@lssm/example.analytics-dashboard 0.0.0-canary-20251217060804 → 0.0.0-canary-20251217062139

package/dist/libs/contracts/dist/docs/tech/vscode-extension.docblock.js

@@ -0,0 +1,101 @@
+import { a } from "../registry.js";
+
+//#region ../../libs/contracts/dist/docs/tech/vscode-extension.docblock.js
+const t = [{
+	id: `docs.tech.vscode.extension`,
+	title: `ContractSpec VS Code Extension`,
+	summary: `VS Code extension for spec-first development with validation, scaffolding, and MCP integration.`,
+	kind: `reference`,
+	visibility: `public`,
+	route: `/docs/tech/vscode/extension`,
+	tags: [
+		`vscode`,
+		`extension`,
+		`tooling`,
+		`dx`
+	],
+	body: `# ContractSpec VS Code Extension
+
+The ContractSpec VS Code extension provides spec-first development tooling directly in your editor.
+
+## Features
+
+- **Real-time Validation**: Get instant feedback on spec errors and warnings as you save files
+- **Build/Scaffold**: Generate handler and component skeletons from specs (no AI required)
+- **Spec Explorer**: List and navigate all specs in your workspace
+- **Dependency Analysis**: Visualize spec dependencies and detect cycles
+- **MCP Integration**: Search ContractSpec documentation via Model Context Protocol
+- **Snippets**: Code snippets for common ContractSpec patterns
+
+## Commands
+
+| Command | Description |
+|---------|-------------|
+| \`ContractSpec: Validate Current Spec\` | Validate the currently open spec file |
+| \`ContractSpec: Validate All Specs\` | Validate all spec files in the workspace |
+| \`ContractSpec: Build/Scaffold\` | Generate handler/component from the current spec |
+| \`ContractSpec: List All Specs\` | Show all specs in the workspace |
+| \`ContractSpec: Analyze Dependencies\` | Analyze and visualize spec dependencies |
+| \`ContractSpec: Search Docs (MCP)\` | Search documentation via MCP |
+
+## Configuration
+
+| Setting | Description | Default |
+|---------|-------------|---------|
+| \`contractspec.api.baseUrl\` | Base URL for ContractSpec API (enables MCP + remote telemetry) | \`""\` |
+| \`contractspec.telemetry.posthogHost\` | PostHog host URL for direct telemetry | \`"https://eu.posthog.com"\` |
+| \`contractspec.telemetry.posthogProjectKey\` | PostHog project key for direct telemetry | \`""\` |
+| \`contractspec.validation.onSave\` | Run validation on save | \`true\` |
+| \`contractspec.validation.onOpen\` | Run validation on open | \`true\` |
+
+## Architecture
+
+The extension uses:
+- \`@lssm/module.contractspec-workspace\` for pure analysis + templates
+- \`@lssm/bundle.contractspec-workspace\` for workspace services + adapters
+
+This allows the extension to work without requiring the CLI to be installed.
+
+## Telemetry
+
+The extension uses a hybrid telemetry approach:
+1. If \`contractspec.api.baseUrl\` is configured → send to API \`/api/telemetry/ingest\`
+2. Otherwise → send directly to PostHog (if project key configured)
+
+Telemetry respects VS Code's telemetry settings. No file paths, source code, or PII is collected.
+`
+}, {
+	id: `docs.tech.vscode.snippets`,
+	title: `ContractSpec Snippets`,
+	summary: `Code snippets for common ContractSpec patterns in VS Code.`,
+	kind: `reference`,
+	visibility: `public`,
+	route: `/docs/tech/vscode/snippets`,
+	tags: [
+		`vscode`,
+		`snippets`,
+		`dx`
+	],
+	body: `# ContractSpec Snippets
+
+The VS Code extension includes snippets for common ContractSpec patterns.
+
+## Available Snippets
+
+| Prefix | Description |
+|--------|-------------|
+| \`contractspec-command\` | Create a new command (write operation) |
+| \`contractspec-query\` | Create a new query (read-only operation) |
+| \`contractspec-event\` | Create a new event |
+| \`contractspec-docblock\` | Create a new DocBlock |
+| \`contractspec-telemetry\` | Create a new TelemetrySpec |
+| \`contractspec-presentation\` | Create a new Presentation |
+
+## Usage
+
+Type the prefix in a TypeScript file and press Tab to expand the snippet. Tab through the placeholders to fill in your values.
+`
+}];
+a(t);
+
+//#endregion

