@tangle-network/starter-foundry 0.5.4 → 0.7.0

package/registry/families/flutter-app/manifest.json

@@ -0,0 +1,189 @@
+{
+  "id": "flutter-app",
+  "description": "Flutter mobile app starter \u2014 Dart 3, Material 3, GoRouter-based navigation, Provider state management, Dio HTTP client. For products that want a single Dart codebase shipping to iOS, Android, web, and desktop with Google's first-party mobile framework (not React Native / Expo).",
+  "tags": [
+    "mobile",
+    "flutter",
+    "dart",
+    "cross-platform"
+  ],
+  "taxonomy": {
+    "language": "dart",
+    "runtime": "flutter",
+    "surface": "mobile"
+  },
+  "slots": {
+    "auth": {
+      "options": [
+        "auth:none",
+        "auth:better-auth",
+        "auth:clerk",
+        "auth:supabase-auth"
+      ],
+      "default": "auth:none"
+    },
+    "payments": {
+      "options": [
+        "payments:none",
+        "payments:stripe",
+        "payments:coinbase-commerce"
+      ],
+      "default": "payments:none"
+    },
+    "sdk": {
+      "options": [
+        "sdk:none",
+        "sdk:coinbase-cdp",
+        "sdk:solana-web3",
+        "sdk:evm-wallet"
+      ],
+      "default": "sdk:none"
+    }
+  },
+  "defaults": {
+    "projectType": "mobile",
+    "headline": "Starter Foundry Flutter App",
+    "subheadline": "A Flutter mobile shell with GoRouter nav, Provider state, and Dio networking wired for auth, billing, and wallet seams."
+  },
+  "files": [
+    {
+      "source": "files/pubspec.yaml",
+      "target": "pubspec.yaml"
+    },
+    {
+      "source": "files/analysis_options.yaml",
+      "target": "analysis_options.yaml"
+    },
+    {
+      "source": "files/validate-flutter.mjs",
+      "target": "validate-flutter.mjs"
+    },
+    {
+      "source": "files/android/app/build.gradle",
+      "target": "android/app/build.gradle"
+    },
+    {
+      "source": "files/ios/Runner/Info.plist",
+      "target": "ios/Runner/Info.plist"
+    }
+  ],
+  "validationChecks": [
+    {
+      "type": "file-exists",
+      "path": "pubspec.yaml"
+    },
+    {
+      "type": "file-exists",
+      "path": "lib/main.dart"
+    },
+    {
+      "type": "command-success",
+      "command": [
+        "node",
+        "validate-flutter.mjs"
+      ],
+      "expect": "flutter starter ok"
+    }
+  ],
+  "contextHints": {
+    "commands": [
+      "flutter pub get",
+      "flutter run",
+      "node validate-flutter.mjs"
+    ],
+    "entrypoints": [
+      "lib/main.dart",
+      "pubspec.yaml",
+      "analysis_options.yaml"
+    ],
+    "preview": null,
+    "extensionPoints": [
+      "lib/screens/",
+      "lib/services/",
+      "auth-config.json",
+      "payments-config.json",
+      "sdk-config.json"
+    ]
+  },
+  "keywords": [
+    "flutter",
+    "dart",
+    "material design",
+    "material 3",
+    "cupertino",
+    "flutter app",
+    "dart mobile",
+    "go_router",
+    "provider state",
+    "dio http",
+    "cross-platform dart"
+  ],
+  "scoring": {
+    "boost": {
+      "flutter": 3,
+      "dart": 3,
+      "cupertino": 2,
+      "material 3": 2
+    }
+  },
+  "tieredKeywords": {
+    "tier1": [
+      "flutter",
