platformforge 0.1.0__py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (659) hide show
  1. platformforge/__init__.py +7 -0
  2. platformforge/__main__.py +5 -0
  3. platformforge/_forge_portal.py +913 -0
  4. platformforge/_graphstudio.py +376 -0
  5. platformforge/_graphview.py +181 -0
  6. platformforge/_installkit.py +1706 -0
  7. platformforge/agents/__init__.py +156 -0
  8. platformforge/agents/bench.py +61 -0
  9. platformforge/agents/contextpack.py +137 -0
  10. platformforge/agents/contracts.py +394 -0
  11. platformforge/agents/coordinators.py +98 -0
  12. platformforge/agents/critic.py +113 -0
  13. platformforge/agents/debate.py +161 -0
  14. platformforge/agents/executors.py +160 -0
  15. platformforge/agents/guardian.py +48 -0
  16. platformforge/agents/mirrors.py +240 -0
  17. platformforge/agents/orchestrator.py +295 -0
  18. platformforge/agents/planner.py +116 -0
  19. platformforge/agents/playbook.py +51 -0
  20. platformforge/agents/referee.py +132 -0
  21. platformforge/agents/reviewers.py +113 -0
  22. platformforge/agents/roster.py +893 -0
  23. platformforge/agents/runledger.py +85 -0
  24. platformforge/agents/runstore.py +74 -0
  25. platformforge/agents/specialists.py +73 -0
  26. platformforge/agents/taskspec.py +94 -0
  27. platformforge/agents/uniqueness.py +115 -0
  28. platformforge/agents/verifier.py +106 -0
  29. platformforge/aiplat/__init__.py +4 -0
  30. platformforge/aiplat/models.py +175 -0
  31. platformforge/analytics/__init__.py +6 -0
  32. platformforge/analytics/capacity.py +109 -0
  33. platformforge/analytics/debt.py +92 -0
  34. platformforge/analytics/dx.py +69 -0
  35. platformforge/analytics/finops_v4.py +171 -0
  36. platformforge/analytics/goldenpath.py +131 -0
  37. platformforge/analytics/history.py +233 -0
  38. platformforge/analytics/measurement.py +149 -0
  39. platformforge/analytics/models.py +127 -0
  40. platformforge/analytics/opsanalytics.py +119 -0
  41. platformforge/analytics/policyintel.py +139 -0
  42. platformforge/analytics/reliability.py +106 -0
  43. platformforge/analytics/soak.py +135 -0
  44. platformforge/analytics/store.py +254 -0
  45. platformforge/bench.py +174 -0
  46. platformforge/cases/__init__.py +13 -0
  47. platformforge/cases/casefile.py +106 -0
  48. platformforge/cases/context_audit.py +134 -0
  49. platformforge/cases/ledgers.py +174 -0
  50. platformforge/cases/replay.py +142 -0
  51. platformforge/cases/routing_audit.py +162 -0
  52. platformforge/caveman/__init__.py +11 -0
  53. platformforge/caveman/compress.py +156 -0
  54. platformforge/cicd/__init__.py +16 -0
  55. platformforge/cicd/backstage.py +51 -0
  56. platformforge/cicd/dockerfile.py +64 -0
  57. platformforge/cicd/github_actions.py +122 -0
  58. platformforge/cicd/gitlab_ci.py +56 -0
  59. platformforge/cicd/gitops.py +130 -0
  60. platformforge/cli/__init__.py +0 -0
  61. platformforge/cli/fleetcmd.py +457 -0
  62. platformforge/cli/main.py +3832 -0
  63. platformforge/cloud/__init__.py +8 -0
  64. platformforge/cloud/aws.py +254 -0
  65. platformforge/cloud/common.py +69 -0
  66. platformforge/cloud/multicloud.py +143 -0
  67. platformforge/collect/__init__.py +11 -0
  68. platformforge/collect/detect.py +254 -0
  69. platformforge/context/__init__.py +10 -0
  70. platformforge/context/capsule.py +60 -0
  71. platformforge/context/gateway.py +227 -0
  72. platformforge/context/refs.py +49 -0
  73. platformforge/context/sufficiency.py +50 -0
  74. platformforge/core/__init__.py +1 -0
  75. platformforge/core/hashing.py +39 -0
  76. platformforge/core/ownership.py +220 -0
  77. platformforge/core/receipts.py +74 -0
  78. platformforge/core/redaction.py +97 -0
  79. platformforge/core/store.py +119 -0
  80. platformforge/core/workspace.py +89 -0
  81. platformforge/data/contracts/agent-handoff.schema.json +26 -0
  82. platformforge/data/contracts/agent-run.schema.json +27 -0
  83. platformforge/data/contracts/agent-spec.schema.json +43 -0
  84. platformforge/data/contracts/capability.schema.json +23 -0
  85. platformforge/data/contracts/change-event.schema.json +22 -0
  86. platformforge/data/contracts/change-intent.schema.json +62 -0
  87. platformforge/data/contracts/change-plan.schema.json +43 -0
  88. platformforge/data/contracts/collector-receipt.schema.json +36 -0
  89. platformforge/data/contracts/context-pack.schema.json +29 -0
  90. platformforge/data/contracts/debate.schema.json +31 -0
  91. platformforge/data/contracts/distribution-manifest-v1.schema.json +81 -0
  92. platformforge/data/contracts/drift-event.schema.json +21 -0
  93. platformforge/data/contracts/fact.schema.json +35 -0
  94. platformforge/data/contracts/finding.schema.json +20 -0
  95. platformforge/data/contracts/graph-v2.schema.json +67 -0
  96. platformforge/data/contracts/graph.schema.json +40 -0
  97. platformforge/data/contracts/install-receipt-v1.schema.json +49 -0
  98. platformforge/data/contracts/observation.schema.json +93 -0
  99. platformforge/data/contracts/receipt.schema.json +21 -0
  100. platformforge/data/contracts/recommendation.schema.json +32 -0
  101. platformforge/data/contracts/refusal.schema.json +16 -0
  102. platformforge/data/contracts/slo-contract.schema.json +25 -0
  103. platformforge/data/contracts/task-spec.schema.json +37 -0
  104. platformforge/data/contracts/workspace-manifest-v1.schema.json +62 -0
  105. platformforge/data/evals/cases/agent-budget-exhaustion/case.yaml +6 -0
  106. platformforge/data/evals/cases/agent-conflicting-specialists/case.yaml +11 -0
  107. platformforge/data/evals/cases/agent-fleet-optimization/case.yaml +13 -0
  108. platformforge/data/evals/cases/agent-host-no-subagents/case.yaml +6 -0
  109. platformforge/data/evals/cases/agent-incident-multi/case.yaml +13 -0
  110. platformforge/data/evals/cases/agent-missing-evidence/case.yaml +6 -0
  111. platformforge/data/evals/cases/agent-multi-domain-audit/case.yaml +14 -0
  112. platformforge/data/evals/cases/agent-production-change/case.yaml +15 -0
  113. platformforge/data/evals/cases/agent-security-mandatory/case.yaml +12 -0
  114. platformforge/data/evals/cases/agent-simple-iac/case.yaml +14 -0
  115. platformforge/data/evals/cases/approval-integrity-seal/case.yaml +6 -0
  116. platformforge/data/evals/cases/capacity-hot/case.yaml +7 -0
  117. platformforge/data/evals/cases/capacity-hot/fixture/capacity.json +5 -0
  118. platformforge/data/evals/cases/catalog-noowner/case.yaml +7 -0
  119. platformforge/data/evals/cases/catalog-noowner/fixture/catalog-info.yaml +6 -0
  120. platformforge/data/evals/cases/contract-fact/case.yaml +5 -0
  121. platformforge/data/evals/cases/contract-fact/fixture/doc.json +2 -0
  122. platformforge/data/evals/cases/cosign-unverified/case.yaml +8 -0
  123. platformforge/data/evals/cases/cosign-unverified/fixture/sig.json +33 -0
  124. platformforge/data/evals/cases/expected-delta-refusal/case.yaml +6 -0
  125. platformforge/data/evals/cases/finops-noattr/case.yaml +9 -0
  126. platformforge/data/evals/cases/finops-noattr/fixture/costs.json +7 -0
  127. platformforge/data/evals/cases/fleet-inv-absent-allocation-unknown/case.yaml +7 -0
  128. platformforge/data/evals/cases/fleet-inv-centrality-not-criticality/case.yaml +7 -0
  129. platformforge/data/evals/cases/fleet-inv-correlation-not-causality/case.yaml +7 -0
  130. platformforge/data/evals/cases/fleet-inv-dx-no-person-metrics/case.yaml +7 -0
  131. platformforge/data/evals/cases/fleet-inv-federation-restricted-denied/case.yaml +7 -0
  132. platformforge/data/evals/cases/fleet-inv-federation-secret-denied/case.yaml +7 -0
  133. platformforge/data/evals/cases/fleet-inv-history-window-deterministic/case.yaml +7 -0
  134. platformforge/data/evals/cases/fleet-inv-low-util-not-deletable/case.yaml +7 -0
  135. platformforge/data/evals/cases/fleet-inv-member-key-deterministic/case.yaml +7 -0
  136. platformforge/data/evals/cases/fleet-inv-missing-denominator/case.yaml +7 -0
  137. platformforge/data/evals/cases/fleet-inv-partial-coverage-visible/case.yaml +7 -0
  138. platformforge/data/evals/cases/fleet-inv-plan-changeintent-only/case.yaml +7 -0
  139. platformforge/data/evals/cases/fleet-inv-report-all-cited/case.yaml +7 -0
  140. platformforge/data/evals/cases/fleet-inv-small-sample-confidence/case.yaml +7 -0
  141. platformforge/data/evals/cases/fleet-inv-uncertain-optimization-suppressed/case.yaml +7 -0
  142. platformforge/data/evals/cases/gha-dangerous/case.yaml +12 -0
  143. platformforge/data/evals/cases/gha-dangerous/fixture/.github/workflows/ci.yaml +11 -0
  144. platformforge/data/evals/cases/gitops-v2/case.yaml +11 -0
  145. platformforge/data/evals/cases/gitops-v2/fixture/argo.yaml +41 -0
  146. platformforge/data/evals/cases/graph-k8s-blast/case.yaml +7 -0
  147. platformforge/data/evals/cases/graph-k8s-blast/fixture/deploy.yaml +15 -0
  148. platformforge/data/evals/cases/iac-module-nopin/case.yaml +8 -0
  149. platformforge/data/evals/cases/iac-module-nopin/fixture/main.tf +3 -0
  150. platformforge/data/evals/cases/iac-plan-replace/case.yaml +8 -0
  151. platformforge/data/evals/cases/iac-plan-replace/fixture/plan.json +12 -0
  152. platformforge/data/evals/cases/iac-sg-open/case.yaml +8 -0
  153. platformforge/data/evals/cases/iac-sg-open/fixture/main.tf +9 -0
  154. platformforge/data/evals/cases/iam-oidc/case.yaml +8 -0
  155. platformforge/data/evals/cases/iam-oidc/fixture/policy.json +11 -0
  156. platformforge/data/evals/cases/iam-wildcard-positive/case.yaml +8 -0
  157. platformforge/data/evals/cases/iam-wildcard-positive/fixture/policy.json +3 -0
  158. platformforge/data/evals/cases/k8s-bad-actor/case.yaml +19 -0
  159. platformforge/data/evals/cases/k8s-bad-actor/fixture/app.yaml +97 -0
  160. platformforge/data/evals/cases/k8s-beta-api/case.yaml +8 -0
  161. platformforge/data/evals/cases/k8s-beta-api/fixture/cr.yaml +7 -0
  162. platformforge/data/evals/cases/k8s-dep-api-boundary/case.yaml +15 -0
  163. platformforge/data/evals/cases/k8s-dep-api-boundary/fixture/app.yaml +25 -0
  164. platformforge/data/evals/cases/k8s-dep-api-clean/case.yaml +12 -0
  165. platformforge/data/evals/cases/k8s-dep-api-clean/fixture/app.yaml +29 -0
  166. platformforge/data/evals/cases/k8s-dep-api-unknown/case.yaml +11 -0
  167. platformforge/data/evals/cases/k8s-dep-api-unknown/fixture/app.yaml +25 -0
  168. platformforge/data/evals/cases/k8s-dep-api-v120/case.yaml +12 -0
  169. platformforge/data/evals/cases/k8s-dep-api-v120/fixture/app.yaml +25 -0
  170. platformforge/data/evals/cases/k8s-dep-api-v129/case.yaml +9 -0
  171. platformforge/data/evals/cases/k8s-dep-api-v129/fixture/app.yaml +25 -0
  172. platformforge/data/evals/cases/k8s-hpa-noreq/case.yaml +8 -0
  173. platformforge/data/evals/cases/k8s-hpa-noreq/fixture/app.yaml +28 -0
  174. platformforge/data/evals/cases/k8s-limits-boundary/case.yaml +10 -0
  175. platformforge/data/evals/cases/k8s-limits-boundary/fixture/app.yaml +15 -0
  176. platformforge/data/evals/cases/k8s-limits-negative/case.yaml +8 -0
  177. platformforge/data/evals/cases/k8s-limits-negative/fixture/deploy.yaml +15 -0
  178. platformforge/data/evals/cases/k8s-limits-positive/case.yaml +8 -0
  179. platformforge/data/evals/cases/k8s-limits-positive/fixture/deploy.yaml +14 -0
  180. platformforge/data/evals/cases/k8s-nopdb/case.yaml +7 -0
