All Classes and Interfaces

Class	Description
AbstractLocalEmulatorRuntime	Shared Docker lifecycle for CloudForge local emulators.
AbstractStackPortRuntime	Shared Docker lifecycle for target-owned StackPort resource browsers.
AdvancedMonitoringRules	Advanced security monitoring and compliance dashboard validation rules.
AgentPlatform	Which CloudForge Agent client a registered device is — cloudforge-studio (macOS), cloudforge-desktop (Windows), or cloudforge-terminal (Linux).
AlarmFactory	Creates CloudWatch alarms for application health monitoring.
AlarmFactory.Props	Configuration properties for alarm creation.
AlbFactory	ALB Factory using annotation-based context injection.
ApplicationDeploymentExtension	Optional, application-owned behavior around a CloudForge deployment.
ApplicationDeploymentExtensions	Classpath-wide registry for optional application deployment extensions.
ApplicationDeploymentPreset	Optional application-owned defaults applied before generic interactive prompts.
ApplicationDeploymentPresets	Classpath discovery for optional ApplicationDeploymentPreset providers.
ApplicationEc2Stack	Universal Application EC2 Stack — see ApplicationFargateStack's javadoc for why this lives here rather than only in cfc-testing's identically-shaped launcher.
ApplicationFactory	Universal factory class for deploying any application using ApplicationSpec.
ApplicationFactory.ApplicationSystem	Container for application system components created by the factory.
ApplicationFargateStack	Universal Application Fargate Stack — CDK-consumer copy of cfc-testing's launcher of the same name/shape, relocated here so any in-process synthesizer (Manager's, in particular, which cannot depend on cfc-testing — that's the public sample/reference repo, not a library) can build one without duplicating the ApplicationFactory wiring by hand.
ApplicationInfo	Application metadata for display and configuration purposes.
ApplicationLoader	Auto-discovery utility for ApplicationSpec implementations using Java ServiceLoader.
ApplicationOidcFactory	Application-level OIDC Authentication Factory.
ApplicationPlugin	Marks a class as a pluggable application specification.
ApplicationPropertyLoader	Loads application.properties then application-local.properties from the classpath, with later resources overriding earlier ones.
ApplicationSamlFactory	Application SAML Factory - configures SAML authentication for applications.
ApplicationServiceTopologyConfiguration	Universal application service topology configuration.
ApplicationSpec	Application specification interface defining application-specific configuration.
ApplicationSpec.OptionalPort	Optional service port that can be enabled via deployment configuration.
ApplicationSpec.SidecarContainer	Declares an always-running, same-Fargate-task companion container: ContainerFactory adds it to the same task definition as this app's own container, wires the main container to wait for it (a startup dependency on HEALTHY, not SUCCESS — unlike the SAML certificate init container this deliberately isn't modeled after, a sidecar never exits), and gives it its own CloudWatch log stream.
Arn
Arn.Validator
AuditManagerControl	Maps compliance controls to AWS infrastructure monitoring and Audit Manager evidence.
AuditManagerControl.FrameworkControl	Framework-specific control mapping.
AuditManagerControlRegistry	Central registry mapping infrastructure controls to multiple compliance frameworks.
AuthAccount	A CloudForge Manager user-directory account, as seen through AuthBackend — a typed stand-in for what used to be an ad-hoc Map<String,Object> built by hand in two different shapes (one for local rows, one for Cognito pool users).
AuthAccountRequest	Request to create a new account via AuthBackend.createAccount(AuthAccountRequest).
AuthAccountUpdate	Partial update for AuthBackend.updateAccount(String, AuthAccountUpdate) — every field is null/unset unless the caller means to change it (no "clear this field" sentinel is needed; every field here is meaningful when present and skipped when absent, matching the semantics of the Map<String,Object> body-based updates this replaced).
AuthBackend	CloudForge Manager's Users-page CRUD, abstracted over whichever directory of accounts is currently authoritative — the local H2/Postgres DB, or an AWS Cognito User Pool.
AuthMode	Authentication mode for application access control.
AwsConfigRule	AWS Config managed rules mapped to ComplianceMatrix SecurityControls.
AwsDirectDeployer	Creates and incrementally updates CloudFormation stacks on real AWS via change sets.
AwsRegion	AWS Regions enumeration with metadata for disaster recovery and compliance.
AwsRegion.GeoArea	Geographic areas for data residency requirements.
AwsStackDeployResult	Outcome of deploying (or no-op'ing) a stack via AwsDirectDeployer.
BackupFactory	Factory for creating AWS Backup resources for EFS and RDS.
BagistoApplicationSpec	Bagisto E-commerce ApplicationSpec implementation.
