orbit-code-ai 0.1.40 → 0.1.41

package/README.md

@@ -107,6 +107,38 @@ Built-in reference docs loaded into every session:
 
 ---
 
+## LLD → APIC artifacts
+
+Turn a middleware **Low-Level Design** (`.docx`) into deployable artifacts. `/lld` reads the Word
+document (paragraphs **and** tables), extracts the API spec against the house template, shows you an
+extraction summary to confirm, then generates any combination of:
+
+```
+/lld "C:\path\to\LLD_MyApi.docx" [contract] [api] [diagram]   # or: both | all (default: all)
+```
+
+- **contract** → a contract-only OpenAPI (rich request/response/error schemas) via `/api-contract`
+- **api** → the APIC gateway definition (`x-ibm-configuration` assembly) via `/apic-api`
+  — supports a `backend` pattern (APIC wraps a raw backend in the ESB envelope) and a `wrapper`
+  pattern (a thin proxy over an existing ACE/webMethods service that already returns the envelope)
+- **diagram** → the **Integration Service Flow** as a `.drawio` file (BIDAYA activity-diagram house
+  style) via `/drawio`
+
+The diagram is drawn deterministically from a small flow model, and branches reflect the LLD:
+
+- a **token** branch (access-token call cached until the JWT `exp`) appears only when auth is
+  token-based — omitted for no-auth / static-key services;
+- a **cache** branch appears only when the MW caches the response — omitted when the LLD says
+  "Cache: Not applicable";
+- the **success/error** decision uses the LLD's actual success rule (e.g. `HTTP 200`, or a body
+  status code like `eigerResultCode = 200`), feeding green (success) / red (error) mapping boxes.
+
+Output opens directly in [diagrams.net](https://app.diagrams.net) with the house style: green
+swimlanes, blue action parallelograms, pink decision diamonds, green/red mapping boxes, a yellow
+START ellipse and a red-ringed final node.
+
+---
+
 ## Agent Routing
 
 Route different agent tasks to different models. Define each model's connection in `agentModels`, then map agents (or `default`) to those names in `agentRouting`. Every name used in `agentRouting` must exist in `agentModels`:

package/dist/cli.mjs

@@ -83818,7 +83818,7 @@ async function printStartupScreen() {
   const sLen = ` ● ${sL}    Ready — type /help to begin`.length;
   out.push(boxRow(sRow, W2, sLen));
   out.push(`${rgb(...BORDER)}╚${"═".repeat(W2 - 2)}╝${RESET}`);
-  out.push(`  ${DIM}${rgb(...DIMCOL)}orbit-code ${RESET}${rgb(...ACCENT)}v${"0.1.40"}${RESET}`);
+  out.push(`  ${DIM}${rgb(...DIMCOL)}orbit-code ${RESET}${rgb(...ACCENT)}v${"0.1.41"}${RESET}`);
   out.push("");
   process.stdout.write(out.join(`
 `) + `
@@ -334342,7 +334342,7 @@ function getAnthropicEnvMetadata() {
 function getBuildAgeMinutes() {
   if (false)
     ;
-  const buildTime = new Date("2026-07-22T07:54:15.011Z").getTime();
+  const buildTime = new Date("2026-07-23T10:01:27.244Z").getTime();
   if (isNaN(buildTime))
     return;
   return Math.floor((Date.now() - buildTime) / 60000);
@@ -358759,7 +358759,7 @@ function buildPrimarySection() {
   }, undefined, false, undefined, this);
   return [{
     label: "Version",
-    value: "0.1.40"
+    value: "0.1.41"
   }, {
     label: "Session name",
     value: nameValue
@@ -471068,7 +471068,7 @@ function WelcomeV2() {
             dimColor: true,
             children: [
               "v",
-              "0.1.40",
+              "0.1.41",
               " "
             ]
           }, undefined, true, undefined, this)
@@ -471268,7 +471268,7 @@ function WelcomeV2() {
           dimColor: true,
           children: [
             "v",
-            "0.1.40",
+            "0.1.41",
             " "
           ]
         }, undefined, true, undefined, this)
@@ -471494,7 +471494,7 @@ function AppleTerminalWelcomeV2(t0) {
         dimColor: true,
         children: [
           "v",
-          "0.1.40",
+          "0.1.41",
           " "
         ]
       }, undefined, true, undefined, this);
@@ -471748,7 +471748,7 @@ function AppleTerminalWelcomeV2(t0) {
       dimColor: true,
       children: [
         "v",
-        "0.1.40",
+        "0.1.41",
         " "
       ]
     }, undefined, true, undefined, this);
@@ -475773,6 +475773,250 @@ var init_aceSkills = __esm(() => {
   init_bundledSkills();
 });
 
