911 lines
45 KiB
Markdown
911 lines
45 KiB
Markdown
# Project Portfolio: Complete Strategic Positioning
|
|
|
|
## Executive Summary
|
|
|
|
Portfolio of five Rust projects forming a complete ecosystem for modern software development:
|
|
|
|
| Project | Primary Domain | Key Capabilities |
|
|
| ---------- | ------------------- | ------------------- |
|
|
| **Vapora** | Development Platform | Orchestration, Kanban, multi-tenant, LLM routing, knowledge graph |
|
|
| **Kogral** | Knowledge Management | Knowledge graph, ADRs, patterns, guidelines, semantic search |
|
|
| **TypeDialog** | Interaction and Automation | Multi-backend forms, agents, IaC generation, i18n, validation |
|
|
| **Provisioning** | Infrastructure | Declarative IaC, multi-cloud, enterprise security, orchestration |
|
|
| **SecretumVault** | Security | Secrets management, post-quantum cryptography, multi-backend |
|
|
|
|
---
|
|
|
|
## 1. Vapora: Intelligent Development Platform
|
|
|
|
### Overview
|
|
|
|
Vapora is a **development orchestration platform** that unifies project management, AI agent coordination, and complete development lifecycle visibility.
|
|
|
|
### Complete Capabilities
|
|
|
|
#### Project Management
|
|
|
|
| Functionality | Description |
|
|
| --------------- | ------------- |
|
|
| **Kanban Board** | Drag-and-drop with Todo → Doing → Review → Done columns |
|
|
| **Real-time Collaboration** | Optimistic updates, WebSocket sync |
|
|
| **Task Tracking** | Priorities, tags, assignments, sorting |
|
|
| **Project Hierarchy** | Workspaces → Projects → Tasks with isolated scopes |
|
|
| **Change Tracking** | Change history with impact analysis |
|
|
|
|
#### Multi-Tenancy and Security
|
|
|
|
| Functionality | Description |
|
|
| --------------- | ------------- |
|
|
| **SurrealDB Scopes** | Native tenant isolation |
|
|
| **Cedar RBAC** | Fine-grained declarative policies |
|
|
| **JWT Auth** | Tokens with refresh rotation |
|
|
| **Audit Trail** | Logging of significant changes |
|
|
|
|
#### Agent Orchestration
|
|
|
|
| Functionality | Description |
|
|
| --------------- | ------------- |
|
|
| **12 Roles** | Architect, Developer, Reviewer, Tester, Documenter, etc. |
|
|
| **Learning Profiles** | Expertise per task type with recency bias (3x last 7 days) |
|
|
| **Pipeline Execution** | Sequences with approval gates |
|
|
| **NATS JetStream** | Async coordination with guaranteed delivery |
|
|
|
|
#### LLM Router
|
|
|
|
| Functionality | Description |
|
|
| --------------- | ------------- |
|
|
| **4 Providers** | Claude, OpenAI, Gemini, Ollama |
|
|
| **Budget Control** | Limits per role (monthly/weekly) |
|
|
| **Auto-Fallback** | Switch to cheaper provider when exceeding budget |
|
|
| **Cost Tracking** | Tokens and costs per request/role/provider |
|
|
|
|
#### Temporal Knowledge Graph
|
|
|
|
| Functionality | Description |
|
|
| --------------- | ------------- |
|
|
| **Execution History** | Nodes with causal relationships |
|
|
| **Learning Curves** | Daily aggregations for improvement tracking |
|
|
| **Similarity Search** | Recommendations based on past tasks |
|
|
|
|
#### Frontend (Leptos WASM)
|
|
|
|
| Functionality | Description |
|
|
| --------------- | ------------- |
|
|
| **Glassmorphism UI** | Modern vaporwave aesthetic |
|
|
| **Responsive** | Mobile to ultra-wide |
|
|
| **Optimistic Updates** | Smooth UX without waiting for server |
|
|
| **UnoCSS** | Atomic CSS Tailwind-compatible |
|
|
|
|
#### Observability
|
|
|
|
| Functionality | Description |
|
|
| --------------- | ------------- |
|
|
| **Prometheus Metrics** | Request latency, agent duration, token usage |
|
|
| **OpenTelemetry** | Distributed tracing |
|
|
| **Structured Logging** | JSON output with tracing |
|
|
|
|
### Architecture
|
|
|
|
```text
|
|
┌─────────────────────────────────────────────────────────────────┐
|
|
│ Vapora (13 crates, 218+ tests) │
|
|
├─────────────────────────────────────────────────────────────────┤
|
|
│ │
|
|
│ ┌─────────────┐ ┌─────────────┐ ┌─────────────────────────┐ │
|
|
│ │ Frontend │ │ Backend │ │ Agent System │ │
|
|
│ │ (Leptos) │──│ (Axum) │──│ (Coordinator + NATS) │ │
|
|
│ │ Kanban UI │ │ 40+ APIs │ │ Learning + Pipelines │ │
|
|
│ └─────────────┘ └──────┬──────┘ └───────────┬─────────────┘ │
|
|
│ │ │ │
|
|
│ ┌───────────────────────┴──────────────────────┴─────────────┐ │
|
|
│ │ LLM Router │ │
|
|
│ │ Claude │ OpenAI │ Gemini │ Ollama │ Budget │ Fallback │ │
|
|
│ └────────────────────────────────────────────────────────────┘ │
|
|
│ │ │
|
|
│ ┌───────────────────────┴───────────────────────────────────┐ │
|
|
│ │ Persistence: SurrealDB (scopes) + NATS JetStream │ │
|
|
│ └───────────────────────────────────────────────────────────┘ │
|
|
└─────────────────────────────────────────────────────────────────┘
|
|
```
|
|
|
|
---
|
|
|
|
## 2. Kogral: Knowledge Management System
|
|
|
|
### Overview
|
|
|
|
Kogral is a **git-native knowledge graph** designed to capture, connect and query development team knowledge.
