@igstack/app-catalog-backend-core 0.3.1-alpha-20260403020019 → 0.3.1-alpha-20260405015231

package/dist/modules/lighthouseKeeper/tools.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"tools.mjs","names":[],"sources":["../../../src/modules/lighthouseKeeper/tools.ts"],"sourcesContent":["import type { Tool } from 'ai'\nimport { z } from 'zod'\nimport { PrismaClient } from '../../generated/prisma/client'\nimport { PrismaPg } from '@prisma/adapter-pg'\nimport pg from 'pg'\nimport type { AcDatabaseConfig } from '../../middleware/types.js'\n\n// ============================================================================\n// Database URL Helper\n// ============================================================================\n\nfunction getDatabaseUrl(config: AcDatabaseConfig): string {\n  if ('url' in config) return config.url\n  const { host, port, database, username, password, schema } = config\n  const schemaParam = schema ? `?schema=${schema}` : ''\n  return `postgresql://${username}:${password}@${host}:${port}/${database}${schemaParam}`\n}\n\n// ============================================================================\n// AI Tools for App Catalog\n// ============================================================================\n\n/**\n * Create AI tools for working with app catalog cards.\n * These tools allow the AI to fetch and inspect app information.\n */\nexport function createAppCatalogAITools(\n  databaseConfig: AcDatabaseConfig,\n): Record<string, Tool> {\n  const databaseUrl = getDatabaseUrl(databaseConfig)\n  const pool = new pg.Pool({ connectionString: databaseUrl })\n  const adapter = new PrismaPg(pool)\n  const prisma = new PrismaClient({ adapter })\n\n  const getAppCardSchema = z.object({\n    slug: z.string().describe('The app slug to fetch'),\n  })\n\n  type GetAppCardInput = z.infer<typeof getAppCardSchema>\n\n  const getAppCard: Tool<GetAppCardInput, unknown> = {\n    description:\n      'Fetch complete app catalog card information by ID. Returns title, description, tags, access request details, links, and all other app metadata.',\n    inputSchema: getAppCardSchema,\n    execute: async ({ slug }: { slug: string }) => {\n      try {\n        const app = await prisma.dbAppForCatalog.findUnique({\n          where: { slug },\n          include: {\n            sourceRefs: true,\n          },\n        })\n\n        if (!app) {\n          return { error: `App not found with slug: ${slug}` }\n        }\n\n        // Return structured card data\n        return {\n          success: true,\n          card: {\n            id: app.id,\n            slug: app.slug,\n            displayName: app.displayName,\n            description: app.description,\n            teams: app.teams,\n            tags: app.tags,\n            appUrl: app.appUrl,\n            links: app.links,\n            iconName: app.iconName,\n            sources: app.sourceRefs.map((ref) => ref.url),\n            notes: app.notes,\n            accessRequest: app.accessRequest,\n            deprecated: app.deprecated,\n            createdAt: app.createdAt,\n            updatedAt: app.updatedAt,\n          },\n        }\n      } catch (error) {\n        return {\n          error: error instanceof Error ? error.message : 'Failed to fetch app',\n        }\n      }\n    },\n  }\n\n  return {\n    getAppCard,\n  }\n}\n\n// ============================================================================\n// System Prompt\n// ============================================================================\n\n/**\n * Default system prompt for AI working with app catalog cards.\n * Use this when configuring lighthouseKeeper for card updates.\n */\nexport const APP_CATALOG_AI_SYSTEM_PROMPT = `You are an assistant that helps update app catalog cards based on information from provided links.\n\nWhen given a link and an app ID:\n1. Use getAppCard to fetch the current card information\n2. Analyze the provided link for relevant information\n3. Output a new card structure with updated information based on the link\n\nReturn the updated card as a structured JSON object matching the card format:\n- displayName: App title\n- description: Full description\n- tags: Array of tags\n- teams: Array of team names\n- appUrl: Main application URL\n- links: Array of {url, title} objects for related links\n- sources: Array of source URLs (documentation, Confluence pages, etc.)\n- accessRequest: Object with approvalMethodId, comments, requestPrompt, postApprovalInstructions, roles, approvers, urls, whoToReachOut\n- notes: Additional notes\n- deprecated: Optional deprecation info with type, replacementSlug, comment\n\nDo NOT save the card to the database. Only output the updated structure.`\n"],"mappings":";;;;;;AAWA,SAAS,eAAe,QAAkC;AACxD,KAAI,SAAS,OAAQ,QAAO,OAAO;CACnC,MAAM,EAAE,MAAM,MAAM,UAAU,UAAU,UAAU,WAAW;AAE7D,QAAO,gBAAgB,SAAS,GAAG,SAAS,GAAG,KAAK,GAAG,KAAK,GAAG,WAD3C,SAAS,WAAW,WAAW;;;;;;AAYrD,SAAgB,wBACd,gBACsB;CACtB,MAAM,cAAc,eAAe,eAAe;CAGlD,MAAM,SAAS,IAAI,aAAa,EAAE,SADlB,IAAI,SADP,IAAI,GAAG,KAAK,EAAE,kBAAkB,aAAa,CAAC,CACzB,EACS,CAAC;AAsD5C,QAAO,EACL,YA/CiD;EACjD,aACE;EACF,aATuB,EAAE,OAAO,EAChC,MAAM,EAAE,QAAQ,CAAC,SAAS,wBAAwB,EACnD,CAAC;EAQA,SAAS,OAAO,EAAE,WAA6B;AAC7C,OAAI;IACF,MAAM,MAAM,MAAM,OAAO,gBAAgB,WAAW;KAClD,OAAO,EAAE,MAAM;KACf,SAAS,EACP,YAAY,MACb;KACF,CAAC;AAEF,QAAI,CAAC,IACH,QAAO,EAAE,OAAO,4BAA4B,QAAQ;AAItD,WAAO;KACL,SAAS;KACT,MAAM;MACJ,IAAI,IAAI;MACR,MAAM,IAAI;MACV,aAAa,IAAI;MACjB,aAAa,IAAI;MACjB,OAAO,IAAI;MACX,MAAM,IAAI;MACV,QAAQ,IAAI;MACZ,OAAO,IAAI;MACX,UAAU,IAAI;MACd,SAAS,IAAI,WAAW,KAAK,QAAQ,IAAI,IAAI;MAC7C,OAAO,IAAI;MACX,eAAe,IAAI;MACnB,YAAY,IAAI;MAChB,WAAW,IAAI;MACf,WAAW,IAAI;MAChB;KACF;YACM,OAAO;AACd,WAAO,EACL,OAAO,iBAAiB,QAAQ,MAAM,UAAU,uBACjD;;;EAGN,EAIA;;;;;;AAWH,MAAa,+BAA+B"}
