@growthub/cli 0.13.9 → 0.14.0

package/assets/worker-kits/growthub-custom-workspace-starter-v1/apps/workspace/app/api/workspace/env-status/route.js

@@ -0,0 +1,31 @@
+/**
+ * GET /api/workspace/env-status
+ *
+ * The honest, secret-safe auth-readiness signal the creation cockpit needs.
+ * Returns the referenced auth/env ref SLUGS that currently resolve to a value
+ * in the server runtime (process.env) — so the api-registry drawer can mark
+ * "auth configured" from real runtime truth instead of guessing. Never returns,
+ * logs, or hashes a value.
+ */
+
+import { NextResponse } from "next/server";
+import { readWorkspaceConfig } from "@/lib/workspace-config";
+import { computeConfiguredEnvRefs, listPersistenceAdapterReadiness } from "@/lib/env-status";
+
+async function GET() {
+  let workspaceConfig = {};
+  try {
+    workspaceConfig = await readWorkspaceConfig();
+  } catch {
+    workspaceConfig = {};
+  }
+  const configuredEnvRefs = computeConfiguredEnvRefs(workspaceConfig, process.env);
+  const persistenceAdapters = listPersistenceAdapterReadiness(process.env);
+  return NextResponse.json({
+    kind: "growthub-env-status-v1",
+    configuredEnvRefs,
+    persistenceAdapters,
+  });
+}
+
+export { GET };

package/assets/worker-kits/growthub-custom-workspace-starter-v1/apps/workspace/app/api/workspace/helper/apply/route.js

@@ -41,9 +41,98 @@ import {
   buildApplyReceipt,
   upsertHelperThreadRow,
 } from "@/lib/workspace-helper-apply";
+import { RESOLVER_PROPOSAL_TYPE, buildResolverProposal, validateResolverProposal } from "@/lib/workspace-resolver-proposal";
+import { writeResolverProposalFile } from "@/lib/server-resolver-write";
 
 const HELPER_APPLY_SOURCE_KEY = "helper:apply:receipts";
 
+function findRegistryRow(config, integrationId) {
+  const id = String(integrationId || "").trim();
+  if (!id) return null;
+  const objects = Array.isArray(config?.dataModel?.objects) ? config.dataModel.objects : [];
+  for (const object of objects) {
+    if (object?.objectType !== "api-registry") continue;
+    const row = (Array.isArray(object.rows) ? object.rows : []).find((candidate) =>
+      String(candidate?.integrationId || "").trim() === id
+    );
+    if (row) return row;
+  }
+  return null;
+}
+
+function findDataSourceForRegistry(config, integrationId) {
+  const id = String(integrationId || "").trim();
+  if (!id) return null;
+  const objects = Array.isArray(config?.dataModel?.objects) ? config.dataModel.objects : [];
+  for (const object of objects) {
+    if (object?.objectType !== "data-source") continue;
+    const row = (Array.isArray(object.rows) ? object.rows : []).find((candidate) =>
+      String(candidate?.registryId || "").trim() === id
+    );
+    if (row) return { object, row };
+  }
+  return null;
+}
+
+function inferRootPathFromLastResponse(lastResponse) {
+  if (!lastResponse) return "";
+  let parsed = lastResponse;
+  if (typeof lastResponse === "string") {
+    try { parsed = JSON.parse(lastResponse); } catch { return ""; }
+  }
+  if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return "";
+  for (const key of ["records", "items", "data", "results", "capabilities"]) {
+    if (Array.isArray(parsed[key])) return key;
+  }
+  return "";
+}
+
+function normalizeResolverProposal(proposal, config) {
+  if (proposal?.type !== RESOLVER_PROPOSAL_TYPE || String(proposal?.code || "").trim()) return proposal;
+  const integrationId = proposal?.payload?.integrationId;
+  const registryRow = findRegistryRow(config, integrationId);
+  if (!registryRow) return proposal;
+  const generated = buildResolverProposal({
+    integrationId: registryRow.integrationId,
+    baseUrl: registryRow.baseUrl,
+    endpoint: registryRow.endpoint,
+    method: registryRow.method,
+    authRef: registryRow.authRef,
+    rootPath: proposal?.payload?.rootPath || inferRootPathFromLastResponse(registryRow.lastResponse),
+    entityType: proposal?.payload?.entityType || registryRow.entityTypes || "records",
+  });
+  return {
+    ...generated,
+    rationale: proposal.rationale || generated.rationale,
+    confidence: proposal.confidence || generated.confidence,
+  };
+}
+
+function normalizeDataModelObjectProposal(proposal, config, fallbackIntegrationId = "") {
+  if (proposal?.type !== "dataModel.object.update" || proposal?.payload?.id) return proposal;
+  const integrationId = proposal?.payload?.registryId || proposal?.payload?.integrationId || fallbackIntegrationId;
+  const target = findDataSourceForRegistry(config, integrationId);
+  if (!target?.object) return proposal;
+  return {
+    ...proposal,
+    payload: {
+      ...proposal.payload,
+      id: target.object.id,
+      sourceId: target.object.sourceId || target.row?.sourceId || target.object.binding?.sourceId || "",
+      binding: {
+        ...(target.object.binding || {}),
+        sourceStorage: target.object.binding?.sourceStorage || target.row?.sourceStorage || "workspace-source-records",
+        sourceId: target.object.binding?.sourceId || target.row?.sourceId || target.object.sourceId || "",
+        registryId: target.object.binding?.registryId || integrationId,
+      },
+    },
+  };
+}
+
+function normalizeApplyProposal(proposal, config, context = {}) {
+  return normalizeDataModelObjectProposal(normalizeResolverProposal(proposal, config), config, context.integrationId);
+}
+
 async function POST(request) {
   let body;
   try {
@@ -78,7 +167,41 @@ async function POST(request) {
   const skipped = [];
   let workingConfig = currentConfig;
 