|
|
|
|
### Complete Capabilities
|
|
|
|
#### Knowledge Model
|
|
|
|
| Node Type | Purpose |
|
|
| -------------- | ----------- |
|
|
| **Note** | General notes, observations |
|
|
| **Decision (ADR)** | Architectural Decision Records with context/decision/consequences |
|
|
| **Guideline** | Team/organization standards |
|
|
| **Pattern** | Documented reusable solutions |
|
|
| **Journal** | Development diary (progress, blockers, learnings) |
|
|
| **Execution** | Agent execution records |
|
|
|
|
| Relation Type | Purpose |
|
|
| ------------------ | ----------- |
|
|
| **relates_to** | General connection |
|
|
| **depends_on** | Dependency |
|
|
| **implements** | Concept implementation |
|
|
| **extends** | Extension/specialization |
|
|
| **supersedes** | Replaces previous version |
|
|
| **explains** | Documentation/explanation |
|
|
|
|
#### Multi-Backend Storage
|
|
|
|
| Backend | Characteristics |
|
|
| --------- | ----------------- |
|
|
| **Filesystem** | Git-friendly, markdown + YAML frontmatter, `.kogral/` |
|
|
| **SurrealDB** | Scalable, graph queries, org-wide shared knowledge |
|
|
| **Memory** | Testing with DashMap |
|
|
|
|
#### Search
|
|
|
|
| Capability | Description |
|
|
| ----------- | ------------- |
|
|
| **Text Search** | Full-text search over content |
|
|
| **Semantic Search** | Embeddings with fastembed (local) or cloud providers |
|
|
| **Graph Traversal** | Navigation through relationships |
|
|
| **Filtering** | By type, tags, date, metadata |
|
|
|
|
#### Guideline Inheritance
|
|
|
|
```text
|
|
Org Guidelines (base)
|
|
│
|
|
▼ override
|
|
Project Guidelines (specific)
|
|
│
|
|
▼ merge with priority
|
|
Effective Guidelines (applied)
|
|
```
|
|
|
|
#### Logseq Compatibility
|
|
|
|
| Feature | Support |
|
|
| --------- | --------- |
|
|
| **Outliner Blocks** | Preserved hierarchical structure |
|
|
| **Task Statuses** | TODO, DOING, DONE, LATER, NOW, WAITING, CANCELLED |
|
|
| **Wikilinks** | Bidirectional `[[references]]` |
|
|
| **Properties** | Metadata in frontmatter |
|
|
| **Tags** | Preserved #tags |
|
|
|
|
#### MCP Server (Claude Code)
|
|
|
|
| Tool | Function |
|
|
| ------ | --------- |
|
|
| `search` | Text/semantic search |
|
|
| `add_note` | Create note |
|
|
| `add_decision` | Create guided ADR |
|
|
| `link` | Establish relationship |
|
|
| `get_guidelines` | Get applicable guidelines |
|
|
| `list_graphs` | List available graphs |
|
|
| `export` | Export to format |
|
|
|
|
#### Export and Templates
|
|
|
|
| Format | Support |
|
|
| --------- | --------- |
|
|
| **Markdown** | With YAML frontmatter |
|
|
| **JSON** | Complete structure |
|
|
| **YAML** | Human-readable |
|
|
| **Tera Templates** | Custom generation |
|
|
|
|
### Architecture
|
|
|
|
```text
|
|
┌─────────────────────────────────────────────────────────────────┐
|
|
│ Kogral (3 crates, 56 tests) │
|
|
├─────────────────────────────────────────────────────────────────┤
|
|
│ │
|
|
│ ┌─────────────┐ ┌─────────────┐ ┌─────────────────────────┐ │
|
|
│ │ CLI │ │ MCP Server │ │ Core Library │ │
|
|
│ │ 13 cmds │ │ Claude Code│ │ Models + Storage + │ │
|
|
│ │ clap │ │ 7 tools │ │ Query + Embeddings │ │
|
|
│ └──────┬──────┘ └──────┬──────┘ └────────────┬────────────┘ │
|
|
│ │ │ │ │
|
|
│ └────────────────┼──────────────────────┘ │
|
|
│ │ │
|
|
│ ┌───────────────────────┴───────────────────────────────────┐ │
|
|
│ │ Storage Backends │ │
|
|
│ │ Filesystem (.kogral/) │ SurrealDB │ Memory (test) │ │
|
|
│ └───────────────────────────────────────────────────────────┘ │
|
|
│ │ │
|
|
│ ┌───────────────────────┴───────────────────────────────────┐ │
|
|
│ │ Embeddings: fastembed (local) │ rig-core (cloud) │ │
|
|
│ └───────────────────────────────────────────────────────────┘ │
|
|
└─────────────────────────────────────────────────────────────────┘
|
|
```
|
|
|
|
---
|
|
|
|
## 3. TypeDialog: Unified Interaction Platform
|
|
|
|
### Overview
|
|
|
|
TypeDialog is a **forms and automation system** that unifies multiple interfaces (CLI, TUI, Web) with agent execution and infrastructure generation.