+{"version":3,"file":"tools.mjs","names":[],"sources":["../../../src/modules/lighthouseKeeper/tools.ts"],"sourcesContent":["import type { Tool } from 'ai'\nimport { z } from 'zod'\nimport { PrismaClient } from '../../generated/prisma/client'\nimport { PrismaPg } from '@prisma/adapter-pg'\nimport pg from 'pg'\nimport type { AcDatabaseConfig } from '../../middleware/types.js'\n\n// ============================================================================\n// Database URL Helper\n// ============================================================================\n\nfunction getDatabaseUrl(config: AcDatabaseConfig): string {\n  if ('url' in config) return config.url\n  const { host, port, database, username, password, schema } = config\n  const schemaParam = schema ? `?schema=${schema}` : ''\n  return `postgresql://${username}:${password}@${host}:${port}/${database}${schemaParam}`\n}\n\n// ============================================================================\n// AI Tools for App Catalog\n// ============================================================================\n\n/**\n * Create AI tools for working with app catalog cards.\n * These tools allow the AI to fetch and inspect app information.\n */\nexport function createAppCatalogAITools(\n  databaseConfig: AcDatabaseConfig,\n): Record<string, Tool> {\n  const databaseUrl = getDatabaseUrl(databaseConfig)\n  const pool = new pg.Pool({ connectionString: databaseUrl })\n  const adapter = new PrismaPg(pool)\n  const prisma = new PrismaClient({ adapter })\n\n  const getAppCardSchema = z.object({\n    slug: z.string().describe('The app slug to fetch'),\n  })\n\n  type GetAppCardInput = z.infer<typeof getAppCardSchema>\n\n  const getAppCard: Tool<GetAppCardInput, unknown> = {\n    description:\n      'Fetch complete app catalog card information by ID. Returns title, description, tags, access request details, links, and all other app metadata.',\n    inputSchema: getAppCardSchema,\n    execute: async ({ slug }: { slug: string }) => {\n      try {\n        const app = await prisma.dbAppForCatalog.findUnique({\n          where: { slug },\n          include: {\n            sourceRefs: true,\n          },\n        })\n\n        if (!app) {\n          return { error: `App not found with slug: ${slug}` }\n        }\n\n        // Return structured card data\n        return {\n          success: true,\n          card: {\n            id: app.id,\n            slug: app.slug,\n            displayName: app.displayName,\n            description: app.description,\n            teams: app.teams,\n            tags: app.tags,\n            appUrl: app.appUrl,\n            links: app.links,\n            iconName: app.iconName,\n            sources: app.sourceRefs.map((ref) => ref.url),\n            notes: app.notes,\n            accessRequest: app.accessRequest,\n            deprecated: app.deprecated,\n            createdAt: app.createdAt,\n            updatedAt: app.updatedAt,\n          },\n        }\n      } catch (error) {\n        return {\n          error: error instanceof Error ? error.message : 'Failed to fetch app',\n        }\n      }\n    },\n  }\n\n  return {\n    getAppCard,\n  }\n}\n\n// ============================================================================\n// System Prompt\n// ============================================================================\n\n/**\n * Default system prompt for AI working with app catalog cards.\n * Use this when configuring lighthouseKeeper for card updates.\n */\nexport const APP_CATALOG_AI_SYSTEM_PROMPT = `You are an assistant that helps update app catalog cards based on information from provided links.\n\nWhen given a link and an app ID:\n1. Use getAppCard to fetch the current card information\n2. Analyze the provided link for relevant information\n3. Output a new card structure with updated information based on the link\n\nReturn the updated card as a structured JSON object matching the card format:\n- displayName: App title\n- description: Full description\n- tags: Array of tags\n- teams: Array of team names\n- appUrl: Main application URL\n- links: Array of {url, title} objects for related links\n- sources: Array of source URLs (documentation, Confluence pages, etc.)\n- accessRequest: Object with approvalMethodSlug, comments, requestPrompt, postApprovalInstructions, roles, approverPersonSlugs, urls\n- notes: Additional notes\n- deprecated: Optional deprecation info with type, replacementSlug, comment\n\nDo NOT save the card to the database. Only output the updated structure.`\n"],"mappings":";;;;;;AAWA,SAAS,eAAe,QAAkC;AACxD,KAAI,SAAS,OAAQ,QAAO,OAAO;CACnC,MAAM,EAAE,MAAM,MAAM,UAAU,UAAU,UAAU,WAAW;AAE7D,QAAO,gBAAgB,SAAS,GAAG,SAAS,GAAG,KAAK,GAAG,KAAK,GAAG,WAD3C,SAAS,WAAW,WAAW;;;;;;AAYrD,SAAgB,wBACd,gBACsB;CACtB,MAAM,cAAc,eAAe,eAAe;CAGlD,MAAM,SAAS,IAAI,aAAa,EAAE,SADlB,IAAI,SADP,IAAI,GAAG,KAAK,EAAE,kBAAkB,aAAa,CAAC,CACzB,EACS,CAAC;AAsD5C,QAAO,EACL,YA/CiD;EACjD,aACE;EACF,aATuB,EAAE,OAAO,EAChC,MAAM,EAAE,QAAQ,CAAC,SAAS,wBAAwB,EACnD,CAAC;EAQA,SAAS,OAAO,EAAE,WAA6B;AAC7C,OAAI;IACF,MAAM,MAAM,MAAM,OAAO,gBAAgB,WAAW;KAClD,OAAO,EAAE,MAAM;KACf,SAAS,EACP,YAAY,MACb;KACF,CAAC;AAEF,QAAI,CAAC,IACH,QAAO,EAAE,OAAO,4BAA4B,QAAQ;AAItD,WAAO;KACL,SAAS;KACT,MAAM;MACJ,IAAI,IAAI;MACR,MAAM,IAAI;MACV,aAAa,IAAI;MACjB,aAAa,IAAI;MACjB,OAAO,IAAI;MACX,MAAM,IAAI;MACV,QAAQ,IAAI;MACZ,OAAO,IAAI;MACX,UAAU,IAAI;MACd,SAAS,IAAI,WAAW,KAAK,QAAQ,IAAI,IAAI;MAC7C,OAAO,IAAI;MACX,eAAe,IAAI;MACnB,YAAY,IAAI;MAChB,WAAW,IAAI;MACf,WAAW,IAAI;MAChB;KACF;YACM,OAAO;AACd,WAAO,EACL,OAAO,iBAAiB,QAAQ,MAAM,UAAU,uBACjD;;;EAGN,EAIA;;;;;;AAWH,MAAa,+BAA+B"}