+      "dart",
+      "go_router",
+      "cupertino",
+      "material 3"
+    ],
+    "tier2": [
+      "flutter app",
+      "dart mobile",
+      "material design",
+      "provider state",
+      "dio http",
+      "cross-platform dart"
+    ],
+    "archetypes": [
+      "flutter mobile app",
+      "dart ios android",
+      "material design app",
+      "cupertino ios app",
+      "single-codebase mobile"
+    ]
+  },
+  "buildHints": {
+    "whenToUse": "Pick flutter-app when the user names Flutter, Dart, pubspec, GoRouter, Provider, Riverpod, BLoC, Cupertino, or Material 3 \u2014 Google's first-party SDK with a single Dart codebase shipping to iOS + Android + web + desktop. For JS/TS-driven React Native workflows use expo-react-native-ts. For iOS-only Swift use swiftui-expo. For Kotlin-first multiplatform with Compose UI use kotlin-multiplatform.",
+    "firstSteps": [
+      "Install Flutter SDK 3.x locally: https://docs.flutter.dev/get-started/install",
+      "Run `flutter pub get` to resolve pubspec.yaml dependencies",
+      "Run `flutter run` to launch on a connected device or simulator",
+      "Edit lib/main.dart to add new screens; register routes in the GoRouter config",
+      "Use Provider (or swap to Riverpod) for app-wide state \u2014 see the ChangeNotifier example in lib/main.dart"
+    ],
+    "gotchas": [
+      "Flutter requires the Flutter SDK locally \u2014 CI and scaffold validation only check structure, not compile. Run `flutter analyze` before shipping.",
+      "iOS builds need Xcode + a provisioning profile; Android needs JDK 17+ and the Android SDK. Don't expect `flutter run` to work in a bare container.",
+      "GoRouter 14+ uses declarative routes \u2014 mutating route state mid-navigation throws. Always navigate via `context.go(...)` or `context.push(...)`.",
+      "Provider rebuilds the entire subtree on notifyListeners \u2014 use `Consumer` + `Selector` to scope rebuilds on hot lists.",
+      "Dio interceptors run in registration order; auth-refresh interceptors must be added BEFORE logging interceptors or refresh storms show up in logs."
+    ],
+    "architectureNotes": [
+      "lib/main.dart wires MaterialApp.router to a GoRouter instance and a MultiProvider root \u2014 the two extension seams are (a) new route defs and (b) new ChangeNotifier providers.",
+      "Screens live under lib/screens/, services (API clients, repositories) under lib/services/. Keep widgets leaf-only; push state up to providers.",
+      "Auth/payments/sdk slots drop config JSON at the project root \u2014 a bootstrap hook reads those at app start and rehydrates the matching service. Keep secrets out of the client bundle; fetch from a secured backend."
+    ],
+    "placeholders": [
+      {
+        "path": "{{packageName}} \u2014 maps to pubspec.yaml `name",
+        "description": "` (lowercase, snake_case)"
+      },
+      {
+        "path": "lib/main.dart",
+        "description": "{{projectName}} \u2014 display name used in MaterialApp title"
+      },
+      {
+        "path": "lib/main.dart",
+        "description": "{{headline}} + {{subheadline}} \u2014 shown on the home screen"
+      }
+    ]
+  }
+}