  181. platformforge/data/evals/cases/k8s-nopdb/fixture/app.yaml +34 -0
  182. platformforge/data/evals/cases/knowledge-registry/case.yaml +10 -0
  183. platformforge/data/evals/cases/kyverno-dep/case.yaml +10 -0
  184. platformforge/data/evals/cases/kyverno-dep/fixture/pol.yaml +18 -0
  185. platformforge/data/evals/cases/kyverno-legacy/case.yaml +8 -0
  186. platformforge/data/evals/cases/kyverno-legacy/fixture/pol.yaml +7 -0
  187. platformforge/data/evals/cases/live-aws-collect/case.yaml +11 -0
  188. platformforge/data/evals/cases/live-aws-collect/fixture/aws/ec2_describe-vpcs.json +15 -0
  189. platformforge/data/evals/cases/live-aws-collect/fixture/aws/iam_list-users.denied.txt +1 -0
  190. platformforge/data/evals/cases/live-aws-collect/fixture/aws/sts_get-caller-identity.json +5 -0
  191. platformforge/data/evals/cases/live-drift/case.yaml +8 -0
  192. platformforge/data/evals/cases/live-drift/fixture/after.json +22 -0
  193. platformforge/data/evals/cases/live-drift/fixture/before.json +22 -0
  194. platformforge/data/evals/cases/live-incident/case.yaml +7 -0
  195. platformforge/data/evals/cases/live-incident/fixture/changes.json +8 -0
  196. platformforge/data/evals/cases/live-incident/fixture/incident.json +7 -0
  197. platformforge/data/evals/cases/live-k8s-collect/case.yaml +10 -0
  198. platformforge/data/evals/cases/live-k8s-collect/fixture/kubectl/get_configmaps.denied.txt +1 -0
  199. platformforge/data/evals/cases/live-k8s-collect/fixture/kubectl/get_deployments.apps.json +25 -0
  200. platformforge/data/evals/cases/live-k8s-collect/fixture/kubectl/get_pods.json +17 -0
  201. platformforge/data/evals/cases/live-k8s-collect/fixture/kubectl/get_secrets.json +13 -0
  202. platformforge/data/evals/cases/live-multicluster/case.yaml +7 -0
  203. platformforge/data/evals/cases/live-multicluster/fixture/clusters.json +6 -0
  204. platformforge/data/evals/cases/live-plan/case.yaml +7 -0
  205. platformforge/data/evals/cases/live-plan/fixture/drift.json +8 -0
  206. platformforge/data/evals/cases/live-reconcile/case.yaml +7 -0
  207. platformforge/data/evals/cases/live-reconcile/fixture/desired.json +7 -0
  208. platformforge/data/evals/cases/live-reconcile/fixture/observed.json +18 -0
  209. platformforge/data/evals/cases/live-secrets-boundary/case.yaml +8 -0
  210. platformforge/data/evals/cases/live-secrets-boundary/fixture/envelope.json +16 -0
  211. platformforge/data/evals/cases/live-temporal-graph/case.yaml +10 -0
  212. platformforge/data/evals/cases/live-temporal-graph/fixture/graph.json +22 -0
  213. platformforge/data/evals/cases/ops-approval/case.yaml +6 -0
  214. platformforge/data/evals/cases/ops-convergence/case.yaml +6 -0
  215. platformforge/data/evals/cases/ops-execution-safety/case.yaml +6 -0
  216. platformforge/data/evals/cases/ops-intent/case.yaml +6 -0
  217. platformforge/data/evals/cases/ops-planning/case.yaml +6 -0
  218. platformforge/data/evals/cases/ops-policy/case.yaml +6 -0
  219. platformforge/data/evals/cases/ops-rollback/case.yaml +6 -0
  220. platformforge/data/evals/cases/ops-verification/case.yaml +6 -0
  221. platformforge/data/evals/cases/rollback-argocd-revision/case.yaml +6 -0
  222. platformforge/data/evals/cases/rollback-blind-inverse/case.yaml +6 -0
  223. platformforge/data/evals/cases/rollback-git-commit/case.yaml +6 -0
  224. platformforge/data/evals/cases/rollback-impossible/case.yaml +6 -0
  225. platformforge/data/evals/cases/rollback-k8s-annotation-restore/case.yaml +6 -0
  226. platformforge/data/evals/cases/rollback-k8s-scale/case.yaml +6 -0
  227. platformforge/data/evals/cases/rollback-material-tamper/case.yaml +6 -0
  228. platformforge/data/evals/cases/rollback-terraform-replan/case.yaml +6 -0
  229. platformforge/data/evals/cases/rollback-unknown/case.yaml +6 -0
  230. platformforge/data/evals/cases/routing-specialist/case.yaml +9 -0
  231. platformforge/data/evals/cases/rtk-roundtrip/case.yaml +5 -0
  232. platformforge/data/evals/cases/rtk-roundtrip/fixture/verbose.txt +300 -0
  233. platformforge/data/evals/cases/sbom-vuln/case.yaml +9 -0
  234. platformforge/data/evals/cases/sbom-vuln/fixture/sbom.json +9 -0
  235. platformforge/data/evals/cases/secret-prose-mixed/fixture/app.env +1 -0
  236. platformforge/data/evals/cases/secret-prose-mixed/fixture/policy-notes.md +7 -0
  237. platformforge/data/evals/cases/secrets-noleak/case.yaml +5 -0
  238. platformforge/data/evals/cases/secrets-noleak/fixture/app.env +2 -0
  239. platformforge/data/evals/cases/slo-fastburn/case.yaml +8 -0
  240. platformforge/data/evals/cases/slo-fastburn/fixture/events.yaml +2 -0
  241. platformforge/data/evals/cases/slo-fastburn/fixture/slo.yaml +4 -0
  242. platformforge/data/evals/cases/slo-noinput/case.yaml +8 -0
  243. platformforge/data/evals/cases/slo-noinput/fixture/events.yaml +1 -0
  244. platformforge/data/evals/cases/slo-noinput/fixture/slo.yaml +4 -0
  245. platformforge/data/evals/cases/sot-conflict/case.yaml +6 -0
  246. platformforge/data/evals/cases/token-budget/case.yaml +6 -0
  247. platformforge/data/evals/cases/token-budget/fixture/big.py +50 -0
  248. platformforge/data/evals/cases/xr-delete/case.yaml +8 -0
  249. platformforge/data/evals/cases/xr-delete/fixture/xr.yaml +10 -0
  250. platformforge/data/evals/cases/xr-graph-chain/case.yaml +8 -0
  251. platformforge/data/evals/cases/xr-graph-chain/fixture/xrd.yaml +90 -0
  252. platformforge/data/evals/cases/xr-negative-crd/case.yaml +8 -0
  253. platformforge/data/evals/cases/xr-negative-crd/fixture/widget.yaml +19 -0
  254. platformforge/data/evals/cases/xr-upbound-mr/case.yaml +8 -0
  255. platformforge/data/evals/cases/xr-upbound-mr/fixture/bucket.yaml +12 -0
  256. platformforge/data/evals/qpt-bench/change-review/case.yaml +5 -0
  257. platformforge/data/evals/qpt-bench/change-review/fixture/plan.json +9 -0
  258. platformforge/data/evals/qpt-bench/gha-security/case.yaml +5 -0
  259. platformforge/data/evals/qpt-bench/gha-security/fixture/ci.yml +10 -0
  260. platformforge/data/evals/qpt-bench/iam-investigate/case.yaml +5 -0
  261. platformforge/data/evals/qpt-bench/iam-investigate/fixture/policy.json +6 -0
  262. platformforge/data/evals/qpt-bench/incident-analysis/case.yaml +5 -0
  263. platformforge/data/evals/qpt-bench/incident-analysis/fixture/query.json +5 -0
  264. platformforge/data/evals/qpt-bench/incident-analysis/fixture/rules.yaml +6 -0
  265. platformforge/data/evals/qpt-bench/k8s-review/case.yaml +6 -0
  266. platformforge/data/evals/qpt-bench/k8s-review/fixture/deploy.yaml +15 -0
  267. platformforge/data/evals/qpt-bench/tf-security/case.yaml +5 -0
  268. platformforge/data/evals/qpt-bench/tf-security/fixture/main.tf +17 -0
  269. platformforge/data/knowledge/aws/eks.yaml +20 -0
  270. platformforge/data/knowledge/aws/iam.yaml +28 -0
  271. platformforge/data/knowledge/aws/network-exposure.yaml +19 -0
  272. platformforge/data/knowledge/aws/organizations.yaml +19 -0
  273. platformforge/data/knowledge/crossplane/composition-providers.yaml +20 -0
  274. platformforge/data/knowledge/crossplane/managed-resources.yaml +26 -0
  275. platformforge/data/knowledge/crossplane/v1-v2.yaml +25 -0
  276. platformforge/data/knowledge/kubernetes/api-deprecations.yaml +33 -0
  277. platformforge/data/knowledge/kubernetes/autoscaling-rbac.yaml +27 -0
  278. platformforge/data/knowledge/kubernetes/gateway-api.yaml +20 -0
  279. platformforge/data/knowledge/kubernetes/pod-security.yaml +26 -0
  280. platformforge/data/knowledge/sources.yaml +516 -0
  281. platformforge/data/knowledge/terraform/lifecycle.yaml +18 -0
  282. platformforge/data/knowledge/terraform/plan-semantics.yaml +26 -0
  283. platformforge/data/lab/chaos-pod-kill/chaos.yaml +3 -0
  284. platformforge/data/lab/chaos-pod-kill/facts.json +13 -0
  285. platformforge/data/lab/fleets/acme/capacity.yaml +35 -0
  286. platformforge/data/lab/fleets/acme/costs.yaml +25 -0
  287. platformforge/data/lab/fleets/acme/events.yaml +41 -0
  288. platformforge/data/lab/fleets/acme/fleet.yaml +51 -0
  289. platformforge/data/lab/fleets/acme/graph.yaml +45 -0
  290. platformforge/data/lab/fleets/acme/policies.yaml +28 -0
  291. platformforge/data/lab/fleets/acme/requests.yaml +24 -0
  292. platformforge/data/lab/scenarios/argo-bad-rollout/expected.yaml +6 -0
  293. platformforge/data/lab/scenarios/argo-bad-rollout/fixture/app.yaml +9 -0
  294. platformforge/data/lab/scenarios/aws-dump/expected.yaml +19 -0
  295. platformforge/data/lab/scenarios/aws-dump/fixture/compute.json +4 -0
  296. platformforge/data/lab/scenarios/aws-dump/fixture/iam.json +7 -0
  297. platformforge/data/lab/scenarios/aws-dump/fixture/network.json +6 -0
  298. platformforge/data/lab/scenarios/aws-dump/fixture/org.json +4 -0
  299. platformforge/data/lab/scenarios/aws-dump/fixture/storage.json +4 -0
  300. platformforge/data/lab/scenarios/container-unsigned/expected.yaml +5 -0
  301. platformforge/data/lab/scenarios/container-unsigned/fixture/supply.json +11 -0
  302. platformforge/data/lab/scenarios/cost-idle-workload/expected.yaml +5 -0
  303. platformforge/data/lab/scenarios/cost-idle-workload/fixture/costs.json +12 -0
  304. platformforge/data/lab/scenarios/crossplane-platform/expected.yaml +16 -0
  305. platformforge/data/lab/scenarios/crossplane-platform/fixture/negative.yaml +18 -0
  306. platformforge/data/lab/scenarios/crossplane-platform/fixture/xrd.yaml +90 -0
  307. platformforge/data/lab/scenarios/demo-platform/expected.yaml +16 -0
  308. platformforge/data/lab/scenarios/demo-platform/fixture/.github/workflows/ci.yml +10 -0
  309. platformforge/data/lab/scenarios/demo-platform/fixture/deploy.yaml +16 -0
  310. platformforge/data/lab/scenarios/demo-platform/fixture/infra.tf +5 -0
  311. platformforge/data/lab/scenarios/fleet-ai/expected.yaml +12 -0
  312. platformforge/data/lab/scenarios/fleet-capacity/expected.yaml +12 -0
  313. platformforge/data/lab/scenarios/fleet-cost/expected.yaml +18 -0
  314. platformforge/data/lab/scenarios/fleet-federation/expected.yaml +11 -0
  315. platformforge/data/lab/scenarios/fleet-golden-path/expected.yaml +18 -0
  316. platformforge/data/lab/scenarios/fleet-op-hotspot/expected.yaml +11 -0
  317. platformforge/data/lab/scenarios/fleet-ownership/expected.yaml +17 -0
  318. platformforge/data/lab/scenarios/fleet-partial/expected.yaml +10 -0
  319. platformforge/data/lab/scenarios/fleet-policy-friction/expected.yaml +10 -0
  320. platformforge/data/lab/scenarios/fleet-recurring-incident/expected.yaml +12 -0
  321. platformforge/data/lab/scenarios/fleet-report/expected.yaml +13 -0
  322. platformforge/data/lab/scenarios/fleet-risk/expected.yaml +18 -0
  323. platformforge/data/lab/scenarios/gitops-drift/expected.yaml +6 -0
  324. platformforge/data/lab/scenarios/gitops-drift/fixture/app.yaml +12 -0
  325. platformforge/data/lab/scenarios/k8s-bad-readiness/expected.yaml +6 -0
  326. platformforge/data/lab/scenarios/k8s-bad-readiness/fixture/deploy.yaml +23 -0
  327. platformforge/data/lab/scenarios/k8s-bad-readiness/fixture/netpol.yaml +9 -0
  328. platformforge/data/lab/scenarios/k8s-missing-limits/expected.yaml +6 -0
  329. platformforge/data/lab/scenarios/k8s-missing-limits/fixture/deploy.yaml +26 -0
  330. platformforge/data/lab/scenarios/k8s-missing-limits/fixture/netpol.yaml +9 -0