-  for (const proposal of body.proposals) {
+  // Resolver-file lane (AWaC: server file, NOT a config PATCH field). Handled
+  // separately so it never touches writeWorkspaceConfig and never widens the
+  // PATCH allowlist. Gated by filesystem/read-only; emits a receipt either way.
+  const fallbackIntegrationId = body.proposals
+    .map((proposal) => proposal?.payload?.integrationId || proposal?.payload?.registryId)
+    .find((value) => String(value || "").trim());
+  const normalizedProposals = body.proposals.map((proposal) =>
+    normalizeApplyProposal(proposal, currentConfig, { integrationId: fallbackIntegrationId })
+  );
+  const resolverProposals = normalizedProposals.filter((p) => p?.type === RESOLVER_PROPOSAL_TYPE);
+  const configProposals = normalizedProposals.filter((p) => p?.type !== RESOLVER_PROPOSAL_TYPE);
+
+  for (const proposal of resolverProposals) {
+    const validation = validateResolverProposal(proposal);
+    if (!validation.ok) {
+      skipped.push({ proposal, reason: validation.error || "invalid resolver proposal" });
+      continue;
+    }
+    try {
+      const result = await writeResolverProposalFile(proposal);
+      applied.push({
+        ...buildApplyReceipt(proposal, appliedAt, reviewedBy, sessionId),
+        resolverPath: result.path,
+        resolverFilename: result.filename,
+      });
+    } catch (err) {
+      if (err?.code === "WORKSPACE_PERSISTENCE_READ_ONLY") {
+        skipped.push({ proposal, reason: `read-only runtime — ${err.guidance || "resolver not written"}` });
+      } else {
+        skipped.push({ proposal, reason: err?.message || "resolver write failed" });
+      }
+    }
+  }
+
+  for (const proposal of configProposals) {
     if (
       !proposal ||
       typeof proposal.type !== "string" ||
@@ -113,7 +236,9 @@ async function POST(request) {
   // Patch — collect every affected field from accepted proposals AND
   // append the thread row update (so the user-visible Helper Threads object
   // refreshes in the same atomic write as the proposed mutations).
-  const mutatingApplied = applied.filter((r) => r.type !== "explain.object");
+  // resolver.create writes a server file (affectedField "server-file"), so it
+  // must NOT contribute a field to the config PATCH — exclude it here.
+  const mutatingApplied = applied.filter((r) => r.type !== "explain.object" && r.affectedField !== "server-file");
 