+// src/utils/drawio/drawioFlow.ts
+function escapeXml2(s) {
+  return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
+}
+function labelValue(label) {
+  return label.split(/\r?\n/).map(escapeXml2).join("&lt;br&gt;");
+}
+function laneHeight(name) {
+  const n2 = name.toUpperCase();
+  if (n2 === "CONSUMER")
+    return 320;
+  if (n2 === "MW" || n2 === "MIDDLEWARE")
+    return 860;
+  return 320;
+}
+function validateModel2(model) {
+  if (!model.lanes?.length)
+    throw new Error("FlowModel needs at least one lane.");
+  if (!model.nodes?.length)
+    throw new Error("FlowModel needs at least one node.");
+  const laneSet = new Set(model.lanes);
+  const ids = new Set;
+  for (const n2 of model.nodes) {
+    if (ids.has(n2.id))
+      throw new Error(`Duplicate node id: ${n2.id}`);
+    ids.add(n2.id);
+    if (!laneSet.has(n2.lane))
+      throw new Error(`Node "${n2.id}" is in unknown lane "${n2.lane}".`);
+  }
+  for (const e2 of model.edges ?? []) {
+    if (!ids.has(e2.source))
+      throw new Error(`Edge source "${e2.source}" is not a known node id.`);
+    if (!ids.has(e2.target))
+      throw new Error(`Edge target "${e2.target}" is not a known node id.`);
+  }
+}
+function layout(model) {
+  const laneBands = [];
+  let y2 = 0;
+  for (const name of model.lanes) {
+    const h2 = laneHeight(name);
+    laneBands.push({ name, y: y2, h: h2 });
+    y2 += h2;
+  }
+  const pageH = y2;
+  const bandOf = (lane) => laneBands.find((b) => b.name === lane);
+  const rects = new Map;
+  for (const band of laneBands) {
+    const laneNodes = model.nodes.filter((n2) => n2.lane === band.name);
+    const isMW = band.name.toUpperCase() === "MW" || band.name.toUpperCase() === "MIDDLEWARE";
+    if (isMW) {
+      let cy = band.y + 40;
+      for (let i3 = 0;i3 < laneNodes.length; i3++) {
+        const n2 = laneNodes[i3];
+        const s = SIZE[n2.kind];
+        const next = laneNodes[i3 + 1];
+        if (n2.kind === "success" && next && next.kind === "error") {
+          rects.set(n2.id, { x: NODE_X0, y: cy, w: s.w, h: s.h });
+          const s2 = SIZE[next.kind];
+          rects.set(next.id, { x: NODE_X0 + s.w + 90, y: cy, w: s2.w, h: s2.h });
+          i3++;
+          cy += Math.max(s.h, s2.h) + 55;
+        } else {
+          rects.set(n2.id, { x: NODE_X0, y: cy, w: s.w, h: s.h });
+          cy += s.h + 55;
+        }
+      }
+    } else {
+      let cx = NODE_X0;
+      const midY = band.y + band.h / 2;
+      for (const n2 of laneNodes) {
+        const s = SIZE[n2.kind];
+        rects.set(n2.id, { x: cx, y: Math.round(midY - s.h / 2), w: s.w, h: s.h });
+        cx += s.w + 70;
+      }
+    }
+  }
+  return { laneBands, rects, pageH };
+}
+function anchors(a2, b) {
+  const ac = { x: a2.x + a2.w / 2, y: a2.y + a2.h / 2 };
+  const bc = { x: b.x + b.w / 2, y: b.y + b.h / 2 };
+  const dx = bc.x - ac.x;
+  const dy = bc.y - ac.y;
+  let ex, ey, nx, ny;
+  if (Math.abs(dy) >= Math.abs(dx)) {
+    if (dy >= 0) {
+      ex = 0.5;
+      ey = 1;
+      nx = 0.5;
+      ny = 0;
+    } else {
+      ex = 0.5;
+      ey = 0;
+      nx = 0.5;
+      ny = 1;
+    }
+  } else if (dx >= 0) {
+    ex = 1;
+    ey = 0.5;
+    nx = 0;
+    ny = 0.5;
+  } else {
+    ex = 0;
+    ey = 0.5;
+    nx = 1;
+    ny = 0.5;
+  }
+  return `exitX=${ex};exitY=${ey};exitDx=0;exitDy=0;entryX=${nx};entryY=${ny};entryDx=0;entryDy=0;`;
+}
+function generateDrawioFlow(model) {
+  validateModel2(model);
+  const { laneBands, rects, pageH } = layout(model);
+  const cells = ['<mxCell id="0"/>', '<mxCell id="1" parent="0"/>'];
+  laneBands.forEach((b, i3) => {
+    cells.push(`<mxCell id="lane${i3}" value="${escapeXml2(b.name)}" style="${LANE_STYLE}" vertex="1" parent="1">` + `<mxGeometry x="0" y="${b.y}" width="${PAGE_W}" height="${b.h}" as="geometry"/></mxCell>`);
+  });
+  for (const n2 of model.nodes) {
+    const r = rects.get(n2.id);
+    const value = n2.kind === "end" ? "" : labelValue(n2.label);
+    cells.push(`<mxCell id="${escapeXml2(n2.id)}" value="${value}" style="${STYLE[n2.kind]}" vertex="1" parent="1">` + `<mxGeometry x="${r.x}" y="${r.y}" width="${r.w}" height="${r.h}" as="geometry"/></mxCell>`);
+  }
+  model.edges?.forEach((e2, i3) => {
+    const sr = rects.get(e2.source);
+    const tr = rects.get(e2.target);
+    const style = EDGE_STYLE + anchors(sr, tr);
+    cells.push(`<mxCell id="e${i3}" value="${e2.label ? labelValue(e2.label) : ""}" style="${style}" edge="1" parent="1" source="${escapeXml2(e2.source)}" target="${escapeXml2(e2.target)}">` + `<mxGeometry relative="1" as="geometry"/></mxCell>`);
+  });
+  const name = escapeXml2(`${model.apiName} Integration Flow`);
+  return `<mxfile host="app.diagrams.net" version="24.0.0">` + `<diagram name="${name}" id="flow">` + `<mxGraphModel dx="1200" dy="1500" grid="1" gridSize="10" guides="1" tooltips="1" connect="1" arrows="1" fold="1" page="1" pageScale="1" pageWidth="${PAGE_W}" pageHeight="${pageH}" math="0" shadow="0">` + `<root>${cells.join("")}</root>` + `</mxGraphModel></diagram></mxfile>`;
+}
+var LANE_STYLE = "swimlane;html=1;horizontal=0;startSize=32;fillColor=#3FA34D;swimlaneFillColor=#FFFFFF;strokeColor=#000000;fontColor=#FFFFFF;fontStyle=1;fontSize=13;verticalAlign=middle;", STYLE, EDGE_STYLE = "edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;endArrow=classic;strokeColor=#000000;fontColor=#000000;fontStyle=1;fontSize=11;", PAGE_W = 1090, LANE_TITLE = 32, NODE_X0, SIZE;
