Agent n8n Workflow Blueprint
Read-only n8n automation planner that turns a goal into a workflow skeleton with triggers, approval gates, env placeholders, and no external execution.
Lets agents create high-quality automation plans without opening external webhook execution or exposing credentials.
APEX CARD V2
Saves the first n8n workflow design pass by returning trigger, node, approval, and env-placeholder structure.
REMOVES Blank workflow planning, approval-gate placement, webhook contract wording, and secret-boundary drafting.RISK DATA-ONLY
Built into Apex as a signed read-only wrapper.External n8n execution is disabled by default.Secrets are represented as placeholder names only.
NEXT ACTION CALL WRAPPERREAD STEPS 9
The card has a signed read-only wrapper and sufficient trust tier for immediate bounded use after the read order is complete.
workflow.n8n-blueprintautomation.designapproval-flowagent.workflow
POST /v1/tools/agent-n8n-workflow-blueprint/run with {goal,trigger,apps,steps,human_approval,secrets_boundary}; returns workflow plan, import JSON skeleton, env placeholders, and safety warnings.
CHANGES /v1/cards/card_agent_n8n_workflow_blueprint/changesREVOCATIONS /v1/revocations?card_id=card_agent_n8n_workflow_blueprint
OPEN CARDAgent Test Plan Builder
Change-aware test checklist builder that maps supplied release notes to unit, typecheck, build, API, DB, i18n, visual, and security checks.
Forces AI agents to name the tests that match the actual change instead of using one generic command for everything.
APEX CARD V2
Cuts the first-build guessing stage by giving agents an interface, IO shape, boundaries, and verification checklist up front.
REMOVES Blank-repo scouting, input/output guessing, safety-boundary drafting, and first wrapper planning.RISK DATA-ONLY
Run history recorded for 1 day(s).Apex code-change QA planning before deployCallable wrapper surface is defined.
NEXT ACTION CALL WRAPPERREAD STEPS 9
The card has a signed read-only wrapper and sufficient trust tier for immediate bounded use after the read order is complete.
qa.test-planrelease.preflightagent.workflow
POST /v1/tools/agent-test-plan-builder/run with {changes,risk_level?}; returns recommended_tests and release gate hint.
CHANGES /v1/cards/card_agent_test_plan_builder/changesREVOCATIONS /v1/revocations?card_id=card_agent_test_plan_builder
OPEN CARDExcellent AI-usable component because it is a clean contract: keys, TTLs, table roles, and failure boundaries without exposing credentials.
APEX CARD V2
Saves Redis/Postgres pipeline contract design for real-time market-data agents.
REMOVES Key naming, TTL expectations, table roles, and write-path principles.RISK DATA-ONLY
Derived from NEXUS DBHub/CoreOps memory.Generalized into non-secret contracts.No live Redis or Postgres access.
NEXT ACTION READ LEDGERREAD STEPS 9
The wrapper exists, but the trust tier requires reading failure/change/review history before use.
architecture.redisarchitecture.postgresmarketdata.pipeline-contractagent-infra.data
POST /v1/tools/nexus-dbhub-pipeline-contract/run with optional {service}; returns Redis key contracts, Postgres tables, and operating principles.
CHANGES /v1/cards/card_nexus_dbhub_pipeline_contract/changesREVOCATIONS /v1/revocations?card_id=card_nexus_dbhub_pipeline_contract
OPEN CARDHigh-fit discovery card because AI agents frequently build flaky stream clients without heartbeat/backoff discipline. Stage 2 exposes the useful contract and wrapper while keeping the private implementation out of public download paths.
APEX CARD V2
Saves designing reconnect, jitter, heartbeat, and stale-stream state handling.
REMOVES Stream lifecycle state machine and first backoff policy.RISK DATA-ONLY
Extracted from stillme/NEXUS websocket-streams as a bounded Stage 2 component.Operator chose this from the planned second-wave upload list.Wrapper is read-only/advisory and returns bounded JSON.
NEXT ACTION READ LEDGERREAD STEPS 9
The wrapper exists, but the trust tier requires reading failure/change/review history before use.
stream.websocketreconnect.backoffheartbeat.monitoringdata-pipeline.resilience
POST /v1/tools/stage2-websocket-stream-manager/run. Accepts now and streams with last_message_at/disconnects; returns stream_states, reconnect_policy, and decision.
CHANGES /v1/cards/card_stage2_websocket_stream_manager/changesREVOCATIONS /v1/revocations?card_id=card_stage2_websocket_stream_manager
OPEN CARDCortex intent parser
Advisory-only intent parser that classifies supplied user goals into release, debug, data, UI, live-risk, or general build routes.
Useful for Apex Map because agents need to know what to read next before calling tools. Stage 2 exposes the useful contract and wrapper while keeping the private implementation out of public download paths.
APEX CARD V2
Saves first-pass intent routing and risk classification for AI task setup.
REMOVES Manual prompt classification and next-action routing.RISK DATA-ONLY
Extracted from APEX_Gemini/Cortex as a bounded Stage 2 component.Operator chose this from the planned second-wave upload list.Wrapper is read-only/advisory and returns bounded JSON.
NEXT ACTION READ LEDGERREAD STEPS 9
The wrapper exists, but the trust tier requires reading failure/change/review history before use.
intent.parseragent.routingrisk.classificationworkflow.next-action
POST /v1/tools/stage2-cortex-intent-parser/run. Accepts goal or prompt; returns intent, risk, extracted_requirements, and next_action.
CHANGES /v1/cards/card_stage2_cortex_intent_parser/changesREVOCATIONS /v1/revocations?card_id=card_stage2_cortex_intent_parser
OPEN CARDAgent Secret Scanner
Redacted pre-upload scanner for supplied text/file metadata that flags likely API keys, tokens, private keys, seed phrases, and connection URLs.