package/registry/families/fraud-ops-console/files/.env.example

@@ -0,0 +1,6 @@
+VITE_APP_NAME=fraud-ops-console
+VITE_API_URL=http://localhost:8080
+VITE_FRAUD_DETECTION_ENABLED=true
+VITE_RISK MANAGEMENT_THRESHOLD=0.5
+VITE_COMPLIANCE_MODE=strict
+VITE_LOG_LEVEL=debug

package/registry/families/fraud-ops-console/files/README.md

@@ -0,0 +1,43 @@
+# fraud-ops-console starter
+## Quickstart
+To get started with the fraud-ops-console starter, run the following commands:
+```bash
+npm install
+npm run dev
+```
+or
+```bash
+pnpm install
+pnpm run dev
+```
+This will install the required dependencies and start the development server.
+
+## Environment
+The following environment variables are used in the project:
+* VITE_PORT: The port number to use for the development server. Default value is 3000. Obtain the value from your system administrator or use the default value.
+* VITE_HOST: The host IP address to use for the development server. Default value is 127.0.0.1. Obtain the value from your system administrator or use the default value.
+* FRAUD_API_KEY: The API key for the fraud detection service. Obtain the value from the fraud detection service provider.
+* RISK_MANAGEMENT_API_KEY: The API key for the risk management service. Obtain the value from the risk management service provider.
+* COMPLIANCE_API_KEY: The API key for the compliance service. Obtain the value from the compliance service provider.
+
+## Architecture
+The project is divided into two main directories: `src/main` and `src/App`. 
+* `src/main` contains the main application logic, including the fraud detection, risk management, and compliance services.
+* `src/App` contains the frontend code, including the React components and the Vite configuration.
+The project uses the following dependencies:
+* `react`: The React library for building user interfaces.
+* `vite`: The Vite development server and build tool.
+* `typescript`: The TypeScript compiler and type checker.
+
+## Extension Points
+The following files are likely to be edited when building on this starter:
+* `src/main/fraudDetection.ts`: This file contains the fraud detection logic and can be modified to implement custom fraud detection rules.
+* `src/main/riskManagement.ts`: This file contains the risk management logic and can be modified to implement custom risk management rules.
+* `src/App/components/FraudConsole.tsx`: This file contains the React component for the fraud console and can be modified to implement custom UI components. 
+
+To address the missing script issue, add a 'dev' script to the package.json file:
+```json
+"scripts": {
+  "dev": "vite"
+}
+```

package/registry/families/fraud-ops-console/files/index.html

@@ -0,0 +1,12 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>Fraud Ops Console</title>
+</head>
+<body>
+    <div id="root"></div>
+    <script type="module" src="/src/main.tsx"></script>
+</body>
+</html>

package/registry/families/fraud-ops-console/files/package.json

@@ -0,0 +1,37 @@
+{
+  "name": "fraud-ops-console",
+  "version": "1.0.0",
+  "type": "module",
+  "private": true,
+  "scripts": {
+    "dev": "vite",
+    "build": "tsc --noEmit && vite build",
+    "preview": "vite preview",
+    "test": "vitest run"
+  },
+  "dependencies": {
+    "react": "^18.2.0",
+    "react-dom": "^18.2.0"
+  },
+  "devDependencies": {
+    "@types/react": "^18.0.17",
+    "@types/react-dom": "^18.0.6",
+    "@vitejs/plugin-react": "^2.0.1",
+    "typescript": "^5.0.4",
+    "vite": "^3.0.0",
+    "vitest": "^0.24.4"
+  },
+  "keywords": [
+    "fraud detection",
+    "risk management",
+    "compliance"
+  ],
+  "overrides": {
+    "vite": "^5.4.10"
+  },
+  "pnpm": {
+    "overrides": {
+      "vite": "^5.4.10"
+    }
+  }
+}

package/registry/families/fraud-ops-console/files/src/App.tsx

@@ -0,0 +1,19 @@
+import React, { useState } from 'react';
+import './App.css';
+
+function App() {
+  const [count, setCount] = useState(0);
+
+  return (
+    <div className="App">
+      <header className="App-header">
+        <p>Fraud Ops Console</p>
+        <p>Domain: Fraud Detection and Risk Management</p>
+        <button onClick={() => setCount(count + 1)}>Increment</button>
+        <p>Count: {count}</p>
+      </header>
+    </div>
+  );
+}
+
+export default App;

package/registry/families/fraud-ops-console/files/src/main.tsx

@@ -0,0 +1,9 @@
+import React from 'react';
+import ReactDOM from 'react-dom';
+import App from './App';
+
+const rootElement = document.getElementById('root');
+if (rootElement) {
+  const root = ReactDOM.createRoot(rootElement);
+  root.render(<App />);
+}