+var init_drawioFlow = __esm(() => {
+  STYLE = {
+    action: "shape=parallelogram;perimeter=parallelogramPerimeter;whiteSpace=wrap;html=1;fillColor=#7EA6E0;strokeColor=#3B5A9A;fontColor=#000000;fontStyle=1;",
+    success: "shape=parallelogram;perimeter=parallelogramPerimeter;whiteSpace=wrap;html=1;fillColor=#8FCB5E;strokeColor=#5E8A34;fontColor=#000000;fontStyle=1;",
+    error: "shape=parallelogram;perimeter=parallelogramPerimeter;whiteSpace=wrap;html=1;fillColor=#FF2020;strokeColor=#B20000;fontColor=#FFFFFF;fontStyle=1;",
+    decision: "rhombus;whiteSpace=wrap;html=1;fillColor=#F8CECC;strokeColor=#D48A8A;fontColor=#000000;fontStyle=1;",
+    start: "ellipse;whiteSpace=wrap;html=1;fillColor=#FFF176;strokeColor=#B8A400;fontColor=#000000;fontStyle=1;",
+    end: "ellipse;shape=endState;fillColor=#000000;strokeColor=#FF0000;strokeWidth=2;"
+  };
+  NODE_X0 = LANE_TITLE + 40;
+  SIZE = {
+    start: { w: 90, h: 50 },
+    end: { w: 30, h: 30 },
+    action: { w: 190, h: 60 },
+    success: { w: 200, h: 64 },
+    error: { w: 200, h: 64 },
+    decision: { w: 180, h: 90 }
+  };
+});
+
+// src/skills/bundled/drawio.ts
+import { writeFileSync as writeFileSync5 } from "fs";
+import { join as join127 } from "path";
+function textBlock(text) {
+  return [{ type: "text", text }];
+}
+function sanitizeStem(s) {
+  return s.trim().replace(/\.docx$/i, "").replace(/[^A-Za-z0-9._-]+/g, "_").replace(/^_+|_+$/g, "") || "API";
+}
+function handle(args) {
+  const trimmed = args.trim();
+  if (!trimmed || trimmed.toLowerCase() === "help")
+    return HELP;
+  let model;
+  try {
+    model = JSON.parse(trimmed);
+  } catch (e2) {
+    return `/drawio expects a single JSON FlowModel argument, but JSON.parse failed: ${e2.message}
+
+${HELP}`;
+  }
+  let xml;
+  try {
+    xml = generateDrawioFlow(model);
+  } catch (e2) {
+    return `The flow model is invalid: ${e2.message}
+
+Fix the model (check node ids, lanes, and edge endpoints) and call /drawio again.`;
+  }
+  const stem = sanitizeStem(model.fileStem || model.apiName || "API");
+  const filename = `${stem}_Integration_Flow.drawio`;
+  try {
+    writeFileSync5(join127(process.cwd(), filename), xml, "utf8");
+  } catch (e2) {
+    return `Generated valid diagram XML but could not write ${filename}: ${e2.message}.
+Save this content manually as ${filename}:
+
+${xml}`;
+  }
+  return `✓ Integration-flow diagram written → ${filename}
+
+  lanes: ${model.lanes.join(" / ")}
+  nodes: ${model.nodes.length}    edges: ${model.edges?.length ?? 0}
+
+Opens in diagrams.net (app.diagrams.net). Tell the user the file was created at ${filename} and summarize the flow branches it drew (token/cache/success-error) based on the model.`;
+}
+function registerDrawioSkill() {
+  registerBundledSkill({
+    name: "drawio",
+    description: "Render an integration-flow semantic model (JSON: lanes/nodes/edges) into a .drawio activity diagram in the BIDAYA house style, written next to the other artifacts. Deterministic layout + XML; used by /lld to emit the Integration Service Flow diagram.",
+    whenToUse: "After extracting an integration-flow semantic model from an LLD (usually via /lld ... diagram), to write the .drawio diagram file. Pass the JSON FlowModel as the argument.",
+    argumentHint: "<json flow model>",
+    userInvocable: true,
+    allowedTools: [],
+    async getPromptForCommand(args) {
+      try {
+        return textBlock(handle(args));
+      } catch (e2) {
+        return textBlock(`/drawio error: ${e2.message}`);
+      }
+    }
+  });
+}
+var HELP = `# /drawio — render an integration-flow semantic model to a .drawio diagram
+
+Usage:
+  /drawio <json flow model>
+
+The argument is a JSON FlowModel:
+  {
+    "apiName": "Commodity API",
+    "fileStem": "LLD_CommodityAPI",              // optional; output = <fileStem>_Integration_Flow.drawio
+    "lanes": ["CONSUMER", "MW", "Eiger"],        // top→bottom; MW gets the tallest lane
+    "nodes": [
+      { "id": "start",  "kind": "start",   "lane": "CONSUMER", "label": "START" },
+      { "id": "send",   "kind": "action",  "lane": "CONSUMER", "label": "send request to MW" },
+      { "id": "dec",    "kind": "decision","lane": "MW",       "label": "Valid access token?" },
+      { "id": "ok",     "kind": "success", "lane": "MW",       "label": "Map success..." },
+      { "id": "err",    "kind": "error",   "lane": "MW",       "label": "Map error..." },
+      { "id": "end",    "kind": "end",     "lane": "CONSUMER", "label": "" }
+    ],
+    "edges": [ { "source": "start", "target": "send", "label": "" } ]
+  }
+
+kind ∈ start | action | decision | success | error | end. This skill lays out the nodes and writes
+the .drawio file in the BIDAYA house style (green lanes, blue parallelograms, pink diamonds,
+green/red mapping boxes, START ellipse, red-ringed final node).`;
+var init_drawio = __esm(() => {
+  init_bundledSkills();
+  init_drawioFlow();
+});
+
 // src/utils/docx.ts
 import { readFileSync as readFileSync10 } from "fs";
 function escapeReg(s) {
@@ -475943,7 +476187,7 @@ async function extractDocxText(filePath, maxChars = 60000) {
 var init_docx = () => {};
 
