft-copilot/clientId "<value>" --shared
+# aifabrix secret set microsoft-copilot/clientSecret "<value>" --shared
+
+KV_MICROSOFT_COPILOT_CLIENTID=kv://microsoft-copilot/clientId
+KV_MICROSOFT_COPILOT_CLIENTSECRET=kv://microsoft-copilot/clientSecret

package/templates/channels/microsoft-copilot/integration/microsoft-copilot-system.json

@@ -0,0 +1,34 @@
+{
+  "key": "microsoft-copilot",
+  "displayName": "Microsoft Copilot assistant channel",
+  "description": "Communication external system for Microsoft Copilot assistant channel install",
+  "type": "custom",
+  "systemKind": "communication",
+  "enabled": true,
+  "authentication": {
+    "authType": "credential",
+    "credential": {
+      "credentialKey": "microsoft-copilot-channel",
+      "displayName": "Microsoft Copilot assistant channel",
+      "method": "oauth2",
+      "writeOnce": true,
+      "variables": {
+        "tokenUrl": "https://login.microsoftonline.com/common/oauth2/v2.0/token",
+        "grantType": "client_credentials",
+        "scope": "https://graph.microsoft.com/.default",
+        "baseUrl": "https://graph.microsoft.com/v1.0"
+      },
+      "security": {
+        "clientId": "kv://microsoft-copilot/clientId",
+        "clientSecret": "kv://microsoft-copilot/clientSecret"
+      },
+      "formFields": [
+        { "name": "clientId", "required": true },
+        { "name": "clientSecret", "required": true }
+      ]
+    }
+  },
+  "configuration": [],
+  "dataSources": [],
+  "endpointsActive": false
+}

package/templates/channels/slack/install.template.md.hbs

@@ -1,12 +1,27 @@
-# {{appName}} — assistant channel install
+# {{appName}} — Slack communication channel install
 
 {{appDescription}}
 
-Environment: **{{environment}}** · Credential key: `{{credentialKey}}`
+Environment: **{{environment}}** · Credential key: `{{credentialKey}}` · Command prefix: `{{commandPrefix}}`
+
+One Slack app delivers **Role Assistant** chat, **Work hub** shortcuts, and **document approval**.
+
+**Chat with your assistant:** DM this app (no slash command for Q&A).
+
+## Create the Slack app (workspace admin)
+
+1. Open [Slack API — Your Apps](https://api.slack.com/apps) and sign in as a workspace admin.
+2. Click **Create New App** → **From an app manifest**.
+3. Select your workspace, then paste or upload the generated manifest JSON from `dist/channels/slack/channel-slack.json` (same folder as this file).
+4. Review callback URLs and OAuth scopes — they must match the values in **Platform callback URLs** below.
+5. Confirm **App Home → Messages tab** is **ON** in the manifest (required for bot DMs and proactive notifications; slash commands work without it).
+6. Click **Create**, then open **Install App** → **Install to Workspace** and approve.
+7. Copy **Bot User OAuth Token** and **Signing Secret** from the Slack app settings.
+8. Save **Bot User OAuth Token** and **Signing Secret** in AI Fabrix: [Authentication settings]({{credentialPortalUrl}})
 
 ## Platform callback URLs
 
-Configure these in your Slack app, Teams bot registration, or platform admin console. Do not embed secrets in generated files — use AI Fabrix credential storage only.
+Configure these in your Slack app if you edit settings manually. Do not embed secrets in generated files — use AI Fabrix credential storage only.
 
 {{#if eventsUrl}}
 - **Events:** {{eventsUrl}}
@@ -17,18 +32,27 @@ Configure these in your Slack app, Teams bot registration, or platform admin con
 {{#if commandUrl}}
 - **Slash commands:** {{commandUrl}}
 {{/if}}
-{{#if oauthCallbackUrl}}
-- **OAuth redirect:** {{oauthCallbackUrl}}
-{{/if}}
-{{#if messagesUrl}}
-- **Bot messages:** {{messagesUrl}}
-{{/if}}
-{{#if notificationsUrl}}
-- **Notifications:** {{notificationsUrl}}
-{{/if}}
-{{#if botConfigUrl}}
-- **Bot config:** {{botConfigUrl}}
-{{/if}}
+
+Register these **V1** slash commands in the manifest (all use the same request URL):
+
+| Command | Purpose |
+| --- | --- |
+| `/{{commandPrefix}}-help` | Command help and portal links |
+| `/{{commandPrefix}}-assistants` | See your Role Assistants and chat in DM |
+| `/{{commandPrefix}}-tasks` | Tasks waiting for you — View opens the Work hub |
+| `/{{commandPrefix}}-documents [status] [count]` | Documents waiting for review — Open in portal |
+
+Single-task and single-document detail, plus approve-in-Slack, are **not** registered in the manifest — use list **View** buttons or the portal for full review.
+
+Document review **block actions** use the **Interactivity** URL above.
+
+## Validate after manifest import
+
+1. `/{{commandPrefix}}-help` — returns Block Kit help (proves command is registered and dataplane responds).
+2. `/{{commandPrefix}}-assistants` — Role Assistant status cards or activation offer.
+3. `/{{commandPrefix}}-tasks` — waiting-for-me work items (when Work hub is enabled).
+4. `/{{commandPrefix}}-documents` — document list with **Review in portal** links.
+5. DM the bot — assistant chat.
 