package/dist/libs/contracts/dist/docs/tech/workflows/overview.docblock.js

@@ -0,0 +1,20 @@
+import { a } from "../../registry.js";
+
+//#region ../../libs/contracts/dist/docs/tech/workflows/overview.docblock.js
+const t = [{
+	id: `docs.tech.workflows.overview`,
+	title: `WorkflowSpec Overview`,
+	summary: "WorkflowSpec provides a declarative, versioned format for long-running flows that mix automation and human review. Specs stay inside `@lssm/lib.contracts` (`src/workflow/spec.ts`) so the same definition powers runtime execution, documentation, and future generation.",
+	kind: `reference`,
+	visibility: `public`,
+	route: `/docs/tech/workflows/overview`,
+	tags: [
+		`tech`,
+		`workflows`,
+		`overview`
+	],
+	body: "# WorkflowSpec Overview\n\n## Purpose\n\nWorkflowSpec provides a declarative, versioned format for long-running flows that mix automation and human review. Specs stay inside `@lssm/lib.contracts` (`src/workflow/spec.ts`) so the same definition powers runtime execution, documentation, and future generation.\n\n## Core Types\n\n- `WorkflowMeta`: ownership metadata (`title`, `domain`, `owners`, `tags`, `stability`) plus `name` and `version`.\n- `WorkflowDefinition`:\n  - `entryStepId?`: optional explicit entry point (defaults to first step).\n  - `steps[]`: ordered list of `Step` descriptors.\n  - `transitions[]`: directed edges between steps with optional expressions.\n  - `sla?`: aggregated timing hints for the overall flow or per-step budgets.\n  - `compensation?`: fallback operations executed when a workflow is rolled back or fails.\n- `Step`:\n  - `type`: `human`, `automation`, or `decision`.\n  - `action`: references either a `ContractSpec` (`operation`) or `FormSpec` (`form`).\n  - Optional `guard`, `timeoutMs`, and retry policy (`maxAttempts`, `backoff`, `delayMs`, `maxDelayMs?`).\n  - `requiredIntegrations?`: integration slot ids that must be bound before the step may execute.\n  - `requiredCapabilities?`: `CapabilityRef[]` that must be enabled in the resolved app config.\n- `Transition`: `from` → `to` with optional `condition` string (simple data expressions).\n\n## Registry & Validation\n\n- `WorkflowRegistry` (`src/workflow/spec.ts`) stores specs by key `<name>.v<version>` and exposes `register`, `list`, and `get`.\n- `validateWorkflowSpec()` (`src/workflow/validation.ts`) checks:\n  - Duplicate step IDs.\n  - Unknown `from`/`to` transitions.\n  - Empty guards/conditions.\n  - Reachability from the entry step.\n  - Cycles in the graph.\n  - Operation/Form references against provided registries.\n- `assertWorkflowSpecValid()` wraps validation and throws `WorkflowValidationError` when errors remain.\n\n## Runtime\n\n- `WorkflowRunner` (`src/workflow/runner.ts`) executes workflows and coordinates steps.\n  - `start(name, version?, initialData?)` returns a `workflowId`.\n  - `executeStep(workflowId, input?)` runs the current step (automation or human).\n  - `getState(workflowId)` retrieves the latest state snapshot.\n  - `cancel(workflowId)` marks the workflow as cancelled.\n  - `preFlightCheck(name, version?, resolvedConfig?)` evaluates integration/capability requirements before the workflow starts.\n  - Throws `WorkflowPreFlightError` if required integration slots are unbound or required capabilities are disabled.\n- `StateStore` (`src/workflow/state.ts`) abstracts persistence. V1 ships with:\n  - `InMemoryStateStore` (`src/workflow/adapters/memory-store.ts`) for tests/dev.\n  - Placeholder factories for file/database adapters (`adapters/file-adapter.ts`, `adapters/db-adapter.ts`).\n- Guard evaluation: expression guards run through `evaluateExpression()` (`src/workflow/expression.ts`); custom policy guards can be provided via `guardEvaluator`.\n- Events: the runner emits `workflow.started`, `workflow.step_completed`, `workflow.step_failed`, and `workflow.cancelled` through the optional `eventEmitter`.\n- React bindings (`@lssm/lib.presentation-runtime-react`):\n  - `useWorkflow` hook (polls state, exposes `executeStep`, `cancel`, `refresh`).\n  - `WorkflowStepper` progress indicator using design-system Stepper.\n  - `WorkflowStepRenderer` helper to render human/automation/decision steps with sensible fallbacks.\n\n## Authoring Checklist\n\n1. Reuse existing operations/forms; create new specs when missing.\n2. Prefer explicit `entryStepId` for clarity (especially with decision branches).\n3. Give automation steps an `operation` and human steps a `form` (warnings surface otherwise).\n4. Use short, meaningful step IDs (`submit`, `review`, `finalize`) to simplify analytics.\n5. Keep guard expressions deterministic; complex policy logic should move to PolicySpec (Phase 2).\n\n## Testing\n\n- Add unit tests for new workflows via `assertWorkflowSpecValid`.\n- Use the new Vitest suites (`validation.test.ts`, `expression.test.ts`, `runner.test.ts`) as examples.\n- CLI support will arrive in Phase 1 PR 3 (`contractspec create --type workflow`).\n\n## Tooling\n\n- `contractspec create --type workflow` scaffolds a WorkflowSpec with interactive prompts.\n- `contractspec build <spec.workflow.ts>` generates a runner scaffold (`.runner.ts`) wired to `WorkflowRunner` and the in-memory store.\n- `contractspec validate` understands `.workflow.ts` files and checks core structure (meta, steps, transitions).\n\n## Next Steps (Non-MVP)\n\n- Persistence adapters (database/file) for workflow state (Phase 2).\n- React bindings (`useWorkflow`, `WorkflowStepper`) and presentation-runtime integration (PR 3).\n- Policy engine integration (`guard.type === 'policy'` validated against PolicySpec).\n- Telemetry hooks for step execution metrics.\n\n"
+}];
+a(t);
+
+//#endregion