 // src/skills/bundled/lld.ts
-function textBlock(text) {
+function textBlock2(text) {
   return [{ type: "text", text }];
 }
 function parseArgs(args) {
@@ -475963,22 +476207,90 @@ function parseArgs(args) {
       rest = trimmed;
     }
   }
-  const t = rest.match(/\b(contract|api|both)\b/i)?.[1]?.toLowerCase();
-  const target = t === "contract" || t === "api" ? t : "both";
-  return { path: path20.replace(/[.,;]$/, ""), target };
+  const kw = rest.toLowerCase();
+  const c6 = /\bcontract\b/.test(kw);
+  const a2 = /\bapi\b/.test(kw);
+  const d = /\b(diagram|drawio|flow)\b/.test(kw);
+  const both = /\bboth\b/.test(kw);
+  const all4 = /\ball\b/.test(kw);
+  const want = all4 || !c6 && !a2 && !d && !both ? { contract: true, api: true, diagram: true } : { contract: c6 || both, api: a2 || both, diagram: d };
+  return { path: path20.replace(/[.,;]$/, ""), want };
 }
-function buildPrompt(path20, content, target) {
-  const gen = target === "contract" ? "the CONTRACT only (invoke /api-contract)" : target === "api" ? "the GATEWAY API only (invoke /apic-api)" : "BOTH the contract (/api-contract) and the gateway API (/apic-api)";
-  return `You are turning an LLD (Low-Level Design) Word document into APIC artifacts. The full LLD text
-below was extracted from ${path20} (paragraphs as text, tables as markdown). Requested output: ${gen}.
-
-════════════════════ EXTRACTED LLD ════════════════════
-${content}
-════════════════════ END LLD ════════════════════
-
-Do this, in order:
-
-1. EXTRACT the API spec from the LLD above, using this house-template map (sections/tables → fields):
+function buildPrompt(path20, content, want) {
+  const parts = [];
+  if (want.contract)
+    parts.push("the CONTRACT (invoke /api-contract)");
+  if (want.api)
+    parts.push("the GATEWAY API (invoke /apic-api)");
+  if (want.diagram)
+    parts.push("the INTEGRATION-FLOW DIAGRAM (build a flow model, then invoke /drawio)");
+  const gen = parts.join(", ");
+  const diagramSection = want.diagram ? `
+
+── INTEGRATION-FLOW DIAGRAM ──
+Also produce the "Integration Service Flow" diagram (the LLD's Figure 1) as a .drawio file. Build a
+SEMANTIC flow model from the SAME extracted LLD, then invoke the /drawio skill with it as JSON —
+/drawio does the layout + XML + file write; you only supply the model.
+
+Model shape (pass as one JSON object to /drawio):
+  { "apiName": "...", "fileStem": "<the LLD file name, no extension>",
+    "lanes": ["CONSUMER", "MW", "<Provider>"],   // top→bottom; MW is the middle/tallest lane
+    "nodes": [ { "id","kind","lane","label" } ], // kind ∈ start|action|decision|success|error|end
+    "edges": [ { "source","target","label" } ] }
+
+Build the flow with these rules — include a branch ONLY when the LLD supports it:
+  CONSUMER lane: start "START" → action "send request to MW";  action "Receive MW response" → end node.
+  MW lane:
+    - If the MW caches the RESPONSE (LLD says so; if it says "Cache: Not applicable", OMIT this):
+        decision "Check cache (payload in last N min)?" → True path returns a green success
+        "get response from cache and return to consumer" → Receive MW response; False path continues.
+    - If auth is TOKEN-BASED (the MW calls an access-token/login op and caches the JWT until exp):
+        decision "Valid access token in cache? (exp not passed)" → True → action "send request to
+        <Provider> (<operation>)"; False → (Provider lane) action "invoke <Provider> Access Token
+        service (get JWT, cache until exp)" → back to "send request to <Provider>".
+        If NO auth / static keys: OMIT the token decision and the Access Token node entirely.
+    - action "send request to <Provider>" → (Provider lane) action "invoke <Provider> <operation>".
+    - provider returns → action "MW will receive BE Response".
+    - decision "Check body status (<the LLD's actual success rule, e.g. eigerResultCode = 200>)?":
+        success edge → green success "Map the success response and send to consumer" → Receive MW response
+        error   edge → red   error   "Map the error response and send to consumer"   → Receive MW response
+  <Provider> lane: holds "invoke ... Access Token service" (only if token-based) and
+    "invoke ... <operation>"; the operation's "2xx"/"non-2xx" (or Success/Failure) edges return to
+    "MW will receive BE Response".
+
+ONE diagram per LLD representing the common MW pattern. If operations diverge (e.g. one cached, one
+not), pick the richest common flow and label the operation box "<op1> | <op2>". Use success/error
+mapping boxes for the mapping steps. Every edge's source/target must be a node id you defined.
+` : "";
+  const onlyDiagram = want.diagram && !want.contract && !want.api;
+  const asks = [];
+  if (want.contract || want.api)
+    asks.push("OpenAPI version — 2.0 or 3.0");
+  if (want.contract)
+    asks.push("inbound consumer auth scheme (basic / apikey / oauth2)", "API host (e.g. api.example.com)");
+  if (want.api)
+    asks.push("integration pattern — wrapper (thin proxy over an ACE/webMethods service) vs backend (APIC calls the raw backend)", "JWT validation on/off (and the crypto object name if on)", "the backend target-url variable / endpoint");
+  const asksBlock = asks.length ? `Then ask the user ONLY for these unguessables (they are needed for the requested output):
+   - ${asks.join(`
+   - `)}
+   NEVER fabricate hosts, crypto objects, scopes, or business fields — ask, or use clearly-marked
+   CHANGEME placeholders and list them.` : `Do NOT ask for any unguessables. A diagram-only request is fully derived from the LLD (the
+   operations, provider, whether auth is token-based, cache behaviour, and the success rule are all in
+   the document). Do NOT ask about OpenAPI version, host, auth scheme, JWT, crypto, or backend URLs —
+   none of those are needed to draw the flow.`;
+  const notRequested = [];
+  if (!want.contract)
+    notRequested.push("/api-contract");
+  if (!want.api)
+    notRequested.push("/apic-api");
+  if (!want.diagram)
+    notRequested.push("/drawio");
+  const scopeLine = `Produce ONLY: ${gen}.` + (notRequested.length ? ` Do NOT invoke ${notRequested.join(" or ")}, and do NOT ask for details only those skills need.` : "");
+  const extractStep = onlyDiagram ? `1. EXTRACT only the FLOW-relevant facts from the LLD (you do NOT need the request/response field
+   models for a diagram): the operation(s) (name, verb, gateway endpoint); the provider(s); whether the
+   MW obtains and CACHES an access token (→ token-based auth) or uses static/no auth; whether the MW
+   caches the RESPONSE (or says "Cache: Not applicable"); and the success rule (e.g. HTTP 200, or a body
+   status code like eigerResultCode = 200).` : `1. EXTRACT the API spec from the LLD above, using this house-template map (sections/tables → fields):
    - Introduction (Purpose / Scope) → API title + description.
    - "Integration flow (<op>)" → its "API Gateway endpoint" and "Method" → the operation path + verb.
    - "<op> Request" table → request model. Columns are typically Field | Type | Occurrence | Length |
@@ -475990,30 +476302,42 @@ Do this, in order:
    - "Annex / Provider" (endpoints, auth) → the backend/provider endpoint(s) and their auth.
    - Integration pattern: if the middleware is an existing ACE/webMethods service that already returns
      the response envelope, it is a **wrapper**; if APIC calls a raw backend and must build the
-     envelope, it is **backend**. State which and why.
+     envelope, it is **backend**. State which and why.`;
+  const genBullets = [];
+  if (want.contract)
+    genBullets.push(`   - Contract → invoke /api-contract with the API name, host, security, and the full request/response/error models.`);
+  if (want.api)
+    genBullets.push(`   - Gateway API → invoke /apic-api per operation with the verb, basePath, explicit path, --pattern, backend target-url, and flags.`);
+  if (want.diagram)
+    genBullets.push(`   - Integration-flow diagram → build the JSON flow model per the DIAGRAM rules above and invoke /drawio. Report the .drawio file it wrote.`);
+  return `You are turning an LLD (Low-Level Design) Word document into APIC artifacts. The full LLD text
+below was extracted from ${path20} (paragraphs as text, tables as markdown).
 