|
|
|
|
### Complete Capabilities
|
|
|
|
#### Execution Backends
|
|
|
|
| Backend | Technology | Typical Use |
|
|
| --------- | ------------ | ------------ |
|
|
| **CLI** | inquire | Scripts, CI/CD, automation |
|
|
| **TUI** | ratatui | Terminal dashboards, admin tools |
|
|
| **Web** | axum + HTMX | SaaS, public forms |
|
|
| **AI** | tantivy + petgraph | RAG, semantic search |
|
|
| **Agent** | Tera + Nickel | LLM execution from .agent.mdx |
|
|
| **Prov-gen** | Nickel + Templates | Multi-cloud IaC |
|
|
|
|
#### Field Types
|
|
|
|
| Type | Characteristics |
|
|
| ------ | ----------------- |
|
|
| **text** | Regex validation, length, patterns |
|
|
| **confirm** | Yes/No boolean |
|
|
| **select** | Single choice with filtering |
|
|
| **multi-select** | Multiple choice (list/grid/dropdown) |
|
|
| **password** | Masked input |
|
|
| **custom** | User-defined types |
|
|
| **editor** | Multi-line with external editor support |
|
|
| **date** | Date/time picker |
|
|
|
|
#### Validation and Contracts
|
|
|
|
| Capability | Description |
|
|
| ----------- | ------------- |
|
|
| **Regex Patterns** | Regular expression validation |
|
|
| **Length Constraints** | min/max length |
|
|
| **Cross-field Logic** | Inter-field validation |
|
|
| **Nickel Contracts** | Type-safe pre/post validation |
|
|
| **Custom Validators** | Custom validation functions |
|
|
|
|
#### Advanced Forms
|
|
|
|
| Feature | Description |
|
|
| --------- | ------------- |
|
|
| **Sections** | Logical field grouping |
|
|
| **Conditional Fields** | Dynamic visibility based on values |
|
|
| **Smart Defaults** | Computed default values |
|
|
| **Repeating Groups** | Dynamically repeatable fields |
|
|
| **Fragment Composition** | Reusable templates with inheritance |
|
|
| **Includes** | Fragment imports |
|
|
|
|
#### Internationalization (i18n)
|
|
|
|
| Capability | Description |
|
|
| ----------- | ------------- |
|
|
| **Fluent Bundles** | .ftl files for translations |
|
|
| **Auto-Locale** | Automatic detection via sys-locale |
|
|
| **Form Translation** | Translated labels, hints, errors |
|
|
| **Extraction** | Auto-extraction of strings from schemas |
|
|
|
|
#### Output Formats
|
|
|
|
| Format | Support |
|
|
| --------- | --------- |
|
|
| **JSON** | Standard, universal compatible |
|
|
| **YAML** | Human-readable |
|
|
| **TOML** | Rust-friendly configuration |
|
|
| **Nickel** | Type-safe with contracts |
|
|
|
|
#### Agent System
|
|
|
|
| Capability | Description |
|
|
| ----------- | ------------- |
|
|
| **MDX Format** | Extended markdown with YAML frontmatter |
|
|
| **4 LLM Providers** | Claude, OpenAI, Gemini, Ollama |
|
|
| **Tera Templates** | Variables, imports, shell commands |
|
|
| **Output Validation** | Format, content, length checks |
|
|
| **Streaming** | Real-time token streaming |
|
|
|
|
#### IaC Generation (Prov-gen)
|
|
|
|
| Capability | Description |
|
|
| ----------- | ------------- |
|
|
| **6 Cloud Providers** | AWS, GCP, Azure, Hetzner, UpCloud, LXD |
|
|
| **7-Layer Validation** | Complete validation pipeline |
|
|
| **AI-Assisted** | Optional configuration with Claude/Ollama |
|
|
| **Template Fragments** | Provider-specific fragments |
|
|
|
|
#### Security
|
|
|
|
| Capability | Description |
|
|
| ----------- | ------------- |
|
|
| **Field Encryption** | Field-level encryption |
|
|
| **Password Masking** | Across all backends |
|
|
| **Validation Contracts** | Invalid data prevention |
|
|
|
|
### Architecture
|
|
|
|
```text
|
|
┌─────────────────────────────────────────────────────────────────┐
|
|
│ TypeDialog (8 crates, 3,818 tests) │
|
|
├─────────────────────────────────────────────────────────────────┤
|
|
│ │
|
|
│ Form Definition (TOML) │
|
|
│ │ │
|
|
│ ▼ │
|
|
│ ┌─────────────────────────────────────────────────────────────┐│
|
|
│ │ BackendFactory ││
|
|
│ └─────────────────────────────────────────────────────────────┘│
|
|
│ │ │
|
|
│ ┌──────┼──────┬──────┬──────┬──────┬──────┐ │
|
|
│ │ │ │ │ │ │ │ │
|
|
│ ▼ ▼ ▼ ▼ ▼ ▼ │ │
|
|
│ CLI TUI Web AI Agent Prov-gen │ │
|
|
│(inquire)(ratatui)(axum)(tantivy)(Tera)(Nickel) │
|
|
│ │ │ │ │ │ │ │ │
|
|
│ └──────┴──────┴──────┴──────┴──────┴──────┘ │
|
|
│ │ │
|
|
│ ┌───────────────────────┴───────────────────────────────────┐ │
|
|
│ │ Output: JSON │ YAML │ TOML │ Nickel │ │
|
|
│ │ Validation: Nickel Contracts │ │
|
|
│ └───────────────────────────────────────────────────────────┘ │
|
|
└─────────────────────────────────────────────────────────────────┘
|
|
```
|
|
|
|
---
|
|
|
|
## 4. Provisioning: Infrastructure Platform
|
|
|
|
### Overview
|
|
|
|
Provisioning is an **enterprise IaC platform** that combines declarative configuration (Nickel), advanced orchestration, complete security, and AI assistance.
