@aifabrix/builder 2.52.0 → 2.53.0

package/lib/programmatic/help-content/enterprise-sync-fabrix.md

@@ -0,0 +1,123 @@
+# Enterprise Synchronization Fabrix
+
+Webhook change signals and syncBridge propagation connect vendor events to governed CIP sync without a separate webhook engine.
+
+## Overview
+
+| Concept | Role |
+| --- | --- |
+| **webhook** | Inbound vendor POST trigger only — records WebhookDelivery and may create SyncIntent |
+| **syncBridge** | Resource-type propagation mode (`disabled`, `master`, `bidirectional`) across datasources |
+| **CIP get** | Business data always loaded via existing get operations and fieldMappings |
+
+Webhook does not carry full record payloads for sync. The coordinator runs CIP get after a valid trigger.
+
+## authentications[] usage slots
+
+Declare multiple authentication slots on the **external system** manifest (`authentications[]`), not on datasource files:
+
+| usage | Purpose |
+| --- | --- |
+| `api` | Outbound vendor API calls (default slot) |
+| `webhookInbound` | Validates inbound vendor webhook signatures or API keys |
+| `syncExecution` | Credentials for syncBridge propagation CIP calls |
+
+Example structure (YAML):
+
+```yaml
+authentications:
+  - key: default
+    usage: api
+    authType: credential
+    credential:
+      method: apikey
+      security:
+        apiKey: kv://my-app/apiKey
+  - key: webhookInbound
+    usage: webhookInbound
+    authType: credential
+    credential:
+      method: hmac
+      security:
+        signingSecret: kv://my-app/webhookSigningSecret
+  - key: syncExecution
+    usage: syncExecution
+    authType: credential
+    credential:
+      method: apikey
+      security:
+        apiKey: kv://my-app/syncApiKey
+```
+
+Repair helpers:
+
+- `aifabrix repair <systemKey>` — normalize legacy `authentication` to `authentications[]`
+- `aifabrix repair <systemKey> --auth apikey` — repair the default **api** slot only
+- `aifabrix repair <systemKey> --auth-webhook` — add webhookInbound slot from template
+- `aifabrix repair <systemKey> --auth-sync` — add syncExecution slot from template
+
+## Datasource webhook block
+
+Minimal enabled configuration on a datasource manifest:
+
+```yaml
+webhook:
+  enabled: true
+  endpointMode: datasource
+  events:
+    - company.updated
+  idPath: $.objectId
+  vendorDeliveryIdPath: $.deliveryId
+```
+
+| Field | Notes |
+| --- | --- |
+| `endpointMode` | `system`, `datasource`, or `event` — controls generated POST path |
+| `events` | Vendor event names that create SyncIntent |
+| `idPath` | JSONPath to vendor object id in payload |
+| `eventTypePath` | Required when multiple `events` and mode is not `event` |
+| `vendorDeliveryIdPath` | Payload JSONPath for idempotent dedupe |
+
+Generated receiver paths (first-party dataplane API):
+
+- System: `POST /api/v1/webhooks/{systemKey}`
+- Datasource: `POST /api/v1/webhooks/{systemKey}/{datasourceKey}`
+- Event: `POST /api/v1/webhooks/{systemKey}/{datasourceKey}/{eventKey}`
+
+Signature and API-key **headers** belong on the webhookInbound credential only — not on the datasource webhook block.
+
+## syncBridge modes
+
+| Mode | Behavior |
+| --- | --- |
+| `disabled` | Default — no propagation |
+| `master` | Authoritative source for a resourceType; receives webhook triggers |
+| `bidirectional` | Participates in propagation; exactly one master per resourceType |
+
+When syncBridge is not `disabled`, ensure `metadataSchema.properties.externalId` exists for routing.
+
+## Activation workflow
+
+1. Edit system + datasource manifests (authentications[], webhook, syncBridge).
+2. Run `aifabrix validate <app>` and `aifabrix repair <systemKey>` as needed.
+3. Run `aifabrix upload <app>` to publish.
+4. Open Connected Systems **Authentication** — add live secrets for each usage slot.
+5. Open datasource **Sync** tab — use **How to activate webhook** for operator copy/paste URLs.
+6. Run certification / test-e2e after credentials are live.
+
+UI displays webhook and syncBridge config as **read-only**; manifest and API remain SSOT.
+
+## Validate and certification
+
+- `aifabrix validate <app>` — schema + cross-field rules for webhook and syncBridge
+- Dataplane certification readiness — webhookInbound auth, idPath, syncBridge master uniqueness
+
+## Logs and troubleshooting
+
+After webhook POST, inspect datasource **Logs** tab for CIP execution traces. SyncIntent and coordinator outcomes appear in execution audit — no separate webhook log API.
+
+## Related help topics
+
+- `connectedSystemUi` — post-upload Authentication and Sync tab URLs
+- `workflow` — validate → upload → handoff ladder
+- `schemaCatalog` — manifest property reference