-2. ECHO a concise EXTRACTION SUMMARY to the user FIRST (do NOT generate yet): API name, pattern,
-   each operation (verb + path), request/response field lists, error codes, backend endpoint, and the
-   fields you could NOT determine. Then ask for the unguessables only: OpenAPI 2.0 vs 3.0; inbound
-   consumer auth (basic/apikey/oauth2); host; and (for /apic-api) JWT on/off + crypto object and the
-   backend target-url variable. NEVER fabricate hosts, crypto objects, scopes, or business fields — ask
-   or use clearly-marked CHANGEME placeholders and list them.
+**SCOPE: ${scopeLine}**${diagramSection}
+
+════════════════════ EXTRACTED LLD ════════════════════
+${content}
+════════════════════ END LLD ════════════════════
+
+Do this, in order:
+
+${extractStep}
+
+2. ECHO a concise EXTRACTION SUMMARY to the user FIRST (do NOT generate yet), covering only what the
+   requested output needs. ${asksBlock}
 
 3. After the user confirms/corrects, GENERATE ${gen}:
-   - Contract → invoke the /api-contract skill, passing the API name, host, security, and the full
-     request/response/error models you extracted.
-   - Gateway API → invoke the /apic-api skill, passing the operation (name, verb, basePath, explicit
-     path), the chosen --pattern (wrapper vs backend), the backend target-url, and the flags. One
-     /apic-api call per operation.
+${genBullets.join(`
+`)}
    Reuse the values from the extraction summary verbatim — do not re-derive or drop fields.
 