  331. platformforge/data/lab/scenarios/k8s-single-replica/expected.yaml +5 -0
  332. platformforge/data/lab/scenarios/k8s-single-replica/fixture/deploy.yaml +26 -0
  333. platformforge/data/lab/scenarios/k8s-single-replica/fixture/netpol.yaml +4 -0
  334. platformforge/data/lab/scenarios/live-aws-collect/expected.yaml +4 -0
  335. platformforge/data/lab/scenarios/live-aws-collect/fixture/aws/ec2_describe-vpcs.json +15 -0
  336. platformforge/data/lab/scenarios/live-aws-collect/fixture/aws/iam_list-users.denied.txt +1 -0
  337. platformforge/data/lab/scenarios/live-aws-collect/fixture/aws/sts_get-caller-identity.json +5 -0
  338. platformforge/data/lab/scenarios/live-k8s-collect/expected.yaml +4 -0
  339. platformforge/data/lab/scenarios/live-k8s-collect/fixture/kubectl/get_configmaps.denied.txt +1 -0
  340. platformforge/data/lab/scenarios/live-k8s-collect/fixture/kubectl/get_deployments.apps.json +25 -0
  341. platformforge/data/lab/scenarios/live-k8s-collect/fixture/kubectl/get_pods.json +17 -0
  342. platformforge/data/lab/scenarios/live-k8s-collect/fixture/kubectl/get_secrets.json +13 -0
  343. platformforge/data/lab/scenarios/live-kind/expected.yaml +14 -0
  344. platformforge/data/lab/scenarios/live-kind/fixture/kubectl/get_configmaps.denied.txt +1 -0
  345. platformforge/data/lab/scenarios/live-kind/fixture/kubectl/get_deployments.apps.json +25 -0
  346. platformforge/data/lab/scenarios/live-kind/fixture/kubectl/get_pods.json +17 -0
  347. platformforge/data/lab/scenarios/live-kind/fixture/kubectl/get_secrets.json +13 -0
  348. platformforge/data/lab/scenarios/network-policy-missing/expected.yaml +6 -0
  349. platformforge/data/lab/scenarios/network-policy-missing/fixture/deploy.yaml +26 -0
  350. platformforge/data/lab/scenarios/ops-bad-rollout/expected.yaml +3 -0
  351. platformforge/data/lab/scenarios/ops-bad-rollout/fixture/ops.yaml +33 -0
  352. platformforge/data/lab/scenarios/ops-break-glass/expected.yaml +3 -0
  353. platformforge/data/lab/scenarios/ops-break-glass/fixture/ops.yaml +21 -0
  354. platformforge/data/lab/scenarios/ops-broken-selector/expected.yaml +3 -0
  355. platformforge/data/lab/scenarios/ops-broken-selector/fixture/ops.yaml +21 -0
  356. platformforge/data/lab/scenarios/ops-changed-plan-hash/expected.yaml +3 -0
  357. platformforge/data/lab/scenarios/ops-changed-plan-hash/fixture/ops.yaml +20 -0
  358. platformforge/data/lab/scenarios/ops-conflicting-operation/expected.yaml +3 -0
  359. platformforge/data/lab/scenarios/ops-conflicting-operation/fixture/ops.yaml +21 -0
  360. platformforge/data/lab/scenarios/ops-expired-approval/expected.yaml +3 -0
  361. platformforge/data/lab/scenarios/ops-expired-approval/fixture/ops.yaml +20 -0
  362. platformforge/data/lab/scenarios/ops-partial-failure/expected.yaml +3 -0
  363. platformforge/data/lab/scenarios/ops-partial-failure/fixture/ops.yaml +24 -0
  364. platformforge/data/lab/scenarios/ops-policy-denial/expected.yaml +3 -0
  365. platformforge/data/lab/scenarios/ops-policy-denial/fixture/ops.yaml +17 -0
  366. platformforge/data/lab/scenarios/ops-replica-drift/expected.yaml +3 -0
  367. platformforge/data/lab/scenarios/ops-replica-drift/fixture/ops.yaml +28 -0
  368. platformforge/data/lab/scenarios/ops-rollback-annotate/expected.yaml +3 -0
  369. platformforge/data/lab/scenarios/ops-rollback-annotate/fixture/ops.yaml +41 -0
  370. platformforge/data/lab/scenarios/ops-rollback-gitops/expected.yaml +3 -0
  371. platformforge/data/lab/scenarios/ops-rollback-gitops/fixture/ops.yaml +38 -0
  372. platformforge/data/lab/scenarios/ops-rollback-impossible/expected.yaml +3 -0
  373. platformforge/data/lab/scenarios/ops-rollback-impossible/fixture/ops.yaml +34 -0
  374. platformforge/data/lab/scenarios/ops-rollback-scale/expected.yaml +3 -0
  375. platformforge/data/lab/scenarios/ops-rollback-scale/fixture/ops.yaml +40 -0
  376. platformforge/data/lab/scenarios/ops-rollback-terraform/expected.yaml +3 -0
  377. platformforge/data/lab/scenarios/ops-rollback-terraform/fixture/ops.yaml +38 -0
  378. platformforge/data/lab/scenarios/ops-rollback-terraform/fixture/tf/tfplan.bin +1 -0
  379. platformforge/data/lab/scenarios/ops-stale-observation/expected.yaml +3 -0
  380. platformforge/data/lab/scenarios/ops-stale-observation/fixture/ops.yaml +20 -0
  381. platformforge/data/lab/scenarios/secret-exposure/expected.yaml +5 -0
  382. platformforge/data/lab/scenarios/secret-exposure/fixture/app.env +2 -0
  383. platformforge/data/lab/scenarios/slo-burn/expected.yaml +5 -0
  384. platformforge/data/lab/scenarios/slo-burn/fixture/events.yaml +2 -0
  385. platformforge/data/lab/scenarios/slo-burn/fixture/slo.yaml +4 -0
  386. platformforge/data/lab/scenarios/terraform-iam-wildcard/expected.yaml +5 -0
  387. platformforge/data/lab/scenarios/terraform-iam-wildcard/fixture/policy.json +14 -0
  388. platformforge/data/lab/scenarios/terraform-public-bucket/expected.yaml +6 -0
  389. platformforge/data/lab/scenarios/terraform-public-bucket/fixture/main.tf +5 -0
  390. platformforge/data/portable_skills/platformforge-agents/SKILL.md +47 -0
  391. platformforge/data/portable_skills/platformforge-change/SKILL.md +41 -0
  392. platformforge/data/portable_skills/platformforge-core/SKILL.md +62 -0
  393. platformforge/data/portable_skills/platformforge-economy/SKILL.md +42 -0
  394. platformforge/data/portable_skills/platformforge-finops/SKILL.md +34 -0
  395. platformforge/data/portable_skills/platformforge-fleet/SKILL.md +39 -0
  396. platformforge/data/portable_skills/platformforge-governance/SKILL.md +76 -0
  397. platformforge/data/portable_skills/platformforge-graph/SKILL.md +46 -0
  398. platformforge/data/portable_skills/platformforge-lab/SKILL.md +39 -0
  399. platformforge/data/portable_skills/platformforge-sdd/SKILL.md +39 -0
  400. platformforge/data/portable_skills/platformforge-security/SKILL.md +38 -0
  401. platformforge/data/portable_skills/platformforge-sre/SKILL.md +41 -0
  402. platformforge/data/rules/catalog/finops.yaml +26 -0
  403. platformforge/data/rules/catalog/gitops.yaml +161 -0
  404. platformforge/data/rules/catalog/iac.yaml +84 -0
  405. platformforge/data/rules/catalog/k8s.yaml +322 -0
  406. platformforge/data/rules/catalog/orchestration.yaml +99 -0
  407. platformforge/data/rules/catalog/product.yaml +42 -0
  408. platformforge/data/rules/catalog/routing.yaml +122 -0
  409. platformforge/data/rules/catalog/security.yaml +159 -0
  410. platformforge/data/rules/catalog/sre.yaml +67 -0
  411. platformforge/diagnose/__init__.py +75 -0
  412. platformforge/distribution/__init__.py +18 -0
  413. platformforge/distribution/bundle.py +127 -0
  414. platformforge/distribution/hostflow.py +247 -0
  415. platformforge/distribution/models.py +80 -0
  416. platformforge/distribution/service.py +225 -0
  417. platformforge/economy/__init__.py +27 -0
  418. platformforge/economy/bench.py +66 -0
  419. platformforge/economy/budget.py +198 -0
  420. platformforge/economy/cache.py +287 -0
  421. platformforge/economy/checkpoint.py +112 -0
  422. platformforge/economy/collection.py +142 -0
  423. platformforge/economy/doctor.py +207 -0
  424. platformforge/economy/engine.py +158 -0
  425. platformforge/economy/envelope.py +61 -0
  426. platformforge/economy/fleetpack.py +86 -0
  427. platformforge/economy/ledger.py +232 -0
  428. platformforge/economy/plan.py +131 -0
  429. platformforge/economy/pricing.py +101 -0
  430. platformforge/economy/qpt.py +286 -0
  431. platformforge/economy/reconcile.py +86 -0
  432. platformforge/economy/verifyplan.py +107 -0
  433. platformforge/economy/waste.py +123 -0
  434. platformforge/evals/__init__.py +16 -0
  435. platformforge/evals/coverage.py +140 -0
  436. platformforge/evals/fleet_invariants.py +260 -0
  437. platformforge/evals/ops_invariants.py +158 -0
  438. platformforge/evals/runner.py +541 -0
  439. platformforge/federation/__init__.py +4 -0
  440. platformforge/federation/node.py +135 -0
  441. platformforge/finops/__init__.py +14 -0
  442. platformforge/finops/alloc.py +31 -0
  443. platformforge/finops/costs.py +79 -0
  444. platformforge/finops/focus.py +100 -0
  445. platformforge/finops/graph_cost.py +51 -0
  446. platformforge/finops/ingest.py +144 -0
  447. platformforge/finops/insights.py +193 -0
  448. platformforge/finops/unit.py +36 -0
  449. platformforge/fleet/__init__.py +5 -0
  450. platformforge/fleet/loader.py +73 -0
  451. platformforge/fleet/models.py +155 -0
  452. platformforge/fleet/orggraph.py +172 -0
  453. platformforge/fleet/query.py +154 -0
  454. platformforge/forge/__init__.py +9 -0
  455. platformforge/forge/collect.py +88 -0
  456. platformforge/forge/delegate.py +77 -0
  457. platformforge/forge/manifest.py +106 -0
  458. platformforge/freeze/__init__.py +22 -0
  459. platformforge/freeze/exceptions.py +56 -0
  460. platformforge/freeze/manifest.py +167 -0
  461. platformforge/freeze/snapshots.py +108 -0
  462. platformforge/graph/__init__.py +39 -0
  463. platformforge/graph/backend.py +174 -0
  464. platformforge/graph/bench.py +245 -0
  465. platformforge/graph/build.py +130 -0
  466. platformforge/graph/delivery.py +183 -0
  467. platformforge/graph/diff.py +292 -0
  468. platformforge/graph/events.py +116 -0
  469. platformforge/graph/migrate.py +44 -0
  470. platformforge/graph/model.py +264 -0
  471. platformforge/graph/persist.py +97 -0
  472. platformforge/graph/query.py +290 -0
  473. platformforge/graph/temporal.py +78 -0
  474. platformforge/graph/vocab.py +63 -0
  475. platformforge/graphview.py +94 -0
  476. platformforge/iac/__init__.py +7 -0
  477. platformforge/iac/drift.py +53 -0
  478. platformforge/iac/plan.py +84 -0
  479. platformforge/iac/terraform.py +123 -0
  480. platformforge/install/__init__.py +1 -0
  481. platformforge/install/service.py +421 -0
  482. platformforge/k8s/__init__.py +8 -0
  483. platformforge/k8s/helm.py +152 -0
  484. platformforge/k8s/hubble.py +87 -0
  485. platformforge/k8s/manifests.py +513 -0
  486. platformforge/knowledge/__init__.py +1 -0
  487. platformforge/knowledge/packs.py +157 -0
  488. platformforge/knowledge/registry.py +249 -0
  489. platformforge/knowledge/select.py +127 -0
  490. platformforge/lab/__init__.py +5 -0
  491. platformforge/lab/chaos.py +71 -0
  492. platformforge/lab/fleetlab.py +351 -0
  493. platformforge/lab/opslab.py +271 -0
  494. platformforge/lab/runner.py +219 -0
  495. platformforge/live/__init__.py +36 -0
  496. platformforge/live/budget.py +92 -0
  497. platformforge/live/capability.py +80 -0
  498. platformforge/live/collectors/__init__.py +6 -0
  499. platformforge/live/collectors/aws.py +370 -0
  500. platformforge/live/collectors/aws_transport.py +98 -0
  501. platformforge/live/collectors/k8s.py +389 -0
  502. platformforge/live/collectors/k8s_transport.py +85 -0
  503. platformforge/live/cursors.py +48 -0
  504. platformforge/live/drift.py +130 -0
  505. platformforge/live/envelope.py +85 -0
  506. platformforge/live/federation.py +113 -0
  507. platformforge/live/fixtures.py +168 -0
  508. platformforge/live/identity.py +258 -0
  509. platformforge/live/incident.py +200 -0
  510. platformforge/live/models.py +435 -0
  511. platformforge/live/reconcile.py +382 -0
  512. platformforge/live/remediate.py +169 -0
