@aifabrix/builder 2.53.1 → 2.55.0

package/templates/channels/teams-bot/integration/rbac.json

@@ -0,0 +1,21 @@
+{
+  "roles": [
+    {
+      "name": "Everyone",
+      "value": "aifabrix-everyone",
+      "description": "Authenticated-user consume access for Enterprise LLM and platform search (not a Role Assistant)",
+      "groups": [
+        "AI-Fabrix-Everyone"
+      ]
+    }
+  ],
+  "permissions": [
+    {
+      "name": "teams-bot-activities:create",
+      "roles": [
+        "aifabrix-everyone"
+      ],
+      "description": "Permission: teams-bot-activities:create"
+    }
+  ]
+}

package/templates/channels/teams-bot/integration/teams-bot-datasource-activities.json

@@ -0,0 +1,154 @@
+{
+  "key": "teams-bot-activities",
+  "displayName": "Teams-bot activity inbound",
+  "description": "Inbound Bot Framework activities as python CIP via POST /api/v1/webhooks/teams-bot/teams-bot-activities.",
+  "enabled": true,
+  "systemKey": "teams-bot",
+  "entityType": "serviceContract",
+  "resourceType": "teams-bot-activities",
+  "version": "1.0.0",
+  "metadataSchema": {
+    "type": "object",
+    "properties": {
+      "channel": {
+        "type": "string",
+        "description": "Channel system key"
+      },
+      "action": {
+        "type": "string",
+        "description": "Inbound family (activities)"
+      },
+      "outcome": {
+        "type": "string",
+        "description": "Handler outcome"
+      },
+      "externalId": {
+        "type": "string",
+        "index": true,
+        "description": "Stable inbound family key"
+      }
+    },
+    "required": [
+      "channel",
+      "action",
+      "outcome"
+    ]
+  },
+  "fieldMappings": {
+    "attributes": {
+      "channel": {
+        "expression": "{{raw.channel}}"
+      },
+      "action": {
+        "expression": "{{raw.action}}"
+      },
+      "outcome": {
+        "expression": "{{raw.outcome}}"
+      },
+      "externalId": {
+        "expression": "{{raw.externalId}}"
+      }
+    }
+  },
+  "exposed": {
+    "schema": {
+      "channel": "metadata.channel",
+      "action": "metadata.action",
+      "outcome": "metadata.outcome",
+      "externalId": "metadata.externalId"
+    },
+    "profiles": {
+      "default": [
+        "channel",
+        "action",
+        "outcome",
+        "externalId"
+      ]
+    }
+  },
+  "execution": {
+    "engine": "python",
+    "python": {
+      "entrypoint": "app.services.channels.channel_inbound_handlers.TeamsBotActivitiesInboundHandler"
+    },
+    "cip": {
+      "version": "1.0",
+      "operations": {
+        "create": {
+          "enabled": true,
+          "description": "Inbound activities create. Runtime uses execution.python.entrypoint.",
+          "steps": [
+            {
+              "fetch": {
+                "source": "openapi",
+                "openapiRef": "create",
+                "query": {}
+              }
+            },
+            {
+              "map": {
+                "useFieldMappings": true,
+                "inputPath": "$"
+              }
+            },
+            {
+              "output": {
+                "mode": "records"
+              }
+            }
+          ]
+        }
+      }
+    }
+  },
+  "capabilities": [
+    {
+      "key": "create",
+      "description": "Accept an inbound Bot Framework activity after OIDC validation.",
+      "riskLevel": "medium",
+      "approvalRequired": false
+    }
+  ],
+  "openapi": {
+    "enabled": true,
+    "documentKey": "teams-bot-openapi",
+    "operations": {
+      "create": {
+        "operationId": "teamsBotActivitiesCreate",
+        "method": "POST",
+        "path": "/inbound/activities",
+        "security": [
+          {
+            "oauth2": [
+              "aifabrix-everyone"
+            ]
+          }
+        ]
+      }
+    },
+    "autoRbac": true
+  },
+  "webhook": {
+    "enabled": true,
+    "endpointMode": "datasource",
+    "events": [
+      "create"
+    ]
+  },
+  "testPayload": {
+    "mode": "mock",
+    "payloadTemplate": {
+      "channel": "teams-bot",
+      "action": "activities",
+      "outcome": "ok",
+      "externalId": "activities"
+    },
+    "scenarios": [
+      {
+        "operation": "create",
+        "enabled": true
+      }
+    ]
+  },
+  "businessOrder": 1
+}