package/lib/programmatic/help-content/overview.md

@@ -0,0 +1,25 @@
+# Builder manifest editing overview
+
+The Builder API exposes governed manifest sections for external integrations. Agents read one section at a time, resolve missing inputs with the user, patch with explicit intent, repair derived sections, then validate and test the workspace draft.
+
+## Purpose
+
+Help agents and MCP tools bootstrap without guessing manifest structure. Structured topics describe section keys, dependency order, repair hooks, workflow rules, golden patterns, and evidence expectations.
+
+## Core concepts
+
+### Governed sections
+
+Manifests split into section keys for the external system and each datasource. Each section has schema fragments, mutability rules, and optional repair hooks.
+
+### Section quality
+
+Every section read returns a quality score, missing-input questions, blocking issues, and recommended next actions. Required missing inputs must be collected from the user before patching.
+
+### Dependency graph
+
+Some sections derive from others. After patching metadata or capabilities, run explicit repair hooks so field mappings, exposure, and RBAC stay aligned.
+
+## Getting started
+
+Call the help endpoint with topic overview, then workflow, then schemaCatalog or sections. Use topic section with a sectionKey when editing a specific area. Use subscriptionGuide and cipOverview for subscriptions and execution depth. Use enterpriseSyncFabrix for webhook change signals and syncBridge propagation. After upload, use connectedSystemUi for shareable dataplane UI paths and post-upload authentication handoff.

package/lib/programmatic/help-content/subscription-guide.md

@@ -0,0 +1,27 @@
+# Subscription and role-scoped generation guide
+
+Subscriptions on the external system manifest bootstrap platform tasks when records change or after publish. They connect certified datasources to role assistants without a separate workflow engine.
+
+## Where subscriptions live
+
+Edit the system.subscriptions section. Each entry has a unique key, optional filter conditions, a task type, and optional runOnPublish flag.
+
+Datasource manifests may declare subscriptionFilter to scope which role keys, system kinds, resource types, or datasource keys participate in generation.
+
+## Normalized record events
+
+Vendor sync and pipeline execution emit normalized events only: record insert, update, delete, and sync completed. Subscription conditions reference generic field paths such as after.status with operators equals, in, changed, exists, and missing.
+
+## Role and resource scoping
+
+Scope resourceTypes to business tokens on the datasource, such as company or deal, not generic placeholders. Match subscription filters to the same resourceType declared on each datasource.
+
+For document libraries linked to CRM records, declare foreignKeys on the library datasource and use a business resourceType on that datasource. Exclude generic document resource types from role assistant subscription filters when business libraries exist.
+
+## Editing workflow
+
+Read system.subscriptions with topic section before patch. Patch with intent describing the business trigger. Validate after edit; subscriptions do not auto-repair derived sections.
+
+## Related sections
+
+system.subscriptions, system.rolesPermissions, datasource.resourceType, datasource.foreignKeys, datasource.governance