 Ground everything in the extracted LLD above; if the LLD does not state something, say so rather than
 inventing it.`;
 }
-async function handle(args) {
-  const { path: path20, target } = parseArgs(args);
+async function handle2(args) {
+  const { path: path20, want } = parseArgs(args);
   if (!path20)
-    return HELP;
+    return HELP2;
   let content;
   try {
     content = await extractDocxText(path20);
@@ -476026,33 +476350,34 @@ Give the full path to a .docx file, e.g.
   if (!content.trim()) {
     return `The LLD at "${path20}" extracted no text (it may be image-only or empty). I can't generate from it — confirm the file, or paste the request/response models directly.`;
   }
-  return buildPrompt(path20, content, target);
+  return buildPrompt(path20, content, want);
 }
 function registerLldSkill() {
   registerBundledSkill({
     name: "lld",
     description: "Read an LLD (.docx) Word document — paragraphs and tables — extract the API spec against the house template, confirm it, then generate the contract-only OpenAPI (/api-contract) and/or the APIC gateway API (/apic-api) from it.",
     whenToUse: "When the user points at an LLD .docx and wants the APIC contract and/or gateway API generated from it (LLD → YAML).",
-    argumentHint: '"<path-to-LLD.docx>" [contract|api|both]',
+    argumentHint: '"<path-to-LLD.docx>" [contract|api|diagram|both|all]',
     userInvocable: true,
     allowedTools: ["Read", "Glob", "Grep"],
     async getPromptForCommand(args) {
       try {
-        return textBlock(await handle(args));
+        return textBlock2(await handle2(args));
       } catch (e2) {
-        return textBlock(`/lld error: ${e2.message}`);
+        return textBlock2(`/lld error: ${e2.message}`);
       }
     }
   });
 }
-var HELP = `# /lld — read an LLD (.docx) and generate the APIC contract and/or gateway API
+var HELP2 = `# /lld — read an LLD (.docx) and generate APIC contract / gateway API / flow diagram
 
 Usage:
-  /lld "<path-to-LLD.docx>" [contract|api|both]
+  /lld "<path-to-LLD.docx>" [contract] [api] [diagram] | both | all
 
-- contract → generate the contract-only OpenAPI via /api-contract
-- api      → generate the gateway implementation via /apic-api
-- both     → generate both (default)
+- contract → contract-only OpenAPI via /api-contract
+- api      → gateway implementation via /apic-api
+- diagram  → the Integration Service Flow .drawio via /drawio
+- both     → contract + api ;  all (or no keyword) → contract + api + diagram
 
 Reads the Word LLD (paragraphs + tables), extracts the API spec against the house template,
 shows you an extraction summary to confirm, then hands off to the generator skill(s).`;
@@ -510692,7 +511017,7 @@ ${declareVars || "  -- (no parameters)"}${resultHandling}`;
 }
 
 // src/skills/bundled/sql.ts
-function textBlock2(text) {
+function textBlock3(text) {
   return [{ type: "text", text }];
 }
 function parseConnectArgs(args) {
@@ -510931,22 +511256,22 @@ Do this, in order:
 
 Data-handling notice (state once): these are REAL values from the connected database and may include personal/production data. Return them as-is; never fabricate. If a SELECT returns no rows, say so plainly — for a happy case it means no qualifying data exists; do not invent a row. If the app calls no stored procedures at all, build the input body from the XSD types alone and clearly mark those values as synthetic (no DB row backs them).`;
 }
-async function handle2(args) {
+async function handle3(args) {
   const trimmed = args.trim();
   if (!trimmed)
-    return HELP2;
+    return HELP3;
   const firstTok = trimmed.split(/\s+/)[0].toLowerCase();
   const restStr = trimmed.slice(trimmed.split(/\s+/)[0].length).trim();
   switch (firstTok) {
     case "help":
-      return HELP2;
+      return HELP3;
     case "connect": {
       const parsed = parseConnectArgs(restStr);
       const missing = ["server", "database", "user", "password"].filter((k) => !parsed[k]);
       if (missing.length > 0)
         return `Missing required field(s): ${missing.join(", ")}.
 
-${HELP2}`;
+${HELP3}`;
       const conn2 = parsed;
       const saved = saveSqlConnection(conn2);
       let testMsg;
@@ -511074,14 +511399,14 @@ function registerSqlSkill() {
     allowedTools: ["Read", "Glob", "Grep"],
     async getPromptForCommand(args) {
       try {
-        return textBlock2(await handle2(args));
+        return textBlock3(await handle3(args));
       } catch (e2) {
-        return textBlock2(`/sql error: ${e2.message}`);
+        return textBlock3(`/sql error: ${e2.message}`);
       }
     }
   });
 }
-var HELP2, GROUND = `
+var HELP3, GROUND = `
 
 IMPORTANT: The metadata above is the ONLY database information you have — you cannot query the DB yourself. State only what appears above; never invent, guess, or "fill in" parameters, columns, types, or procedures. If something is not shown, say it is not shown.`, STOPWORDS;
 var init_sql = __esm(() => {
@@ -511089,7 +511414,7 @@ var init_sql = __esm(() => {
   init_connectionStore();
   init_mssqlClient();
   init_spMetadata();
-  HELP2 = `# /sql — SQL Server helper (native connection)
+  HELP3 = `# /sql — SQL Server helper (native connection)
 
 Subcommands (also understands plain English, e.g. "/sql details of the SP Get_UserInformation"):
 - \`/sql connect server=HOST database=DB user=USER password=PASS [port=1433] [encrypt=false]\` — save the connection once (OS secure vault; password never written to disk in plaintext).
@@ -511653,6 +511978,7 @@ function initBundledSkills() {
   registerAceSkills();
   registerSqlSkill();
   registerLldSkill();
+  registerDrawioSkill();
   registerUpdateConfigSkill();
   if (false) {}
   if (false) {}
@@ -511667,6 +511993,7 @@ function initBundledSkills() {
 var init_bundled = __esm(() => {
   init_setup2();
   init_aceSkills();
+  init_drawio();
   init_lld();
   init_orbitInChrome();
   init_sql();
@@ -512561,9 +512888,9 @@ var init_doctor3 = __esm(() => {
 
