platformforge 0.1.0__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- platformforge/__init__.py +7 -0
- platformforge/__main__.py +5 -0
- platformforge/_forge_portal.py +913 -0
- platformforge/_graphstudio.py +376 -0
- platformforge/_graphview.py +181 -0
- platformforge/_installkit.py +1706 -0
- platformforge/agents/__init__.py +156 -0
- platformforge/agents/bench.py +61 -0
- platformforge/agents/contextpack.py +137 -0
- platformforge/agents/contracts.py +394 -0
- platformforge/agents/coordinators.py +98 -0
- platformforge/agents/critic.py +113 -0
- platformforge/agents/debate.py +161 -0
- platformforge/agents/executors.py +160 -0
- platformforge/agents/guardian.py +48 -0
- platformforge/agents/mirrors.py +240 -0
- platformforge/agents/orchestrator.py +295 -0
- platformforge/agents/planner.py +116 -0
- platformforge/agents/playbook.py +51 -0
- platformforge/agents/referee.py +132 -0
- platformforge/agents/reviewers.py +113 -0
- platformforge/agents/roster.py +893 -0
- platformforge/agents/runledger.py +85 -0
- platformforge/agents/runstore.py +74 -0
- platformforge/agents/specialists.py +73 -0
- platformforge/agents/taskspec.py +94 -0
- platformforge/agents/uniqueness.py +115 -0
- platformforge/agents/verifier.py +106 -0
- platformforge/aiplat/__init__.py +4 -0
- platformforge/aiplat/models.py +175 -0
- platformforge/analytics/__init__.py +6 -0
- platformforge/analytics/capacity.py +109 -0
- platformforge/analytics/debt.py +92 -0
- platformforge/analytics/dx.py +69 -0
- platformforge/analytics/finops_v4.py +171 -0
- platformforge/analytics/goldenpath.py +131 -0
- platformforge/analytics/history.py +233 -0
- platformforge/analytics/measurement.py +149 -0
- platformforge/analytics/models.py +127 -0
- platformforge/analytics/opsanalytics.py +119 -0
- platformforge/analytics/policyintel.py +139 -0
- platformforge/analytics/reliability.py +106 -0
- platformforge/analytics/soak.py +135 -0
- platformforge/analytics/store.py +254 -0
- platformforge/bench.py +174 -0
- platformforge/cases/__init__.py +13 -0
- platformforge/cases/casefile.py +106 -0
- platformforge/cases/context_audit.py +134 -0
- platformforge/cases/ledgers.py +174 -0
- platformforge/cases/replay.py +142 -0
- platformforge/cases/routing_audit.py +162 -0
- platformforge/caveman/__init__.py +11 -0
- platformforge/caveman/compress.py +156 -0
- platformforge/cicd/__init__.py +16 -0
- platformforge/cicd/backstage.py +51 -0
- platformforge/cicd/dockerfile.py +64 -0
- platformforge/cicd/github_actions.py +122 -0
- platformforge/cicd/gitlab_ci.py +56 -0
- platformforge/cicd/gitops.py +130 -0
- platformforge/cli/__init__.py +0 -0
- platformforge/cli/fleetcmd.py +457 -0
- platformforge/cli/main.py +3832 -0
- platformforge/cloud/__init__.py +8 -0
- platformforge/cloud/aws.py +254 -0
- platformforge/cloud/common.py +69 -0
- platformforge/cloud/multicloud.py +143 -0
- platformforge/collect/__init__.py +11 -0
- platformforge/collect/detect.py +254 -0
- platformforge/context/__init__.py +10 -0
- platformforge/context/capsule.py +60 -0
- platformforge/context/gateway.py +227 -0
- platformforge/context/refs.py +49 -0
- platformforge/context/sufficiency.py +50 -0
- platformforge/core/__init__.py +1 -0
- platformforge/core/hashing.py +39 -0
- platformforge/core/ownership.py +220 -0
- platformforge/core/receipts.py +74 -0
- platformforge/core/redaction.py +97 -0
- platformforge/core/store.py +119 -0
- platformforge/core/workspace.py +89 -0
- platformforge/data/contracts/agent-handoff.schema.json +26 -0
- platformforge/data/contracts/agent-run.schema.json +27 -0
- platformforge/data/contracts/agent-spec.schema.json +43 -0
- platformforge/data/contracts/capability.schema.json +23 -0
- platformforge/data/contracts/change-event.schema.json +22 -0
- platformforge/data/contracts/change-intent.schema.json +62 -0
- platformforge/data/contracts/change-plan.schema.json +43 -0
- platformforge/data/contracts/collector-receipt.schema.json +36 -0
- platformforge/data/contracts/context-pack.schema.json +29 -0
- platformforge/data/contracts/debate.schema.json +31 -0
- platformforge/data/contracts/distribution-manifest-v1.schema.json +81 -0
- platformforge/data/contracts/drift-event.schema.json +21 -0
- platformforge/data/contracts/fact.schema.json +35 -0
- platformforge/data/contracts/finding.schema.json +20 -0
- platformforge/data/contracts/graph-v2.schema.json +67 -0
- platformforge/data/contracts/graph.schema.json +40 -0
- platformforge/data/contracts/install-receipt-v1.schema.json +49 -0
- platformforge/data/contracts/observation.schema.json +93 -0
- platformforge/data/contracts/receipt.schema.json +21 -0
- platformforge/data/contracts/recommendation.schema.json +32 -0
- platformforge/data/contracts/refusal.schema.json +16 -0
- platformforge/data/contracts/slo-contract.schema.json +25 -0
- platformforge/data/contracts/task-spec.schema.json +37 -0
- platformforge/data/contracts/workspace-manifest-v1.schema.json +62 -0
- platformforge/data/evals/cases/agent-budget-exhaustion/case.yaml +6 -0
- platformforge/data/evals/cases/agent-conflicting-specialists/case.yaml +11 -0
- platformforge/data/evals/cases/agent-fleet-optimization/case.yaml +13 -0
- platformforge/data/evals/cases/agent-host-no-subagents/case.yaml +6 -0
- platformforge/data/evals/cases/agent-incident-multi/case.yaml +13 -0
- platformforge/data/evals/cases/agent-missing-evidence/case.yaml +6 -0
- platformforge/data/evals/cases/agent-multi-domain-audit/case.yaml +14 -0
- platformforge/data/evals/cases/agent-production-change/case.yaml +15 -0
- platformforge/data/evals/cases/agent-security-mandatory/case.yaml +12 -0
- platformforge/data/evals/cases/agent-simple-iac/case.yaml +14 -0
- platformforge/data/evals/cases/approval-integrity-seal/case.yaml +6 -0
- platformforge/data/evals/cases/capacity-hot/case.yaml +7 -0
- platformforge/data/evals/cases/capacity-hot/fixture/capacity.json +5 -0
- platformforge/data/evals/cases/catalog-noowner/case.yaml +7 -0
- platformforge/data/evals/cases/catalog-noowner/fixture/catalog-info.yaml +6 -0
- platformforge/data/evals/cases/contract-fact/case.yaml +5 -0
- platformforge/data/evals/cases/contract-fact/fixture/doc.json +2 -0
- platformforge/data/evals/cases/cosign-unverified/case.yaml +8 -0
- platformforge/data/evals/cases/cosign-unverified/fixture/sig.json +33 -0
- platformforge/data/evals/cases/expected-delta-refusal/case.yaml +6 -0
- platformforge/data/evals/cases/finops-noattr/case.yaml +9 -0
- platformforge/data/evals/cases/finops-noattr/fixture/costs.json +7 -0
- platformforge/data/evals/cases/fleet-inv-absent-allocation-unknown/case.yaml +7 -0
- platformforge/data/evals/cases/fleet-inv-centrality-not-criticality/case.yaml +7 -0
- platformforge/data/evals/cases/fleet-inv-correlation-not-causality/case.yaml +7 -0
- platformforge/data/evals/cases/fleet-inv-dx-no-person-metrics/case.yaml +7 -0
- platformforge/data/evals/cases/fleet-inv-federation-restricted-denied/case.yaml +7 -0
- platformforge/data/evals/cases/fleet-inv-federation-secret-denied/case.yaml +7 -0
- platformforge/data/evals/cases/fleet-inv-history-window-deterministic/case.yaml +7 -0
- platformforge/data/evals/cases/fleet-inv-low-util-not-deletable/case.yaml +7 -0
- platformforge/data/evals/cases/fleet-inv-member-key-deterministic/case.yaml +7 -0
- platformforge/data/evals/cases/fleet-inv-missing-denominator/case.yaml +7 -0
- platformforge/data/evals/cases/fleet-inv-partial-coverage-visible/case.yaml +7 -0
- platformforge/data/evals/cases/fleet-inv-plan-changeintent-only/case.yaml +7 -0
- platformforge/data/evals/cases/fleet-inv-report-all-cited/case.yaml +7 -0
- platformforge/data/evals/cases/fleet-inv-small-sample-confidence/case.yaml +7 -0
- platformforge/data/evals/cases/fleet-inv-uncertain-optimization-suppressed/case.yaml +7 -0
- platformforge/data/evals/cases/gha-dangerous/case.yaml +12 -0
- platformforge/data/evals/cases/gha-dangerous/fixture/.github/workflows/ci.yaml +11 -0
- platformforge/data/evals/cases/gitops-v2/case.yaml +11 -0
- platformforge/data/evals/cases/gitops-v2/fixture/argo.yaml +41 -0
- platformforge/data/evals/cases/graph-k8s-blast/case.yaml +7 -0
- platformforge/data/evals/cases/graph-k8s-blast/fixture/deploy.yaml +15 -0
- platformforge/data/evals/cases/iac-module-nopin/case.yaml +8 -0
- platformforge/data/evals/cases/iac-module-nopin/fixture/main.tf +3 -0
- platformforge/data/evals/cases/iac-plan-replace/case.yaml +8 -0
- platformforge/data/evals/cases/iac-plan-replace/fixture/plan.json +12 -0
- platformforge/data/evals/cases/iac-sg-open/case.yaml +8 -0
- platformforge/data/evals/cases/iac-sg-open/fixture/main.tf +9 -0
- platformforge/data/evals/cases/iam-oidc/case.yaml +8 -0
- platformforge/data/evals/cases/iam-oidc/fixture/policy.json +11 -0
- platformforge/data/evals/cases/iam-wildcard-positive/case.yaml +8 -0
- platformforge/data/evals/cases/iam-wildcard-positive/fixture/policy.json +3 -0
- platformforge/data/evals/cases/k8s-bad-actor/case.yaml +19 -0
- platformforge/data/evals/cases/k8s-bad-actor/fixture/app.yaml +97 -0
- platformforge/data/evals/cases/k8s-beta-api/case.yaml +8 -0
- platformforge/data/evals/cases/k8s-beta-api/fixture/cr.yaml +7 -0
- platformforge/data/evals/cases/k8s-dep-api-boundary/case.yaml +15 -0
- platformforge/data/evals/cases/k8s-dep-api-boundary/fixture/app.yaml +25 -0
- platformforge/data/evals/cases/k8s-dep-api-clean/case.yaml +12 -0
- platformforge/data/evals/cases/k8s-dep-api-clean/fixture/app.yaml +29 -0
- platformforge/data/evals/cases/k8s-dep-api-unknown/case.yaml +11 -0
- platformforge/data/evals/cases/k8s-dep-api-unknown/fixture/app.yaml +25 -0
- platformforge/data/evals/cases/k8s-dep-api-v120/case.yaml +12 -0
- platformforge/data/evals/cases/k8s-dep-api-v120/fixture/app.yaml +25 -0
- platformforge/data/evals/cases/k8s-dep-api-v129/case.yaml +9 -0
- platformforge/data/evals/cases/k8s-dep-api-v129/fixture/app.yaml +25 -0
- platformforge/data/evals/cases/k8s-hpa-noreq/case.yaml +8 -0
- platformforge/data/evals/cases/k8s-hpa-noreq/fixture/app.yaml +28 -0
- platformforge/data/evals/cases/k8s-limits-boundary/case.yaml +10 -0
- platformforge/data/evals/cases/k8s-limits-boundary/fixture/app.yaml +15 -0
- platformforge/data/evals/cases/k8s-limits-negative/case.yaml +8 -0
- platformforge/data/evals/cases/k8s-limits-negative/fixture/deploy.yaml +15 -0
- platformforge/data/evals/cases/k8s-limits-positive/case.yaml +8 -0
- platformforge/data/evals/cases/k8s-limits-positive/fixture/deploy.yaml +14 -0
- platformforge/data/evals/cases/k8s-nopdb/case.yaml +7 -0
- platformforge/data/evals/cases/k8s-nopdb/fixture/app.yaml +34 -0
- platformforge/data/evals/cases/knowledge-registry/case.yaml +10 -0
- platformforge/data/evals/cases/kyverno-dep/case.yaml +10 -0
- platformforge/data/evals/cases/kyverno-dep/fixture/pol.yaml +18 -0
- platformforge/data/evals/cases/kyverno-legacy/case.yaml +8 -0
- platformforge/data/evals/cases/kyverno-legacy/fixture/pol.yaml +7 -0
- platformforge/data/evals/cases/live-aws-collect/case.yaml +11 -0
- platformforge/data/evals/cases/live-aws-collect/fixture/aws/ec2_describe-vpcs.json +15 -0
- platformforge/data/evals/cases/live-aws-collect/fixture/aws/iam_list-users.denied.txt +1 -0
- platformforge/data/evals/cases/live-aws-collect/fixture/aws/sts_get-caller-identity.json +5 -0
- platformforge/data/evals/cases/live-drift/case.yaml +8 -0
- platformforge/data/evals/cases/live-drift/fixture/after.json +22 -0
- platformforge/data/evals/cases/live-drift/fixture/before.json +22 -0
- platformforge/data/evals/cases/live-incident/case.yaml +7 -0
- platformforge/data/evals/cases/live-incident/fixture/changes.json +8 -0
- platformforge/data/evals/cases/live-incident/fixture/incident.json +7 -0