BagistoOidcIntegration	OIDC integration for Bagisto via Laravel Socialite / ALB OIDC.
BaseConfiguration
BaseFactory	Base class for factory classes that provides convenient access to SystemContext, DeploymentContext, and SecurityProfileConfiguration.
BaseSlot<T>
BuildModeProcessor	Bakes a compile-time constant into a generated class from a single -A compiler option, so a build-time fact (which Maven profile compiled these sources) survives into the compiled artifact as a real static final field — not something a caller can influence by how the resulting binary is later invoked.
CanonicalTemplateResolver	Resolves the canonical synthesized CloudFormation template on disk.
CapacityValidator	Validates that maxCapacity >= minCapacity for scaling configurations.
CdkNagControlMapper	Maps cdk-nag rule IDs to CloudForge SecurityControl enums for unified compliance reporting.
CdnApiSecurityRules	CDN and API security compliance validation rules.
CertificateFactory
CfnStringUtils	CloudFormation string utilities using intrinsic functions.
CloudForgeDeployment	Central deploy façade for MiniStack, LocalStack, and (as of the deploy:create/ deploy:catalog work) direct-to-AWS.
CloudForgeManagerOidcIntegration	Deployment-time OIDC contract for CloudForge Manager.
CloudForgeSynthesizer	In-process CDK synthesis — produces the canonical CloudFormation template CloudForgeDeployment (specifically AwsDirectDeployer, but the shape is target- agnostic) needs, without shelling out to the cdk CLI.
CloudForgeSynthesizer.Result
CloudFormationTemplateDiff	Semantic resource-level diff for canonical CloudFormation templates.
CloudFormationTemplateDiff.Action
CloudFormationTemplateDiff.ResourceChange
CmsCdnConfiguration	CloudFront CDN configuration for CMS platforms.
CmsLoader	Auto-discovery utility for CmsSpec implementations using Java ServiceLoader.
CmsMediaStorageConfiguration	Configuration for CMS media storage on S3.
CmsMediaStorageSpec	Media storage configuration for CMS platforms.
CmsObjectCacheConfiguration	ElastiCache Redis/Memcached configuration for CMS object caching.
CmsObjectCacheSpec	Object cache configuration for CMS platforms.
CmsPlugin	Marks a class as a pluggable CMS/e-commerce application specification.
CmsServiceTopologyConfiguration	CMS-specific topology that auto-wires infrastructure from CmsSpec capabilities.
CmsSpec	CMS/E-commerce specification interface extending ApplicationSpec.
CognitoAuthenticationFactory	Manages AWS Cognito User Pools for OIDC authentication.
CognitoOidcConfiguration	OIDC configuration for Amazon Cognito User Pools.
CognitoSamlFactory	Cognito SAML Factory for applications requiring SAML authentication.
ComplianceFactory	Factory for creating compliance and audit resources (CloudTrail, AWS Config, AWS Audit Manager).
ComplianceFramework	Marks a class as a pluggable compliance framework validator.
ComplianceFrameworkListConverter	Jackson serializer/deserializer for converting between comma-separated strings and List<ComplianceFrameworkType>.
ComplianceFrameworkListConverter.Deserializer	Deserializes a comma-separated string or JSON array to List<ComplianceFrameworkType>.
ComplianceFrameworkListConverter.Serializer	Serializes List<ComplianceFrameworkType> to a comma-separated string.
ComplianceFrameworkType	Defines the supported compliance frameworks for CloudForge deployments.
ComplianceMatrix	Multi-framework compliance control mapping matrix.
ComplianceMatrix.FrameworkRequirement	Framework-specific requirement with enforcement level.
ComplianceMatrix.RequirementLevel	Requirement enforcement level for a control within a compliance framework.
ComplianceMatrix.SecurityControl	Security control definitions mapped to framework requirements.
ComplianceMatrix.ValidationResult	Validation result for a control check.
ComplianceMode	Compliance validation mode controlling how validation failures are handled.
ComplianceRule	Represents a compliance rule with its validation status and AWS Config rule mapping.
ComputeSecurityRules	Compute security compliance validation rules.
ConcreteCmsApplicationSpec	Concrete CMS ApplicationSpec implementation.
ConcreteCmsOidcIntegration	OIDC integration for Concrete CMS via OAuth extension / ALB OIDC.
ConfigField	Marks a field in DeploymentConfig as user-configurable with metadata for automatic prompt generation, validation, and JSON schema generation.
ConfigFieldInfo	Runtime metadata for a configuration field discovered via introspection.
ConfigurationIntrospector	Discovers and filters configuration fields using reflection and annotations.
ConfigurationValidationRules	General configuration validation rules that apply to all deployments.
Constants
Constants.Jenkins
ContainerFactory
ContextInjector	Standalone utility for injecting context values into annotated fields.