package/dist/types/common/appCatalogTypes.d.mts

@@ -1,6 +1,19 @@
 import { AppAccessRequest, ApprovalMethod } from "./approvalMethodTypes.mjs";
+import { Group, Person } from "./personGroupTypes.mjs";
+import { SubResource } from "./subResourceTypes.mjs";
 
 //#region src/types/common/appCatalogTypes.d.ts
+/**
+ * A tier variant of an app (e.g., prod/dev environments).
+ * Each tier can have its own URL and access process.
+ */
+interface AppTierVariant {
+  tierSlug: string;
+  displayName?: string;
+  description?: string;
+  appUrl?: string;
+  accessRequest?: AppAccessRequest;
+}
 /**
  * Source reference with metadata (used in API responses)
  * Note: parseDate is string (ISO-8601) when serialized from API, null when not yet parsed
@@ -41,6 +54,8 @@ interface AppForCatalog {
   aiPrompt?: string;
   /** URL health issues detected by automated scanning */
   urlIssues?: string[];
+  /** Optional tier variants (e.g., prod/dev) with per-tier URLs and access */
+  tiers?: AppTierVariant[];
 }
 interface AppCategory {
   id: string;
@@ -72,8 +87,11 @@ interface AppCatalogData {
   apps: AppForCatalog[];
   tagsDefinitions: GroupingTagDefinition[];
   approvalMethods: AppApprovalMethod[];
+  persons: Person[];
+  groups: Group[];
+  subResources: SubResource[];
   versions?: AppVersionInfo;
 }
 //#endregion
-export { AppApprovalMethod, AppCatalogData, AppCategory, AppForCatalog, AppVersionInfo, GroupingTagDefinition, GroupingTagValue, SourceReference, VersionInfo };
+export { AppApprovalMethod, AppCatalogData, AppCategory, AppForCatalog, AppTierVariant, AppVersionInfo, GroupingTagDefinition, GroupingTagValue, SourceReference, VersionInfo };
 //# sourceMappingURL=appCatalogTypes.d.mts.map

