@aifabrix/builder 2.52.1 → 2.53.0

package/scripts/diagnose-cli.js

@@ -1,150 +0,0 @@
-#!/usr/bin/env node
-/* eslint-disable no-console */
-
-/**
- * List every PATH hit for aifabrix / af and each --version (find duplicate installs).
- *
- * @fileoverview CLI path diagnostic for @aifabrix/builder
- */
-
-const { execFileSync, execSync } = require('child_process');
-const fs = require('fs');
-const path = require('path');
-
-/**
- * Reads package.json `bin` field.
- * @returns {Record<string, string>|string} Bin map or single path string
- */
-function readBins() {
-  const pkgPath = path.join(__dirname, '..', 'package.json');
-  const pkg = JSON.parse(fs.readFileSync(pkgPath, 'utf8'));
-  return pkg.bin || { aifabrix: 'bin/aifabrix.js' };
-}
-
-/**
- * Resolves every PATH directory that exposes an executable named `binName`.
- * @param {string} binName - CLI name (e.g. aifabrix)
- * @returns {Array<{ path: string, real: string }>} Deduped hits with real paths
- */
-function locationsOnPath(binName) {
-  if (process.platform === 'win32') {
-    try {
-      const out = execSync(`where ${binName}`, {
-        encoding: 'utf8',
-        stdio: ['ignore', 'pipe', 'ignore']
-      }).trim();
-      return out.split(/\r?\n/).filter(Boolean).map((p) => ({ path: p, real: p }));
-    } catch {
-      return [];
-    }
-  }
-
-  const dirs = (process.env.PATH || '').split(path.delimiter).filter(Boolean);
-  const out = [];
-  const seenReal = new Set();
-  for (const dir of dirs) {
-    const candidate = path.join(dir, binName);
-    try {
-      const st = fs.lstatSync(candidate);
-      if (!st.isFile() && !st.isSymbolicLink()) continue;
-      fs.accessSync(candidate, fs.constants.X_OK);
-      const real = fs.realpathSync(candidate);
-      if (seenReal.has(real)) continue;
-      seenReal.add(real);
-      out.push({ path: candidate, real });
-    } catch {
-      // not found or not executable
-    }
-  }
-  return out;
-}
-
-/**
- * Runs `executablePath --version` and returns stdout or null on failure.
- * @param {string} executablePath - Absolute path to the binary
- * @returns {string|null} Trimmed version output
- */
-function versionAt(executablePath) {
-  try {
-    return execFileSync(executablePath, ['--version'], {
-      encoding: 'utf8',
-      stdio: ['ignore', 'pipe', 'ignore']
-    }).trim();
-  } catch {
-    return null;
-  }
-}
-
-/**
- * Prints PNPM_HOME and npm prefix for debugging PATH issues.
- * @returns {void}
- */
-function printEnvironment() {
-  console.log('Environment (relevant to global CLIs)\n');
-  console.log(`  PNPM_HOME     ${process.env.PNPM_HOME || '(not set)'}`);
-  try {
-    const prefix = execSync('npm config get prefix', {
-      encoding: 'utf8',
-      stdio: ['ignore', 'pipe', 'ignore']
-    }).trim();
-    console.log(`  npm prefix    ${prefix}`);
-  } catch {
-    console.log('  npm prefix    (could not read)');
-  }
-  console.log('');
-}
-
-/**
- * @param {string[]} names - Bin names from package.json
- * @returns {void}
- */
-function printBinReports(names) {
-  for (const name of names) {
-    console.log(`── ${name} ──`);
-    const hits = locationsOnPath(name);
-    if (!hits.length) {
-      console.log('  (not found on PATH)\n');
-      continue;
-    }
-    hits.forEach((h, i) => {
-      const ver = versionAt(h.path);
-      const marker = i === 0 ? '  ← first on PATH (what your shell runs)' : '';
-      console.log(`  [${i + 1}] ${h.path}`);
-      if (h.real !== h.path) console.log(`      → ${h.real}`);
-      console.log(`      --version: ${ver ?? '(failed to run)'}${marker}`);
-    });
-    console.log('');
-  }
-}
-
-/**
- * @param {string[]} names - Bin names from package.json
- * @returns {void}
- */
-function warnIfMultipleVersions(names) {
-  const uniqVersions = new Set();
-  for (const name of names) {
-    for (const h of locationsOnPath(name)) {
-      const v = versionAt(h.path);
-      if (v) uniqVersions.add(v);
-    }
-  }
-  if (uniqVersions.size > 1) {
-    console.log('⚠  Multiple distinct --version values above: remove or reorder PATH so only one install remains.');
-    console.log('   Often: npm uninstall -g @aifabrix/builder, then ensure PNPM_HOME is before /usr/local/bin in PATH.\n');
-  }
-}
-
-/**
- * Entry: list PATH hits and versions for each package bin.
- * @returns {void}
- */
-function main() {
-  const binField = readBins();
-  const names = typeof binField === 'string' ? ['aifabrix'] : Object.keys(binField);
-  printEnvironment();
-  printBinReports(names);
-  warnIfMultipleVersions(names);
-}
-
-main();