|
|
|
|
### Complete Capabilities
|
|
|
|
#### Modular CLI
|
|
|
|
| Aspect | Detail |
|
|
| --------- | --------- |
|
|
| **Size** | 211 lines (84% reduction from 1,329) |
|
|
| **Shortcuts** | 80+ shortcuts (`s` → server, `t` → taskserv) |
|
|
| **Modules** | 7 domains (infra, orchestration, dev, workspace, config, utils, gen) |
|
|
| **Guides** | Interactive with glow/bat/less |
|
|
|
|
#### Configuration System
|
|
|
|
| Capability | Description |
|
|
| ----------- | ------------- |
|
|
| **476+ Accessors** | Replacement for 200+ environment variables |
|
|
| **Hierarchical Loading** | defaults → user → project → infra → env → runtime |
|
|
| **Interpolation** | Dynamically expanded variables |
|
|
| **Multi-format** | TOML, YAML, Nickel |
|
|
|
|
#### Multi-Cloud Support
|
|
|
|
| Provider | Capabilities |
|
|
| ---------- | ------------- |
|
|
| **AWS** | EC2, EKS, RDS, S3, IAM, VPC |
|
|
| **UpCloud** | Servers, networking, storage |
|
|
| **Local** | LXD containers, local VMs |
|
|
|
|
#### Batch Workflows
|
|
|
|
| Capability | Description |
|
|
| ----------- | ------------- |
|
|
| **Mixed Providers** | AWS + UpCloud + local in same workflow |
|
|
| **Schema Integration** | KCL/Nickel type-safe |
|
|
| **Dependency Resolution** | Automatic topological sorting |
|
|
| **State Management** | Checkpoints with recovery |
|
|
| **Rollback** | Automatic on failures |
|
|
| **Token Efficiency** | 85-90% |
|
|
|
|
#### Hybrid Orchestrator
|
|
|
|
| Capability | Description |
|
|
| ----------- | ------------- |
|
|
| **Rust + Nushell** | Combines performance and flexibility |
|
|
| **File Persistence** | State persisted to filesystem |
|
|
| **Priority Processing** | Priority queues |
|
|
| **Retry Logic** | Exponential backoff |
|
|
| **REST API** | External integration |
|
|
| **Parallel Execution** | Load balancing |
|
|
|
|
#### Workspace Management
|
|
|
|
| Capability | Description |
|
|
| ----------- | ------------- |
|
|
| **Single-command Switch** | Instant environment switching |
|
|
| **Tracking** | Last-used timestamps |
|
|
| **Registry** | Centralized registry |
|
|
| **Preferences** | Per-user configuration |
|
|
|
|
#### Test Environment Service
|
|
|
|
| Type | Description |
|
|
| ------ | ------------- |
|
|
| **Single Taskserv** | Individual service test |
|
|
| **Server Simulation** | Complete server simulation |
|
|
| **Multi-node Clusters** | Clusters with topologies (K8s HA, etcd) |
|
|
|
|
#### Platform Installer
|
|
|
|
| Mode | Resources |
|
|
| ------ | ---------- |
|
|
| **Solo** | 2 CPU, 4GB RAM |
|
|
| **MultiUser** | 4 CPU, 8GB RAM |
|
|
| **CICD** | 8 CPU, 16GB RAM |
|
|
| **Enterprise** | 16 CPU, 32GB RAM |
|
|
|
|
| Interface | Description |
|
|
| ----------- | ------------- |
|
|
| **TUI** | Interactive Ratatui |
|
|
| **CLI** | Headless automation |
|
|
| **Unattended** | No interaction |
|
|
|
|
#### Version Management
|
|
|
|
| Capability | Description |
|
|
| ----------- | ------------- |
|
|
| **Centralized** | All versions in Nickel |
|
|
| **Bash-compatible** | Sourceable file generation |
|
|
| **Auto-discovery** | Provider version detection |
|
|
| **Shell Integration** | `source /provisioning/core/versions` |
|
|
|
|
#### Nushell Plugins
|
|
|
|
| Plugin | Function | Improvement |
|
|
| -------- | --------- | -------- |
|
|
| **auth** | Authentication | 10-50x vs HTTP |
|
|
| **KMS** | Key management | Native OS keyring |
|
|
| **orchestrator** | Workflow coordination | Performance |
|
|
|
|
#### Complete Security System
|
|
|
|
| Component | Capabilities |
|
|
| ------------ | ------------- |
|
|
| **Authentication** | JWT + Argon2id hashing |
|
|
| **MFA** | TOTP + WebAuthn/FIDO2 |
|
|
| **Authorization** | Cedar policy engine (fine-grained RBAC) |
|
|
| **Secrets** | Dynamic secrets with TTL |
|
|
| **KMS** | 5 backends (RustyVault, Age, AWS KMS, Vault, Cosmian) |
|
|
| **Encryption** | Envelope encryption |
|
|
| **Audit** | 7-year retention, 5 export formats |
|
|
| **Break-glass** | Multi-party approval |
|
|
|
|
**Security Metrics**: 39,699 lines, 12 components
|
|
|
|
#### AI Integration
|
|
|
|
| Capability | Description |