CpuArchitecture	Target CPU architecture for a Fargate task definition.
DatabaseSecurityRules	Database security compliance validation rules.
DatabaseSpec	Database specification interface for applications requiring external databases.
DatabaseSpec.DatabaseConnection	Database connection information provided to applications.
DatabaseSpec.DatabaseRequirement	Database requirement specification.
DatabaseSpec.DatabaseRequirement.RequirementType
DefaultEmulatorEdgeRuntime	Dockerized nginx edge for *.cloudforge.localhost Host routing.
DefaultValueResolver	Resolves default values for configuration fields using layered priority.
DeploymentConfig	Universal deployment configuration for CloudForge applications.
DeploymentContext	Annotation to extract specific values from DeploymentContext.
DeploymentContext	Typed configuration interface for CDK deployment context.
DeploymentContextCatalog	Persists per-stack deployment context snippets for Manager multi-stack enrichment.
DeploymentContextPreparer	Fills missing DeploymentConfig fields from ApplicationSpec, property files, and auth/domain coherence rules — mirroring the interactive deployer when loading a partial deployment-context.json.
DeploymentContextPreparer.PrepareResult	Messages describing defaults applied or auth coercions performed.
DeploymentRequest	Inputs for CloudForgeDeployment.
DeploymentResult	Outcome from CloudForgeDeployment.
DeploymentTarget	Post-synthesis deployment target for CloudForge templates.
DeploymentTargetConverter	Jackson serializer/deserializer for DeploymentTarget, overriding #createMapper()'s WRITE_ENUMS_USING_TO_STRING/READ_ENUMS_USING_TO_STRING defaults for this one type.
DeploymentTargetConverter.Deserializer
DeploymentTargetConverter.Serializer
DeploymentValidation
DeploymentValidation.Validator
DeployMode	Local deployment operation mode for CloudForgeDeployment.
DeployOptions	Optional post-deploy behavior for CloudForgeDeployment.
DeviceRegistrationRequest	Body of POST /api/v1/settings/devices — the one request every CloudForge Agent client (cloudforge-studio/desktop/terminal) sends to register itself.
DeviceRegistrationResponse	Response to a successful POST /api/v1/settings/devices — carries the plaintext deviceToken exactly once.
DevSecurityConfiguration	Development security configuration with relaxed security settings.
DevSecurityProfileConfiguration	Development security profile configuration with minimal security constraints.
DnsLabel
DnsLabel.Validator
DnsName
DnsName.Validator
DockerEmulatorSupport	Shared Docker CLI helpers for local emulator containers.
DolphinApplicationSpec	Dolphin/UNA Social Network ApplicationSpec implementation.
DolphinOidcIntegration	OIDC integration for Dolphin/UNA via OAuth module / ALB OIDC.
DomainFactory	Domain Factory using annotation-based context extraction.
DroneApplicationSpec	Drone CI ApplicationSpec implementation.
DrupalApplicationSpec	Drupal CMS ApplicationSpec implementation.
DrupalOidcIntegration	OIDC integration for Drupal using the native OpenID Connect module.
Ec2Context	Runtime context information for EC2 UserData configuration.
Ec2ContextImpl	Implementation of Ec2Context providing runtime information for UserData configuration.
Ec2Factory	Factory for creating EC2-based Jenkins compute infrastructure.
Ec2RuntimeConfiguration
EfsFactory	Factory for creating EFS file systems with support for persistence and reuse.
ElbSecurityRules	Elastic Load Balancer security compliance validation rules.
EmulatorEdgeCli	Command-line entry point for EmulatorEdgeLifecycle — backs scripts/emulator-edge-*.sh.
EmulatorEdgeLifecycle	Applies EmulatorEdgeLifecycleAction to the shared nginx emulator edge.
EmulatorEdgeLifecycleAction	Emulator edge (nginx) lifecycle actions for Maven goals and EmulatorLifecycle.
EmulatorEdgeRuntime	Shared nginx edge in front of MiniStack/LocalStack host-published ECS ports.
EmulatorLifecycle	Applies EmulatorLifecycleAction to a LocalEmulatorRuntime.
EmulatorLifecycleAction	Lifecycle operations exposed by Maven goals and programmatic callers.
ExtendedIAMConfiguration	Extended IAM configuration with broader permissions for development.
FargateCpuMemoryValidator	Validates AWS Fargate CPU/memory combinations.
FargateFactory	Factory for creating Fargate-based Jenkins compute infrastructure.
FargateRuntimeConfiguration
FieldEquals	Field equality check for visibility conditions.
FieldTag	Tags that describe the impact and characteristics of configuration field changes.