package/dist/libs/contracts/dist/events.js

@@ -0,0 +1,9 @@
+import "./schema/dist/index.js";
+
+//#region ../../libs/contracts/dist/events.js
+function e(e$1) {
+	return e$1;
+}
+
+//#endregion
+export { e };

package/dist/libs/contracts/dist/experiments/evaluator.js

@@ -0,0 +1 @@
+import "node:crypto";

package/dist/libs/contracts/dist/index.js

@@ -0,0 +1,71 @@
+import "./schema/dist/SchemaModel.js";
+import "./schema/dist/index.js";
+import { e } from "./events.js";
+import "./presentations.v2.js";
+import "./client/react/feature-render.js";
+import "./client/react/form-render.js";
+import "./client/index.js";
+import "./jsonschema.js";
+import "./server/graphql-pothos.js";
+import "./presentations.js";
+import "./server/mcp/createMcpServer.js";
+import "./server/rest-generic.js";
+import "./server/rest-elysia.js";
+import "./server/rest-express.js";
+import "./server/rest-next-app.js";
+import "./server/rest-next-pages.js";
+import "./server/index.js";
+import { n, t as t$1 } from "./spec.js";
+import { a, i, o } from "./docs/presentations.js";
+import { a as a$1, i as i$1, n as n$1 } from "./docs/registry.js";
+import "./registry.js";
+import { e as e$1, r, t as t$2 } from "./ownership.js";
+import { i as i$2, n as n$2, r as r$1 } from "./contract-registry/schemas.js";
+import "./contract-registry/index.js";
+import "./install.js";
+import "./openapi.js";
+import "./prompt.js";
+import "./promptRegistry.js";
+import "./resources.js";
+import { d, l, m, o as o$1, p, s } from "./onboarding-base.js";
+import "./capabilities/openbanking.js";
+import "./telemetry/tracker.js";
+import "./telemetry/index.js";
+import "./tests/runner.js";
+import "./tests/index.js";
+import "./experiments/evaluator.js";
+import "./integrations/providers/stripe.js";
+import "./integrations/providers/postmark.js";
+import "./integrations/providers/qdrant.js";
+import "./integrations/providers/mistral.js";
+import "./integrations/providers/elevenlabs.js";
+import "./integrations/providers/gmail.js";
+import "./integrations/providers/google-calendar.js";
+import "./integrations/providers/twilio-sms.js";
+import "./integrations/providers/gcs-storage.js";
+import "./integrations/providers/powens.js";
+import "./integrations/providers/registry.js";
+import { i as i$3, n as n$3, r as r$2 } from "./integrations/openbanking/models.js";
+import { t as t$3 } from "./integrations/openbanking/telemetry.js";
+import { d as d$1, f, p as p$1 } from "./integrations/openbanking/contracts/accounts.js";
+import { d as d$2, u } from "./integrations/openbanking/contracts/transactions.js";
+import { d as d$3, u as u$1 } from "./integrations/openbanking/contracts/balances.js";
+import "./integrations/openbanking/contracts/index.js";
+import "./integrations/index.js";
+import "./knowledge/spaces/product-canon.js";
+import "./knowledge/spaces/support-faq.js";
+import "./knowledge/spaces/email-threads.js";
+import "./knowledge/spaces/uploaded-docs.js";
+import "./knowledge/spaces/financial-docs.js";
+import "./knowledge/spaces/financial-overview.js";
+import "./knowledge/index.js";
+import { _, g, h, m as m$1, p as p$2 } from "./integrations/contracts.js";
+import { _ as _$1, g as g$1, h as h$1, m as m$2, v } from "./knowledge/contracts.js";
+import "./regenerator/service.js";
+import "./regenerator/index.js";
+import "./workflow/runner.js";
+import "./workflow/index.js";
+import "./docs/index.js";
+import "./llm/exporters.js";
+import "./llm/prompts.js";
+import "./llm/index.js";

package/dist/libs/contracts/dist/install.js

@@ -0,0 +1,2 @@
+import "./registry.js";
+import "zod";

