icdev 1.2.31__tar.gz → 1.2.32__tar.gz

icdev-1.2.32/.env.sample

@@ -0,0 +1,347 @@
+# ============================================================================
+# ICDEV™ — Intelligent Certified Development Platform
+# Sample Environment Configuration
+# ============================================================================
+# Copy this file to .env and fill in your actual values.
+#
+#   cp .env.sample .env
+#
+# This file is safe to commit — it contains NO real secrets, only placeholders.
+# The real .env file is listed in .gitignore and must NEVER be committed.
+# ============================================================================
+
+# ============================================================================
+# PYTHON PATH
+# ============================================================================
+PYTHONPATH=.
+
+# ============================================================================
+# LLM — Primary Local Model (Ollama)
+# ============================================================================
+# Ollama is the recommended local/air-gap LLM. Free, no API key required.
+# Install: https://ollama.com | Then: ollama pull qwen3.5
+OLLAMA_BASE_URL=http://localhost:11434
+OLLAMA_MODEL=qwen3.5:latest
+
+# Ollama Cloud API (moonshot/kimi or similar cloud-hosted Ollama endpoint)
+# OLLAMA_CLOUD_BASE_URL=https://your-ollama-cloud-endpoint
+OLLAMA_API_KEY=your-ollama-cloud-api-key
+LLM_PROVIDER=ollama_cloud
+
+# ============================================================================
+# LLM — Cloud Providers (all optional — leave blank to disable)
+# ============================================================================
+
+# --- Anthropic Claude ---
+# Get key: https://console.anthropic.com/settings/keys
+ANTHROPIC_API_KEY=your-anthropic-api-key
+ANTHROPIC_MODEL=claude-sonnet-4-20250514
+
+# --- OpenAI ---
+# Get key: https://platform.openai.com/api-keys
+OPENAI_API_KEY=sk-proj-your-openai-api-key
+OPENAI_MODEL=gpt-4o
+
+# --- Featherless.ai (open-weights model hosting) ---
+# Get key: https://featherless.ai
+FEATHERLESS_API_KEY=your-featherless-api-key
+
+# --- OpenRouter (unified gateway to 200+ models) ---
+# Get key: https://openrouter.ai/settings/keys
+# OPENROUTER_API_KEY=sk-or-v1-your-openrouter-key
+
+# --- Google Gemini ---
+# Get key: https://aistudio.google.com/apikey
+GOOGLE_API_KEY=your-google-api-key
+GOOGLE_MODEL=gemini-2.5-flash
+
+# --- Google Workspace OAuth2 (Second Brain — Calendar, Gmail, Contacts) ---
+# Create credentials: console.cloud.google.com → APIs & Services → Credentials
+# Scopes: calendar.readonly, gmail.readonly, contacts.readonly, userinfo.email
+GOOGLE_CLIENT_ID=your-google-client-id
+GOOGLE_CLIENT_SECRET=your-google-client-secret
+
+# --- Azure OpenAI ---
+AZURE_OPENAI_API_KEY=your-azure-openai-api-key
+AZURE_OPENAI_ENDPOINT=https://your-resource.openai.azure.com
+AZURE_OPENAI_MODEL=gpt-4o
+AZURE_OPENAI_API_VERSION=2024-12-01-preview
+
+# --- Microsoft 365 / Graph API (Second Brain — optional) ---
+AZURE_TENANT_ID=your-azure-tenant-id
+AZURE_CLIENT_ID=your-azure-client-id
+AZURE_CLIENT_SECRET=your-azure-client-secret
+
+# --- Email delivery (SMTP — optional, used if M365 not configured) ---
+SMTP_HOST=smtp.your-provider.com
+SMTP_PORT=587
+SMTP_USER=your-smtp-username
+SMTP_PASSWORD=your-smtp-password
+SMTP_FROM=noreply@your-domain.com
+
+# --- AWS Bedrock ---
+# Uses IAM credentials (env vars, instance role, or ~/.aws/credentials)
+AWS_DEFAULT_REGION=us-gov-west-1
+# AWS_ACCESS_KEY_ID=your-access-key-id
+# AWS_SECRET_ACCESS_KEY=your-secret-access-key
+
+# --- IBM watsonx.ai ---
+IBM_CLOUD_API_KEY=your-ibm-cloud-api-key
+IBM_WATSONX_PROJECT_ID=your-watsonx-project-id
+IBM_WATSONX_URL=https://us-south.ml.cloud.ibm.com
+
+# --- vLLM (self-hosted) ---
+VLLM_BASE_URL=http://localhost:8000/v1
+VLLM_API_KEY=your-vllm-api-key
+
+# ============================================================================
+# LLM — DIC AI-Assist model selection (Chain-of-Debate)
+# ============================================================================
+# Comma-separated model aliases defined in args/llm_config.yaml
+DIC_GEN_DEBATERS=minimax-m3,mistral-large-cloud,gemini3-cloud
+DIC_GEN_SYNTHESIZER=mistral-large-cloud
+DIC_GEN_MODEL=mistral-large-cloud