   // Upsert the thread row so audit history reflects this apply turn even
   // when nothing mutated (all skipped / explain-only) and even when the
@@ -129,7 +254,7 @@ async function POST(request) {
     try {
       const existingRows = (workingConfig?.dataModel?.objects || []).find((o) => o?.id === "helper-threads")?.rows || [];
       const existingRow = existingRows.find((r) => r?.id === threadId) || {};
-      const firstProposal = body.proposals?.[0];
+      const firstProposal = normalizedProposals?.[0];
       const seedTitle = existingRow.title
         || (firstProposal?.rationale ? String(firstProposal.rationale).slice(0, 72) : "Helper thread");
 
@@ -192,7 +317,7 @@ async function POST(request) {
         intent: safeIntent,
         prompt: existingRow.prompt || "",
         summary: existingRow.summary || "",
-        proposals: existingRow.proposals || body.proposals || [],
+        proposals: existingRow.proposals || normalizedProposals || [],
         warnings: existingRow.warnings || [],
         receipts: existingRow.receipts || null,
         model: existingRow.model || "external-apply",
@@ -207,7 +332,7 @@ async function POST(request) {
           affectedField: a.affectedField,
           rationale: a.rationale,
           confidence: a.confidence,
-          payload: body.proposals?.[idx]?.payload ?? null,
+          payload: normalizedProposals?.[idx]?.payload ?? null,
         })),
         lastSkipped: skipped.map((s) => ({
           type: s.proposal?.type,

package/assets/worker-kits/growthub-custom-workspace-starter-v1/apps/workspace/app/components/WorkspaceActivationPanel.jsx

@@ -51,6 +51,7 @@ export function WorkspaceActivationPanel({
   workspaceSourceRecords,
   metadataGraph,
   onOpenHelper,
+  onStepAction,
   compact = false,
   showLenses = false,
 }) {
@@ -136,7 +137,22 @@ export function WorkspaceActivationPanel({
                     <span>{step.hint}</span>
                   </p>
                 ) : null}
-                {step.href ? (
+                {step.action && onStepAction ? (
+                  <a
+                    href={`#${step.action}`}
+                    className={
+                      "workspace-activation-step-cta"
+                      + (isNext ? " is-primary" : "")
+                    }
+                    onClick={(event) => {
+                      event.preventDefault();
+                      onStepAction(step);
+                    }}
+                  >
+                    <span>{step.cta || (step.status === "complete" ? "Review" : "Open")}</span>
+                    <ArrowRight size={12} aria-hidden="true" />
+                  </a>
+                ) : step.href ? (
                   <Link
                     href={step.href}
                     className={

package/assets/worker-kits/growthub-custom-workspace-starter-v1/apps/workspace/app/components/WorkspaceHelperSetupModal.jsx

@@ -1,6 +1,7 @@
 "use client";
 
 import { useEffect, useState } from "react";
+import { createPortal } from "react-dom";
 import { X } from "lucide-react";
 
 const HELPER_SANDBOX_OBJECT_ID = "workspace-helper-sandbox";
@@ -185,7 +186,9 @@ function WorkspaceHelperSetupModal({ workspaceConfig, open, onClose, onSaved })
     }
   }
 
-  return (
+  if (typeof document === "undefined") return null;
+
+  return createPortal((
     <div className="workspace-helper-setup-modal-backdrop" role="presentation">
       <div className="workspace-helper-setup-modal" role="dialog" aria-modal="true" aria-label="Set up workspace helper">
         <button type="button" className="workspace-helper-setup-modal-close" onClick={onClose} aria-label="Close setup">
@@ -342,7 +345,7 @@ function WorkspaceHelperSetupModal({ workspaceConfig, open, onClose, onSaved })
         </div>
       </div>
     </div>
-  );
+  ), document.body);
 }
 
 export {

package/assets/worker-kits/growthub-custom-workspace-starter-v1/apps/workspace/app/data-model/components/ApiRegistryCreationCockpit.jsx