FieldValidator	Custom validator for configuration field cross-field validation.
FlarumApplicationSpec	Flarum Forum ApplicationSpec implementation.
FlarumOidcIntegration	OIDC integration for Flarum via FoF OAuth extension / ALB OIDC.
FlowLogFactory	VPC Flow Log Factory using annotation-based context injection.
FrameworkLoader	Discovers and loads compliance framework validators using Java ServiceLoader.
FrameworkRules<T>	Interface for pluggable compliance framework validators.
GdprOrganizationalRules	GDPR organizational and data protection validation rules.
GdprRules	GDPR (General Data Protection Regulation) compliance validation.
GiteaApplicationSpec	Gitea ApplicationSpec implementation.
GitLabApplicationSpec	GitLab ApplicationSpec implementation.
GitLabOidcIntegration	OIDC integration for GitLab using OmniAuth OpenID Connect.
GrafanaApplicationSpec	Grafana ApplicationSpec implementation.
GrafanaOidcIntegration	OIDC integration for Grafana using generic_oauth provider.
GuardDutyFactory	Factory for AWS GuardDuty threat detection and compliance automation.
HarborApplicationSpec	Harbor Container Registry ApplicationSpec implementation.
HipaaOrganizationalRules	HIPAA organizational and administrative safeguard validation rules.
HipaaRules	HIPAA Security Rule compliance validation.
IAMConfiguration	IAM Configuration interface that extends the base BaseConfiguration interface.
IAMExample	Example demonstrating how to use the IAM Rules system with different permission profiles.
IAMProfile	IAM Profile enum defining different levels of permissions for AWS resources.
IAMProfileMapper	Maps Security Profiles to appropriate IAM Profiles following security best practices.
IAMRules
IamSecurityRules	IAM security compliance validation rules.
IdentityCenterFactory	Identity Center Factory for AWS IAM Identity Center (formerly AWS SSO) setup.
IdentityCenterOidcConfiguration	OIDC configuration for AWS IAM Identity Center (formerly AWS SSO).
IdentityCenterSamlFactory	IAM Identity Center SAML Factory for automated SAML 2.0 application provisioning.
IncidentResponseRules	Incident response and disaster recovery compliance validation rules.
InteractivePrompter	Interactive prompting utility that generates questions from @ConfigField annotations.
Iso27001Rules	ISO/IEC 27001:2022 Information Security Management compliance validation.
JenkinsApplicationSpec	Jenkins ApplicationSpec implementation.
JenkinsConfig	Deprecated, for removal: This API element is subject to removal in a future version.
JenkinsOidcIntegration	OIDC integration for Jenkins using the OpenID Connect Authentication Plugin.
JenkinsServiceTopologyConfiguration
JoomlaApplicationSpec	Joomla CMS ApplicationSpec implementation.
JoomlaOidcIntegration	OIDC integration for Joomla using miniOrange plugin.
KeycloakFactory	Keycloak SAML Bridge Factory.
KeyManagementRules	Key Management compliance validation rules.
LambdaSecurityRules	Lambda security compliance validation rules.
LoadBalancerType	Load balancer type for application ingress.
LocalAuthRuntime	Reconciles local processes required when canonical templates include auth the emulator cannot execute at the load balancer (for example ALB OIDC/Cognito).
LocalDeployer	Deploys adapted CloudFormation templates to a local emulator endpoint.
LocalDeploymentArtifactPaths	Canonical, adapted, and adaptation-report paths for a local deployment.
LocalDeploymentCatalog	Resolves applicationId from per-stack catalog files under deployment-contexts/.
LocalDeploymentNaming	Stack and artifact naming conventions for local deployment targets.
LocalDeploymentPipeline	Target-agnostic adapt → deploy → auth-runtime reconcile pipeline.
LocalDeploymentPipelineResult	Combined outcome of template adaptation and local CloudFormation deploy.
LocalDeploymentRequest	Inputs for adapt-and-deploy against a local emulator target.
LocalDeployPreflight	Runs target-specific deploy preflight before local emulator pipelines execute.
LocalDeployPreflight.PreflightOutcome
LocalDeployResult	Outcome of deploying an adapted template to a local emulator endpoint.
LocalEmulatorDefaults	Canonical Docker and gateway defaults shared by all CloudForge local emulators.
LocalEmulatorHostPortProbe	Detects host ports already used by local emulator ECS tasks (Docker) or stack outputs (CFN).
LocalEmulatorPaths	Resolves on-disk paths used by local emulator runtimes.
LocalEmulatorRuntime	Docker lifecycle for a local AWS emulator (MiniStack or LocalStack).
LocalEmulatorRuntimeProvider	ServiceLoader entry point for LocalEmulatorRuntime implementations in target modules.