package/lib/programmatic/help-content/workflow.md

@@ -0,0 +1,50 @@
+# Manifest development workflow
+
+Follow this loop when editing external integration manifests through the Builder API.
+
+## Normative loop
+
+Read a governed section, resolve required missing inputs with the user, patch with intent, repair derived sections, validate, then test.
+
+## Rules
+
+### Read before patch
+
+Prefer GET when you need quality scores or `missingInputs`. `sectionReadToken` on PATCH is **optional**: when omitted, the server re-reads the section immediately before write (same race window as CLI `patch-section` without `--token`). If you send a token and it is stale, PATCH returns **409** — GET again and retry.
+
+Do not invent primary keys, entity types, or similar values.
+
+### Ask when inputs are missing
+
+When quality reports required missingInputs, ask the user. Do not invent primary keys, entity types, or similar values.
+
+### Patch requires intent
+
+Every write records audit metadata describing why the change was made.
+
+### Repair is explicit
+
+Pass named repair hooks after patches that affect derived sections. The dependency graph defines downstream order.
+
+### No auto-upload
+
+Upload and certification are separate steps after validate and test succeed.
+
+### Post-upload authentication (enterprise handoff)
+
+Validate, test, test-integration, and upload must not depend on resolved integration secrets in Builder API scope. Upload publishes configuration including `authentication.credential.variables` (non-secrets). The user adds live secrets in the dataplane Connected Systems Authentication UI afterward.
+
+After upload succeeds:
+
+1. Read `authentication.authType` and `authentication.credential.method` from the published system manifest (`system.authentication`).
+2. Confirm non-secret `variables` (baseUrl, headerName, tokenUrl, and similar) were set in the manifest — they are pre-filled in the UI after upload.
+3. Fetch help topic `connectedSystemUi` with `systemKey`, optional `authType`, and optional `credentialMethod`.
+4. Ask the user for their dataplane public UI base (origin including `/data`).
+5. Provide the Authentication URL and tell the user to add **only the required secrets** (for example apiKey token for apikey method).
+6. User adds secrets in the UI, then re-runs E2E or live verification.
+
+Do not instruct the user to paste vendor tokens into Builder API or workspace env files when UI authentication is the intended path.
+
+## Typical sequence
+
+Start with datasource metadata for a new entity. Patch with intent describing the vendor payload mapping. Repair fieldMappings, expose, and rbac hooks. Patch openapiOperations when adding write capabilities. Repair again, validate, then test. Upload when ready, then hand off to Connected Systems Authentication per topic `connectedSystemUi`.

package/lib/programmatic/openapi-component-schemas.js

@@ -21,13 +21,16 @@ const {
   OPENAPI_EVIDENCE_REQUEST_SCHEMAS,
   OPENAPI_EVIDENCE_RESULT_SCHEMAS
 } = require('./openapi-evidence-schemas');
+const { OPENAPI_HELP_RESULT_SCHEMAS } = require('./openapi-help-schemas');
 
 const RESPONSE_ENVELOPES = [
   ['ListSystemsResponse', 'ListSystemsData'],
   ['CreateSystemResponse', 'CreateSystemData'],
+  ['PersistSuppliedOpenApiResponse', 'PersistSuppliedOpenApiData'],
   ['SystemManifestResponse', 'SystemManifestData'],
   ['DeleteSystemResponse', 'DeleteSystemData'],
   ['WizardRunResponse', 'WizardRunData'],
+  ['IntegrationDefinitionApplyResponse', 'IntegrationDefinitionApplyData'],
   ['RepairResultResponse', 'RepairResultData'],
   ['ValidateResultResponse', 'ValidateResultData'],
   ['PreviewUploadResponse', 'PreviewUploadData'],
@@ -51,7 +54,8 @@ const RESPONSE_ENVELOPES = [
   ['EvidenceAuthoringMetadataResponse', 'EvidenceAuthoringMetadataData'],
   ['EvidenceDownloadResponse', 'EvidenceDownloadData'],
   ['EvidenceUploadResponse', 'EvidenceUploadData'],
-  ['EvidenceActivateResponse', 'EvidenceActivateData']
+  ['EvidenceActivateResponse', 'EvidenceActivateData'],
+  ['BuilderHelpResponse', 'BuilderHelpData']
 ];
 