  513. platformforge/live/store.py +256 -0
  514. platformforge/live/topology.py +249 -0
  515. platformforge/mcp/__init__.py +7 -0
  516. platformforge/mcp/parity.py +69 -0
  517. platformforge/mcp/registry.py +427 -0
  518. platformforge/mcp/server.py +84 -0
  519. platformforge/mcp/tools.py +732 -0
  520. platformforge/models/__init__.py +21 -0
  521. platformforge/models/base.py +214 -0
  522. platformforge/observe/__init__.py +26 -0
  523. platformforge/observe/capacity.py +39 -0
  524. platformforge/observe/dr.py +67 -0
  525. platformforge/observe/grafana.py +76 -0
  526. platformforge/observe/incident.py +58 -0
  527. platformforge/observe/otel.py +135 -0
  528. platformforge/observe/postmortem.py +72 -0
  529. platformforge/observe/prometheus.py +88 -0
  530. platformforge/observe/slo.py +125 -0
  531. platformforge/ops/__init__.py +8 -0
  532. platformforge/ops/actions.py +215 -0
  533. platformforge/ops/analytics.py +83 -0
  534. platformforge/ops/approval.py +275 -0
  535. platformforge/ops/autorem.py +101 -0
  536. platformforge/ops/config.py +175 -0
  537. platformforge/ops/engine.py +758 -0
  538. platformforge/ops/envelope.py +135 -0
  539. platformforge/ops/executors/__init__.py +1 -0
  540. platformforge/ops/executors/base.py +211 -0
  541. platformforge/ops/executors/git.py +77 -0
  542. platformforge/ops/executors/gitops.py +134 -0
  543. platformforge/ops/executors/terraform.py +84 -0
  544. platformforge/ops/gates.py +135 -0
  545. platformforge/ops/goldenpath.py +180 -0
  546. platformforge/ops/material.py +181 -0
  547. platformforge/ops/models.py +421 -0
  548. platformforge/ops/operation.py +335 -0
  549. platformforge/ops/opgraph.py +233 -0
  550. platformforge/ops/policy.py +275 -0
  551. platformforge/ops/preconditions.py +109 -0
  552. platformforge/ops/registry.py +101 -0
  553. platformforge/ops/risk.py +216 -0
  554. platformforge/ops/rollback.py +287 -0
  555. platformforge/ops/rollback_builders.py +163 -0
  556. platformforge/ops/runbook.py +269 -0
  557. platformforge/ops/simulate.py +125 -0
  558. platformforge/ops/source_of_truth.py +198 -0
  559. platformforge/ops/store.py +157 -0
  560. platformforge/ops/verify.py +190 -0
  561. platformforge/optimize/__init__.py +4 -0
  562. platformforge/optimize/engine.py +109 -0
  563. platformforge/optimize/models.py +68 -0
  564. platformforge/optimize/scan.py +196 -0
  565. platformforge/plan/__init__.py +107 -0
  566. platformforge/portable_cli.py +199 -0
  567. platformforge/portal_adapter.py +740 -0
  568. platformforge/portal_assets/chunk-7_l-b4Tr.js +1 -0
  569. platformforge/portal_assets/chunk-B0Iad6pD.js +1 -0
  570. platformforge/portal_assets/chunk-B605XnCF.js +1 -0
  571. platformforge/portal_assets/chunk-B7N3TXcn.js +1 -0
  572. platformforge/portal_assets/chunk-BAj6yGem.js +1 -0
  573. platformforge/portal_assets/chunk-BGUitn2r.js +1 -0
  574. platformforge/portal_assets/chunk-BVKnCv85.js +1 -0
  575. platformforge/portal_assets/chunk-BYyM9V_w.js +1 -0
  576. platformforge/portal_assets/chunk-BaQMhq-G.js +1 -0
  577. platformforge/portal_assets/chunk-BavOrxVm.js +1 -0
  578. platformforge/portal_assets/chunk-Bb0C24YV.js +1 -0
  579. platformforge/portal_assets/chunk-BfCFGPzs.js +1 -0
  580. platformforge/portal_assets/chunk-C2t4OUVu.js +1 -0
  581. platformforge/portal_assets/chunk-C3pI4QjU.js +1 -0
  582. platformforge/portal_assets/chunk-C4gpbtbP.js +1 -0
  583. platformforge/portal_assets/chunk-CGWeHhKY.js +1 -0
  584. platformforge/portal_assets/chunk-CJCT86Dr.js +1 -0
  585. platformforge/portal_assets/chunk-CXcsLDPJ.js +1 -0
  586. platformforge/portal_assets/chunk-CcjxoLxw.js +1 -0
  587. platformforge/portal_assets/chunk-D-gBPXHa.js +1 -0
  588. platformforge/portal_assets/chunk-D3eZogIe.js +1 -0
  589. platformforge/portal_assets/chunk-DQU0VyoQ.js +1 -0
  590. platformforge/portal_assets/chunk-DqWNkF1O.js +1 -0
  591. platformforge/portal_assets/chunk-DuPPkSIE.js +3 -0
  592. platformforge/portal_assets/chunk-DyIHOW_a.js +1 -0
  593. platformforge/portal_assets/chunk-Fx4zSGL5.js +1 -0
  594. platformforge/portal_assets/chunk-UBKt05Rg.js +1 -0
  595. platformforge/portal_assets/chunk-htnJDQEY.js +1 -0
  596. platformforge/portal_assets/chunk-kXRFMGqe.js +1 -0
  597. platformforge/portal_assets/chunk-qe3u763a.js +1 -0
  598. platformforge/portal_assets/favicon.ico +0 -0
  599. platformforge/portal_assets/index.html +13 -0
  600. platformforge/portal_assets/main-QDFVZK3T.js +5 -0
  601. platformforge/portal_assets/styles-MQEBDFDX.css +1 -0
  602. platformforge/product/__init__.py +10 -0
  603. platformforge/product/backstage.py +49 -0
  604. platformforge/product/catalog.py +74 -0
  605. platformforge/product/crossplane.py +341 -0
  606. platformforge/product/golden_paths/__init__.py +5 -0
  607. platformforge/product/golden_paths/engine.py +97 -0
  608. platformforge/product/golden_paths/library.yaml +198 -0
  609. platformforge/product/golden_paths/model.py +84 -0
  610. platformforge/product/maturity.py +107 -0
  611. platformforge/product/scorecards.py +84 -0
  612. platformforge/resources.py +36 -0
  613. platformforge/risk/__init__.py +5 -0
  614. platformforge/risk/engine.py +95 -0
  615. platformforge/risk/signals.py +49 -0
  616. platformforge/routing/__init__.py +13 -0
  617. platformforge/routing/decision.py +191 -0
  618. platformforge/routing/router.py +328 -0
  619. platformforge/rtk/__init__.py +9 -0
  620. platformforge/rtk/compact.py +127 -0
  621. platformforge/rtk/parsers.py +199 -0
  622. platformforge/rules/__init__.py +5 -0
  623. platformforge/rules/engine.py +345 -0
  624. platformforge/sandbox/__init__.py +7 -0
  625. platformforge/sandbox/env.py +151 -0
  626. platformforge/sandbox/review.py +92 -0
  627. platformforge/sdd/__init__.py +8 -0
  628. platformforge/sdd/lifecycle.py +239 -0
  629. platformforge/security/__init__.py +19 -0
  630. platformforge/security/cosign.py +67 -0
  631. platformforge/security/iam.py +112 -0
  632. platformforge/security/identity.py +84 -0
  633. platformforge/security/kyverno.py +106 -0
  634. platformforge/security/sbom.py +59 -0
  635. platformforge/security/scan.py +63 -0
  636. platformforge/security/slsa.py +86 -0
  637. platformforge/security/supply.py +62 -0
  638. platformforge/tokensave/__init__.py +20 -0
  639. platformforge/tokensave/budget.py +62 -0
  640. platformforge/tokensave/estimate.py +21 -0
  641. platformforge/tokensave/index.py +172 -0
  642. platformforge/tokensave/ledger.py +121 -0
  643. platformforge/tokensave/packs.py +285 -0
  644. platformforge/ui/__init__.py +28 -0
  645. platformforge/ui/app.py +465 -0
  646. platformforge/ui/home.py +113 -0
  647. platformforge/ui/i18n.py +143 -0
  648. platformforge/ui/kit.py +689 -0
  649. platformforge/ui/screen.py +628 -0
  650. platformforge/ui/tui.py +94 -0
  651. platformforge/ui/wizard.py +309 -0
  652. platformforge/workspace/__init__.py +13 -0
  653. platformforge/workspace/models.py +35 -0
  654. platformforge/workspace/service.py +69 -0
  655. platformforge-0.1.0.dist-info/METADATA +212 -0
  656. platformforge-0.1.0.dist-info/RECORD +659 -0
  657. platformforge-0.1.0.dist-info/WHEEL +4 -0
  658. platformforge-0.1.0.dist-info/entry_points.txt +3 -0
  659. platformforge-0.1.0.dist-info/licenses/LICENSE +21 -0
@@ -0,0 +1 @@
1
+ :root{--fg-space-1: .25rem;--fg-space-2: .5rem;--fg-space-3: .75rem;--fg-space-4: 1rem;--fg-space-5: 1.5rem;--fg-space-6: 2rem;--fg-space-7: 3rem;--fg-radius-sm: .375rem;--fg-radius-md: .625rem;--fg-radius-lg: .875rem;--fg-radius-pill: 999px;--fg-motion-fast: .12s;--fg-motion-press: .14s;--fg-motion-med: .22s;--fg-motion-ease: cubic-bezier(.2, .8, .2, 1);--fg-ease-out: cubic-bezier(.23, 1, .32, 1);--fg-ease-in-out: cubic-bezier(.77, 0, .175, 1);--fg-elev-1: 0 1px 2px rgb(0 0 0 / .12);--fg-elev-2: 0 4px 16px rgb(0 0 0 / .16);--fg-elev-3: 0 12px 40px rgb(0 0 0 / .24);--fg-font: "Segoe UI", system-ui, -apple-system, "Inter", "Roboto", sans-serif;--fg-font-mono: "Cascadia Code", ui-monospace, "SF Mono", Consolas, monospace;--fg-topbar-h: 3.25rem;--fg-sidebar-w: 15.5rem;--fg-sidebar-w-collapsed: 3.75rem;color-scheme:light}:root{--fg-bg: #f4f5f7;--fg-bg-raised: #ffffff;--fg-surface: #ffffff;--fg-surface-2: #eef0f3;--fg-border: #d9dde3;--fg-border-strong: #b9c0ca;--fg-text: #16191d;--fg-text-2: #4b5563;--fg-text-dim: #6b7280;--fg-focus: #2563eb;--fg-success: #0f8a4c;--fg-success-bg: #e3f5ea;--fg-warning: #a35c00;--fg-warning-bg: #fdf0dd;--fg-error: #c0392b;--fg-error-bg: #fdeceb;--fg-info: #1d5fd1;--fg-info-bg: #e8f0fe;--fg-scrim: rgb(10 12 16 / .45)}[data-scheme=dark]{color-scheme:dark;--fg-bg: #0d1014;--fg-bg-raised: #13171d;--fg-surface: #161b22;--fg-surface-2: #1d232c;--fg-border: #2b333d;--fg-border-strong: #3d4754;--fg-text: #e6e9ee;--fg-text-2: #a9b3bf;--fg-text-dim: #7d8894;--fg-focus: #6ea8fe;--fg-success: #3fce7f;--fg-success-bg: #10331f;--fg-warning: #f0b35e;--fg-warning-bg: #3a2a10;--fg-error: #ff6f61;--fg-error-bg: #3d1512;--fg-info: #79a8ff;--fg-info-bg: #15233d;--fg-elev-1: 0 1px 2px rgb(0 0 0 / .5);--fg-elev-2: 0 4px 16px rgb(0 0 0 / .45);--fg-elev-3: 0 12px 40px rgb(0 0 0 / .55)}:root,[data-forge=the-forge]{--fg-accent: #e8611c;--fg-accent-strong: #c74e0f;--fg-accent-bg: #fdeee4;--fg-accent-contrast: #ffffff;--fg-gradient: linear-gradient(135deg, #e8611c 0%, #b93e6b 100%)}[data-scheme=dark][data-forge=the-forge],[data-scheme=dark] :root[data-forge=the-forge]{--fg-accent-bg: #3a1d0c}[data-forge=spark-forge-aws]{--fg-accent: #e08a00;--fg-accent-strong: #b56d00;--fg-accent-bg: #fdf2dc;--fg-accent-contrast: #1d1400;--fg-gradient: linear-gradient(135deg, #e08a00 0%, #c2571b 100%)}[data-forge=spark-forge-azure]{--fg-accent: #0078d4;--fg-accent-strong: #005a9e;--fg-accent-bg: #e2f0fc;--fg-accent-contrast: #ffffff;--fg-gradient: linear-gradient(135deg, #0078d4 0%, #2b88d8 100%)}[data-forge=api-forge]{--fg-accent: #0e8f8f;--fg-accent-strong: #0a6e6e;--fg-accent-bg: #def3f2;--fg-accent-contrast: #ffffff;--fg-gradient: linear-gradient(135deg, #0e8f8f 0%, #1167b1 100%)}[data-forge=platform-forge]{--fg-accent: #6d4bd8;--fg-accent-strong: #5537b8;--fg-accent-bg: #ece6fb;--fg-accent-contrast: #ffffff;--fg-gradient: linear-gradient(135deg, #6d4bd8 0%, #8f3fd1 100%)}[data-forge=forge-doctor-data]{--fg-accent: #178a50;--fg-accent-strong: #0f6e3e;--fg-accent-bg: #ddf3e6;--fg-accent-contrast: #ffffff;--fg-gradient: linear-gradient(135deg, #178a50 0%, #0d9488 100%)}[data-forge=forge-doctor-api]{--fg-accent: #c73565;--fg-accent-strong: #a02550;--fg-accent-bg: #fbe4ec;--fg-accent-contrast: #ffffff;--fg-gradient: linear-gradient(135deg, #c73565 0%, #9d4edd 100%)}[data-scheme=dark]{--fg-accent-bg: rgb(255 255 255 / .08)}*{box-sizing:border-box}html,body{height:100%}body{margin:0;font-family:var(--fg-font);background:var(--fg-bg);color:var(--fg-text);font-size:.9375rem;line-height:1.5;-webkit-font-smoothing:antialiased}h1,h2,h3,h4{line-height:1.25;margin:0;font-weight:650}h1{font-size:1.375rem}h2{font-size:1.125rem}h3{font-size:1rem}p{margin:0}a{color:var(--fg-info)}code,pre,.fg-mono{font-family:var(--fg-font-mono);font-size:.85em}button{font:inherit}:focus-visible{outline:2px solid var(--fg-focus);outline-offset:2px;border-radius:var(--fg-radius-sm)}::selection{background:color-mix(in srgb,var(--fg-accent) 