 // src/utils/releaseNotes.ts
 import { mkdir as mkdir36, readFile as readFile40, writeFile as writeFile37 } from "fs/promises";
-import { dirname as dirname56, join as join127 } from "path";
+import { dirname as dirname56, join as join128 } from "path";
 function getChangelogCachePath() {
-  return join127(getOrbitConfigHomeDir(), "cache", "changelog.md");
+  return join128(getOrbitConfigHomeDir(), "cache", "changelog.md");
 }
 async function migrateChangelogFromConfig() {
   const config3 = getGlobalConfig();
@@ -512702,12 +513029,12 @@ var init_releaseNotes = __esm(() => {
 });
 
 // src/utils/errorLogSink.ts
-import { dirname as dirname57, join as join128 } from "path";
+import { dirname as dirname57, join as join129 } from "path";
 function getErrorsPath() {
-  return join128(CACHE_PATHS.errors(), DATE + ".jsonl");
+  return join129(CACHE_PATHS.errors(), DATE + ".jsonl");
 }
 function getMCPLogsPath(serverName) {
-  return join128(CACHE_PATHS.mcpLogs(serverName), DATE + ".jsonl");
+  return join129(CACHE_PATHS.mcpLogs(serverName), DATE + ".jsonl");
 }
 function createJsonlWriter(options2) {
   const writer = createBufferedWriter(options2);
@@ -513047,7 +513374,7 @@ var init_sessionMemory = __esm(() => {
 // src/utils/iTermBackup.ts
 import { copyFile as copyFile10, stat as stat41 } from "fs/promises";
 import { homedir as homedir37 } from "os";
-import { join as join129 } from "path";
+import { join as join130 } from "path";
 function markITerm2SetupComplete() {
   saveGlobalConfig((current) => ({
     ...current,
@@ -513062,7 +513389,7 @@ function getIterm2RecoveryInfo() {
   };
 }
 function getITerm2PlistPath() {
-  return join129(homedir37(), "Library", "Preferences", "com.googlecode.iterm2.plist");
+  return join130(homedir37(), "Library", "Preferences", "com.googlecode.iterm2.plist");
 }
 async function checkAndRestoreITerm2Backup() {
   const { inProgress, backupPath } = getIterm2RecoveryInfo();
@@ -513893,14 +514220,14 @@ __export(exports_orbitDesktop, {
 });
 import { readdir as readdir27, readFile as readFile41, stat as stat42 } from "fs/promises";
 import { homedir as homedir38 } from "os";
-import { join as join130 } from "path";
+import { join as join131 } from "path";
 async function getOrbitDesktopConfigPath() {
   const platform6 = getPlatform();
   if (!SUPPORTED_PLATFORMS.includes(platform6)) {
     throw new Error(`Unsupported platform: ${platform6} - Orbit Desktop integration only works on macOS and WSL.`);
   }
   if (platform6 === "macos") {
-    return join130(homedir38(), "Library", "Application Support", "Orbit", "orbit_desktop_config.json");
+    return join131(homedir38(), "Library", "Application Support", "Orbit", "orbit_desktop_config.json");
   }
   const windowsHome = process.env.USERPROFILE ? process.env.USERPROFILE.replace(/\\/g, "/") : null;
   if (windowsHome) {
@@ -513919,7 +514246,7 @@ async function getOrbitDesktopConfigPath() {
         if (user.name === "Public" || user.name === "Default" || user.name === "Default User" || user.name === "All Users") {
           continue;
         }
-        const potentialConfigPath = join130(usersDir, user.name, "AppData", "Roaming", "Orbit", "orbit_desktop_config.json");
+        const potentialConfigPath = join131(usersDir, user.name, "AppData", "Roaming", "Orbit", "orbit_desktop_config.json");
         try {
           await stat42(potentialConfigPath);
           return potentialConfigPath;
@@ -518034,7 +518361,7 @@ var init_bridgeConfig = __esm(() => {
 // src/bridge/inboundAttachments.ts
 import { randomUUID as randomUUID47 } from "crypto";
 import { mkdir as mkdir37, writeFile as writeFile39 } from "fs/promises";
-import { basename as basename52, join as join131 } from "path";
+import { basename as basename52, join as join132 } from "path";
 function debug(msg) {
   logForDebugging2(`[bridge:inbound-attach] ${msg}`);
 }
@@ -518050,7 +518377,7 @@ function sanitizeFileName(name) {
   return base2 || "attachment";
 }
 function uploadsDir() {
-  return join131(getOrbitConfigHomeDir(), "uploads", getSessionId());
+  return join132(getOrbitConfigHomeDir(), "uploads", getSessionId());
 }
 async function resolveOne(att) {
   const token = getBridgeAccessToken();
@@ -518079,7 +518406,7 @@ async function resolveOne(att) {
   const safeName = sanitizeFileName(att.file_name);
   const prefix = (att.file_uuid.slice(0, 8) || randomUUID47().slice(0, 8)).replace(/[^a-zA-Z0-9_-]/g, "_");
   const dir = uploadsDir();
-  const outPath = join131(dir, `${prefix}-${safeName}`);
+  const outPath = join132(dir, `${prefix}-${safeName}`);
   try {
     await mkdir37(dir, { recursive: true });
     await writeFile39(outPath, data);
@@ -518179,7 +518506,7 @@ var init_sessionUrl = __esm(() => {
 