 /**
@@ -70,6 +74,7 @@ function buildOpenApiComponentSchemas() {
     ...OPENAPI_APPLY_RESULT_SCHEMAS,
     ...OPENAPI_MANIFEST_RESULT_SCHEMAS,
     ...OPENAPI_EVIDENCE_RESULT_SCHEMAS,
+    ...OPENAPI_HELP_RESULT_SCHEMAS,
     EmptyResultData: { type: 'object', properties: {}, additionalProperties: false },
     ...envelopes
   });
@@ -78,6 +83,7 @@ function buildOpenApiComponentSchemas() {
 module.exports = {
   buildOpenApiComponentSchemas,
   buildSuccessEnvelopeSchema,
+  RESPONSE_ENVELOPES,
   OPENAPI_REQUEST_SCHEMAS,
   OPENAPI_RESULT_SCHEMAS
 };

package/lib/programmatic/openapi-descriptions.js

@@ -22,6 +22,12 @@ const OPERATION_DESCRIPTIONS = Object.freeze({
       'Create an empty integration workspace for a systemKey. Mutating; requires Idempotency-Key on retries.',
     tags: ['workspace']
   },
+  persistSuppliedOpenApi: {
+    summary: 'Persist supplied OpenAPI documents to workspace',
+    description:
+      'Validate Runtime-authorized OpenAPI documents and write them under integration/<systemKey>/openapi/. Does not run wizard or BID apply. Mutating.',
+    tags: ['workspace']
+  },
   getSystemManifest: {
     summary: 'Read workspace manifest summary',
     description: 'Return local workspace metadata and file manifest for one systemKey. Read-only.',
@@ -39,6 +45,12 @@ const OPERATION_DESCRIPTIONS = Object.freeze({
       'Run headless wizard to materialize system and datasource JSON under the workspace. Mutating; may take up to MAX_REQUEST_TIMEOUT_MS. Retry with the same Idempotency-Key.',
     tags: ['build']
   },
+  applyIntegrationDefinition: {
+    summary: 'Apply Builder Integration Definition (BID) into workspace',
+    description:
+      'Materialize system and datasource package files from an aifabrix.builder.integrationDefinition document. Prefer this over wizard when OpenAPI is not yet available. Mutating; retry with the same Idempotency-Key.',
+    tags: ['build']
+  },
   runRepair: {
     summary: 'Repair workspace manifest drift',
     description:
@@ -194,6 +206,12 @@ const OPERATION_DESCRIPTIONS = Object.freeze({
     description: 'Returns ready with configured dataplaneUrl. Does not verify Dataplane connectivity in V1.',
     tags: ['infra']
   },
+  getBuilderHelp: {
+    summary: 'LLM help topics',
+    description:
+      'Deterministic product help for agents (no tenant data). Required topic enum includes resourceTypeCatalog for BID resourceType keys. No authentication.',
+    tags: ['help']
+  },
   getEvidenceMetadata: {
     summary: 'Evidence authoring metadata',
     description:
@@ -217,6 +235,34 @@ const OPERATION_DESCRIPTIONS = Object.freeze({
     description:
       'Activate one or many human-approved certified Evidence ids. Organizational gate after technical certification. Mutating; use Idempotency-Key.',
     tags: ['evidence']
+  },
+  buildChannelPackage: {
+    summary: 'Build channel package',
+    description:
+      'Build vendor channel package from External AI Discovery plus optional workspace branding. Returns summary, README/ZIP links, and installReady. Mutating.',
+    tags: ['channel']
+  },
+  getChannelPackageSummary: {
+    summary: 'Get channel package summary',
+    description: 'Return last built channel package summary and README/ZIP links. Read-only.',
+    tags: ['channel']
+  },
+  getChannelPackageZip: {
+    summary: 'Download channel package ZIP',
+    description:
+      'Return the built app package as zipBase64 (application/zip). Build package first. Read-only.',
+    tags: ['channel']
+  },
+  getChannelBranding: {
+    summary: 'Get channel branding',
+    description: 'Return optional workspace branding (displayName, description, icon paths). Read-only.',
+    tags: ['channel']
+  },
+  patchChannelBranding: {
+    summary: 'Patch channel branding',
+    description:
+      'Update optional package branding overrides stored in the Builder API workspace. Mutating.',
+    tags: ['channel']
   }
 });
 