26%,transparent)}*{scrollbar-width:thin;scrollbar-color:color-mix(in srgb,var(--fg-text-dim) 35%,transparent) transparent}::-webkit-scrollbar{width:8px;height:8px}::-webkit-scrollbar-thumb{background:color-mix(in srgb,var(--fg-text-dim) 35%,transparent);border-radius:8px}::-webkit-scrollbar-thumb:hover{background:color-mix(in srgb,var(--fg-text-dim) 55%,transparent)}::-webkit-scrollbar-track{background:transparent}.sr-only{position:absolute;width:1px;height:1px;padding:0;margin:-1px;overflow:hidden;clip:rect(0 0 0 0);white-space:nowrap;border:0}@media(prefers-reduced-motion:reduce){*,*:before,*:after{animation-duration:.01ms!important;transition-duration:.01ms!important}}.fg-card{background:var(--fg-surface);border:1px solid var(--fg-border);border-radius:var(--fg-radius-lg);padding:var(--fg-space-5);box-shadow:var(--fg-elev-1);transition:box-shadow var(--fg-motion-med) var(--fg-motion-ease),border-color var(--fg-motion-fast) var(--fg-motion-ease)}.fg-card[data-lift]{transition-duration:var(--fg-motion-fast),var(--fg-motion-fast)}.fg-card[data-lift]:hover{box-shadow:var(--fg-elev-2);border-color:var(--fg-border-strong)}.fg-pill{display:inline-flex;align-items:center;gap:var(--fg-space-2);border-radius:var(--fg-radius-pill);padding:.125rem .625rem;font-size:.75rem;font-weight:600;letter-spacing:.02em;border:1px solid var(--fg-border);background:var(--fg-surface-2);color:var(--fg-text-2);white-space:nowrap}.fg-pill[data-tone=success]{color:var(--fg-success);background:var(--fg-success-bg);border-color:transparent}.fg-pill[data-tone=warning]{color:var(--fg-warning);background:var(--fg-warning-bg);border-color:transparent}.fg-pill[data-tone=error]{color:var(--fg-error);background:var(--fg-error-bg);border-color:transparent}.fg-pill[data-tone=info]{color:var(--fg-info);background:var(--fg-info-bg);border-color:transparent}.fg-pill[data-tone=accent]{color:var(--fg-accent-contrast);background:var(--fg-accent);border-color:transparent}.fg-btn{display:inline-flex;align-items:center;justify-content:center;gap:var(--fg-space-2);border-radius:var(--fg-radius-md);border:1px solid var(--fg-border);background:var(--fg-surface);color:var(--fg-text);padding:.5rem 1rem;cursor:pointer;font-weight:550;box-shadow:var(--fg-elev-1);transition:background var(--fg-motion-fast) var(--fg-motion-ease),border-color var(--fg-motion-fast) var(--fg-motion-ease),box-shadow var(--fg-motion-fast) var(--fg-motion-ease),transform var(--fg-motion-fast) var(--fg-motion-ease)}.fg-btn:hover{background:var(--fg-surface-2);border-color:var(--fg-border-strong)}.fg-btn:active{transform:scale(.98);box-shadow:none}.fg-btn:disabled{opacity:.55;cursor:not-allowed;transform:none;box-shadow:none}.fg-btn[data-variant=accent]{background:var(--fg-accent);border-color:var(--fg-accent);color:var(--fg-accent-contrast)}.fg-btn[data-variant=accent]:hover{background:var(--fg-accent-strong);border-color:var(--fg-accent-strong);box-shadow:0 2px 8px color-mix(in srgb,var(--fg-accent) 40%,transparent)}.fg-btn[data-variant=danger]{color:var(--fg-error);border-color:var(--fg-error)}.fg-btn[data-variant=danger]:hover{background:var(--fg-error-bg)}.fg-btn[data-variant=ghost]{border-color:transparent;background:transparent;box-shadow:none}.fg-btn[data-variant=ghost]:hover{background:var(--fg-surface-2)}.fg-input,.fg-select,.fg-textarea{width:100%;border:1px solid var(--fg-border);border-radius:var(--fg-radius-md);background:var(--fg-surface);color:var(--fg-text);padding:.5rem .75rem;font:inherit;transition:border-color var(--fg-motion-fast) var(--fg-motion-ease),box-shadow var(--fg-motion-fast) var(--fg-motion-ease)}.fg-input:hover:not(:focus),.fg-select:hover:not(:focus),.fg-textarea:hover:not(:focus){border-color:var(--fg-border-strong)}.fg-input:focus,.fg-select:focus,.fg-textarea:focus{border-color:var(--fg-focus);outline:none;box-shadow:0 0 0 3px color-mix(in srgb,var(--fg-focus) 22%,transparent)}.fg-table{width:100%;border-collapse:collapse;font-size:.875rem}.fg-table th{text-align:left;font-weight:600;color:var(--fg-text-dim);font-size:.75rem;text-transform:uppercase;letter-spacing:.05em;padding:var(--fg-space-2) var(--fg-space-3);border-bottom:1px solid var(--fg-border)}.fg-table td{padding:var(--fg-space-3);border-bottom:1px solid var(--fg-border);vertical-align:top}.fg-table tbody tr{transition:background var(--fg-motion-fast) var(--fg-motion-ease)}.fg-table tbody tr:hover{background:var(--fg-surface-2)}.fg-table tr:last-child td{border-bottom:none}.fg-page{padding:var(--fg-space-6);max-width:76rem;margin:0 auto;display:block}.fg-page-header{display:flex;align-items:flex-start;justify-content:space-between;gap:var(--fg-space-4);margin-bottom:var(--fg-space-5);flex-wrap:wrap}.fg-page-title{display:flex;flex-direction:column;gap:var(--fg-space-1)}.fg-page-sub{color:var(--fg-text-2);font-size:.875rem;max-width:46rem}.fg-grid{display:grid;gap:var(--fg-space-4)}.fg-grid[data-cols="2"]{grid-template-columns:repeat(auto-fit,minmax(20rem,1fr))}.fg-grid[data-cols="3"]{grid-template-columns:repeat(auto-fit,minmax(15rem,1fr))}.fg-muted{color:var(--fg-text-2)}.fg-dim{color:var(--fg-text-dim)}.fg-small{font-size:.8125rem}.fg-row{display:flex;align-items:center;gap:var(--fg-space-3)}.fg-row[data-wrap]{flex-wrap:wrap}.fg-spread{justify-content:space-between}.fg-stack{display:flex;flex-direction:column;gap:var(--fg-space-3)}.fg-kv{display:grid;grid-template-columns:minmax(9rem,auto) 1fr;gap:var(--fg-space-2) var(--fg-space-4);font-size:.875rem}.fg-kv dt{color:var(--fg-text-dim)}.fg-kv dd{margin:0;word-break:break-word}:root{--space-1: var(--fg-space-1);--space-2: var(--fg-space-2);--space-3: var(--fg-space-3);--space-4: var(--fg-space-4);--space-5: var(--fg-space-5);--space-6: var(--fg-space-6);--space-8: var(--fg-space-7);--radius-sm: var(--fg-radius-sm);--radius-md: var(--fg-radius-md);--radius-lg: var(--fg-radius-lg);--radius-pill: var(--fg-radius-pill);--font-xs: .75rem;--font-sm: .8125rem;--font-lg: 1.125rem;--font-2xl: 1.375rem;--font-mono: var(--fg-font-mono);--fg: var(--fg-text);--fg-muted: var(--fg-text-2);--bg: var(--fg-bg);--bg-elevated: var(--fg-surface);--bg-hover: var(--fg-surface-2);--border: var(--fg-border);--accent: var(--fg-accent);--accent-bg: var(--fg-accent-bg);--accent-fg: var(--fg-accent-contrast);--ok: var(--fg-success);--ok-bg: var(--fg-success-bg);--warn: var(--fg-warning);--warn-bg: var(--fg-warning-bg);--error: var(--fg-error);--error-bg: var(--fg-error-bg);--info: var(--fg-info);--info-bg: var(--fg-info-bg);--topbar-h: var(--fg-topbar-h);--motion: var(--fg-motion-med) var(--fg-motion-ease);--motion-fast: var(--fg-motion-fast) var(--fg-motion-ease);--ease-out: var(--fg-ease-out);--ease-in-out: var(--fg-ease-in-out);--press: var(--fg-motion-press) var(--fg-ease-out);--elev-card: var(--fg-elev-1);--elev-hover: var(--fg-elev-2);--elev-pop: var(--fg-elev-3);--border-strong: var(--fg-border-strong);--accent-strong: var(--fg-accent-strong);--gradient: var(--fg-gradient);--scrim: var(--fg-scrim)}.btn{display:inline-flex;align-items:center;justify-content:center;gap:var(--space-2);border-radius:var(--radius-md);border:1px solid var(--border);background:var(--bg-elevated);color:var(--fg);padding:.5rem 1rem;cursor:pointer;font-weight:550;font-size:.875rem;box-shadow:var(--elev-card);transition:background var(--motion-fast),border-color var(--motion-fast),box-shadow var(--motion-fast),transform var(--motion-fast)}.btn:hover{background:var(--bg-hover);border-color:var(--border-strong)}.btn:active{transform:scale(.97);box-shadow:none;transition-duration:var(--fg-motion-press)}.btn:disabled{opacity:.55;cursor:not-allowed;transform:none;box-shadow:none}a.btn,a.btn:hover{text-decoration:none}.btn--primary{background:var(--accent);border-color:var(--accent);color:var(--accent-fg)}.btn--primary:hover{background:var(--accent-strong);border-color:var(--accent-strong);box-shadow:0 2px 10px color-mix(in srgb,var(--accent) 40%,transparent)}.btn--danger{color:var(--error);border-color:var(--error)}.btn--danger:hover{background:var(--error-bg)}.card{background:var(--bg-elevated);border:1px solid var(--border);border-radius:var(--radius-lg);padding:var(--space-5);box-shadow:var(--elev-card);transition:box-shadow var(--motion),border-color var(--motion-fast),transform var(--motion)}.card[data-lift]{transition-duration:var(--fg-motion-fast),var(--fg-motion-fast),var(--fg-motion-fast)}.card[data-lift]:hover{box-shadow:var(--elev-hover);border-color:var(--border-strong);transform:translateY(-2px)}.input,.select,.textarea{width:100%;border:1px solid var(--border);border-radius:var(--radius-md);background:var(--bg-elevated);color:var(--fg);padding:.5rem .75rem;font:inherit;transition:border-color var(--motion-fast),box-shadow var(--motion-fast)}.input:hover:not(:focus),.select:hover:not(:focus),.textarea:hover:not(:focus){border-color:var(--border-strong)}.input:focus,.select:focus,.textarea:focus{border-color:var(--fg-focus);outline:none;box-shadow:0 0 0 3px color-mix(in srgb,var(--fg-focus) 22%,transparent)}.table{width:100%;border-collapse:collapse;font-size:.875rem}.table th{text-align:left;font-weight:600;color:var(--fg-muted);font-size:var(--font-xs);text-transform:uppercase;letter-spacing:.05em;padding:var(--space-2) var(--space-3);border-bottom:1px solid var(--border)}.table td{padding:var(--space-3);border-bottom:1px solid var(--border);vertical-align:top}.table tbody tr{transition:background var(--motion-fast)}.table tbody tr:hover{background:var(--bg-hover)}.table tr:last-child td{border-bottom:none}.skeleton{border-radius:var(--radius-md);background:linear-gradient(100deg,var(--bg-hover) 40%,color-mix(in srgb,var(--bg-hover) 55%,var(--fg-muted) 12%) 50%,var(--bg-hover) 60%);background-size:200% 100%;animation:fg-shimmer 1.4s linear infinite}.skeleton--line{height:.875rem;margin:var(--space-2) 0}.skeleton--block{min-height:7rem;border-radius:var(--radius-lg)}@keyframes fg-shimmer{0%{background-position:180% 0}to{background-position:-20% 0}}.search-field{position:relative;max-width:360px;margin-bottom:var(--space-4)}.search-field ui-icon{position:absolute;left:10px;top:50%;translate:0 -50%;color:var(--fg-muted);pointer-events:none}.search-field .input{padding-left:32px}.stat{position:relative;display:grid;gap:2px;padding:var(--space-4) var(--space-5) var(--space-4) calc(var(--space-5) + 3px);background:var(--bg-elevated);border:1px solid var(--border);border-radius:var(--radius-lg);box-shadow:var(--elev-card);overflow:hidden;transition:box-shadow var(--motion),transform var(--motion),border-color var(--motion-fast)}.stat:before{content:"";position:absolute;inset:0 auto 0 0;width:3px;background:var(--stat-rail, var(--accent))}.stat{transition-duration:var(--fg-motion-fast),var(--fg-motion-fast),var(--fg-motion-fast)}.stat:hover{box-shadow:var(--elev-hover);border-color:var(--border-strong);transform:translateY(-2px)}.stat__value{font-size:1.5rem;font-weight:700;letter-spacing:-.02em;line-height:1.15;font-variant-numeric:tabular-nums}.stat__label{font-size:var(--font-xs);font-weight:600;text-transform:uppercase;letter-spacing:.06em;color:var(--fg-muted)}.stat__hint{font-size:var(--font-xs);color:var(--fg-muted)}@keyframes