|
|
| ----------- | ------------- |
|
|
| **MCP Server** | Rust-native (1000x vs Python) |
|
|
| **RAG System** | 1,200+ domain docs |
|
|
| **NLP** | Intent recognition, entity extraction |
|
|
| **Multi-provider** | OpenAI, Claude, Ollama |
|
|
| **Nickel Generation** | With automatic validation |
|
|
|
|
### Architecture
|
|
|
|
```text
|
|
┌─────────────────────────────────────────────────────────────────┐
|
|
│ Provisioning (v5.0.0-nickel, 218+ tests) │
|
|
├─────────────────────────────────────────────────────────────────┤
|
|
│ │
|
|
│ ┌─────────────┐ ┌─────────────┐ ┌─────────────────────────┐ │
|
|
│ │ CLI │ │ Control │ │ Platform │ │
|
|
│ │ 211 lines │ │ Center │ │ Orchestrator │ │
|
|
│ │ 80+ shorts │ │ (Axum) │ │ (Rust/Nu hybrid) │ │
|
|
│ └──────┬──────┘ └──────┬──────┘ └────────────┬────────────┘ │
|
|
│ │ │ │ │
|
|
│ ┌──────┴────────────────┴──────────────────────┴─────────────┐ │
|
|
│ │ Extensions │ │
|
|
│ │ Providers: AWS │ UpCloud │ Local │ │
|
|
│ │ Taskservs: 50+ infrastructure services │ │
|
|
│ │ Clusters: K8s, etcd, etc. templates │ │
|
|
│ │ Workflows: Automation definitions │ │
|
|
│ └────────────────────────────────────────────────────────────┘ │
|
|
│ │ │
|
|
│ ┌───────────────────────┴───────────────────────────────────┐ │
|
|
│ │ Security Layer (39K lines, 12 components) │ │
|
|
│ │ JWT │ Cedar │ MFA │ KMS │ Audit │ Secrets │ │
|
|
│ └───────────────────────────────────────────────────────────┘ │
|
|
│ │ │
|
|
│ ┌───────────────────────┴───────────────────────────────────┐ │
|
|
│ │ AI Layer: MCP Server │ RAG (1200+ docs) │ LLM Providers │ │
|
|
│ └───────────────────────────────────────────────────────────┘ │
|
|
│ │ │
|
|
│ ┌───────────────────────┴───────────────────────────────────┐ │
|
|
│ │ State: SurrealDB │ Filesystem │ Nickel Schemas │ │
|
|
│ └───────────────────────────────────────────────────────────┘ │
|
|
└─────────────────────────────────────────────────────────────────┘
|
|
```
|
|
|
|
---
|
|
|
|
## 5. SecretumVault: Post-Quantum Secrets Management
|
|
|
|
### Overview
|
|
|
|
SecretumVault is a **secrets management system** written in Rust with **production-ready post-quantum cryptography** (ML-KEM-768, ML-DSA-65 per NIST FIPS 203/204).
|
|
|
|
### Complete Capabilities
|
|
|
|
#### Cryptographic Backends
|
|
|
|
| Backend | Algorithms | Status |
|
|
| --------- | ------------ | -------- |
|
|
| **OpenSSL** | RSA-2048/4096, ECDSA (P-256/384/521), AES-256-GCM | ✅ Production |
|
|
| **OQS** | ML-KEM-768, ML-DSA-65 | ✅ **Production (PQC)** |
|
|
| **AWS-LC** | RSA, ECDSA (experimental PQC) | ⚠️ Experimental |
|
|
| **RustCrypto** | AES-256-GCM, ChaCha20-Poly1305 | ⚠️ Testing |
|
|
|
|
#### Secrets Engines
|
|
|
|
| Engine | Functionality |
|
|
| ------- | --------------- |
|
|
| **KV Engine** | Versioned secret storage |
|
|
| **Transit Engine** | Encryption-as-a-service with key rotation |
|
|
| **PKI Engine** | X.509 certificate generation, CA management |
|
|
| **Database Engine** | Dynamic credentials with TTL |
|
|
|
|
#### Storage Backends
|
|
|
|
| Backend | Typical Use |
|
|
| --------- | ------------ |
|
|
| **Filesystem** | Development, single-node |
|
|
| **etcd** | Kubernetes, high availability |
|
|
| **SurrealDB** | Complex queries, time-series |
|
|
| **PostgreSQL** | Enterprise, guaranteed ACID |
|
|
|
|
#### Enterprise Security
|
|
|
|
| Component | Capabilities |
|
|
| ------------ | ------------- |
|
|
| **Seal/Unseal** | Shamir Secret Sharing (K of N threshold) |
|
|
| **Authentication** | Token-based with configurable TTL |
|
|
| **Authorization** | Cedar ABAC (AWS-compatible policies) |
|
|
| **TLS/mTLS** | In-transit encryption + client verification |
|
|
| **Audit** | Structured logging of all events |
|
|
|
|
### Architecture
|
|
|
|
```text
|
|
┌─────────────────────────────────────────────────────────────────┐
|
|
│ SecretumVault (~11K LOC, 50+ tests) │
|
|
├─────────────────────────────────────────────────────────────────┤
|
|
│ │
|
|
│ ┌─────────────┐ ┌─────────────┐ ┌─────────────────────────┐ │
|
|
│ │ CLI │ │ REST API │ │ Secrets Engines │ │
|
|
│ │ (clap) │ │ (Axum) │ │ KV/Transit/PKI/DB │ │