package/templates/channels/teams-bot/integration/teams-bot-system.json

@@ -1,7 +1,7 @@
 {
   "key": "teams-bot",
-  "displayName": "Microsoft Teams communication channel",
-  "description": "Teams communication channel — Role Assistants (workforce) and document approval workflows",
+  "displayName": "Microsoft Teams",
+  "description": "Chat with Role Assistants, send notifications, and review documents in Microsoft Teams.",
   "type": "custom",
   "systemKind": "communication",
   "enabled": true,
@@ -22,34 +22,139 @@
         "clientId": "kv://teams-bot/botAppId"
       },
       "formFields": [
-        { "name": "clientId", "required": true }
+        {
+          "name": "clientId",
+          "required": true,
+          "label": "Bot application ID"
+        }
       ]
     }
   },
-  "configuration": [],
-  "dataSources": [],
-  "endpoints": [
+  "authentications": [
     {
-      "type": "messages",
-      "path": "/messages",
-      "router": "teams_bot_router",
-      "description": "Bot Framework messaging endpoint",
-      "active": true
+      "key": "default",
+      "usage": "api",
+      "authType": "credential",
+      "credential": {
+        "credentialKey": "teams-bot",
+        "displayName": "Microsoft Teams assistant bot",
+        "method": "oidc",
+        "writeOnce": true,
+        "variables": {
+          "openIdConfigUrl": "https://login.botframework.com/v1/.well-known/openid_configuration",
+          "expectedIssuer": "https://api.botframework.com",
+          "algorithms": "RS256",
+          "validateSignature": "true"
+        },
+        "security": {
+          "clientId": "kv://teams-bot/botAppId"
+        },
+        "formFields": [
+          {
+            "name": "clientId",
+            "required": true,
+            "label": "Bot application ID"
+          }
+        ]
+      }
     },
     {
-      "type": "notifications",
-      "path": "/notifications",
-      "router": "teams_notifications_router",
-      "description": "Proactive notification endpoint",
-      "active": true
-    },
+      "key": "webhookInbound",
+      "usage": "webhookInbound",
+      "authType": "credential",
+      "credential": {
+        "credentialKey": "teams-bot",
+        "displayName": "Microsoft Teams inbound webhook",
+        "method": "oidc",
+        "writeOnce": true,
+        "variables": {
+          "openIdConfigUrl": "https://login.botframework.com/v1/.well-known/openid_configuration",
+          "expectedIssuer": "https://api.botframework.com",
+          "algorithms": "RS256",
+          "validateSignature": "true"
+        },
+        "security": {
+          "clientId": "kv://teams-bot/botAppId"
+        },
+        "formFields": [
+          {
+            "name": "clientId",
+            "required": true,
+            "label": "Bot application ID"
+          }
+        ]
+      }
+    }
+  ],
+  "configuration": [
+    {
+      "name": "CHANNEL_APP_DESCRIPTION",
+      "value": "Enterprise AI assistant for employees. Approved assistants, enterprise knowledge, workflows, and governed actions via AI Fabrix.",
+      "location": "variable",
+      "required": false,
+      "portalInput": {
+        "field": "textarea",
+        "label": "Description",
+        "placeholder": "Shown to people who connect this app",
+        "validation": {
+          "maxLength": 4000
+        }
+      }
+    }
+  ],
+  "dataSources": [
+    "teams-bot-activities"
+  ],
+  "endpoints": [],
+  "endpointsActive": true,
+  "roles": [
     {
-      "type": "config",
-      "path": "/bot-config",
-      "router": "teams_config_router",
-      "description": "Bot configuration endpoint",
-      "active": true
+      "name": "Everyone",
+      "value": "aifabrix-everyone",
+      "description": "Authenticated-user consume access for Enterprise LLM and platform search (not a Role Assistant)",
+      "groups": [
+        "AI-Fabrix-Everyone"
+      ]
     }
   ],
-  "endpointsActive": true
+  "permissions": [
+    {
+      "name": "teams-bot-activities:create",
+      "roles": [
+        "aifabrix-everyone"
+      ],
+      "description": "Permission: teams-bot-activities:create"
+    }
+  ],
+  "channel": {
+    "definitionKey": "teams-bot",
+    "provisioning": {
+      "mode": "automatic"
+    },
+    "runtimeTarget": {
+      "defaultSystemKey": "runtime-orchestration",
+      "configurable": true
+    },
+    "experimental": false,
+    "profiles": [],
+    "packaging": {
+      "channelType": "teamsBot",
+      "templateDir": "teams-bot",
+      "artifactFileName": "channel-teams-bot.json",
+      "artifactFormat": "json",
+      "credentialKey": "teams-bot",
+      "capabilities": [
+        "chat",
+        "notify",
+        "documentApproval"
+      ],
+      "displayLabel": "Microsoft Teams",
+      "category": "communication",
+      "wizardOrder": 20,
+      "remainingManualStep": "Approve custom app upload or organization publish if your tenant requires it.",
+      "docsAnchor": "teams-bot",
+      "approvalRequired": true,
+      "vendorAuthRequired": true
+    }
+  }
 }