fg-page-in{0%{opacity:0;transform:translateY(6px)}to{opacity:1;transform:none}}page-dashboard,page-install,page-config,page-explorer,page-forge-detail,page-profiles,page-hosts,page-mcp,page-skills,page-agents,page-tasks,page-graph,page-knowledge,page-settings{display:block;animation:fg-page-in var(--fg-motion-med) var(--fg-motion-ease) both}@media(prefers-reduced-motion:reduce){.skeleton{animation:none}page-dashboard,page-install,page-config,page-explorer,page-forge-detail,page-profiles,page-hosts,page-mcp,page-skills,page-agents,page-tasks,page-graph,page-knowledge,page-settings{animation:none}}@keyframes fg-pop{0%{opacity:0;transform:scale(.8)}to{opacity:1;transform:scale(1)}}.fg-pop{animation:fg-pop var(--fg-motion-med) var(--fg-ease-out) both}.stagger>*{animation:fg-page-in var(--fg-motion-med) var(--fg-ease-out) both}.stagger>*:nth-child(2){animation-delay:40ms}.stagger>*:nth-child(3){animation-delay:80ms}.stagger>*:nth-child(4){animation-delay:.12s}.stagger>*:nth-child(n+5){animation-delay:.16s}@media(prefers-reduced-motion:reduce){.stagger>*,.fg-pop{animation:none}}.stepper{display:flex;list-style:none;margin:0;padding:0;gap:0}.stepper__step{position:relative;display:flex;align-items:center;gap:var(--space-2);flex:1;min-width:0;color:var(--fg-muted);font-size:var(--font-sm)}.stepper__step:not(:last-child):after{content:"";flex:1;height:2px;margin:0 var(--space-3);border-radius:1px;background:var(--border);transition:background var(--motion-med) var(--ease-out)}.stepper__dot{display:grid;place-items:center;width:26px;height:26px;flex:none;border-radius:50%;border:1.5px solid var(--border-strong);font-size:var(--font-xs);font-weight:650;transition:background var(--motion-med) var(--ease-out),border-color var(--motion-med) var(--ease-out),color var(--motion-fast)}.stepper__step[data-state=done]{color:var(--fg)}.stepper__step[data-state=done] .stepper__dot{background:var(--ok);border-color:var(--ok);color:#fff;animation:fg-pop var(--fg-motion-med) var(--fg-ease-out) both}.stepper__step[data-state=done]:after{background:var(--ok)}.stepper__step[data-state=active]{color:var(--fg);font-weight:600}.stepper__step[data-state=active] .stepper__dot{border-color:var(--accent);color:var(--accent);box-shadow:0 0 0 4px color-mix(in srgb,var(--accent) 15%,transparent)}.stepper__step[data-state=warn] .stepper__dot{background:var(--warn);border-color:var(--warn);color:#fff}@media(prefers-reduced-motion:reduce){.stepper__step[data-state=done] .stepper__dot{animation:none}}@media(max-width:560px){.stepper{flex-wrap:wrap;gap:var(--space-2)}.stepper__step{flex:none}.stepper__step:not(:last-child):after{display:none}}.cap{display:inline-flex;align-items:center;gap:var(--space-2);padding:7px var(--space-3) 7px var(--space-2);border:1px solid var(--border);border-radius:var(--radius-md);background:var(--bg-hover);font-size:var(--font-sm);font-weight:550;color:var(--fg)}.cap ui-icon{color:var(--fg-muted)}.cap__dot{width:8px;height:8px;border-radius:50%;background:var(--fg-muted)}.cap[data-state=supported]{border-color:color-mix(in srgb,var(--ok) 40%,transparent);background:var(--ok-bg)}.cap[data-state=supported] ui-icon{color:var(--ok)}.cap[data-state=supported] .cap__dot{background:var(--ok)}.cap[data-state=unverified]{border-color:color-mix(in srgb,var(--warn) 45%,transparent);background:var(--warn-bg)}.cap[data-state=unverified] ui-icon{color:var(--warn)}.cap[data-state=unverified] .cap__dot{background:var(--warn)}.cap[data-state=unsupported],.cap[data-state=not_applicable]{opacity:.6}.portal-row{display:flex;align-items:flex-start;gap:var(--space-3);margin-top:var(--space-4);padding:var(--space-3);border:1px solid var(--border);border-radius:var(--radius-md);color:var(--fg-muted)}.portal-row[data-state=installed]{border-color:color-mix(in srgb,var(--ok) 45%,var(--border));color:var(--fg)}.portal-row[data-state=installed] ui-icon{color:var(--ok)}.portal-row__body{display:grid;gap:2px;min-width:0}.portal-row__body small{overflow-wrap:anywhere}.skip-link{position:fixed;top:var(--space-3);left:var(--space-3);z-index:100;padding:var(--space-2) var(--space-4);border-radius:var(--radius-md);background:var(--bg-elevated);color:var(--fg);border:1px solid var(--border-strong);box-shadow:var(--elev-pop);transform:translateY(-200%);transition:transform var(--motion-fast)}.skip-link:focus-visible{transform:translateY(0)}details>summary{cursor:pointer;font-weight:600;color:var(--fg-muted);border-radius:var(--radius-sm);transition:color var(--motion-fast)}details>summary:hover{color:var(--fg)}details>summary::marker{color:var(--accent)}.shell{display:grid;grid-template-columns:auto 1fr;height:100dvh;overflow:hidden}.shell__side{display:flex;flex-direction:column;width:var(--sidebar-w, 250px);border-right:1px solid var(--border);background:var(--bg-elevated);transition:width var(--motion)}.shell__side[data-collapsed]{--sidebar-w: 66px}.shell__side[data-collapsed] .brand__text,.shell__side[data-collapsed] .nav__label,.shell__side[data-collapsed] .nav__section{display:none}.shell__side[data-collapsed] .nav__item{justify-content:center;padding-inline:0}.shell__side[data-collapsed] .nav__item:before{display:none}.shell__side[data-collapsed] .nav__item--active{background:var(--accent-bg)}.brand{display:flex;align-items:center;gap:var(--space-3);padding:var(--space-4);text-decoration:none;color:var(--fg);border-bottom:1px solid var(--border);min-height:var(--topbar-h)}.brand__mark{display:grid;place-items:center;width:34px;height:34px;border-radius:10px;background:var(--gradient);color:var(--accent-fg);font-size:13px;line-height:1;box-shadow:0 2px 8px color-mix(in srgb,var(--accent) 45%,transparent);flex-shrink:0}.brand__text{display:grid;line-height:1.25;min-width:0}.brand__text strong,.brand__text small{white-space:nowrap;overflow:hidden;text-overflow:ellipsis}.brand__text strong{font-size:var(--font-sm);font-weight:650;letter-spacing:-.01em}.brand__text small{color:var(--fg-muted);font-size:var(--font-xs)}.nav{flex:1;overflow-y:auto;overflow-x:hidden;padding:var(--space-3) var(--space-2);display:flex;flex-direction:column;gap:2px}.nav__section{margin:var(--space-4) var(--space-3) 4px;font-size:.6875rem;font-weight:700;text-transform:uppercase;letter-spacing:.1em;color:var(--fg-muted)}.nav__item{position:relative;display:flex;align-items:center;gap:var(--space-3);padding:8px var(--space-3) 8px calc(var(--space-3) + 3px);border-radius:var(--radius-md);color:var(--fg-muted);text-decoration:none;font-size:var(--font-sm);font-weight:500;transition:background var(--motion-fast),color var(--motion-fast),transform var(--motion-fast)}.nav__item:before{content:"";position:absolute;left:0;top:50%;translate:0 -50%;width:3px;height:0;border-radius:3px;background:var(--accent);transition:height var(--motion-fast)}.nav__item:hover{background:var(--bg-hover);color:var(--fg)}.nav__item--active{background:var(--accent-bg);color:var(--accent);font-weight:600}.nav__item--active:before{height:60%}.nav__icon{flex-shrink:0;display:inline-flex}.nav__collapse,.icon-btn{display:inline-flex;align-items:center;justify-content:center;border:1px solid var(--border);border-radius:var(--radius-md);background:transparent;color:var(--fg-muted);cursor:pointer;transition:color var(--motion-fast),background var(--motion-fast),border-color var(--motion-fast),transform var(--motion-fast)}.nav__collapse{margin:var(--space-2);padding:6px}.icon-btn{min-width:32px;height:32px;padding:0 8px;font-size:var(--font-xs);font-weight:700}.nav__collapse:hover,.icon-btn:hover{color:var(--fg);background:var(--bg-hover);border-color:var(--border-strong)}.icon-btn:active{transform:scale(.96)}.icon-btn--search{gap:var(--space-2);padding:0 var(--space-3)}.icon-btn__kbd{font-family:var(--font-mono);font-size:.625rem;font-weight:600;color:var(--fg-muted);border:1px solid var(--border);border-radius:var(--radius-sm);padding:1px 5px;letter-spacing:.02em}@media(max-width:640px){.icon-btn__kbd{display:none}}.shell__main{display:flex;flex-direction:column;min-width:0;min-height:0;background:radial-gradient(1200px 300px at 30% -80px,color-mix(in srgb,var(--accent) 7%,transparent),transparent 70%),var(--bg)}.topbar{display:flex;align-items:center;justify-content:space-between;gap:var(--space-4);height:var(--topbar-h);padding:0 var(--space-5) 0 var(--space-4);border-bottom:1px solid var(--border);background:color-mix(in srgb,var(--bg-elevated) 82%,transparent);-webkit-backdrop-filter:blur(10px);backdrop-filter:blur(10px)}.topbar__status{display:flex;align-items:center;gap:var(--space-2);min-width:0;font-size:var(--font-sm);color:var(--fg-muted)}.topbar__workspace{display:inline-flex;align-items:center;gap:6px;white-space:nowrap;overflow:hidden;text-overflow:ellipsis;color:var(--fg);font-weight:550}.topbar__fed{font-size:var(--font-xs);font-weight:700;letter-spacing:.02em;color:var(--accent);border:1px solid color-mix(in srgb,var(--accent) 55%,transparent);border-radius:var(--radius-pill);padding:2px 9px;background:var(--accent-bg)}.topbar__actions{display:flex;gap:var(--space-2)}.dot{width:9px;height:9px;border-radius:50%;background:var(--dot-c, var(--fg-muted));flex-shrink:0}.dot[data-state=ready]{--dot-c: var(--ok)}.dot[data-state=degraded]{--dot-c: var(--warn)}.dot[data-state=offline]{--dot-c: var(--error)}.dot[data-state=ready],.dot[data-state=degraded],.dot[data-state=offline]{box-shadow:0 0 0 3px color-mix(in srgb,var(--dot-c) 22%,transparent)}.dot[data-state=booting]{background:var(--info);animation:fg-dot-pulse 1.2s infinite}@keyframes fg-dot-pulse{50%{opacity:.4}}.content{flex:1;min-height:0;overflow-y:auto;padding:var(--space-6);overscroll-behavior:contain}.offline-banner{display:flex;align-items:center;justify-content:space-between;gap:var(--space-3);padding:var(--space-3) var(--space-4);margin-bottom:var(--space-4);border:1px solid color-mix(in srgb,var(--error) 55%,transparent);border-left-width:3px;border-radius:var(--radius-lg);background:var(--error-bg)}.offline-banner p{margin:0}@media(prefers-reduced-motion:reduce){.dot[data-state=booting]{animation:none}.nav__item,.nav__collapse,.icon-btn{transition:none}}@media(max-width:760px){.shell__side{--sidebar-w: 66px}.brand__text,.nav__label,.nav__section,.nav__item:before,.nav__collapse{display:none}.nav__item{justify-content:center;padding-inline:0}}:root{--z-overlay: 90;--z-dialog: 100;--z-toast: 120;--skeleton: color-mix(in srgb, var(--fg-text) 10%, transparent)}
@@ -0,0 +1,10 @@
1
+ """Platform product: catalog, golden paths, maturity model, scorecards,
2
+ Backstage adapter (projection — never the canonical source), Crossplane."""
3
+
4
+ from platformforge.product.backstage import to_backstage
5
+ from platformforge.product.catalog import analyze_catalog
6
+ from platformforge.product.crossplane import analyze_crossplane
7
+ from platformforge.product.maturity import maturity, maturity_report
8
+
9
+ __all__ = ["analyze_catalog", "analyze_crossplane", "maturity",
10
+ "maturity_report", "to_backstage"]
@@ -0,0 +1,49 @@
1
+ """Backstage adapter — project the platform graph into Backstage catalog
2
+ entities. PROJECTION ONLY: Backstage is never the canonical source."""
3
+
4
+ from __future__ import annotations
5
+
6
+ from typing import Any
7
+
8
+ from platformforge.graph.model import Graph
9
+
10
+
11
+ def to_backstage(graph: Graph) -> dict[str, Any]:
12
+ """Graph → Backstage entity docs (Component/API/Resource/Group/Domain)."""