|
|
│ └──────┬──────┘ └──────┬──────┘ └────────────┬────────────┘ │
|
|
│ │ │ │ │
|
|
│ ┌──────┴────────────────┴──────────────────────┴─────────────┐ │
|
|
│ │ VaultCore │ │
|
|
│ │ Seal (Shamir) │ TokenManager │ Cedar ABAC │ Metrics │ │
|
|
│ └────────────────────────────────────────────────────────────┘ │
|
|
│ │ │
|
|
│ ┌───────────────────────┴───────────────────────────────────┐ │
|
|
│ │ Crypto Backends │ │
|
|
│ │ OpenSSL │ OQS (PQC) │ AWS-LC │ RustCrypto │ │
|
|
│ └───────────────────────────────────────────────────────────┘ │
|
|
│ │ │
|
|
│ ┌───────────────────────┴───────────────────────────────────┐ │
|
|
│ │ Storage Backends │ │
|
|
│ │ Filesystem │ etcd │ SurrealDB │ PostgreSQL │ │
|
|
│ └───────────────────────────────────────────────────────────┘ │
|
|
└─────────────────────────────────────────────────────────────────┘
|
|
```
|
|
|
|
---
|
|
|
|
## 6. Complete Functionality Matrix
|
|
|
|
### Capabilities by Category
|
|
|
|
#### Project Management
|
|
|
|
| Capability | Vapora | Kogral | TypeDialog | Provisioning | SecretumVault |
|
|
| ----------- | -------- | -------- | ------------ | -------------- | --------------- |
|
|
| Kanban Board | ✅ Leptos | - | - | - | - |
|
|
| Task Management | ✅ Full | - | - | - | - |
|
|
| Project Hierarchy | ✅ Scopes | ✅ Graphs | - | ✅ Workspaces | - |
|
|
| Real-time Collab | ✅ WebSocket | - | - | - | - |
|
|
| Change Tracking | ✅ History | ✅ Git | - | ✅ Audit | ✅ Audit |
|
|
|
|
#### Knowledge and Documentation
|
|
|
|
| Capability | Vapora | Kogral | TypeDialog | Provisioning | SecretumVault |
|
|
| ----------- | -------- | -------- | ------------ | -------------- | --------------- |
|
|
| Knowledge Graph | ✅ Temporal | ✅ 6 types | - | - | - |
|
|
| ADRs | - | ✅ Native | - | - | - |
|
|
| Patterns Library | - | ✅ Native | - | - | - |
|
|
| Guidelines | - | ✅ Inheritance | - | ✅ Schemas | - |
|
|
| Semantic Search | ✅ KG | ✅ fastembed | ✅ Tantivy | ✅ RAG | - |
|
|
|
|
#### User Interaction
|
|
|
|
| Capability | Vapora | Kogral | TypeDialog | Provisioning | SecretumVault |
|
|
| ----------- | -------- | -------- | ------------ | -------------- | --------------- |
|
|
| Web UI | ✅ Leptos | - | ✅ Axum | ✅ Leptos | - |
|
|
| CLI | - | ✅ 13 cmds | ✅ inquire | ✅ 80+ shorts | ✅ svault |
|
|
| TUI | - | - | ✅ ratatui | ✅ ratatui | - |
|
|
| Forms | - | - | ✅ 8 types | - | - |
|
|
| i18n | - | - | ✅ Fluent | - | - |
|
|
|
|
#### Automation
|
|
|
|
| Capability | Vapora | Kogral | TypeDialog | Provisioning | SecretumVault |
|
|
| ----------- | -------- | -------- | ------------ | -------------- | --------------- |
|
|
| Pipelines | ✅ Agent | - | ✅ Agent MDX | ✅ Workflows | - |
|
|
| LLM Agents | ✅ 12 roles | - | ✅ Multi-prov | ✅ MCP | - |
|
|
| IaC Generation | - | - | ✅ 6 clouds | ✅ Nickel | - |
|
|
| CI/CD | - | - | ✅ Backend | ✅ Full | - |
|
|
| Orchestration | ✅ NATS | - | - | ✅ Hybrid | - |
|
|
|
|
#### Infrastructure
|
|
|
|
| Capability | Vapora | Kogral | TypeDialog | Provisioning | SecretumVault |
|
|
| ----------- | -------- | -------- | ------------ | -------------- | --------------- |
|
|
| Multi-cloud | - | - | ✅ Prov-gen | ✅ AWS/UpCloud/Local | - |
|
|
| Kubernetes | ✅ Deploy | - | - | ✅ Full | ✅ etcd backend |
|
|
| Secrets Mgmt | - | - | ✅ Encrypt | ✅ 5 KMS | ✅ **4 engines** |
|
|
| Networking | - | - | - | ✅ VPC/Subnet | - |
|
|
| State Mgmt | - | - | - | ✅ Checkpoints | ✅ 4 backends |
|
|
|
|
#### Security
|
|
|
|
| Capability | Vapora | Kogral | TypeDialog | Provisioning | SecretumVault |
|
|
| ----------- | -------- | -------- | ------------ | -------------- | --------------- |
|
|
| Authentication | ✅ JWT | - | - | ✅ JWT+MFA | ✅ Token-based |
|
|
| Authorization | ✅ Cedar | - | - | ✅ Cedar | ✅ Cedar ABAC |
|
|
| Multi-tenant | ✅ Scopes | - | - | ✅ Full | - |
|
|
| Audit | ✅ Logging | - | - | ✅ 7 years | ✅ Full audit |
|
|
| Encryption | - | - | ✅ Field | ✅ Envelope | ✅ **PQC native** |
|
|
| Post-Quantum | - | - | - | - | ✅ ML-KEM/ML-DSA |
|
|
|
|
#### Observability
|
|
|
|
| Capability | Vapora | Kogral | TypeDialog | Provisioning | SecretumVault |
|
|