package/dist/libs/contracts/dist/integrations/contracts.js

@@ -0,0 +1,371 @@
+import { t } from "../schema/dist/SchemaModel.js";
+import { l } from "../schema/dist/ScalarTypeEnum.js";
+import "../schema/dist/index.js";
+import { n, t as t$1 } from "../spec.js";
+
+//#region ../../libs/contracts/dist/integrations/contracts.js
+const i = new t({
+	name: `IntegrationConnectionRecord`,
+	fields: {
+		id: {
+			type: l.ID(),
+			isOptional: !1
+		},
+		tenantId: {
+			type: l.ID(),
+			isOptional: !1
+		},
+		integrationKey: {
+			type: l.NonEmptyString(),
+			isOptional: !1
+		},
+		integrationVersion: {
+			type: l.Int_unsecure(),
+			isOptional: !1
+		},
+		label: {
+			type: l.String_unsecure(),
+			isOptional: !1
+		},
+		ownershipMode: {
+			type: l.String_unsecure(),
+			isOptional: !1
+		},
+		externalAccountId: {
+			type: l.String_unsecure(),
+			isOptional: !0
+		},
+		secretProvider: {
+			type: l.String_unsecure(),
+			isOptional: !1
+		},
+		secretRef: {
+			type: l.String_unsecure(),
+			isOptional: !1
+		},
+		status: {
+			type: l.String_unsecure(),
+			isOptional: !1
+		},
+		environment: {
+			type: l.String_unsecure(),
+			isOptional: !0
+		},
+		healthStatus: {
+			type: l.String_unsecure(),
+			isOptional: !0
+		},
+		healthCheckedAt: {
+			type: l.DateTime(),
+			isOptional: !0
+		},
+		healthLatencyMs: {
+			type: l.Float_unsecure(),
+			isOptional: !0
+		},
+		healthErrorCode: {
+			type: l.String_unsecure(),
+			isOptional: !0
+		},
+		healthErrorMessage: {
+			type: l.String_unsecure(),
+			isOptional: !0
+		},
+		usageRequestCount: {
+			type: l.Int_unsecure(),
+			isOptional: !0
+		},
+		usageSuccessCount: {
+			type: l.Int_unsecure(),
+			isOptional: !0
+		},
+		usageErrorCount: {
+			type: l.Int_unsecure(),
+			isOptional: !0
+		},
+		usageLastUsedAt: {
+			type: l.DateTime(),
+			isOptional: !0
+		},
+		usageLastErrorAt: {
+			type: l.DateTime(),
+			isOptional: !0
+		},
+		usageLastErrorCode: {
+			type: l.String_unsecure(),
+			isOptional: !0
+		},
+		createdAt: {
+			type: l.DateTime(),
+			isOptional: !0
+		},
+		updatedAt: {
+			type: l.DateTime(),
+			isOptional: !0
+		}
+	}
+}), a = new t({
+	name: `CreateIntegrationConnectionInput`,
+	fields: {
+		tenantId: {
+			type: l.ID(),
+			isOptional: !1
+		},
+		integrationKey: {
+			type: l.NonEmptyString(),
+			isOptional: !1
+		},
+		integrationVersion: {
+			type: l.Int_unsecure(),
+			isOptional: !1
+		},
+		label: {
+			type: l.String_unsecure(),
+			isOptional: !1
+		},
+		ownershipMode: {
+			type: l.String_unsecure(),
+			isOptional: !1
+		},
+		externalAccountId: {
+			type: l.String_unsecure(),
+			isOptional: !0
+		},
+		secretProvider: {
+			type: l.String_unsecure(),
+			isOptional: !1
+		},
+		secretRef: {
+			type: l.String_unsecure(),
+			isOptional: !1
+		},
+		environment: {
+			type: l.String_unsecure(),
+			isOptional: !0
+		},
+		config: {
+			type: l.JSONObject(),
+			isOptional: !1
+		}