LocalEmulatorRuntimes	Discovers LocalEmulatorRuntime implementations registered by target modules.
LocalEmulatorSpec	Immutable metadata for a CloudForge-managed local emulator container.
LocalHostPortConflictChecker	Blocks local emulator deploys when the required localhost port is already in use.
LocalHostPortOccupant	A host port already claimed on the local machine by an emulator ECS task or stack output.
LocalHostPortPolicy	Resolves the host port a MiniStack Fargate deploy will bind (localhost:port).
LocalResourceChange	One CloudFormation resource change from a local deploy change set.
LocalSameApplicationStackReplacer	Deletes prior local emulator stacks for the same CloudForge applicationId when redeploying under a new stack name.
LocalSameApplicationStackReplacer.Result
LocalSameApplicationStackReplacer.StackDeleter
LocalStackCapabilityProbe	Probes LocalStack gateway health and derives a LocalStackCapabilitySnapshot for tier-aware template adaptation and deploy preflight.
LocalStackCapabilitySnapshot	Snapshot of LocalStack health, edition, and service availability for adapt/deploy decisions.
LocalStackCapabilitySnapshotHealth	JSON-friendly projection of LocalStackCapabilitySnapshot for health APIs.
LocalStackCdkAssetPublisher	Publishes CDK synth assets from cdk.out/*.assets.json to S3 so Custom::AWS Lambdas and other asset-backed resources can deploy — used by both LocalStackDeployer (this module) and AwsDirectDeployer (cloudforge-api, which already depends on this module for orchestrating the local-emulator deploy pipelines it dispatches to; despite the class's LocalStack-flavored name, its logic is a plain S3 upload against whatever S3Client it's given and was never actually LocalStack-specific).
LocalStackCli	Non-interactive entry point for direct local LocalStack operations.
LocalStackDeployer	Creates and incrementally updates CloudFormation stacks against LocalStack.
LocalStackDeployer.Change	Deprecated. use LocalResourceChange.
LocalStackDeployer.DeploymentResult	Deprecated. use LocalDeployResult.
LocalStackDeploymentPipeline	LocalStack entry point for adapt-and-deploy.
LocalStackDeploymentPipeline.ArtifactPaths	Deprecated. use LocalDeploymentArtifactPaths.forTarget(Path, String, DeploymentTarget) via LocalDeploymentRequest.
LocalStackDeploymentPipeline.DeployRequest	Deprecated. use LocalDeploymentRequest.
LocalStackDeploymentPipeline.DeployResult	Deprecated. use LocalDeploymentPipelineResult.
LocalStackDeployPreflight	Tier- and capability-aware LocalStack deploy preflight.
LocalStackEmulatorRuntime	Starts and stops the LocalStack Docker container (cfc-localstack).
LocalStackEmulatorRuntimeProvider
LocalStackPlatformRuntimeProvider	LocalStack-owned implementation of generic platform lifecycle capabilities.
LocalStackRdsSupport	RDS helpers for LocalStack integration-test verification.
LocalStackServiceCapability	AWS service areas CloudForge probes on LocalStack before adapt/deploy.
LocalStackStackPortRuntime	StackPort resource browser wired to the LocalStack gateway on cfc-network.
LocalStackStackPortRuntimeProvider
LocalStackTemplateAdapter	Produces the explicitly-audited template deployed to LocalStack.
LocalStackTierProfile	LocalStack product tier profile used by the template adapter.
LoggingCwFactory	CloudWatch Logging Factory using annotation-based context injection.
MagentoApplicationSpec	Magento 2 E-commerce ApplicationSpec implementation.
MagentoOidcIntegration	OIDC integration for Magento 2 using miniOrange module.
ManagerAwsCapabilityCatalog	Versioned catalog of AWS API capabilities CloudForge Manager uses for per-instance operator actions (RDS snapshot/restore/upgrade, ECS lifecycle, CFN inventory/delete).
ManagerAwsCapabilityCatalog.Capability
ManagerEndpointSupport	Resolves LocalStack / MiniStack gateway URLs from env or system properties.
ManagerEnvKeys	Canonical environment / system-property keys for CloudForge Manager.
ManagerOperatorIamSupport	Attaches ManagerAwsCapabilityCatalog baseline operator IAM to CloudForge Manager task/instance roles at CDK synthesis time.
ManagerRuntimeBridge	Framework-neutral bridge that materializes Manager settings into system properties when the process environment does not already define them.
MattermostApplicationSpec	Mattermost Enterprise Edition ApplicationSpec implementation.
MattermostGitLabOidcIntegration	OIDC integration for Mattermost Team Edition using GitLab OAuth provider.
MattermostOidcIntegration	OIDC integration for Mattermost using native OpenID Connect.