+
+# ============================================================================
+# LLM — Two-Tier Routing
+# ============================================================================
+LLM_TWO_TIER_ENABLED=true
+LLM_CONFIDENCE_THRESHOLD=0.85
+
+# ============================================================================
+# RAG — Retrieval-Augmented Generation
+# ============================================================================
+RAG_ENABLED=true
+RAG_EMBEDDING_MODEL=nomic-embed-text
+RAG_VECTOR_STORE=auto
+
+# ============================================================================
+# FINE-TUNING
+# ============================================================================
+FINETUNE_ENABLED=true
+FINETUNE_MIN_EXAMPLES=50
+FINETUNE_BASE_MODEL=qwen3.5:latest
+
+# ============================================================================
+# DATABASE — PostgreSQL (required for container/production mode)
+# ============================================================================
+# Generate a strong password: python -c "import secrets; print(secrets.token_urlsafe(32))"
+ICDEV_PG_USER=icdev
+ICDEV_PG_PASSWORD=change-me-in-production
+ICDEV_PG_DB=icdev
+ICDEV_PG_HOST=localhost
+ICDEV_PG_PORT=5432
+ICDEV_STORAGE_BACKEND=sqlite
+ICDEV_DATABASE_URL=postgresql://icdev:change-me-in-production@localhost:5432/icdev
+# Set true to disable SQLite fallback (production hardening)
+ICDEV_PG_NO_FALLBACK=false
+
+# ============================================================================
+# CANVAS DATABASE — Per-canvas storage backend overrides
+# ============================================================================
+# Network Design Canvas
+NC_STORAGE_BACKEND=sqlite
+NC_PG_DATABASE=network_canvas
+
+# Document Intelligence Canvas
+# DIC_PG_DATABASE=icdev_dic
+
+# Slides Canvas
+# SLIDES_PG_DATABASE=icdev_slides
+
+# Observability Canvas
+# OC_PG_DATABASE=icdev_observability
+
+# Per-canvas SQLite/PG overrides (uncomment to override global):
+# IDC_STORAGE_BACKEND=sqlite
+# SC_STORAGE_BACKEND=sqlite
+# BDC_STORAGE_BACKEND=sqlite
+# PC_STORAGE_BACKEND=sqlite
+# MC_STORAGE_BACKEND=sqlite
+
+# ============================================================================
+# DASHBOARD
+# ============================================================================
+# Auto-generated API key — run `python -c "import secrets; print('icdev_dash_' + secrets.token_hex(32))"` to rotate
+ICDEV_DASHBOARD_API_KEY=icdev_dash_change-me-generate-a-new-one
+ICDEV_DASHBOARD_SECRET=change-me-in-production
+ICDEV_DASHBOARD_HOST=127.0.0.1
+ICDEV_DASHBOARD_URL=http://localhost:5050
+ICDEV_CUI_BANNER_ENABLED=true
+ICDEV_BYOK_ENABLED=false
+ICDEV_CLI_BRIDGE=true
+ICDEV_AUTO_COMMIT=false
+
+# ============================================================================
+# CLASSIFICATION (impact level)
+# ============================================================================
+# CUI // SP-CTI for IL4/IL5, SECRET for IL6, blank for UNCLASSIFIED
+ICDEV_CLASSIFICATION=CUI
+ICDEV_IMPACT_LEVEL=IL4
+
+# ============================================================================
+# LOGGING
+# ============================================================================
+LOG_LEVEL=INFO
+
+# ============================================================================
+# NOTIFICATIONS — Telegram (optional)
+# ============================================================================
+# Create a bot via @BotFather: https://core.telegram.org/bots
+TELEGRAM_BOT_TOKEN=your-telegram-bot-token
+TELEGRAM_CHAT_ID=your-telegram-chat-id
+
+# ============================================================================
+# DESIGN CANVASES — Enable/disable individually
+# ============================================================================
+# Core canvases
+ICDEV_NDC_ENABLED=false          # Network Design Canvas
+ICDEV_SDC_ENABLED=false          # Security Design Canvas
+ICDEV_PDC_ENABLED=false          # Pipeline Design Canvas
+ICDEV_BDC_ENABLED=false          # Boundary Design Canvas
+ICDEV_DDC_ENABLED=false          # Data Design Canvas
+ICDEV_ODC_ENABLED=false          # Observability Design Canvas
+ICDEV_IDC_ENABLED=false          # Infrastructure Design Canvas
+ICDEV_QDC_ENABLED=false          # Quality Design Canvas