package/lib/programmatic/openapi-envelope-examples.js

@@ -0,0 +1,280 @@
+/**
+ * Minimal valid `data` examples for builder-api success envelopes (OAPI-136).
+ *
+ * @fileoverview Envelope data examples keyed by data schema name
+ * @author AI Fabrix Team
+ * @version 1.0.0
+ */
+
+'use strict';
+
+const SAMPLE_SYSTEM_KEY = 'hubspot-demo';
+const SAMPLE_DATASOURCE_KEY = 'hubspot-demo-companies';
+const SAMPLE_UUID = '00000000-0000-4000-8000-000000000010';
+const SAMPLE_ISO = '2026-01-15T12:00:00.000Z';
+
+const SAMPLE_META = {
+  ownerUserId: 'user-demo',
+  systemKey: SAMPLE_SYSTEM_KEY,
+  createdAt: SAMPLE_ISO,
+  lastModifiedAt: SAMPLE_ISO,
+  lastOperation: 'validate'
+};
+
+const SAMPLE_QUALITY = {
+  score: 100,
+  blockingIssues: [],
+  warnings: [],
+  missingInputs: [],
+  assumptions: []
+};
+
+const SAMPLE_MCP_RESULT = {
+  success: true,
+  status: 'ok',
+  message: 'completed'
+};
+
+const SAMPLE_SYSTEM_MANIFEST = {
+  systemKey: SAMPLE_SYSTEM_KEY,
+  meta: SAMPLE_META,
+  files: [{ path: 'application.json', isDirectory: false, sizeBytes: 128, redacted: false }]
+};
+
+const SAMPLE_VALIDATION_STEP = {
+  valid: true,
+  errors: [],
+  warnings: []
+};
+
+/** @type {Record<string, Object>} */
+const OPENAPI_ENVELOPE_DATA_EXAMPLES = {
+  HealthData: { status: 'ok' },
+  ReadyData: { status: 'ready', dataplaneUrl: 'http://localhost:3601' },
+  BuilderHelpData: {
+    version: '1.0.0',
+    schemaVersion: '1.0.0',
+    topic: 'resourceTypeCatalog',
+    key: 'all',
+    title: 'Resource type catalog',
+    summary: 'Taxonomy-only catalog keys for datasource.resourceType.',
+    data: {
+      schemaVersion: '1.0.0',
+      minimumSystemKeys: ['customer'],
+      resourceTypes: [
+        {
+          key: 'customer',
+          displayName: 'Customer',
+          description: 'Customer organization.',
+          category: 'business',
+          defaultRiskLevel: 'medium',
+          status: 'active'
+        }
+      ]
+    },
+    related: ['schemaCatalog'],
+    recommendedNext: ['topic=section&sectionKey=datasource.resourceType']
+  },
+  EmptyResultData: {},
+  ListSystemsData: { systems: [{ systemKey: SAMPLE_SYSTEM_KEY, meta: SAMPLE_META }] },
+  CreateSystemData: { systemKey: SAMPLE_SYSTEM_KEY, meta: SAMPLE_META },
+  PersistSuppliedOpenApiData: {
+    accepted: [
+      {
+        filename: 'companies.json',
+        path: `integration/${SAMPLE_SYSTEM_KEY}/openapi/companies.json`,
+        digest: 'sha256:demo'
+      }
+    ],
+    rejected: [],
+    workspaceRoot: '/workspace/integration'
+  },
+  SystemManifestData: SAMPLE_SYSTEM_MANIFEST,
+  DeleteSystemData: { systemKey: SAMPLE_SYSTEM_KEY, deleted: true },
+  WizardRunData: { systemKey: SAMPLE_SYSTEM_KEY, status: 'completed' },
+  IntegrationDefinitionApplyData: {
+    status: 'updated',
+    systemKey: SAMPLE_SYSTEM_KEY,
+    outputDir: `/workspace/integration/${SAMPLE_SYSTEM_KEY}`,
+    definitionId: 'bid-demo',
+    definitionHash: 'sha256:demo',
+    packageVersion: '1.0.0',
+    files: ['application.json']
+  },
+  RepairResultData: {
+    updated: true,
+    changes: ['synced dataSources'],
+    warnings: [],
+    changedFiles: ['application.json']
+  },
+  ValidateResultData: {
+    validationResult: {
+      valid: true,
+      errors: [],
+      warnings: [],
+      steps: {
+        application: SAMPLE_VALIDATION_STEP,
+        components: SAMPLE_VALIDATION_STEP,
+        manifest: SAMPLE_VALIDATION_STEP
+      }
+    },
+    pipelineValidation: null
+  },
+  PreviewUploadData: {
+    manifest: { key: SAMPLE_SYSTEM_KEY, version: '1.0.0', type: 'external' },
+    payload: {
+      version: '1.0.0',
+      application: { key: SAMPLE_SYSTEM_KEY, displayName: 'Demo', type: 'external' },
+      dataSources: [{ key: SAMPLE_DATASOURCE_KEY }]
+    }
+  },
+  UploadResultData: {