MattermostSamlIntegration	SAML 2.0 integration for Mattermost.
MattermostTeamApplicationSpec	Mattermost Team Edition ApplicationSpec implementation (FREE).
MediaWikiApplicationSpec	MediaWiki ApplicationSpec implementation.
MediaWikiOidcIntegration	OIDC integration for MediaWiki via PluggableAuth / OpenIDConnect extension.
MessagingSecurityRules	Messaging security compliance validation rules.
MetabaseApplicationSpec	Metabase Business Intelligence ApplicationSpec implementation.
MetabaseSamlIntegration	SAML integration for Metabase (Pro/Enterprise editions).
MigrationGuide	Migration guide for converting existing factory classes to use annotation-based context injection.
MinimalIAMConfiguration	Minimal IAM configuration with least privilege permissions.
MiniStackAuthProxy	Local-only OIDC authorization-code proxy used where MiniStack ALB cannot execute AWS authenticate-oidc/authenticate-cognito listener actions.
MiniStackAuthProxy.Config
MiniStackCfnResourceCatalog	Maps CloudFormation resource types to MiniStack support policy.
MiniStackCfnResourceCatalog.TemplateResourceRef
MiniStackCli	Non-interactive entry point for direct local MiniStack operations.
MiniStackDeployer	Creates and incrementally updates CloudFormation stacks against MiniStack.
MiniStackDeployer.Change	Deprecated. use LocalResourceChange.
MiniStackDeployer.DeploymentResult	Deprecated. use LocalDeployResult.
MiniStackDeploymentPipeline	MiniStack entry point for adapt-and-deploy.
MiniStackDeploymentPipeline.ArtifactPaths	Deprecated. use LocalDeploymentArtifactPaths.forTarget(Path, String, DeploymentTarget) via LocalDeploymentRequest.
MiniStackDeploymentPipeline.DeployRequest	Deprecated. use LocalDeploymentRequest.
MiniStackDeploymentPipeline.DeployResult	Deprecated. use LocalDeploymentPipelineResult.
MiniStackDeployPreflight	Blocks MiniStack deploys that will fail at CloudFormation create time.
MiniStackEmulatorRuntime	Starts and stops the MiniStack Docker container (cfc-ministack).
MiniStackEmulatorRuntimeProvider
MiniStackLocalRuntime	Reconciles local processes required by the deployed MiniStack template.
MiniStackPlatformRuntimeProvider	MiniStack-owned implementation of generic platform lifecycle capabilities.
MiniStackResourcePolicy	How MiniStack treats a CloudFormation resource type.
MiniStackStackPortRuntime	StackPort resource browser wired to the MiniStack gateway on cfc-network.
MiniStackStackPortRuntimeProvider
MiniStackTemplateAdapter	Produces the explicitly-audited template deployed to MiniStack.
MoodleApplicationSpec	Moodle LMS ApplicationSpec implementation.
MoodleOidcIntegration	OIDC integration for Moodle using the Microsoft OpenID Connect plugin.
MyBBApplicationSpec	MyBB Forum ApplicationSpec implementation.
MyBBOidcIntegration	OIDC integration for MyBB via OAuth plugin / ALB OIDC.
NetworkMode	Network topology mode for VPC configuration.
NexusApplicationSpec	Sonatype Nexus Repository Manager ApplicationSpec implementation.
OctoberCmsApplicationSpec	October CMS ApplicationSpec implementation.
OctoberCmsOidcIntegration	OIDC integration for October CMS via RainLab.User OAuth / ALB OIDC.
OidcAuthenticationFactory	OIDC Authentication Factory for ALB-based authentication with any OIDC provider.
OidcConfiguration	OIDC configuration for application-level authentication.
OidcIntegration	Application-level OIDC integration interface.
OneOf
OneOf.Validator
OpenCartApplicationSpec	OpenCart E-commerce ApplicationSpec implementation.
OpenCartOidcIntegration	OIDC integration for OpenCart via ALB-level authentication.
OperatorProvisioningPermissionMatrix	Permission matrix for the operator provisioning layer — the AWS actions CloudForge Manager's own task role needs, acting as the calling principal, to actually create/manage the infrastructure a deploy:create target application's synthesized CloudFormation template describes (VPC, EFS, ALB, ECS cluster/service/task definition).
PciDssRules	PCI-DSS compliance validation rules.
PermissionMatrix	Permission Matrix defining the minimum required permissions for each topology/runtime combination.
PermissionMatrix.ValidationResult	Validation result containing success status and any issues found.
PhpBBApplicationSpec	phpBB Forum ApplicationSpec implementation.
PhpBBOidcIntegration	OIDC integration for phpBB via OAuth extension / ALB OIDC.