| ----------- | -------- | -------- | ------------ | -------------- | --------------- |
|
|
| Metrics | ✅ Prometheus | - | - | ✅ Full | ✅ Prometheus |
|
|
| Logging | ✅ tracing | ✅ tracing | - | ✅ tracing | ✅ tracing |
|
|
| Tracing | ✅ OTEL | - | - | ✅ OTEL | - |
|
|
| Dashboards | ✅ Grafana | - | - | ✅ Control Center | - |
|
|
|
|
---
|
|
|
|
## 7. Technology Stack
|
|
|
|
### Shared Dependencies
|
|
|
|
```text
|
|
┌─────────────────────────────────────────────────────────────────┐
|
|
│ COMMON TECHNOLOGY STACK │
|
|
├─────────────────────────────────────────────────────────────────┤
|
|
│ │
|
|
│ LANGUAGE │
|
|
│ └── Rust 2021/2024 edition (type-safe, zero-cost) │
|
|
│ │
|
|
│ CONFIGURATION │
|
|
│ └── Nickel 1.15+ (typed schemas, lazy eval, validation) │
|
|
│ │
|
|
│ DATABASE │
|
|
│ └── SurrealDB 2.3+ (multi-model, graph, scopes) │
|
|
│ │
|
|
│ WEB FRAMEWORK │
|
|
│ └── Axum 0.8+ (async, composable, tower middleware) │
|
|
│ │
|
|
│ FRONTEND │
|
|
│ └── Leptos 0.8+ (WASM, reactive, CSR) │
|
|
│ │
|
|
│ TUI │
|
|
│ └── Ratatui 0.30+ (terminal UI, crossterm) │
|
|
│ │
|
|
│ CLI │
|
|
│ └── clap 4+ (derive API, completions) │
|
|
│ │
|
|
│ LLM │
|
|
│ └── rig-core 0.15+ (multi-provider, tools, streaming) │
|
|
│ │
|
|
│ MESSAGING │
|
|
│ └── async-nats 0.45+ (JetStream, guaranteed delivery) │
|
|
│ │
|
|
│ SERIALIZATION │
|
|
│ └── serde 1.0 (JSON, YAML, TOML) │
|
|
│ │
|
|
│ ASYNC │
|
|
│ └── Tokio 1.48+ (runtime, spawn, timeouts) │
|
|
│ │
|
|
│ LOGGING │
|
|
│ └── tracing 0.1 (structured, JSON, env-filter) │
|
|
│ │
|
|
│ ERRORS │
|
|
│ └── anyhow + thiserror (ergonomic error handling) │
|
|
│ │
|
|
└─────────────────────────────────────────────────────────────────┘
|
|
```
|
|
|
|
---
|
|
|
|
## 8. Positioning vs Competition
|
|
|
|
### By Domain
|
|
|
|
#### Development Platforms (Vapora)
|
|
|
|
| Aspect | Vapora | Jira | Linear | Notion |
|
|
| --------- | -------- | ------ | -------- | -------- |
|
|
| **Self-hosted** | ✅ | ❌ | ❌ | ❌ |
|
|
| **Multi-tenant** | ✅ Native | ❌ | ❌ | Partial |
|
|
| **Agent Orchestration** | ✅ Learning | ❌ | ❌ | ❌ |
|
|
| **LLM Integration** | ✅ 4 providers | AI features | ❌ | AI features |
|
|
| **Real-time** | ✅ WebSocket | ✅ | ✅ | ✅ |
|
|
| **Customizable** | ✅ Full | Limited | Limited | ✅ |
|
|
|
|
#### Knowledge Management (Kogral)
|
|
|
|
| Aspect | Kogral | Obsidian | Notion | Confluence |
|
|
| --------- | -------- | ---------- | -------- | ------------ |
|
|
| **Git-native** | ✅ | Plugins | ❌ | ❌ |
|
|
| **Developer-focused** | ✅ ADRs/Patterns | General | General | General |
|
|
| **MCP Integration** | ✅ Native | ❌ | ❌ | ❌ |
|
|
| **Semantic Search** | ✅ Local+Cloud | Plugins | Internal | Internal |
|
|
| **Guideline Inheritance** | ✅ | ❌ | ❌ | ❌ |
|
|
| **Offline** | ✅ | ✅ | ❌ | ❌ |
|
|
|
|
#### Forms and Automation (TypeDialog)
|
|
|
|
| Aspect | TypeDialog | Typeform | SurveyJS | Inquirer |
|
|
| --------- | ------------ | ---------- | ---------- | ---------- |
|
|
| **Multi-backend** | ✅ 6 | Web only | Web only | CLI only |
|
|
| **Type-safe** | ✅ Nickel | ❌ | Partial | ❌ |
|
|
| **Agent Execution** | ✅ Native | ❌ | ❌ | ❌ |
|
|
| **IaC Generation** | ✅ 6 clouds | ❌ | ❌ | ❌ |
|
|
| **i18n** | ✅ Fluent | ✅ | ✅ | ❌ |
|
|
| **Self-hosted** | ✅ | ❌ | ✅ | ✅ |
|
|
|
|
#### IaC (Provisioning)
|
|
|
|
| Aspect | Provisioning | Terraform | Pulumi | Ansible |
|
|
| --------- | -------------- | ----------- | -------- | --------- |
|
|
| **Language** | Nickel (typed) | HCL | TS/Py | YAML |
|
|
| **AI-native** | ✅ MCP+RAG | ❌ | ❌ | ❌ |
|
|
| **Security** | ✅ 39K lines | Basic | Basic | Vault plugin |
|
|
| **Orchestration** | ✅ Hybrid | State file | State | Playbooks |
|
|
| **Multi-cloud** | ✅ | ✅ | ✅ | ✅ |
|
|
| **DX** | ✅ 80+ shortcuts | Verbose | Standard | Standard |
|
|
|
|
#### Secrets Management (SecretumVault)
|
|
|
|
| Aspect | SecretumVault | HashiCorp Vault | AWS Secrets Manager | Azure Key Vault |
|
|
| --------- | --------------- | ----------------- | --------------------- | ----------------- |
|
|
| **Language** | Rust (memory-safe) | Go | SaaS | SaaS |
|
|
| **Post-Quantum** | ✅ ML-KEM/ML-DSA | ❌ | ❌ | ❌ |
|
|
| **Self-hosted** | ✅ Complete | ✅ | ❌ | ❌ |