+ICDEV_MIGRATION_CANVAS_ENABLED=false  # Migration Design Canvas
+ICDEV_AIML_CANVAS_ENABLED=false  # AI/ML Canvas
+
+# Additional canvases
+ICDEV_AADC_ENABLED=false         # Agentic AI Design Canvas
+ICDEV_AIIFY_ENABLED=false        # AI-ify Canvas
+ICDEV_ACE_ENABLED=false          # ACE Co-Worker Engine Canvas
+ICDEV_CWK_ENABLED=false          # Co-Worker Canvas
+ICDEV_DIC_ENABLED=false          # Document Intelligence Canvas
+ICDEV_SLIDES_ENABLED=false       # Slide Deck Generator Canvas
+ICDEV_AISG_ENABLED=false         # AI Security Canvas
+ICDEV_BOUNDARY_ENABLED=false     # Boundary Canvas
+ICDEV_DATA_CANVAS_ENABLED=false  # Data Canvas
+ICDEV_DEMO_RUNNER_ENABLED=false  # Demo Runner Canvas
+ICDEV_MISSION_CANVAS_ENABLED=true  # Mission Canvas (enabled by default)
+ICDEV_CANVAS_KG_ENABLED=false    # Canvas Knowledge Graph
+
+# ============================================================================
+# SUBSYSTEMS — Enable/disable individual platform modules
+# ============================================================================
+ICDEV_SECOND_BRAIN_ENABLED=false       # AI Executive Assistant / Second Brain
+ICDEV_DOCGEN_ENABLED=false             # Document Generation
+ICDEV_GENESIS_ENABLED=false            # Genesis Daemon (autonomous research)
+ICDEV_FOUNDRY_ENABLED=false            # Autonomous Capability Foundry (ACF)
+ICDEV_GOVCON_ENABLED=false             # GovCon Intelligence (SAM.gov, proposals)
+ICDEV_GOV_PROPOSAL_ENABLED=false       # GovProposal canvas
+ICDEV_PROPOSAL_GENESIS_ENABLED=false   # Proposal Genesis
+ICDEV_INNOVATION_ENABLED=false         # Innovation Engine
+ICDEV_MARKETPLACE_ENABLED=false        # Asset Marketplace
+ICDEV_NETWORK_ENABLED=false            # Network Intelligence Module
+ICDEV_INTEGRITY_ENABLED=true           # SIPA — Software Integrity Assessor
+ICDEV_FILESYNC_ENABLED=false           # File Synchronization
+ICDEV_DAEMON_ENABLED=false             # Background Daemon
+ICDEV_EVOLUTION_ENABLED=false          # Evolutionary Intelligence
+ICDEV_APPFORGE_ENABLED=false           # App Forge (child app generation)
+ICDEV_AUTOFIX_ENABLED=false            # Auto-Fix Loop (failure triage)
+ICDEV_BLOCKCHAIN_ENABLED=false         # GovChain Blockchain
+ICDEV_BYOK_ENABLED=false               # Bring-Your-Own-Key
+ICDEV_COD_ENABLED=false                # Chain-of-Debate
+ICDEV_COMPANION_SYNC_ENABLED=false     # DX Companion Sync
+ICDEV_CONFLUENCE_ENABLED=false         # Confluence Integration
+ICDEV_CONTENT_TRACING_ENABLED=false    # Content Tracing
+ICDEV_CREDENTIAL_BROKER_ENABLED=false  # Credential Broker
+ICDEV_FORGE_ACADEMY_ENABLED=false      # FORGE Academy
+ICDEV_GAMEDAY_ENABLED=false            # AI GameDay TTX
+ICDEV_HITL_ENABLED=true                # Human-in-the-Loop gates
+ICDEV_INFO_OPS_ENABLED=false           # Information Operations
+ICDEV_INFRA_ENABLED=false              # Infrastructure tools
+ICDEV_NOTIFICATIONS_ENABLED=false      # Push Notifications
+ICDEV_OBSERVABILITY_ENABLED=false      # Observability hooks
+ICDEV_OPENCLAW_ENABLED=false           # OpenClaw marketplace security
+ICDEV_OPS_HUB_ENABLED=false            # Ops Hub
+ICDEV_NOCC_ENABLED=false               # NOC Canvas
+ICDEV_PMC_ENABLED=false                # Peering Management Canvas
+ICDEV_CCC_ENABLED=false                # Carrier Circuit Canvas
+ICDEV_DSOC_ENABLED=false               # DSOC Canvas
+ICDEV_PIPELINE_ENABLED=false           # Pipeline Canvas
+ICDEV_REVIEW_BOARD_ENABLED=false       # Engineering Review Board
+ICDEV_SCOUT_ENABLED=false              # Scout (competitive intelligence)
+ICDEV_SECURITY_ENABLED=false           # Security scanning subsystem
+ICDEV_STRATEGOS_ENABLED=false          # Strategos OSINT
+ICDEV_TRADING_DAEMON_ENABLED=false     # FathomDesk Trading Daemon
+ICDEV_WFC_ENABLED=false                # Workflow Discipline Engine
+ICDEV_LOGS_ENABLED=true                # Centralized logging canvas
+
+# Slides image generation
+SLIDES_IMAGE_ENABLED=false
+SLIDES_IMAGE_PROVIDER=dalle
+
+# ============================================================================
+# GOVCON / GovProposal / CPMP
+# ============================================================================
+# Forced OFF in air-gap mode (ICDEV_AIRGAP=true) regardless of this value.