PhpContainerFactory	Factory for creating PHP container configurations for CMS platforms.
PhpRuntimeConfig	PHP runtime configuration for CMS deployments.
PhpUserDataBuilder	UserData builder extension for PHP applications on EC2.
PlatformRuntimeAction	Lifecycle capability exposed by a local deployment platform.
PlatformRuntimeProvider	Target-owned platform lifecycle capability, discovered through ServiceLoader.
PlatformRuntimeProviders	Classpath registry for target-owned PlatformRuntimeProvider implementations.
PostgreSQLApplicationSpec	PostgreSQL ApplicationSpec implementation.
PreferredUrlResolver	Resolves the best "open this application" URL from a deployed stack's CFN outputs.
PreflightMessages	Formats preflight outcomes for CLI and exception messages.
PreflightMode	How local emulator deploy preflight treats violations.
PreflightResult	Outcome of a local emulator deploy preflight check.
PreflightSeverity
PreflightViolation	Single preflight finding.
PrestaShopApplicationSpec	PrestaShop E-commerce ApplicationSpec implementation.
PrestaShopOidcIntegration	OIDC integration for PrestaShop using OAuth modules.
ProductionSecurityConfiguration	Production security configuration with hardened security settings.
ProductionSecurityProfileConfiguration	Production security profile configuration for logging, monitoring, encryption, backups, and audit controls used by SOC 2, HIPAA, and PCI-DSS configurations.
PrometheusApplicationSpec	Prometheus ApplicationSpec implementation.
ProvisionProductInput	Inputs for ServiceCatalogDeployer.provision(ProvisionProductInput, String) — deliberately narrower than DeploymentConfig (the deploy:create shape): a Service Catalog product's parameters are whatever the product's own template declares, not CloudForge's full topology/security/ compliance combinatorial space.
ProvisionProductResult	Outcome of a Service Catalog record that reached SUCCEEDED — see ServiceCatalogDeployer.
RdsFactory	Factory for provisioning AWS RDS database instances based on DatabaseSpec requirements.
RedisApplicationSpec	Redis ApplicationSpec implementation.
RegisteredDeviceView	One row of GET /api/v1/settings/devices — never carries the device token itself (see DeviceRegistrationResponse's javadoc: that value exists only once, at registration).
RequiresAccess	Marks a CloudForge Manager REST controller method as requiring only that the caller pass Manager's baseline access check — no specific policy and no resolved caller identity beyond that.
RequiresAdmin	Marks a CloudForge Manager REST controller method as requiring the caller hold a privileged role (admin/manager) or the operations:run policy — the same bar destructive/high-blast-radius operations have always used, distinct from a single named policy.
RequiresCaller	Marks a CloudForge Manager REST controller method as requiring a resolved caller identity, but no specific policy check beyond being authenticated — self-service endpoints where the caller acts on their own account/resources use this (e.g.
RequiresPolicy	Marks a CloudForge Manager REST controller method as requiring a resolved caller who is permitted the named policy.
RetentionDaysConverter	Utility for converting integer day values to AWS CDK RetentionDays enum.
Rule
RuleKit
RuleKit.PentaConsumer<A,B,C,D,E>
RuleKit.QuadConsumer<A,B,C,D>
RuleKit.TriConsumer<A,B,C>
Rules
RuntimeConfiguration
RuntimeRules
RuntimeType	Defines the compute runtime environments supported by CloudForge.
S3WebsiteTopologyConfiguration
ScalingFactory
SecurityConfiguration
SecurityExample	Example demonstrating how to use the Security Rules system with different security profiles.
SecurityMonitoringFactory	Factory for creating security monitoring and alerting configurations.
SecurityProfile	Defines the security profile levels for CloudForge deployments.
SecurityProfileConfiguration	Annotation to extract specific values from SecurityProfileConfiguration.
SecurityProfileConfiguration	Configuration interface for security profile settings.
SecurityProfileExample	Example demonstrating how to access SecurityProfileConfiguration from SystemContext.
SecurityProfileFactory	Factory for creating security profile-based observability configurations.
SecurityRules	Security rules installation and compliance framework orchestration.
ServiceCatalogDeployer	Provisions/terminates AWS Service Catalog products — the deploy:catalog path (backing the SC_PROVISION capability).
ServiceCatalogProductPublisher	Publishes a CloudForge application's synthesized CloudFormation template as an AWS Service Catalog product — the missing counterpart to ServiceCatalogDeployer, which only ever provisions a product someone else already published.
ServiceCatalogProductPublisher.LookupResult
ServiceCatalogProductPublisher.PublishResult
SessionStore	Strategy interface for where Manager's own session cookies live — sibling to AuthBackend (local-DB-vs-Cognito for the *user directory*; this is in-memory-vs-Redis for *which session cookies this process currently recognizes*, an orthogonal concern).