@@ -0,0 +1,200 @@
+"use client";
+
+import { useEffect, useState } from "react";
+
+/**
+ * ApiRegistryCreationCockpit — the governed creation interface for one API,
+ * rendered inside the existing api-registry record drawer (DataModelShell).
+ *
+ * Renders the ordered journey from `deriveApiRegistryCreationState`
+ * (lib/api-registry-creation-flow.js) plus, once the API is tested, the response
+ * Shape analysis (`profileApiResponse` / `recommendResolver`) and a receipts log
+ * of real actions. Every actionable step's button calls back into the drawer's
+ * existing governed handlers via `onAction(action)` — status, the highlighted
+ * "next" step, the activation score, and which buttons are live all come from
+ * derivation/real responses, never guessed.
+ *
+ * Visual language is the workspace's own: the `.dm-db-status` chip and `dm-btn-*`
+ * buttons. No invented colors, no new primitive.
+ */
+
+const STEP_STATUS = {
+  complete: { mod: "ok", label: "Done" },
+  active: { mod: "warn", label: "Next" },
+  pending: { mod: "", label: "Pending" },
+  blocked: { mod: "", label: "Blocked" },
+  optional: { mod: "", label: "Optional" },
+};
+
+const RESOLVER_LEVEL = {
+  optional: { mod: "", label: "Resolver optional" },
+  recommended: { mod: "warn", label: "Resolver recommended" },
+  required: { mod: "bad", label: "Resolver required" },
+};
+
+function StatusChip({ mod, children, className = "" }) {
+  return (
+    <span className={`dm-db-status${mod ? ` ${mod}` : ""}${className ? ` ${className}` : ""}`}>
+      <span />
+      {children}
+    </span>
+  );
+}
+
+export function ApiRegistryCreationCockpit({
+  state,
+  onAction,
+  busyAction = "",
+  disabled = false,
+  profile = null,
+  resolverRec = null,
+  receipts = [],
+  dataSourcePreview = null,
+  eyebrow = "Governed creation",
+  defaultCollapsed = false,
+  hideWhenComplete = false,
+  onCollapsedChange,
+}) {
+  const [collapsed, setCollapsed] = useState(defaultCollapsed);
+  useEffect(() => {
+    setCollapsed(defaultCollapsed || Boolean(hideWhenComplete && state?.complete));
+  }, [defaultCollapsed, hideWhenComplete, state?.complete, state?.integrationId]);
+  if (!state || !Array.isArray(state.steps)) return null;
+  if (hideWhenComplete && state.complete) return null;
+  const candidates = profile?.candidates || {};
+  const candidateEntries = Object.entries(candidates).filter(([, v]) => v);
+  const previewRow = dataSourcePreview?.row || null;
+  const toggleCollapsed = () => {
+    const next = !collapsed;
+    setCollapsed(next);
+    onCollapsedChange?.(next);
+  };
+  const runAction = (action) => {
+    if (action?.id === "edit") {
+      setCollapsed(true);
+      onCollapsedChange?.(true);
+    }
+    onAction?.(action);
+  };
+
+  return (
+    <section className={`dm-api-action-card dm-cockpit${collapsed ? " is-collapsed" : ""}`} aria-label="API creation journey">
+      <button
+        type="button"
+        className="dm-cockpit-head"
+        aria-expanded={!collapsed}
+        onClick={toggleCollapsed}
+      >
+        <div className="dm-api-action-card-body">
+          <p className="dm-api-action-card-eyebrow">{eyebrow} · {state.score}% activated</p>
+          <h3>{state.headline}</h3>
+        </div>
+        <span className="dm-cockpit-count">{state.completedCount}/{state.totalCount}</span>
+      </button>
+
+      {!collapsed && <ol className="dm-cockpit-steps">
+        {state.steps.map((step) => {
+          const meta = STEP_STATUS[step.status] || STEP_STATUS.pending;
+          const isNext = step.id === state.nextStepId;
+          const action = step.action;
+          const isBusy = action && busyAction === `${step.id}:${action.id}`;
+          return (
+            <li
+              key={step.id}
+              className={`dm-cockpit-step${isNext ? " dm-cockpit-step-next" : ""}${step.status === "blocked" ? " dm-cockpit-step-muted" : ""}`}
+            >
+              <StatusChip mod={meta.mod} className="dm-cockpit-step-chip">{meta.label}</StatusChip>
+              <div className="dm-cockpit-step-body">
+                <p className="dm-cockpit-step-label">{step.label}</p>
+                <p className="dm-cockpit-step-desc">{step.description}</p>