+# ICDEV_GOVCON_ENABLED=false (set above)
+
+# SAM.gov API Key — register at https://sam.gov/content/entity-registration
+SAM_GOV_API_KEY=your-sam-gov-api-key
+
+# ============================================================================
+# KANBAN — Task orchestration
+# ============================================================================
+ICDEV_KANBAN_EXECUTOR_CHAIN=claude_cli,gitlab,ollama_local
+ICDEV_KANBAN_PR_FLOW=false
+
+# ============================================================================
+# GITHUB — CI/CD and kanban executor
+# ============================================================================
+# Generate at: https://github.com/settings/tokens (scopes: repo, workflow)
+GITHUB_TOKEN=ghp_your-github-personal-access-token
+GITHUB_RUNNER_REPO=your-org/your-repo
+
+# ============================================================================
+# OPENCTI — Threat intelligence platform (optional)
+# ============================================================================
+OPENCTI_URL=https://your-opencti-instance.com
+OPENCTI_API_KEY=your-opencti-api-key
+
+# ============================================================================
+# CARRIER / ISP APIs — Network canvas integrations (optional)
+# ============================================================================
+# Equinix ECX Fabric (cross-connects, virtual circuits)
+# EQUINIX_ECX_CLIENT_ID=your-equinix-client-id
+# EQUINIX_ECX_CLIENT_SECRET=your-equinix-client-secret
+
+# Megaport (VXCs, ports, MCRs)
+# MEGAPORT_USER=your-megaport-username
+# MEGAPORT_PASS=your-megaport-password
+
+# PeeringDB (PMC canvas — optional API key for higher rate limits)
+# PEERINGDB_API_KEY=your-peeringdb-api-key
+
+# ============================================================================
+# PYPI PUBLISHING — Package distribution (maintainers only)
+# ============================================================================
+# Generate at: https://pypi.org/manage/account/token/
+# PYPI_API_TOKEN=pypi-your-api-token
+# TWINE_USERNAME=__token__
+# TWINE_PASSWORD=pypi-your-api-token
+
+# ============================================================================
+# FATHOMDESK — Secrets backend (optional)
+# ============================================================================
+# ICDEV_SECRET_BACKEND=local   # default (AES-GCM encrypted in DB)
+# ICDEV_SECRET_BACKEND=vault   # delegate to HashiCorp Vault / OpenBao
+
+# Required when ICDEV_SECRET_BACKEND=vault:
+# VAULT_ADDR=https://vault.internal:8200
+# VAULT_TOKEN=hvs.YOUR-VAULT-TOKEN-HERE
+# VAULT_MOUNT_PATH=secret
+# VAULT_NAMESPACE=
+
+# ============================================================================
+# FATHOMDESK — Stripe billing (optional)
+# ============================================================================
+# All three required for Checkout + Portal + webhooks
+STRIPE_SECRET_KEY=sk_live_your-stripe-secret-key
+STRIPE_PUBLISHABLE_KEY=pk_live_your-stripe-publishable-key
+STRIPE_WEBHOOK_SECRET=whsec_your-stripe-webhook-secret
+STRIPE_PRICE_ID_PRO=price_your-pro-price-id
+STRIPE_PRICE_ID_ENTERPRISE=price_your-enterprise-price-id
+# STRIPE_SUCCESS_URL=https://app.example.com/billing?checkout=success
+# STRIPE_CANCEL_URL=https://app.example.com/billing?checkout=cancel

icdev-1.2.32/.mcp.json

@@ -0,0 +1,18 @@
+{
+  "mcpServers": {
+    "icdev-unified": {
+      "command": "python",
+      "args": [
+        "C:/AI/ICDev/tools/mcp/mcp_debug_wrapper.py"
+      ],
+      "env": {
+        "ICDEV_DB_PATH": "C:/AI/ICDev/data/icdev.db",
+        "ICDEV_PROJECT_ROOT": "C:/AI/ICDev"
+      }
+    },
+    "playwright": {
+      "command": "cmd",
+      "args": ["/c", "npx", "-y", "@playwright/mcp@latest"]
+    }
+  }
+}