package/scripts/docker_image_content_gate.js

@@ -1,47 +0,0 @@
-#!/usr/bin/env node
-/**
- * Fail when a built Docker image contains dev-only paths (plan 154.3).
- *
- * @fileoverview builder-api image content gate
- * @author AI Fabrix Team
- * @version 1.0.0
- */
-
-'use strict';
-
-const { checkImage } = require('./lib/docker-image-content-gate-core');
-
-/**
- * @param {string[]} argv
- * @returns {number}
- */
-function main(argv) {
-  const args = argv.slice(2);
-  if (args.length < 2) {
-    console.error('Usage: docker_image_content_gate.js <image> <profile>');
-    return 1;
-  }
-
-  const [image, profile] = args;
-  try {
-    const violations = checkImage(image, profile);
-    if (violations.length > 0) {
-      console.error(`Image ${image} failed ${profile} content gate:`);
-      for (const path of violations) {
-        console.error(`  - forbidden: ${path}`);
-      }
-      return 1;
-    }
-    console.log(`OK: ${image} passed ${profile} content gate`);
-    return 0;
-  } catch (error) {
-    console.error(`ERROR: ${error.message}`);
-    return 1;
-  }
-}
-
-if (require.main === module) {
-  process.exit(main(process.argv));
-}
-
-module.exports = { main };

package/scripts/docker_image_content_gate.sh

@@ -1,5 +0,0 @@
-#!/usr/bin/env sh
-# Plan 154.3 — verify a built builder-api image does not contain dev-only trees.
-set -eu
-ROOT="$(CDPATH= cd -- "$(dirname "$0")/.." && pwd)"
-exec node "$ROOT/scripts/docker_image_content_gate.js" "$@"

package/scripts/export-builder-api-evidence.js

@@ -1,262 +0,0 @@
-#!/usr/bin/env node
-/**
- * Export builder-api help/knowledge fixtures to Evidence Fabrix v2 bulk-load JSON.
- *
- * @fileoverview One-time / repeatable generator for Role Assistant evidence import
- * @author AI Fabrix Team
- * @version 1.0.0
- */
-
-'use strict';
-
-const fs = require('fs');
-const path = require('path');
-
-const REPO_ROOT = path.join(__dirname, '..');
-const DEFAULT_OUT = path.join(
-  REPO_ROOT,
-  '..',
-  'aifabrix-dataplane',
-  'integration',
-  'builder-api',
-  'builder-api-evidence.json'
-);
-
-const EVIDENCE_PATTERNS = path.join(REPO_ROOT, 'docs', 'builder-help', 'evidence-patterns.json');
-const GOLDEN_DIR = path.join(REPO_ROOT, 'docs', 'builder-help', 'golden-examples');
-const PLATFORM_ROLES = path.join(REPO_ROOT, 'docs', 'builder-help', 'platform-roles.json');
-const RESOURCE_CATALOG = path.join(REPO_ROOT, 'docs', 'builder-help', 'resource-type-catalog.json');
-const HELP_MD_DIR = path.join(REPO_ROOT, 'lib', 'programmatic', 'help-content');
-
-/** @type {Array<{ file: string, resourceType: string, order: number }>} */
-const MD_TOPICS = [
-  { file: 'overview.md', resourceType: 'workspace', order: 10 },
-  { file: 'workflow.md', resourceType: 'workspace', order: 20 },
-  { file: 'subscription-guide.md', resourceType: 'system', order: 30 },
-  { file: 'cip-overview.md', resourceType: 'task', order: 40 },
-  { file: 'dimensions-guide.md', resourceType: 'policy', order: 50 },
-  { file: 'channel-onboarding.md', resourceType: 'channel', order: 60 },
-  { file: 'connected-system-ui.md', resourceType: 'workspace', order: 70 }
-];
-
-/**
- * @param {string} text
- * @returns {string}
- */
-function stripMarkdown(text) {
-  return String(text || '')
-    .replace(/\[([^\]]+)\]\([^)]+\)/g, '$1')
-    .replace(/https?:\/\/[^\s)]+/gi, '')
-    .replace(/^#+\s*/gm, '')
-    .replace(/\s{2,}/g, ' ')
-    .trim();
-}
-
-/**
- * @param {string} fileName
- * @returns {{ title: string, summary: string, body: string }}
- */
-function parseMarkdownTopic(fileName) {
-  const raw = fs.readFileSync(path.join(HELP_MD_DIR, fileName), 'utf8');
-  const lines = raw.split(/\r?\n/);
-  let title = path.basename(fileName, '.md');
-  const bodyLines = [];
-  for (const line of lines) {
-    if (line.startsWith('# ')) {
-      title = stripMarkdown(line.slice(2));
-    } else if (line.trim()) {
-      bodyLines.push(line);
-    }
-  }
-  const body = stripMarkdown(bodyLines.join('\n'));
-  const summary = body.slice(0, 240);
-  return { title, summary, body };
-}
-
-/**
- * @param {Object} row
- * @returns {Object}
- */
-function normalizeRow(row) {
-  const out = {
-    resourceType: String(row.resourceType || 'workspace').trim(),
-    title: String(row.title || '').trim(),
-    when: String(row.when || '').trim(),
-    expectedBehavior: String(row.expectedBehavior || '').trim(),
-    order: Number.isFinite(row.order) ? row.order : 100,
-    status: row.status === 'disabled' ? 'disabled' : 'active'
-  };
-  if (row.roleKey) {
-    out.roleKey = String(row.roleKey).trim();
-  }
-  if (row.description) {
-    out.description = String(row.description).trim();
-  }
-  return out;
-}
-
-/**
- * @returns {Object[]}
- */
-function rowsFromEvidencePatterns() {
-  const doc = JSON.parse(fs.readFileSync(EVIDENCE_PATTERNS, 'utf8'));
-  return (doc.patterns || []).map((p, i) =>
-    normalizeRow({
-      resourceType: p.resourceType || 'document',
-      title: p.title,
-      description: [p.summary, p.role ? `Audience: ${p.role}` : null, (p.steps || []).join(' → ')].filter(Boolean).join(' '),
-      when: p.summary || p.title,
-      expectedBehavior: (p.steps || []).join(' '),
-      order: 100 + i
-    })
-  );
-}
-
-/**
- * @returns {Object[]}
- */
-function rowsFromGoldenExamples() {
-  const rows = [];
-  let order = 200;
-  for (const file of fs.readdirSync(GOLDEN_DIR).sort()) {
-    if (!file.endsWith('.json')) {
-      continue;
-    }
-    const doc = JSON.parse(fs.readFileSync(path.join(GOLDEN_DIR, file), 'utf8'));
-    const traversal = (doc.metadataTraversal || []).join(', ');
-    rows.push(
-      normalizeRow({
-        resourceType: doc.resourceType || 'document',
-        title: `Golden example: ${doc.title || doc.key}`,
-        description: [doc.summary, doc.role ? `Audience: ${doc.role}` : null].filter(Boolean).join(' '),
-        when: `Designing a ${doc.resourceType || 'document'} integration similar to ${doc.key}`,
-        expectedBehavior: [
-          doc.summary,