package/registry/families/fraud-ops-console/files/tsconfig.json

@@ -0,0 +1,12 @@
+{
+  "compilerOptions": {
+    "target": "es2022",
+    "module": "esnext",
+    "moduleResolution": "bundler",
+    "jsx": "react-jsx",
+    "strict": true,
+    "noEmit": true,
+    "skipLibCheck": true,
+    "lib": ["es2022", "dom", "dom.iterable"]
+  }
+}

package/registry/families/fraud-ops-console/files/validate-node.mjs

@@ -0,0 +1,49 @@
+import { console } from 'console';
+import { readFile } from 'fs/promises';
+import { join } from 'path';
+
+const requiredFiles = ['package.json', 'tsconfig.json'];
+const requiredDeps = ['typescript', '@types/node'];
+
+async function validateNode() {
+  try {
+    const packageJson = JSON.parse(await readFile(join(process.cwd(), 'package.json'), 'utf8'));
+    const deps = packageJson.dependencies || {};
+    const devDeps = packageJson.devDependencies || {};
+
+    // Check required files
+    for (const file of requiredFiles) {
+      if (!(await fileExists(join(process.cwd(), file)))) {
+        throw new Error(`Required file ${file} not found`);
+      }
+    }
+
+    // Check required dependencies
+    for (const dep of requiredDeps) {
+      if (!deps[dep] && !devDeps[dep]) {
+        throw new Error(`Required dependency ${dep} not found`);
+      }
+    }
+
+    // Check for 'dev' script in package.json
+    if (!packageJson.scripts || !packageJson.scripts.dev) {
+      throw new Error("Missing 'dev' script in package.json");
+    }
+
+    console.log('Validation successful');
+  } catch (error) {
+    console.error('Validation failed:', error.message);
+    process.exit(1);
+  }
+}
+
+async function fileExists(filePath) {
+  try {
+    await readFile(filePath, 'utf8');
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+validateNode();

package/registry/families/fraud-ops-console/files/vite.config.ts

@@ -0,0 +1,10 @@
+import { defineConfig } from 'vite'
+import react from '@vitejs/plugin-react'
+
+// https://vitejs.dev/config/
+export default defineConfig({
+  plugins: [react()],
+  server: {
+    port: 5173
+  }
+})