package/dist/types/common/appCatalogTypes.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"appCatalogTypes.d.mts","names":[],"sources":["../../../src/types/common/appCatalogTypes.ts"],"mappings":";;;;;;;UAkBiB,eAAA;EACf,UAAA;EACA,GAAA;EACA,SAAA;AAAA;;;;UAMe,aAAA;EACf,EAAA;EACA,IAAA;EACA,WAAA;EACA,YAAA;EACA,SAAA;EACA,WAAA;EACA,KAAA;EACA,aAAA,GAAgB,gBAAA;EAChB,KAAA;EACA,IAAA;EACA,MAAA;EACA,KAAA;IAAU,GAAA;IAAa,KAAA;EAAA;EACvB,QAAA;EACA,aAAA;EACA,OAAA,cAAqB,eAAA;EACrB,UAAA;IAWA,0HATE,IAAA,iCASO;IAPP,eAAA,WAWwB;IATxB,OAAA;EAAA;EAWE;EARJ,QAAA;EAWoC;EATpC,SAAA;AAAA;AAAA,UAIe,WAAA;EACf,EAAA;EACA,IAAA;AAAA;AAAA,UAGe,qBAAA;EACf,MAAA;EACA,WAAA;EACA,WAAA;EACA,MAAA,EAAQ,gBAAA;AAAA;AAAA,KAGL,gBAAA,8BAA8C,CAAA,eAC/C,IAAA,CAAK,CAAA,EAAG,IAAA;AAAA,KAGA,iBAAA,GAAoB,gBAAA,CAC9B,cAAA;AAAA,UAIe,gBAAA;EACf,KAAA;EACA,WAAA;EACA,WAAA;AAAA;AAAA,UAGe,WAAA;EACf,WAAA;EACA,GAAA;AAAA;AAAA,UAGe,cAAA;EACf,OAAA,GAAU,WAAA;EACV,QAAA,GAAW,WAAA;EACX,WAAA,GAAc,WAAA;AAAA;AAAA,UAGC,cAAA;EACf,IAAA,EAAM,aAAA;EACN,eAAA,EAAiB,qBAAA;EACjB,eAAA,EAAiB,iBAAA;EACjB,QAAA,GAAW,cAAA;AAAA"}
+{"version":3,"file":"appCatalogTypes.d.mts","names":[],"sources":["../../../src/types/common/appCatalogTypes.ts"],"mappings":";;;;;;;;;UAoBiB,cAAA;EACf,QAAA;EACA,WAAA;EACA,WAAA;EACA,MAAA;EACA,aAAA,GAAgB,gBAAA;AAAA;;;;;UAWD,eAAA;EACf,UAAA;EACA,GAAA;EACA,SAAA;AAAA;;;;UAMe,aAAA;EACf,EAAA;EACA,IAAA;EACA,WAAA;EACA,YAAA;EACA,SAAA;EACA,WAAA;EACA,KAAA;EACA,aAAA,GAAgB,gBAAA;EAChB,KAAA;EACA,IAAA;EACA,MAAA;EACA,KAAA;IAAU,GAAA;IAAa,KAAA;EAAA;EACvB,QAAA;EACA,aAAA;EACA,OAAA,cAAqB,eAAA;EACrB,UAAA;IAAA,0HAEE,IAAA,iCAEA;IAAA,eAAA,WAKF;IAHE,OAAA;EAAA;EAOM;EAJR,QAAA;EAIsB;EAFtB,SAAA;EAM0B;EAJ1B,KAAA,GAAQ,cAAA;AAAA;AAAA,UAIO,WAAA;EACf,EAAA;EACA,IAAA;AAAA;AAAA,UAGe,qBAAA;EACf,MAAA;EACA,WAAA;EACA,WAAA;EACA,MAAA,EAAQ,gBAAA;AAAA;AAAA,KAGL,gBAAA,8BAA8C,CAAA,eAC/C,IAAA,CAAK,CAAA,EAAG,IAAA;AAAA,KAGA,iBAAA,GAAoB,gBAAA,CAC9B,cAAA;AAAA,UAIe,gBAAA;EACf,KAAA;EACA,WAAA;EACA,WAAA;AAAA;AAAA,UAGe,WAAA;EACf,WAAA;EACA,GAAA;AAAA;AAAA,UAGe,cAAA;EACf,OAAA,GAAU,WAAA;EACV,QAAA,GAAW,WAAA;EACX,WAAA,GAAc,WAAA;AAAA;AAAA,UAGC,cAAA;EACf,IAAA,EAAM,aAAA;EACN,eAAA,EAAiB,qBAAA;EACjB,eAAA,EAAiB,iBAAA;EACjB,OAAA,EAAS,MAAA;EACT,MAAA,EAAQ,KAAA;EACR,YAAA,EAAc,WAAA;EACd,QAAA,GAAW,cAAA;AAAA"}