SharedResourceRegistry	Registry for shared/account-level resources that should be reused across stacks.
Slot<T>
Soc2Rules	SOC 2 (Service Organization Control 2) Trust Services Criteria compliance validation.
StackPortLifecycle	Applies StackPortLifecycleAction to a StackPortRuntime.
StackPortLifecycleAction	StackPort lifecycle operations exposed by Maven goals and programmatic callers.
StackPortRuntime	Docker lifecycle for a target-owned StackPort resource browser.
StackPortRuntimeProvider	ServiceLoader entry point for StackPortRuntime implementations in target modules.
StackPortRuntimes	Discovers StackPortRuntime implementations registered by target modules.
StackPortSpec	Metadata for a target-owned StackPort resource browser container.
StagingSecurityConfiguration	Staging security configuration with moderate security settings.
StagingSecurityProfileConfiguration	Staging security profile configuration for pre-production environments.
StandardIAMConfiguration	Standard IAM configuration with balanced permissions.
SuiteCrmApplicationSpec	SuiteCRM ApplicationSpec implementation.
SuiteCrmOidcIntegration	OIDC integration for SuiteCRM via built-in OAuth / ALB OIDC.
SupersetApplicationSpec	Apache Superset Business Intelligence ApplicationSpec implementation.
SyliusApplicationSpec	Sylius E-commerce ApplicationSpec implementation.
SyliusOidcIntegration	OIDC integration for Sylius via Symfony Security Bundle / ALB OIDC.
SystemContext	Annotation to extract specific values from SystemContext.
SystemContext
SystemContext.DomainAndSslFactories	Container for domain and SSL factories.
SystemContext.InfrastructureFactories	Container for infrastructure factories created by the orchestration layer.
SystemContext.JenkinsDeployment	Container for complete Jenkins deployment.
SystemContext.JenkinsSpecificFactories	Container for Jenkins-specific factories.
SystemContext.S3CloudFrontDeployment	Container for complete S3 + CloudFront deployment.
SystemContext.S3CloudFrontFactories	Container for S3 and CloudFront factories.
TemplateAdaptation	One audited change applied while adapting a canonical template for local deployment.
TemplateAdaptationResult	Adapted CloudFormation template plus an explicit adaptation audit trail.
TemplateAdapter	Adapts a canonical AWS CloudFormation template for a local emulator target.
TemplateAdapterSupport	File-based helpers for TemplateAdapter implementations.
TemplateResourceScanner	Reads canonical CloudFormation templates for preflight scans.
ThreatProtectionRules	Threat protection compliance validation rules.
TlsTrustEvaluator	Single source of truth for "does this deployment's ALB HTTPS listener end up wearing a publicly-trusted certificate" — the same three-way decision FargateRuntimeConfiguration makes when choosing which certificate to actually provision (imported ARN, DNS-validated public, or the untrusted AWS Private CA fallback), extracted here so ContainerFactory doesn't carry its own independently-maintained copy of that logic (a real drift risk — the two classes used to duplicate this inline, one computing which cert to create, the other computing whether to tell cloudforge-manager the result is trustworthy; if they ever disagreed, Manager's license page would report the wrong thing about its own installation).
TopologyConfiguration
TopologyRules
TopologyType	Defines the deployment topology patterns supported by CloudForge.
Typo3ApplicationSpec	TYPO3 CMS ApplicationSpec implementation.
Typo3OidcIntegration	OIDC integration for TYPO3 via typo3/cms-openid extension / ALB OIDC.
UpdateProvisionedProductInput	Inputs for ServiceCatalogDeployer.update(UpdateProvisionedProductInput, String).
UserDataBuilder	Builder interface for constructing EC2 UserData scripts.
UserDataBuilderImpl	Implementation of UserDataBuilder that generates bash commands for EC2 UserData scripts.
ValidationResult	Result of field validation.
VaultApplicationSpec	HashiCorp Vault ApplicationSpec implementation.
VisibilityCondition	Visibility condition expression language for configuration fields.
VisibilityCondition.Examples	Example expressions for testing and documentation.
VisibilityExpressionEvaluator	Evaluates visibility expressions for configuration fields.
VpcFactory	Factory for creating VPC (Virtual Private Cloud) infrastructure.
WafFactory	Factory for creating AWS WAF WebACL resources.
WooCommerceApplicationSpec	WooCommerce E-commerce ApplicationSpec implementation.
WordPressApplicationSpec	WordPress CMS ApplicationSpec implementation.
WordPressOidcIntegration	OIDC integration for WordPress using OpenID Connect Generic plugin.