- platformforge/data/evals/cases/live-k8s-collect/case.yaml +10 -0
- platformforge/data/evals/cases/live-k8s-collect/fixture/kubectl/get_configmaps.denied.txt +1 -0
- platformforge/data/evals/cases/live-k8s-collect/fixture/kubectl/get_deployments.apps.json +25 -0
- platformforge/data/evals/cases/live-k8s-collect/fixture/kubectl/get_pods.json +17 -0
- platformforge/data/evals/cases/live-k8s-collect/fixture/kubectl/get_secrets.json +13 -0
- platformforge/data/evals/cases/live-multicluster/case.yaml +7 -0
- platformforge/data/evals/cases/live-multicluster/fixture/clusters.json +6 -0
- platformforge/data/evals/cases/live-plan/case.yaml +7 -0
- platformforge/data/evals/cases/live-plan/fixture/drift.json +8 -0
- platformforge/data/evals/cases/live-reconcile/case.yaml +7 -0
- platformforge/data/evals/cases/live-reconcile/fixture/desired.json +7 -0
- platformforge/data/evals/cases/live-reconcile/fixture/observed.json +18 -0
- platformforge/data/evals/cases/live-secrets-boundary/case.yaml +8 -0
- platformforge/data/evals/cases/live-secrets-boundary/fixture/envelope.json +16 -0
- platformforge/data/evals/cases/live-temporal-graph/case.yaml +10 -0
- platformforge/data/evals/cases/live-temporal-graph/fixture/graph.json +22 -0
- platformforge/data/evals/cases/ops-approval/case.yaml +6 -0
- platformforge/data/evals/cases/ops-convergence/case.yaml +6 -0
- platformforge/data/evals/cases/ops-execution-safety/case.yaml +6 -0
- platformforge/data/evals/cases/ops-intent/case.yaml +6 -0
- platformforge/data/evals/cases/ops-planning/case.yaml +6 -0
- platformforge/data/evals/cases/ops-policy/case.yaml +6 -0
- platformforge/data/evals/cases/ops-rollback/case.yaml +6 -0
- platformforge/data/evals/cases/ops-verification/case.yaml +6 -0
- platformforge/data/evals/cases/rollback-argocd-revision/case.yaml +6 -0
- platformforge/data/evals/cases/rollback-blind-inverse/case.yaml +6 -0
- platformforge/data/evals/cases/rollback-git-commit/case.yaml +6 -0
- platformforge/data/evals/cases/rollback-impossible/case.yaml +6 -0
- platformforge/data/evals/cases/rollback-k8s-annotation-restore/case.yaml +6 -0
- platformforge/data/evals/cases/rollback-k8s-scale/case.yaml +6 -0
- platformforge/data/evals/cases/rollback-material-tamper/case.yaml +6 -0
- platformforge/data/evals/cases/rollback-terraform-replan/case.yaml +6 -0
- platformforge/data/evals/cases/rollback-unknown/case.yaml +6 -0
- platformforge/data/evals/cases/routing-specialist/case.yaml +9 -0
- platformforge/data/evals/cases/rtk-roundtrip/case.yaml +5 -0
- platformforge/data/evals/cases/rtk-roundtrip/fixture/verbose.txt +300 -0
- platformforge/data/evals/cases/sbom-vuln/case.yaml +9 -0
- platformforge/data/evals/cases/sbom-vuln/fixture/sbom.json +9 -0
- platformforge/data/evals/cases/secret-prose-mixed/fixture/app.env +1 -0
- platformforge/data/evals/cases/secret-prose-mixed/fixture/policy-notes.md +7 -0
- platformforge/data/evals/cases/secrets-noleak/case.yaml +5 -0
- platformforge/data/evals/cases/secrets-noleak/fixture/app.env +2 -0
- platformforge/data/evals/cases/slo-fastburn/case.yaml +8 -0
- platformforge/data/evals/cases/slo-fastburn/fixture/events.yaml +2 -0
- platformforge/data/evals/cases/slo-fastburn/fixture/slo.yaml +4 -0
- platformforge/data/evals/cases/slo-noinput/case.yaml +8 -0
- platformforge/data/evals/cases/slo-noinput/fixture/events.yaml +1 -0
- platformforge/data/evals/cases/slo-noinput/fixture/slo.yaml +4 -0
- platformforge/data/evals/cases/sot-conflict/case.yaml +6 -0
- platformforge/data/evals/cases/token-budget/case.yaml +6 -0
- platformforge/data/evals/cases/token-budget/fixture/big.py +50 -0
- platformforge/data/evals/cases/xr-delete/case.yaml +8 -0
- platformforge/data/evals/cases/xr-delete/fixture/xr.yaml +10 -0
- platformforge/data/evals/cases/xr-graph-chain/case.yaml +8 -0
- platformforge/data/evals/cases/xr-graph-chain/fixture/xrd.yaml +90 -0
- platformforge/data/evals/cases/xr-negative-crd/case.yaml +8 -0
- platformforge/data/evals/cases/xr-negative-crd/fixture/widget.yaml +19 -0
- platformforge/data/evals/cases/xr-upbound-mr/case.yaml +8 -0
- platformforge/data/evals/cases/xr-upbound-mr/fixture/bucket.yaml +12 -0
- platformforge/data/evals/qpt-bench/change-review/case.yaml +5 -0
- platformforge/data/evals/qpt-bench/change-review/fixture/plan.json +9 -0
- platformforge/data/evals/qpt-bench/gha-security/case.yaml +5 -0
- platformforge/data/evals/qpt-bench/gha-security/fixture/ci.yml +10 -0
- platformforge/data/evals/qpt-bench/iam-investigate/case.yaml +5 -0
- platformforge/data/evals/qpt-bench/iam-investigate/fixture/policy.json +6 -0
- platformforge/data/evals/qpt-bench/incident-analysis/case.yaml +5 -0
- platformforge/data/evals/qpt-bench/incident-analysis/fixture/query.json +5 -0
- platformforge/data/evals/qpt-bench/incident-analysis/fixture/rules.yaml +6 -0
- platformforge/data/evals/qpt-bench/k8s-review/case.yaml +6 -0
- platformforge/data/evals/qpt-bench/k8s-review/fixture/deploy.yaml +15 -0
- platformforge/data/evals/qpt-bench/tf-security/case.yaml +5 -0
- platformforge/data/evals/qpt-bench/tf-security/fixture/main.tf +17 -0
- platformforge/data/knowledge/aws/eks.yaml +20 -0
- platformforge/data/knowledge/aws/iam.yaml +28 -0
- platformforge/data/knowledge/aws/network-exposure.yaml +19 -0
- platformforge/data/knowledge/aws/organizations.yaml +19 -0
- platformforge/data/knowledge/crossplane/composition-providers.yaml +20 -0
- platformforge/data/knowledge/crossplane/managed-resources.yaml +26 -0
- platformforge/data/knowledge/crossplane/v1-v2.yaml +25 -0
- platformforge/data/knowledge/kubernetes/api-deprecations.yaml +33 -0
- platformforge/data/knowledge/kubernetes/autoscaling-rbac.yaml +27 -0
- platformforge/data/knowledge/kubernetes/gateway-api.yaml +20 -0
- platformforge/data/knowledge/kubernetes/pod-security.yaml +26 -0
- platformforge/data/knowledge/sources.yaml +516 -0
- platformforge/data/knowledge/terraform/lifecycle.yaml +18 -0
- platformforge/data/knowledge/terraform/plan-semantics.yaml +26 -0
- platformforge/data/lab/chaos-pod-kill/chaos.yaml +3 -0
- platformforge/data/lab/chaos-pod-kill/facts.json +13 -0
- platformforge/data/lab/fleets/acme/capacity.yaml +35 -0
- platformforge/data/lab/fleets/acme/costs.yaml +25 -0
- platformforge/data/lab/fleets/acme/events.yaml +41 -0
- platformforge/data/lab/fleets/acme/fleet.yaml +51 -0
- platformforge/data/lab/fleets/acme/graph.yaml +45 -0
- platformforge/data/lab/fleets/acme/policies.yaml +28 -0
- platformforge/data/lab/fleets/acme/requests.yaml +24 -0
- platformforge/data/lab/scenarios/argo-bad-rollout/expected.yaml +6 -0
- platformforge/data/lab/scenarios/argo-bad-rollout/fixture/app.yaml +9 -0
- platformforge/data/lab/scenarios/aws-dump/expected.yaml +19 -0
- platformforge/data/lab/scenarios/aws-dump/fixture/compute.json +4 -0
- platformforge/data/lab/scenarios/aws-dump/fixture/iam.json +7 -0
- platformforge/data/lab/scenarios/aws-dump/fixture/network.json +6 -0
- platformforge/data/lab/scenarios/aws-dump/fixture/org.json +4 -0
- platformforge/data/lab/scenarios/aws-dump/fixture/storage.json +4 -0
- platformforge/data/lab/scenarios/container-unsigned/expected.yaml +5 -0
- platformforge/data/lab/scenarios/container-unsigned/fixture/supply.json +11 -0
- platformforge/data/lab/scenarios/cost-idle-workload/expected.yaml +5 -0
- platformforge/data/lab/scenarios/cost-idle-workload/fixture/costs.json +12 -0
- platformforge/data/lab/scenarios/crossplane-platform/expected.yaml +16 -0
- platformforge/data/lab/scenarios/crossplane-platform/fixture/negative.yaml +18 -0
- platformforge/data/lab/scenarios/crossplane-platform/fixture/xrd.yaml +90 -0
- platformforge/data/lab/scenarios/demo-platform/expected.yaml +16 -0
- platformforge/data/lab/scenarios/demo-platform/fixture/.github/workflows/ci.yml +10 -0
- platformforge/data/lab/scenarios/demo-platform/fixture/deploy.yaml +16 -0
- platformforge/data/lab/scenarios/demo-platform/fixture/infra.tf +5 -0
- platformforge/data/lab/scenarios/fleet-ai/expected.yaml +12 -0
- platformforge/data/lab/scenarios/fleet-capacity/expected.yaml +12 -0
- platformforge/data/lab/scenarios/fleet-cost/expected.yaml +18 -0
- platformforge/data/lab/scenarios/fleet-federation/expected.yaml +11 -0
- platformforge/data/lab/scenarios/fleet-golden-path/expected.yaml +18 -0
- platformforge/data/lab/scenarios/fleet-op-hotspot/expected.yaml +11 -0
- platformforge/data/lab/scenarios/fleet-ownership/expected.yaml +17 -0
- platformforge/data/lab/scenarios/fleet-partial/expected.yaml +10 -0
- platformforge/data/lab/scenarios/fleet-policy-friction/expected.yaml +10 -0
- platformforge/data/lab/scenarios/fleet-recurring-incident/expected.yaml +12 -0
- platformforge/data/lab/scenarios/fleet-report/expected.yaml +13 -0
- platformforge/data/lab/scenarios/fleet-risk/expected.yaml +18 -0
- platformforge/data/lab/scenarios/gitops-drift/expected.yaml +6 -0
- platformforge/data/lab/scenarios/gitops-drift/fixture/app.yaml +12 -0
- platformforge/data/lab/scenarios/k8s-bad-readiness/expected.yaml +6 -0
- platformforge/data/lab/scenarios/k8s-bad-readiness/fixture/deploy.yaml +23 -0
- platformforge/data/lab/scenarios/k8s-bad-readiness/fixture/netpol.yaml +9 -0
- platformforge/data/lab/scenarios/k8s-missing-limits/expected.yaml +6 -0
- platformforge/data/lab/scenarios/k8s-missing-limits/fixture/deploy.yaml +26 -0
- platformforge/data/lab/scenarios/k8s-missing-limits/fixture/netpol.yaml +9 -0
- platformforge/data/lab/scenarios/k8s-single-replica/expected.yaml +5 -0
- platformforge/data/lab/scenarios/k8s-single-replica/fixture/deploy.yaml +26 -0
- platformforge/data/lab/scenarios/k8s-single-replica/fixture/netpol.yaml +4 -0
- platformforge/data/lab/scenarios/live-aws-collect/expected.yaml +4 -0
- platformforge/data/lab/scenarios/live-aws-collect/fixture/aws/ec2_describe-vpcs.json +15 -0
- platformforge/data/lab/scenarios/live-aws-collect/fixture/aws/iam_list-users.denied.txt +1 -0
- platformforge/data/lab/scenarios/live-aws-collect/fixture/aws/sts_get-caller-identity.json +5 -0
- platformforge/data/lab/scenarios/live-k8s-collect/expected.yaml +4 -0
- platformforge/data/lab/scenarios/live-k8s-collect/fixture/kubectl/get_configmaps.denied.txt +1 -0
- platformforge/data/lab/scenarios/live-k8s-collect/fixture/kubectl/get_deployments.apps.json +25 -0
- platformforge/data/lab/scenarios/live-k8s-collect/fixture/kubectl/get_pods.json +17 -0
- platformforge/data/lab/scenarios/live-k8s-collect/fixture/kubectl/get_secrets.json +13 -0
- platformforge/data/lab/scenarios/live-kind/expected.yaml +14 -0
- platformforge/data/lab/scenarios/live-kind/fixture/kubectl/get_configmaps.denied.txt +1 -0
- platformforge/data/lab/scenarios/live-kind/fixture/kubectl/get_deployments.apps.json +25 -0
- platformforge/data/lab/scenarios/live-kind/fixture/kubectl/get_pods.json +17 -0
- platformforge/data/lab/scenarios/live-kind/fixture/kubectl/get_secrets.json +13 -0
- platformforge/data/lab/scenarios/network-policy-missing/expected.yaml +6 -0
- platformforge/data/lab/scenarios/network-policy-missing/fixture/deploy.yaml +26 -0
- platformforge/data/lab/scenarios/ops-bad-rollout/expected.yaml +3 -0
- platformforge/data/lab/scenarios/ops-bad-rollout/fixture/ops.yaml +33 -0
- platformforge/data/lab/scenarios/ops-break-glass/expected.yaml +3 -0
- platformforge/data/lab/scenarios/ops-break-glass/fixture/ops.yaml +21 -0
- platformforge/data/lab/scenarios/ops-broken-selector/expected.yaml +3 -0
- platformforge/data/lab/scenarios/ops-broken-selector/fixture/ops.yaml +21 -0
- platformforge/data/lab/scenarios/ops-changed-plan-hash/expected.yaml +3 -0
- platformforge/data/lab/scenarios/ops-changed-plan-hash/fixture/ops.yaml +20 -0
- platformforge/data/lab/scenarios/ops-conflicting-operation/expected.yaml +3 -0
- platformforge/data/lab/scenarios/ops-conflicting-operation/fixture/ops.yaml +21 -0
- platformforge/data/lab/scenarios/ops-expired-approval/expected.yaml +3 -0
- platformforge/data/lab/scenarios/ops-expired-approval/fixture/ops.yaml +20 -0
- platformforge/data/lab/scenarios/ops-partial-failure/expected.yaml +3 -0
- platformforge/data/lab/scenarios/ops-partial-failure/fixture/ops.yaml +24 -0
- platformforge/data/lab/scenarios/ops-policy-denial/expected.yaml +3 -0
- platformforge/data/lab/scenarios/ops-policy-denial/fixture/ops.yaml +17 -0
- platformforge/data/lab/scenarios/ops-replica-drift/expected.yaml +3 -0
- platformforge/data/lab/scenarios/ops-replica-drift/fixture/ops.yaml +28 -0
- platformforge/data/lab/scenarios/ops-rollback-annotate/expected.yaml +3 -0
- platformforge/data/lab/scenarios/ops-rollback-annotate/fixture/ops.yaml +41 -0
- platformforge/data/lab/scenarios/ops-rollback-gitops/expected.yaml +3 -0
- platformforge/data/lab/scenarios/ops-rollback-gitops/fixture/ops.yaml +38 -0
- platformforge/data/lab/scenarios/ops-rollback-impossible/expected.yaml +3 -0
- platformforge/data/lab/scenarios/ops-rollback-impossible/fixture/ops.yaml +34 -0
- platformforge/data/lab/scenarios/ops-rollback-scale/expected.yaml +3 -0
- platformforge/data/lab/scenarios/ops-rollback-scale/fixture/ops.yaml +40 -0
- platformforge/data/lab/scenarios/ops-rollback-terraform/expected.yaml +3 -0
- platformforge/data/lab/scenarios/ops-rollback-terraform/fixture/ops.yaml +38 -0
- platformforge/data/lab/scenarios/ops-rollback-terraform/fixture/tf/tfplan.bin +1 -0
- platformforge/data/lab/scenarios/ops-stale-observation/expected.yaml +3 -0
- platformforge/data/lab/scenarios/ops-stale-observation/fixture/ops.yaml +20 -0
- platformforge/data/lab/scenarios/secret-exposure/expected.yaml +5 -0
- platformforge/data/lab/scenarios/secret-exposure/fixture/app.env +2 -0
- platformforge/data/lab/scenarios/slo-burn/expected.yaml +5 -0
- platformforge/data/lab/scenarios/slo-burn/fixture/events.yaml +2 -0
- platformforge/data/lab/scenarios/slo-burn/fixture/slo.yaml +4 -0
- platformforge/data/lab/scenarios/terraform-iam-wildcard/expected.yaml +5 -0
- platformforge/data/lab/scenarios/terraform-iam-wildcard/fixture/policy.json +14 -0
- platformforge/data/lab/scenarios/terraform-public-bucket/expected.yaml +6 -0
- platformforge/data/lab/scenarios/terraform-public-bucket/fixture/main.tf +5 -0
- platformforge/data/portable_skills/platformforge-agents/SKILL.md +47 -0
- platformforge/data/portable_skills/platformforge-change/SKILL.md +41 -0
- platformforge/data/portable_skills/platformforge-core/SKILL.md +62 -0
- platformforge/data/portable_skills/platformforge-economy/SKILL.md +42 -0
- platformforge/data/portable_skills/platformforge-finops/SKILL.md +34 -0
- platformforge/data/portable_skills/platformforge-fleet/SKILL.md +39 -0
- platformforge/data/portable_skills/platformforge-governance/SKILL.md +76 -0
- platformforge/data/portable_skills/platformforge-graph/SKILL.md +46 -0
- platformforge/data/portable_skills/platformforge-lab/SKILL.md +39 -0
- platformforge/data/portable_skills/platformforge-sdd/SKILL.md +39 -0
- platformforge/data/portable_skills/platformforge-security/SKILL.md +38 -0
- platformforge/data/portable_skills/platformforge-sre/SKILL.md +41 -0
- platformforge/data/rules/catalog/finops.yaml +26 -0
- platformforge/data/rules/catalog/gitops.yaml +161 -0
- platformforge/data/rules/catalog/iac.yaml +84 -0
- platformforge/data/rules/catalog/k8s.yaml +322 -0
- platformforge/data/rules/catalog/orchestration.yaml +99 -0
- platformforge/data/rules/catalog/product.yaml +42 -0
- platformforge/data/rules/catalog/routing.yaml +122 -0
- platformforge/data/rules/catalog/security.yaml +159 -0
- platformforge/data/rules/catalog/sre.yaml +67 -0
- platformforge/diagnose/__init__.py +75 -0
- platformforge/distribution/__init__.py +18 -0
- platformforge/distribution/bundle.py +127 -0
- platformforge/distribution/hostflow.py +247 -0
- platformforge/distribution/models.py +80 -0
- platformforge/distribution/service.py +225 -0
- platformforge/economy/__init__.py +27 -0
- platformforge/economy/bench.py +66 -0
- platformforge/economy/budget.py +198 -0
- platformforge/economy/cache.py +287 -0
- platformforge/economy/checkpoint.py +112 -0
- platformforge/economy/collection.py +142 -0
- platformforge/economy/doctor.py +207 -0
- platformforge/economy/engine.py +158 -0
- platformforge/economy/envelope.py +61 -0
- platformforge/economy/fleetpack.py +86 -0
- platformforge/economy/ledger.py +232 -0
- platformforge/economy/plan.py +131 -0
- platformforge/economy/pricing.py +101 -0
- platformforge/economy/qpt.py +286 -0
- platformforge/economy/reconcile.py +86 -0
- platformforge/economy/verifyplan.py +107 -0
- platformforge/economy/waste.py +123 -0
- platformforge/evals/__init__.py +16 -0
- platformforge/evals/coverage.py +140 -0
- platformforge/evals/fleet_invariants.py +260 -0
- platformforge/evals/ops_invariants.py +158 -0
- platformforge/evals/runner.py +541 -0
- platformforge/federation/__init__.py +4 -0
- platformforge/federation/node.py +135 -0
- platformforge/finops/__init__.py +14 -0
- platformforge/finops/alloc.py +31 -0
- platformforge/finops/costs.py +79 -0
- platformforge/finops/focus.py +100 -0
- platformforge/finops/graph_cost.py +51 -0
- platformforge/finops/ingest.py +144 -0
- platformforge/finops/insights.py +193 -0
- platformforge/finops/unit.py +36 -0
- platformforge/fleet/__init__.py +5 -0
- platformforge/fleet/loader.py +73 -0
- platformforge/fleet/models.py +155 -0
- platformforge/fleet/orggraph.py +172 -0
- platformforge/fleet/query.py +154 -0
- platformforge/forge/__init__.py +9 -0
- platformforge/forge/collect.py +88 -0
- platformforge/forge/delegate.py +77 -0
- platformforge/forge/manifest.py +106 -0
- platformforge/freeze/__init__.py +22 -0
- platformforge/freeze/exceptions.py +56 -0
- platformforge/freeze/manifest.py +167 -0
- platformforge/freeze/snapshots.py +108 -0
- platformforge/graph/__init__.py +39 -0
- platformforge/graph/backend.py +174 -0
- platformforge/graph/bench.py +245 -0
- platformforge/graph/build.py +130 -0
- platformforge/graph/delivery.py +183 -0
- platformforge/graph/diff.py +292 -0
- platformforge/graph/events.py +116 -0
- platformforge/graph/migrate.py +44 -0
- platformforge/graph/model.py +264 -0
- platformforge/graph/persist.py +97 -0
- platformforge/graph/query.py +290 -0
- platformforge/graph/temporal.py +78 -0
- platformforge/graph/vocab.py +63 -0
- platformforge/graphview.py +94 -0
- platformforge/iac/__init__.py +7 -0
- platformforge/iac/drift.py +53 -0
- platformforge/iac/plan.py +84 -0
- platformforge/iac/terraform.py +123 -0
- platformforge/install/__init__.py +1 -0
- platformforge/install/service.py +421 -0
- platformforge/k8s/__init__.py +8 -0
- platformforge/k8s/helm.py +152 -0
- platformforge/k8s/hubble.py +87 -0
- platformforge/k8s/manifests.py +513 -0
- platformforge/knowledge/__init__.py +1 -0
- platformforge/knowledge/packs.py +157 -0
- platformforge/knowledge/registry.py +249 -0
- platformforge/knowledge/select.py +127 -0
- platformforge/lab/__init__.py +5 -0
- platformforge/lab/chaos.py +71 -0
- platformforge/lab/fleetlab.py +351 -0
- platformforge/lab/opslab.py +271 -0
- platformforge/lab/runner.py +219 -0
- platformforge/live/__init__.py +36 -0
- platformforge/live/budget.py +92 -0
- platformforge/live/capability.py +80 -0
- platformforge/live/collectors/__init__.py +6 -0
- platformforge/live/collectors/aws.py +370 -0
- platformforge/live/collectors/aws_transport.py +98 -0
- platformforge/live/collectors/k8s.py +389 -0
- platformforge/live/collectors/k8s_transport.py +85 -0
- platformforge/live/cursors.py +48 -0
- platformforge/live/drift.py +130 -0
- platformforge/live/envelope.py +85 -0
- platformforge/live/federation.py +113 -0
- platformforge/live/fixtures.py +168 -0
- platformforge/live/identity.py +258 -0
- platformforge/live/incident.py +200 -0
- platformforge/live/models.py +435 -0
- platformforge/live/reconcile.py +382 -0
- platformforge/live/remediate.py +169 -0
- platformforge/live/store.py +256 -0
- platformforge/live/topology.py +249 -0
- platformforge/mcp/__init__.py +7 -0
- platformforge/mcp/parity.py +69 -0
- platformforge/mcp/registry.py +427 -0
- platformforge/mcp/server.py +84 -0
- platformforge/mcp/tools.py +732 -0
- platformforge/models/__init__.py +21 -0
- platformforge/models/base.py +214 -0
- platformforge/observe/__init__.py +26 -0
- platformforge/observe/capacity.py +39 -0
- platformforge/observe/dr.py +67 -0
- platformforge/observe/grafana.py +76 -0
- platformforge/observe/incident.py +58 -0
- platformforge/observe/otel.py +135 -0
- platformforge/observe/postmortem.py +72 -0
- platformforge/observe/prometheus.py +88 -0
- platformforge/observe/slo.py +125 -0
- platformforge/ops/__init__.py +8 -0
- platformforge/ops/actions.py +215 -0
- platformforge/ops/analytics.py +83 -0
- platformforge/ops/approval.py +275 -0
- platformforge/ops/autorem.py +101 -0
- platformforge/ops/config.py +175 -0
- platformforge/ops/engine.py +758 -0
- platformforge/ops/envelope.py +135 -0
- platformforge/ops/executors/__init__.py +1 -0
- platformforge/ops/executors/base.py +211 -0
- platformforge/ops/executors/git.py +77 -0
- platformforge/ops/executors/gitops.py +134 -0
- platformforge/ops/executors/terraform.py +84 -0
- platformforge/ops/gates.py +135 -0
- platformforge/ops/goldenpath.py +180 -0
- platformforge/ops/material.py +181 -0
- platformforge/ops/models.py +421 -0
- platformforge/ops/operation.py +335 -0
- platformforge/ops/opgraph.py +233 -0
- platformforge/ops/policy.py +275 -0
- platformforge/ops/preconditions.py +109 -0
- platformforge/ops/registry.py +101 -0
- platformforge/ops/risk.py +216 -0
- platformforge/ops/rollback.py +287 -0
- platformforge/ops/rollback_builders.py +163 -0
- platformforge/ops/runbook.py +269 -0
- platformforge/ops/simulate.py +125 -0
- platformforge/ops/source_of_truth.py +198 -0
- platformforge/ops/store.py +157 -0
- platformforge/ops/verify.py +190 -0
- platformforge/optimize/__init__.py +4 -0
- platformforge/optimize/engine.py +109 -0
- platformforge/optimize/models.py +68 -0
- platformforge/optimize/scan.py +196 -0
- platformforge/plan/__init__.py +107 -0
- platformforge/portable_cli.py +199 -0
- platformforge/portal_adapter.py +740 -0
- platformforge/portal_assets/chunk-7_l-b4Tr.js +1 -0
- platformforge/portal_assets/chunk-B0Iad6pD.js +1 -0
- platformforge/portal_assets/chunk-B605XnCF.js +1 -0
- platformforge/portal_assets/chunk-B7N3TXcn.js +1 -0
- platformforge/portal_assets/chunk-BAj6yGem.js +1 -0
- platformforge/portal_assets/chunk-BGUitn2r.js +1 -0
- platformforge/portal_assets/chunk-BVKnCv85.js +1 -0
- platformforge/portal_assets/chunk-BYyM9V_w.js +1 -0
- platformforge/portal_assets/chunk-BaQMhq-G.js +1 -0
- platformforge/portal_assets/chunk-BavOrxVm.js +1 -0
- platformforge/portal_assets/chunk-Bb0C24YV.js +1 -0
- platformforge/portal_assets/chunk-BfCFGPzs.js +1 -0
- platformforge/portal_assets/chunk-C2t4OUVu.js +1 -0
- platformforge/portal_assets/chunk-C3pI4QjU.js +1 -0
- platformforge/portal_assets/chunk-C4gpbtbP.js +1 -0
- platformforge/portal_assets/chunk-CGWeHhKY.js +1 -0
- platformforge/portal_assets/chunk-CJCT86Dr.js +1 -0
- platformforge/portal_assets/chunk-CXcsLDPJ.js +1 -0
- platformforge/portal_assets/chunk-CcjxoLxw.js +1 -0
- platformforge/portal_assets/chunk-D-gBPXHa.js +1 -0
- platformforge/portal_assets/chunk-D3eZogIe.js +1 -0
- platformforge/portal_assets/chunk-DQU0VyoQ.js +1 -0
- platformforge/portal_assets/chunk-DqWNkF1O.js +1 -0
- platformforge/portal_assets/chunk-DuPPkSIE.js +3 -0
- platformforge/portal_assets/chunk-DyIHOW_a.js +1 -0
- platformforge/portal_assets/chunk-Fx4zSGL5.js +1 -0
- platformforge/portal_assets/chunk-UBKt05Rg.js +1 -0
- platformforge/portal_assets/chunk-htnJDQEY.js +1 -0
- platformforge/portal_assets/chunk-kXRFMGqe.js +1 -0
- platformforge/portal_assets/chunk-qe3u763a.js +1 -0
- platformforge/portal_assets/favicon.ico +0 -0
- platformforge/portal_assets/index.html +13 -0
- platformforge/portal_assets/main-QDFVZK3T.js +5 -0
- platformforge/portal_assets/styles-MQEBDFDX.css +1 -0
- platformforge/product/__init__.py +10 -0
- platformforge/product/backstage.py +49 -0
- platformforge/product/catalog.py +74 -0
- platformforge/product/crossplane.py +341 -0
- platformforge/product/golden_paths/__init__.py +5 -0
- platformforge/product/golden_paths/engine.py +97 -0
- platformforge/product/golden_paths/library.yaml +198 -0
- platformforge/product/golden_paths/model.py +84 -0
- platformforge/product/maturity.py +107 -0
- platformforge/product/scorecards.py +84 -0
- platformforge/resources.py +36 -0
- platformforge/risk/__init__.py +5 -0
- platformforge/risk/engine.py +95 -0
- platformforge/risk/signals.py +49 -0
- platformforge/routing/__init__.py +13 -0
- platformforge/routing/decision.py +191 -0
- platformforge/routing/router.py +328 -0
- platformforge/rtk/__init__.py +9 -0
- platformforge/rtk/compact.py +127 -0
- platformforge/rtk/parsers.py +199 -0
- platformforge/rules/__init__.py +5 -0
- platformforge/rules/engine.py +345 -0
- platformforge/sandbox/__init__.py +7 -0
- platformforge/sandbox/env.py +151 -0
- platformforge/sandbox/review.py +92 -0
- platformforge/sdd/__init__.py +8 -0
- platformforge/sdd/lifecycle.py +239 -0
- platformforge/security/__init__.py +19 -0
- platformforge/security/cosign.py +67 -0
- platformforge/security/iam.py +112 -0
- platformforge/security/identity.py +84 -0
- platformforge/security/kyverno.py +106 -0
- platformforge/security/sbom.py +59 -0
- platformforge/security/scan.py +63 -0
- platformforge/security/slsa.py +86 -0
- platformforge/security/supply.py +62 -0
- platformforge/tokensave/__init__.py +20 -0
- platformforge/tokensave/budget.py +62 -0
- platformforge/tokensave/estimate.py +21 -0
- platformforge/tokensave/index.py +172 -0
- platformforge/tokensave/ledger.py +121 -0
- platformforge/tokensave/packs.py +285 -0
- platformforge/ui/__init__.py +28 -0
- platformforge/ui/app.py +465 -0
- platformforge/ui/home.py +113 -0
- platformforge/ui/i18n.py +143 -0
- platformforge/ui/kit.py +689 -0
- platformforge/ui/screen.py +628 -0
- platformforge/ui/tui.py +94 -0
- platformforge/ui/wizard.py +309 -0
- platformforge/workspace/__init__.py +13 -0
- platformforge/workspace/models.py +35 -0
- platformforge/workspace/service.py +69 -0
- platformforge-0.1.0.dist-info/METADATA +212 -0
- platformforge-0.1.0.dist-info/RECORD +659 -0
- platformforge-0.1.0.dist-info/WHEEL +4 -0
- platformforge-0.1.0.dist-info/entry_points.txt +3 -0
- platformforge-0.1.0.dist-info/licenses/LICENSE +21 -0
|
@@ -0,0 +1 @@
|
|
|
1
|
+
:root{--fg-space-1: .25rem;--fg-space-2: .5rem;--fg-space-3: .75rem;--fg-space-4: 1rem;--fg-space-5: 1.5rem;--fg-space-6: 2rem;--fg-space-7: 3rem;--fg-radius-sm: .375rem;--fg-radius-md: .625rem;--fg-radius-lg: .875rem;--fg-radius-pill: 999px;--fg-motion-fast: .12s;--fg-motion-press: .14s;--fg-motion-med: .22s;--fg-motion-ease: cubic-bezier(.2, .8, .2, 1);--fg-ease-out: cubic-bezier(.23, 1, .32, 1);--fg-ease-in-out: cubic-bezier(.77, 0, .175, 1);--fg-elev-1: 0 1px 2px rgb(0 0 0 / .12);--fg-elev-2: 0 4px 16px rgb(0 0 0 / .16);--fg-elev-3: 0 12px 40px rgb(0 0 0 / .24);--fg-font: "Segoe UI", system-ui, -apple-system, "Inter", "Roboto", sans-serif;--fg-font-mono: "Cascadia Code", ui-monospace, "SF Mono", Consolas, monospace;--fg-topbar-h: 3.25rem;--fg-sidebar-w: 15.5rem;--fg-sidebar-w-collapsed: 3.75rem;color-scheme:light}:root{--fg-bg: #f4f5f7;--fg-bg-raised: #ffffff;--fg-surface: #ffffff;--fg-surface-2: #eef0f3;--fg-border: #d9dde3;--fg-border-strong: #b9c0ca;--fg-text: #16191d;--fg-text-2: #4b5563;--fg-text-dim: #6b7280;--fg-focus: #2563eb;--fg-success: #0f8a4c;--fg-success-bg: #e3f5ea;--fg-warning: #a35c00;--fg-warning-bg: #fdf0dd;--fg-error: #c0392b;--fg-error-bg: #fdeceb;--fg-info: #1d5fd1;--fg-info-bg: #e8f0fe;--fg-scrim: rgb(10 12 16 / .45)}[data-scheme=dark]{color-scheme:dark;--fg-bg: #0d1014;--fg-bg-raised: #13171d;--fg-surface: #161b22;--fg-surface-2: #1d232c;--fg-border: #2b333d;--fg-border-strong: #3d4754;--fg-text: #e6e9ee;--fg-text-2: #a9b3bf;--fg-text-dim: #7d8894;--fg-focus: #6ea8fe;--fg-success: #3fce7f;--fg-success-bg: #10331f;--fg-warning: #f0b35e;--fg-warning-bg: #3a2a10;--fg-error: #ff6f61;--fg-error-bg: #3d1512;--fg-info: #79a8ff;--fg-info-bg: #15233d;--fg-elev-1: 0 1px 2px rgb(0 0 0 / .5);--fg-elev-2: 0 4px 16px rgb(0 0 0 / .45);--fg-elev-3: 0 12px 40px rgb(0 0 0 / .55)}:root,[data-forge=the-forge]{--fg-accent: #e8611c;--fg-accent-strong: #c74e0f;--fg-accent-bg: #fdeee4;--fg-accent-contrast: #ffffff;--fg-gradient: linear-gradient(135deg, #e8611c 0%, #b93e6b 100%)}[data-scheme=dark][data-forge=the-forge],[data-scheme=dark] :root[data-forge=the-forge]{--fg-accent-bg: #3a1d0c}[data-forge=spark-forge-aws]{--fg-accent: #e08a00;--fg-accent-strong: #b56d00;--fg-accent-bg: #fdf2dc;--fg-accent-contrast: #1d1400;--fg-gradient: linear-gradient(135deg, #e08a00 0%, #c2571b 100%)}[data-forge=spark-forge-azure]{--fg-accent: #0078d4;--fg-accent-strong: #005a9e;--fg-accent-bg: #e2f0fc;--fg-accent-contrast: #ffffff;--fg-gradient: linear-gradient(135deg, #0078d4 0%, #2b88d8 100%)}[data-forge=api-forge]{--fg-accent: #0e8f8f;--fg-accent-strong: #0a6e6e;--fg-accent-bg: #def3f2;--fg-accent-contrast: #ffffff;--fg-gradient: linear-gradient(135deg, #0e8f8f 0%, #1167b1 100%)}[data-forge=platform-forge]{--fg-accent: #6d4bd8;--fg-accent-strong: #5537b8;--fg-accent-bg: #ece6fb;--fg-accent-contrast: #ffffff;--fg-gradient: linear-gradient(135deg, #6d4bd8 0%, #8f3fd1 100%)}[data-forge=forge-doctor-data]{--fg-accent: #178a50;--fg-accent-strong: #0f6e3e;--fg-accent-bg: #ddf3e6;--fg-accent-contrast: #ffffff;--fg-gradient: linear-gradient(135deg, #178a50 0%, #0d9488 100%)}[data-forge=forge-doctor-api]{--fg-accent: #c73565;--fg-accent-strong: #a02550;--fg-accent-bg: #fbe4ec;--fg-accent-contrast: #ffffff;--fg-gradient: linear-gradient(135deg, #c73565 0%, #9d4edd 100%)}[data-scheme=dark]{--fg-accent-bg: rgb(255 255 255 / .08)}*{box-sizing:border-box}html,body{height:100%}body{margin:0;font-family:var(--fg-font);background:var(--fg-bg);color:var(--fg-text);font-size:.9375rem;line-height:1.5;-webkit-font-smoothing:antialiased}h1,h2,h3,h4{line-height:1.25;margin:0;font-weight:650}h1{font-size:1.375rem}h2{font-size:1.125rem}h3{font-size:1rem}p{margin:0}a{color:var(--fg-info)}code,pre,.fg-mono{font-family:var(--fg-font-mono);font-size:.85em}button{font:inherit}:focus-visible{outline:2px solid var(--fg-focus);outline-offset:2px;border-radius:var(--fg-radius-sm)}::selection{background:color-mix(in srgb,var(--fg-accent) 26%,transparent)}*{scrollbar-width:thin;scrollbar-color:color-mix(in srgb,var(--fg-text-dim) 35%,transparent) transparent}::-webkit-scrollbar{width:8px;height:8px}::-webkit-scrollbar-thumb{background:color-mix(in srgb,var(--fg-text-dim) 35%,transparent);border-radius:8px}::-webkit-scrollbar-thumb:hover{background:color-mix(in srgb,var(--fg-text-dim) 55%,transparent)}::-webkit-scrollbar-track{background:transparent}.sr-only{position:absolute;width:1px;height:1px;padding:0;margin:-1px;overflow:hidden;clip:rect(0 0 0 0);white-space:nowrap;border:0}@media(prefers-reduced-motion:reduce){*,*:before,*:after{animation-duration:.01ms!important;transition-duration:.01ms!important}}.fg-card{background:var(--fg-surface);border:1px solid var(--fg-border);border-radius:var(--fg-radius-lg);padding:var(--fg-space-5);box-shadow:var(--fg-elev-1);transition:box-shadow var(--fg-motion-med) var(--fg-motion-ease),border-color var(--fg-motion-fast) var(--fg-motion-ease)}.fg-card[data-lift]{transition-duration:var(--fg-motion-fast),var(--fg-motion-fast)}.fg-card[data-lift]:hover{box-shadow:var(--fg-elev-2);border-color:var(--fg-border-strong)}.fg-pill{display:inline-flex;align-items:center;gap:var(--fg-space-2);border-radius:var(--fg-radius-pill);padding:.125rem .625rem;font-size:.75rem;font-weight:600;letter-spacing:.02em;border:1px solid var(--fg-border);background:var(--fg-surface-2);color:var(--fg-text-2);white-space:nowrap}.fg-pill[data-tone=success]{color:var(--fg-success);background:var(--fg-success-bg);border-color:transparent}.fg-pill[data-tone=warning]{color:var(--fg-warning);background:var(--fg-warning-bg);border-color:transparent}.fg-pill[data-tone=error]{color:var(--fg-error);background:var(--fg-error-bg);border-color:transparent}.fg-pill[data-tone=info]{color:var(--fg-info);background:var(--fg-info-bg);border-color:transparent}.fg-pill[data-tone=accent]{color:var(--fg-accent-contrast);background:var(--fg-accent);border-color:transparent}.fg-btn{display:inline-flex;align-items:center;justify-content:center;gap:var(--fg-space-2);border-radius:var(--fg-radius-md);border:1px solid var(--fg-border);background:var(--fg-surface);color:var(--fg-text);padding:.5rem 1rem;cursor:pointer;font-weight:550;box-shadow:var(--fg-elev-1);transition:background var(--fg-motion-fast) var(--fg-motion-ease),border-color var(--fg-motion-fast) var(--fg-motion-ease),box-shadow var(--fg-motion-fast) var(--fg-motion-ease),transform var(--fg-motion-fast) var(--fg-motion-ease)}.fg-btn:hover{background:var(--fg-surface-2);border-color:var(--fg-border-strong)}.fg-btn:active{transform:scale(.98);box-shadow:none}.fg-btn:disabled{opacity:.55;cursor:not-allowed;transform:none;box-shadow:none}.fg-btn[data-variant=accent]{background:var(--fg-accent);border-color:var(--fg-accent);color:var(--fg-accent-contrast)}.fg-btn[data-variant=accent]:hover{background:var(--fg-accent-strong);border-color:var(--fg-accent-strong);box-shadow:0 2px 8px color-mix(in srgb,var(--fg-accent) 40%,transparent)}.fg-btn[data-variant=danger]{color:var(--fg-error);border-color:var(--fg-error)}.fg-btn[data-variant=danger]:hover{background:var(--fg-error-bg)}.fg-btn[data-variant=ghost]{border-color:transparent;background:transparent;box-shadow:none}.fg-btn[data-variant=ghost]:hover{background:var(--fg-surface-2)}.fg-input,.fg-select,.fg-textarea{width:100%;border:1px solid var(--fg-border);border-radius:var(--fg-radius-md);background:var(--fg-surface);color:var(--fg-text);padding:.5rem .75rem;font:inherit;transition:border-color var(--fg-motion-fast) var(--fg-motion-ease),box-shadow var(--fg-motion-fast) var(--fg-motion-ease)}.fg-input:hover:not(:focus),.fg-select:hover:not(:focus),.fg-textarea:hover:not(:focus){border-color:var(--fg-border-strong)}.fg-input:focus,.fg-select:focus,.fg-textarea:focus{border-color:var(--fg-focus);outline:none;box-shadow:0 0 0 3px color-mix(in srgb,var(--fg-focus) 22%,transparent)}.fg-table{width:100%;border-collapse:collapse;font-size:.875rem}.fg-table th{text-align:left;font-weight:600;color:var(--fg-text-dim);font-size:.75rem;text-transform:uppercase;letter-spacing:.05em;padding:var(--fg-space-2) var(--fg-space-3);border-bottom:1px solid var(--fg-border)}.fg-table td{padding:var(--fg-space-3);border-bottom:1px solid var(--fg-border);vertical-align:top}.fg-table tbody tr{transition:background var(--fg-motion-fast) var(--fg-motion-ease)}.fg-table tbody tr:hover{background:var(--fg-surface-2)}.fg-table tr:last-child td{border-bottom:none}.fg-page{padding:var(--fg-space-6);max-width:76rem;margin:0 auto;display:block}.fg-page-header{display:flex;align-items:flex-start;justify-content:space-between;gap:var(--fg-space-4);margin-bottom:var(--fg-space-5);flex-wrap:wrap}.fg-page-title{display:flex;flex-direction:column;gap:var(--fg-space-1)}.fg-page-sub{color:var(--fg-text-2);font-size:.875rem;max-width:46rem}.fg-grid{display:grid;gap:var(--fg-space-4)}.fg-grid[data-cols="2"]{grid-template-columns:repeat(auto-fit,minmax(20rem,1fr))}.fg-grid[data-cols="3"]{grid-template-columns:repeat(auto-fit,minmax(15rem,1fr))}.fg-muted{color:var(--fg-text-2)}.fg-dim{color:var(--fg-text-dim)}.fg-small{font-size:.8125rem}.fg-row{display:flex;align-items:center;gap:var(--fg-space-3)}.fg-row[data-wrap]{flex-wrap:wrap}.fg-spread{justify-content:space-between}.fg-stack{display:flex;flex-direction:column;gap:var(--fg-space-3)}.fg-kv{display:grid;grid-template-columns:minmax(9rem,auto) 1fr;gap:var(--fg-space-2) var(--fg-space-4);font-size:.875rem}.fg-kv dt{color:var(--fg-text-dim)}.fg-kv dd{margin:0;word-break:break-word}:root{--space-1: var(--fg-space-1);--space-2: var(--fg-space-2);--space-3: var(--fg-space-3);--space-4: var(--fg-space-4);--space-5: var(--fg-space-5);--space-6: var(--fg-space-6);--space-8: var(--fg-space-7);--radius-sm: var(--fg-radius-sm);--radius-md: var(--fg-radius-md);--radius-lg: var(--fg-radius-lg);--radius-pill: var(--fg-radius-pill);--font-xs: .75rem;--font-sm: .8125rem;--font-lg: 1.125rem;--font-2xl: 1.375rem;--font-mono: var(--fg-font-mono);--fg: var(--fg-text);--fg-muted: var(--fg-text-2);--bg: var(--fg-bg);--bg-elevated: var(--fg-surface);--bg-hover: var(--fg-surface-2);--border: var(--fg-border);--accent: var(--fg-accent);--accent-bg: var(--fg-accent-bg);--accent-fg: var(--fg-accent-contrast);--ok: var(--fg-success);--ok-bg: var(--fg-success-bg);--warn: var(--fg-warning);--warn-bg: var(--fg-warning-bg);--error: var(--fg-error);--error-bg: var(--fg-error-bg);--info: var(--fg-info);--info-bg: var(--fg-info-bg);--topbar-h: var(--fg-topbar-h);--motion: var(--fg-motion-med) var(--fg-motion-ease);--motion-fast: var(--fg-motion-fast) var(--fg-motion-ease);--ease-out: var(--fg-ease-out);--ease-in-out: var(--fg-ease-in-out);--press: var(--fg-motion-press) var(--fg-ease-out);--elev-card: var(--fg-elev-1);--elev-hover: var(--fg-elev-2);--elev-pop: var(--fg-elev-3);--border-strong: var(--fg-border-strong);--accent-strong: var(--fg-accent-strong);--gradient: var(--fg-gradient);--scrim: var(--fg-scrim)}.btn{display:inline-flex;align-items:center;justify-content:center;gap:var(--space-2);border-radius:var(--radius-md);border:1px solid var(--border);background:var(--bg-elevated);color:var(--fg);padding:.5rem 1rem;cursor:pointer;font-weight:550;font-size:.875rem;box-shadow:var(--elev-card);transition:background var(--motion-fast),border-color var(--motion-fast),box-shadow var(--motion-fast),transform var(--motion-fast)}.btn:hover{background:var(--bg-hover);border-color:var(--border-strong)}.btn:active{transform:scale(.97);box-shadow:none;transition-duration:var(--fg-motion-press)}.btn:disabled{opacity:.55;cursor:not-allowed;transform:none;box-shadow:none}a.btn,a.btn:hover{text-decoration:none}.btn--primary{background:var(--accent);border-color:var(--accent);color:var(--accent-fg)}.btn--primary:hover{background:var(--accent-strong);border-color:var(--accent-strong);box-shadow:0 2px 10px color-mix(in srgb,var(--accent) 40%,transparent)}.btn--danger{color:var(--error);border-color:var(--error)}.btn--danger:hover{background:var(--error-bg)}.card{background:var(--bg-elevated);border:1px solid var(--border);border-radius:var(--radius-lg);padding:var(--space-5);box-shadow:var(--elev-card);transition:box-shadow var(--motion),border-color var(--motion-fast),transform var(--motion)}.card[data-lift]{transition-duration:var(--fg-motion-fast),var(--fg-motion-fast),var(--fg-motion-fast)}.card[data-lift]:hover{box-shadow:var(--elev-hover);border-color:var(--border-strong);transform:translateY(-2px)}.input,.select,.textarea{width:100%;border:1px solid var(--border);border-radius:var(--radius-md);background:var(--bg-elevated);color:var(--fg);padding:.5rem .75rem;font:inherit;transition:border-color var(--motion-fast),box-shadow var(--motion-fast)}.input:hover:not(:focus),.select:hover:not(:focus),.textarea:hover:not(:focus){border-color:var(--border-strong)}.input:focus,.select:focus,.textarea:focus{border-color:var(--fg-focus);outline:none;box-shadow:0 0 0 3px color-mix(in srgb,var(--fg-focus) 22%,transparent)}.table{width:100%;border-collapse:collapse;font-size:.875rem}.table th{text-align:left;font-weight:600;color:var(--fg-muted);font-size:var(--font-xs);text-transform:uppercase;letter-spacing:.05em;padding:var(--space-2) var(--space-3);border-bottom:1px solid var(--border)}.table td{padding:var(--space-3);border-bottom:1px solid var(--border);vertical-align:top}.table tbody tr{transition:background var(--motion-fast)}.table tbody tr:hover{background:var(--bg-hover)}.table tr:last-child td{border-bottom:none}.skeleton{border-radius:var(--radius-md);background:linear-gradient(100deg,var(--bg-hover) 40%,color-mix(in srgb,var(--bg-hover) 55%,var(--fg-muted) 12%) 50%,var(--bg-hover) 60%);background-size:200% 100%;animation:fg-shimmer 1.4s linear infinite}.skeleton--line{height:.875rem;margin:var(--space-2) 0}.skeleton--block{min-height:7rem;border-radius:var(--radius-lg)}@keyframes fg-shimmer{0%{background-position:180% 0}to{background-position:-20% 0}}.search-field{position:relative;max-width:360px;margin-bottom:var(--space-4)}.search-field ui-icon{position:absolute;left:10px;top:50%;translate:0 -50%;color:var(--fg-muted);pointer-events:none}.search-field .input{padding-left:32px}.stat{position:relative;display:grid;gap:2px;padding:var(--space-4) var(--space-5) var(--space-4) calc(var(--space-5) + 3px);background:var(--bg-elevated);border:1px solid var(--border);border-radius:var(--radius-lg);box-shadow:var(--elev-card);overflow:hidden;transition:box-shadow var(--motion),transform var(--motion),border-color var(--motion-fast)}.stat:before{content:"";position:absolute;inset:0 auto 0 0;width:3px;background:var(--stat-rail, var(--accent))}.stat{transition-duration:var(--fg-motion-fast),var(--fg-motion-fast),var(--fg-motion-fast)}.stat:hover{box-shadow:var(--elev-hover);border-color:var(--border-strong);transform:translateY(-2px)}.stat__value{font-size:1.5rem;font-weight:700;letter-spacing:-.02em;line-height:1.15;font-variant-numeric:tabular-nums}.stat__label{font-size:var(--font-xs);font-weight:600;text-transform:uppercase;letter-spacing:.06em;color:var(--fg-muted)}.stat__hint{font-size:var(--font-xs);color:var(--fg-muted)}@keyframes fg-page-in{0%{opacity:0;transform:translateY(6px)}to{opacity:1;transform:none}}page-dashboard,page-install,page-config,page-explorer,page-forge-detail,page-profiles,page-hosts,page-mcp,page-skills,page-agents,page-tasks,page-graph,page-knowledge,page-settings{display:block;animation:fg-page-in var(--fg-motion-med) var(--fg-motion-ease) both}@media(prefers-reduced-motion:reduce){.skeleton{animation:none}page-dashboard,page-install,page-config,page-explorer,page-forge-detail,page-profiles,page-hosts,page-mcp,page-skills,page-agents,page-tasks,page-graph,page-knowledge,page-settings{animation:none}}@keyframes fg-pop{0%{opacity:0;transform:scale(.8)}to{opacity:1;transform:scale(1)}}.fg-pop{animation:fg-pop var(--fg-motion-med) var(--fg-ease-out) both}.stagger>*{animation:fg-page-in var(--fg-motion-med) var(--fg-ease-out) both}.stagger>*:nth-child(2){animation-delay:40ms}.stagger>*:nth-child(3){animation-delay:80ms}.stagger>*:nth-child(4){animation-delay:.12s}.stagger>*:nth-child(n+5){animation-delay:.16s}@media(prefers-reduced-motion:reduce){.stagger>*,.fg-pop{animation:none}}.stepper{display:flex;list-style:none;margin:0;padding:0;gap:0}.stepper__step{position:relative;display:flex;align-items:center;gap:var(--space-2);flex:1;min-width:0;color:var(--fg-muted);font-size:var(--font-sm)}.stepper__step:not(:last-child):after{content:"";flex:1;height:2px;margin:0 var(--space-3);border-radius:1px;background:var(--border);transition:background var(--motion-med) var(--ease-out)}.stepper__dot{display:grid;place-items:center;width:26px;height:26px;flex:none;border-radius:50%;border:1.5px solid var(--border-strong);font-size:var(--font-xs);font-weight:650;transition:background var(--motion-med) var(--ease-out),border-color var(--motion-med) var(--ease-out),color var(--motion-fast)}.stepper__step[data-state=done]{color:var(--fg)}.stepper__step[data-state=done] .stepper__dot{background:var(--ok);border-color:var(--ok);color:#fff;animation:fg-pop var(--fg-motion-med) var(--fg-ease-out) both}.stepper__step[data-state=done]:after{background:var(--ok)}.stepper__step[data-state=active]{color:var(--fg);font-weight:600}.stepper__step[data-state=active] .stepper__dot{border-color:var(--accent);color:var(--accent);box-shadow:0 0 0 4px color-mix(in srgb,var(--accent) 15%,transparent)}.stepper__step[data-state=warn] .stepper__dot{background:var(--warn);border-color:var(--warn);color:#fff}@media(prefers-reduced-motion:reduce){.stepper__step[data-state=done] .stepper__dot{animation:none}}@media(max-width:560px){.stepper{flex-wrap:wrap;gap:var(--space-2)}.stepper__step{flex:none}.stepper__step:not(:last-child):after{display:none}}.cap{display:inline-flex;align-items:center;gap:var(--space-2);padding:7px var(--space-3) 7px var(--space-2);border:1px solid var(--border);border-radius:var(--radius-md);background:var(--bg-hover);font-size:var(--font-sm);font-weight:550;color:var(--fg)}.cap ui-icon{color:var(--fg-muted)}.cap__dot{width:8px;height:8px;border-radius:50%;background:var(--fg-muted)}.cap[data-state=supported]{border-color:color-mix(in srgb,var(--ok) 40%,transparent);background:var(--ok-bg)}.cap[data-state=supported] ui-icon{color:var(--ok)}.cap[data-state=supported] .cap__dot{background:var(--ok)}.cap[data-state=unverified]{border-color:color-mix(in srgb,var(--warn) 45%,transparent);background:var(--warn-bg)}.cap[data-state=unverified] ui-icon{color:var(--warn)}.cap[data-state=unverified] .cap__dot{background:var(--warn)}.cap[data-state=unsupported],.cap[data-state=not_applicable]{opacity:.6}.portal-row{display:flex;align-items:flex-start;gap:var(--space-3);margin-top:var(--space-4);padding:var(--space-3);border:1px solid var(--border);border-radius:var(--radius-md);color:var(--fg-muted)}.portal-row[data-state=installed]{border-color:color-mix(in srgb,var(--ok) 45%,var(--border));color:var(--fg)}.portal-row[data-state=installed] ui-icon{color:var(--ok)}.portal-row__body{display:grid;gap:2px;min-width:0}.portal-row__body small{overflow-wrap:anywhere}.skip-link{position:fixed;top:var(--space-3);left:var(--space-3);z-index:100;padding:var(--space-2) var(--space-4);border-radius:var(--radius-md);background:var(--bg-elevated);color:var(--fg);border:1px solid var(--border-strong);box-shadow:var(--elev-pop);transform:translateY(-200%);transition:transform var(--motion-fast)}.skip-link:focus-visible{transform:translateY(0)}details>summary{cursor:pointer;font-weight:600;color:var(--fg-muted);border-radius:var(--radius-sm);transition:color var(--motion-fast)}details>summary:hover{color:var(--fg)}details>summary::marker{color:var(--accent)}.shell{display:grid;grid-template-columns:auto 1fr;height:100dvh;overflow:hidden}.shell__side{display:flex;flex-direction:column;width:var(--sidebar-w, 250px);border-right:1px solid var(--border);background:var(--bg-elevated);transition:width var(--motion)}.shell__side[data-collapsed]{--sidebar-w: 66px}.shell__side[data-collapsed] .brand__text,.shell__side[data-collapsed] .nav__label,.shell__side[data-collapsed] .nav__section{display:none}.shell__side[data-collapsed] .nav__item{justify-content:center;padding-inline:0}.shell__side[data-collapsed] .nav__item:before{display:none}.shell__side[data-collapsed] .nav__item--active{background:var(--accent-bg)}.brand{display:flex;align-items:center;gap:var(--space-3);padding:var(--space-4);text-decoration:none;color:var(--fg);border-bottom:1px solid var(--border);min-height:var(--topbar-h)}.brand__mark{display:grid;place-items:center;width:34px;height:34px;border-radius:10px;background:var(--gradient);color:var(--accent-fg);font-size:13px;line-height:1;box-shadow:0 2px 8px color-mix(in srgb,var(--accent) 45%,transparent);flex-shrink:0}.brand__text{display:grid;line-height:1.25;min-width:0}.brand__text strong,.brand__text small{white-space:nowrap;overflow:hidden;text-overflow:ellipsis}.brand__text strong{font-size:var(--font-sm);font-weight:650;letter-spacing:-.01em}.brand__text small{color:var(--fg-muted);font-size:var(--font-xs)}.nav{flex:1;overflow-y:auto;overflow-x:hidden;padding:var(--space-3) var(--space-2);display:flex;flex-direction:column;gap:2px}.nav__section{margin:var(--space-4) var(--space-3) 4px;font-size:.6875rem;font-weight:700;text-transform:uppercase;letter-spacing:.1em;color:var(--fg-muted)}.nav__item{position:relative;display:flex;align-items:center;gap:var(--space-3);padding:8px var(--space-3) 8px calc(var(--space-3) + 3px);border-radius:var(--radius-md);color:var(--fg-muted);text-decoration:none;font-size:var(--font-sm);font-weight:500;transition:background var(--motion-fast),color var(--motion-fast),transform var(--motion-fast)}.nav__item:before{content:"";position:absolute;left:0;top:50%;translate:0 -50%;width:3px;height:0;border-radius:3px;background:var(--accent);transition:height var(--motion-fast)}.nav__item:hover{background:var(--bg-hover);color:var(--fg)}.nav__item--active{background:var(--accent-bg);color:var(--accent);font-weight:600}.nav__item--active:before{height:60%}.nav__icon{flex-shrink:0;display:inline-flex}.nav__collapse,.icon-btn{display:inline-flex;align-items:center;justify-content:center;border:1px solid var(--border);border-radius:var(--radius-md);background:transparent;color:var(--fg-muted);cursor:pointer;transition:color var(--motion-fast),background var(--motion-fast),border-color var(--motion-fast),transform var(--motion-fast)}.nav__collapse{margin:var(--space-2);padding:6px}.icon-btn{min-width:32px;height:32px;padding:0 8px;font-size:var(--font-xs);font-weight:700}.nav__collapse:hover,.icon-btn:hover{color:var(--fg);background:var(--bg-hover);border-color:var(--border-strong)}.icon-btn:active{transform:scale(.96)}.icon-btn--search{gap:var(--space-2);padding:0 var(--space-3)}.icon-btn__kbd{font-family:var(--font-mono);font-size:.625rem;font-weight:600;color:var(--fg-muted);border:1px solid var(--border);border-radius:var(--radius-sm);padding:1px 5px;letter-spacing:.02em}@media(max-width:640px){.icon-btn__kbd{display:none}}.shell__main{display:flex;flex-direction:column;min-width:0;min-height:0;background:radial-gradient(1200px 300px at 30% -80px,color-mix(in srgb,var(--accent) 7%,transparent),transparent 70%),var(--bg)}.topbar{display:flex;align-items:center;justify-content:space-between;gap:var(--space-4);height:var(--topbar-h);padding:0 var(--space-5) 0 var(--space-4);border-bottom:1px solid var(--border);background:color-mix(in srgb,var(--bg-elevated) 82%,transparent);-webkit-backdrop-filter:blur(10px);backdrop-filter:blur(10px)}.topbar__status{display:flex;align-items:center;gap:var(--space-2);min-width:0;font-size:var(--font-sm);color:var(--fg-muted)}.topbar__workspace{display:inline-flex;align-items:center;gap:6px;white-space:nowrap;overflow:hidden;text-overflow:ellipsis;color:var(--fg);font-weight:550}.topbar__fed{font-size:var(--font-xs);font-weight:700;letter-spacing:.02em;color:var(--accent);border:1px solid color-mix(in srgb,var(--accent) 55%,transparent);border-radius:var(--radius-pill);padding:2px 9px;background:var(--accent-bg)}.topbar__actions{display:flex;gap:var(--space-2)}.dot{width:9px;height:9px;border-radius:50%;background:var(--dot-c, var(--fg-muted));flex-shrink:0}.dot[data-state=ready]{--dot-c: var(--ok)}.dot[data-state=degraded]{--dot-c: var(--warn)}.dot[data-state=offline]{--dot-c: var(--error)}.dot[data-state=ready],.dot[data-state=degraded],.dot[data-state=offline]{box-shadow:0 0 0 3px color-mix(in srgb,var(--dot-c) 22%,transparent)}.dot[data-state=booting]{background:var(--info);animation:fg-dot-pulse 1.2s infinite}@keyframes fg-dot-pulse{50%{opacity:.4}}.content{flex:1;min-height:0;overflow-y:auto;padding:var(--space-6);overscroll-behavior:contain}.offline-banner{display:flex;align-items:center;justify-content:space-between;gap:var(--space-3);padding:var(--space-3) var(--space-4);margin-bottom:var(--space-4);border:1px solid color-mix(in srgb,var(--error) 55%,transparent);border-left-width:3px;border-radius:var(--radius-lg);background:var(--error-bg)}.offline-banner p{margin:0}@media(prefers-reduced-motion:reduce){.dot[data-state=booting]{animation:none}.nav__item,.nav__collapse,.icon-btn{transition:none}}@media(max-width:760px){.shell__side{--sidebar-w: 66px}.brand__text,.nav__label,.nav__section,.nav__item:before,.nav__collapse{display:none}.nav__item{justify-content:center;padding-inline:0}}:root{--z-overlay: 90;--z-dialog: 100;--z-toast: 120;--skeleton: color-mix(in srgb, var(--fg-text) 10%, transparent)}
|
|
@@ -0,0 +1,10 @@
|
|
|
1
|
+
"""Platform product: catalog, golden paths, maturity model, scorecards,
|
|
2
|
+
Backstage adapter (projection — never the canonical source), Crossplane."""
|
|
3
|
+
|
|
4
|
+
from platformforge.product.backstage import to_backstage
|
|
5
|
+
from platformforge.product.catalog import analyze_catalog
|
|
6
|
+
from platformforge.product.crossplane import analyze_crossplane
|
|
7
|
+
from platformforge.product.maturity import maturity, maturity_report
|
|
8
|
+
|
|
9
|
+
__all__ = ["analyze_catalog", "analyze_crossplane", "maturity",
|
|
10
|
+
"maturity_report", "to_backstage"]
|
|
@@ -0,0 +1,49 @@
|
|
|
1
|
+
"""Backstage adapter — project the platform graph into Backstage catalog
|
|
2
|
+
entities. PROJECTION ONLY: Backstage is never the canonical source."""
|
|
3
|
+
|
|
4
|
+
from __future__ import annotations
|
|
5
|
+
|
|
6
|
+
from typing import Any
|
|
7
|
+
|
|
8
|
+
from platformforge.graph.model import Graph
|
|
9
|
+
|
|
10
|
+
|
|
11
|
+
def to_backstage(graph: Graph) -> dict[str, Any]:
|
|
12
|
+
"""Graph → Backstage entity docs (Component/API/Resource/Group/Domain)."""
|
|
13
|
+
kind_map = {"component": "Component", "service": "Component",
|
|
14
|
+
"workload": "Component", "api": "API", "team": "Group",
|
|
15
|
+
"owner": "User", "database": "Resource", "queue": "Resource",
|
|
16
|
+
"bucket": "Resource", "cluster": "Resource",
|
|
17
|
+
"domain": "Domain"}
|
|
18
|
+
entities = []
|
|
19
|
+
for n in sorted(graph.nodes.values(), key=lambda n: n.node_id):
|
|
20
|
+
bk = kind_map.get(n.kind)
|
|
21
|
+
if not bk:
|
|
22
|
+
continue
|
|
23
|
+
name = n.label.split("/")[-1].replace("_", "-").lower()
|
|
24
|
+
meta: dict[str, Any] = {"name": name,
|
|
25
|
+
"annotations": {"platformforge/node_id":
|
|
26
|
+
n.node_id}}
|
|
27
|
+
if "/" in n.label:
|
|
28
|
+
meta["namespace"] = n.label.split("/")[0]
|
|
29
|
+
spec: dict[str, Any] = {}
|
|
30
|
+
owners = [e.src for e in graph.edges.values()
|
|
31
|
+
if e.dst == n.node_id and e.kind == "owns"]
|
|
32
|
+
if owners:
|
|
33
|
+
spec["owner"] = owners[0].split("/")[-1]
|
|
34
|
+
deps = [e.dst for e in graph.edges.values()
|
|
35
|
+
if e.src == n.node_id and e.kind == "depends_on"]
|
|
36
|
+
if deps:
|
|
37
|
+
spec["dependsOn"] = sorted(deps)
|
|
38
|
+
provides = [e.dst.split("/")[-1] for e in graph.edges.values()
|
|
39
|
+
if e.src == n.node_id and e.kind == "exposes"
|
|
40
|
+
and e.dst.startswith("api/")]
|
|
41
|
+
if provides:
|
|
42
|
+
spec["providesApis"] = sorted(provides)
|
|
43
|
+
entities.append({"apiVersion": "backstage.io/v1alpha1",
|
|
44
|
+
"kind": bk, "metadata": meta,
|
|
45
|
+
"spec": {**spec, "type": n.attrs.get("type",
|
|
46
|
+
"service")}})
|
|
47
|
+
return {"entities": entities, "counts": {"entities": len(entities)},
|
|
48
|
+
"note": "projection — canonical truth stays in the platform "
|
|
49
|
+
"graph; do not hand-edit and expect parity"}
|
|
@@ -0,0 +1,74 @@
|
|
|
1
|
+
"""Platform catalog — catalog-info.yaml / Component / API / Resource /
|
|
2
|
+
System / Domain entities → facts + ownership/dependency edges."""
|
|
3
|
+
|
|
4
|
+
from __future__ import annotations
|
|
5
|
+
|
|
6
|
+
from pathlib import Path
|
|
7
|
+
from typing import Any
|
|
8
|
+
|
|
9
|
+
import yaml
|
|
10
|
+
|
|
11
|
+
from platformforge.models.base import stable_id
|
|
12
|
+
|
|
13
|
+
_KIND_MAP = {"Component": "component", "API": "api", "Resource": "service",
|
|
14
|
+
"System": "component", "Domain": "component",
|
|
15
|
+
"Group": "team", "User": "owner", "Location": "repository"}
|
|
16
|
+
|
|
17
|
+
|
|
18
|
+
def analyze_catalog(path: str | Path) -> dict[str, Any]:
|
|
19
|
+
root = Path(path)
|
|
20
|
+
files = (sorted(root.rglob("catalog-info.y*ml")) +
|
|
21
|
+
[p for p in sorted(root.rglob("*.yaml"))
|
|
22
|
+
if "catalog" in p.name]) if root.is_dir() else [root]
|
|
23
|
+
facts: list[dict[str, Any]] = []
|
|
24
|
+
for f in sorted(set(files)):
|
|
25
|
+
try:
|
|
26
|
+
docs = [d for d in yaml.safe_load_all(f.read_text())
|
|
27
|
+
if isinstance(d, dict) and "backstage.io" in
|
|
28
|
+
str(d.get("apiVersion", ""))]
|
|
29
|
+
except yaml.YAMLError:
|
|
30
|
+
continue
|
|
31
|
+
for doc in docs:
|
|
32
|
+
kind = doc.get("kind", "Component")
|
|
33
|
+
meta = doc.get("metadata") or {}
|
|
34
|
+
spec = doc.get("spec") or {}
|
|
35
|
+
name, ns = meta.get("name", "?"), meta.get("namespace", "default")
|
|
36
|
+
nk = _KIND_MAP.get(kind, "component")
|
|
37
|
+
label = f"{ns}/{name}"
|
|
38
|
+
edges = []
|
|
39
|
+
owner = spec.get("owner")
|
|
40
|
+
if owner:
|
|
41
|
+
edges.append({"src_kind": "team", "src": str(owner),
|
|
42
|
+
"dst_kind": nk, "dst": label,
|
|
43
|
+
"kind": "owns"})
|
|
44
|
+
for dep in spec.get("dependsOn") or []:
|
|
45
|
+
t = str(dep).split(":")[-1]
|
|
46
|
+
edges.append({"src_kind": nk, "src": label,
|
|
47
|
+
"dst_kind": "component", "dst": t,
|
|
48
|
+
"kind": "depends_on"})
|
|
49
|
+
if spec.get("system"):
|
|
50
|
+
edges.append({"src_kind": nk, "src": label,
|
|
51
|
+
"dst_kind": "component",
|
|
52
|
+
"dst": str(spec["system"]),
|
|
53
|
+
"kind": "contained_by"})
|
|
54
|
+
for api in spec.get("providesApis") or []:
|
|
55
|
+
edges.append({"src_kind": nk, "src": label,
|
|
56
|
+
"dst_kind": "api", "dst": str(api),
|
|
57
|
+
"kind": "exposes"})
|
|
58
|
+
for api in spec.get("consumesApis") or []:
|
|
59
|
+
edges.append({"src_kind": nk, "src": label,
|
|
60
|
+
"dst_kind": "api", "dst": str(api),
|
|
61
|
+
"kind": "consumes"})
|
|
62
|
+
attrs = {"entity_kind": kind, "name": name, "namespace": ns,
|
|
63
|
+
"type": spec.get("type"), "lifecycle": spec.get("lifecycle"),
|
|
64
|
+
"owner": owner, "system": spec.get("system"),
|
|
65
|
+
"annotations": meta.get("annotations") or {},
|
|
66
|
+
"tags": meta.get("tags") or [],
|
|
67
|
+
"graph": {"nodes": [{"kind": nk, "label": label,
|
|
68
|
+
"attrs": {"type": spec.get("type")}}],
|
|
69
|
+
"edges": edges}}
|
|
70
|
+
facts.append({"fact_id": stable_id("PF-CAT", kind, f"{ns}/{name}"),
|
|
71
|
+
"kind": "catalog.entity", "source": str(f),
|
|
72
|
+
"location": f"{ns}/{name}", "tier": 3,
|
|
73
|
+
"attrs": attrs})
|
|
74
|
+
return {"facts": facts, "counts": {"entities": len(facts)}}
|
|
@@ -0,0 +1,341 @@
|
|
|
1
|
+
"""Crossplane — explicit object classifier (cycle 2.1 §51–59).
|
|
2
|
+
|
|
3
|
+
No naive wildcard: an apiGroup ending in ``upbound.io``/``crossplane.io`` is a
|
|
4
|
+
*signal*, not a verdict. Managed resources additionally require structural
|
|
5
|
+
evidence (``spec.forProvider``, ``status.atProvider``, ``providerConfigRef``,
|
|
6
|
+
management/deletion policy fields). Objects outside known families are never
|
|
7
|
+
classified — ``foo.example.com/v1`` stays invisible, by design (§58).
|
|
8
|
+
"""
|
|
9
|
+
|
|
10
|
+
from __future__ import annotations
|
|
11
|
+
|
|
12
|
+
from pathlib import Path
|
|
13
|
+
from typing import Any
|
|
14
|
+
|
|
15
|
+
import yaml
|
|
16
|
+
|
|
17
|
+
from platformforge.models.base import stable_id
|
|
18
|
+
|
|
19
|
+
# Core Crossplane API families → kind → fact kind.
|
|
20
|
+
_CORE_KINDS: dict[str, dict[str, str]] = {
|
|
21
|
+
"apiextensions.crossplane.io": {
|
|
22
|
+
"CompositeResourceDefinition": "platform.xrd",
|
|
23
|
+
"Composition": "platform.composition",
|
|
24
|
+
"CompositionRevision": "platform.composition_revision",
|
|
25
|
+
"EnvironmentConfig": "platform.crossplane_envconfig",
|
|
26
|
+
},
|
|
27
|
+
"pkg.crossplane.io": {
|
|
28
|
+
"Provider": "platform.crossplane_provider",
|
|
29
|
+
"ProviderRevision": "platform.crossplane_provider_revision",
|
|
30
|
+
"Configuration": "platform.crossplane_configuration",
|
|
31
|
+
"ConfigurationRevision": "platform.crossplane_configuration_revision",
|
|
32
|
+
"Function": "platform.crossplane_function",
|
|
33
|
+
"DeploymentRuntimeConfig": "platform.crossplane_runtime_config",
|
|
34
|
+
"ImageConfig": "platform.crossplane_image_config",
|
|
35
|
+
"Lock": "platform.crossplane_lock",
|
|
36
|
+
},
|
|
37
|
+
"ops.crossplane.io": {
|
|
38
|
+
"Operation": "platform.crossplane_operation",
|
|
39
|
+
"CronOperation": "platform.crossplane_operation",
|
|
40
|
+
},
|
|
41
|
+
"secrets.crossplane.io": {
|
|
42
|
+
"StoreConfig": "platform.crossplane_storeconfig",
|
|
43
|
+
},
|
|
44
|
+
}
|
|
45
|
+
|
|
46
|
+
# Provider-shaped group suffixes (dotted — `notupbound.io` must NOT match).
|
|
47
|
+
# Membership here is necessary but not sufficient for ManagedResource —
|
|
48
|
+
# structural evidence is still required.
|
|
49
|
+
_PROVIDER_GROUP_SUFFIXES = (".upbound.io", ".crossplane.io")
|
|
50
|
+
_PROVIDER_GROUPS_EXACT = ("upbound.io", "crossplane.io")
|
|
51
|
+
|
|
52
|
+
# Strong MR shape — one is sufficient. Weak fields (writeConnectionSecretToRef
|
|
53
|
+
# etc.) also appear on claims and Upbound Spaces objects, so they never
|
|
54
|
+
# classify alone (§53/§58).
|
|
55
|
+
_MR_STRONG_FIELDS = ("forProvider", "providerConfigRef", "managementPolicies")
|
|
56
|
+
_MR_WEAK_FIELDS = ("writeConnectionSecretToRef", "publishConnectionDetailsTo")
|
|
57
|
+
|
|
58
|
+
|
|
59
|
+
def _group(api_version: str) -> str:
|
|
60
|
+
return api_version.rsplit("/", 1)[0] if "/" in api_version else ""
|
|
61
|
+
|
|
62
|
+
|
|
63
|
+
def _provider_family(group: str) -> str:
|
|
64
|
+
"""aws.s3.upbound.io → aws; database.aws.crossplane.io → aws (legacy)."""
|
|
65
|
+
for seg in group.split("."):
|
|
66
|
+
if seg in ("aws", "azure", "azuread", "gcp", "google", "alibaba",
|
|
67
|
+
"digitalocean", "ibm", "oci", "openstack", "vault",
|
|
68
|
+
"kubernetes", "helm", "terraform", "netlify", "github",
|
|
69
|
+
"gitlab", "datadog", "grafana", "mongodb", "kafka"):
|
|
70
|
+
return seg
|
|
71
|
+
return "unknown"
|
|
72
|
+
|
|
73
|
+
|
|
74
|
+
def _mr_evidence(spec: dict[str, Any], status: dict[str, Any]) -> list[str]:
|
|
75
|
+
"""Strong evidence only — weak fields never unlock classification."""
|
|
76
|
+
ev = [f"spec.{k}" for k in _MR_STRONG_FIELDS if k in spec]
|
|
77
|
+
if status.get("atProvider"): # non-empty dict — '{}' proves nothing
|
|
78
|
+
ev.append("status.atProvider")
|
|
79
|
+
return ev
|
|
80
|
+
|
|
81
|
+
|
|
82
|
+
def _version_signals(kind: str, api: str, spec: dict[str, Any]) -> list[str]:
|
|
83
|
+
"""Per-object v1/v2 cues — inferred, never a global claim (§55)."""
|
|
84
|
+
sig: list[str] = []
|
|
85
|
+
ver = api.rsplit("/", 1)[-1]
|
|
86
|
+
if kind == "CompositeResourceDefinition":
|
|
87
|
+
scope = str(spec.get("scope", "")).lower()
|
|
88
|
+
if scope == "namespaced":
|
|
89
|
+
sig.append("v2:namespaced-xr")
|
|
90
|
+
elif scope == "cluster":
|
|
91
|
+
sig.append("v1:cluster-xr")
|
|
92
|
+
if spec.get("claimNames"):
|
|
93
|
+
sig.append("v1:claim-names")
|
|
94
|
+
if spec.get("connectionSecretKeys"):
|
|
95
|
+
sig.append("v1:connection-secret-keys")
|
|
96
|
+
if any(s.startswith("v1:") for s in sig) and \
|
|
97
|
+
any(s.startswith("v2:") for s in sig):
|
|
98
|
+
sig.append("conflict:v1+v2-signals")
|
|
99
|
+
elif kind == "Composition":
|
|
100
|
+
mode = str(spec.get("mode", "")).lower()
|
|
101
|
+
if mode == "pipeline" or spec.get("pipeline"):
|
|
102
|
+
sig.append("pipeline-mode")
|
|
103
|
+
elif spec.get("resources"):
|
|
104
|
+
sig.append("resources-mode")
|
|
105
|
+
elif ver.startswith("v2"):
|
|
106
|
+
sig.append(f"api:{ver}")
|
|
107
|
+
return sig
|
|
108
|
+
|
|
109
|
+
|
|
110
|
+
def _provider_group(group: str) -> bool:
|
|
111
|
+
return group in _PROVIDER_GROUPS_EXACT or any(
|
|
112
|
+
group.endswith(s) for s in _PROVIDER_GROUP_SUFFIXES)
|
|
113
|
+
|
|
114
|
+
|
|
115
|
+
def classify_object(doc: dict[str, Any]) -> tuple[str, dict[str, Any]] | None:
|
|
116
|
+
"""Classify one manifest → (fact_kind, attrs) or None.
|
|
117
|
+
|
|
118
|
+
Returns None for anything that is not structurally a Crossplane object.
|
|
119
|
+
"""
|
|
120
|
+
kind = doc.get("kind")
|
|
121
|
+
if not kind:
|
|
122
|
+
return None
|
|
123
|
+
api = str(doc.get("apiVersion", ""))
|
|
124
|
+
group = _group(api)
|
|
125
|
+
meta = doc.get("metadata") or {}
|
|
126
|
+
spec = doc.get("spec") or {}
|
|
127
|
+
status = doc.get("status") or {}
|
|
128
|
+
name = meta.get("name", "?")
|
|
129
|
+
|
|
130
|
+
# 1. Core families — exact (group, kind) membership.
|
|
131
|
+
if group in _CORE_KINDS and kind in _CORE_KINDS[group]:
|
|
132
|
+
fk = _CORE_KINDS[group][kind]
|
|
133
|
+
attrs: dict[str, Any] = {"api": api, "name": name,
|
|
134
|
+
"version_signals":
|
|
135
|
+
_version_signals(kind, api, spec)}
|
|
136
|
+
if fk == "platform.xrd":
|
|
137
|
+
attrs.update({
|
|
138
|
+
"xrd": name, "group": spec.get("group"),
|
|
139
|
+
"xr_kind": next((v.get("kind") for v in
|
|
140
|
+
spec.get("versions") or [] if v.get("kind")),
|
|
141
|
+
(spec.get("names") or {}).get("kind")),
|
|
142
|
+
"scope": spec.get("scope", "Cluster"),
|
|
143
|
+
"kind_claim": (spec.get("claimNames") or {}).get("kind"),
|
|
144
|
+
"versions": [v.get("name")
|
|
145
|
+
for v in spec.get("versions") or []],
|
|
146
|
+
"connection_secret_keys":
|
|
147
|
+
spec.get("connectionSecretKeys") or [],
|
|
148
|
+
})
|
|
149
|
+
elif fk == "platform.composition":
|
|
150
|
+
attrs.update({
|
|
151
|
+
"composition": name,
|
|
152
|
+
"composite_type": (spec.get("compositeTypeRef") or {})
|
|
153
|
+
.get("kind"),
|
|
154
|
+
"composite_type_api": (spec.get("compositeTypeRef") or {})
|
|
155
|
+
.get("apiVersion"),
|
|
156
|
+
"resources": len(spec.get("resources") or []),
|
|
157
|
+
"pipeline_mode": bool(spec.get("pipeline"))
|
|
158
|
+
or spec.get("mode") == "Pipeline",
|
|
159
|
+
"functions": [(p.get("functionRef") or {}).get("name")
|
|
160
|
+
for p in spec.get("pipeline") or []
|
|
161
|
+
if p.get("functionRef")],
|
|
162
|
+
})
|
|
163
|
+
elif fk == "platform.composition_revision":
|
|
164
|
+
attrs.update({"composition_revision": name,
|
|
165
|
+
"revision": meta.get("labels", {}).get(
|
|
166
|
+
"crossplane.io/composition-revision")})
|
|
167
|
+
elif fk in ("platform.crossplane_provider",
|
|
168
|
+
"platform.crossplane_provider_revision",
|
|
169
|
+
"platform.crossplane_function",
|
|
170
|
+
"platform.crossplane_configuration"):
|
|
171
|
+
attrs.update({"package": spec.get("package"),
|
|
172
|
+
"revision_activation_policy":
|
|
173
|
+
spec.get("revisionActivationPolicy")})
|
|
174
|
+
elif fk == "platform.crossplane_operation":
|
|
175
|
+
attrs.update({"operation": name,
|
|
176
|
+
"mode": spec.get("mode"),
|
|
177
|
+
"schedule": (spec.get("schedule") or {})
|
|
178
|
+
.get("cron")})
|
|
179
|
+
return fk, attrs
|
|
180
|
+
|
|
181
|
+
# 2. ProviderConfig lives in provider family groups (v2 moved it out of
|
|
182
|
+
# pkg.crossplane.io) — group membership AND a credentials shape; the
|
|
183
|
+
# bare kind name on an arbitrary group proves nothing.
|
|
184
|
+
if kind in ("ProviderConfig", "ClusterProviderConfig") \
|
|
185
|
+
and _provider_group(group):
|
|
186
|
+
creds = spec.get("credentials") or {}
|
|
187
|
+
if creds.get("source") or spec.get("secretRef") \
|
|
188
|
+
or any(k in spec for k in ("projectID", "clientID",
|
|
189
|
+
"tenantID", "subscriptionID")):
|
|
190
|
+
return "platform.provider_config", {
|
|
191
|
+
"api": api, "name": name, "provider_family":
|
|
192
|
+
_provider_family(group),
|
|
193
|
+
"credentials_source": creds.get("source")}
|
|
194
|
+
return None
|
|
195
|
+
|
|
196
|
+
# 3. ManagedResource — provider group suffix AND structural evidence.
|
|
197
|
+
if _provider_group(group):
|
|
198
|
+
ev = _mr_evidence(spec, status)
|
|
199
|
+
if ev:
|
|
200
|
+
return "platform.managed_resource", {
|
|
201
|
+
"managed_kind": kind, "name": name, "api": api,
|
|
202
|
+
"provider_group": group,
|
|
203
|
+
"provider_family": _provider_family(group),
|
|
204
|
+
"mr_evidence": ev,
|
|
205
|
+
"for_provider_keys": sorted(
|
|
206
|
+
(spec.get("forProvider") or {}).keys())[:20],
|
|
207
|
+
"deletion_policy": spec.get("deletionPolicy", "Delete"),
|
|
208
|
+
"management_policies": spec.get("managementPolicies") or [],
|
|
209
|
+
"provider_config_ref": (spec.get("providerConfigRef") or {})
|
|
210
|
+
.get("name"),
|
|
211
|
+
"version_signals": _version_signals(kind, api, spec)}
|
|
212
|
+
return None # §53 — suffix alone is not classification
|
|
213
|
+
|
|
214
|
+
# 4. XR / Claim candidates — referenced by an XRD in the same tree, or
|
|
215
|
+
# carry composition plumbing. Handled by the caller (needs XRD table).
|
|
216
|
+
return None
|
|
217
|
+
|
|
218
|
+
|
|
219
|
+
def _xr_candidate(doc: dict[str, Any],
|
|
220
|
+
xrd_kinds: dict[tuple[str, str], dict[str, Any]]
|
|
221
|
+
) -> tuple[str, dict[str, Any]] | None:
|
|
222
|
+
"""XR/claim classification — needs the XRD table or composition refs."""