package/dist/types/common/approvalMethodTypes.d.mts

@@ -3,16 +3,9 @@
  * Approval Method Types
  *
  * Global approval method templates that apps can link to.
- * Each method has a type (service, personTeam, custom) with type-specific config.
+ * Each method has a type (service, custom, noAccessRequired, unknown) with type-specific config.
  */
-type ApprovalMethodType = 'service' | 'personTeam' | 'custom';
-/**
- * Contact for reaching out (not necessarily the approver)
- */
-interface ReachOutContact {
-  displayName: string;
-  contact: string;
-}
+type ApprovalMethodType = 'service' | 'personTeam' | 'custom' | 'noAccessRequired' | 'unknown';
 /**
  * Service type config - for bots, ticketing systems, self-service portals
  */
@@ -21,10 +14,11 @@ interface ServiceConfig {
   icon?: string;
 }
 /**
- * Person/Team type config - for human approvers
+ * PersonTeam type config - for person/group-based approval
  */
 interface PersonTeamConfig {
-  reachOutContacts?: ReachOutContact[];
+  personSlugs?: string[];
+  groupSlugs?: string[];
 }
 /**
  * Custom type config - generic, no additional fields
@@ -39,7 +33,13 @@ type ApprovalMethodConfig = ServiceConfig | PersonTeamConfig | CustomConfig;
  */
 type ApprovalMethod = {
   slug: string;
-  displayName: string; /** Old/migrated URLs that map to this approval method (e.g., jira.natera.com → natera.atlassian.net) */
+  /**
+   * Displayed approval method
+   */
+  displayName: string;
+  /**
+   * Optionally - older name of approval method if there were migration in organization.
+   */
   deprecatedAliases?: string[];
   createdAt?: Date;
   updatedAt?: Date;
@@ -52,22 +52,30 @@ type ApprovalMethod = {
 } | {
   type: 'custom';
   config: CustomConfig;
+} | {
+  type: 'noAccessRequired';
+  config: CustomConfig;
+} | {
+  type: 'unknown';
+  config: CustomConfig;
 });
 /**
  * Role that can be requested for an app
  */
 interface AppRole {
+  /**
+   * User-friendly role name.
+   */
   displayName: string;
+  /**
+   * Description of role.
+   */
   description?: string;
+  /**
+   * Notes for admins/approvers (Not for requestores)
+   */
   adminNotes?: string;
 }
-/**
- * Approver contact (person who approves, may differ from reach-out contact)
- */
-interface ApproverContact {
-  displayName: string;
-  contact?: string;
-}
 /**
  * URL link with optional label
  */
@@ -76,30 +84,38 @@ interface ApprovalUrl {
   url: string;
 }
 /**
- * Per-app approval details - stored as JSON in DbAppForCatalog
- * All comment/text-like strings are markdown
+ * Used to store ONLY instructions related to access request
  */
 interface AppAccessRequest {
-  approvalMethodId: string;
+  /**
+   * Method of asking for access.
+   */
+  approvalMethodSlug: string;
+  /**
+   * Additional comments, if no other fields are fit.
+   */
   comments?: string;
+  /**
+   * A template to put into a request ask.
+   */
   requestPrompt?: string;
+  /**
+   * Recommended steps post approvel to get access to specific resources.
+   */
   postApprovalInstructions?: string;
+  /**
+   * Available roles for given resource.
+   */
   roles?: AppRole[];
-  approvers?: ApproverContact[];
+  /**
+   * Individuals that will approve request within given approval method. No need to reach them directly unless specified.
+   */
+  approverPersonSlugs?: string[];
+  /**
+   * Additional instructions to get approvals
+   */
   urls?: ApprovalUrl[];
-  whoToReachOut?: string;
-}
-interface CreateApprovalMethodInput {
-  type: ApprovalMethodType;
-  displayName: string;
-  config?: ApprovalMethodConfig;
-}
-interface UpdateApprovalMethodInput {
-  id: string;
-  type?: ApprovalMethodType;
-  displayName?: string;
-  config?: ApprovalMethodConfig;
 }
 //#endregion
-export { AppAccessRequest, AppRole, ApprovalMethod, ApprovalMethodConfig, ApprovalMethodType, ApprovalUrl, ApproverContact, CreateApprovalMethodInput, CustomConfig, PersonTeamConfig, ReachOutContact, ServiceConfig, UpdateApprovalMethodInput };
+export { AppAccessRequest, AppRole, ApprovalMethod, ApprovalMethodConfig, ApprovalMethodType, ApprovalUrl, CustomConfig, PersonTeamConfig, ServiceConfig };
 //# sourceMappingURL=approvalMethodTypes.d.mts.map

