API Reference

Complete API documentation for every module in the Contexa platform. Each section covers the public interfaces, classes, configuration properties, and code examples you need to integrate Contexa into your Spring Boot application.

Core

The foundation module providing AI lab orchestration, LLM integration, pipeline execution, model management, RAG operations, streaming, advisor system, and strategy patterns.

AI Engine Overview

Architecture, AI diagnosis process, standard and streaming analysis, customization points, and platform integration.

LLM Orchestrator

Unified LLM client with tiered model selection, tool calling, and automatic advisor integration via UnifiedLLMOrchestrator.

AI Pipeline

Configurable multi-step pipeline from context retrieval through LLM execution to response parsing via PipelineOrchestrator.

Model Providers

Dynamic model registry supporting Ollama, Anthropic, and OpenAI with priority-based selection through DynamicModelRegistry.

RAG & Vectors

Vector storage and similarity search with PgVector integration, cache layers, and domain-specific vector services.

Streaming

Server-Sent Events streaming with sentence buffering, JSON extraction, and chunk processing via StandardStreamingService.

Advisor System

Spring AI Advisor registry with domain-based organization, enabling/disabling, and security context injection.

AI Strategy

DiagnosisType-based strategy routing with distributed execution, quality gates, and fallback mechanisms.

Security

AI-driven zero trust security layer providing real-time threat evaluation, behavioral anomaly detection (HCAD), autonomous blocking, shadow mode migration, and a comprehensive event system.

Zero Trust

Core zero trust engine with AI-powered request evaluation and autonomous security decisions.

Threat Evaluation

Real-time threat scoring, risk assessment, and multi-factor threat analysis.

HCAD

Hierarchical Contextual Anomaly Detection for behavioral pattern analysis.

Event System

Security event publishing, subscription, and audit trail infrastructure.

Blocking

Autonomous blocking actions with configurable thresholds and escalation policies.

Shadow Mode

Four-stage migration path from monitoring-only to full autonomous enforcement.

Identity

Identity management with a fluent DSL for authentication flows, adaptive multi-factor authentication, ASEP annotations, zero trust filter chains, and session state management.

Identity DSL

Fluent builder API for defining authentication and authorization flows.

Authentication

Authentication providers, token management, and session handling.

Adaptive MFA

Risk-based multi-factor authentication with TOTP, passkey, and OTT support.

ASEP Annotations

AI Security Enforcement Point annotations for declarative security policies.

State Management

Session state tracking, Redis-backed persistence, and state transitions.

Zero Trust Filters

Servlet filter chain integration for zero trust request interception.

Common

Shared annotations, contracts, bridge abstractions, cache boundaries, and security mode types used across the OSS core modules.

Common Contracts

@EnableAISecurity, @Protectable, SecurityMode, and shared bridge and cache contracts.

Autoconfigure

Spring Boot auto-configuration, import selection, and platform wiring that connect the core, identity, and IAM modules at startup.

Autoconfigure Overview

AiSecurityImportSelector, AiSecurityConfiguration, and startup wiring for the OSS runtime control plane.

IAM

Identity and Access Management with XACML-based policy evaluation, the @Protectable annotation, resource scanning, permission evaluation, policy authoring, and an admin dashboard.

@Protectable

Method-level authorization annotation with XACML policy enforcement.

XACML Engine

Full XACML 3.0 policy engine with PDP, PEP, PIP, PAP, and PRP components.

Permission Evaluators

Pluggable permission evaluation with role hierarchy and attribute-based access.

Policy Management

Policy CRUD, versioning, conflict resolution, and AI-assisted policy authoring.

Resource Scanner

Automatic discovery and registration of protectable resources at startup.

Admin Dashboard

Web-based administration interface for users, roles, groups, and policies.