package/templates/channels/web-embed/channel.json

@@ -0,0 +1,60 @@
+{
+  "key": "web-embed",
+  "displayName": "Web embed",
+  "description": "Embed an assistant in your application.",
+  "type": "custom",
+  "systemKind": "communication",
+  "enabled": true,
+  "authentication": {
+    "authType": "system"
+  },
+  "configuration": [
+    {
+      "name": "CHANNEL_APP_DESCRIPTION",
+      "value": "Enterprise AI assistant for employees. Approved assistants, enterprise knowledge, workflows, and governed actions via AI Fabrix.",
+      "location": "variable",
+      "required": false,
+      "portalInput": {
+        "field": "textarea",
+        "label": "Description",
+        "placeholder": "Shown to people who connect this app",
+        "validation": {
+          "maxLength": 4000
+        }
+      }
+    }
+  ],
+  "dataSources": [],
+  "endpointsActive": false,
+  "channel": {
+    "definitionKey": "web-embed",
+    "provisioning": {
+      "mode": "guided"
+    },
+    "runtimeTarget": {
+      "defaultSystemKey": "runtime-orchestration",
+      "configurable": true
+    },
+    "experimental": true,
+    "profiles": [],
+    "packaging": {
+      "channelType": "webEmbed",
+      "templateDir": "web-embed",
+      "artifactFileName": "channel-web-embed.json",
+      "artifactFormat": "json",
+      "credentialKey": "web-embed-channel",
+      "capabilities": [
+        "chat",
+        "notify",
+        "documentApproval"
+      ],
+      "displayLabel": "Web embed",
+      "category": "developer",
+      "wizardOrder": 90,
+      "remainingManualStep": "Embed the generated snippet in your application.",
+      "docsAnchor": "web-embed",
+      "approvalRequired": false,
+      "vendorAuthRequired": false
+    }
+  }
+}

package/templates/channels/web-embed/install.template.md.hbs

@@ -1,4 +1,4 @@
-# {{appName}} — Web embed assistant channel install
+# {{appName}} — Web embed install
 
 {{appDescription}}
 

package/templates/channels/web-embed/integration/README.md

@@ -1,6 +1,6 @@
-# Web embed assistant channel (lab fixture, experimental)
+# Web embed (experimental)
 