-          doc.subscriptionGuidance,
-          traversal ? `Traverse sections: ${traversal}` : null,
-          (doc.recommendedSectionKeys || []).length
-            ? `Recommended sections: ${doc.recommendedSectionKeys.join(', ')}`
-            : null
-        ]
-          .filter(Boolean)
-          .join(' '),
-        order: order++
-      })
-    );
-  }
-  return rows;
-}
-
-/**
- * @returns {Object[]}
- */
-function rowsFromMarkdownTopics() {
-  return MD_TOPICS.map((t) => {
-    const parsed = parseMarkdownTopic(t.file);
-    return normalizeRow({
-      resourceType: t.resourceType,
-      title: parsed.title,
-      description: parsed.summary,
-      when: `Agent needs builder-api guidance for ${parsed.title}`,
-      expectedBehavior: parsed.body,
-      order: t.order
-    });
-  });
-}
-
-/**
- * @returns {Object[]}
- */
-function rowsFromPlatformRoles() {
-  const doc = JSON.parse(fs.readFileSync(PLATFORM_ROLES, 'utf8'));
-  const roleLines = (doc.roles || [])
-    .map((r) => `${r.value}: ${r.description}`)
-    .join(' ');
-  return [
-    normalizeRow({
-      resourceType: 'policy',
-      title: 'Platform RBAC roles for facade integrations',
-      description: 'Dataplane platform roles for orchestration facade systems (not per-system admin/reader).',
-      when: 'Patching system.rolesPermissions or repair rbac on a builder-api facade system',
-      expectedBehavior: `Use rbacPreset platform. Allowed roles: ${roleLines}. Avoid {systemKey}-admin or {systemKey}-reader on facade APIs.`,
-      order: 5
-    })
-  ];
-}
-
-/**
- * @returns {Object[]}
- */
-function rowsFromResourceCatalog() {
-  const doc = JSON.parse(fs.readFileSync(RESOURCE_CATALOG, 'utf8'));
-  const byCategory = {};
-  for (const rt of doc.resourceTypes || []) {
-    const cat = rt.category || 'other';
-    if (!byCategory[cat]) {
-      byCategory[cat] = [];
-    }
-    byCategory[cat].push(`${rt.key} (${rt.description})`);
-  }
-  const summary = Object.entries(byCategory)
-    .map(([cat, items]) => `${cat}: ${items.slice(0, 8).join('; ')}`)
-    .join(' ');
-  return [
-    normalizeRow({
-      resourceType: 'document',
-      title: 'Resource type catalog for datasource manifests',
-      description: 'Pick catalog keys that match business semantics; challenge generic placeholders.',
-      when: 'Choosing datasource.resourceType for a new or edited datasource',
-      expectedBehavior: `Compare purpose to catalog entries. Minimum system keys: ${(doc.minimumSystemKeys || []).join(', ')}. Categories: ${summary}`,
-      order: 8
-    })
-  ];
-}
-
-/**
- * @returns {Object[]}
- */
-function rowsFromManifestGuides() {
-  return [
-    normalizeRow({
-      resourceType: 'policy',
-      title: 'Manifest section keys and dependency order',
-      when: 'Agent edits external system or datasource manifest sections',
-      expectedBehavior:
-        'Read one section at a time via manifest section APIs. After metadata or capability patches, run repair hooks for fieldMappings, expose, and rbac. Use dependency graph: downstream sections derive from upstream patches.',
-      order: 15
-    }),
-    normalizeRow({
-      resourceType: 'workspace',
-      title: 'Repair hooks and CLI flag mapping',
-      when: 'Manifest repair is required after structural edits',
-      expectedBehavior:
-        'POST manifest repair with explicit hooks (fieldMappings, expose, rbac, sync, test). Align with repair CLI flags. Validate workspace before upload or certify.',
-      order: 16
-    }),
-    normalizeRow({
-      resourceType: 'workspace',
-      title: 'Section quality and missing inputs',
-      when: 'GET manifest section returns quality.missingInputs',
-      expectedBehavior:
-        'Collect required missing inputs from the user before PATCH. Do not guess values. sectionReadToken from GET is optional on PATCH (server re-reads when omitted; stale token returns 409). Prefer GET when you need quality or missingInputs.',
-      order: 17
-    })
-  ];
-}
-
-function main() {
-  const outPath = path.resolve(process.argv[2] || DEFAULT_OUT);
-  const rows = [
-    ...rowsFromPlatformRoles(),
-    ...rowsFromResourceCatalog(),
-    ...rowsFromMarkdownTopics(),
-    ...rowsFromManifestGuides(),
-    ...rowsFromEvidencePatterns(),
-    ...rowsFromGoldenExamples()
-  ];
-  fs.mkdirSync(path.dirname(outPath), { recursive: true });
-  fs.writeFileSync(outPath, `${JSON.stringify(rows, null, 2)}\n`, 'utf8');
-  process.stdout.write(`Wrote ${rows.length} evidence row(s) to ${outPath}\n`);
-}
-
-main();