+    dataplaneUrl: 'http://localhost:3601',
+    environment: 'dev',
+    uploadSkipped: false
+  },
+  DeployResultData: {
+    deployed: true,
+    deploymentId: SAMPLE_UUID,
+    environment: 'dev',
+    systemKey: SAMPLE_SYSTEM_KEY
+  },
+  ProtectionUploadData: {
+    datasourceKey: SAMPLE_DATASOURCE_KEY,
+    uploaded: true,
+    dryRun: false
+  },
+  ProtectionCreateData: {
+    datasourceKey: SAMPLE_DATASOURCE_KEY,
+    created: true,
+    dryRun: false
+  },
+  TestResultData: {
+    runType: 'unit',
+    valid: true,
+    errors: [],
+    warnings: [],
+    systemResults: [{ file: 'hubspot-demo-system.json', valid: true, errors: [] }],
+    datasourceResults: [
+      {
+        key: SAMPLE_DATASOURCE_KEY,
+        file: 'hubspot-demo-datasource-companies.json',
+        valid: true,
+        errors: [],
+        warnings: []
+      }
+    ],
+    systemKey: SAMPLE_SYSTEM_KEY,
+    appName: SAMPLE_SYSTEM_KEY
+  },
+  CertifyResultData: {
+    command: 'verify-operations',
+    systemKey: SAMPLE_SYSTEM_KEY,
+    verdict: 'VERIFIED',
+    operationalReadinessPercent: 100,
+    certification: { level: 'SILVER', status: 'AI_READY' },
+    warnings: [],
+    details: [],
+    stepResults: []
+  },
+  LifecycleReportData: {
+    systemKey: SAMPLE_SYSTEM_KEY,
+    certification: { level: 'SILVER', status: 'AI_READY' },
+    operationalReadinessPercent: 100,
+    summary: true,
+    details: false
+  },
+  EnterpriseMcpInvocationData: {
+    capabilityKey: 'repository.status',
+    result: SAMPLE_MCP_RESULT
+  },
+  WorkspaceStatusData: {
+    local: SAMPLE_SYSTEM_MANIFEST,
+    remote: null
+  },
+  RepositoryStatusData: {
+    capabilityKey: 'repository.status',
+    result: SAMPLE_MCP_RESULT
+  },
+  ManifestSectionViewData: {
+    sectionKey: 'system.authentication',
+    target: 'system',
+    datasourceKey: null,
+    currentValue: {},
+    schemaFragment: {},
+    required: true,
+    mutable: true,
+    sourceOfTruth: true,
+    dependencyGraph: { downstreamFromThis: [] },
+    repairHooks: [],
+    recommendedNextActions: [],
+    sectionReadToken: SAMPLE_UUID,
+    quality: SAMPLE_QUALITY
+  },
+  ManifestPatchResultData: {
+    sectionKey: 'system.authentication',
+    datasourceKey: null,
+    intent: 'align auth method',
+    changedPaths: ['authentication.method'],
+    beforeHash: 'sha256:before',
+    afterHash: 'sha256:after',
+    derivedSectionsAffected: [],
+    repairRecommended: false,
+    repairHooks: [],
+    validationPreview: {},
+    riskHints: [],
+    nextActions: [],
+    dryRun: false,
+    quality: SAMPLE_QUALITY
+  },
+  ManifestSectionsListData: {
+    systemKey: SAMPLE_SYSTEM_KEY,
+    sections: [{ sectionKey: 'system.authentication', target: 'system' }],
+    datasourceKeys: [SAMPLE_DATASOURCE_KEY]
+  },
+  ManifestRepairResultData: {
+    hooksRun: ['sync-datasources'],
+    derivedSectionsUpdated: [],
+    repairResult: {},
+    dryRun: false,
+    quality: SAMPLE_QUALITY
+  },
+  EvidenceAuthoringMetadataData: {
+    roleKey: 'aifabrix-business-transformation',
+    evidenceKinds: [],
+    aspects: [],
+    resourceTypes: [],
+    assistantCapabilities: [],
+    writableFields: [],
+    requiredFields: [],
+    constraints: {
+      certification: {},
+      activation: { requiresCertified: true, requiresAuthority: false }
+    }
+  },
+  EvidenceDownloadData: {
+    roleKey: 'aifabrix-business-transformation',
+    count: 0,
+    data: []
+  },
+  EvidenceUploadData: {
+    roleKey: 'aifabrix-business-transformation',
+    inserted: 0,
+    updated: 0,
+    accepted: [],
+    rejected: [],
+    warnings: [],
+    certified: [],
+    readyToActivate: false
+  },
+  EvidenceActivateData: {
+    requested: 0,
+    activated: [],
+    failed: [],
+    success: true
+  }
+};
+
+module.exports = {
+  OPENAPI_ENVELOPE_DATA_EXAMPLES
+};