package/registry/families/fraud-ops-console/manifest.json

@@ -0,0 +1,138 @@
+{
+  "id": "fraud-ops-console",
+  "description": "fraud-ops-console starter — derived from 3× real demand signal. Taxonomy guess: typescript/node/frontend.",
+  "tags": [
+    "node",
+    "frontend",
+    "typescript"
+  ],
+  "taxonomy": {
+    "language": "typescript",
+    "runtime": "node",
+    "surface": "frontend"
+  },
+  "defaults": {
+    "projectType": "frontend",
+    "serviceName": "starter-foundry-fraud-ops-console"
+  },
+  "files": [
+    {
+      "source": "files/package.json",
+      "target": "package.json"
+    },
+    {
+      "source": "files/tsconfig.json",
+      "target": "tsconfig.json"
+    },
+    {
+      "source": "files/vite.config.ts",
+      "target": "vite.config.ts"
+    },
+    {
+      "source": "files/index.html",
+      "target": "index.html"
+    },
+    {
+      "source": "files/src/main.tsx",
+      "target": "src/main.tsx"
+    },
+    {
+      "source": "files/src/App.tsx",
+      "target": "src/App.tsx"
+    },
+    {
+      "source": "files/.env.example",
+      "target": ".env.example"
+    },
+    {
+      "source": "files/README.md",
+      "target": "README.md"
+    },
+    {
+      "source": "files/validate-node.mjs",
+      "target": "validate-node.mjs"
+    }
+  ],
+  "validationChecks": [
+    {
+      "type": "file-exists",
+      "path": "package.json"
+    },
+    {
+      "type": "file-exists",
+      "path": "tsconfig.json"
+    },
+    {
+      "type": "file-exists",
+      "path": "vite.config.ts"
+    }
+  ],
+  "contextHints": {
+    "commands": [
+      "Initialize a new project with the fraud-ops-console starter",
+      "Install required dependencies",
+      "Configure the project structure"
+    ],
+    "entrypoints": [
+      "index.ts"
+    ],
+    "preview": null,
+    "extensionPoints": []
+  },
+  "keywords": [
+    "fraud detection",
+    "risk management",
+    "compliance",
+    "frontend",
+    "typescript",
+    "nodejs",
+    "security",
+    "regulations",
+    "data-driven",
+    "modular architecture",
+    "performance",
+    "scalability"
+  ],
+  "tieredKeywords": {
+    "tier1": [
+      "fraud detection",
+      "fraud ops console",
+      "risk scoring dashboard",
+      "kyc alerts"
+    ],
+    "tier2": [
+      "security",
+      "regulations",
+      "data-driven",
+      "modular architecture",
+      "performance",
+      "scalability"
+    ]
+  },
+  "buildHints": {
+    "whenToUse": "When building a frontend application for fraud operations, such as fraud detection, risk management, or compliance, and requiring a TypeScript and Node.js runtime.",
+    "firstSteps": [
+      "Initialize a new project with the fraud-ops-console starter",
+      "Install required dependencies",
+      "Configure the project structure",
+      "Implement fraud detection and risk management features",
+      "Add a 'dev' script to the package.json file"
+    ],
+    "gotchas": [
+      "Ensure proper handling of sensitive data and compliance with regulations",
+      "Implement robust security measures to prevent fraud and unauthorized access",
+      "Monitor and update dependencies to prevent vulnerabilities"
+    ],
+    "architectureNotes": [
+      "Use a modular architecture to separate concerns and improve maintainability",
+      "Implement a data-driven approach to fraud detection and risk management",
+      "Utilize Node.js and TypeScript to leverage their performance and security benefits"
+    ],
+    "placeholders": [
+      {
+        "path": "index.ts",
+        "description": "Primary entrypoint agents must extend."
+      }
+    ]
+  }
+}

package/registry/families/frontend-static/files/package.json

@@ -10,5 +10,13 @@
   },
   "devDependencies": {
     "serve": "^14.2.0"
+  },
+  "overrides": {
+    "vite": "^6.4.2"
+  },
+  "pnpm": {
+    "overrides": {
+      "vite": "^6.4.2"
+    }
   }
 }

package/registry/families/frontend-static/manifest.json

@@ -87,5 +87,22 @@
       "website",
       "landing"
     ]
+  },
+  "buildHints": {
+    "whenToUse": "Pure static landing page served by `serve` (no framework). Use when the product is truly a marketing landing page or a static doc site \u2014 NOT for apps with state.",
+    "firstSteps": [
+      "Edit `index.html` and `app.js` directly. No build step; `serve -l 3000` is all you need.",
+      "Brand strings: inline in `index.html`. Palette: inline `<style>` or separate `.css`."
+    ],
+    "placeholders": [
+      {
+        "path": "index.html",
+        "description": "Default landing with generic hero/feature/CTA blocks. Replace ALL content for the product \u2014 the default is placeholder-only."
+      },
+      {
+        "path": "app.js",
+        "description": "Optional interactivity entry. If the landing is truly static, delete the file + its script tag."
+      }
+    ]
   }
 }

package/registry/families/fullstack-ts/files/package.json

@@ -17,7 +17,15 @@
     "@tailwindcss/postcss": "latest",
     "postcss": "latest",
     "tailwindcss": "latest",
-    "typescript": "^5.7.0",
-    "@types/node": "^20.0.0"
+    "typescript": "^5.9.0",
+    "@types/node": "^20.17.0"
+  },
+  "overrides": {
+    "vite": "^6.4.2"
+  },
+  "pnpm": {
+    "overrides": {
+      "vite": "^6.4.2"
+    }
   }
 }