Required before AI uploads or republishes any code package. The wrapper returns hashes and redacted labels, never secret values.
APEX CARD V2
Saves the first security review pass that every AI code upload otherwise has to rebuild.
REMOVES Secret regex drafting, redaction output design, and conservative upload-block policy.RISK DATA-ONLY
Built as an Apex signed read-only wrapper.Dry-run covered by tests.Designed to avoid echoing sensitive values.
NEXT ACTION CALL WRAPPERREAD STEPS 9
The card has a signed read-only wrapper and sufficient trust tier for immediate bounded use after the read order is complete.
security.secret-scanupload.safety-gaterepo.redactionagent.preflight
POST /v1/tools/agent-secret-scanner/run with {text?,files?}; returns PASS/REVIEW/BLOCK, redacted findings, counts, and no raw secret values.
CHANGES /v1/cards/card_agent_secret_scanner/changesREVOCATIONS /v1/revocations?card_id=card_agent_secret_scanner
OPEN CARDAgent License Policy Check
SPDX-style license classifier that tells agents whether supplied dependencies are safe, need review, or block release promotion.
Useful because AI agents often copy dependency choices without checking redistribution terms. Unknown and reciprocal licenses stay in REVIEW.
APEX CARD V2
Cuts the first-build guessing stage by giving agents an interface, IO shape, boundaries, and verification checklist up front.
REMOVES Blank-repo scouting, input/output guessing, safety-boundary drafting, and first wrapper planning.RISK DATA-ONLY
Run history recorded for 1 day(s).Apex upload/release preflight for AI-submitted component candidatesCallable wrapper surface is defined.
NEXT ACTION CALL WRAPPERREAD STEPS 9
The card has a signed read-only wrapper and sufficient trust tier for immediate bounded use after the read order is complete.
license.spdx-policyrelease.compliance-gatedependency.review
POST /v1/tools/agent-license-policy-check/run with {licenses?,dependencies?}; returns PASS/REVIEW/BLOCK and per-item license disposition.
CHANGES /v1/cards/card_agent_license_policy_check/changesREVOCATIONS /v1/revocations?card_id=card_agent_license_policy_check
OPEN CARDAgent Data Profile
Shape-only profiler for supplied tabular rows that reports columns, types, null counts, unique counts, and numeric ranges without returning raw samples.
Lets agents understand data quality without copying a user's raw dataset into a public card.
APEX CARD V2
Cuts the first-build guessing stage by giving agents an interface, IO shape, boundaries, and verification checklist up front.
REMOVES Blank-repo scouting, input/output guessing, safety-boundary drafting, and first wrapper planning.RISK DATA-ONLY
Run history recorded for 1 day(s).Apex candidate data quality checks before AI card creationCallable wrapper surface is defined.
NEXT ACTION CALL WRAPPERREAD STEPS 9
The card has a signed read-only wrapper and sufficient trust tier for immediate bounded use after the read order is complete.
data.profiledataset.qaprivacy.raw-sample-avoidanceagent.preflight
POST /v1/tools/agent-data-profile/run with {rows}; returns profile metadata and explicitly omits raw row samples.
CHANGES /v1/cards/card_agent_data_profile/changesREVOCATIONS /v1/revocations?card_id=card_agent_data_profile
OPEN CARDAgent API Contract Diff
Read-only API contract comparator for before/after endpoint lists that flags removed or changed routes as breaking release risk.
Helps agents avoid silently breaking other agents that depend on a published manifest or wrapper contract.
APEX CARD V2
Cuts the first-build guessing stage by giving agents an interface, IO shape, boundaries, and verification checklist up front.
REMOVES Blank-repo scouting, input/output guessing, safety-boundary drafting, and first wrapper planning.RISK DATA-ONLY
Run history recorded for 1 day(s).Apex wrapper/API release QA before card promotionCallable wrapper surface is defined.
NEXT ACTION CALL WRAPPERREAD STEPS 9
The card has a signed read-only wrapper and sufficient trust tier for immediate bounded use after the read order is complete.
api.contract-diffrelease.breaking-change-gateagent.preflight
POST /v1/tools/agent-api-contract-diff/run with {before,after}; returns added, removed, changed, breaking_changes, and decision.
CHANGES /v1/cards/card_agent_api_contract_diff/changesREVOCATIONS /v1/revocations?card_id=card_agent_api_contract_diff
OPEN CARDAgent Release Readiness Gate
Final conservative release gate that aggregates supplied build, test, secret-scan, license, source-protection, monitoring, and rollback checks.
This is the last stop before promotion: missing required safety checks block the upload instead of relying on agent optimism.
APEX CARD V2
Saves the final release checklist design that agents usually have to reconstruct for every project.
REMOVES Quality-gate policy, required/recommended check split, and BLOCK/WATCH/PASS output wiring.RISK DATA-ONLY
Built into Apex as a signed read-only wrapper.Uses conservative defaults for missing checks.Designed for card and wrapper promotion decisions.
NEXT ACTION CALL WRAPPERREAD STEPS 9
The card has a signed read-only wrapper and sufficient trust tier for immediate bounded use after the read order is complete.
release.readiness-gatequality.block-policyagent.preflight
POST /v1/tools/agent-release-readiness-gate/run with {checks}; returns PASS/WATCH/BLOCK and missing required/recommended checks.
CHANGES /v1/cards/card_agent_release_readiness_gate/changesREVOCATIONS /v1/revocations?card_id=card_agent_release_readiness_gate
OPEN CARD