package/lib/programmatic/openapi-operation-bindings.js

@@ -81,6 +81,11 @@ const OPERATION_BINDINGS = Object.freeze({
     requestBody: jsonRequestBody('CreateSystemRequest', true),
     successResponse: 'CreateSystemResponse'
   },
+  persistSuppliedOpenApi: {
+    parameters: [SYSTEM_KEY_PARAM],
+    requestBody: jsonRequestBody('PersistSuppliedOpenApiRequest', true),
+    successResponse: 'PersistSuppliedOpenApiResponse'
+  },
   getSystemManifest: {
     parameters: [SYSTEM_KEY_PARAM],
     successResponse: 'SystemManifestResponse'
@@ -103,6 +108,11 @@ const OPERATION_BINDINGS = Object.freeze({
     requestBody: jsonRequestBody('WizardConfigRequest', true),
     successResponse: 'WizardRunResponse'
   },
+  applyIntegrationDefinition: {
+    parameters: [SYSTEM_KEY_PARAM],
+    requestBody: jsonRequestBody('IntegrationDefinitionApplyRequest', true),
+    successResponse: 'IntegrationDefinitionApplyResponse'
+  },
   runRepair: {
     parameters: [SYSTEM_KEY_PARAM],
     queryParameters: [
@@ -275,6 +285,46 @@ const OPERATION_BINDINGS = Object.freeze({
   ready: {
     successResponse: 'ReadyResponse'
   },
+  getBuilderHelp: {
+    queryParameters: [
+      {
+        name: 'topic',
+        in: 'query',
+        required: true,
+        schema: { $ref: '#/components/schemas/BuilderHelpTopic' },
+        description: 'Help topic. Use resourceTypeCatalog for taxonomy keys agents may set on BID datasources.'
+      },
+      {
+        name: 'sectionKey',
+        in: 'query',
+        required: false,
+        schema: { type: 'string' },
+        description: 'Required when topic=section.'
+      },
+      {
+        name: 'exampleKey',
+        in: 'query',
+        required: false,
+        schema: { type: 'string' },
+        description: 'Required when topic=goldenExample.'
+      },
+      {
+        name: 'category',
+        in: 'query',
+        required: false,
+        schema: { type: 'string' },
+        description: 'Optional filter for topic=resourceTypeCatalog.'
+      },
+      {
+        name: 'resourceType',
+        in: 'query',
+        required: false,
+        schema: { type: 'string' },
+        description: 'Optional key filter for resourceTypeCatalog or schemaCatalog target.'
+      }
+    ],
+    successResponse: 'BuilderHelpResponse'
+  },
   getEvidenceMetadata: {
     parameters: [ROLE_KEY_PARAM],
     successResponse: 'EvidenceAuthoringMetadataResponse'