package/dist/types/common/approvalMethodTypes.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"approvalMethodTypes.d.mts","names":[],"sources":["../../../src/types/common/approvalMethodTypes.ts"],"mappings":";;AAWA;;;;;KAAY,kBAAA;;;;UAKK,eAAA;EACf,WAAA;EACA,OAAA;AAAA;;;AAcF;UARiB,aAAA;EACf,GAAA;EACA,IAAA;AAAA;AAaF;;;AAAA,UAPiB,gBAAA;EACf,gBAAA,GAAmB,eAAA;AAAA;;;;UAMJ,YAAA;;;;KAOL,oBAAA,GACR,aAAA,GACA,gBAAA,GACA,YAAA;;;;KAcQ,cAAA;EACV,IAAA;EACA,WAAA,UAGY;EADZ,iBAAA;EACA,SAAA,GAAY,IAAA;EACZ,SAAA,GAAY,IAAA;AAAA;EAGR,IAAA;EACA,MAAA,EAAQ,aAAA;AAAA;EAGR,IAAA;EACA,MAAA,EAAQ,gBAAA;AAAA;EAGR,IAAA;EACA,MAAA,EAAQ,YAAA;AAAA;;;;UAWG,OAAA;EACf,WAAA;EACA,WAAA;EACA,UAAA;AAAA;;;;UAMe,eAAA;EACf,WAAA;EACA,OAAA;AAAA;;;;UAMe,WAAA;EACf,KAAA;EACA,GAAA;AAAA;;;;AAFF;UASiB,gBAAA;EACf,gBAAA;EAGA,QAAA;EACA,aAAA;EACA,wBAAA;EAGA,KAAA,GAAQ,OAAA;EACR,SAAA,GAAY,eAAA;EACZ,IAAA,GAAO,WAAA;EAGP,aAAA;AAAA;AAAA,UAOe,yBAAA;EACf,IAAA,EAAM,kBAAA;EACN,WAAA;EACA,MAAA,GAAS,oBAAA;AAAA;AAAA,UAGM,yBAAA;EACf,EAAA;EACA,IAAA,GAAO,kBAAA;EACP,WAAA;EACA,MAAA,GAAS,oBAAA;AAAA"}
+{"version":3,"file":"approvalMethodTypes.d.mts","names":[],"sources":["../../../src/types/common/approvalMethodTypes.ts"],"mappings":";;AAWA;;;;;KAAY,kBAAA;;;;UAUK,aAAA;EACf,GAAA;EACA,IAAA;AAAA;;;AAcF;UARiB,gBAAA;EACf,WAAA;EACA,UAAA;AAAA;AAaF;;;AAAA,UAPiB,YAAA;;;;KAOL,oBAAA,GACR,aAAA,GACA,gBAAA,GACA,YAAA;;;;KAKQ,cAAA;EACV,IAAA;EADwB;;;EAKxB,WAAA;EAUY;;;EANZ,iBAAA;EACA,SAAA,GAAY,IAAA;EACZ,SAAA,GAAY,IAAA;AAAA;EAGR,IAAA;EACA,MAAA,EAAQ,aAAA;AAAA;EAGR,IAAA;EACA,MAAA,EAAQ,gBAAA;AAAA;EAGR,IAAA;EACA,MAAA,EAAQ,YAAA;AAAA;EAGR,IAAA;EACA,MAAA,EAAQ,YAAA;AAAA;EAGR,IAAA;EACA,MAAA,EAAQ,YAAA;AAAA;;;;UAWG,OAAA;EAZX;;;EAgBJ,WAAA;EAfwB;AAW1B;;EAQE,WAAA;EARsB;;;EAYtB,UAAA;AAAA;;AAMF;;UAAiB,WAAA;EACf,KAAA;EACA,GAAA;AAAA;;;;UAMe,gBAAA;EASf;;;EALA,kBAAA;EAkBQ;;;EAbR,QAAA;EAsBkB;;;EAlBlB,aAAA;;;;EAIA,wBAAA;;;;EAKA,KAAA,GAAQ,OAAA;;;;EAKR,mBAAA;;;;EAIA,IAAA,GAAO,WAAA;AAAA"}

package/dist/types/common/personGroupTypes.d.mts

@@ -0,0 +1,22 @@
+//#region src/types/common/personGroupTypes.d.ts
+/**
+ * Person & Group Types
+ *
+ * Persons represent individuals (employees, contacts).
+ * Groups represent named sets of persons (teams, distribution lists).
+ */
+interface Person {
+  slug: string;
+  firstName: string;
+  lastName: string;
+  email?: string;
+}
+interface Group {
+  slug: string;
+  displayName?: string;
+  email?: string;
+  memberSlugs: string[];
+}
+//#endregion
+export { Group, Person };
+//# sourceMappingURL=personGroupTypes.d.mts.map

package/dist/types/common/personGroupTypes.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"personGroupTypes.d.mts","names":[],"sources":["../../../src/types/common/personGroupTypes.ts"],"mappings":";;AAOA;;;;;UAAiB,MAAA;EACf,IAAA;EACA,SAAA;EACA,QAAA;EACA,KAAA;AAAA;AAAA,UAGe,KAAA;EACf,IAAA;EACA,WAAA;EACA,KAAA;EACA,WAAA;AAAA"}

package/dist/types/common/subResourceTypes.d.mts

@@ -0,0 +1,24 @@
+import { AppAccessRequest } from "./approvalMethodTypes.mjs";
+
+//#region src/types/common/subResourceTypes.d.ts
+/**
+ * A sub-resource within an app.
+ * Example: an AWS account under the "AWS Console" app.
+ */
+interface SubResource {
+  slug: string;
+  displayName: string;
+  description?: string;
+  appSlug: string;
+  familySlug?: string;
+  tierSlug?: string;
+  aliases: string[];
+  ownerPersonSlug?: string;
+  accessMaintainerGroupSlugs: string[];
+  accessRequest?: AppAccessRequest;
+  accessComments?: string;
+  extra?: Record<string, unknown>;
+}
+//#endregion
+export { SubResource };
+//# sourceMappingURL=subResourceTypes.d.mts.map

package/dist/types/common/subResourceTypes.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"subResourceTypes.d.mts","names":[],"sources":["../../../src/types/common/subResourceTypes.ts"],"mappings":";;;;;AAMA;;UAAiB,WAAA;EACf,IAAA;EACA,WAAA;EACA,WAAA;EACA,OAAA;EACA,UAAA;EACA,QAAA;EACA,OAAA;EACA,eAAA;EACA,0BAAA;EACA,aAAA,GAAgB,gBAAA;EAChB,cAAA;EACA,KAAA,GAAQ,MAAA;AAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@igstack/app-catalog-backend-core",
-  "version": "0.3.1-alpha-20260403020019",
+  "version": "0.3.1-alpha-20260405015231",
   "description": "Backend core library for App Catalog",
   "homepage": "https://github.com/lislon/app-catalog",
   "repository": {
@@ -45,8 +45,8 @@
     "tsyringe": "^4.10.0",
     "yaml": "^2.8.0",
     "zod": "^4.3.5",
-    "@igstack/app-catalog-shared-core": "0.3.1-alpha-20260403020019",
-    "@igstack/app-catalog-table-sync": "0.3.1-alpha-20260403020019"
+    "@igstack/app-catalog-shared-core": "0.3.1-alpha-20260405015231",
+    "@igstack/app-catalog-table-sync": "0.3.1-alpha-20260405015231"
   },
   "devDependencies": {
     "@tanstack/vite-config": "^0.4.3",