13
+ kind_map = {"component": "Component", "service": "Component",
14
+ "workload": "Component", "api": "API", "team": "Group",
15
+ "owner": "User", "database": "Resource", "queue": "Resource",
16
+ "bucket": "Resource", "cluster": "Resource",
17
+ "domain": "Domain"}
18
+ entities = []
19
+ for n in sorted(graph.nodes.values(), key=lambda n: n.node_id):
20
+ bk = kind_map.get(n.kind)
21
+ if not bk:
22
+ continue
23
+ name = n.label.split("/")[-1].replace("_", "-").lower()
24
+ meta: dict[str, Any] = {"name": name,
25
+ "annotations": {"platformforge/node_id":
26
+ n.node_id}}
27
+ if "/" in n.label:
28
+ meta["namespace"] = n.label.split("/")[0]
29
+ spec: dict[str, Any] = {}
30
+ owners = [e.src for e in graph.edges.values()
31
+ if e.dst == n.node_id and e.kind == "owns"]
32
+ if owners:
33
+ spec["owner"] = owners[0].split("/")[-1]
34
+ deps = [e.dst for e in graph.edges.values()
35
+ if e.src == n.node_id and e.kind == "depends_on"]
36
+ if deps:
37
+ spec["dependsOn"] = sorted(deps)
38
+ provides = [e.dst.split("/")[-1] for e in graph.edges.values()
39
+ if e.src == n.node_id and e.kind == "exposes"
40
+ and e.dst.startswith("api/")]
41
+ if provides:
42
+ spec["providesApis"] = sorted(provides)
43
+ entities.append({"apiVersion": "backstage.io/v1alpha1",
44
+ "kind": bk, "metadata": meta,
45
+ "spec": {**spec, "type": n.attrs.get("type",
46
+ "service")}})
47
+ return {"entities": entities, "counts": {"entities": len(entities)},
48
+ "note": "projection — canonical truth stays in the platform "
49
+ "graph; do not hand-edit and expect parity"}
@@ -0,0 +1,74 @@
1
+ """Platform catalog — catalog-info.yaml / Component / API / Resource /
2
+ System / Domain entities → facts + ownership/dependency edges."""
3
+
4
+ from __future__ import annotations
5
+
6
+ from pathlib import Path
7
+ from typing import Any
8
+
9
+ import yaml
10
+
11
+ from platformforge.models.base import stable_id
12
+
13
+ _KIND_MAP = {"Component": "component", "API": "api", "Resource": "service",
14
+ "System": "component", "Domain": "component",
15
+ "Group": "team", "User": "owner", "Location": "repository"}
16
+
17
+
18
+ def analyze_catalog(path: str | Path) -> dict[str, Any]:
19
+ root = Path(path)
20
+ files = (sorted(root.rglob("catalog-info.y*ml")) +
21
+ [p for p in sorted(root.rglob("*.yaml"))
22
+ if "catalog" in p.name]) if root.is_dir() else [root]
23
+ facts: list[dict[str, Any]] = []
24
+ for f in sorted(set(files)):
25
+ try:
26
+ docs = [d for d in yaml.safe_load_all(f.read_text())
27
+ if isinstance(d, dict) and "backstage.io" in
28
+ str(d.get("apiVersion", ""))]
29
+ except yaml.YAMLError:
30
+ continue
31
+ for doc in docs:
32
+ kind = doc.get("kind", "Component")
33
+ meta = doc.get("metadata") or {}
34
+ spec = doc.get("spec") or {}
35
+ name, ns = meta.get("name", "?"), meta.get("namespace", "default")
36
+ nk = _KIND_MAP.get(kind, "component")
37
+ label = f"{ns}/{name}"
38
+ edges = []
39
+ owner = spec.get("owner")
40
+ if owner:
41
+ edges.append({"src_kind": "team", "src": str(owner),
42
+ "dst_kind": nk, "dst": label,
43
+ "kind": "owns"})
44
+ for dep in spec.get("dependsOn") or []:
45
+ t = str(dep).split(":")[-1]
46
+ edges.append({"src_kind": nk, "src": label,
47
+ "dst_kind": "component", "dst": t,
48
+ "kind": "depends_on"})
49
+ if spec.get("system"):
50
+ edges.append({"src_kind": nk, "src": label,
51
+ "dst_kind": "component",
52
+ "dst": str(spec["system"]),
53
+ "kind": "contained_by"})
54
+ for api in spec.get("providesApis") or []:
55
+ edges.append({"src_kind": nk, "src": label,
56
+ "dst_kind": "api", "dst": str(api),
57
+ "kind": "exposes"})
58
+ for api in spec.get("consumesApis") or []:
59
+ edges.append({"src_kind": nk, "src": label,
60
+ "dst_kind": "api", "dst": str(api),
61
+ "kind": "consumes"})
62
+ attrs = {"entity_kind": kind, "name": name, "namespace": ns,
63
+ "type": spec.get("type"), "lifecycle": spec.get("lifecycle"),
64
+ "owner": owner, "system": spec.get("system"),
65
+ "annotations": meta.get("annotations") or {},
66
+ "tags": meta.get("tags") or [],
67
+ "graph": {"nodes": [{"kind": nk, "label": label,
68
+ "attrs": {"type": spec.get("type")}}],
69
+ "edges": edges}}
70
+ facts.append({"fact_id": stable_id("PF-CAT", kind, f"{ns}/{name}"),
71
+ "kind": "catalog.entity", "source": str(f),
72
+ "location": f"{ns}/{name}", "tier": 3,
73
+ "attrs": attrs})
74
+ return {"facts": facts, "counts": {"entities": len(facts)}}
@@ -0,0 +1,341 @@
1
+ """Crossplane — explicit object classifier (cycle 2.1 §51–59).
2
+
3
+ No naive wildcard: an apiGroup ending in ``upbound.io``/``crossplane.io`` is a
4
+ *signal*, not a verdict. Managed resources additionally require structural
5
+ evidence (``spec.forProvider``, ``status.atProvider``, ``providerConfigRef``,
6
+ management/deletion policy fields). Objects outside known families are never
7
+ classified — ``foo.example.com/v1`` stays invisible, by design (§58).
8
+ """
9
+
10
+ from __future__ import annotations
11
+
12
+ from pathlib import Path
13
+ from typing import Any
14
+
15
+ import yaml
16
+
17
+ from platformforge.models.base import stable_id
18
+
19
+ # Core Crossplane API families → kind → fact kind.
20
+ _CORE_KINDS: dict[str, dict[str, str]] = {
21
+ "apiextensions.crossplane.io": {
22
+ "CompositeResourceDefinition": "platform.xrd",
23
+ "Composition": "platform.composition",
24
+ "CompositionRevision": "platform.composition_revision",
25
+ "EnvironmentConfig": "platform.crossplane_envconfig",
26
+ },
27
+ "pkg.crossplane.io": {
28
+ "Provider": "platform.crossplane_provider",
29
+ "ProviderRevision": "platform.crossplane_provider_revision",
30
+ "Configuration": "platform.crossplane_configuration",
31
+ "ConfigurationRevision": "platform.crossplane_configuration_revision",
32
+ "Function": "platform.crossplane_function",
33
+ "DeploymentRuntimeConfig": "platform.crossplane_runtime_config",
34
+ "ImageConfig": "platform.crossplane_image_config",
35
+ "Lock": "platform.crossplane_lock",
36
+ },
37
+ "ops.crossplane.io": {
38
+ "Operation": "platform.crossplane_operation",
39
+ "CronOperation": "platform.crossplane_operation",
40
+ },
41
+ "secrets.crossplane.io": {
42
+ "StoreConfig": "platform.crossplane_storeconfig",
43
+ },
44
+ }
45
+
46
+ # Provider-shaped group suffixes (dotted — `notupbound.io` must NOT match).
47
+ # Membership here is necessary but not sufficient for ManagedResource —
48
+ # structural evidence is still required.
49
+ _PROVIDER_GROUP_SUFFIXES = (".upbound.io", ".crossplane.io")
50
+ _PROVIDER_GROUPS_EXACT = ("upbound.io", "crossplane.io")
51
+
52
+ # Strong MR shape — one is sufficient. Weak fields (writeConnectionSecretToRef
53
+ # etc.) also appear on claims and Upbound Spaces objects, so they never
54
+ # classify alone (§53/§58).
55
+ _MR_STRONG_FIELDS = ("forProvider", "providerConfigRef", "managementPolicies")
56
+ _MR_WEAK_FIELDS = ("writeConnectionSecretToRef", "publishConnectionDetailsTo")
57
+
58
+
59
+ def _group(api_version: str) -> str:
60
+ return api_version.rsplit("/", 1)[0] if "/" in api_version else ""
61
+
62
+
63
+ def _provider_family(group: str) -> str:
64
+ """aws.s3.upbound.io → aws; database.aws.crossplane.io → aws (legacy)."""
65
+ for seg in group.split("."):
66
+ if seg in ("aws", "azure", "azuread", "gcp", "google", "alibaba",
67
+ "digitalocean", "ibm", "oci", "openstack", "vault",
68
+ "kubernetes", "helm", "terraform", "netlify", "github",
69
+ "gitlab", "datadog", "grafana", "mongodb", "kafka"):
70
+ return seg
71
+ return "unknown"
72
+
73
+
74
+ def _mr_evidence(spec: dict[str, Any], status: dict[str, Any]) -> list[str]:
75
+ """Strong evidence only — weak fields never unlock classification."""
76
+ ev = [f"spec.{k}" for k in _MR_STRONG_FIELDS if k in spec]
77
+ if status.get("atProvider"): # non-empty dict — '{}' proves nothing
78
+ ev.append("status.atProvider")
79
+ return ev
80
+
81
+
82
+ def _version_signals(kind: str, api: str, spec: dict[str, Any]) -> list[str]:
83
+ """Per-object v1/v2 cues — inferred, never a global claim (§55)."""
84
+ sig: list[str] = []
85
+ ver = api.rsplit("/", 1)[-1]
86
+ if kind == "CompositeResourceDefinition":
87
+ scope = str(spec.get("scope", "")).lower()
88
+ if scope == "namespaced":
89
+ sig.append("v2:namespaced-xr")
90
+ elif scope == "cluster":
91
+ sig.append("v1:cluster-xr")
92
+ if spec.get("claimNames"):
93
+ sig.append("v1:claim-names")
94
+ if spec.get("connectionSecretKeys"):
95
+ sig.append("v1:connection-secret-keys")
96
+ if any(s.startswith("v1:") for s in sig) and \
97
+ any(s.startswith("v2:") for s in sig):
98
+ sig.append("conflict:v1+v2-signals")
99
+ elif kind == "Composition":
100
+ mode = str(spec.get("mode", "")).lower()
101
+ if mode == "pipeline" or spec.get("pipeline"):
102
+ sig.append("pipeline-mode")
103
+ elif spec.get("resources"):
104
+ sig.append("resources-mode")
105
+ elif ver.startswith("v2"):
106
+ sig.append(f"api:{ver}")
107
+ return sig
108
+
109
+
110
+ def _provider_group(group: str) -> bool:
111
+ return group in _PROVIDER_GROUPS_EXACT or any(
112
+ group.endswith(s) for s in _PROVIDER_GROUP_SUFFIXES)
113
+
114
+
115
+ def classify_object(doc: dict[str, Any]) -> tuple[str, dict[str, Any]] | None:
116
+ """Classify one manifest → (fact_kind, attrs) or None.
117
+
118
+ Returns None for anything that is not structurally a Crossplane object.
119
+ """
120
+ kind = doc.get("kind")
121
+ if not kind:
122
+ return None
123
+ api = str(doc.get("apiVersion", ""))
124
+ group = _group(api)
125
+ meta = doc.get("metadata") or {}
126
+ spec = doc.get("spec") or {}
127
+ status = doc.get("status") or {}
128
+ name = meta.get("name", "?")
129
+
130
+ # 1. Core families — exact (group, kind) membership.
131
+ if group in _CORE_KINDS and kind in _CORE_KINDS[group]:
132
+ fk = _CORE_KINDS[group][kind]
133
+ attrs: dict[str, Any] = {"api": api, "name": name,
134
+ "version_signals":
135
+ _version_signals(kind, api, spec)}
136
+ if fk == "platform.xrd":
137
+ attrs.update({
138
+ "xrd": name, "group": spec.get("group"),
139
+ "xr_kind": next((v.get("kind") for v in
140
+ spec.get("versions") or [] if v.get("kind")),
141
+ (spec.get("names") or {}).get("kind")),
142
+ "scope": spec.get("scope", "Cluster"),
143
+ "kind_claim": (spec.get("claimNames") or {}).get("kind"),
144
+ "versions": [v.get("name")
145
+ for v in spec.get("versions") or []],
146
+ "connection_secret_keys":
147
+ spec.get("connectionSecretKeys") or [],
148
+ })
149
+ elif fk == "platform.composition":
150
+ attrs.update({
151
+ "composition": name,
152
+ "composite_type": (spec.get("compositeTypeRef") or {})
153
+ .get("kind"),
154
+ "composite_type_api": (spec.get("compositeTypeRef") or {})
155
+ .get("apiVersion"),
156
+ "resources": len(spec.get("resources") or []),
157
+ "pipeline_mode": bool(spec.get("pipeline"))
158
+ or spec.get("mode") == "Pipeline",
159
+ "functions": [(p.get("functionRef") or {}).get("name")
160
+ for p in spec.get("pipeline") or []
161
+ if p.get("functionRef")],
162
+ })
163
+ elif fk == "platform.composition_revision":
164
+ attrs.update({"composition_revision": name,
165
+ "revision": meta.get("labels", {}).get(
166
+ "crossplane.io/composition-revision")})
167
+ elif fk in ("platform.crossplane_provider",
168
+ "platform.crossplane_provider_revision",
169
+ "platform.crossplane_function",
170
+ "platform.crossplane_configuration"):
171
+ attrs.update({"package": spec.get("package"),
172
+ "revision_activation_policy":
173
+ spec.get("revisionActivationPolicy")})
174
+ elif fk == "platform.crossplane_operation":
175
+ attrs.update({"operation": name,
176
+ "mode": spec.get("mode"),
177
+ "schedule": (spec.get("schedule") or {})
178
+ .get("cron")})
179
+ return fk, attrs
180
+
181
+ # 2. ProviderConfig lives in provider family groups (v2 moved it out of
182
+ # pkg.crossplane.io) — group membership AND a credentials shape; the
183
+ # bare kind name on an arbitrary group proves nothing.