 // src/utils/plugins/zipCacheAdapters.ts
 import { readFile as readFile42 } from "fs/promises";
-import { join as join132 } from "path";
+import { join as join133 } from "path";
 async function readZipCacheKnownMarketplaces() {
   try {
     const content = await readFile42(getZipCacheKnownMarketplacesPath(), "utf-8");
@@ -518204,13 +518531,13 @@ async function saveMarketplaceJsonToZipCache(marketplaceName, installLocation) {
   const content = await readMarketplaceJsonContent(installLocation);
   if (content !== null) {
     const relPath = getMarketplaceJsonRelativePath(marketplaceName);
-    await atomicWriteToZipCache(join132(zipCachePath, relPath), content);
+    await atomicWriteToZipCache(join133(zipCachePath, relPath), content);
   }
 }
 async function readMarketplaceJsonContent(dir) {
   const candidates = [
-    join132(dir, ".orbit-plugin", "marketplace.json"),
-    join132(dir, "marketplace.json"),
+    join133(dir, ".orbit-plugin", "marketplace.json"),
+    join133(dir, "marketplace.json"),
     dir
   ];
   for (const candidate of candidates) {
@@ -519254,9 +519581,9 @@ __export(exports_bridgePointer, {
   BRIDGE_POINTER_TTL_MS: () => BRIDGE_POINTER_TTL_MS
 });
 import { mkdir as mkdir38, readFile as readFile43, stat as stat44, unlink as unlink23, writeFile as writeFile40 } from "fs/promises";
-import { dirname as dirname58, join as join133 } from "path";
+import { dirname as dirname58, join as join134 } from "path";
 function getBridgePointerPath(dir) {
-  return join133(getProjectsDir(), sanitizePath2(dir), "bridge-pointer.json");
+  return join134(getProjectsDir(), sanitizePath2(dir), "bridge-pointer.json");
 }
 async function writeBridgePointer(dir, pointer) {
   const path20 = getBridgePointerPath(dir);
@@ -523125,7 +523452,7 @@ ${m.text}
               let bridgeFailureDetail;
               try {
                 const { initReplBridge: initReplBridge2 } = await Promise.resolve().then(() => (init_initReplBridge(), exports_initReplBridge));
-                const handle3 = await initReplBridge2({
+                const handle4 = await initReplBridge2({
                   onInboundMessage(msg) {
                     const fields = extractInboundMessageFields(msg);
                     if (!fields)
@@ -523178,21 +523505,21 @@ ${m.text}
                   },
                   initialMessages: mutableMessages.length > 0 ? mutableMessages : undefined
                 });
-                if (!handle3) {
+                if (!handle4) {
                   sendControlResponseError(message, bridgeFailureDetail ?? "Remote Control initialization failed");
                 } else {
-                  bridgeHandle = handle3;
+                  bridgeHandle = handle4;
                   bridgeLastForwardedIndex = mutableMessages.length;
                   structuredIO.setOnControlRequestSent((request) => {
-                    handle3.sendControlRequest(request);
+                    handle4.sendControlRequest(request);
                   });
                   structuredIO.setOnControlRequestResolved((requestId) => {
-                    handle3.sendControlCancelRequest(requestId);
+                    handle4.sendControlCancelRequest(requestId);
                   });
                   sendControlResponseSuccess(message, {
-                    session_url: getRemoteSessionUrl(handle3.bridgeSessionId, handle3.sessionIngressUrl),
-                    connect_url: buildBridgeConnectUrl(handle3.environmentId, handle3.sessionIngressUrl),
-                    environment_id: handle3.environmentId
+                    session_url: getRemoteSessionUrl(handle4.bridgeSessionId, handle4.sessionIngressUrl),
+                    connect_url: buildBridgeConnectUrl(handle4.environmentId, handle4.sessionIngressUrl),
+                    environment_id: handle4.environmentId
                   });
                 }
               } catch (err2) {
@@ -524898,12 +525225,12 @@ __export(exports_install, {
   getInstallationPath: () => getInstallationPath2
 });
 import { homedir as homedir39 } from "node:os";
-import { join as join134 } from "node:path";
+import { join as join135 } from "node:path";
 function getInstallationPath2() {
   const isWindows2 = env2.platform === "win32";
   const homeDir = homedir39();
   if (isWindows2) {
-    const windowsPath = join134(homeDir, ".local", "bin", "orbitcode.exe");
+    const windowsPath = join135(homeDir, ".local", "bin", "orbitcode.exe");
     return windowsPath.replace(/\//g, "\\");
   }
   return "~/.local/bin/orbitcode";
@@ -527757,7 +528084,7 @@ Usage: orbit --remote "your task description"`, () => gracefulShutdown(1));
         pendingHookMessages
       }, renderAndRun);
     }
-  }).version("0.1.40 (Orbit AI)", "-v, --version", "Output the version number");
+  }).version("0.1.41 (Orbit AI)", "-v, --version", "Output the version number");
   program2.option("-w, --worktree [name]", "Create a new git worktree for this session (optionally specify a name)");
   program2.option("--tmux", "Create a tmux session for the worktree (requires --worktree). Uses iTerm2 native panes when available; use --tmux=classic for traditional tmux.");
   if (canUserConfigureAdvisor()) {
@@ -528279,7 +528606,7 @@ if (false) {}
 async function main2() {
   const args = process.argv.slice(2);
   if (args.length === 1 && (args[0] === "--version" || args[0] === "-v" || args[0] === "-V")) {
-    console.log(`${"0.1.40"} (Orbit AI)`);
+    console.log(`${"0.1.41"} (Orbit AI)`);
     return;
   }
   if (args.includes("--provider")) {
@@ -528387,4 +528714,4 @@ async function main2() {
 }
 main2();
 
-//# debugId=7191C892F3DDD05064756E2164756E21
+//# debugId=03E546CCD84EB70B64756E2164756E21

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "orbit-code-ai",
-  "version": "0.1.40",
+  "version": "0.1.41",
   "description": "Orbit AI – Your AI-powered IBM ACE coding companion",
   "type": "module",
   "author": "moenawaf",