package/prisma/schema.prisma

@@ -76,6 +76,39 @@ enum ApprovalMethodType {
   service
   personTeam
   custom
+  noAccessRequired
+  unknown
+}
+
+// ========== Person & Group Models ==========
+
+model DbPerson {
+  slug        String               @id // email or synthetic
+  firstName   String
+  lastName    String
+  email       String?              @unique
+  memberships DbGroupMembership[]
+  createdAt   DateTime             @default(now())
+  updatedAt   DateTime             @updatedAt
+}
+
+model DbGroup {
+  slug        String               @id
+  displayName String?
+  email       String?              // team alias
+  memberships DbGroupMembership[]
+  createdAt   DateTime             @default(now())
+  updatedAt   DateTime             @updatedAt
+}
+
+model DbGroupMembership {
+  id         Int      @id @default(autoincrement())
+  groupSlug  String
+  group      DbGroup  @relation(fields: [groupSlug], references: [slug], onDelete: Cascade)
+  personSlug String
+  person     DbPerson @relation(fields: [personSlug], references: [slug], onDelete: Cascade)
+
+  @@unique([groupSlug, personSlug])
 }
 
 model DbApprovalMethod {
@@ -114,7 +147,10 @@ model DbAppForCatalog {
   deprecated    Json?
   aiPrompt      String?
   urlIssues     String[]          @default([])
+  /// [AppTierVariant[]]
+  tiers         Json?
   sourceRefs    SourceReference[]
+  subResources  DbSubResource[]
   createdAt     DateTime          @default(now())
   updatedAt     DateTime          @updatedAt
 
@@ -123,6 +159,29 @@ model DbAppForCatalog {
   @@index([tags])
 }
 
+model DbSubResource {
+  id                         String          @id @default(cuid())
+  slug                       String          @unique
+  displayName                String
+  description                String?
+  appSlug                    String
+  app                        DbAppForCatalog @relation(fields: [appSlug], references: [slug], onDelete: Cascade)
+  familySlug                 String?           // groups tier variants visually
+  tierSlug                   String?
+  aliases                    String[]        @default([])
+  ownerPersonSlug            String?
+  accessMaintainerGroupSlugs String[]        @default([])
+  /// [AppAccessRequest]
+  accessRequest              Json?
+  accessComments             String?
+  /// [SubResourceExtra]
+  extra                      Json?
+  createdAt                  DateTime        @default(now())
+  updatedAt                  DateTime        @updatedAt
+
+  @@index([appSlug])
+}
+
 model DbAppTagDefinition {
   id          String   @id @default(cuid())
   prefix      String   @unique

package/src/db/syncAppCatalog.ts

@@ -8,7 +8,7 @@ import { tableSyncPrisma } from './tableSyncPrismaAdapter'
 import { readFile, readdir, stat } from 'node:fs/promises'
 import { group } from 'radashi'
 import { upsertAsset } from '../modules/assets/upsertAsset'
-import type { ApprovalMethod } from '../types'
+import type { ApprovalMethod, Group, Person, SubResource } from '../types'
 import type { PrismaClient } from '../generated/prisma/client'
 import { naturalSort } from '../utils/naturalSort'
 import { parseSourceSlug } from '../utils/parseSourceSlug'
@@ -165,6 +165,15 @@ async function syncAssetsFromFileSystem(
   }
 }
 
+/**
+ * Optional data to sync alongside the core app catalog.
+ */
+export interface SyncAppCatalogOptions {
+  persons?: Person[]
+  groups?: Group[]
+  subResources?: SubResource[]
+}
+
 /**
  * Syncs app catalog data to the database using table sync.
  * This will create new apps, update existing ones, and delete any that are no longer in the input.
@@ -176,10 +185,50 @@ export async function syncAppCatalog(
   tagsDefinitions: GroupingTagDefinition[],
   approvalMethods: ApprovalMethod[],
   sreenshotsPath?: string,
+  options?: SyncAppCatalogOptions,
 ): Promise<SyncAppCatalogResult> {
   try {
     const prisma = getDbClient()
 