184
+ if kind in ("ProviderConfig", "ClusterProviderConfig") \
185
+ and _provider_group(group):
186
+ creds = spec.get("credentials") or {}
187
+ if creds.get("source") or spec.get("secretRef") \
188
+ or any(k in spec for k in ("projectID", "clientID",
189
+ "tenantID", "subscriptionID")):
190
+ return "platform.provider_config", {
191
+ "api": api, "name": name, "provider_family":
192
+ _provider_family(group),
193
+ "credentials_source": creds.get("source")}
194
+ return None
195
+
196
+ # 3. ManagedResource — provider group suffix AND structural evidence.
197
+ if _provider_group(group):
198
+ ev = _mr_evidence(spec, status)
199
+ if ev:
200
+ return "platform.managed_resource", {
201
+ "managed_kind": kind, "name": name, "api": api,
202
+ "provider_group": group,
203
+ "provider_family": _provider_family(group),
204
+ "mr_evidence": ev,
205
+ "for_provider_keys": sorted(
206
+ (spec.get("forProvider") or {}).keys())[:20],
207
+ "deletion_policy": spec.get("deletionPolicy", "Delete"),
208
+ "management_policies": spec.get("managementPolicies") or [],
209
+ "provider_config_ref": (spec.get("providerConfigRef") or {})
210
+ .get("name"),
211
+ "version_signals": _version_signals(kind, api, spec)}
212
+ return None # §53 — suffix alone is not classification
213
+
214
+ # 4. XR / Claim candidates — referenced by an XRD in the same tree, or
215
+ # carry composition plumbing. Handled by the caller (needs XRD table).
216
+ return None
217
+
218
+
219
+ def _xr_candidate(doc: dict[str, Any],
220
+ xrd_kinds: dict[tuple[str, str], dict[str, Any]]
221
+ ) -> tuple[str, dict[str, Any]] | None:
222
+ """XR/claim classification — needs the XRD table or composition refs."""
223
+ kind = doc.get("kind")
224
+ api = str(doc.get("apiVersion", ""))
225
+ group = _group(api)
226
+ spec = doc.get("spec") or {}
227
+ meta = doc.get("metadata") or {}
228
+ name = meta.get("name", "?")
229
+ if not kind or group in _CORE_KINDS or _provider_group(group):
230
+ return None
231
+ key = (group, kind)
232
+ comp_ref = (spec.get("compositionRef") or {}).get("name")
233
+ if key in xrd_kinds:
234
+ xr = xrd_kinds[key]
235
+ role = "xr_claim" if xr.get("kind_claim") == kind else "xr"
236
+ return f"platform.{role}", {
237
+ "xr_kind": kind, "api": api, "name": name,
238
+ "xrd": xr["xrd"], "composition_ref": comp_ref,
239
+ "classification": "declared-xrd",
240
+ "version_signals": _version_signals(kind, api, spec)}
241
+ # Inferred path: spec.compositionRef is nearly Crossplane-exclusive;
242
+ # status.resourceRefs is the real XR shape (composer-populated).
243
+ # spec.resourceRefs alone is generic CRD plumbing — not enough.
244
+ status = doc.get("status") or {}
245
+ status_refs = status.get("resourceRefs") or []
246
+ if comp_ref or status_refs:
247
+ return "platform.xr", {
248
+ "xr_kind": kind, "api": api, "name": name,
249
+ "composition_ref": comp_ref,
250
+ "classification": "inferred-composition-ref",
251
+ "version_signals": _version_signals(kind, api, spec)}
252
+ return None
253
+
254
+
255
+ def analyze_crossplane(path: str | Path) -> dict[str, Any]:
256
+ root = Path(path)
257
+ files = (sorted(root.rglob("*.yaml")) + sorted(root.rglob("*.yml"))) \
258
+ if root.is_dir() else [root]
259
+ docs: list[tuple[Path, dict[str, Any]]] = []
260
+ for f in files:
261
+ try:
262
+ for doc in yaml.safe_load_all(f.read_text()):
263
+ if isinstance(doc, dict) and doc.get("kind"):
264
+ docs.append((f, doc))
265
+ except yaml.YAMLError:
266
+ continue
267
+
268
+ # Pass 1 — classify and collect the XRD table for pass 2.
269
+ classified: list[tuple[Path, dict[str, Any], str, dict[str, Any]]] = []
270
+ xrd_kinds: dict[tuple[str, str], dict[str, Any]] = {}
271
+ deferred: list[tuple[Path, dict[str, Any]]] = []
272
+ for f, doc in docs:
273
+ out = classify_object(doc)
274
+ if out is None:
275
+ deferred.append((f, doc))
276
+ continue
277
+ fk, attrs = out
278
+ classified.append((f, doc, fk, attrs))
279
+ if fk == "platform.xrd" and attrs.get("group"):
280
+ if attrs.get("xr_kind"):
281
+ xrd_kinds[(attrs["group"], attrs["xr_kind"])] = attrs
282
+ if attrs.get("kind_claim"):
283
+ xrd_kinds[(attrs["group"], attrs["kind_claim"])] = attrs
284
+
285
+ # Pass 2 — XR/claim candidates against the XRD table.
286
+ for f, doc in deferred:
287
+ out = _xr_candidate(doc, xrd_kinds)
288
+ if out:
289
+ fk, attrs = out
290
+ classified.append((f, doc, fk, attrs))
291
+
292
+ facts: list[dict[str, Any]] = []
293
+ for f, doc, fk, attrs in classified:
294
+ meta = doc.get("metadata") or {}
295
+ name = meta.get("name", "?")
296
+ loc = f"{f}::{name}"
297
+ node_kind = {
298
+ "platform.xrd": "crossplane_xrd",
299
+ "platform.xr": "crossplane_xr",
300
+ "platform.xr_claim": "crossplane_xr",
301
+ "platform.composition": "crossplane_composition",
302
+ "platform.managed_resource": "crossplane_managed_resource",
303
+ "platform.crossplane_provider": "crossplane_provider",
304
+ "platform.provider_config": "crossplane_provider",
305
+ }.get(fk, "crossplane_xr")
306
+ edges: list[dict[str, Any]] = []
307
+ # XR → Composition → XRD and MR → ProviderConfig edges (§59).
308
+ if fk in ("platform.xr", "platform.xr_claim") and attrs.get(
309
+ "composition_ref"):
310
+ edges.append({"src_kind": "crossplane_xr", "src": name,
311
+ "dst_kind": "crossplane_composition",
312
+ "dst": attrs["composition_ref"],
313
+ "kind": "provisioned_by",
314
+ "provenance": "declared"})
315
+ elif fk == "platform.composition" and attrs.get("composite_type"):
316
+ # Resolve compositeTypeRef (group+kind) to the XRD's metadata
317
+ # name when the XRD is in the same tree; else keep the kind.
318
+ ref_group = _group(attrs.get("composite_type_api") or "")
319
+ xrd = xrd_kinds.get((ref_group, attrs["composite_type"]), {})
320
+ xrd_label = xrd.get("xrd") or attrs["composite_type"]
321
+ edges.append({"src_kind": "crossplane_composition",
322
+ "src": name,
323
+ "dst_kind": "crossplane_xrd",
324
+ "dst": xrd_label,
325
+ "kind": "provisioned_by",
326
+ "provenance": "declared" if xrd else "inferred",
327
+ "confidence": 1.0 if xrd else 0.5})
328
+ elif fk == "platform.managed_resource" and attrs.get(
329
+ "provider_config_ref"):
330
+ edges.append({"src_kind": "crossplane_managed_resource",
331
+ "src": name,
332
+ "dst_kind": "crossplane_provider",
333
+ "dst": attrs["provider_config_ref"],
334
+ "kind": "provisioned_by",
335
+ "provenance": "declared"})
336
+ attrs["graph"] = {"nodes": [{"kind": node_kind, "label": name}],
337
+ "edges": edges}
338
+ facts.append({"fact_id": stable_id("PF-XR", fk, loc),
339
+ "kind": fk, "source": str(f), "location": loc,
340
+ "tier": 3, "attrs": attrs})
341
+ return {"facts": facts, "counts": {"facts": len(facts)}}
@@ -0,0 +1,5 @@
1
+ from platformforge.product.golden_paths.engine import analyze_paths, capabilities, describe, load_library
2
+ from platformforge.product.golden_paths.model import GoldenPath
3
+
4
+ __all__ = ["GoldenPath", "analyze_paths", "capabilities", "describe",
5
+ "load_library"]
@@ -0,0 +1,97 @@
1
+ """§73/§78/§79 Golden Path engine — load the library, expose the
2
+ self-service capability surface, and analyze an *existing* estate for
3
+ path gaps (manual steps, missing automation/ownership/observability/
4
+ cost allocation).
5
+
6
+ The engine is offline and read-only: `capabilities()` describes what
7
+ could be requested; nothing is provisioned.
8
+ """
9
+
10
+ from __future__ import annotations
11
+
12
+ from pathlib import Path
13
+ from typing import Any
14
+
15
+ import yaml
16
+
17
+ from platformforge.product.golden_paths.model import GoldenPath
18
+
19
+ LIBRARY = Path(__file__).with_name("library.yaml")
20
+
21
+
22
+ def load_library(path: str | Path | None = None) -> dict[str, Any]:
23
+ doc = yaml.safe_load(Path(path or LIBRARY).read_text()) or {}
24
+ paths, invalid = [], []
25
+ for p in doc.get("paths") or []:
26
+ try:
27
+ paths.append(GoldenPath.from_dict(p))
28
+ except (ValueError, TypeError) as exc:
29
+ invalid.append(str(exc))
30
+ return {"paths": paths, "invalid": invalid,
31
+ "schema": doc.get("schema", "")}
32
+
33
+
34
+ def describe(path_id: str,
35
+ library_path: str | Path | None = None) -> dict[str, Any]:
36
+ lib = load_library(library_path)
37
+ for p in lib["paths"]:
38
+ if p.id == path_id:
39
+ return {"path": p.id, "name": p.name, "version": p.version,
40
+ "use_case": p.use_case, "inputs": p.inputs,
41
+ "outputs": p.outputs, "steps": p.steps,
42
+ "policies": p.policies, "ownership": p.ownership,
43
+ "observability": p.observability,
44
+ "security": p.security, "cost": p.cost,
45
+ "slo": p.slo, "escape_hatches": p.escape_hatches,
46
+ "supported_variants": p.supported_variants}
47
+ return {"refusal": "PF-PATH-UNKNOWN",
48
+ "unlock": "platformforge product paths",
49
+ "requested": path_id}
50
+
51
+
52
+ def capabilities(library_path: str | Path | None = None) -> dict[str, Any]:
53
+ """§79 — machine-readable self-service surface for agents/humans."""
54
+ lib = load_library(library_path)
55
+ return {"capabilities": [p.capability() for p in lib["paths"]],
56
+ "invalid": lib["invalid"], "mutates": False,
57
+ "approval_required": True}
58
+
59
+
60
+ def analyze_paths(facts: list[dict[str, Any]]) -> dict[str, Any]:
61
+ """§78 — find platform gaps in existing artifacts, per §78's list:
62
+ manual steps, duplicate workflows, missing automation/ownership/
63
+ observability/cost allocation. Evidence-linked, never inferred."""
64
+ gaps: list[dict[str, Any]] = []
65
+ seen_workflows: dict[str, list[str]] = {}
66
+ for f in facts:
67
+ kind, a = f.get("kind", ""), f.get("attrs") or {}
68
+ fid = f.get("fact_id", "")
69
+ if kind == "k8s.workload":
70
+ if not (a.get("labels") or {}).get("team") and \
71
+ not (a.get("labels") or {}).get("owner"):
72
+ gaps.append({"gap": "missing_ownership", "fact_id": fid,
73
+ "location": f.get("location"),
74
+ "detail": "no team/owner label on workload"})
75
+ if (a.get("pod_spec") or {}).get("no_requests", 0) > 0:
76
+ pass # covered by PF-K8S rules; path gaps stay structural
77
+ elif kind == "gitops.argocd_app":
78
+ if not a.get("automated_sync"):
79
+ gaps.append({"gap": "missing_automation", "fact_id": fid,
80
+ "location": f.get("location"),
81
+ "detail": "argocd app syncs manually"})
82
+ elif kind in ("gha.workflow", "cicd.pipeline"):
83
+ key = (a.get("name") or a.get("pipeline_name") or "").lower()
84
+ if key:
85
+ seen_workflows.setdefault(key, []).append(fid)
86
+ elif kind == "k8s.service" and \
87
+ (a.get("svc_type") == "LoadBalancer"):
88
+ pass
89
+ for key, ids in seen_workflows.items():
90
+ if len(ids) > 1:
91
+ gaps.append({"gap": "duplicate_workflow",
92
+ "fact_id": ids[0], "detail":
93
+ f"workflow '{key}' declared {len(ids)} times",
94
+ "fact_ids": ids})
95
+ return {"gaps": gaps, "count": len(gaps),
96
+ "note": "gaps are findings about *platform paths*, not rule "
97
+ "violations — same location may appear in both"}