package/registry/families/fullstack-ts/manifest.json

@@ -416,5 +416,27 @@
       "task scheduler",
       "cron manager"
     ]
+  },
+  "buildHints": {
+    "whenToUse": "Node-backed fullstack with a React frontend bundled together. Use when the product needs tight frontend/backend coupling but NOT a framework like Next or Remix.",
+    "firstSteps": [
+      "Install: `pnpm install` then `pnpm dev` \u2014 starts the Node server (src/server.ts) with experimental TS strip + watch.",
+      "Brand strings: `src/personalize.json`. Palette: `src/personalize.css`.",
+      "API handlers extend `src/server.ts`. Client components under `src/components/`."
+    ],
+    "placeholders": [
+      {
+        "path": "src/App.tsx",
+        "description": "Default React landing with generic hero + KPI cards. Replace with the product's primary view."
+      },
+      {
+        "path": "src/server.ts",
+        "description": "Default Node server with `/health` + a stub API route. Add the product's real endpoints; keep /health for the preview liveness check."
+      },
+      {
+        "path": "src/personalize.json",
+        "description": "Brand strings \u2014 edit but also rewrite App.tsx content."
+      }
+    ]
   }
 }

package/registry/families/gdpr-compliance-pack/files/docs/DPIA-template.md

@@ -0,0 +1,55 @@
+# Data Protection Impact Assessment (DPIA) — Template
+
+> **This is a template, not legal advice.** DPIA is required under Art. 35 when processing is likely to result in a high risk to rights + freedoms. Your DPO or legal team must sign off.
+
+## Project
+
+- **Name**: [Project / feature name]
+- **Start date**: [Date]
+- **DPIA owner**: [Name, role]
+- **Reviewed by DPO**: [Name, date]
+
+## 1. Description of processing (Art. 35(7)(a))
+
+- **Nature**: [What personal data is processed?]
+- **Scope**: [Data subjects, geographic scope, data volume]
+- **Context**: [Relationship with data subjects, expectations]
+- **Purposes**: [Why is this processed?]
+
+## 2. Necessity + proportionality (Art. 35(7)(b))
+
+- **Legal basis** (Art. 6): [consent / contract / legal-obligation / ...]
+- **If special categories** (Art. 9): [legal basis under 9(2)?]
+- **Data minimization**: [What steps ensure only necessary data is collected?]
+- **Retention period**: [Days / months / years]
+- **Subject rights measures**: [How are export/erasure/object surfaced?]
+
+## 3. Risks to rights + freedoms (Art. 35(7)(c))
+
+| Risk | Likelihood | Severity | Overall |
+|---|---|---|---|
+| Unauthorized access | [L/M/H] | [L/M/H] | [L/M/H] |
+| Unauthorized disclosure | [L/M/H] | [L/M/H] | [L/M/H] |
+| Data loss / corruption | [L/M/H] | [L/M/H] | [L/M/H] |
+| Profiling harm | [L/M/H] | [L/M/H] | [L/M/H] |
+| Discrimination | [L/M/H] | [L/M/H] | [L/M/H] |
+| Identity theft | [L/M/H] | [L/M/H] | [L/M/H] |
+
+## 4. Measures to address risks (Art. 35(7)(d))
+
+| Risk | Mitigation | Owner | Due |
+|---|---|---|---|
+| [risk 1] | [control] | [person] | [date] |
+| [risk 2] | [control] | [person] | [date] |
+
+## 5. Conclusion
+
+- **Residual risk**: [Acceptable / Requires prior consultation under Art. 36]
+- **Sign-off**:
+  - Project owner: _____________ Date: _______
+  - DPO: _____________ Date: _______
+  - Legal: _____________ Date: _______
+
+## 6. Review schedule
+
+Review annually or on material change to processing. Log reviews in `.evolve/dpia-reviews/`.