|
|
| **Crypto backends** | 4 pluggable | 1 fixed | 1 fixed | 1 fixed |
|
|
| **Storage backends** | 4 (FS/etcd/Surreal/PG) | Multiple | Proprietary | Proprietary |
|
|
| **Authorization** | Cedar ABAC | ACL | IAM | RBAC |
|
|
| **Shamir unsealing** | ✅ Native | ✅ | ❌ | ❌ |
|
|
| **License** | Apache-2.0 | BSL/Enterprise | Proprietary | Proprietary |
|
|
|
|
---
|
|
|
|
## 9. Integration Between Projects
|
|
|
|
### Data Flow
|
|
|
|
```text
|
|
┌──────────────────┐
|
|
│ Kogral │
|
|
│ (Knowledge) │
|
|
└────────┬─────────┘
|
|
│
|
|
Guidelines, Patterns, ADRs, Decisions
|
|
│
|
|
┌────────────────────────┼────────────────────────┐
|
|
│ │ │
|
|
▼ ▼ ▼
|
|
┌───────────┐ ┌───────────┐ ┌─────────────┐
|
|
│ Vapora │◄───────▶│TypeDialog │◄───────▶│Provisioning │
|
|
│(Development)│ │ (Forms) │ │ (IaC) │
|
|
└─────┬─────┘ └─────┬─────┘ └──────┬──────┘
|
|
│ │ │
|
|
│ ┌───────────────┴───────────────┐ │
|
|
│ │ │ │
|
|
│ ▼ ▼ │
|
|
│ ┌───────────────────────────────────┐ │
|
|
└──▶│ SecretumVault │◄───┘
|
|
│ (Secrets + PQC Crypto) │
|
|
└───────────────────────────────────┘
|
|
│
|
|
▼
|
|
┌─────────────────────────────────────────────────────────────┐
|
|
│ FINAL PRODUCT │
|
|
│ Software developed, documented, configured, deployed │
|
|
│ with protected secrets (PQC) │
|
|
└─────────────────────────────────────────────────────────────┘
|
|
```
|
|
|
|
### Specific Synergies
|
|
|
|
| Integration | Benefit |
|
|
| ------------- | ----------- |
|
|
| Kogral → Vapora | Agents query guidelines before generating code |
|
|
| Kogral → TypeDialog | Forms for structured ADR capture |
|
|
| Kogral → Provisioning | Automatic infrastructure ADRs |
|
|
| Vapora → TypeDialog | Forms as input for pipelines |
|
|
| Vapora → Provisioning | Deployment orchestration |
|
|
| TypeDialog → Provisioning | prov-gen backend generates IaC from forms |
|
|
|
|
### Reusable Components
|
|
|
|
| Component | Origin | Used In |
|
|
| ------------ | -------- | ---------- |
|
|
| SurrealDB patterns | Vapora | Kogral, Provisioning |
|
|
| Nickel schemas | Provisioning | TypeDialog, Kogral |
|
|
| rig-core abstraction | Vapora | All |
|
|
| Axum patterns | Vapora | TypeDialog, Provisioning |
|
|
| tracing setup | Vapora | All |
|
|
| Cedar policies | Provisioning | Vapora |
|
|
| Leptos components | Vapora | Provisioning |
|
|
|
|
---
|
|
|
|
## 10. Portfolio Metrics
|
|
|
|
| Metric | Vapora | Kogral | TypeDialog | Provisioning | SecretumVault | **Total** |
|
|
| --------- | -------- | -------- | ------------ | -------------- | --------------- | ----------- |
|
|
| **Crates** | 13 | 3 | 8 | 15+ | 1 | **40+** |
|
|
| **Tests** | 218 | 56 | 3,818 | 218 | 50+ | **4,360+** |
|
|
| **LOC (approx)** | ~50K | ~15K | ~90K | ~40K | ~11K | **~206K** |
|
|
| **Backends** | 1 (Leptos) | 3 | 6 | 3 | 4 storage | **17** |
|
|
| **LLM Providers** | 4 | 4 | 4 | 3 | - | **4 unique** |
|
|
| **MCP Tools** | Gateway | 7 | - | 7 | - | **14+** |
|
|
| **Crypto backends** | - | - | - | 5 KMS | 4 | **4 unique** |
|
|
|
|
---
|
|
|
|
## 11. Recommended Adoption Order
|
|
|
|
### Optimal Sequence
|
|
|
|
```text
|
|
Phase 1: Kogral
|
|
│ Establishes knowledge base
|
|
│ Guidelines, patterns, ADRs
|
|
▼
|
|
Phase 2: TypeDialog
|
|
│ Enables structured inputs
|
|
│ Validation with Nickel contracts
|
|
▼
|
|
Phase 3: SecretumVault
|
|
│ Secure secrets management
|
|
│ PQC cryptographic preparation
|
|
▼
|
|
Phase 4: Vapora
|
|
│ Orchestrates development with agents
|
|
│ Leverages knowledge graph
|
|
▼
|
|
Phase 5: Provisioning
|
|
│ Infrastructure informed
|
|
│ by all previous context
|
|
```
|
|
|
|
### Independent Adoption
|
|
|
|
Each project works standalone:
|
|
|
|
- **Kogral**: Knowledge management without external dependencies
|
|
- **TypeDialog**: Forms and agents without other projects
|
|
- **SecretumVault**: Rust-native secrets management
|
|
- **Vapora**: Complete development and orchestration
|
|
- **Provisioning**: Independent enterprise IaC
|
|
|
|
Synergies emerge with combined adoption, but are not required.
|
|
|
|
---
|
|
|
|
*Document generated: 2026-01-22*
|
|
*Type: info (complete strategic positioning)*
|