+	}
+}), o = new t({
+	name: `UpdateIntegrationConnectionInput`,
+	fields: {
+		connectionId: {
+			type: l.ID(),
+			isOptional: !1
+		},
+		label: {
+			type: l.String_unsecure(),
+			isOptional: !0
+		},
+		status: {
+			type: l.String_unsecure(),
+			isOptional: !0
+		},
+		ownershipMode: {
+			type: l.String_unsecure(),
+			isOptional: !0
+		},
+		externalAccountId: {
+			type: l.String_unsecure(),
+			isOptional: !0
+		},
+		secretProvider: {
+			type: l.String_unsecure(),
+			isOptional: !0
+		},
+		secretRef: {
+			type: l.String_unsecure(),
+			isOptional: !0
+		},
+		config: {
+			type: l.JSONObject(),
+			isOptional: !0
+		}
+	}
+}), s = new t({
+	name: `DeleteIntegrationConnectionInput`,
+	fields: { connectionId: {
+		type: l.ID(),
+		isOptional: !1
+	} }
+}), c = new t({
+	name: `ListIntegrationConnectionsInput`,
+	fields: {
+		tenantId: {
+			type: l.ID(),
+			isOptional: !1
+		},
+		category: {
+			type: l.String_unsecure(),
+			isOptional: !0
+		},
+		status: {
+			type: l.String_unsecure(),
+			isOptional: !0
+		}
+	}
+}), l$1 = new t({
+	name: `ListIntegrationConnectionsOutput`,
+	fields: { connections: {
+		type: i,
+		isOptional: !1,
+		isArray: !0
+	} }
+}), u = new t({
+	name: `TestIntegrationConnectionInput`,
+	fields: { connectionId: {
+		type: l.ID(),
+		isOptional: !1
+	} }
+}), d = new t({
+	name: `TestIntegrationConnectionOutput`,
+	fields: {
+		success: {
+			type: l.Boolean(),
+			isOptional: !1
+		},
+		status: {
+			type: l.String_unsecure(),
+			isOptional: !0
+		},
+		latencyMs: {
+			type: l.Float_unsecure(),
+			isOptional: !0
+		},
+		error: {
+			type: l.String_unsecure(),
+			isOptional: !0
+		},
+		errorCode: {
+			type: l.String_unsecure(),
+			isOptional: !0
+		}
+	}
+}), f = new t({
+	name: `DeleteIntegrationConnectionOutput`,
+	fields: { success: {
+		type: l.Boolean(),
+		isOptional: !1
+	} }
+}), p = t$1({
+	meta: {
+		name: `integrations.connection.create`,
+		version: 1,
+		description: `Create a new integration connection for a tenant.`,
+		goal: `Provision a tenant-scoped connection to an external provider.`,
+		context: `Used by Ops or the App Studio to configure external integrations such as Stripe or Qdrant.`,
+		owners: [`platform.integrations`],
+		tags: [`integration`, `connections`],
+		stability: `experimental`
+	},
+	io: {
+		input: a,
+		output: i
+	},
+	policy: {
+		auth: `admin`,
+		policies: [{
+			name: `platform.integration.manage`,
+			version: 1
+		}]
+	}
+}), m = t$1({
+	meta: {
+		name: `integrations.connection.update`,
+		version: 1,
+		description: `Update metadata or credentials for an integration connection.`,
+		goal: `Allow secure rotation of credentials and metadata adjustments.`,
+		context: `Supports rotating API keys, toggling status, or updating labels for tenant integrations.`,
+		owners: [`platform.integrations`],
+		tags: [`integration`, `connections`],
+		stability: `experimental`
+	},
+	io: {
+		input: o,