+                {step.hint ? <p className="dm-cockpit-step-hint">{step.hint}</p> : null}
+              </div>
+              {action ? (
+                <button
+                  type="button"
+                  className={isNext ? "dm-btn-primary-sm" : "dm-btn-outline"}
+                  disabled={disabled || Boolean(busyAction)}
+                  onClick={() => runAction(action)}
+                >
+                  {isBusy ? "Working…" : action.label}
+                </button>
+              ) : null}
+            </li>
+          );
+        })}
+      </ol>}
+
+      {!collapsed && profile && profile.parsed ? (
+        <div className="dm-cockpit-shape">
+          <div className="dm-cockpit-shape-head">
+            <p className="dm-api-action-card-eyebrow">Response shape</p>
+            {resolverRec ? (
+              <StatusChip mod={(RESOLVER_LEVEL[resolverRec.level] || RESOLVER_LEVEL.optional).mod}>
+                {(RESOLVER_LEVEL[resolverRec.level] || RESOLVER_LEVEL.optional).label}
+              </StatusChip>
+            ) : null}
+          </div>
+          <p className="dm-cockpit-step-desc">
+            {profile.usable
+              ? `${profile.recordCount} record${profile.recordCount === 1 ? "" : "s"}${profile.arrayPath ? ` at "${profile.arrayPath}"` : " (top-level)"} · entity "${profile.suggestedEntityType}".`
+              : "No record array detected in the response."}
+          </p>
+          {resolverRec ? <p className="dm-cockpit-step-hint">{resolverRec.reason}</p> : null}
+          {candidateEntries.length ? (
+            <div className="dm-cockpit-fields">
+              {candidateEntries.map(([role, name]) => (
+                <span key={role} className="dm-cockpit-field"><b>{role}</b>{name}</span>
+              ))}
+            </div>
+          ) : null}
+          {profile.hasPagination ? (
+            <p className="dm-cockpit-step-hint">Pagination keys present — a resolver is needed to fetch every page.</p>
+          ) : null}
+        </div>
+      ) : null}
+
+      {!collapsed && previewRow ? (
+        <div className="dm-cockpit-shape">
+          <p className="dm-api-action-card-eyebrow">Data Source preview</p>
+          <p className="dm-cockpit-step-desc">
+            Create will add a live-backed Data Source object that references this API by <code>registryId</code> and writes records to the source-records sidecar. Nothing fetches until you Refresh.
+          </p>
+          <div className="dm-cockpit-fields">
+            <span className="dm-cockpit-field"><b>name</b>{previewRow.Name}</span>
+            <span className="dm-cockpit-field"><b>sourceId</b>{previewRow.sourceId}</span>
+            <span className="dm-cockpit-field"><b>storage</b>{previewRow.sourceStorage}</span>
+            <span className="dm-cockpit-field"><b>entity</b>{previewRow.entityType}</span>
+            <span className="dm-cockpit-field"><b>registryId</b>{previewRow.registryId}</span>
+            {previewRow.authRef ? <span className="dm-cockpit-field"><b>authRef</b>{previewRow.authRef}</span> : null}
+          </div>
+          {Array.isArray(dataSourcePreview.fields) && dataSourcePreview.fields.length ? (
+            <>
+              <p className="dm-cockpit-step-hint">Detected fields it will carry:</p>
+              <div className="dm-cockpit-fields">
+                {dataSourcePreview.fields.slice(0, 10).map((f) => (
+                  <span key={f.name} className="dm-cockpit-field"><b>{f.role || f.type}</b>{f.name}</span>
+                ))}
+              </div>
+            </>
+          ) : null}
+        </div>
+      ) : null}
+
+      {!collapsed && Array.isArray(receipts) && receipts.length ? (
+        <div className="dm-cockpit-receipts">
+          <p className="dm-api-action-card-eyebrow">Receipts</p>
+          <ul>
+            {receipts.slice(0, 6).map((r, i) => (
+              <li key={`${r.at}-${i}`} className="dm-cockpit-receipt">
+                <StatusChip mod={r.ok ? "ok" : "bad"} className="dm-cockpit-receipt-chip">{r.kind}</StatusChip>
+                <span className="dm-cockpit-receipt-text">{r.detail}</span>
+              </li>
+            ))}
+          </ul>
+        </div>
+      ) : null}
+    </section>
+  );
+}
+
+export default ApiRegistryCreationCockpit;