-SSOT for `aifabrix channel scaffold web-embed --allow-experimental` templates (`make sync-json` → builder).
+SSOT for `aifabrix channel scaffold web-embed --allow-experimental`. Edit this tree in `aifabrix-builder/templates/channels/web-embed/`.
 
 ```bash
 cd aifabrix-dataplane

package/templates/channels/web-embed/integration/application.json

@@ -1,8 +1,8 @@
 {
   "app": {
     "key": "web-embed",
-    "displayName": "Web embed assistant channel",
-    "description": "Assistant communication channel — deploy then app add-channel",
+    "displayName": "Web embed",
+    "description": "Embed an assistant in your application.",
     "type": "external"
   },
   "externalIntegration": {

package/templates/channels/web-embed/integration/env.template

@@ -1,4 +1,4 @@
-# Web embed assistant channel — lab fixture secrets (experimental channel target)
+# Web embed — lab fixture secrets (experimental)
 # aifabrix secret set web-embed/apiKey "<value>" --shared
 
 KV_WEB_EMBED_APIKEY=kv://web-embed/apiKey

package/templates/channels/web-embed/integration/rbac.json

@@ -0,0 +1,13 @@
+{
+  "roles": [
+    {
+      "name": "Everyone",
+      "value": "aifabrix-everyone",
+      "description": "Authenticated-user consume access for Enterprise LLM and platform search (not a Role Assistant)",
+      "groups": [
+        "AI-Fabrix-Everyone"
+      ]
+    }
+  ],
+  "permissions": []
+}

package/templates/channels/web-embed/integration/web-embed-system.json

@@ -1,14 +1,60 @@
 {
   "key": "web-embed",
-  "displayName": "Web embed assistant channel",
-  "description": "Communication external system for embeddable web assistant channel install",
+  "displayName": "Web embed",
+  "description": "Embed an assistant in your application.",
   "type": "custom",
   "systemKind": "communication",
   "enabled": true,
   "authentication": {
     "authType": "system"
   },
-  "configuration": [],
+  "configuration": [
+    {
+      "name": "CHANNEL_APP_DESCRIPTION",
+      "value": "Enterprise AI assistant for employees. Approved assistants, enterprise knowledge, workflows, and governed actions via AI Fabrix.",
+      "location": "variable",
+      "required": false,
+      "portalInput": {
+        "field": "textarea",
+        "label": "Description",
+        "placeholder": "Shown to people who connect this app",
+        "validation": {
+          "maxLength": 4000
+        }
+      }
+    }
+  ],
   "dataSources": [],
-  "endpointsActive": false
+  "endpointsActive": false,
+  "channel": {
+    "definitionKey": "web-embed",
+    "provisioning": {
+      "mode": "guided"
+    },
+    "runtimeTarget": {
+      "defaultSystemKey": "runtime-orchestration",
+      "configurable": true
+    },
+    "experimental": true,
+    "profiles": [],
+    "packaging": {
+      "channelType": "webEmbed",
+      "templateDir": "web-embed",
+      "artifactFileName": "channel-web-embed.json",
+      "artifactFormat": "json",
+      "credentialKey": "web-embed-channel",
+      "capabilities": [
+        "chat",
+        "notify",
+        "documentApproval"
+      ],
+      "displayLabel": "Web embed",
+      "category": "developer",
+      "wizardOrder": 90,
+      "remainingManualStep": "Embed the generated snippet in your application.",
+      "docsAnchor": "web-embed",
+      "approvalRequired": false,
+      "vendorAuthRequired": false
+    }
+  }
 }

package/templates/python/docker-compose.hbs

@@ -160,6 +160,13 @@ services:
     {{#if devMountPath}}
     volumes:
       - {{devMountPath}}:/app
+      {{#if requiresStorage}}
+      {{#if localDataMountPath}}
+      - {{localDataMountPath}}:/mnt/data
+      {{else}}
+      - {{#if (eq devId 0)}}aifabrix_{{app.key}}_data{{else}}aifabrix_dev{{devId}}_{{app.key}}_data{{/if}}:/mnt/data
+      {{/if}}
+      {{/if}}
     user: "${AIFABRIX_UID:-1000}:${AIFABRIX_GID:-1000}"
     {{/if}}
     depends_on:
@@ -188,6 +195,13 @@ services:
     {{#if devMountPath}}
     volumes:
       - {{devMountPath}}:/app
+      {{#if requiresStorage}}
+      {{#if localDataMountPath}}
+      - {{localDataMountPath}}:/mnt/data
+      {{else}}
+      - {{#if (eq devId 0)}}aifabrix_{{app.key}}_data{{else}}aifabrix_dev{{devId}}_{{app.key}}_data{{/if}}:/mnt/data
+      {{/if}}
+      {{/if}}
     user: "${AIFABRIX_UID:-1000}:${AIFABRIX_GID:-1000}"
     {{/if}}
     depends_on:

package/templates/typescript/docker-compose.hbs

@@ -160,6 +160,13 @@ services:
     {{#if devMountPath}}
     volumes:
       - {{devMountPath}}:/app
+      {{#if requiresStorage}}
+      {{#if localDataMountPath}}
+      - {{localDataMountPath}}:/mnt/data
+      {{else}}
+      - {{#if (eq devId 0)}}aifabrix_{{app.key}}_data{{else}}aifabrix_dev{{devId}}_{{app.key}}_data{{/if}}:/mnt/data
+      {{/if}}
+      {{/if}}
     user: "${AIFABRIX_UID:-1000}:${AIFABRIX_GID:-1000}"
     {{/if}}
     depends_on:
@@ -186,6 +193,13 @@ services:
     {{#if devMountPath}}
     volumes:
       - {{devMountPath}}:/app
+      {{#if requiresStorage}}
+      {{#if localDataMountPath}}
+      - {{localDataMountPath}}:/mnt/data
+      {{else}}
+      - {{#if (eq devId 0)}}aifabrix_{{app.key}}_data{{else}}aifabrix_dev{{devId}}_{{app.key}}_data{{/if}}:/mnt/data
+      {{/if}}
+      {{/if}}
     user: "${AIFABRIX_UID:-1000}:${AIFABRIX_GID:-1000}"
     {{/if}}
     depends_on: