{ "name": "Personal Product Factory \u2014 Master Reusable Code Library", "version": "2.0.0", "repository": "https://github.com/sh15aa/Web-Reusable", "description": "Unified enterprise reusable code library spanning Web Apps (33), Conversational Bots (27), Autonomous AI Agents (40), and Mobile Applications (163).", "total_modules": 263, "domains": { "web": { "name": "Web Applications", "count": 33, "framework": "Node.js / TypeScript / React / Next.js", "icon": "\ud83c\udf10", "description": "33 production-hardened web modules with 40-dimension resilience, Crockford IDs, UnitOfWork, and multi-tenancy." }, "bots": { "name": "Conversational & Messaging Bots", "count": 27, "framework": "Python / FastAPI / Async Redis", "icon": "\ud83e\udd16", "description": "27 enterprise bot modules for WhatsApp, Telegram, Chatwoot, anti-loop guards, and distributed workers." }, "agents": { "name": "Autonomous AI Agents", "count": 40, "framework": "Python / Multi-Agent Factory / Evaluation", "icon": "\ud83e\udde0", "description": "40 autonomous agent modules including memory hierarchies, tool sandboxing, regression judges, and workflows." }, "apps": { "name": "Mobile Applications", "count": 163, "framework": "Flutter / Dart / FastAPI / 1M Scale", "icon": "\ud83d\udcf1", "description": "163 production-grade mobile modules for Flutter, offline-first sync, zero-trust security, and 1M user scale." } }, "modules": [ { "id": "ops.admin", "name": "Admin Operations Console", "category": "operations", "path": "admin", "status": "stable", "framework": "Node.js / TypeScript / React / Next.js", "description": "Super-admin control center, user impersonation, system flags, audit oversight, and emergency controls.", "capabilities": [ "user-impersonation", "system-controls", "audit-inspection", "tenant-management" ], "dependencies": [ "zod", "react", "react-dom" ], "env_vars": [ "ADMIN_SECRET_KEY", "ENABLE_IMPERSONATION" ], "docs": "admin/docs/10_API_REFERENCE.md", "has_tests": true, "has_client": true, "has_server": true, "has_components": true, "has_schemas": true, "domain": "web", "domain_name": "Web Applications", "domain_icon": "\ud83c\udf10", "pull_command": "bash scripts/pull-module.sh web/admin" }, { "id": "ai.infra", "name": "AI Infrastructure & LLM Workflows", "category": "ai", "path": "ai", "status": "stable", "framework": "Node.js / TypeScript / React / Next.js", "description": "Enterprise AI runtime with streaming, prompt injection defense, token/cost accounting, and worker queue.", "capabilities": [ "llm-streaming", "prompt-defense", "token-accounting", "job-queue", "cost-tracking" ], "dependencies": [ "zod" ], "env_vars": [ "OPENAI_API_KEY", "ANTHROPIC_API_KEY", "AI_COST_BUDGET_USD" ], "docs": "ai/docs/10_API_REFERENCE.md", "has_tests": true, "has_client": true, "has_server": true, "has_components": true, "has_schemas": true, "domain": "web", "domain_name": "Web Applications", "domain_icon": "\ud83c\udf10", "pull_command": "bash scripts/pull-module.sh web/ai" }, { "id": "analytics.events", "name": "Analytics & Event Tracking", "category": "data", "path": "analytics", "status": "stable", "framework": "Node.js / TypeScript / React / Next.js", "description": "Real-time event logging, funnel analysis, custom product events, and privacy-preserving metrics aggregation.", "capabilities": [ "event-tracking", "funnel-analysis", "time-series-metrics", "privacy-filtering" ], "dependencies": [ "zod" ], "env_vars": [ "ANALYTICS_RETENTION_DAYS" ], "docs": "analytics/docs/10_API_REFERENCE.md", "has_tests": true, "has_client": true, "has_server": true, "has_components": true, "has_schemas": true, "domain": "web", "domain_name": "Web Applications", "domain_icon": "\ud83c\udf10", "pull_command": "bash scripts/pull-module.sh web/analytics" }, { "id": "audit.trail", "name": "Audit Logs & Tamper-Evident Trail", "category": "security", "path": "audit", "status": "stable", "framework": "Node.js / TypeScript / React / Next.js", "description": "Cryptographically verified activity logging, actor attribution, structured audit trail, and compliance export.", "capabilities": [ "activity-stream", "tamper-evident-logs", "actor-attribution", "compliance-ready" ], "dependencies": [ "zod" ], "env_vars": [ "AUDIT_SIGNING_KEY" ], "docs": "audit/docs/10_API_REFERENCE.md", "has_tests": true, "has_client": true, "has_server": true, "has_components": true, "has_schemas": true, "domain": "web", "domain_name": "Web Applications", "domain_icon": "\ud83c\udf10", "pull_command": "bash scripts/pull-module.sh web/audit" }, { "id": "auth.unified", "name": "Unified Authentication & Sessions", "category": "security", "path": "auth", "status": "stable", "framework": "Node.js / TypeScript / React / Next.js", "description": "Production session management, secure passwords, Google/GitHub OAuth, MFA, and RBAC middleware.", "capabilities": [ "session-auth", "google-oauth", "github-oauth", "password-hashing", "rbac-middleware", "csrf-protection" ], "dependencies": [ "zod", "react", "react-dom" ], "env_vars": [ "SESSION_SECRET", "GOOGLE_CLIENT_ID", "GOOGLE_CLIENT_SECRET", "GITHUB_CLIENT_ID", "GITHUB_CLIENT_SECRET" ], "docs": "auth/docs/API.md", "has_tests": true, "has_client": true, "has_server": true, "has_components": true, "has_schemas": true, "domain": "web", "domain_name": "Web Applications", "domain_icon": "\ud83c\udf10", "pull_command": "bash scripts/pull-module.sh web/auth" }, { "id": "billing.subscriptions", "name": "Payments & Subscription Engine", "category": "monetization", "path": "billing", "status": "stable", "framework": "Node.js / TypeScript / React / Next.js", "description": "Multi-provider payment gateway (Stripe/LemonSqueezy), recurring subscriptions, usage invoices, and checkout flows.", "capabilities": [ "stripe-billing", "lemon-squeezy", "subscription-lifecycle", "usage-metering", "webhook-reconciliation" ], "dependencies": [ "zod", "stripe" ], "env_vars": [ "STRIPE_SECRET_KEY", "STRIPE_WEBHOOK_SECRET", "LEMONSQUEEZY_API_KEY" ], "docs": "billing/docs/API.md", "has_tests": true, "has_client": true, "has_server": true, "has_components": true, "has_schemas": true, "domain": "web", "domain_name": "Web Applications", "domain_icon": "\ud83c\udf10", "pull_command": "bash scripts/pull-module.sh web/billing" }, { "id": "growth.changelog", "name": "Product Changelog & Roadmap", "category": "growth", "path": "changelog", "status": "stable", "framework": "Node.js / TypeScript / React / Next.js", "description": "In-app release announcements, release notes feed, feature roadmap, and subscriber email notifications.", "capabilities": [ "in-app-releases", "public-roadmap", "version-tags", "email-broadcasts" ], "dependencies": [ "zod", "react", "react-dom" ], "env_vars": [], "docs": "changelog/docs/10_API_REFERENCE.md", "has_tests": true, "has_client": true, "has_server": true, "has_components": true, "has_schemas": true, "domain": "web", "domain_name": "Web Applications", "domain_icon": "\ud83c\udf10", "pull_command": "bash scripts/pull-module.sh web/changelog" }, { "id": "compliance.legal", "name": "Legal & Compliance Suite", "category": "security", "path": "compliance", "status": "stable", "framework": "Node.js / TypeScript / React / Next.js", "description": "GDPR/CCPA privacy management, cookie consent banner, terms acceptance tracking, and data erasure requests.", "capabilities": [ "gdpr-compliance", "cookie-consent", "terms-tracking", "data-erasure-requests" ], "dependencies": [ "zod", "react", "react-dom" ], "env_vars": [ "DPO_EMAIL" ], "docs": "compliance/docs/10_API_REFERENCE.md", "has_tests": true, "has_client": true, "has_server": true, "has_components": true, "has_schemas": true, "domain": "web", "domain_name": "Web Applications", "domain_icon": "\ud83c\udf10", "pull_command": "bash scripts/pull-module.sh web/compliance" }, { "id": "core.platform", "name": "Core Platform & Resilience Standards", "category": "foundation", "path": "core", "status": "stable", "framework": "Node.js / TypeScript / React / Next.js", "description": "Universal 40-dimension platform foundation: AsyncLocalStorage context, Crockford IDs, UnitOfWork, Idempotency, and resilient errors.", "capabilities": [ "error-handling", "crockford-ids", "idempotency-engine", "unit-of-work", "secrets-manager", "crypto-utils" ], "dependencies": [ "zod" ], "env_vars": [ "APP_SECRET", "NODE_ENV" ], "docs": "core/docs", "has_tests": true, "has_client": false, "has_server": false, "has_components": false, "has_schemas": false, "domain": "web", "domain_name": "Web Applications", "domain_icon": "\ud83c\udf10", "pull_command": "bash scripts/pull-module.sh web/core" }, { "id": "tools.dashboard", "name": "Reusable Studio Dashboard", "category": "tools", "path": "dashboard", "status": "stable", "framework": "Node.js / TypeScript / React / Next.js", "description": "Interactive testing studio and packager for exploring and bundling reusable modules.", "capabilities": [ "module-studio", "bundle-packager", "api-tester" ], "dependencies": [ "zod" ], "env_vars": [ "PORT" ], "docs": "dashboard/README.md", "has_tests": false, "has_client": false, "has_server": false, "has_components": false, "has_schemas": false, "domain": "web", "domain_name": "Web Applications", "domain_icon": "\ud83c\udf10", "pull_command": "bash scripts/pull-module.sh web/dashboard" }, { "id": "data.database", "name": "Database Migrations & Disaster Recovery", "category": "data", "path": "database", "status": "stable", "framework": "Node.js / TypeScript / React / Next.js", "description": "Migration manager, automated backups, point-in-time recovery, and multi-dialect connection pooling (libSQL, Postgres, SQLite).", "capabilities": [ "migration-runner", "backup-automation", "snapshot-restore", "connection-pooling" ], "dependencies": [ "zod", "@libsql/client" ], "env_vars": [ "DATABASE_URL", "DATABASE_AUTH_TOKEN" ], "docs": "database/docs/10_API_REFERENCE.md", "has_tests": true, "has_client": true, "has_server": true, "has_components": true, "has_schemas": true, "domain": "web", "domain_name": "Web Applications", "domain_icon": "\ud83c\udf10", "pull_command": "bash scripts/pull-module.sh web/database" }, { "id": "ops.deployment", "name": "Environment & Canary Deployment Management", "category": "operations", "path": "deployment", "status": "stable", "framework": "Node.js / TypeScript / React / Next.js", "description": "Multi-environment configuration, traffic shifting, canary rollouts, zero-downtime health verification, and rollback engine.", "capabilities": [ "canary-rollouts", "health-probes", "traffic-shifting", "environment-promotion" ], "dependencies": [ "zod" ], "env_vars": [ "DEPLOYMENT_ENV", "CANARY_PERCENTAGE" ], "docs": "deployment/docs/10_API_REFERENCE.md", "has_tests": true, "has_client": true, "has_server": true, "has_components": true, "has_schemas": true, "domain": "web", "domain_name": "Web Applications", "domain_icon": "\ud83c\udf10", "pull_command": "bash scripts/pull-module.sh web/deployment" }, { "id": "growth.domains", "name": "Custom Domains & White-Label Routing", "category": "growth", "path": "domains", "status": "stable", "framework": "Node.js / TypeScript / React / Next.js", "description": "Multi-tenant custom domain provisioning, CNAME verification, automated SSL certificate lifecycle, and edge routing.", "capabilities": [ "custom-domains", "cname-validation", "ssl-lifecycle", "subdomain-routing" ], "dependencies": [ "zod" ], "env_vars": [ "CLOUDFLARE_API_TOKEN", "APEX_DOMAIN" ], "docs": "domains/docs/10_API_REFERENCE.md", "has_tests": true, "has_client": true, "has_server": true, "has_components": true, "has_schemas": true, "domain": "web", "domain_name": "Web Applications", "domain_icon": "\ud83c\udf10", "pull_command": "bash scripts/pull-module.sh web/domains" }, { "id": "growth.ab-testing", "name": "A/B Testing & Experimentation Engine", "category": "growth", "path": "experimentation", "status": "stable", "framework": "Node.js / TypeScript / React / Next.js", "description": "Statistically sound A/B experimentation, deterministic hashing, variant assignment, and conversion tracking.", "capabilities": [ "variant-bucketing", "conversion-tracking", "feature-experiments", "significance-calc" ], "dependencies": [ "zod" ], "env_vars": [], "docs": "experimentation/docs/10_API_REFERENCE.md", "has_tests": true, "has_client": true, "has_server": true, "has_components": true, "has_schemas": true, "domain": "web", "domain_name": "Web Applications", "domain_icon": "\ud83c\udf10", "pull_command": "bash scripts/pull-module.sh web/experimentation" }, { "id": "ops.feature-flags", "name": "Feature Flags & Dynamic Config", "category": "operations", "path": "flags", "status": "stable", "framework": "Node.js / TypeScript / React / Next.js", "description": "Dynamic feature switches, percentage rollouts, user attribute targeting, kill-switches, and zero-redeploy config updates.", "capabilities": [ "feature-flags", "percentage-rollouts", "kill-switches", "attribute-targeting" ], "dependencies": [ "zod" ], "env_vars": [], "docs": "flags/docs/10_API_REFERENCE.md", "has_tests": true, "has_client": true, "has_server": true, "has_components": true, "has_schemas": true, "domain": "web", "domain_name": "Web Applications", "domain_icon": "\ud83c\udf10", "pull_command": "bash scripts/pull-module.sh web/flags" }, { "id": "ux.i18n", "name": "Internationalization & Translation Suite", "category": "ux", "path": "i18n", "status": "stable", "framework": "Node.js / TypeScript / React / Next.js", "description": "Type-safe multi-language translations, locale detection, pluralization, currency/date formatting, and missing key fallbacks.", "capabilities": [ "locale-detection", "type-safe-translations", "pluralization", "currency-formatting" ], "dependencies": [ "zod", "react", "react-dom" ], "env_vars": [ "DEFAULT_LOCALE" ], "docs": "i18n/docs/10_API_REFERENCE.md", "has_tests": true, "has_client": true, "has_server": true, "has_components": true, "has_schemas": true, "domain": "web", "domain_name": "Web Applications", "domain_icon": "\ud83c\udf10", "pull_command": "bash scripts/pull-module.sh web/i18n" }, { "id": "ops.maintenance", "name": "Maintenance Mode & Incident Banners", "category": "operations", "path": "maintenance", "status": "stable", "framework": "Node.js / TypeScript / React / Next.js", "description": "Emergency maintenance switch, scheduled downtime banners, bypass tokens for staff, and read-only mode enforcement.", "capabilities": [ "maintenance-mode", "status-banners", "bypass-tokens", "read-only-guard" ], "dependencies": [ "zod" ], "env_vars": [ "MAINTENANCE_BYPASS_TOKEN" ], "docs": "maintenance/docs/10_API_REFERENCE.md", "has_tests": true, "has_client": true, "has_server": true, "has_components": true, "has_schemas": true, "domain": "web", "domain_name": "Web Applications", "domain_icon": "\ud83c\udf10", "pull_command": "bash scripts/pull-module.sh web/maintenance" }, { "id": "monetization.metering", "name": "Usage Metering & Credit Ledger", "category": "monetization", "path": "metering", "status": "stable", "framework": "Node.js / TypeScript / React / Next.js", "description": "High-throughput usage aggregation, prepaid credit wallet, quota limits, and burst protection for API and compute consumption.", "capabilities": [ "usage-metering", "credit-wallet", "quota-enforcement", "overage-billing" ], "dependencies": [ "zod" ], "env_vars": [], "docs": "metering/docs/10_API_REFERENCE.md", "has_tests": true, "has_client": true, "has_server": true, "has_components": true, "has_schemas": true, "domain": "web", "domain_name": "Web Applications", "domain_icon": "\ud83c\udf10", "pull_command": "bash scripts/pull-module.sh web/metering" }, { "id": "ops.monitoring", "name": "Product Health & Incident Monitoring", "category": "operations", "path": "monitoring", "status": "stable", "framework": "Node.js / TypeScript / React / Next.js", "description": "Synthetic uptime pings, real-time error budget tracking, alerting webhooks, and public status page generation.", "capabilities": [ "uptime-monitors", "sla-tracking", "incident-management", "status-page" ], "dependencies": [ "zod" ], "env_vars": [ "OPS_ALERT_WEBHOOK_URL" ], "docs": "monitoring/docs/10_API_REFERENCE.md", "has_tests": true, "has_client": true, "has_server": true, "has_components": true, "has_schemas": true, "domain": "web", "domain_name": "Web Applications", "domain_icon": "\ud83c\udf10", "pull_command": "bash scripts/pull-module.sh web/monitoring" }, { "id": "comms.notifications", "name": "Notification Center & Transactional Emails", "category": "communications", "path": "notifications", "status": "stable", "framework": "Node.js / TypeScript / React / Next.js", "description": "Multi-channel notifications (Transactional Email via Resend/Postmark, Webhooks, In-App Bell), user preference controls.", "capabilities": [ "transactional-email", "in-app-notifications", "webhook-dispatch", "email-templates" ], "dependencies": [ "zod", "react", "react-dom" ], "env_vars": [ "RESEND_API_KEY", "EMAIL_FROM" ], "docs": "notifications/docs/10_API_REFERENCE.md", "has_tests": true, "has_client": true, "has_server": true, "has_components": true, "has_schemas": true, "domain": "web", "domain_name": "Web Applications", "domain_icon": "\ud83c\udf10", "pull_command": "bash scripts/pull-module.sh web/notifications" }, { "id": "ux.onboarding", "name": "User Onboarding & Interactive Tours", "category": "ux", "path": "onboarding", "status": "stable", "framework": "Node.js / TypeScript / React / Next.js", "description": "Interactive step-by-step checklists, guided tours, progress state persistence, and gamified onboarding milestones.", "capabilities": [ "checklist-progress", "guided-tours", "onboarding-milestones", "dismissible-guides" ], "dependencies": [ "zod", "react", "react-dom" ], "env_vars": [], "docs": "onboarding/docs/10_API_REFERENCE.md", "has_tests": true, "has_client": true, "has_server": true, "has_components": true, "has_schemas": true, "domain": "web", "domain_name": "Web Applications", "domain_icon": "\ud83c\udf10", "pull_command": "bash scripts/pull-module.sh web/onboarding" }, { "id": "data.portability", "name": "Data Export, Import & GDPR Takeout", "category": "data", "path": "portability", "status": "stable", "framework": "Node.js / TypeScript / React / Next.js", "description": "Asynchronous JSON/CSV data export generation, streaming data imports, validation checks, and user GDPR data portability.", "capabilities": [ "async-data-export", "csv-import", "gdpr-takeout", "zip-generation" ], "dependencies": [ "zod" ], "env_vars": [], "docs": "portability/docs/10_API_REFERENCE.md", "has_tests": true, "has_client": true, "has_server": true, "has_components": true, "has_schemas": true, "domain": "web", "domain_name": "Web Applications", "domain_icon": "\ud83c\udf10", "pull_command": "bash scripts/pull-module.sh web/portability" }, { "id": "growth.referrals", "name": "Affiliate & Viral Referral System", "category": "growth", "path": "referral", "status": "stable", "framework": "Node.js / TypeScript / React / Next.js", "description": "Unique invite links, referral code generation, click-to-signup attribution, reward payouts, and tier progression.", "capabilities": [ "referral-codes", "attribution-tracking", "reward-credits", "tier-incentives" ], "dependencies": [ "zod" ], "env_vars": [ "REFERRAL_REWARD_AMOUNT_CENTS" ], "docs": "referral/docs/10_API_REFERENCE.md", "has_tests": true, "has_client": true, "has_server": true, "has_components": true, "has_schemas": true, "domain": "web", "domain_name": "Web Applications", "domain_icon": "\ud83c\udf10", "pull_command": "bash scripts/pull-module.sh web/referral" }, { "id": "ux.search", "name": "Global Search & Command Palette", "category": "ux", "path": "search", "status": "stable", "framework": "Node.js / TypeScript / React / Next.js", "description": "Spotlight-style command palette (Cmd+K), fuzzy search over entities, keyboard navigation, and indexed action catalog.", "capabilities": [ "command-palette", "fuzzy-search", "keyboard-shortcuts", "quick-actions" ], "dependencies": [ "zod", "react", "react-dom" ], "env_vars": [], "docs": "search/docs/10_API_REFERENCE.md", "has_tests": true, "has_client": true, "has_server": true, "has_components": true, "has_schemas": true, "domain": "web", "domain_name": "Web Applications", "domain_icon": "\ud83c\udf10", "pull_command": "bash scripts/pull-module.sh web/search" }, { "id": "security.shield", "name": "Rate Limiting & Threat Protection", "category": "security", "path": "security", "status": "stable", "framework": "Node.js / TypeScript / React / Next.js", "description": "Token-bucket & sliding window rate limiters, IP blacklisting, DDoS mitigations, SQLi/XSS sanitization, and request signing.", "capabilities": [ "sliding-window-rate-limit", "ip-firewall", "payload-sanitization", "honeypot-guards" ], "dependencies": [ "zod" ], "env_vars": [ "SECURITY_RATE_LIMIT_MAX" ], "docs": "security/docs/10_API_REFERENCE.md", "has_tests": true, "has_client": true, "has_server": true, "has_components": true, "has_schemas": true, "domain": "web", "domain_name": "Web Applications", "domain_icon": "\ud83c\udf10", "pull_command": "bash scripts/pull-module.sh web/security" }, { "id": "security.center", "name": "Security Posture & Compliance Dashboard", "category": "security", "path": "security-center", "status": "stable", "framework": "Node.js / TypeScript / React / Next.js", "description": "SOC2/ISO27001 readiness monitor, security health scoring, open vulnerability tracking, and automated posture reports.", "capabilities": [ "posture-scoring", "soc2-checklist", "vulnerability-tracker", "security-dashboard" ], "dependencies": [ "zod", "react", "react-dom" ], "env_vars": [], "docs": "security-center/docs/10_API_REFERENCE.md", "has_tests": true, "has_client": true, "has_server": true, "has_components": true, "has_schemas": true, "domain": "web", "domain_name": "Web Applications", "domain_icon": "\ud83c\udf10", "pull_command": "bash scripts/pull-module.sh web/security-center" }, { "id": "growth.seo", "name": "SEO, OpenGraph & Metadata Engine", "category": "growth", "path": "seo", "status": "stable", "framework": "Node.js / TypeScript / React / Next.js", "description": "Dynamic Open Graph social card generation, structured JSON-LD schema builder, automatic sitemap.xml, and canonical tags.", "capabilities": [ "opengraph-generator", "json-ld-schemas", "dynamic-sitemaps", "meta-tag-builder" ], "dependencies": [ "zod" ], "env_vars": [ "SITE_URL" ], "docs": "seo/docs/10_API_REFERENCE.md", "has_tests": true, "has_client": true, "has_server": true, "has_components": true, "has_schemas": true, "domain": "web", "domain_name": "Web Applications", "domain_icon": "\ud83c\udf10", "pull_command": "bash scripts/pull-module.sh web/seo" }, { "id": "ux.settings", "name": "Settings & Workspace Preferences", "category": "ux", "path": "settings", "status": "stable", "framework": "Node.js / TypeScript / React / Next.js", "description": "Multi-level settings engine (user profile, workspace configuration, billing preferences, developer keys) with schema validation.", "capabilities": [ "profile-settings", "workspace-settings", "notification-prefs", "schema-validation" ], "dependencies": [ "zod", "react", "react-dom" ], "env_vars": [], "docs": "settings/docs/10_API_REFERENCE.md", "has_tests": true, "has_client": true, "has_server": true, "has_components": true, "has_schemas": true, "domain": "web", "domain_name": "Web Applications", "domain_icon": "\ud83c\udf10", "pull_command": "bash scripts/pull-module.sh web/settings" }, { "id": "data.storage", "name": "File Storage & Asset Pipeline", "category": "data", "path": "storage", "status": "stable", "framework": "Node.js / TypeScript / React / Next.js", "description": "Provider-agnostic file storage (S3, Cloudflare R2, Local), secure pre-signed upload URLs, MIME verification, and thumbnail resizing.", "capabilities": [ "s3-storage", "r2-storage", "presigned-urls", "mime-validation", "image-resizing" ], "dependencies": [ "zod" ], "env_vars": [ "S3_BUCKET", "S3_REGION", "S3_ACCESS_KEY_ID", "S3_SECRET_ACCESS_KEY" ], "docs": "storage/docs/10_API_REFERENCE.md", "has_tests": true, "has_client": true, "has_server": true, "has_components": true, "has_schemas": true, "domain": "web", "domain_name": "Web Applications", "domain_icon": "\ud83c\udf10", "pull_command": "bash scripts/pull-module.sh web/storage" }, { "id": "comms.support", "name": "Customer Support & Feedback System", "category": "communications", "path": "support", "status": "stable", "framework": "Node.js / TypeScript / React / Next.js", "description": "Embeddable feedback modal, ticket management lifecycle, triage priorities, CSAT surveys, and Discord/Slack integrations.", "capabilities": [ "feedback-widget", "ticket-lifecycle", "csat-ratings", "webhook-alerts" ], "dependencies": [ "zod", "react", "react-dom" ], "env_vars": [ "SUPPORT_SLACK_WEBHOOK" ], "docs": "support/docs/10_API_REFERENCE.md", "has_tests": true, "has_client": true, "has_server": true, "has_components": true, "has_schemas": true, "domain": "web", "domain_name": "Web Applications", "domain_icon": "\ud83c\udf10", "pull_command": "bash scripts/pull-module.sh web/support" }, { "id": "foundation.tenancy", "name": "Multi-Tenancy & Workspace Isolation", "category": "foundation", "path": "tenancy", "status": "stable", "framework": "Node.js / TypeScript / React / Next.js", "description": "Strict tenant boundary enforcement, workspace switching, team invitations, member roles, and multi-tenant scoping.", "capabilities": [ "workspace-isolation", "tenant-switching", "team-invitations", "role-delegation" ], "dependencies": [ "zod", "react", "react-dom" ], "env_vars": [], "docs": "tenancy/docs/10_API_REFERENCE.md", "has_tests": true, "has_client": true, "has_server": true, "has_components": true, "has_schemas": true, "domain": "web", "domain_name": "Web Applications", "domain_icon": "\ud83c\udf10", "pull_command": "bash scripts/pull-module.sh web/tenancy" }, { "id": "data.turso-storage", "name": "Turso Distributed SQLite Storage Engine", "category": "data", "path": "turso-storage", "status": "stable", "framework": "Node.js / TypeScript / React / Next.js", "description": "Distributed edge storage engine on libSQL / Turso, with built-in HTTP API, ingestion CLI, and web explorer UI.", "capabilities": [ "libsql-client", "embedded-sqlite", "http-storage-api", "cli-tools", "web-explorer" ], "dependencies": [ "zod", "@libsql/client" ], "env_vars": [ "TURSO_DATABASE_URL", "TURSO_AUTH_TOKEN", "ADMIN_PASSWORD" ], "docs": "turso-storage/README.md", "has_tests": true, "has_client": false, "has_server": false, "has_components": false, "has_schemas": false, "domain": "web", "domain_name": "Web Applications", "domain_icon": "\ud83c\udf10", "pull_command": "bash scripts/pull-module.sh web/turso-storage" }, { "id": "foundation.webhooks", "name": "Webhook Engine & Developer API Keys", "category": "foundation", "path": "webhooks", "status": "stable", "framework": "Node.js / TypeScript / React / Next.js", "description": "Outbound webhook dispatcher with exponential backoff retries, HMAC-SHA256 signature verification, and developer API key hashing.", "capabilities": [ "hmac-verification", "webhook-retries", "dead-letter-queue", "api-key-management" ], "dependencies": [ "zod" ], "env_vars": [ "WEBHOOK_SIGNING_SECRET" ], "docs": "webhooks/docs/10_API_REFERENCE.md", "has_tests": true, "has_client": true, "has_server": true, "has_components": true, "has_schemas": true, "domain": "web", "domain_name": "Web Applications", "domain_icon": "\ud83c\udf10", "pull_command": "bash scripts/pull-module.sh web/webhooks" }, { "id": "adapters.whatsapp", "name": "WhatsApp Cloud API Adapter", "category": "adapters", "platform": "backend", "framework": "fastapi", "path": "bots/app/adapters/whatsapp.py", "status": "stable", "description": "Parses Meta Cloud API inbound webhooks and renders outbound text, interactive buttons, list messages, and media.", "classes": [ "WhatsAppAdapter" ], "dependencies": [ "httpx", "pydantic" ], "env_vars": [ "WHATSAPP_PHONE_NUMBER_ID", "WHATSAPP_ACCESS_TOKEN" ], "domain": "bots", "domain_name": "Conversational & Messaging Bots", "domain_icon": "\ud83e\udd16", "pull_command": "bash scripts/pull-module.sh bots/app/adapters/whatsapp.py" }, { "id": "adapters.telegram", "name": "Telegram Bot API Adapter", "category": "adapters", "platform": "backend", "framework": "fastapi", "path": "bots/app/adapters/telegram.py", "status": "stable", "description": "Parses Telegram Bot updates and sends outbound MarkdownV2 text, inline keyboards, reply keyboards, and media.", "classes": [ "TelegramAdapter" ], "dependencies": [ "httpx", "pydantic" ], "env_vars": [ "TELEGRAM_BOT_TOKEN" ], "domain": "bots", "domain_name": "Conversational & Messaging Bots", "domain_icon": "\ud83e\udd16", "pull_command": "bash scripts/pull-module.sh bots/app/adapters/telegram.py" }, { "id": "adapters.chatwoot", "name": "Chatwoot Live-Agent Client", "category": "adapters", "platform": "backend", "framework": "fastapi", "path": "bots/app/adapters/chatwoot.py", "status": "stable", "description": "Bi-directional integration with Chatwoot live support desk. Manages contact lookup, conversation creation, and message relaying.", "classes": [ "ChatwootClient" ], "dependencies": [ "httpx" ], "env_vars": [ "CHATWOOT_BASE_URL", "CHATWOOT_API_ACCESS_TOKEN", "CHATWOOT_ACCOUNT_ID", "CHATWOOT_INBOX_ID" ], "domain": "bots", "domain_name": "Conversational & Messaging Bots", "domain_icon": "\ud83e\udd16", "pull_command": "bash scripts/pull-module.sh bots/app/adapters/chatwoot.py" }, { "id": "adapters.base", "name": "Base Channel Adapter Interface", "category": "adapters", "platform": "backend", "framework": "fastapi", "path": "bots/app/adapters/base.py", "status": "stable", "description": "Abstract base class defining parse_inbound and render_and_send contract for all channel adapters.", "classes": [ "BaseChannelAdapter" ], "dependencies": [ "abc", "pydantic" ], "env_vars": [], "domain": "bots", "domain_name": "Conversational & Messaging Bots", "domain_icon": "\ud83e\udd16", "pull_command": "bash scripts/pull-module.sh bots/app/adapters/base.py" }, { "id": "schemas.unmp", "name": "Unified Normalised Messaging Protocol (UNMP)", "category": "schemas", "platform": "backend", "framework": "pydantic", "path": "bots/app/schemas/unmp.py", "status": "stable", "description": "Channel-agnostic data schemas for inbound messages, outbound responses, sender identities, and interactive payloads.", "classes": [ "UnifiedMessage", "UnifiedResponse", "ChannelType", "MessageContentType", "MessageContent", "SenderInfo" ], "dependencies": [ "pydantic" ], "env_vars": [], "domain": "bots", "domain_name": "Conversational & Messaging Bots", "domain_icon": "\ud83e\udd16", "pull_command": "bash scripts/pull-module.sh bots/app/schemas/unmp.py" }, { "id": "schemas.chatwoot", "name": "Chatwoot Webhook Schemas", "category": "schemas", "platform": "backend", "framework": "pydantic", "path": "bots/app/schemas/chatwoot.py", "status": "stable", "description": "Typed Pydantic models for parsing Chatwoot webhook payloads (message_created, conversation_status_changed).", "classes": [ "ChatwootWebhookPayload", "ChatwootConversation", "ChatwootSender" ], "dependencies": [ "pydantic" ], "env_vars": [], "domain": "bots", "domain_name": "Conversational & Messaging Bots", "domain_icon": "\ud83e\udd16", "pull_command": "bash scripts/pull-module.sh bots/app/schemas/chatwoot.py" }, { "id": "gateway.security", "name": "Webhook Security & Signature Verification", "category": "gateway", "platform": "backend", "framework": "fastapi", "path": "bots/app/gateway/security.py", "status": "stable", "description": "Constant-time HMAC-SHA256 signature verification, timing-safe Telegram token validation, and atomic Redis replay prevention.", "classes": [ "WebhookSecurityService" ], "dependencies": [ "redis", "hmac", "hashlib" ], "env_vars": [ "WHATSAPP_APP_SECRET", "TELEGRAM_SECRET_TOKEN" ], "domain": "bots", "domain_name": "Conversational & Messaging Bots", "domain_icon": "\ud83e\udd16", "pull_command": "bash scripts/pull-module.sh bots/app/gateway/security.py" }, { "id": "gateway.router", "name": "FastAPI Webhook Gateway Router", "category": "gateway", "platform": "backend", "framework": "fastapi", "path": "bots/app/gateway/router.py", "status": "stable", "description": "Sub-200ms ACK webhook endpoints for WhatsApp, Telegram, and Chatwoot with immediate queue offloading via ARQ.", "classes": [], "dependencies": [ "fastapi", "arq", "redis" ], "env_vars": [ "WHATSAPP_VERIFY_TOKEN", "CHATWOOT_WEBHOOK_SECRET" ], "domain": "bots", "domain_name": "Conversational & Messaging Bots", "domain_icon": "\ud83e\udd16", "pull_command": "bash scripts/pull-module.sh bots/app/gateway/router.py" }, { "id": "engine.fsm", "name": "Conversation Engine & Distributed FSM", "category": "engine", "platform": "backend", "framework": "python", "path": "bots/app/engine/fsm.py", "status": "stable", "description": "Finite State Machine with Redis distributed mutex locking (via atomic Lua script release) to prevent button-mashing and race conditions.", "classes": [ "ConversationEngine", "ConversationContext" ], "dependencies": [ "redis" ], "env_vars": [], "domain": "bots", "domain_name": "Conversational & Messaging Bots", "domain_icon": "\ud83e\udd16", "pull_command": "bash scripts/pull-module.sh bots/app/engine/fsm.py" }, { "id": "engine.handoff", "name": "Human Handoff Manager", "category": "engine", "platform": "backend", "framework": "python", "path": "bots/app/engine/handoff.py", "status": "stable", "description": "Coordinates seamless handoff between automated bot conversation and human agents on Chatwoot.", "classes": [ "HumanHandoffManager" ], "dependencies": [ "redis" ], "env_vars": [], "domain": "bots", "domain_name": "Conversational & Messaging Bots", "domain_icon": "\ud83e\udd16", "pull_command": "bash scripts/pull-module.sh bots/app/engine/handoff.py" }, { "id": "engine.flows", "name": "Interactive Flow Engine", "category": "engine", "platform": "backend", "framework": "pydantic", "path": "bots/app/engine/flows.py", "status": "stable", "description": "Step-by-step interactive workflow engine supporting custom validators, dynamic prompts, and transition branching.", "classes": [ "FlowEngine", "FlowDefinition", "FlowStep" ], "dependencies": [ "pydantic" ], "env_vars": [], "domain": "bots", "domain_name": "Conversational & Messaging Bots", "domain_icon": "\ud83e\udd16", "pull_command": "bash scripts/pull-module.sh bots/app/engine/flows.py" }, { "id": "engine.router", "name": "Message & Command Router", "category": "engine", "platform": "backend", "framework": "python", "path": "bots/app/engine/router.py", "status": "stable", "description": "Dispatches incoming messages to slash commands, interactive button callbacks, active flows, or AI assistants.", "classes": [ "MessageRouter" ], "dependencies": [], "env_vars": [], "domain": "bots", "domain_name": "Conversational & Messaging Bots", "domain_icon": "\ud83e\udd16", "pull_command": "bash scripts/pull-module.sh bots/app/engine/router.py" }, { "id": "ai.guardrails", "name": "Dual-Tier AI Security Guardrails", "category": "ai", "platform": "backend", "framework": "python", "path": "bots/app/ai/guardrails.py", "status": "stable", "description": "Zero-trust AI safety layer: automated PII masking (credit cards, emails, SSN, phone numbers), prompt delimiter sandboxing, and dynamic canary token leakage defense.", "classes": [ "AIGuardrailService" ], "dependencies": [ "re", "secrets" ], "env_vars": [], "domain": "bots", "domain_name": "Conversational & Messaging Bots", "domain_icon": "\ud83e\udd16", "pull_command": "bash scripts/pull-module.sh bots/app/ai/guardrails.py" }, { "id": "ai.gateway", "name": "Multi-Provider LLM Gateway", "category": "ai", "platform": "backend", "framework": "python", "path": "bots/app/ai/gateway.py", "status": "stable", "description": "Unified LLM client supporting OpenAI, Anthropic, Gemini, Groq, and Ollama with automated fallback, streaming, and tool execution.", "classes": [ "LLMGateway" ], "dependencies": [ "openai", "httpx" ], "env_vars": [ "OPENAI_API_KEY", "ANTHROPIC_API_KEY", "GEMINI_API_KEY" ], "domain": "bots", "domain_name": "Conversational & Messaging Bots", "domain_icon": "\ud83e\udd16", "pull_command": "bash scripts/pull-module.sh bots/app/ai/gateway.py" }, { "id": "ai.cost_controller", "name": "AI Token Cost Controller & Budgeting", "category": "ai", "platform": "backend", "framework": "python", "path": "bots/app/ai/cost_controller.py", "status": "stable", "description": "Per-user and tenant daily token consumption tracking using Redis sliding counters to prevent quota exhaustion and runaway costs.", "classes": [ "AICostController" ], "dependencies": [ "redis" ], "env_vars": [], "domain": "bots", "domain_name": "Conversational & Messaging Bots", "domain_icon": "\ud83e\udd16", "pull_command": "bash scripts/pull-module.sh bots/app/ai/cost_controller.py" }, { "id": "ai.memory", "name": "Conversation Sliding-Window Memory", "category": "ai", "platform": "backend", "framework": "python", "path": "bots/app/ai/memory.py", "status": "stable", "description": "Redis-backed conversation memory preserving multi-turn chat history with sliding window size and configurable TTL.", "classes": [ "ConversationMemory" ], "dependencies": [ "redis", "json" ], "env_vars": [], "domain": "bots", "domain_name": "Conversational & Messaging Bots", "domain_icon": "\ud83e\udd16", "pull_command": "bash scripts/pull-module.sh bots/app/ai/memory.py" }, { "id": "ai.rag", "name": "Lightweight Embedding RAG Knowledge Base", "category": "ai", "platform": "backend", "framework": "python", "path": "bots/app/ai/rag.py", "status": "stable", "description": "Vector embedding retrieval with cosine similarity ranking and dynamic prompt augmentation for contextual Q&A.", "classes": [ "RAGKnowledgeBase", "DocumentChunk" ], "dependencies": [ "openai" ], "env_vars": [ "OPENAI_API_KEY" ], "domain": "bots", "domain_name": "Conversational & Messaging Bots", "domain_icon": "\ud83e\udd16", "pull_command": "bash scripts/pull-module.sh bots/app/ai/rag.py" }, { "id": "ai.tools", "name": "Sandboxed Tool & Function Calling", "category": "ai", "platform": "backend", "framework": "pydantic", "path": "bots/app/ai/tools.py", "status": "stable", "description": "Framework for registering Python functions as OpenAI/Gemini/Anthropic compatible tools with automatic JSON schema generation.", "classes": [ "ToolSandbox", "ToolDefinition" ], "dependencies": [ "pydantic", "inspect" ], "env_vars": [], "domain": "bots", "domain_name": "Conversational & Messaging Bots", "domain_icon": "\ud83e\udd16", "pull_command": "bash scripts/pull-module.sh bots/app/ai/tools.py" }, { "id": "security.rate_limiter", "name": "Atomic Redis Sliding-Window Rate Limiter", "category": "security", "platform": "backend", "framework": "python", "path": "bots/app/security/rate_limiter.py", "status": "stable", "description": "High-performance sliding-window rate limiter powered by an atomic Redis Lua script to neutralize DoS and flooding attacks.", "classes": [ "DistributedRateLimiter" ], "dependencies": [ "redis" ], "env_vars": [], "domain": "bots", "domain_name": "Conversational & Messaging Bots", "domain_icon": "\ud83e\udd16", "pull_command": "bash scripts/pull-module.sh bots/app/security/rate_limiter.py" }, { "id": "security.loop_detector", "name": "Rolling SHA-256 Bot Loop Detector", "category": "security", "platform": "backend", "framework": "python", "path": "bots/app/security/loop_detector.py", "status": "stable", "description": "Detects and breaks infinite ping-pong loops between automated bots by computing rolling message hashes across a sliding time window.", "classes": [ "BotLoopDetector" ], "dependencies": [ "redis", "hashlib" ], "env_vars": [], "domain": "bots", "domain_name": "Conversational & Messaging Bots", "domain_icon": "\ud83e\udd16", "pull_command": "bash scripts/pull-module.sh bots/app/security/loop_detector.py" }, { "id": "security.rbac", "name": "Role-Based Access Control (RBAC)", "category": "security", "platform": "backend", "framework": "fastapi", "path": "bots/app/security/rbac.py", "status": "stable", "description": "Admin and client authentication context, JWT validation, and route dependency guards.", "classes": [ "SecurityContext", "Role" ], "dependencies": [ "fastapi" ], "env_vars": [ "ADMIN_API_KEY" ], "domain": "bots", "domain_name": "Conversational & Messaging Bots", "domain_icon": "\ud83e\udd16", "pull_command": "bash scripts/pull-module.sh bots/app/security/rbac.py" }, { "id": "security.feature_flags", "name": "Dynamic Redis Feature Flags & Kill Switch", "category": "security", "platform": "backend", "framework": "python", "path": "bots/app/security/feature_flags.py", "status": "stable", "description": "Runtime configuration switches, percentage rollouts, and instant emergency kill switches without restarting services.", "classes": [ "FeatureFlagService" ], "dependencies": [ "redis" ], "env_vars": [], "domain": "bots", "domain_name": "Conversational & Messaging Bots", "domain_icon": "\ud83e\udd16", "pull_command": "bash scripts/pull-module.sh bots/app/security/feature_flags.py" }, { "id": "messaging.media", "name": "Secure Media Downloader & SSRF Protection", "category": "messaging", "platform": "backend", "framework": "python", "path": "bots/app/messaging/media.py", "status": "stable", "description": "Downloads and validates media attachments with anti-SSRF IP blocking (blocks private/loopback/cloud metadata IP ranges).", "classes": [ "MediaProcessor", "MediaSecurityException" ], "dependencies": [ "httpx", "ipaddress" ], "env_vars": [], "domain": "bots", "domain_name": "Conversational & Messaging Bots", "domain_icon": "\ud83e\udd16", "pull_command": "bash scripts/pull-module.sh bots/app/messaging/media.py" }, { "id": "messaging.templates", "name": "Multi-Locale Template Engine", "category": "messaging", "platform": "backend", "framework": "python", "path": "bots/app/messaging/templates.py", "status": "stable", "description": "Channel-agnostic i18n template registry supporting parameter substitution and fallback locales.", "classes": [ "TemplateEngine" ], "dependencies": [], "env_vars": [], "domain": "bots", "domain_name": "Conversational & Messaging Bots", "domain_icon": "\ud83e\udd16", "pull_command": "bash scripts/pull-module.sh bots/app/messaging/templates.py" }, { "id": "identity.service", "name": "Cross-Channel Identity Resolution", "category": "identity", "platform": "backend", "framework": "sqlalchemy", "path": "bots/app/identity/service.py", "status": "stable", "description": "Unifies user records across WhatsApp phone numbers, Telegram chat IDs, and Web CRM profiles into a single persistent user record.", "classes": [ "IdentityResolutionService" ], "dependencies": [ "sqlalchemy" ], "env_vars": [], "domain": "bots", "domain_name": "Conversational & Messaging Bots", "domain_icon": "\ud83e\udd16", "pull_command": "bash scripts/pull-module.sh bots/app/identity/service.py" }, { "id": "payments.gateway", "name": "Payment Gateway & Webhook Validator", "category": "payments", "platform": "backend", "framework": "python", "path": "bots/app/payments/gateway.py", "status": "stable", "description": "Stripe webhook signature validation and subscription tier provisioning in Redis.", "classes": [ "PaymentGateway" ], "dependencies": [ "stripe", "redis" ], "env_vars": [ "STRIPE_API_KEY", "STRIPE_WEBHOOK_SECRET" ], "domain": "bots", "domain_name": "Conversational & Messaging Bots", "domain_icon": "\ud83e\udd16", "pull_command": "bash scripts/pull-module.sh bots/app/payments/gateway.py" }, { "id": "worker.tasks", "name": "ARQ Distributed Async Task Worker", "category": "worker", "platform": "backend", "framework": "arq", "path": "bots/app/worker/tasks.py", "status": "stable", "description": "Async Redis queue (ARQ) background task processor for parsing messages, running FSM, executing AI pipelines, and dispatching outbound messages.", "classes": [ "WorkerSettings" ], "dependencies": [ "arq", "redis", "asyncpg" ], "env_vars": [ "REDIS_URL", "DATABASE_URL" ], "domain": "bots", "domain_name": "Conversational & Messaging Bots", "domain_icon": "\ud83e\udd16", "pull_command": "bash scripts/pull-module.sh bots/app/worker/tasks.py" }, { "id": "factory.master", "name": "Master Agent Factory", "category": "factory", "path": "agents/agent_factory/factory.py", "status": "stable", "description": "Master builder for assembling full production agent instances from identity, gateway, memory, tools, and security layers.", "exports": [ "AgentFactory", "AgentInstance" ], "usage_example": "from agent_factory.factory import AgentFactory\nagent = AgentFactory.create_agent(config, manifest, gateway=gateway, tools=tool_registry)", "domain": "agents", "domain_name": "Autonomous AI Agents", "domain_icon": "\ud83e\udde0", "pull_command": "bash scripts/pull-module.sh agents/agent_factory/factory.py", "framework": "Python / Typer / LLM Gateway" }, { "id": "core.identity", "name": "Agent Identity & Configuration", "category": "core", "path": "agents/agent_factory/core/identity.py", "status": "stable", "description": "Agent identity specifications, manifests, environment configurations, and cost/retry policies.", "exports": [ "AgentIdentity", "AgentConfig", "AgentManifest", "AgentStatus", "AgentEnvironment" ], "usage_example": "from agent_factory.core.identity import AgentIdentity, AgentConfig, AgentManifest\nidentity = AgentIdentity(agent_id='agent-01', name='Researcher')", "domain": "agents", "domain_name": "Autonomous AI Agents", "domain_icon": "\ud83e\udde0", "pull_command": "bash scripts/pull-module.sh agents/agent_factory/core/identity.py", "framework": "Python / Typer / LLM Gateway" }, { "id": "core.gateway", "name": "LLM Gateway & Multi-Provider Router", "category": "core", "path": "agents/agent_factory/core/gateway.py", "status": "stable", "description": "Unified LLM gateway with model routing by task complexity, multi-provider fallbacks, streaming, and tool call normalization.", "exports": [ "LLMGateway", "ModelRouter", "LLMRequest", "LLMResponse", "TaskComplexity", "MockProvider", "OpenAICompatibleProvider" ], "usage_example": "from agent_factory.core.gateway import LLMGateway, LLMRequest, TaskComplexity\ngateway = LLMGateway()\nres = await gateway.complete(LLMRequest(messages=[...], complexity=TaskComplexity.SIMPLE))", "domain": "agents", "domain_name": "Autonomous AI Agents", "domain_icon": "\ud83e\udde0", "pull_command": "bash scripts/pull-module.sh agents/agent_factory/core/gateway.py", "framework": "Python / Typer / LLM Gateway" }, { "id": "core.cost", "name": "Token Tracker & Cost Economics", "category": "core", "path": "agents/agent_factory/core/cost.py", "status": "stable", "description": "Token usage tracking, multi-model pricing economics, per-run cost recording, and budget limit enforcement.", "exports": [ "CostManager", "TokenUsage", "ModelPricing", "ExecutionCostRecord" ], "usage_example": "from agent_factory.core.cost import CostManager\ncost_mgr = CostManager()\ncost_mgr.record_usage('gpt-4o', prompt_tokens=150, completion_tokens=50)", "domain": "agents", "domain_name": "Autonomous AI Agents", "domain_icon": "\ud83e\udde0", "pull_command": "bash scripts/pull-module.sh agents/agent_factory/core/cost.py", "framework": "Python / Typer / LLM Gateway" }, { "id": "core.prompt", "name": "Prompt Manager & Injection Defense", "category": "core", "path": "agents/agent_factory/core/prompt.py", "status": "stable", "description": "Dynamic prompt template compilation, versioning, canary tokens for system prompt leakage detection, and prompt injection filtering.", "exports": [ "PromptManager", "PromptTemplate", "PromptInjectionDefense", "PromptVersion" ], "usage_example": "from agent_factory.core.prompt import PromptManager, PromptInjectionDefense\nprompt_mgr = PromptManager()\ndefense = PromptInjectionDefense()", "domain": "agents", "domain_name": "Autonomous AI Agents", "domain_icon": "\ud83e\udde0", "pull_command": "bash scripts/pull-module.sh agents/agent_factory/core/prompt.py", "framework": "Python / Typer / LLM Gateway" }, { "id": "core.reliability", "name": "Reliability, Loop Detection & Idempotency", "category": "core", "path": "agents/agent_factory/core/reliability.py", "status": "stable", "description": "Exponential backoff retries, cycle/loop detection, execution resource bounds, and idempotency guarantees.", "exports": [ "RetryPolicy", "LoopDetector", "ResourceLimits", "IdempotencyManager" ], "usage_example": "from agent_factory.core.reliability import LoopDetector, ResourceLimits\ndetector = LoopDetector(threshold=3)\ndetector.record_step('action_hash')", "domain": "agents", "domain_name": "Autonomous AI Agents", "domain_icon": "\ud83e\udde0", "pull_command": "bash scripts/pull-module.sh agents/agent_factory/core/reliability.py", "framework": "Python / Typer / LLM Gateway" }, { "id": "core.security", "name": "Security, RBAC & Secret Isolation", "category": "core", "path": "agents/agent_factory/core/security.py", "status": "stable", "description": "Role-based access control, tool risk categorization (LOW, MEDIUM, HIGH, CRITICAL), SSRF IP/domain validation, and zero-leak secret isolation.", "exports": [ "RiskLevel", "TenantContext", "ToolPermission", "SSRFValidator", "SecretStore" ], "usage_example": "from agent_factory.core.security import RiskLevel, SSRFValidator, SecretStore\nSSRFValidator.validate_url('https://api.github.com')", "domain": "agents", "domain_name": "Autonomous AI Agents", "domain_icon": "\ud83e\udde0", "pull_command": "bash scripts/pull-module.sh agents/agent_factory/core/security.py", "framework": "Python / Typer / LLM Gateway" }, { "id": "core.state", "name": "Agent Execution State & Persistence", "category": "core", "path": "agents/agent_factory/core/state.py", "status": "stable", "description": "Execution context state machine, step tracking, intermediate results, and checkpoint persistence.", "exports": [ "ExecutionContext", "AgentStateEnum", "StepResult", "StepStatus" ], "usage_example": "from agent_factory.core.state import ExecutionContext\nctx = ExecutionContext(run_id='run-123')", "domain": "agents", "domain_name": "Autonomous AI Agents", "domain_icon": "\ud83e\udde0", "pull_command": "bash scripts/pull-module.sh agents/agent_factory/core/state.py", "framework": "Python / Typer / LLM Gateway" }, { "id": "core.lifecycle", "name": "Agent Versioning & Canary Rollout", "category": "core", "path": "agents/agent_factory/core/lifecycle.py", "status": "stable", "description": "Semantic agent version management, canary traffic splitting, and automated rollback on regression.", "exports": [ "CanaryDeploymentManager", "VersionedAgentRecord", "DeploymentStatus" ], "usage_example": "from agent_factory.core.lifecycle import CanaryDeploymentManager\ncanary = CanaryDeploymentManager()", "domain": "agents", "domain_name": "Autonomous AI Agents", "domain_icon": "\ud83e\udde0", "pull_command": "bash scripts/pull-module.sh agents/agent_factory/core/lifecycle.py", "framework": "Python / Typer / LLM Gateway" }, { "id": "memory.conversation", "name": "Conversation Engine & Multi-turn Threads", "category": "memory", "path": "agents/agent_factory/memory/conversation.py", "status": "stable", "description": "Multi-turn conversation management, message history formatting, and automated context compaction for large dialogues.", "exports": [ "ConversationEngine", "ConversationMessage", "ConversationThread" ], "usage_example": "from agent_factory.memory.conversation import ConversationEngine\nconv = ConversationEngine()\nconv.add_user_message('thread-1', 'Hello')", "domain": "agents", "domain_name": "Autonomous AI Agents", "domain_icon": "\ud83e\udde0", "pull_command": "bash scripts/pull-module.sh agents/agent_factory/memory/conversation.py", "framework": "Python / Typer / LLM Gateway" }, { "id": "memory.working", "name": "Working Memory & Scratchpad", "category": "memory", "path": "agents/agent_factory/memory/working.py", "status": "stable", "description": "Short-term scratchpad memory storing active goals, discovered findings, completed steps, and task scratchpad notes.", "exports": [ "WorkingMemory" ], "usage_example": "from agent_factory.memory.working import WorkingMemory\nwm = WorkingMemory(objective='Analyze data')\nwm.add_finding('Key insight found')", "domain": "agents", "domain_name": "Autonomous AI Agents", "domain_icon": "\ud83e\udde0", "pull_command": "bash scripts/pull-module.sh agents/agent_factory/memory/working.py", "framework": "Python / Typer / LLM Gateway" }, { "id": "memory.semantic", "name": "Semantic Memory & Vector Retrieval", "category": "memory", "path": "agents/agent_factory/memory/semantic.py", "status": "stable", "description": "In-memory semantic vector store, text chunking, and cosine similarity ranking for agent knowledge.", "exports": [ "SemanticMemory", "MemoryChunk", "SimpleEmbeddingProvider", "cosine_similarity" ], "usage_example": "from agent_factory.memory.semantic import SemanticMemory\nsm = SemanticMemory()\nawait sm.store('text document', metadata={'source': 'doc1'})\nresults = await sm.search('query', top_k=3)", "domain": "agents", "domain_name": "Autonomous AI Agents", "domain_icon": "\ud83e\udde0", "pull_command": "bash scripts/pull-module.sh agents/agent_factory/memory/semantic.py", "framework": "Python / Typer / LLM Gateway" }, { "id": "memory.episodic", "name": "Episodic Memory & Experience Learning", "category": "memory", "path": "agents/agent_factory/memory/episodic.py", "status": "stable", "description": "Stores historical task execution episodes, failures, successes, and derived lessons learned for future task improvement.", "exports": [ "EpisodicMemory", "Episode" ], "usage_example": "from agent_factory.memory.episodic import EpisodicMemory, Episode\nem = EpisodicMemory()\nem.record_episode(Episode(task='deploy', outcome='success', lessons=['always check env vars']))", "domain": "agents", "domain_name": "Autonomous AI Agents", "domain_icon": "\ud83e\udde0", "pull_command": "bash scripts/pull-module.sh agents/agent_factory/memory/episodic.py", "framework": "Python / Typer / LLM Gateway" }, { "id": "memory.rag", "name": "Hybrid RAG Engine (BM25 + Dense Vectors)", "category": "memory", "path": "agents/agent_factory/memory/rag.py", "status": "stable", "description": "Hybrid retrieval augmented generation combining lexical BM25 indexing with dense semantic vector search and reciprocal rank fusion.", "exports": [ "RAGEngine", "BM25Index", "KnowledgeBase", "RAGSearchResult" ], "usage_example": "from agent_factory.memory.rag import RAGEngine\nrag = RAGEngine()\nawait rag.ingest_documents([{'content': 'AI agent guide', 'id': 'doc1'}])\nresults = await rag.query('agent architecture')", "domain": "agents", "domain_name": "Autonomous AI Agents", "domain_icon": "\ud83e\udde0", "pull_command": "bash scripts/pull-module.sh agents/agent_factory/memory/rag.py", "framework": "Python / Typer / LLM Gateway" }, { "id": "memory.governance", "name": "Memory Governance, PII Redaction & Context Builder", "category": "memory", "path": "agents/agent_factory/memory/governance.py", "status": "stable", "description": "PII scrubbing (emails, credit cards, phones, SSNs), TTL retention pruning, and assembled context token budgeting.", "exports": [ "MemoryGovernance", "ContextBuilder" ], "usage_example": "from agent_factory.memory.governance import MemoryGovernance, ContextBuilder\nscrubbed = MemoryGovernance.redact_pii('Contact john@example.com')", "domain": "agents", "domain_name": "Autonomous AI Agents", "domain_icon": "\ud83e\udde0", "pull_command": "bash scripts/pull-module.sh agents/agent_factory/memory/governance.py", "framework": "Python / Typer / LLM Gateway" }, { "id": "tools.registry", "name": "Central Tool Registry & Dispatcher", "category": "tools", "path": "agents/agent_factory/tools/registry.py", "status": "stable", "description": "Central registry registering tools, generating standardized JSON tool schemas for LLMs, checking permissions, and dispatching execution.", "exports": [ "ToolRegistry" ], "usage_example": "from agent_factory.tools.registry import ToolRegistry\nregistry = ToolRegistry()\nregistry.register(my_tool)\nschemas = registry.get_schemas()", "domain": "agents", "domain_name": "Autonomous AI Agents", "domain_icon": "\ud83e\udde0", "pull_command": "bash scripts/pull-module.sh agents/agent_factory/tools/registry.py", "framework": "Python / Typer / LLM Gateway" }, { "id": "tools.base", "name": "Base Tool Contract & Specification", "category": "tools", "path": "agents/agent_factory/tools/base.py", "status": "stable", "description": "Abstract base class for all tools with JSON schema extraction, risk levels, and standardized ToolExecutionResult wrapper.", "exports": [ "BaseTool", "ToolExecutionResult" ], "usage_example": "from agent_factory.tools.base import BaseTool, ToolExecutionResult\nclass MyTool(BaseTool): ...", "domain": "agents", "domain_name": "Autonomous AI Agents", "domain_icon": "\ud83e\udde0", "pull_command": "bash scripts/pull-module.sh agents/agent_factory/tools/base.py", "framework": "Python / Typer / LLM Gateway" }, { "id": "tools.approval", "name": "Human Approval & HITL Workflows", "category": "tools", "path": "agents/agent_factory/tools/approval.py", "status": "stable", "description": "Human-in-the-loop approval queue intercepting HIGH and CRITICAL risk tool executions before dispatch.", "exports": [ "HumanApprovalQueue", "ApprovalRequest", "ApprovalStatus" ], "usage_example": "from agent_factory.tools.approval import HumanApprovalQueue\nqueue = HumanApprovalQueue()\nreq = queue.request_approval(tool_name='delete_database', args={...})", "domain": "agents", "domain_name": "Autonomous AI Agents", "domain_icon": "\ud83e\udde0", "pull_command": "bash scripts/pull-module.sh agents/agent_factory/tools/approval.py", "framework": "Python / Typer / LLM Gateway" }, { "id": "tools.builtins.search", "name": "Web Search Tool", "category": "tools", "path": "agents/agent_factory/tools/builtins/search.py", "status": "stable", "description": "Structured search tool for external information gathering with query parameters, filtering, and result summaries.", "exports": [ "WebSearchTool", "SearchInput", "SearchResultItem", "SearchOutput" ], "usage_example": "from agent_factory.tools.builtins.search import WebSearchTool\nsearch = WebSearchTool()\nresult = await search.execute(query='latest python features')", "domain": "agents", "domain_name": "Autonomous AI Agents", "domain_icon": "\ud83e\udde0", "pull_command": "bash scripts/pull-module.sh agents/agent_factory/tools/builtins/search.py", "framework": "Python / Typer / LLM Gateway" }, { "id": "tools.builtins.browser", "name": "Browser Action Tool with SSRF Defense", "category": "tools", "path": "agents/agent_factory/tools/builtins/browser.py", "status": "stable", "description": "Web browser automation tool with URL sanitization, domain allow/deny list, and private network SSRF defenses.", "exports": [ "BrowserTool", "BrowserActionInput", "BrowserActionOutput" ], "usage_example": "from agent_factory.tools.builtins.browser import BrowserTool\nbrowser = BrowserTool()\npage = await browser.execute(url='https://example.com')", "domain": "agents", "domain_name": "Autonomous AI Agents", "domain_icon": "\ud83e\udde0", "pull_command": "bash scripts/pull-module.sh agents/agent_factory/tools/builtins/browser.py", "framework": "Python / Typer / LLM Gateway" }, { "id": "tools.builtins.code_exec", "name": "Hardened Python Sandbox Tool", "category": "tools", "path": "agents/agent_factory/tools/builtins/code_exec.py", "status": "stable", "description": "AST-inspected, isolated Python code execution tool restricting dangerous builtins, modules, and excessive CPU/memory runtime.", "exports": [ "PythonSandboxTool", "CodeExecutionInput", "CodeExecutionOutput" ], "usage_example": "from agent_factory.tools.builtins.code_exec import PythonSandboxTool\nsandbox = PythonSandboxTool()\nres = await sandbox.execute(code='result = [x**2 for x in range(10)]')", "domain": "agents", "domain_name": "Autonomous AI Agents", "domain_icon": "\ud83e\udde0", "pull_command": "bash scripts/pull-module.sh agents/agent_factory/tools/builtins/code_exec.py", "framework": "Python / Typer / LLM Gateway" }, { "id": "tools.builtins.files", "name": "Document & File Processing Tool", "category": "tools", "path": "agents/agent_factory/tools/builtins/files.py", "status": "stable", "description": "File parser and reader supporting text, markdown, CSV, JSON, and PDF text extraction with strict path traversal prevention.", "exports": [ "FileProcessingTool", "FileParseInput", "FileParseOutput" ], "usage_example": "from agent_factory.tools.builtins.files import FileProcessingTool\nfiles = FileProcessingTool()\ncontent = await files.execute(file_path='data/report.json')", "domain": "agents", "domain_name": "Autonomous AI Agents", "domain_icon": "\ud83e\udde0", "pull_command": "bash scripts/pull-module.sh agents/agent_factory/tools/builtins/files.py", "framework": "Python / Typer / LLM Gateway" }, { "id": "orchestration.planner", "name": "Planning Engine & Task Decomposition", "category": "orchestration", "path": "agents/agent_factory/orchestration/planner.py", "status": "stable", "description": "Breaks complex user goals into sequential/parallel dependency DAG steps, handles dynamic re-planning on step failures.", "exports": [ "PlanningEngine", "Plan", "PlanStep" ], "usage_example": "from agent_factory.orchestration.planner import PlanningEngine\nplanner = PlanningEngine(gateway=gateway)\nplan = await planner.create_plan('Build customer support workflow')", "domain": "agents", "domain_name": "Autonomous AI Agents", "domain_icon": "\ud83e\udde0", "pull_command": "bash scripts/pull-module.sh agents/agent_factory/orchestration/planner.py", "framework": "Python / Typer / LLM Gateway" }, { "id": "orchestration.workflow", "name": "Workflow Execution Engine (DAG Orchestrator)", "category": "orchestration", "path": "agents/agent_factory/orchestration/workflow.py", "status": "stable", "description": "Directed acyclic graph execution engine supporting parallel branches, dependency resolution, error traps, and conditional routing.", "exports": [ "WorkflowEngine" ], "usage_example": "from agent_factory.orchestration.workflow import WorkflowEngine\nengine = WorkflowEngine()\nres = await engine.execute_dag(dag_definition)", "domain": "agents", "domain_name": "Autonomous AI Agents", "domain_icon": "\ud83e\udde0", "pull_command": "bash scripts/pull-module.sh agents/agent_factory/orchestration/workflow.py", "framework": "Python / Typer / LLM Gateway" }, { "id": "orchestration.multi_agent", "name": "Multi-Agent Orchestration & Supervisor", "category": "orchestration", "path": "agents/agent_factory/orchestration/multi_agent.py", "status": "stable", "description": "Agent-to-agent communication protocol, message passing, peer collaboration, and hierarchical supervisor orchestration.", "exports": [ "MultiAgentOrchestrator", "SupervisorAgent", "AgentMessage", "AgentMessageType" ], "usage_example": "from agent_factory.orchestration.multi_agent import MultiAgentOrchestrator, SupervisorAgent\nsupervisor = SupervisorAgent(workers=[worker1, worker2])", "domain": "agents", "domain_name": "Autonomous AI Agents", "domain_icon": "\ud83e\udde0", "pull_command": "bash scripts/pull-module.sh agents/agent_factory/orchestration/multi_agent.py", "framework": "Python / Typer / LLM Gateway" }, { "id": "orchestration.events", "name": "Event Bus, Trigger Engine & Job Queue", "category": "orchestration", "path": "agents/agent_factory/orchestration/events.py", "status": "stable", "description": "Asynchronous publish-subscribe event bus, event triggers for automated agent dispatch, and background job queuing.", "exports": [ "EventBus", "BackgroundJobQueue", "AgentEvent" ], "usage_example": "from agent_factory.orchestration.events import EventBus, AgentEvent\nbus = EventBus()\nbus.subscribe('order.created', handler_fn)", "domain": "agents", "domain_name": "Autonomous AI Agents", "domain_icon": "\ud83e\udde0", "pull_command": "bash scripts/pull-module.sh agents/agent_factory/orchestration/events.py", "framework": "Python / Typer / LLM Gateway" }, { "id": "validation.structured", "name": "Structured Output Engine & Schema Enforcer", "category": "validation", "path": "agents/agent_factory/validation/structured.py", "status": "stable", "description": "Extracts and validates JSON outputs against Pydantic models, automatically repairing broken JSON and syntax mismatches.", "exports": [ "StructuredOutputEngine" ], "usage_example": "from agent_factory.validation.structured import StructuredOutputEngine\nvalidator = StructuredOutputEngine()\nmodel_obj = validator.parse_and_validate(raw_llm_text, target_pydantic_cls)", "domain": "agents", "domain_name": "Autonomous AI Agents", "domain_icon": "\ud83e\udde0", "pull_command": "bash scripts/pull-module.sh agents/agent_factory/validation/structured.py", "framework": "Python / Typer / LLM Gateway" }, { "id": "validation.verification", "name": "Self-Verification & Fact Checking", "category": "validation", "path": "agents/agent_factory/validation/verification.py", "status": "stable", "description": "Multi-pass verification validating LLM responses against source material, checking hallucinations and factual alignment.", "exports": [ "SelfVerificationEngine", "VerificationResult", "FactVerificationItem" ], "usage_example": "from agent_factory.validation.verification import SelfVerificationEngine\nverifier = SelfVerificationEngine(gateway=gateway)\nresult = await verifier.verify_claims(answer, context_docs)", "domain": "agents", "domain_name": "Autonomous AI Agents", "domain_icon": "\ud83e\udde0", "pull_command": "bash scripts/pull-module.sh agents/agent_factory/validation/verification.py", "framework": "Python / Typer / LLM Gateway" }, { "id": "validation.citations", "name": "Citation Engine & Source Provenance", "category": "validation", "path": "agents/agent_factory/validation/citations.py", "status": "stable", "description": "Maps claims and generated statements back to verified document source IDs, line ranges, or URLs.", "exports": [ "CitationEngine", "Citation" ], "usage_example": "from agent_factory.validation.citations import CitationEngine\ncitations = CitationEngine()\nannotated = citations.link_citations(generated_text, retrieved_sources)", "domain": "agents", "domain_name": "Autonomous AI Agents", "domain_icon": "\ud83e\udde0", "pull_command": "bash scripts/pull-module.sh agents/agent_factory/validation/citations.py", "framework": "Python / Typer / LLM Gateway" }, { "id": "observability.tracer", "name": "Distributed Tracing & Span Trees", "category": "observability", "path": "agents/agent_factory/observability/tracer.py", "status": "stable", "description": "Hierarchical span tracing for agent thought loops, LLM calls, tool executions, and timing diagnostics.", "exports": [ "Tracer", "Span" ], "usage_example": "from agent_factory.observability.tracer import Tracer\ntracer = Tracer()\nwith tracer.start_span('agent_step'): ...", "domain": "agents", "domain_name": "Autonomous AI Agents", "domain_icon": "\ud83e\udde0", "pull_command": "bash scripts/pull-module.sh agents/agent_factory/observability/tracer.py", "framework": "Python / Typer / LLM Gateway" }, { "id": "observability.audit", "name": "Security Audit Logging", "category": "observability", "path": "agents/agent_factory/observability/audit.py", "status": "stable", "description": "Tamper-evident audit logging for tool executions, privilege elevations, policy rejections, and access logs.", "exports": [ "AuditLogger", "AuditRecord" ], "usage_example": "from agent_factory.observability.audit import AuditLogger\naudit = AuditLogger()\naudit.log_event(action='tool_call', user_id='usr_123', risk='MEDIUM')", "domain": "agents", "domain_name": "Autonomous AI Agents", "domain_icon": "\ud83e\udde0", "pull_command": "bash scripts/pull-module.sh agents/agent_factory/observability/audit.py", "framework": "Python / Typer / LLM Gateway" }, { "id": "observability.metrics", "name": "Operational Metrics & Analytics", "category": "observability", "path": "agents/agent_factory/observability/metrics.py", "status": "stable", "description": "Tracks latency distributions, token usage, tool success/failure ratios, and cost velocity.", "exports": [ "AgentAnalytics", "AgentAnalyticsSnapshot" ], "usage_example": "from agent_factory.observability.metrics import AgentAnalytics\nanalytics = AgentAnalytics()\nsnapshot = analytics.get_snapshot()", "domain": "agents", "domain_name": "Autonomous AI Agents", "domain_icon": "\ud83e\udde0", "pull_command": "bash scripts/pull-module.sh agents/agent_factory/observability/metrics.py", "framework": "Python / Typer / LLM Gateway" }, { "id": "evaluation.dataset", "name": "Golden Evaluation Datasets & Test Cases", "category": "evaluation", "path": "agents/agent_factory/evaluation/dataset.py", "status": "stable", "description": "Golden test case schema, expected outputs, ground truth rubrics, and dataset serialization.", "exports": [ "GoldenDataset", "TestCase" ], "usage_example": "from agent_factory.evaluation.dataset import GoldenDataset, TestCase\nds = GoldenDataset(name='qa_tests')\nds.add_test(TestCase(prompt='...', expected='...'))", "domain": "agents", "domain_name": "Autonomous AI Agents", "domain_icon": "\ud83e\udde0", "pull_command": "bash scripts/pull-module.sh agents/agent_factory/evaluation/dataset.py", "framework": "Python / Typer / LLM Gateway" }, { "id": "evaluation.judge", "name": "LLM-as-Judge & Rubric Scoring", "category": "evaluation", "path": "agents/agent_factory/evaluation/judge.py", "status": "stable", "description": "Automated qualitative evaluation scoring agent outputs on accuracy, clarity, safety, and helpfulness (1-5 scale).", "exports": [ "LLMAsJudge", "JudgeScorecard" ], "usage_example": "from agent_factory.evaluation.judge import LLMAsJudge\njudge = LLMAsJudge(gateway=gateway)\nscorecard = await judge.evaluate(prompt, response, ground_truth)", "domain": "agents", "domain_name": "Autonomous AI Agents", "domain_icon": "\ud83e\udde0", "pull_command": "bash scripts/pull-module.sh agents/agent_factory/evaluation/judge.py", "framework": "Python / Typer / LLM Gateway" }, { "id": "evaluation.regression", "name": "Regression Benchmark Runner", "category": "evaluation", "path": "agents/agent_factory/evaluation/regression.py", "status": "stable", "description": "Automated benchmark suite running GoldenDatasets against agent instances and generating pass/fail reports.", "exports": [ "RegressionRunner", "BenchmarkReport", "CaseEvaluationReport" ], "usage_example": "from agent_factory.evaluation.regression import RegressionRunner\nrunner = RegressionRunner(agent_instance)\nreport = await runner.run_benchmark(golden_dataset)", "domain": "agents", "domain_name": "Autonomous AI Agents", "domain_icon": "\ud83e\udde0", "pull_command": "bash scripts/pull-module.sh agents/agent_factory/evaluation/regression.py", "framework": "Python / Typer / LLM Gateway" }, { "id": "api.server", "name": "Production FastAPI Agent Server", "category": "api", "path": "agents/agent_factory/api/server.py", "status": "stable", "description": "REST API, Server-Sent Events (SSE) streaming endpoint, and webhook callback integration for agents.", "exports": [ "RunAgentRequest", "RunAgentResponse", "ResolveApprovalRequest" ], "usage_example": "import uvicorn\n# Run with: uvicorn agent_factory.api.server:app --port 8000", "domain": "agents", "domain_name": "Autonomous AI Agents", "domain_icon": "\ud83e\udde0", "pull_command": "bash scripts/pull-module.sh agents/agent_factory/api/server.py", "framework": "Python / Typer / LLM Gateway" }, { "id": "api.auth", "name": "API Auth, Tenant Resolution & HMAC Webhooks", "category": "api", "path": "agents/agent_factory/api/auth.py", "status": "stable", "description": "Bearer token authentication, multi-tenant isolation, rate limiting, and HMAC signature verification for webhooks.", "exports": [ "RateLimiter", "verify_webhook_signature" ], "usage_example": "from agent_factory.api.auth import RateLimiter, verify_webhook_signature\nlimiter = RateLimiter(requests_per_minute=60)", "domain": "agents", "domain_name": "Autonomous AI Agents", "domain_icon": "\ud83e\udde0", "pull_command": "bash scripts/pull-module.sh agents/agent_factory/api/auth.py", "framework": "Python / Typer / LLM Gateway" }, { "id": "templates.research_agent", "name": "Deep Research Agent Template", "category": "templates", "path": "agents/templates/research_agent.py", "status": "stable", "description": "Pre-configured ready-to-run Deep Web Search, Fact-Checking, and Citation Research Agent.", "exports": [ "create_research_agent" ], "usage_example": "from templates.research_agent import create_research_agent\nagent = create_research_agent()\nresult = await agent.run('Investigate latest quantum computing breakthroughs')", "domain": "agents", "domain_name": "Autonomous AI Agents", "domain_icon": "\ud83e\udde0", "pull_command": "bash scripts/pull-module.sh agents/templates/research_agent.py", "framework": "Python / Typer / LLM Gateway" }, { "id": "templates.content_agent", "name": "Content Strategy Agent Template", "category": "templates", "path": "agents/templates/content_agent.py", "status": "stable", "description": "Pre-configured Content Strategy, Tone-of-Voice, and SEO Writing Agent.", "exports": [ "create_content_agent" ], "usage_example": "from templates.content_agent import create_content_agent\nagent = create_content_agent()\nresult = await agent.run('Draft product announcement blog post')", "domain": "agents", "domain_name": "Autonomous AI Agents", "domain_icon": "\ud83e\udde0", "pull_command": "bash scripts/pull-module.sh agents/templates/content_agent.py", "framework": "Python / Typer / LLM Gateway" }, { "id": "templates.coding_agent", "name": "Data Analysis & Coding Agent Template", "category": "templates", "path": "agents/templates/coding_agent.py", "status": "stable", "description": "Pre-configured Python Sandbox, Data Analysis, and Code Execution Agent.", "exports": [ "create_coding_agent" ], "usage_example": "from templates.coding_agent import create_coding_agent\nagent = create_coding_agent()\nresult = await agent.run('Calculate summary statistics from dataset')", "domain": "agents", "domain_name": "Autonomous AI Agents", "domain_icon": "\ud83e\udde0", "pull_command": "bash scripts/pull-module.sh agents/templates/coding_agent.py", "framework": "Python / Typer / LLM Gateway" }, { "id": "mod_01_product_idea_engine", "number": 1, "name": "Module 01: Product Idea Engine", "category": "architecture_and_auth", "platform": "flutter", "path": "apps/modules/mod_01_product_idea_engine", "description": "The **Product Idea Engine** ensures that every app built in the factory undergoes strict market validation, scoring, and lifecycle tracking before writing any code.", "capabilities": [ "**Strict Validation Rubric**: Evaluates market demand, competition density, willingness to pay, and technical feasibility.", "**Finite State Machine**: Tracks app stages from `idea` -> `market_research` -> `mvp_definition` -> `launch` -> `scale`.", "**Zero Hallucination Scorecard**: Computes composite viability scores (0-100) with pass/fail gates." ], "tags": [ "starter", "architecture", "config", "pkce", "tokens", "oauth", "product_idea_engine", "auth", "rbac" ], "status": "production-ready", "has_tests": true, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_01_product_idea_engine", "framework": "flutter" }, { "id": "mod_02_tech_stack_standard", "number": 2, "name": "Module 02: Tech Stack Standard", "category": "architecture_and_auth", "platform": "flutter", "path": "apps/modules/mod_02_tech_stack_standard", "description": "Enforces zero-tolerance architecture rules and Dart linter configurations for all apps in the factory.", "capabilities": [], "tags": [ "starter", "architecture", "config", "pkce", "tokens", "oauth", "tech_stack_standard", "auth", "rbac" ], "status": "production-ready", "has_tests": true, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_02_tech_stack_standard", "framework": "flutter" }, { "id": "mod_03_app_starter_template", "number": 3, "name": "Module 03: App Starter Template", "category": "architecture_and_auth", "platform": "flutter", "path": "apps/modules/mod_03_app_starter_template", "description": "The foundation scaffold for any new app generated in the factory. It enforces Clean Architecture folders:", "capabilities": [], "tags": [ "starter", "architecture", "app_starter_template", "config", "pkce", "tokens", "oauth", "auth", "rbac" ], "status": "production-ready", "has_tests": true, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_03_app_starter_template", "framework": "flutter" }, { "id": "mod_04_core_architecture", "number": 4, "name": "Module 04: Core Mobile Architecture", "category": "architecture_and_auth", "platform": "flutter", "path": "apps/modules/mod_04_core_architecture", "description": "Defines Clean Architecture primitives ensuring complete separation of concerns:", "capabilities": [ "`Result` functional pattern (zero unhandled exceptions)", "`BaseUseCase` for business rules", "`BaseRepository` contracts" ], "tags": [ "starter", "architecture", "core_architecture", "config", "pkce", "tokens", "oauth", "auth", "rbac" ], "status": "production-ready", "has_tests": true, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_04_core_architecture", "framework": "flutter" }, { "id": "mod_05_app_config_system", "number": 5, "name": "Module 05: App Configuration System", "category": "architecture_and_auth", "platform": "flutter", "path": "apps/modules/mod_05_app_config_system", "description": "Manages per-app configuration and flavors:", "capabilities": [ "`Environment.dev`, `Environment.staging`, `Environment.production`", "Immutable, strongly typed config objects", "Strict validation preventing missing production keys" ], "tags": [ "starter", "architecture", "config", "app_config_system", "pkce", "tokens", "oauth", "auth", "rbac" ], "status": "production-ready", "has_tests": true, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_05_app_config_system", "framework": "flutter" }, { "id": "mod_06_android_identity", "number": 6, "name": "Module 06: Android Identity", "category": "architecture_and_auth", "platform": "python", "path": "apps/modules/mod_06_android_identity", "description": "Provides templates and scripts for hardening Android application identity, signing, and security:", "capabilities": [ "Secure `build.gradle.kts` configuration template", "Obfuscation with ProGuard / R8 rules", "`network_security_config.xml` with cleartext traffic disabled & certificate pinning", "Automated keystore generation & validation scripts" ], "tags": [ "starter", "architecture", "android_identity", "config", "pkce", "tokens", "oauth", "auth", "rbac" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_06_android_identity", "framework": "python" }, { "id": "mod_07_ios_identity", "number": 7, "name": "Module 07: iOS Identity", "category": "architecture_and_auth", "platform": "python", "path": "apps/modules/mod_07_ios_identity", "description": "Provides standardized configuration, security hardening, and entitlements for iOS:", "capabilities": [ "Strict `Info.plist` with App Transport Security (ATS) cleartext traffic blocked", "Entitlements template with Keychain Sharing, Associated Domains, and Push Notifications", "Fastlane Match signing workflow" ], "tags": [ "starter", "architecture", "ios_identity", "config", "pkce", "tokens", "oauth", "auth", "rbac" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_07_ios_identity", "framework": "python" }, { "id": "mod_08_environment_system", "number": 8, "name": "Module 08: Environment System", "category": "architecture_and_auth", "platform": "flutter", "path": "apps/modules/mod_08_environment_system", "description": "Manages environment configuration across `.env.dev`, `.env.staging`, and `.env.prod`.", "capabilities": [ "Secrets are decrypted at runtime or injected via compile-time `--dart-define`", "Validates that mandatory keys are present before app execution" ], "tags": [ "starter", "architecture", "config", "pkce", "tokens", "oauth", "environment_system", "auth", "rbac" ], "status": "production-ready", "has_tests": true, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_08_environment_system", "framework": "flutter" }, { "id": "mod_09_auth_module", "number": 9, "name": "Module 09: Authentication Module", "category": "architecture_and_auth", "platform": "flutter", "path": "apps/modules/mod_09_auth_module", "description": "Production-grade authentication engine designed with zero-trust principles:", "capabilities": [ "**PKCE OAuth2 Flow**: Code verifier and challenge generation", "**Token Rotation**: Anti-replay token rotation engine", "**Pluggable Identity Providers**: Email, Google, Apple, Anonymous", "**Secure Token Storage Interface**: Backed by hardware keystore" ], "tags": [ "starter", "architecture", "config", "pkce", "tokens", "oauth", "auth_module", "auth", "rbac" ], "status": "production-ready", "has_tests": true, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_09_auth_module", "framework": "flutter" }, { "id": "mod_10_authorization_system", "number": 10, "name": "Module 10: Authorization System", "category": "architecture_and_auth", "platform": "flutter", "path": "apps/modules/mod_10_authorization_system", "description": "Enforces Zero-Trust authorization principles:", "capabilities": [ "The mobile app verifies claims locally for UI visibility, but server is always source of truth.", "RBAC role check: `UserRole.free`, `UserRole.subscriber`, `UserRole.admin`.", "Granular permissions: `Permission.createProject`, `Permission.exportData`, `Permission.accessAi`." ], "tags": [ "starter", "architecture", "config", "pkce", "tokens", "oauth", "auth", "rbac", "authorization_system" ], "status": "production-ready", "has_tests": true, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_10_authorization_system", "framework": "flutter" }, { "id": "mod_11_local_data_system", "number": 11, "name": "Module 11: Local Data System", "category": "data_and_design", "platform": "flutter", "path": "apps/modules/mod_11_local_data_system", "description": "Provides encrypted key-value and relational local persistence:", "capabilities": [ "SQLCipher / Encrypted SQLite interface", "Hardware Keystore / KeyChain backed 256-bit encryption key derivation", "In-memory test mock for rapid unit testing" ], "tags": [ "offline-sync", "api", "http", "design-system", "responsive", "sqlcipher", "sqlite", "tokens", "dark-mode", "local_data_system", "accessibility" ], "status": "production-ready", "has_tests": true, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_11_local_data_system", "framework": "flutter" }, { "id": "mod_12_offline_first_sync", "number": 12, "name": "Module 12: Offline-First Architecture", "category": "data_and_design", "platform": "flutter", "path": "apps/modules/mod_12_offline_first_sync", "description": "Implements the **Outbox Pattern** for robust offline mobile operations:", "capabilities": [ "Queues write mutations when device is disconnected", "Dispatches transactions with UUIDv4 idempotency keys when connection restores", "Conflict resolution strategies: `lastWriteWins`, `serverAuthoritative`, `clientWins`" ], "tags": [ "offline-sync", "api", "http", "design-system", "offline_first_sync", "responsive", "sqlcipher", "sqlite", "tokens", "dark-mode", "accessibility" ], "status": "production-ready", "has_tests": true, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_12_offline_first_sync", "framework": "flutter" }, { "id": "mod_13_api_layer", "number": 13, "name": "Module 13: API Layer", "category": "data_and_design", "platform": "flutter", "path": "apps/modules/mod_13_api_layer", "description": "Standardized HTTP client engine for the entire factory:", "capabilities": [ "Standardized API Response Envelope: `ApiResponse` with `success`, `data`, `error`", "Retry logic with exponential backoff & jitter", "Authentication token injection & automatic 401 refresh handler" ], "tags": [ "offline-sync", "api_layer", "api", "http", "design-system", "responsive", "sqlcipher", "sqlite", "tokens", "dark-mode", "accessibility" ], "status": "production-ready", "has_tests": true, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_13_api_layer", "framework": "flutter" }, { "id": "mod_14_error_handling", "number": 14, "name": "Module 14: Error-Handling System", "category": "data_and_design", "platform": "flutter", "path": "apps/modules/mod_14_error_handling", "description": "Centralized error handling and security sanitization:", "capabilities": [ "Prevents sensitive stack traces, SQL errors, or backend addresses from leaking to the user.", "Maps low-level exceptions (HTTP 500, SocketException, Timeout) to user-friendly messages." ], "tags": [ "offline-sync", "api", "http", "design-system", "responsive", "sqlcipher", "sqlite", "tokens", "dark-mode", "accessibility", "error_handling" ], "status": "production-ready", "has_tests": true, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_14_error_handling", "framework": "flutter" }, { "id": "mod_15_state_management", "number": 15, "name": "Module 15: State Management", "category": "data_and_design", "platform": "flutter", "path": "apps/modules/mod_15_state_management", "description": "Defines a strict state pattern to prevent ad-hoc boolean flags:", "capabilities": [ "`UiState`: `Initial`, `Loading`, `Success`, `Empty`, `Error`, `Offline`, `Refreshing`", "Enforces exhaustive UI rendering via `when(...)` pattern matching." ], "tags": [ "offline-sync", "api", "http", "design-system", "responsive", "sqlcipher", "sqlite", "tokens", "dark-mode", "state_management", "accessibility" ], "status": "production-ready", "has_tests": true, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_15_state_management", "framework": "flutter" }, { "id": "mod_16_design_system", "number": 16, "name": "Module 16: Design System", "category": "data_and_design", "platform": "flutter", "path": "apps/modules/mod_16_design_system", "description": "Internal mobile design system specification providing standard reusable UI primitives:", "capabilities": [ "`AppButton` (Primary, Secondary, Destructive, Ghost, with loading states)", "`AppCard` (Elevated, Outlined, Flat)", "`AppTextField` (With validation, clear button, obscure toggle)", "`AppSkeleton` (Shimmer loading placeholder)" ], "tags": [ "offline-sync", "api", "design_system", "http", "design-system", "responsive", "sqlcipher", "sqlite", "tokens", "dark-mode", "accessibility" ], "status": "production-ready", "has_tests": true, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_16_design_system", "framework": "flutter" }, { "id": "mod_17_design_tokens", "number": 17, "name": "Module 17: Design Token System", "category": "data_and_design", "platform": "flutter", "path": "apps/modules/mod_17_design_tokens", "description": "Centralized design tokens ensuring visual harmony and ultra-fast re-theming across 100+ apps.", "capabilities": [ "`AppSpacing`: `xs` (4), `sm` (8), `md` (16), `lg` (24), `xl` (32), `xxl` (48)", "`AppRadius`: `sm` (4), `md` (8), `lg` (16), `full` (999)", "`AppElevation`: standard elevation values" ], "tags": [ "offline-sync", "api", "http", "design-system", "responsive", "sqlcipher", "sqlite", "tokens", "dark-mode", "design_tokens", "accessibility" ], "status": "production-ready", "has_tests": true, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_17_design_tokens", "framework": "flutter" }, { "id": "mod_18_responsive_ui", "number": 18, "name": "Module 18: Responsive UI", "category": "data_and_design", "platform": "flutter", "path": "apps/modules/mod_18_responsive_ui", "description": "Adaptive layout breakpoints:", "capabilities": [ "`DeviceType.compact` (< 600 dp: standard phones)", "`DeviceType.medium` (600 - 840 dp: foldables & small tablets)", "`DeviceType.expanded` (> 840 dp: tablets & desktop)" ], "tags": [ "offline-sync", "api", "responsive_ui", "http", "design-system", "responsive", "sqlcipher", "sqlite", "tokens", "dark-mode", "accessibility" ], "status": "production-ready", "has_tests": true, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_18_responsive_ui", "framework": "flutter" }, { "id": "mod_19_accessibility", "number": 19, "name": "Module 19: Accessibility (A11y)", "category": "data_and_design", "platform": "flutter", "path": "apps/modules/mod_19_accessibility", "description": "Enforces accessibility guidelines across the factory:", "capabilities": [ "Minimum touch target: 48x48 dp", "WCAG 2.1 AA and AAA contrast ratio verification" ], "tags": [ "offline-sync", "api", "http", "design-system", "responsive", "sqlcipher", "sqlite", "tokens", "dark-mode", "accessibility" ], "status": "production-ready", "has_tests": true, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_19_accessibility", "framework": "flutter" }, { "id": "mod_20_dark_mode", "number": 20, "name": "Module 20: Dark Mode & Dynamic Theme", "category": "data_and_design", "platform": "flutter", "path": "apps/modules/mod_20_dark_mode", "description": "Dynamic theme switcher supporting:", "capabilities": [ "`ThemePreference.system`, `ThemePreference.light`, `ThemePreference.dark`, `ThemePreference.amoled`" ], "tags": [ "offline-sync", "api", "http", "design-system", "responsive", "sqlcipher", "sqlite", "tokens", "dark-mode", "accessibility", "dark_mode" ], "status": "production-ready", "has_tests": true, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_20_dark_mode", "framework": "flutter" }, { "id": "mod_21_device_features", "number": 21, "name": "Module 21: Device Features Module", "category": "hardware_ai_and_monetization", "platform": "flutter", "path": "apps/modules/mod_21_device_features", "description": "Standardized native device bridges:", "capabilities": [ "`HapticService`: Heavy, medium, light, selection feedback", "`ClipboardService`: Secure clipboard copy/paste with auto-clear after 60s for sensitive credentials", "`BiometricService`: Hardware-level biometric check contract" ], "tags": [ "permissions", "subscriptions", "storekit", "push-notifications", "device_features", "google-play", "analytics", "ai-client", "crashlytics", "haptics", "llm-cost", "in-app-purchase", "biometrics" ], "status": "production-ready", "has_tests": true, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_21_device_features", "framework": "flutter" }, { "id": "mod_22_permission_architecture", "number": 22, "name": "Module 22: Permission Architecture", "category": "hardware_ai_and_monetization", "platform": "flutter", "path": "apps/modules/mod_22_permission_architecture", "description": "Enforces the Golden Rule of Mobile Permissions:", "capabilities": [ "Never request permissions on cold launch.", "Present a contextual rationale explaining the user value first.", "Handle `granted`, `denied`, `permanentlyDenied`, and `restricted` gracefully." ], "tags": [ "permissions", "subscriptions", "storekit", "push-notifications", "google-play", "analytics", "ai-client", "crashlytics", "haptics", "llm-cost", "in-app-purchase", "biometrics", "permission_architecture" ], "status": "production-ready", "has_tests": true, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_22_permission_architecture", "framework": "flutter" }, { "id": "mod_23_push_notifications", "number": 23, "name": "Module 23: Push Notifications", "category": "hardware_ai_and_monetization", "platform": "flutter", "path": "apps/modules/mod_23_push_notifications", "description": "Handles notifications across Android (FCM) and iOS (APNs):", "capabilities": [ "Token registration & automatic refresh sync", "Foreground, background, and cold start tap handling", "Deep link routing via payload parameters" ], "tags": [ "permissions", "subscriptions", "storekit", "push-notifications", "google-play", "analytics", "ai-client", "crashlytics", "haptics", "llm-cost", "in-app-purchase", "biometrics", "push_notifications" ], "status": "production-ready", "has_tests": true, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_23_push_notifications", "framework": "flutter" }, { "id": "mod_24_analytics", "number": 24, "name": "Module 24: Analytics", "category": "hardware_ai_and_monetization", "platform": "flutter", "path": "apps/modules/mod_24_analytics", "description": "Privacy-centric event dispatcher:", "capabilities": [ "Strictly scrubs PII (emails, passwords, phone numbers, auth tokens)", "Pluggable providers (PostHog, Mixpanel, Firebase, Amplitude)", "Consent mode gatekeeper (requires user consent under GDPR)" ], "tags": [ "permissions", "subscriptions", "storekit", "push-notifications", "google-play", "analytics", "ai-client", "crashlytics", "haptics", "llm-cost", "in-app-purchase", "biometrics" ], "status": "production-ready", "has_tests": true, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_24_analytics", "framework": "flutter" }, { "id": "mod_25_crash_monitoring", "number": 25, "name": "Module 25: Crash Monitoring", "category": "hardware_ai_and_monetization", "platform": "flutter", "path": "apps/modules/mod_25_crash_monitoring", "description": "Standardized error reporting:", "capabilities": [ "Captures unhandled asynchronous Dart zone errors", "Adds structured breadcrumbs (navigation, button taps, network requests)", "Scrubs sensitive authorization headers before submitting reports" ], "tags": [ "permissions", "subscriptions", "storekit", "push-notifications", "crash_monitoring", "google-play", "analytics", "ai-client", "crashlytics", "haptics", "llm-cost", "in-app-purchase", "biometrics" ], "status": "production-ready", "has_tests": true, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_25_crash_monitoring", "framework": "flutter" }, { "id": "mod_26_performance_monitoring", "number": 26, "name": "Module 26: Performance Monitoring", "category": "hardware_ai_and_monetization", "platform": "flutter", "path": "apps/modules/mod_26_performance_monitoring", "description": "Tracks mobile performance KPIs:", "capabilities": [ "Cold and warm startup duration", "Screen transition rendering time", "Network request latency" ], "tags": [ "permissions", "subscriptions", "storekit", "push-notifications", "performance_monitoring", "google-play", "analytics", "ai-client", "crashlytics", "haptics", "llm-cost", "in-app-purchase", "biometrics" ], "status": "production-ready", "has_tests": true, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_26_performance_monitoring", "framework": "flutter" }, { "id": "mod_27_ai_client_module", "number": 27, "name": "Module 27: AI Client Module", "category": "hardware_ai_and_monetization", "platform": "flutter", "path": "apps/modules/mod_27_ai_client_module", "description": "Client-side AI integration:", "capabilities": [ "Never includes sensitive raw AI provider keys in client binary.", "Routes all AI requests through `mod_28_ai_cost_gateway`.", "Supports Server-Sent Events (SSE) streaming for typing animations." ], "tags": [ "permissions", "subscriptions", "storekit", "push-notifications", "ai_client_module", "google-play", "analytics", "ai-client", "crashlytics", "haptics", "llm-cost", "in-app-purchase", "biometrics" ], "status": "production-ready", "has_tests": true, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_27_ai_client_module", "framework": "flutter" }, { "id": "mod_28_ai_cost_gateway", "number": 28, "name": "Module 28: AI Cost Control & Gateway", "category": "hardware_ai_and_monetization", "platform": "flutter", "path": "apps/modules/mod_28_ai_cost_gateway", "description": "Protects profitability and prevents abuse:", "capabilities": [ "Token quotas per user tier (Free: 5/day, Pro: 100/day, Unlimited: 500/day)", "Rate limiting using Token Bucket algorithm", "Automatic model fallback (Claude 3.5 Sonnet -> GPT-4o -> Gemini 1.5 Flash)" ], "tags": [ "permissions", "subscriptions", "storekit", "push-notifications", "google-play", "analytics", "ai-client", "crashlytics", "haptics", "llm-cost", "ai_cost_gateway", "in-app-purchase", "biometrics" ], "status": "production-ready", "has_tests": true, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_28_ai_cost_gateway", "framework": "flutter" }, { "id": "mod_29_subscription_system", "number": 29, "name": "Module 29: Subscription System", "category": "hardware_ai_and_monetization", "platform": "flutter", "path": "apps/modules/mod_29_subscription_system", "description": "Cross-platform subscription management:", "capabilities": [ "Tier abstraction: `Tier.free`, `Tier.monthlyPro`, `Tier.annualPro`, `Tier.lifetime`", "Never relies on local boolean flags alone; validates with server receipts" ], "tags": [ "permissions", "subscriptions", "storekit", "push-notifications", "subscription_system", "google-play", "analytics", "ai-client", "crashlytics", "haptics", "llm-cost", "in-app-purchase", "biometrics" ], "status": "production-ready", "has_tests": true, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_29_subscription_system", "framework": "flutter" }, { "id": "mod_30_purchase_security", "number": 30, "name": "Module 30: Purchase Security", "category": "hardware_ai_and_monetization", "platform": "flutter", "path": "apps/modules/mod_30_purchase_security", "description": "Prevents in-app purchase piracy and tampering:", "capabilities": [ "Server-side cryptographic verification of Google Play and Apple App Store receipts", "Webhook signature validation (HMAC SHA-256)", "Anti-tamper validation prevents client-side binary modification" ], "tags": [ "permissions", "subscriptions", "storekit", "push-notifications", "purchase_security", "google-play", "analytics", "ai-client", "crashlytics", "haptics", "llm-cost", "in-app-purchase", "biometrics" ], "status": "production-ready", "has_tests": true, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_30_purchase_security", "framework": "flutter" }, { "id": "mod_31_ads_module", "number": 31, "name": "Module 31: Ads Module", "category": "growth_and_security", "platform": "flutter", "path": "apps/modules/mod_31_ads_module", "description": "Advertising infrastructure:", "capabilities": [ "Supports Banner, Interstitial, and Rewarded ads", "Dynamic remote switch (`ads_enabled = false` for subscribers)", "Frequency capping prevents user fatigue" ], "tags": [ "lifecycle", "ads", "feature-flags", "ads_module", "viral-loops", "sharing", "data-validation", "onboarding", "deep-links", "tamper-detection", "remote-config" ], "status": "production-ready", "has_tests": true, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_31_ads_module", "framework": "flutter" }, { "id": "mod_32_remote_config", "number": 32, "name": "Module 32: Remote Configuration", "category": "growth_and_security", "platform": "flutter", "path": "apps/modules/mod_32_remote_config", "description": "Enables instant app adjustments without App Store re-submission:", "capabilities": [ "Type-safe string, integer, boolean, and JSON getters", "Fallback defaults ensure offline resilience" ], "tags": [ "lifecycle", "ads", "feature-flags", "remote_config", "viral-loops", "sharing", "data-validation", "onboarding", "deep-links", "tamper-detection", "remote-config" ], "status": "production-ready", "has_tests": true, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_32_remote_config", "framework": "flutter" }, { "id": "mod_33_feature_flags", "number": 33, "name": "Module 33: Feature Flags", "category": "growth_and_security", "platform": "flutter", "path": "apps/modules/mod_33_feature_flags", "description": "Enables gradual feature rollouts:", "capabilities": [ "Deterministic hashing via SHA-256 ensuring user remains in the same bucket", "Percentage rollouts (10%, 50%, 100%)", "Kill-switch support" ], "tags": [ "lifecycle", "ads", "feature-flags", "viral-loops", "sharing", "data-validation", "onboarding", "feature_flags", "deep-links", "tamper-detection", "remote-config" ], "status": "production-ready", "has_tests": true, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_33_feature_flags", "framework": "flutter" }, { "id": "mod_34_deep_link_system", "number": 34, "name": "Module 34: Deep Link System", "category": "growth_and_security", "platform": "flutter", "path": "apps/modules/mod_34_deep_link_system", "description": "Universal links and custom scheme router:", "capabilities": [ "Validates URI structure and sanitizes path and query params", "Routes users to exact screens (e.g. `/product/:id`, `/referral/:code`)" ], "tags": [ "lifecycle", "ads", "feature-flags", "viral-loops", "sharing", "data-validation", "onboarding", "deep-links", "deep_link_system", "tamper-detection", "remote-config" ], "status": "production-ready", "has_tests": true, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_34_deep_link_system", "framework": "flutter" }, { "id": "mod_35_sharing_system", "number": 35, "name": "Module 35: Sharing System", "category": "growth_and_security", "platform": "flutter", "path": "apps/modules/mod_35_sharing_system", "description": "Standardizes social sharing across apps:", "capabilities": [ "Generates formatted share cards and attribution links", "Prepares sanitized shareable text and assets" ], "tags": [ "lifecycle", "ads", "feature-flags", "viral-loops", "sharing", "data-validation", "onboarding", "deep-links", "tamper-detection", "sharing_system", "remote-config" ], "status": "production-ready", "has_tests": true, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_35_sharing_system", "framework": "flutter" }, { "id": "mod_36_viral_loops", "number": 36, "name": "Module 36: Viral Loops Module", "category": "growth_and_security", "platform": "flutter", "path": "apps/modules/mod_36_viral_loops", "description": "Built-in viral growth mechanics:", "capabilities": [ "Cryptographic referral code generation", "Multi-tier referral reward entitlement unlock" ], "tags": [ "lifecycle", "ads", "feature-flags", "viral-loops", "sharing", "data-validation", "onboarding", "deep-links", "tamper-detection", "remote-config", "viral_loops" ], "status": "production-ready", "has_tests": true, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_36_viral_loops", "framework": "flutter" }, { "id": "mod_37_onboarding_engine", "number": 37, "name": "Module 37: Onboarding Engine", "category": "growth_and_security", "platform": "flutter", "path": "apps/modules/mod_37_onboarding_engine", "description": "Modular onboarding controller:", "capabilities": [ "Manages sequential slides, persona selection, and permission priming", "Persists completion status" ], "tags": [ "lifecycle", "ads", "feature-flags", "onboarding_engine", "viral-loops", "sharing", "data-validation", "onboarding", "deep-links", "tamper-detection", "remote-config" ], "status": "production-ready", "has_tests": true, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_37_onboarding_engine", "framework": "flutter" }, { "id": "mod_38_app_lifecycle", "number": 38, "name": "Module 38: App Lifecycle Guardian", "category": "growth_and_security", "platform": "flutter", "path": "apps/modules/mod_38_app_lifecycle", "description": "Monitors application execution state:", "capabilities": [ "Cold start vs Warm start detection", "Automatic flush of pending mutations and analytics before OS kills background process" ], "tags": [ "lifecycle", "app_lifecycle", "ads", "feature-flags", "viral-loops", "sharing", "data-validation", "onboarding", "deep-links", "tamper-detection", "remote-config" ], "status": "production-ready", "has_tests": true, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_38_app_lifecycle", "framework": "flutter" }, { "id": "mod_39_security_hardening", "number": 39, "name": "Module 39: Security Hardening & Anti-Tamper", "category": "growth_and_security", "platform": "flutter", "path": "apps/modules/mod_39_security_hardening", "description": "Hardens apps against attacks:", "capabilities": [ "Root / Jailbreak check indicators", "Debugger attachment detection", "Screenshot & screen recording prevention flags" ], "tags": [ "lifecycle", "ads", "feature-flags", "security_hardening", "viral-loops", "sharing", "data-validation", "onboarding", "deep-links", "tamper-detection", "remote-config" ], "status": "production-ready", "has_tests": true, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_39_security_hardening", "framework": "flutter" }, { "id": "mod_40_data_validation", "number": 40, "name": "Module 40: Data Validation & Sanitization", "category": "growth_and_security", "platform": "flutter", "path": "apps/modules/mod_40_data_validation", "description": "Sanitizes all user inputs before persistence or transmission:", "capabilities": [ "Strict email, phone, URL validation", "Anti-XSS HTML entity escaping", "Anti-SQLi parameter validation" ], "tags": [ "lifecycle", "ads", "feature-flags", "viral-loops", "sharing", "data-validation", "onboarding", "deep-links", "tamper-detection", "data_validation", "remote-config" ], "status": "production-ready", "has_tests": true, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_40_data_validation", "framework": "flutter" }, { "id": "mod_41_database_architecture", "number": 41, "name": "Module 41: Database Architecture", "category": "backend_storage_and_qa", "platform": "flutter", "path": "apps/modules/mod_41_database_architecture", "description": "Encrypted SQLite migration engine:", "capabilities": [ "Manages sequential schema migrations (`V1__init.sql`, `V2__add_indexes.sql`)", "Atomic transaction wrapping ensures no partial migrations on crash" ], "tags": [ "fastapi", "file-storage", "background-jobs", "s3", "cicd", "device-matrix", "e2e", "release-audit", "database_architecture", "backend", "database-migrations", "unit-tests" ], "status": "production-ready", "has_tests": true, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_41_database_architecture", "framework": "flutter" }, { "id": "mod_42_file_storage", "number": 42, "name": "Module 42: File Storage & Upload", "category": "backend_storage_and_qa", "platform": "flutter", "path": "apps/modules/mod_42_file_storage", "description": "Uploads files directly to S3 / Cloud Storage via presigned URLs:", "capabilities": [ "File size validation and MIME-type verification", "Never streams file uploads through application API servers directly" ], "tags": [ "fastapi", "file-storage", "file_storage", "background-jobs", "s3", "cicd", "device-matrix", "e2e", "release-audit", "backend", "database-migrations", "unit-tests" ], "status": "production-ready", "has_tests": true, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_42_file_storage", "framework": "flutter" }, { "id": "mod_43_background_jobs", "number": 43, "name": "Module 43: Background Job System", "category": "backend_storage_and_qa", "platform": "flutter", "path": "apps/modules/mod_43_background_jobs", "description": "Coordinates WorkManager (Android) and Background Tasks (iOS):", "capabilities": [ "Enforces network constraints (`requiresUnmeteredNetwork`, `requiresCharging`)", "Executes periodic background sync safely without draining battery" ], "tags": [ "fastapi", "file-storage", "background_jobs", "background-jobs", "s3", "cicd", "device-matrix", "e2e", "release-audit", "backend", "database-migrations", "unit-tests" ], "status": "production-ready", "has_tests": true, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_43_background_jobs", "framework": "flutter" }, { "id": "mod_44_app_backend_template", "number": 44, "name": "Module 44: App Backend Template", "category": "backend_storage_and_qa", "platform": "python", "path": "apps/modules/mod_44_app_backend_template", "description": "Zero-trust isolated backend server template built with Python FastAPI:", "capabilities": [ "Strict JWT authentication and authorization", "Rate limiting with SlowAPI", "Isolated SQLite / PostgreSQL database connection", "Structured JSON logging" ], "tags": [ "fastapi", "file-storage", "background-jobs", "s3", "cicd", "device-matrix", "e2e", "app_backend_template", "release-audit", "backend", "database-migrations", "unit-tests" ], "status": "production-ready", "has_tests": true, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_44_app_backend_template", "framework": "python" }, { "id": "mod_45_cicd_factory", "number": 45, "name": "Module 45: CI/CD Factory", "category": "backend_storage_and_qa", "platform": "python", "path": "apps/modules/mod_45_cicd_factory", "description": "Reusable GitHub Actions workflows and Fastlane templates:", "capabilities": [ "`ci_android.yml`: Builds signed Android App Bundle (AAB), executes tests, uploads to Play Store Internal Track", "`ci_ios.yml`: Builds signed iOS IPA via Fastlane Match, uploads to Apple TestFlight" ], "tags": [ "cicd_factory", "fastapi", "file-storage", "background-jobs", "s3", "cicd", "device-matrix", "e2e", "release-audit", "backend", "database-migrations", "unit-tests" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_45_cicd_factory", "framework": "python" }, { "id": "mod_46_automated_testing", "number": 46, "name": "Module 46: Automated Testing Suite", "category": "backend_storage_and_qa", "platform": "flutter", "path": "apps/modules/mod_46_automated_testing", "description": "Utilities for test-driven development:", "capabilities": [ "Mock HTTP response dispatcher", "Standard test fixtures" ], "tags": [ "fastapi", "file-storage", "background-jobs", "s3", "cicd", "device-matrix", "e2e", "release-audit", "backend", "database-migrations", "automated_testing", "unit-tests" ], "status": "production-ready", "has_tests": true, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_46_automated_testing", "framework": "flutter" }, { "id": "mod_47_golden_user_journey", "number": 47, "name": "Module 47: Golden User Journey", "category": "backend_storage_and_qa", "platform": "python", "path": "apps/modules/mod_47_golden_user_journey", "description": "Defines Maestro / Patrol end-to-end automation scripts for the primary conversion funnel:", "capabilities": [], "tags": [ "fastapi", "file-storage", "golden_user_journey", "background-jobs", "s3", "cicd", "device-matrix", "e2e", "release-audit", "backend", "database-migrations", "unit-tests" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_47_golden_user_journey", "framework": "python" }, { "id": "mod_48_device_test_matrix", "number": 48, "name": "Module 48: Device Test Matrix", "category": "backend_storage_and_qa", "platform": "python", "path": "apps/modules/mod_48_device_test_matrix", "description": "Standardized test matrix configuration for Firebase Test Lab / AWS Device Farm:", "capabilities": [], "tags": [ "fastapi", "file-storage", "background-jobs", "s3", "cicd", "device-matrix", "e2e", "release-audit", "backend", "database-migrations", "device_test_matrix", "unit-tests" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_48_device_test_matrix", "framework": "python" }, { "id": "mod_49_release_checklist", "number": 49, "name": "Module 49: Release Checklist Pre-Flight", "category": "backend_storage_and_qa", "platform": "python", "path": "apps/modules/mod_49_release_checklist", "description": "Automated Python pre-flight auditor script that verifies all 32 critical release criteria before store submission.", "capabilities": [], "tags": [ "fastapi", "file-storage", "background-jobs", "s3", "cicd", "device-matrix", "e2e", "release-audit", "backend", "database-migrations", "release_checklist", "unit-tests" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_49_release_checklist", "framework": "python" }, { "id": "mod_50_aso_factory", "number": 50, "name": "Module 50: ASO Factory", "category": "backend_storage_and_qa", "platform": "python", "path": "apps/modules/mod_50_aso_factory", "description": "App Store Optimization (ASO) metadata engine:", "capabilities": [ "Generates localized titles (max 30 chars), subtitles (max 30 chars), and descriptions", "Analyzes keyword density and character limits for Google Play and Apple App Store" ], "tags": [ "fastapi", "file-storage", "aso_factory", "background-jobs", "s3", "cicd", "device-matrix", "e2e", "release-audit", "backend", "database-migrations", "unit-tests" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_50_aso_factory", "framework": "python" }, { "id": "mod_51_screenshot_factory", "number": 51, "name": "Module 51: Screenshot Factory", "category": "factory_orchestration", "platform": "python", "path": "apps/modules/mod_51_screenshot_factory", "description": "Automates App Store and Google Play screenshot generation:", "capabilities": [ "Standard 5-slide layout narrative:", "Fastlane Snapfile configuration and templating" ], "tags": [ "boundaries", "review-mining", "aso", "melos", "isolation", "synthesizer", "screenshots", "metrics", "factory-db", "tracker", "health-scorecard", "ai-team", "cli", "screenshot_factory", "pipeline" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_51_screenshot_factory", "framework": "python" }, { "id": "mod_52_review_monitoring", "number": 52, "name": "Module 52: Review Monitoring & AI Categorization", "category": "factory_orchestration", "platform": "python", "path": "apps/modules/mod_52_review_monitoring", "description": "Harvests and classifies store reviews using rule-based and AI sentiment analysis:", "capabilities": [ "Categories: `Bug`, `FeatureRequest`, `PricingComplaint`, `Praise`, `Confusion`", "Generates actionable backlog issues with priority scores" ], "tags": [ "boundaries", "review-mining", "aso", "melos", "isolation", "synthesizer", "screenshots", "metrics", "factory-db", "tracker", "health-scorecard", "ai-team", "cli", "review_monitoring", "pipeline" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_52_review_monitoring", "framework": "python" }, { "id": "mod_53_analytics_dashboard", "number": 53, "name": "Module 53: App Analytics Dashboard", "category": "factory_orchestration", "platform": "python", "path": "apps/modules/mod_53_analytics_dashboard", "description": "Aggregates product KPIs across the 100-app portfolio:", "capabilities": [ "DAU, MAU, Retention (D1, D7, D30)", "MRR, ARPU, Churn Rate, LTV", "Exportable to SQLite / Postgres / JSON" ], "tags": [ "boundaries", "review-mining", "aso", "melos", "isolation", "synthesizer", "screenshots", "metrics", "factory-db", "tracker", "health-scorecard", "ai-team", "cli", "analytics_dashboard", "pipeline" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_53_analytics_dashboard", "framework": "python" }, { "id": "mod_54_health_scorecard", "number": 54, "name": "Module 54: Product Health Scorecard", "category": "factory_orchestration", "platform": "python", "path": "apps/modules/mod_54_health_scorecard", "description": "Algorithmic scorecard evaluating the operational health of any app in the portfolio:", "capabilities": [ "Stability (Crash-free rate)", "Retention (D1, D7)", "Monetization (Conversion %)", "Rating (Store average)" ], "tags": [ "boundaries", "review-mining", "aso", "melos", "isolation", "synthesizer", "screenshots", "metrics", "factory-db", "tracker", "health-scorecard", "ai-team", "cli", "health_scorecard", "pipeline" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_54_health_scorecard", "framework": "python" }, { "id": "mod_55_app_factory_db", "number": 55, "name": "Module 55: App Factory Database", "category": "factory_orchestration", "platform": "python", "path": "apps/modules/mod_55_app_factory_db", "description": "Central registry tracking all 100+ applications across their lifecycle:", "capabilities": [ "Product metadata, bundle IDs, backend URLs, store statuses", "SQLite database schema with migrations" ], "tags": [ "boundaries", "review-mining", "aso", "melos", "isolation", "synthesizer", "screenshots", "metrics", "factory-db", "tracker", "health-scorecard", "ai-team", "cli", "app_factory_db", "pipeline" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_55_app_factory_db", "framework": "python" }, { "id": "mod_56_automated_cli", "number": 56, "name": "Module 56: Automated Product Creation CLI (`factory-cli`)", "category": "factory_orchestration", "platform": "python", "path": "apps/modules/mod_56_automated_cli", "description": "Command-line interface to scaffold a new independent production mobile app with 1 command:", "capabilities": [], "tags": [ "boundaries", "review-mining", "aso", "melos", "isolation", "automated_cli", "synthesizer", "screenshots", "metrics", "factory-db", "tracker", "health-scorecard", "ai-team", "cli", "pipeline" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_56_automated_cli", "framework": "python" }, { "id": "mod_57_ai_agent_team", "number": 57, "name": "Module 57: AI Agent Team Prompts & Specs", "category": "factory_orchestration", "platform": "python", "path": "apps/modules/mod_57_ai_agent_team", "description": "System prompts and operational playbooks for the 15 specialized AI agent roles:", "capabilities": [], "tags": [ "boundaries", "review-mining", "aso", "melos", "isolation", "ai_agent_team", "synthesizer", "screenshots", "metrics", "factory-db", "tracker", "health-scorecard", "ai-team", "cli", "pipeline" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_57_ai_agent_team", "framework": "python" }, { "id": "mod_58_dev_pipeline", "number": 58, "name": "Module 58: 16-Phase Gatekeeper Pipeline", "category": "factory_orchestration", "platform": "python", "path": "apps/modules/mod_58_dev_pipeline", "description": "Orchestrates the 16 phases of app development with strict entry and exit criteria:", "capabilities": [ "Phase 1: Discovery", "Phase 2: Validation", "Phase 3: PRD", "Phase 4: UX", "Phase 5: UI" ], "tags": [ "boundaries", "review-mining", "aso", "melos", "isolation", "synthesizer", "screenshots", "metrics", "factory-db", "tracker", "health-scorecard", "ai-team", "cli", "dev_pipeline", "pipeline" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_58_dev_pipeline", "framework": "python" }, { "id": "mod_59_architecture_boundary", "number": 59, "name": "Module 59: Architecture Boundary Linter", "category": "factory_orchestration", "platform": "python", "path": "apps/modules/mod_59_architecture_boundary", "description": "Enforces boundary separation:", "capabilities": [ "Prohibits cross-app imports (`app-001` cannot import `app-002`)", "Ensures shared modules do not import app-specific feature code" ], "tags": [ "boundaries", "review-mining", "aso", "melos", "isolation", "synthesizer", "screenshots", "metrics", "factory-db", "tracker", "health-scorecard", "ai-team", "architecture_boundary", "cli", "pipeline" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_59_architecture_boundary", "framework": "python" }, { "id": "mod_60_portfolio_registry", "number": 60, "name": "Module 60: Master Portfolio Registry & Monorepo", "category": "factory_orchestration", "platform": "python", "path": "apps/modules/mod_60_portfolio_registry", "description": "Orchestrates the 100+ app portfolio monorepo:", "capabilities": [ "Melos / Dart workspace management", "Bulk testing, linting, and dependency upgrading across all 60 modules and 100 apps" ], "tags": [ "boundaries", "review-mining", "aso", "melos", "isolation", "portfolio_registry", "synthesizer", "screenshots", "metrics", "factory-db", "tracker", "health-scorecard", "ai-team", "cli", "pipeline" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_60_portfolio_registry", "framework": "python" }, { "id": "mod_61_isolation_guardian", "number": 61, "name": "Module 61: Isolation Guardian", "category": "factory_orchestration", "platform": "python", "path": "apps/modules/mod_61_isolation_guardian", "description": "Enforces **Rule 61: The Most Important Factory Rule**:", "capabilities": [], "tags": [ "boundaries", "review-mining", "aso", "melos", "isolation", "synthesizer", "screenshots", "isolation_guardian", "metrics", "factory-db", "tracker", "health-scorecard", "ai-team", "cli", "pipeline" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_61_isolation_guardian", "framework": "python" }, { "id": "mod_62_one_click_synthesizer", "number": 62, "name": "Module 62: One-Click Product Synthesizer", "category": "factory_orchestration", "platform": "python", "path": "apps/modules/mod_62_one_click_synthesizer", "description": "Implements **Rule 62: The 'One-Click' Future**.", "capabilities": [], "tags": [ "boundaries", "review-mining", "aso", "melos", "isolation", "synthesizer", "screenshots", "metrics", "factory-db", "tracker", "health-scorecard", "ai-team", "cli", "one_click_synthesizer", "pipeline" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_62_one_click_synthesizer", "framework": "python" }, { "id": "mod_63_master_checklist_tracker", "number": 63, "name": "Module 63: Master Checklist & Progress Tracker", "category": "factory_orchestration", "platform": "multi-platform", "path": "apps/modules/mod_63_master_checklist_tracker", "description": "Implements **Rule 63: The Complete Factory Layers & Master 360+ Task Checklist**.", "capabilities": [], "tags": [ "boundaries", "review-mining", "aso", "melos", "isolation", "synthesizer", "screenshots", "metrics", "factory-db", "tracker", "health-scorecard", "ai-team", "master_checklist_tracker", "cli", "pipeline" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_63_master_checklist_tracker", "framework": "multi-platform" }, { "id": "mod_64_threat_modeling", "number": 64, "name": "Module 64: Threat Modeling Module", "category": "zero_trust_and_data_security", "platform": "python", "path": "apps/modules/mod_64_threat_modeling", "description": "Automates STRIDE / DREAD threat modeling for every mobile feature before production:", "capabilities": [], "tags": [ "threat_modeling", "admin-security", "break-glass", "secrets", "zero-trust", "authz", "kms", "backup", "tenancy", "rotation", "threat-modeling", "vault", "dr", "database-security" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_64_threat_modeling", "framework": "python" }, { "id": "mod_65_security_boundary", "number": 65, "name": "Module 65: Security Boundary Module", "category": "zero_trust_and_data_security", "platform": "python", "path": "apps/modules/mod_65_security_boundary", "description": "Enforces the core rule: **The mobile application must always be treated as potentially compromised.**", "capabilities": [], "tags": [ "admin-security", "break-glass", "secrets", "zero-trust", "authz", "kms", "security_boundary", "backup", "tenancy", "rotation", "threat-modeling", "vault", "dr", "database-security" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_65_security_boundary", "framework": "python" }, { "id": "mod_66_zero_trust_api", "number": 66, "name": "Module 66: Zero-Trust API Module", "category": "zero_trust_and_data_security", "platform": "python", "path": "apps/modules/mod_66_zero_trust_api", "description": "Every API request undergoes a multi-layer verification chain:", "capabilities": [], "tags": [ "admin-security", "break-glass", "secrets", "zero-trust", "authz", "kms", "backup", "tenancy", "rotation", "threat-modeling", "zero_trust_api", "vault", "dr", "database-security" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_66_zero_trust_api", "framework": "python" }, { "id": "mod_67_object_authorization", "number": 67, "name": "Module 67: Object-Level Authorization (BOLA Defense)", "category": "zero_trust_and_data_security", "platform": "python", "path": "apps/modules/mod_67_object_authorization", "description": "Guards against OWASP API1: Broken Object Level Authorization.", "capabilities": [], "tags": [ "object_authorization", "admin-security", "break-glass", "secrets", "zero-trust", "authz", "kms", "backup", "tenancy", "rotation", "threat-modeling", "vault", "dr", "database-security" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_67_object_authorization", "framework": "python" }, { "id": "mod_68_property_authorization", "number": 68, "name": "Module 68: Property-Level Authorization (BOPLA Defense)", "category": "zero_trust_and_data_security", "platform": "python", "path": "apps/modules/mod_68_property_authorization", "description": "Guards against OWASP API3: Broken Object Property Level Authorization.", "capabilities": [], "tags": [ "property_authorization", "admin-security", "break-glass", "secrets", "zero-trust", "authz", "kms", "backup", "tenancy", "rotation", "threat-modeling", "vault", "dr", "database-security" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_68_property_authorization", "framework": "python" }, { "id": "mod_69_function_authorization", "number": 69, "name": "Module 69: Function-Level Authorization", "category": "zero_trust_and_data_security", "platform": "python", "path": "apps/modules/mod_69_function_authorization", "description": "Guards against OWASP API5: Broken Function Level Authorization.", "capabilities": [], "tags": [ "admin-security", "break-glass", "secrets", "zero-trust", "authz", "kms", "backup", "tenancy", "rotation", "threat-modeling", "function_authorization", "vault", "dr", "database-security" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_69_function_authorization", "framework": "python" }, { "id": "mod_70_admin_security", "number": 70, "name": "Module 70: Admin Security Module", "category": "zero_trust_and_data_security", "platform": "python", "path": "apps/modules/mod_70_admin_security", "description": "Hardens internal management dashboards:", "capabilities": [ "Mandatory MFA / WebAuthn Passkeys", "Maximum 15-minute idle session timeout", "Step-up re-authentication required for destructive operations (drop DB, refund, price change)" ], "tags": [ "admin-security", "break-glass", "secrets", "zero-trust", "authz", "kms", "backup", "tenancy", "rotation", "threat-modeling", "admin_security", "vault", "dr", "database-security" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_70_admin_security", "framework": "python" }, { "id": "mod_71_break_glass_access", "number": 71, "name": "Module 71: Break-Glass Access", "category": "zero_trust_and_data_security", "platform": "python", "path": "apps/modules/mod_71_break_glass_access", "description": "Emergency elevated access protocol:", "capabilities": [ "Temporary time-bounded access (maximum 1 hour)", "Requires explicit justification and dual authorization", "Generates immutable audit log" ], "tags": [ "admin-security", "break-glass", "secrets", "break_glass_access", "zero-trust", "authz", "kms", "backup", "tenancy", "rotation", "threat-modeling", "vault", "dr", "database-security" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_71_break_glass_access", "framework": "python" }, { "id": "mod_72_secrets_management", "number": 72, "name": "Module 72: Secrets Management", "category": "zero_trust_and_data_security", "platform": "python", "path": "apps/modules/mod_72_secrets_management", "description": "Enforces zero secrets in source code, APKs, or IPAs:", "capabilities": [ "Integration with AWS Secrets Manager / HashiCorp Vault / GCP Secret Manager", "Client receives only ephemeral, scoped tokens" ], "tags": [ "admin-security", "break-glass", "secrets", "zero-trust", "authz", "kms", "secrets_management", "backup", "tenancy", "rotation", "threat-modeling", "vault", "dr", "database-security" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_72_secrets_management", "framework": "python" }, { "id": "mod_73_secret_rotation", "number": 73, "name": "Module 73: Secret Rotation", "category": "zero_trust_and_data_security", "platform": "python", "path": "apps/modules/mod_73_secret_rotation", "description": "Tracks secret age, rotation schedule, and automated revocation:", "capabilities": [ "Maximum secret lifespan: 90 days", "Automated alerts when secrets exceed 75 days without rotation" ], "tags": [ "secret_rotation", "admin-security", "break-glass", "secrets", "zero-trust", "authz", "kms", "backup", "tenancy", "rotation", "threat-modeling", "vault", "dr", "database-security" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_73_secret_rotation", "framework": "python" }, { "id": "mod_74_key_management", "number": 74, "name": "Module 74: Key Management Module", "category": "zero_trust_and_data_security", "platform": "python", "path": "apps/modules/mod_74_key_management", "description": "Separates cryptographic keys by purpose:", "capabilities": [ "Data Encryption Keys (DEK)", "Key Encryption Keys (KEK)", "App Signing Keys", "Webhook Signing Keys", "OAuth Client Secrets" ], "tags": [ "admin-security", "break-glass", "secrets", "zero-trust", "authz", "kms", "backup", "tenancy", "key_management", "rotation", "threat-modeling", "vault", "dr", "database-security" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_74_key_management", "framework": "python" }, { "id": "mod_75_database_security", "number": 75, "name": "Module 75: Database Security Module", "category": "zero_trust_and_data_security", "platform": "python", "path": "apps/modules/mod_75_database_security", "description": "Database hardening rules:", "capabilities": [ "TLS enforced on all connections", "Least-privileged database user roles (read-only replicas, write-only queues)", "Query timeout enforced (5000ms max)" ], "tags": [ "admin-security", "break-glass", "secrets", "database_security", "zero-trust", "authz", "kms", "backup", "tenancy", "rotation", "threat-modeling", "vault", "dr", "database-security" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_75_database_security", "framework": "python" }, { "id": "mod_76_database_tenancy", "number": 76, "name": "Module 76: Database Tenancy Isolation", "category": "zero_trust_and_data_security", "platform": "python", "path": "apps/modules/mod_76_database_tenancy", "description": "Ensures complete logical or physical isolation for all 100+ apps:", "capabilities": [ "App A's backend and database cannot query App B's tables" ], "tags": [ "admin-security", "break-glass", "secrets", "zero-trust", "authz", "kms", "backup", "tenancy", "database_tenancy", "rotation", "threat-modeling", "vault", "dr", "database-security" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_76_database_tenancy", "framework": "python" }, { "id": "mod_77_backup_recovery", "number": 77, "name": "Module 77: Backup & Disaster Recovery Verification", "category": "zero_trust_and_data_security", "platform": "python", "path": "apps/modules/mod_77_backup_recovery", "description": "> \"A backup that has never been successfully restored is not a proven backup.\"", "capabilities": [], "tags": [ "admin-security", "break-glass", "secrets", "zero-trust", "authz", "kms", "backup", "tenancy", "rotation", "threat-modeling", "backup_recovery", "vault", "dr", "database-security" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_77_backup_recovery", "framework": "python" }, { "id": "mod_78_disaster_recovery", "number": 78, "name": "Module 78: Disaster Recovery (RPO / RTO)", "category": "zero_trust_and_data_security", "platform": "python", "path": "apps/modules/mod_78_disaster_recovery", "description": "Defines and audits Recovery Point Objective (RPO) and Recovery Time Objective (RTO):", "capabilities": [ "Target RPO: <= 15 minutes", "Target RTO: <= 60 minutes" ], "tags": [ "disaster_recovery", "admin-security", "break-glass", "secrets", "zero-trust", "authz", "kms", "backup", "tenancy", "rotation", "threat-modeling", "vault", "dr", "database-security" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_78_disaster_recovery", "framework": "python" }, { "id": "mod_79_multi_region", "number": 79, "name": "Module 79: Multi-Region / Availability Module", "category": "scale_abuse_and_integrity", "platform": "python", "path": "apps/modules/mod_79_multi_region", "description": "Orchestrates multi-region failover and CDN edge caching for 1M+ user scale:", "capabilities": [ "Edge caching for static assets", "Health checks with automatic failover between Primary and Secondary regions" ], "tags": [ "multi-region", "bot-defense", "multi_region", "abuse-prevention", "session-security", "keystore", "webhook-security", "circuit-breaker", "idempotency", "autoscaling", "load-shedding", "rate-limiting", "ssrf", "app-integrity" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_79_multi_region", "framework": "python" }, { "id": "mod_80_autoscaling", "number": 80, "name": "Module 80: Autoscaling Module", "category": "scale_abuse_and_integrity", "platform": "python", "path": "apps/modules/mod_80_autoscaling", "description": "Multi-metric autoscaler for backend containers:", "capabilities": [ "Scales on: CPU, Memory, Requests/Sec, Queue Depth, DB Connection Pool Saturation" ], "tags": [ "multi-region", "bot-defense", "abuse-prevention", "session-security", "keystore", "webhook-security", "circuit-breaker", "idempotency", "autoscaling", "load-shedding", "rate-limiting", "ssrf", "app-integrity" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_80_autoscaling", "framework": "python" }, { "id": "mod_81_load_shedding", "number": 81, "name": "Module 81: Load Shedding Module", "category": "scale_abuse_and_integrity", "platform": "python", "path": "apps/modules/mod_81_load_shedding", "description": "Under extreme traffic spikes (>95% capacity), gracefully degrades non-critical features:", "capabilities": [ "Disables expensive AI generation & video rendering", "Preserves authentication, reads, and core data operations" ], "tags": [ "multi-region", "bot-defense", "abuse-prevention", "session-security", "keystore", "webhook-security", "circuit-breaker", "idempotency", "autoscaling", "load-shedding", "rate-limiting", "ssrf", "app-integrity", "load_shedding" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_81_load_shedding", "framework": "python" }, { "id": "mod_82_circuit_breaker", "number": 82, "name": "Module 82: Circuit Breaker Module", "category": "scale_abuse_and_integrity", "platform": "python", "path": "apps/modules/mod_82_circuit_breaker", "description": "Prevents cascading outages when external providers fail (OpenAI, Stripe, Firebase):", "capabilities": [ "States: `CLOSED` (Normal), `OPEN` (Tripped - fast fail), `HALF_OPEN` (Trial recovery)" ], "tags": [ "multi-region", "bot-defense", "abuse-prevention", "session-security", "keystore", "webhook-security", "circuit_breaker", "circuit-breaker", "idempotency", "autoscaling", "load-shedding", "rate-limiting", "ssrf", "app-integrity" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_82_circuit_breaker", "framework": "python" }, { "id": "mod_83_retry_idempotency", "number": 83, "name": "Module 83: Retry Safety & Idempotency", "category": "scale_abuse_and_integrity", "platform": "python", "path": "apps/modules/mod_83_retry_idempotency", "description": "Prevents double-charging, duplicate orders, or double-spent AI credits:", "capabilities": [ "Mandates `Idempotency-Key` header on all mutating POST/PUT requests", "Returns cached response if idempotency key has already been processed" ], "tags": [ "multi-region", "bot-defense", "abuse-prevention", "session-security", "keystore", "webhook-security", "retry_idempotency", "circuit-breaker", "idempotency", "autoscaling", "load-shedding", "rate-limiting", "ssrf", "app-integrity" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_83_retry_idempotency", "framework": "python" }, { "id": "mod_84_rate_limiting_matrix", "number": 84, "name": "Module 84: Rate-Limiting Matrix", "category": "scale_abuse_and_integrity", "platform": "python", "path": "apps/modules/mod_84_rate_limiting_matrix", "description": "Multi-dimensional rate limiting:", "capabilities": [ "Login: 10 attempts / 10 min per IP", "AI Generation: 20 requests / min per User", "File Upload: 5 uploads / min per Device", "Password Reset: 3 requests / hour per Account" ], "tags": [ "multi-region", "bot-defense", "rate_limiting_matrix", "abuse-prevention", "session-security", "keystore", "webhook-security", "circuit-breaker", "idempotency", "autoscaling", "load-shedding", "rate-limiting", "ssrf", "app-integrity" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_84_rate_limiting_matrix", "framework": "python" }, { "id": "mod_85_abuse_prevention", "number": 85, "name": "Module 85: Abuse-Prevention Module", "category": "scale_abuse_and_integrity", "platform": "python", "path": "apps/modules/mod_85_abuse_prevention", "description": "Detects non-hacking abuse:", "capabilities": [ "Credential stuffing", "Referral farming (multiple accounts using same device fingerprint)", "Coupon & promotional credit abuse" ], "tags": [ "multi-region", "bot-defense", "abuse-prevention", "session-security", "keystore", "webhook-security", "circuit-breaker", "idempotency", "autoscaling", "abuse_prevention", "load-shedding", "rate-limiting", "ssrf", "app-integrity" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_85_abuse_prevention", "framework": "python" }, { "id": "mod_86_bot_defense", "number": 86, "name": "Module 86: Bot / Automation Defense", "category": "scale_abuse_and_integrity", "platform": "python", "path": "apps/modules/mod_86_bot_defense", "description": "Selective friction engine:", "capabilities": [ "Never puts CAPTCHAs everywhere", "Evaluates device integrity signals, request timing velocity, and headless browser signatures" ], "tags": [ "multi-region", "bot-defense", "abuse-prevention", "session-security", "keystore", "webhook-security", "circuit-breaker", "idempotency", "autoscaling", "bot_defense", "load-shedding", "rate-limiting", "ssrf", "app-integrity" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_86_bot_defense", "framework": "python" }, { "id": "mod_87_replay_protection", "number": 87, "name": "Module 87: Replay-Attack Protection", "category": "scale_abuse_and_integrity", "platform": "python", "path": "apps/modules/mod_87_replay_protection", "description": "Guards against captured request replay:", "capabilities": [ "Nonce verification with sliding timestamp window (300 seconds)" ], "tags": [ "multi-region", "bot-defense", "abuse-prevention", "replay_protection", "session-security", "keystore", "webhook-security", "circuit-breaker", "idempotency", "autoscaling", "load-shedding", "rate-limiting", "ssrf", "app-integrity" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_87_replay_protection", "framework": "python" }, { "id": "mod_88_session_security", "number": 88, "name": "Module 88: Session Security Module", "category": "scale_abuse_and_integrity", "platform": "python", "path": "apps/modules/mod_88_session_security", "description": "Multi-device session manager:", "capabilities": [ "Session listing, remote revocation, and automatic logout of all devices on password change" ], "tags": [ "multi-region", "bot-defense", "abuse-prevention", "session_security", "session-security", "keystore", "webhook-security", "circuit-breaker", "idempotency", "autoscaling", "load-shedding", "rate-limiting", "ssrf", "app-integrity" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_88_session_security", "framework": "python" }, { "id": "mod_89_token_security", "number": 89, "name": "Module 89: Token Security Module", "category": "scale_abuse_and_integrity", "platform": "python", "path": "apps/modules/mod_89_token_security", "description": "Cryptographic token lifecycle:", "capabilities": [ "Access tokens: 15-minute lifespan", "Refresh tokens: Rotated on every use; reuse detection revokes entire token family" ], "tags": [ "multi-region", "bot-defense", "abuse-prevention", "token_security", "session-security", "keystore", "webhook-security", "circuit-breaker", "idempotency", "autoscaling", "load-shedding", "rate-limiting", "ssrf", "app-integrity" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_89_token_security", "framework": "python" }, { "id": "mod_90_device_secure_storage", "number": 90, "name": "Module 90: Device-Side Secure Storage", "category": "scale_abuse_and_integrity", "platform": "flutter", "path": "apps/modules/mod_90_device_secure_storage", "description": "Hardware-backed secure storage:", "capabilities": [ "Android: EncryptedSharedPreferences with Android Keystore 256-bit AES-GCM", "iOS: Keychain Services with `kSecAttrAccessibleAfterFirstUnlockThisDeviceOnly`" ], "tags": [ "multi-region", "bot-defense", "abuse-prevention", "session-security", "keystore", "webhook-security", "circuit-breaker", "device_secure_storage", "idempotency", "autoscaling", "load-shedding", "rate-limiting", "ssrf", "app-integrity" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_90_device_secure_storage", "framework": "flutter" }, { "id": "mod_91_app_integrity", "number": 91, "name": "Module 91: App Integrity Module", "category": "scale_abuse_and_integrity", "platform": "python", "path": "apps/modules/mod_91_app_integrity", "description": "Server-side verification of mobile environment attestation:", "capabilities": [ "Google Play Integrity API", "Apple App Attest / DeviceCheck", "Backend rejects requests if binary or device integrity fails" ], "tags": [ "multi-region", "bot-defense", "app_integrity", "abuse-prevention", "session-security", "keystore", "webhook-security", "circuit-breaker", "idempotency", "autoscaling", "load-shedding", "rate-limiting", "ssrf", "app-integrity" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_91_app_integrity", "framework": "python" }, { "id": "mod_92_tamper_resilience", "number": 92, "name": "Module 92: Tamper & Reverse-Engineering Resilience", "category": "scale_abuse_and_integrity", "platform": "flutter", "path": "apps/modules/mod_92_tamper_resilience", "description": "Multi-layered client-side defense:", "capabilities": [ "Debugger detection (`ptrace` / `sysctl`)", "Root & Jailbreak file indicators", "Integrity signals forwarded to backend for risk scoring" ], "tags": [ "multi-region", "bot-defense", "abuse-prevention", "session-security", "keystore", "webhook-security", "tamper_resilience", "circuit-breaker", "idempotency", "autoscaling", "load-shedding", "rate-limiting", "ssrf", "app-integrity" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_92_tamper_resilience", "framework": "flutter" }, { "id": "mod_93_network_security", "number": 93, "name": "Module 93: Network Security Module", "category": "scale_abuse_and_integrity", "platform": "python", "path": "apps/modules/mod_93_network_security", "description": "Enforces TLS 1.3, strict certificate validation, WebSocket security, and absolute ban on cleartext HTTP traffic.", "capabilities": [], "tags": [ "multi-region", "bot-defense", "abuse-prevention", "session-security", "keystore", "webhook-security", "circuit-breaker", "network_security", "idempotency", "autoscaling", "load-shedding", "rate-limiting", "ssrf", "app-integrity" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_93_network_security", "framework": "python" }, { "id": "mod_94_webhook_security", "number": 94, "name": "Module 94: Webhook Security Module", "category": "scale_abuse_and_integrity", "platform": "python", "path": "apps/modules/mod_94_webhook_security", "description": "Hardens webhook receivers (Stripe, RevenueCat, Firebase):", "capabilities": [ "HMAC SHA-256 signature verification", "Max timestamp drift: 300 seconds", "Webhook idempotency ledger" ], "tags": [ "multi-region", "bot-defense", "abuse-prevention", "webhook_security", "session-security", "keystore", "webhook-security", "circuit-breaker", "idempotency", "autoscaling", "load-shedding", "rate-limiting", "ssrf", "app-integrity" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_94_webhook_security", "framework": "python" }, { "id": "mod_95_file_upload_security", "number": 95, "name": "Module 95: File-Upload Security Module", "category": "scale_abuse_and_integrity", "platform": "python", "path": "apps/modules/mod_95_file_upload_security", "description": "Never trusts extension or `Content-Type`:", "capabilities": [ "Inspects magic bytes (JPEG: `FF D8 FF`, PNG: `89 50 4E 47`, PDF: `25 50 44 46`)", "Generates randomized UUID filenames", "Direct upload via presigned S3/GCS URLs with 15-minute expiration" ], "tags": [ "multi-region", "bot-defense", "file_upload_security", "abuse-prevention", "session-security", "keystore", "webhook-security", "circuit-breaker", "idempotency", "autoscaling", "load-shedding", "rate-limiting", "ssrf", "app-integrity" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_95_file_upload_security", "framework": "python" }, { "id": "mod_96_ssrf_protection", "number": 96, "name": "Module 96: SSRF Protection Module", "category": "scale_abuse_and_integrity", "platform": "python", "path": "apps/modules/mod_96_ssrf_protection", "description": "Guards against OWASP API7: Server-Side Request Forgery.", "capabilities": [], "tags": [ "multi-region", "bot-defense", "abuse-prevention", "session-security", "keystore", "webhook-security", "circuit-breaker", "idempotency", "autoscaling", "load-shedding", "rate-limiting", "ssrf", "app-integrity", "ssrf_protection" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_96_ssrf_protection", "framework": "python" }, { "id": "mod_97_input_security", "number": 97, "name": "Module 97: Input Security Module", "category": "io_security_and_supply_chain", "platform": "python", "path": "apps/modules/mod_97_input_security", "description": "Comprehensive input validation firewall:", "capabilities": [ "SQL injection", "NoSQL injection", "Command injection", "Path traversal", "Prompt injection defense for LLMs" ], "tags": [ "anti-xss", "reproducible-builds", "audit-log", "alerting", "kill-switch", "sbom", "siem", "signing", "branch-protection", "input_security", "input-sanitization", "anti-sqli" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_97_input_security", "framework": "python" }, { "id": "mod_98_output_security", "number": 98, "name": "Module 98: Output Security Module", "category": "io_security_and_supply_chain", "platform": "python", "path": "apps/modules/mod_98_output_security", "description": "Production response shaping:", "capabilities": [ "Scrubs password hashes, internal database IDs, stack traces, and cloud provider metadata from all JSON responses." ], "tags": [ "anti-xss", "output_security", "reproducible-builds", "audit-log", "alerting", "kill-switch", "sbom", "siem", "signing", "branch-protection", "input-sanitization", "anti-sqli" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_98_output_security", "framework": "python" }, { "id": "mod_99_error_leak_prevention", "number": 99, "name": "Module 99: Error-Leak Prevention", "category": "io_security_and_supply_chain", "platform": "python", "path": "apps/modules/mod_99_error_leak_prevention", "description": "Ensures production errors return a generic message + UUID correlation ID:", "capabilities": [], "tags": [ "anti-xss", "error_leak_prevention", "reproducible-builds", "audit-log", "alerting", "kill-switch", "sbom", "siem", "signing", "branch-protection", "input-sanitization", "anti-sqli" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_99_error_leak_prevention", "framework": "python" }, { "id": "mod_100_security_logging", "number": 100, "name": "Module 100: Security Logging Module", "category": "io_security_and_supply_chain", "platform": "python", "path": "apps/modules/mod_100_security_logging", "description": "Structured JSON logging for security events:", "capabilities": [ "Login success / failure", "Password reset", "Privilege changes", "Rate limit triggers", "Never logs raw passwords, full credit card numbers, or auth tokens." ], "tags": [ "anti-xss", "reproducible-builds", "security_logging", "audit-log", "alerting", "kill-switch", "sbom", "siem", "signing", "branch-protection", "input-sanitization", "anti-sqli" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_100_security_logging", "framework": "python" }, { "id": "mod_101_audit_log_system", "number": 101, "name": "Module 101: Audit Log System", "category": "io_security_and_supply_chain", "platform": "python", "path": "apps/modules/mod_101_audit_log_system", "description": "Immutable audit ledger:", "capabilities": [], "tags": [ "anti-xss", "reproducible-builds", "audit-log", "alerting", "kill-switch", "sbom", "audit_log_system", "siem", "signing", "branch-protection", "input-sanitization", "anti-sqli" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_101_audit_log_system", "framework": "python" }, { "id": "mod_102_security_monitoring_siem", "number": 102, "name": "Module 102: Security Monitoring / SIEM", "category": "io_security_and_supply_chain", "platform": "python", "path": "apps/modules/mod_102_security_monitoring_siem", "description": "Aggregates auth logs and API metrics to detect security anomalies (e.g. 50 failed logins in 1 minute).", "capabilities": [], "tags": [ "anti-xss", "reproducible-builds", "security_monitoring_siem", "audit-log", "alerting", "kill-switch", "sbom", "siem", "signing", "branch-protection", "input-sanitization", "anti-sqli" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_102_security_monitoring_siem", "framework": "python" }, { "id": "mod_103_security_alerting", "number": 103, "name": "Module 103: Security Alerting Module", "category": "io_security_and_supply_chain", "platform": "python", "path": "apps/modules/mod_103_security_alerting", "description": "Multi-channel alerting (Slack, PagerDuty, Email) when security thresholds are breached.", "capabilities": [], "tags": [ "anti-xss", "reproducible-builds", "audit-log", "alerting", "kill-switch", "sbom", "siem", "signing", "branch-protection", "input-sanitization", "security_alerting", "anti-sqli" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_103_security_alerting", "framework": "python" }, { "id": "mod_104_incident_response", "number": 104, "name": "Module 104: Incident Response Module", "category": "io_security_and_supply_chain", "platform": "python", "path": "apps/modules/mod_104_incident_response", "description": "Step-by-step incident response playbook:", "capabilities": [], "tags": [ "incident_response", "anti-xss", "reproducible-builds", "audit-log", "alerting", "kill-switch", "sbom", "siem", "signing", "branch-protection", "input-sanitization", "anti-sqli" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_104_incident_response", "framework": "python" }, { "id": "mod_105_emergency_controls", "number": 105, "name": "Module 105: Automatic Emergency Controls", "category": "io_security_and_supply_chain", "platform": "python", "path": "apps/modules/mod_105_emergency_controls", "description": "Remotely freeze operations in case of an attack:", "capabilities": [ "Disable AI generation", "Freeze payments", "Block abusive IP/account", "Force user re-authentication" ], "tags": [ "emergency_controls", "anti-xss", "reproducible-builds", "audit-log", "alerting", "kill-switch", "sbom", "siem", "signing", "branch-protection", "input-sanitization", "anti-sqli" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_105_emergency_controls", "framework": "python" }, { "id": "mod_106_force_upgrade", "number": 106, "name": "Module 106: Force-Upgrade System", "category": "io_security_and_supply_chain", "platform": "python", "path": "apps/modules/mod_106_force_upgrade", "description": "Protects users against critical client vulnerabilities:", "capabilities": [ "`min_supported_version`: Hard block if older", "`recommended_version`: Soft prompt", "`blocked_versions`: Explicit list of revoked releases" ], "tags": [ "anti-xss", "reproducible-builds", "audit-log", "alerting", "kill-switch", "sbom", "siem", "signing", "branch-protection", "force_upgrade", "input-sanitization", "anti-sqli" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_106_force_upgrade", "framework": "python" }, { "id": "mod_107_remote_kill_switch", "number": 107, "name": "Module 107: Remote Kill Switch", "category": "io_security_and_supply_chain", "platform": "python", "path": "apps/modules/mod_107_remote_kill_switch", "description": "Secure remote feature toggles:", "capabilities": [ "Kill switches must be authenticated via dual-operator signatures", "Cached locally with TTL fallback" ], "tags": [ "anti-xss", "remote_kill_switch", "reproducible-builds", "audit-log", "alerting", "kill-switch", "sbom", "siem", "signing", "branch-protection", "input-sanitization", "anti-sqli" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_107_remote_kill_switch", "framework": "python" }, { "id": "mod_108_supply_chain_security", "number": 108, "name": "Module 108: Supply-Chain Security", "category": "io_security_and_supply_chain", "platform": "python", "path": "apps/modules/mod_108_supply_chain_security", "description": "Audits dependencies across all 60+ modules:", "capabilities": [ "Checksum lockfile verification (`pubspec.lock`, `package-lock.json`, `poetry.lock`)", "Automated CVE vulnerability scanning" ], "tags": [ "supply_chain_security", "anti-xss", "reproducible-builds", "audit-log", "alerting", "kill-switch", "sbom", "siem", "signing", "branch-protection", "input-sanitization", "anti-sqli" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_108_supply_chain_security", "framework": "python" }, { "id": "mod_109_sbom_generator", "number": 109, "name": "Module 109: Software Bill of Materials (SBOM)", "category": "io_security_and_supply_chain", "platform": "python", "path": "apps/modules/mod_109_sbom_generator", "description": "Generates CycloneDX / SPDX SBOM JSON for every production build:", "capabilities": [ "Documents all direct & transitive dependencies, licenses, and hashes" ], "tags": [ "anti-xss", "reproducible-builds", "audit-log", "alerting", "kill-switch", "sbom", "siem", "signing", "branch-protection", "sbom_generator", "input-sanitization", "anti-sqli" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_109_sbom_generator", "framework": "python" }, { "id": "mod_110_dependency_policy", "number": 110, "name": "Module 110: Dependency Policy & Evaluation", "category": "io_security_and_supply_chain", "platform": "python", "path": "apps/modules/mod_110_dependency_policy", "description": "Pre-install vetting for new packages:", "capabilities": [ "License check (MIT, Apache 2.0, BSD allowed; GPL/AGPL rejected)", "Maintainer activity within last 12 months" ], "tags": [ "anti-xss", "dependency_policy", "reproducible-builds", "audit-log", "alerting", "kill-switch", "sbom", "siem", "signing", "branch-protection", "input-sanitization", "anti-sqli" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_110_dependency_policy", "framework": "python" }, { "id": "mod_111_secure_build_env", "number": 111, "name": "Module 111: Secure Build Environment", "category": "io_security_and_supply_chain", "platform": "python", "path": "apps/modules/mod_111_secure_build_env", "description": "Hardens CI/CD runners:", "capabilities": [ "Ephemeral containers with zero persistent storage", "Secrets injected only into environment memory, never written to disk" ], "tags": [ "secure_build_env", "anti-xss", "reproducible-builds", "audit-log", "alerting", "kill-switch", "sbom", "siem", "signing", "branch-protection", "input-sanitization", "anti-sqli" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_111_secure_build_env", "framework": "python" }, { "id": "mod_112_reproducible_builds", "number": 112, "name": "Module 112: Reproducible Builds", "category": "io_security_and_supply_chain", "platform": "python", "path": "apps/modules/mod_112_reproducible_builds", "description": "Addresses OWASP MASWE: Non-reproducible builds.", "capabilities": [], "tags": [ "anti-xss", "reproducible-builds", "audit-log", "alerting", "kill-switch", "sbom", "siem", "signing", "branch-protection", "input-sanitization", "reproducible_builds", "anti-sqli" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_112_reproducible_builds", "framework": "python" }, { "id": "mod_113_artifact_signing", "number": 113, "name": "Module 113: Artifact Signing & Provenance", "category": "io_security_and_supply_chain", "platform": "python", "path": "apps/modules/mod_113_artifact_signing", "description": "Signs production artifacts with SHA-256 and records build provenance (Git commit, build ID, signer identity).", "capabilities": [], "tags": [ "anti-xss", "reproducible-builds", "audit-log", "alerting", "kill-switch", "sbom", "siem", "signing", "branch-protection", "artifact_signing", "input-sanitization", "anti-sqli" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_113_artifact_signing", "framework": "python" }, { "id": "mod_114_cicd_security", "number": 114, "name": "Module 114: CI/CD Pipeline Security", "category": "io_security_and_supply_chain", "platform": "python", "path": "apps/modules/mod_114_cicd_security", "description": "Prevents pipeline poisoning:", "capabilities": [ "Step-level least-privilege permissions (`permissions: read-all`)", "Secrets masked in console output" ], "tags": [ "anti-xss", "cicd_security", "reproducible-builds", "audit-log", "alerting", "kill-switch", "sbom", "siem", "signing", "branch-protection", "input-sanitization", "anti-sqli" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_114_cicd_security", "framework": "python" }, { "id": "mod_115_branch_protection", "number": 115, "name": "Module 115: Git Branch Protection", "category": "io_security_and_supply_chain", "platform": "python", "path": "apps/modules/mod_115_branch_protection", "description": "Enforces GitHub branch protection policies:", "capabilities": [ "Mandatory PR reviews", "Passing status checks (SAST, Tests, Linter)", "Signed commits required" ], "tags": [ "anti-xss", "reproducible-builds", "audit-log", "alerting", "kill-switch", "sbom", "branch_protection", "siem", "signing", "branch-protection", "input-sanitization", "anti-sqli" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_115_branch_protection", "framework": "python" }, { "id": "mod_116_sast_scanner", "number": 116, "name": "Module 116: Static Application Security Testing (SAST)", "category": "compliance_and_sast_dast", "platform": "python", "path": "apps/modules/mod_116_sast_scanner", "description": "Scans Dart and Python code for hardcoded secrets, insecure random generators, and missing SSL checks.", "capabilities": [], "tags": [ "gdpr", "ccpa", "sast_scanner", "maswe", "masvs", "privacy", "sast", "dast", "pentest", "data-retention" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_116_sast_scanner", "framework": "python" }, { "id": "mod_117_dast_scanner", "number": 117, "name": "Module 117: Dynamic Application Security Testing (DAST)", "category": "compliance_and_sast_dast", "platform": "python", "path": "apps/modules/mod_117_dast_scanner", "description": "Automated API fuzzer testing for:", "capabilities": [ "SQL injection payloads", "BOLA ID manipulation (`/api/v1/user/1` vs `/api/v1/user/2`)", "Rate limit thresholds" ], "tags": [ "gdpr", "ccpa", "maswe", "masvs", "privacy", "sast", "dast", "pentest", "dast_scanner", "data-retention" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_117_dast_scanner", "framework": "python" }, { "id": "mod_118_penetration_testing", "number": 118, "name": "Module 118: Penetration Testing", "category": "compliance_and_sast_dast", "platform": "python", "path": "apps/modules/mod_118_penetration_testing", "description": "Standard operating procedure & checklist for mobile and API penetration testing.", "capabilities": [], "tags": [ "gdpr", "ccpa", "maswe", "masvs", "privacy", "sast", "penetration_testing", "dast", "pentest", "data-retention" ], "status": "production-ready", "has_tests": true, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_118_penetration_testing", "framework": "python" }, { "id": "mod_119_owasp_masvs_test", "number": 119, "name": "Module 119: OWASP MASVS / MASTG / MASWE Test Suite", "category": "compliance_and_sast_dast", "platform": "python", "path": "apps/modules/mod_119_owasp_masvs_test", "description": "Conforms to OWASP Mobile Application Security Verification Standard (MASVS v2.0) and MASWE 1.0 (78 catalogued weaknesses).", "capabilities": [], "tags": [ "gdpr", "ccpa", "maswe", "masvs", "privacy", "sast", "dast", "pentest", "data-retention", "owasp_masvs_test" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_119_owasp_masvs_test", "framework": "python" }, { "id": "mod_120_privacy_engineering", "number": 120, "name": "Module 120: Privacy Engineering & Data Mapping", "category": "compliance_and_sast_dast", "platform": "python", "path": "apps/modules/mod_120_privacy_engineering", "description": "Maintains an automated data map:", "capabilities": [], "tags": [ "gdpr", "ccpa", "maswe", "masvs", "privacy", "sast", "privacy_engineering", "dast", "pentest", "data-retention" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_120_privacy_engineering", "framework": "python" }, { "id": "mod_121_data_classification", "number": 121, "name": "Module 121: Data Classification", "category": "compliance_and_sast_dast", "platform": "python", "path": "apps/modules/mod_121_data_classification", "description": "Classifies all data into 5 tiers:", "capabilities": [], "tags": [ "gdpr", "ccpa", "data_classification", "maswe", "masvs", "privacy", "sast", "dast", "pentest", "data-retention" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_121_data_classification", "framework": "python" }, { "id": "mod_122_data_retention_engine", "number": 122, "name": "Module 122: Data Retention Engine", "category": "compliance_and_sast_dast", "platform": "python", "path": "apps/modules/mod_122_data_retention_engine", "description": "Automates scheduled data purging:", "capabilities": [ "Access logs: purged after 90 days", "Soft-deleted accounts: purged after 30 days", "Temporary upload files: purged after 24 hours" ], "tags": [ "gdpr", "ccpa", "maswe", "masvs", "privacy", "sast", "data_retention_engine", "dast", "pentest", "data-retention" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_122_data_retention_engine", "framework": "python" }, { "id": "mod_123_account_deletion_pipeline", "number": 123, "name": "Module 123: Account-Deletion Pipeline", "category": "compliance_and_sast_dast", "platform": "python", "path": "apps/modules/mod_123_account_deletion_pipeline", "description": "Apple Guideline 5.1.1 & GDPR Article 17 (Right to Erasure) compliant pipeline:", "capabilities": [], "tags": [ "gdpr", "ccpa", "account_deletion_pipeline", "maswe", "masvs", "privacy", "sast", "dast", "pentest", "data-retention" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_123_account_deletion_pipeline", "framework": "python" }, { "id": "mod_124_child_age_safety", "number": 124, "name": "Module 124: Child & Age Safety", "category": "compliance_and_sast_dast", "platform": "python", "path": "apps/modules/mod_124_child_age_safety", "description": "COPPA & Age-Appropriate Design Code (AADC) compliance:", "capabilities": [ "Age gate before registration", "No behavioral ads or tracking for users under 13" ], "tags": [ "gdpr", "ccpa", "maswe", "masvs", "privacy", "sast", "child_age_safety", "dast", "pentest", "data-retention" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_124_child_age_safety", "framework": "python" }, { "id": "mod_125_compliance_engine", "number": 125, "name": "Module 125: Regulatory & Store Compliance Engine", "category": "compliance_and_sast_dast", "platform": "python", "path": "apps/modules/mod_125_compliance_engine", "description": "Continuously audits compliance:", "capabilities": [ "Google Play Data Safety", "Apple App Privacy Nutrition Labels", "GDPR / CCPA privacy policies" ], "tags": [ "gdpr", "ccpa", "maswe", "masvs", "privacy", "sast", "dast", "pentest", "compliance_engine", "data-retention" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_125_compliance_engine", "framework": "python" }, { "id": "mod_126_third_party_risk", "number": 126, "name": "Module 126: Third-Party Risk Module", "category": "cloud_iam_and_observability", "platform": "python", "path": "apps/modules/mod_126_third_party_risk", "description": "Audits all external SaaS & SDK integrations (OpenAI, Stripe, Firebase, Mixpanel):", "capabilities": [ "Documents data egress, country of processing, and compliance posture." ], "tags": [ "isolation", "third_party_risk", "third-party-risk", "distributed-tracing", "cloud-iam", "synthetic-monitoring", "segmentation", "cost-control" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_126_third_party_risk", "framework": "python" }, { "id": "mod_127_third_party_isolation", "number": 127, "name": "Module 127: Third-Party Failure Isolation", "category": "cloud_iam_and_observability", "platform": "python", "path": "apps/modules/mod_127_third_party_isolation", "description": "Ensures that if an external provider (Analytics, AI, Push) goes down, the core mobile app remains operational.", "capabilities": [], "tags": [ "isolation", "third-party-risk", "distributed-tracing", "cloud-iam", "third_party_isolation", "synthetic-monitoring", "segmentation", "cost-control" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_127_third_party_isolation", "framework": "python" }, { "id": "mod_128_cost_abuse_protection", "number": 128, "name": "Module 128: Cost-Abuse Protection", "category": "cloud_iam_and_observability", "platform": "python", "path": "apps/modules/mod_128_cost_abuse_protection", "description": "Hard limits to prevent massive cloud/AI bills:", "capabilities": [ "Per-user daily cost caps ($1.00/day for free users, $15.00/day for pro users)", "Global kill-switch when daily spend reaches $500.00" ], "tags": [ "isolation", "cost_abuse_protection", "third-party-risk", "distributed-tracing", "cloud-iam", "synthetic-monitoring", "segmentation", "cost-control" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_128_cost_abuse_protection", "framework": "python" }, { "id": "mod_129_billing_anomaly_detection", "number": 129, "name": "Module 129: Billing Anomaly Detection", "category": "cloud_iam_and_observability", "platform": "python", "path": "apps/modules/mod_129_billing_anomaly_detection", "description": "Monitors sudden spikes in API, SMS, or AI consumption (e.g. 5x increase over historical baseline).", "capabilities": [], "tags": [ "isolation", "third-party-risk", "billing_anomaly_detection", "distributed-tracing", "cloud-iam", "synthetic-monitoring", "segmentation", "cost-control" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_129_billing_anomaly_detection", "framework": "python" }, { "id": "mod_130_cache_security", "number": 130, "name": "Module 130: Cache Security", "category": "cloud_iam_and_observability", "platform": "python", "path": "apps/modules/mod_130_cache_security", "description": "Guards Redis / Memcached against cross-user cache contamination:", "capabilities": [ "Prefixes all keys with `tenant_id:user_id:`", "Enforces TTL on all cached records" ], "tags": [ "cache_security", "isolation", "third-party-risk", "distributed-tracing", "cloud-iam", "synthetic-monitoring", "segmentation", "cost-control" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_130_cache_security", "framework": "python" }, { "id": "mod_131_queue_security", "number": 131, "name": "Module 131: Queue Security", "category": "cloud_iam_and_observability", "platform": "python", "path": "apps/modules/mod_131_queue_security", "description": "Protects message queues (RabbitMQ / SQS / Redis Streams):", "capabilities": [ "Message signature verification", "Poison pill dead-letter queue (DLQ) after 3 failed attempts" ], "tags": [ "isolation", "queue_security", "third-party-risk", "distributed-tracing", "cloud-iam", "synthetic-monitoring", "segmentation", "cost-control" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_131_queue_security", "framework": "python" }, { "id": "mod_132_job_idempotency", "number": 132, "name": "Module 132: Job Idempotency", "category": "cloud_iam_and_observability", "platform": "python", "path": "apps/modules/mod_132_job_idempotency", "description": "Ensures background workers never process duplicate tasks (e.g. sending 2 emails, processing 2 invoices).", "capabilities": [], "tags": [ "isolation", "job_idempotency", "third-party-risk", "distributed-tracing", "cloud-iam", "synthetic-monitoring", "segmentation", "cost-control" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_132_job_idempotency", "framework": "python" }, { "id": "mod_133_observability_pillars", "number": 133, "name": "Module 133: Observability Pillars", "category": "cloud_iam_and_observability", "platform": "python", "path": "apps/modules/mod_133_observability_pillars", "description": "Unified telemetry engine:", "capabilities": [ "Structured JSON Logs", "Prometheus / Datadog Metrics", "OpenTelemetry Distributed Traces" ], "tags": [ "isolation", "third-party-risk", "observability_pillars", "distributed-tracing", "cloud-iam", "synthetic-monitoring", "segmentation", "cost-control" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_133_observability_pillars", "framework": "python" }, { "id": "mod_134_distributed_tracing", "number": 134, "name": "Module 134: Distributed Tracing", "category": "cloud_iam_and_observability", "platform": "python", "path": "apps/modules/mod_134_distributed_tracing", "description": "Propagates `traceparent` and correlation IDs across Flutter -> API Gateway -> Backend -> Database.", "capabilities": [], "tags": [ "isolation", "distributed_tracing", "third-party-risk", "distributed-tracing", "cloud-iam", "synthetic-monitoring", "segmentation", "cost-control" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_134_distributed_tracing", "framework": "python" }, { "id": "mod_135_db_performance_engine", "number": 135, "name": "Module 135: Database Performance Engine", "category": "cloud_iam_and_observability", "platform": "python", "path": "apps/modules/mod_135_db_performance_engine", "description": "Optimized for 1M user scale:", "capabilities": [ "Connection pooling limits (max 20 per pod)", "Slow query threshold logger (> 200ms)", "Mandatory index verification on foreign keys" ], "tags": [ "isolation", "db_performance_engine", "third-party-risk", "distributed-tracing", "cloud-iam", "synthetic-monitoring", "segmentation", "cost-control" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_135_db_performance_engine", "framework": "python" }, { "id": "mod_136_pagination_guard", "number": 136, "name": "Module 136: Pagination & Query Limits", "category": "cloud_iam_and_observability", "platform": "python", "path": "apps/modules/mod_136_pagination_guard", "description": "Never permits unbounded `SELECT *`:", "capabilities": [ "Mandatory cursor pagination", "Hard limit of 100 items per page" ], "tags": [ "isolation", "pagination_guard", "third-party-risk", "distributed-tracing", "cloud-iam", "synthetic-monitoring", "segmentation", "cost-control" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_136_pagination_guard", "framework": "python" }, { "id": "mod_137_search_abuse_guard", "number": 137, "name": "Module 137: Search Abuse Protection", "category": "cloud_iam_and_observability", "platform": "python", "path": "apps/modules/mod_137_search_abuse_guard", "description": "Protects search endpoints against ReDoS and resource exhaustion:", "capabilities": [ "Max query length: 100 characters", "Rejects wildcards at query start (`*query`)" ], "tags": [ "isolation", "third-party-risk", "search_abuse_guard", "distributed-tracing", "cloud-iam", "synthetic-monitoring", "segmentation", "cost-control" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_137_search_abuse_guard", "framework": "python" }, { "id": "mod_138_api_versioning", "number": 138, "name": "Module 138: API Versioning & Deprecation", "category": "cloud_iam_and_observability", "platform": "python", "path": "apps/modules/mod_138_api_versioning", "description": "Manages API lifecycle:", "capabilities": [ "Returns `Sunset: ` and `Deprecation: true` HTTP headers for deprecated endpoints." ], "tags": [ "api_versioning", "isolation", "third-party-risk", "distributed-tracing", "cloud-iam", "synthetic-monitoring", "segmentation", "cost-control" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_138_api_versioning", "framework": "python" }, { "id": "mod_139_api_inventory", "number": 139, "name": "Module 139: API Inventory & Shadow Endpoint Detection", "category": "cloud_iam_and_observability", "platform": "python", "path": "apps/modules/mod_139_api_inventory", "description": "OWASP API9 compliance:", "capabilities": [ "Catalog of all registered production endpoints", "Automated alerts if traffic is observed on unregistered endpoints." ], "tags": [ "isolation", "third-party-risk", "api_inventory", "distributed-tracing", "cloud-iam", "synthetic-monitoring", "segmentation", "cost-control" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_139_api_inventory", "framework": "python" }, { "id": "mod_140_edge_security_headers", "number": 140, "name": "Module 140: Edge Security Headers", "category": "cloud_iam_and_observability", "platform": "python", "path": "apps/modules/mod_140_edge_security_headers", "description": "Injects industry-standard HTTP security headers:", "capabilities": [ "`Strict-Transport-Security: max-age=63072000; includeSubDomains; preload`", "`X-Content-Type-Options: nosniff`", "`X-Frame-Options: DENY`", "`Content-Security-Policy: default-src 'none'`" ], "tags": [ "isolation", "edge_security_headers", "third-party-risk", "distributed-tracing", "cloud-iam", "synthetic-monitoring", "segmentation", "cost-control" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_140_edge_security_headers", "framework": "python" }, { "id": "mod_141_ddos_resilience", "number": 141, "name": "Module 141: DDoS Resilience", "category": "cloud_iam_and_observability", "platform": "python", "path": "apps/modules/mod_141_ddos_resilience", "description": "Cloudflare / AWS Shield edge defense:", "capabilities": [ "Layer 7 rate-shedding rules", "Blocks geo-IP anomalies and known malicious autonomous systems (ASNs)" ], "tags": [ "isolation", "ddos_resilience", "third-party-risk", "distributed-tracing", "cloud-iam", "synthetic-monitoring", "segmentation", "cost-control" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_141_ddos_resilience", "framework": "python" }, { "id": "mod_142_network_segmentation", "number": 142, "name": "Module 142: Network Segmentation", "category": "cloud_iam_and_observability", "platform": "python", "path": "apps/modules/mod_142_network_segmentation", "description": "VPC 3-tier network topology:", "capabilities": [], "tags": [ "isolation", "third-party-risk", "network_segmentation", "distributed-tracing", "cloud-iam", "synthetic-monitoring", "segmentation", "cost-control" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_142_network_segmentation", "framework": "python" }, { "id": "mod_143_cloud_iam", "number": 143, "name": "Module 143: Cloud IAM Least Privilege", "category": "cloud_iam_and_observability", "platform": "python", "path": "apps/modules/mod_143_cloud_iam", "description": "Generates least-privilege IAM policies:", "capabilities": [ "Application pods receive only read access to specific S3 buckets", "Zero wildcard `*` permissions" ], "tags": [ "isolation", "cloud_iam", "third-party-risk", "distributed-tracing", "cloud-iam", "synthetic-monitoring", "segmentation", "cost-control" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_143_cloud_iam", "framework": "python" }, { "id": "mod_144_environment_isolation", "number": 144, "name": "Module 144: Environment Isolation", "category": "cloud_iam_and_observability", "platform": "python", "path": "apps/modules/mod_144_environment_isolation", "description": "Strict audit preventing dev/staging from communicating with production databases or buckets.", "capabilities": [], "tags": [ "isolation", "environment_isolation", "third-party-risk", "distributed-tracing", "cloud-iam", "synthetic-monitoring", "segmentation", "cost-control" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_144_environment_isolation", "framework": "python" }, { "id": "mod_145_production_data_protection", "number": 145, "name": "Module 145: Production Data Protection", "category": "cloud_iam_and_observability", "platform": "python", "path": "apps/modules/mod_145_production_data_protection", "description": "Never dumps real customer records into developer laptops:", "capabilities": [ "Synthetic test data generator producing realistic mock users and transactions." ], "tags": [ "isolation", "third-party-risk", "distributed-tracing", "cloud-iam", "production_data_protection", "synthetic-monitoring", "segmentation", "cost-control" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_145_production_data_protection", "framework": "python" }, { "id": "mod_146_support_tool_security", "number": 146, "name": "Module 146: Support-Tool Security", "category": "enterprise_scale_gate_and_monitoring", "platform": "python", "path": "apps/modules/mod_146_support_tool_security", "description": "Hardens customer support dashboards:", "capabilities": [ "Masks PII (emails masked as `j***@gmail.com`, phone numbers as `+1 ***-***-1234`)", "Support agents cannot view raw passwords or execute arbitrary database updates." ], "tags": [ "security-monitor", "fraud-detection", "canary", "chaos-testing", "support_tool_security", "rollback", "scorecard", "1m-scale" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_146_support_tool_security", "framework": "python" }, { "id": "mod_147_social_engineering_defense", "number": 147, "name": "Module 147: Social-Engineering Defense", "category": "enterprise_scale_gate_and_monitoring", "platform": "python", "path": "apps/modules/mod_147_social_engineering_defense", "description": "Standard operating procedure for account recovery:", "capabilities": [ "Mandates out-of-band identity verification before password reset or email changes." ], "tags": [ "security-monitor", "fraud-detection", "canary", "chaos-testing", "social_engineering_defense", "rollback", "scorecard", "1m-scale" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_147_social_engineering_defense", "framework": "python" }, { "id": "mod_148_fraud_detection", "number": 148, "name": "Module 148: Fraud Detection", "category": "enterprise_scale_gate_and_monitoring", "platform": "python", "path": "apps/modules/mod_148_fraud_detection", "description": "Flags high-risk transactions:", "capabilities": [ "Payment velocity checks (> 3 failed card attempts in 10 minutes)", "Disposable email domain blocking" ], "tags": [ "security-monitor", "fraud-detection", "canary", "chaos-testing", "rollback", "scorecard", "fraud_detection", "1m-scale" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_148_fraud_detection", "framework": "python" }, { "id": "mod_149_release_rollback", "number": 149, "name": "Module 149: Release Rollback System", "category": "enterprise_scale_gate_and_monitoring", "platform": "python", "path": "apps/modules/mod_149_release_rollback", "description": "1-command atomic rollback:", "capabilities": [ "Reverts Kubernetes / Docker container tags to prior known-good SHA within 30 seconds." ], "tags": [ "security-monitor", "fraud-detection", "canary", "chaos-testing", "rollback", "scorecard", "release_rollback", "1m-scale" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_149_release_rollback", "framework": "python" }, { "id": "mod_150_canary_releases", "number": 150, "name": "Module 150: Canary Releases", "category": "enterprise_scale_gate_and_monitoring", "platform": "python", "path": "apps/modules/mod_150_canary_releases", "description": "Progressive rollout engine:", "capabilities": [ "Steps: 1% -> 5% -> 25% -> 50% -> 100%", "Automated rollback if canary error rate exceeds 0.5%" ], "tags": [ "security-monitor", "fraud-detection", "canary", "chaos-testing", "canary_releases", "rollback", "scorecard", "1m-scale" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_150_canary_releases", "framework": "python" }, { "id": "mod_151_feature_gated_migrations", "number": 151, "name": "Module 151: Feature-Gated Migrations", "category": "enterprise_scale_gate_and_monitoring", "platform": "python", "path": "apps/modules/mod_151_feature_gated_migrations", "description": "Dual-schema backward compatibility:", "capabilities": [ "Phase 1: Add new column (nullable)", "Phase 2: Dual-write from new app version", "Phase 3: Backfill old rows", "Phase 4: Make column non-null" ], "tags": [ "feature_gated_migrations", "security-monitor", "fraud-detection", "canary", "chaos-testing", "rollback", "scorecard", "1m-scale" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_151_feature_gated_migrations", "framework": "python" }, { "id": "mod_152_security_regression_suite", "number": 152, "name": "Module 152: Security Regression Suite", "category": "enterprise_scale_gate_and_monitoring", "platform": "python", "path": "apps/modules/mod_152_security_regression_suite", "description": "> \"A vulnerability should never be fixed only once.\"", "capabilities": [], "tags": [ "security-monitor", "fraud-detection", "canary", "chaos-testing", "security_regression_suite", "rollback", "scorecard", "1m-scale" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_152_security_regression_suite", "framework": "python" }, { "id": "mod_153_security_scorecard", "number": 153, "name": "Module 153: Security Scorecard per App", "category": "enterprise_scale_gate_and_monitoring", "platform": "python", "path": "apps/modules/mod_153_security_scorecard", "description": "14-dimension security scorecard release gate:", "capabilities": [], "tags": [ "security-monitor", "fraud-detection", "canary", "chaos-testing", "security_scorecard", "rollback", "scorecard", "1m-scale" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_153_security_scorecard", "framework": "python" }, { "id": "mod_154_security_release_gate", "number": 154, "name": "Module 154: Security Release Gate", "category": "enterprise_scale_gate_and_monitoring", "platform": "python", "path": "apps/modules/mod_154_security_release_gate", "description": "Pipeline gatekeeper blocking production deployment unless 100% of critical security checks pass.", "capabilities": [], "tags": [ "security-monitor", "fraud-detection", "canary", "chaos-testing", "rollback", "scorecard", "1m-scale", "security_release_gate" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_154_security_release_gate", "framework": "python" }, { "id": "mod_155_1m_user_scale_gate", "number": 155, "name": "Module 155: 1M User Scale Gate", "category": "enterprise_scale_gate_and_monitoring", "platform": "python", "path": "apps/modules/mod_155_1m_user_scale_gate", "description": "Simulates 10k, 50k, 100k, and 1M registered user loads:", "capabilities": [ "Peak RPS capacity testing", "Database read/write IOPS under load" ], "tags": [ "security-monitor", "fraud-detection", "canary", "chaos-testing", "rollback", "scorecard", "1m-scale", "1m_user_scale_gate" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_155_1m_user_scale_gate", "framework": "python" }, { "id": "mod_156_capacity_planning", "number": 156, "name": "Module 156: Capacity Planning Engine", "category": "enterprise_scale_gate_and_monitoring", "platform": "python", "path": "apps/modules/mod_156_capacity_planning", "description": "Calculates required compute pods, database storage, and egress bandwidth based on projected MAU.", "capabilities": [], "tags": [ "capacity_planning", "security-monitor", "fraud-detection", "canary", "chaos-testing", "rollback", "scorecard", "1m-scale" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_156_capacity_planning", "framework": "python" }, { "id": "mod_157_chaos_testing", "number": 157, "name": "Module 157: Chaos & Failure Testing", "category": "enterprise_scale_gate_and_monitoring", "platform": "python", "path": "apps/modules/mod_157_chaos_testing", "description": "Simulates real-world infrastructure failures:", "capabilities": [ "Simulates sudden database dropouts", "Simulates Redis cache eviction", "Verifies system recovers automatically within 10 seconds" ], "tags": [ "security-monitor", "fraud-detection", "canary", "chaos-testing", "chaos_testing", "rollback", "scorecard", "1m-scale" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_157_chaos_testing", "framework": "python" }, { "id": "mod_158_business_continuity", "number": 158, "name": "Module 158: Business Continuity Module", "category": "enterprise_scale_gate_and_monitoring", "platform": "python", "path": "apps/modules/mod_158_business_continuity", "description": "Playbooks for major external failures:", "capabilities": [ "Cloud provider outage", "Stripe / RevenueCat payment gateway outage", "OpenAI / AI provider outage" ], "tags": [ "business_continuity", "security-monitor", "fraud-detection", "canary", "chaos-testing", "rollback", "scorecard", "1m-scale" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_158_business_continuity", "framework": "python" }, { "id": "mod_159_vulnerability_disclosure", "number": 159, "name": "Module 159: Vulnerability Disclosure Program (VDP)", "category": "enterprise_scale_gate_and_monitoring", "platform": "python", "path": "apps/modules/mod_159_vulnerability_disclosure", "description": "Provides standard `security.txt` and responsible disclosure guidelines for security researchers.", "capabilities": [], "tags": [ "vulnerability_disclosure", "security-monitor", "fraud-detection", "canary", "chaos-testing", "rollback", "scorecard", "1m-scale" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_159_vulnerability_disclosure", "framework": "python" }, { "id": "mod_160_security_patch_pipeline", "number": 160, "name": "Module 160: Security Patch Pipeline", "category": "enterprise_scale_gate_and_monitoring", "platform": "python", "path": "apps/modules/mod_160_security_patch_pipeline", "description": "Automates patching shared factory modules across all 100+ apps:", "capabilities": [], "tags": [ "security-monitor", "fraud-detection", "canary", "chaos-testing", "security_patch_pipeline", "rollback", "scorecard", "1m-scale" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_160_security_patch_pipeline", "framework": "python" }, { "id": "mod_161_blast_radius_control", "number": 161, "name": "Module 161: Blast-Radius Control", "category": "enterprise_scale_gate_and_monitoring", "platform": "python", "path": "apps/modules/mod_161_blast_radius_control", "description": "Never auto-updates all 100 apps at once when a shared module changes:", "capabilities": [ "Enforces semantic versioning on shared packages", "Gradual rollout of shared components to 5 canary apps before widespread deployment" ], "tags": [ "security-monitor", "fraud-detection", "canary", "chaos-testing", "blast_radius_control", "rollback", "scorecard", "1m-scale" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_161_blast_radius_control", "framework": "python" }, { "id": "mod_162_factory_security_monitor", "number": 162, "name": "Module 162: Factory Security Monitor", "category": "enterprise_scale_gate_and_monitoring", "platform": "python", "path": "apps/modules/mod_162_factory_security_monitor", "description": "Central CLI & dashboard aggregating security posture across the 100-app portfolio:", "capabilities": [ "Compliance status", "Expiring certificates & keystores", "Outdated dependencies" ], "tags": [ "security-monitor", "fraud-detection", "canary", "chaos-testing", "factory_security_monitor", "rollback", "scorecard", "1m-scale" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_162_factory_security_monitor", "framework": "python" }, { "id": "mod_163_final_production_architecture", "number": 163, "name": "Module 163: Final Production Architecture", "category": "enterprise_scale_gate_and_monitoring", "platform": "python", "path": "apps/modules/mod_163_final_production_architecture", "description": "The unified synthesis of the complete 163-module production system:", "capabilities": [], "tags": [ "final_production_architecture", "security-monitor", "fraud-detection", "canary", "chaos-testing", "rollback", "scorecard", "1m-scale" ], "status": "production-ready", "has_tests": false, "domain": "apps", "domain_name": "Mobile Applications", "domain_icon": "\ud83d\udcf1", "pull_command": "bash scripts/pull-module.sh apps/modules/mod_163_final_production_architecture", "framework": "python" } ] }