|
|
223
|
+
kind = doc.get("kind")
|
|
224
|
+
api = str(doc.get("apiVersion", ""))
|
|
225
|
+
group = _group(api)
|
|
226
|
+
spec = doc.get("spec") or {}
|
|
227
|
+
meta = doc.get("metadata") or {}
|
|
228
|
+
name = meta.get("name", "?")
|
|
229
|
+
if not kind or group in _CORE_KINDS or _provider_group(group):
|
|
230
|
+
return None
|
|
231
|
+
key = (group, kind)
|
|
232
|
+
comp_ref = (spec.get("compositionRef") or {}).get("name")
|
|
233
|
+
if key in xrd_kinds:
|
|
234
|
+
xr = xrd_kinds[key]
|
|
235
|
+
role = "xr_claim" if xr.get("kind_claim") == kind else "xr"
|
|
236
|
+
return f"platform.{role}", {
|
|
237
|
+
"xr_kind": kind, "api": api, "name": name,
|
|
238
|
+
"xrd": xr["xrd"], "composition_ref": comp_ref,
|
|
239
|
+
"classification": "declared-xrd",
|
|
240
|
+
"version_signals": _version_signals(kind, api, spec)}
|
|
241
|
+
# Inferred path: spec.compositionRef is nearly Crossplane-exclusive;
|
|
242
|
+
# status.resourceRefs is the real XR shape (composer-populated).
|
|
243
|
+
# spec.resourceRefs alone is generic CRD plumbing — not enough.
|
|
244
|
+
status = doc.get("status") or {}
|
|
245
|
+
status_refs = status.get("resourceRefs") or []
|
|
246
|
+
if comp_ref or status_refs:
|
|
247
|
+
return "platform.xr", {
|
|
248
|
+
"xr_kind": kind, "api": api, "name": name,
|
|
249
|
+
"composition_ref": comp_ref,
|
|
250
|
+
"classification": "inferred-composition-ref",
|
|
251
|
+
"version_signals": _version_signals(kind, api, spec)}
|
|
252
|
+
return None
|
|
253
|
+
|
|
254
|
+
|
|
255
|
+
def analyze_crossplane(path: str | Path) -> dict[str, Any]:
|
|
256
|
+
root = Path(path)
|
|
257
|
+
files = (sorted(root.rglob("*.yaml")) + sorted(root.rglob("*.yml"))) \
|
|
258
|
+
if root.is_dir() else [root]
|
|
259
|
+
docs: list[tuple[Path, dict[str, Any]]] = []
|
|
260
|
+
for f in files:
|
|
261
|
+
try:
|
|
262
|
+
for doc in yaml.safe_load_all(f.read_text()):
|
|
263
|
+
if isinstance(doc, dict) and doc.get("kind"):
|
|
264
|
+
docs.append((f, doc))
|
|
265
|
+
except yaml.YAMLError:
|
|
266
|
+
continue
|
|
267
|
+
|
|
268
|
+
# Pass 1 — classify and collect the XRD table for pass 2.
|
|
269
|
+
classified: list[tuple[Path, dict[str, Any], str, dict[str, Any]]] = []
|
|
270
|
+
xrd_kinds: dict[tuple[str, str], dict[str, Any]] = {}
|
|
271
|
+
deferred: list[tuple[Path, dict[str, Any]]] = []
|
|
272
|
+
for f, doc in docs:
|
|
273
|
+
out = classify_object(doc)
|
|
274
|
+
if out is None:
|
|
275
|
+
deferred.append((f, doc))
|
|
276
|
+
continue
|
|
277
|
+
fk, attrs = out
|
|
278
|
+
classified.append((f, doc, fk, attrs))
|
|
279
|
+
if fk == "platform.xrd" and attrs.get("group"):
|
|
280
|
+
if attrs.get("xr_kind"):
|
|
281
|
+
xrd_kinds[(attrs["group"], attrs["xr_kind"])] = attrs
|
|
282
|
+
if attrs.get("kind_claim"):
|
|
283
|
+
xrd_kinds[(attrs["group"], attrs["kind_claim"])] = attrs
|
|
284
|
+
|
|
285
|
+
# Pass 2 — XR/claim candidates against the XRD table.
|
|
286
|
+
for f, doc in deferred:
|
|
287
|
+
out = _xr_candidate(doc, xrd_kinds)
|
|
288
|
+
if out:
|
|
289
|
+
fk, attrs = out
|
|
290
|
+
classified.append((f, doc, fk, attrs))
|
|
291
|
+
|
|
292
|
+
facts: list[dict[str, Any]] = []
|
|
293
|
+
for f, doc, fk, attrs in classified:
|
|
294
|
+
meta = doc.get("metadata") or {}
|
|
295
|
+
name = meta.get("name", "?")
|
|
296
|
+
loc = f"{f}::{name}"
|
|
297
|
+
node_kind = {
|
|
298
|
+
"platform.xrd": "crossplane_xrd",
|
|
299
|
+
"platform.xr": "crossplane_xr",
|
|
300
|
+
"platform.xr_claim": "crossplane_xr",
|
|
301
|
+
"platform.composition": "crossplane_composition",
|
|
302
|
+
"platform.managed_resource": "crossplane_managed_resource",
|
|
303
|
+
"platform.crossplane_provider": "crossplane_provider",
|
|
304
|
+
"platform.provider_config": "crossplane_provider",
|
|
305
|
+
}.get(fk, "crossplane_xr")
|
|
306
|
+
edges: list[dict[str, Any]] = []
|
|
307
|
+
# XR → Composition → XRD and MR → ProviderConfig edges (§59).
|
|
308
|
+
if fk in ("platform.xr", "platform.xr_claim") and attrs.get(
|
|
309
|
+
"composition_ref"):
|
|
310
|
+
edges.append({"src_kind": "crossplane_xr", "src": name,
|
|
311
|
+
"dst_kind": "crossplane_composition",
|
|
312
|
+
"dst": attrs["composition_ref"],
|
|
313
|
+
"kind": "provisioned_by",
|
|
314
|
+
"provenance": "declared"})
|
|
315
|
+
elif fk == "platform.composition" and attrs.get("composite_type"):
|
|
316
|
+
# Resolve compositeTypeRef (group+kind) to the XRD's metadata
|
|
317
|
+
# name when the XRD is in the same tree; else keep the kind.
|
|
318
|
+
ref_group = _group(attrs.get("composite_type_api") or "")
|
|
319
|
+
xrd = xrd_kinds.get((ref_group, attrs["composite_type"]), {})
|
|
320
|
+
xrd_label = xrd.get("xrd") or attrs["composite_type"]
|
|
321
|
+
edges.append({"src_kind": "crossplane_composition",
|
|
322
|
+
"src": name,
|
|
323
|
+
"dst_kind": "crossplane_xrd",
|
|
324
|
+
"dst": xrd_label,
|
|
325
|
+
"kind": "provisioned_by",
|
|
326
|
+
"provenance": "declared" if xrd else "inferred",
|
|
327
|
+
"confidence": 1.0 if xrd else 0.5})
|
|
328
|
+
elif fk == "platform.managed_resource" and attrs.get(
|
|
329
|
+
"provider_config_ref"):
|
|
330
|
+
edges.append({"src_kind": "crossplane_managed_resource",
|
|
331
|
+
"src": name,
|
|
332
|
+
"dst_kind": "crossplane_provider",
|
|
333
|
+
"dst": attrs["provider_config_ref"],
|
|
334
|
+
"kind": "provisioned_by",
|
|
335
|
+
"provenance": "declared"})
|
|
336
|
+
attrs["graph"] = {"nodes": [{"kind": node_kind, "label": name}],
|
|
337
|
+
"edges": edges}
|
|
338
|
+
facts.append({"fact_id": stable_id("PF-XR", fk, loc),
|
|
339
|
+
"kind": fk, "source": str(f), "location": loc,
|
|
340
|
+
"tier": 3, "attrs": attrs})
|
|
341
|
+
return {"facts": facts, "counts": {"facts": len(facts)}}
|
|
@@ -0,0 +1,97 @@
|
|
|
1
|
+
"""§73/§78/§79 Golden Path engine — load the library, expose the
|
|
2
|
+
self-service capability surface, and analyze an *existing* estate for
|
|
3
|
+
path gaps (manual steps, missing automation/ownership/observability/
|
|
4
|
+
cost allocation).
|
|
5
|
+
|
|
6
|
+
The engine is offline and read-only: `capabilities()` describes what
|
|
7
|
+
could be requested; nothing is provisioned.
|
|
8
|
+
"""
|
|
9
|
+
|
|
10
|
+
from __future__ import annotations
|
|
11
|
+
|
|
12
|
+
from pathlib import Path
|
|
13
|
+
from typing import Any
|
|
14
|
+
|
|
15
|
+
import yaml
|
|
16
|
+
|
|
17
|
+
from platformforge.product.golden_paths.model import GoldenPath
|
|
18
|
+
|
|
19
|
+
LIBRARY = Path(__file__).with_name("library.yaml")
|
|
20
|
+
|
|
21
|
+
|
|
22
|
+
def load_library(path: str | Path | None = None) -> dict[str, Any]:
|
|
23
|
+
doc = yaml.safe_load(Path(path or LIBRARY).read_text()) or {}
|
|
24
|
+
paths, invalid = [], []
|
|
25
|
+
for p in doc.get("paths") or []:
|
|
26
|
+
try:
|
|
27
|
+
paths.append(GoldenPath.from_dict(p))
|
|
28
|
+
except (ValueError, TypeError) as exc:
|
|
29
|
+
invalid.append(str(exc))
|
|
30
|
+
return {"paths": paths, "invalid": invalid,
|
|
31
|
+
"schema": doc.get("schema", "")}
|
|
32
|
+
|
|
33
|
+
|
|
34
|
+
def describe(path_id: str,
|
|
35
|
+
library_path: str | Path | None = None) -> dict[str, Any]:
|
|
36
|
+
lib = load_library(library_path)
|
|
37
|
+
for p in lib["paths"]:
|
|
38
|
+
if p.id == path_id:
|
|
39
|
+
return {"path": p.id, "name": p.name, "version": p.version,
|
|
40
|
+
"use_case": p.use_case, "inputs": p.inputs,
|
|
41
|
+
"outputs": p.outputs, "steps": p.steps,
|
|
42
|
+
"policies": p.policies, "ownership": p.ownership,
|
|
43
|
+
"observability": p.observability,
|
|
44
|
+
"security": p.security, "cost": p.cost,
|
|
45
|
+
"slo": p.slo, "escape_hatches": p.escape_hatches,
|
|
46
|
+
"supported_variants": p.supported_variants}
|
|
47
|
+
return {"refusal": "PF-PATH-UNKNOWN",
|
|
48
|
+
"unlock": "platformforge product paths",
|
|
49
|
+
"requested": path_id}
|
|
50
|
+
|
|
51
|
+
|
|
52
|
+
def capabilities(library_path: str | Path | None = None) -> dict[str, Any]:
|
|
53
|
+
"""§79 — machine-readable self-service surface for agents/humans."""
|
|
54
|
+
lib = load_library(library_path)
|
|
55
|
+
return {"capabilities": [p.capability() for p in lib["paths"]],
|
|
56
|
+
"invalid": lib["invalid"], "mutates": False,
|
|
57
|
+
"approval_required": True}
|
|
58
|
+
|
|
59
|
+
|
|
60
|
+
def analyze_paths(facts: list[dict[str, Any]]) -> dict[str, Any]:
|
|
61
|
+
"""§78 — find platform gaps in existing artifacts, per §78's list:
|
|
62
|
+
manual steps, duplicate workflows, missing automation/ownership/
|
|
63
|
+
observability/cost allocation. Evidence-linked, never inferred."""
|
|
64
|
+
gaps: list[dict[str, Any]] = []
|
|
65
|
+
seen_workflows: dict[str, list[str]] = {}
|
|
66
|
+
for f in facts:
|
|
67
|
+
kind, a = f.get("kind", ""), f.get("attrs") or {}
|
|
68
|
+
fid = f.get("fact_id", "")
|
|
69
|
+
if kind == "k8s.workload":
|
|
70
|
+
if not (a.get("labels") or {}).get("team") and \
|
|
71
|
+
not (a.get("labels") or {}).get("owner"):
|
|
72
|
+
gaps.append({"gap": "missing_ownership", "fact_id": fid,
|
|
73
|
+
"location": f.get("location"),
|
|
74
|
+
"detail": "no team/owner label on workload"})
|
|
75
|
+
if (a.get("pod_spec") or {}).get("no_requests", 0) > 0:
|
|
76
|
+
pass # covered by PF-K8S rules; path gaps stay structural
|
|
77
|
+
elif kind == "gitops.argocd_app":
|
|
78
|
+
if not a.get("automated_sync"):
|
|
79
|
+
gaps.append({"gap": "missing_automation", "fact_id": fid,
|
|
80
|
+
"location": f.get("location"),
|
|
81
|
+
"detail": "argocd app syncs manually"})
|
|
82
|
+
elif kind in ("gha.workflow", "cicd.pipeline"):
|
|
83
|
+
key = (a.get("name") or a.get("pipeline_name") or "").lower()
|
|
84
|
+
if key:
|
|
85
|
+
seen_workflows.setdefault(key, []).append(fid)
|
|
86
|
+
elif kind == "k8s.service" and \
|
|
87
|
+
(a.get("svc_type") == "LoadBalancer"):
|
|
88
|
+
pass
|
|
89
|
+
for key, ids in seen_workflows.items():
|
|
90
|
+
if len(ids) > 1:
|
|
91
|
+
gaps.append({"gap": "duplicate_workflow",
|
|
92
|
+
"fact_id": ids[0], "detail":
|
|
93
|
+
f"workflow '{key}' declared {len(ids)} times",
|
|
94
|
+
"fact_ids": ids})
|
|
95
|
+
return {"gaps": gaps, "count": len(gaps),
|
|
96
|
+
"note": "gaps are findings about *platform paths*, not rule "
|
|
97
|
+
"violations — same location may appear in both"}
|