+		output: i
+	},
+	policy: {
+		auth: `admin`,
+		policies: [{
+			name: `platform.integration.manage`,
+			version: 1
+		}]
+	}
+}), h = t$1({
+	meta: {
+		name: `integrations.connection.delete`,
+		version: 1,
+		description: `Delete an integration connection for a tenant.`,
+		goal: `Safely remove credentials and disable connector usage.`,
+		context: `Ensures connections are de-provisioned when no longer needed or breached.`,
+		owners: [`platform.integrations`],
+		tags: [`integration`, `connections`],
+		stability: `experimental`
+	},
+	io: {
+		input: s,
+		output: f
+	},
+	policy: {
+		auth: `admin`,
+		policies: [{
+			name: `platform.integration.manage`,
+			version: 1
+		}]
+	}
+}), g = n({
+	meta: {
+		name: `integrations.connection.list`,
+		version: 1,
+		description: `List integration connections for a tenant.`,
+		goal: `Provide visibility into configured integrations and their status.`,
+		context: `Used by the App Studio and Ops flows to show bindings and health.`,
+		owners: [`platform.integrations`],
+		tags: [`integration`, `connections`],
+		stability: `experimental`
+	},
+	io: {
+		input: c,
+		output: l$1
+	},
+	policy: {
+		auth: `admin`,
+		policies: [{
+			name: `platform.integration.read`,
+			version: 1
+		}]
+	}
+}), _ = t$1({
+	meta: {
+		name: `integrations.connection.test`,
+		version: 1,
+		description: `Run a health check against a configured integration connection.`,
+		goal: `Validate credentials and connectivity for external providers.`,
+		context: `Triggered manually or by background monitors to confirm provider availability.`,
+		owners: [`platform.integrations`],
+		tags: [`integration`, `connections`],
+		stability: `experimental`
+	},
+	io: {
+		input: u,
+		output: d
+	},
+	policy: {
+		auth: `admin`,
+		policies: [{
+			name: `platform.integration.manage`,
+			version: 1
+		}]
+	}
+}), v = {
+	CreateIntegrationConnection: p,
+	UpdateIntegrationConnection: m,
+	DeleteIntegrationConnection: h,
+	ListIntegrationConnections: g,
+	TestIntegrationConnection: _
+};
+
+//#endregion
+export { _, g, h, m, p };

package/dist/libs/contracts/dist/integrations/index.js

@@ -0,0 +1,18 @@
+import "./providers/stripe.js";
+import "./providers/postmark.js";
+import "./providers/qdrant.js";
+import "./providers/mistral.js";
+import "./providers/elevenlabs.js";
+import "./providers/gmail.js";
+import "./providers/google-calendar.js";
+import "./providers/twilio-sms.js";
+import "./providers/gcs-storage.js";
+import "./providers/powens.js";
+import "./providers/registry.js";
+import { i, n, r } from "./openbanking/models.js";
+import { t } from "./openbanking/telemetry.js";
+import { d, f, p } from "./openbanking/contracts/accounts.js";
+import { d as d$1, u } from "./openbanking/contracts/transactions.js";
+import { d as d$2, u as u$1 } from "./openbanking/contracts/balances.js";
+import "./openbanking/contracts/index.js";
+import "./providers/index.js";