+    // Sync Persons first (groups depend on persons via memberships)
+    if (options?.persons) {
+      const dbPersons = options.persons.map((p) => ({
+        slug: p.slug,
+        firstName: p.firstName,
+        lastName: p.lastName,
+        email: p.email ?? null,
+      }))
+      await tableSyncPrisma({
+        prisma,
+        ...TABLE_SYNC_MAGAZINE.DbPerson,
+      }).sync(dbPersons)
+    }
+
+    // Sync Groups (without memberships first)
+    if (options?.groups) {
+      const dbGroups = options.groups.map((g) => ({
+        slug: g.slug,
+        displayName: g.displayName ?? null,
+        email: g.email ?? null,
+      }))
+      await tableSyncPrisma({
+        prisma,
+        ...TABLE_SYNC_MAGAZINE.DbGroup,
+      }).sync(dbGroups)
+
+      // Now sync GroupMemberships
+      const allMemberships = options.groups.flatMap((g) =>
+        g.memberSlugs.map((personSlug) => ({
+          groupSlug: g.slug,
+          personSlug,
+        })),
+      )
+      await tableSyncPrisma({
+        prisma,
+        ...TABLE_SYNC_MAGAZINE.DbGroupMembership,
+      }).sync(allMemberships)
+    }
+
     await tableSyncPrisma({
       prisma,
       ...TABLE_SYNC_MAGAZINE.DbApprovalMethod,
@@ -241,6 +290,7 @@ export async function syncAppCatalog(
         deprecated: app.deprecated ?? null,
         aiPrompt: app.aiPrompt ?? null,
         urlIssues: app.urlIssues ?? [],
+        tiers: app.tiers ?? null,
       }
     })
 
@@ -290,6 +340,28 @@ export async function syncAppCatalog(
       ...TABLE_SYNC_MAGAZINE.SourceReference,
     }).sync(allSourceRefs)
 
+    // Sync SubResources (after apps, since they reference appSlug)
+    if (options?.subResources) {
+      const dbSubResources = options.subResources.map((sr) => ({
+        slug: sr.slug,
+        displayName: sr.displayName,
+        description: sr.description ?? null,
+        appSlug: sr.appSlug,
+        familySlug: sr.familySlug ?? null,
+        tierSlug: sr.tierSlug ?? null,
+        aliases: sr.aliases,
+        ownerPersonSlug: sr.ownerPersonSlug ?? null,
+        accessMaintainerGroupSlugs: sr.accessMaintainerGroupSlugs,
+        accessRequest: sr.accessRequest ?? null,
+        accessComments: sr.accessComments ?? null,
+        extra: sr.extra ?? null,
+      }))
+      await tableSyncPrisma({
+        prisma,
+        ...TABLE_SYNC_MAGAZINE.DbSubResource,
+      }).sync(dbSubResources)
+    }
+
     // Get actual synced data to calculate stats
     const actual = result.getActual()
 

package/src/db/tableSyncMagazine.ts

@@ -13,6 +13,20 @@ type TableSyncMagazineType = Partial<{
 }>
 
 export const TABLE_SYNC_MAGAZINE = {
+  DbPerson: {
+    id: 'slug',
+    prismaModelName: 'DbPerson',
+    uniqColumns: ['slug'],
+  },
+  DbGroup: {
+    id: 'slug',
+    prismaModelName: 'DbGroup',
+    uniqColumns: ['slug'],
+  },
+  DbGroupMembership: {
+    prismaModelName: 'DbGroupMembership',
+    uniqColumns: ['groupSlug', 'personSlug'],
+  },
   DbAppForCatalog: {
     prismaModelName: 'DbAppForCatalog',
     uniqColumns: ['slug'],
@@ -31,6 +45,10 @@ export const TABLE_SYNC_MAGAZINE = {
     prismaModelName: 'Source',
     uniqColumns: ['slug'],
   },
+  DbSubResource: {
+    prismaModelName: 'DbSubResource',
+    uniqColumns: ['slug'],
+  },
   SourceReference: {
     prismaModelName: 'SourceReference',
     uniqColumns: ['appId', 'url'],

package/src/generated/prisma/browser.ts

@@ -37,6 +37,21 @@ export type account = Prisma.accountModel
  * 
  */
 export type verification = Prisma.verificationModel
+/**
+ * Model DbPerson
+ * 
+ */
+export type DbPerson = Prisma.DbPersonModel
+/**
+ * Model DbGroup
+ * 
+ */
+export type DbGroup = Prisma.DbGroupModel
+/**
+ * Model DbGroupMembership
+ * 
+ */
+export type DbGroupMembership = Prisma.DbGroupMembershipModel
 /**
  * Model DbApprovalMethod
  * 
@@ -47,6 +62,11 @@ export type DbApprovalMethod = Prisma.DbApprovalMethodModel
  * 
  */
 export type DbAppForCatalog = Prisma.DbAppForCatalogModel
+/**
+ * Model DbSubResource
+ * 
+ */
+export type DbSubResource = Prisma.DbSubResourceModel
 /**
  * Model DbAppTagDefinition
  * 

package/src/generated/prisma/client.ts

@@ -61,6 +61,21 @@ export type account = Prisma.accountModel
  * 
  */
 export type verification = Prisma.verificationModel
+/**
+ * Model DbPerson
+ * 
+ */
+export type DbPerson = Prisma.DbPersonModel
+/**
+ * Model DbGroup
+ * 
+ */
+export type DbGroup = Prisma.DbGroupModel
+/**
+ * Model DbGroupMembership
+ * 
+ */
+export type DbGroupMembership = Prisma.DbGroupMembershipModel
 /**
  * Model DbApprovalMethod
  * 
@@ -71,6 +86,11 @@ export type DbApprovalMethod = Prisma.DbApprovalMethodModel
  * 
  */
 export type DbAppForCatalog = Prisma.DbAppForCatalogModel
+/**
+ * Model DbSubResource
+ * 
+ */
+export type DbSubResource = Prisma.DbSubResourceModel
 /**
  * Model DbAppTagDefinition
  *