 ## Assistant catalog
 
@@ -36,14 +60,20 @@ Runtime lists **assistants** available to each user from:
 
 {{assistantCatalogUrl}}
 
-## After admin approval
+## After Slack install
 
 ```bash
-aifabrix app add-channel {{channelTarget}} --name "{{baseName}}"
+aifabrix channel add {{channelTarget}} --name "{{baseName}}"
 ```
 
 Optional validation:
 
 ```bash
-aifabrix app add-channel {{channelTarget}} --name "{{baseName}}" --probe
+aifabrix channel add {{channelTarget}} --name "{{baseName}}" --probe
+```
+
+To use a different slash prefix (default `af`):
+
+```bash
+aifabrix channel add {{channelTarget}} --name "{{baseName}}" --command-prefix <key>
 ```

package/templates/channels/slack/integration/README.md

@@ -0,0 +1,38 @@
+# Slack communication channel
+
+Communication external system for **Role Assistants** (workforce transport) **and document approval** — one Slack app, dual surface (plan 455.2).
+
+## What this integration is
+
+- Slack app manifest install (`channel-slack.json` via `aifabrix channel add slack`)
+- **Workforce:** slash commands (`/assistants`, `/tasks`, `/task`), Events API (DM chat), interactive components
+- **Document approval:** slash commands (`/documents`, `/document`, `/approve`, `/help`), review card block actions, proactive notifications
+- **Command SSOT:** `templates/slack/command_catalog.yaml` + Block Kit JSON under `templates/slack/`; optional install prefix (default `af`) registers `/af-*` aliases
+- Outbound CIP: `slack-messages`, `slack-conversations` (workforce replies, DMs, and approval notifications)
+
+## What this integration is not
+
+- **Not** channel listing / user directory sync (`slack-channels`, `slack-users` are out of scope for this scaffold).
+
+## Endpoints
+
+Registered at `/api/v1/external/systems/slack/`:
+
+| Path | Purpose |
+| --- | --- |
+| `/commands` | Slash commands (workforce + document approval) |
+| `/events` | Events API |
+| `/interactive` | Block actions (approve, reject, metadata) |
+| `/notifications` | Proactive messages |
+| `/documents` | Document review Block Kit payload |
+| `/bot-config` | Bot configuration |
+
+## Workflow
+
+```bash
+aifabrix channel scaffold slack   # or use this folder as SSOT
+aifabrix upload slack --force
+aifabrix channel add slack --name "Your Assistant"
+```
+
+Publish template changes: `make sync-json` in dataplane → `aifabrix-builder/templates/channels/slack/integration/`.

package/templates/channels/slack/integration/application.json

@@ -0,0 +1,18 @@
+{
+  "app": {
+    "key": "slack",
+    "displayName": "slack assistant channel",
+    "description": "Assistant communication channel — upload then channel add",
+    "type": "external"
+  },
+  "externalIntegration": {
+    "schemaBasePath": "./",
+    "systems": ["slack-system.json"],
+    "dataSources": [
+      "slack-datasource-messages.json",
+      "slack-datasource-conversations.json"
+    ],
+    "autopublish": true,
+    "version": "1.0.0"
+  }
+}

package/templates/channels/slack/integration/env.template

@@ -0,0 +1,29 @@
+# Slack assistant channel (communication) — lab fixture secrets
+# Copy to integration/slack/.env (or use aifabrix secret set --shared) before deploy/upload.
+#
+# Manifest: integration/slack/slack-system.json
+# Credential key: slack-app (method hmac)
+#
+# Resolution order at deploy: dataplane secret store (POST /api/v1/credential/secret)
+# then KV_* env fallback in the dataplane container.
+#
+# In .env set plain values (not kv:// literals), e.g.:
+#   KV_SLACK_SIGNINGSECRET=<Signing Secret from Slack app Basic Information>
+#   KV_SLACK_BOTTOKEN=xoxb-<Bot User OAuth Token from OAuth & Permissions>
+#   (NOT xapp- app-level tokens — bot tokens always start with xoxb-)
+# Optional OAuth client secret (not required for webhook + bot outbound smoke):
+#   KV_SLACK_CLIENTSECRET=<Client Secret>
+#
+# Shared secrets (Builder CLI, keys without kv:// prefix):
+#   aifabrix secret set slack/signingSecret "<value>" --shared
+#   aifabrix secret set slack/botToken "xoxb-..." --shared
+#   aifabrix secret set slack/clientSecret "<value>" --shared
+
+# Required — webhook signature verification (438.3 inbound)
+KV_SLACK_SIGNINGSECRET=kv://slack/signingSecret
+
+# Required — outbound Slack Web API (post message, etc.)
+KV_SLACK_BOTTOKEN=kv://slack/botToken
+
+# Optional — OAuth app client secret
+KV_SLACK_CLIENTSECRET=kv://slack/clientSecret