Dealix — Saudi-first AI Business Operating System

Revenue + Proof + Command for Saudi companies.

PDPL-native · ZATCA-aware · Approval-first

What Dealix is

Dealix is a Saudi-first AI Business Operating System. Revenue OS is the first commercial wedge inside the broader Dealix Business OS — see the Platform Source of Truth. The platform delivers three core engines:

Lead Engine — Saudi B2B lead discovery, enrichment, ICP scoring, duplicate suppression, and PDPL-aware usage controls.
Service Engine — productized AI services for diagnostics, sales assistance, decision packs, customer health, proof curation, growth signals, and executive command.
Trust Engine — approval-first execution, audit trails, evidence packs, policy checks, and compliance registers for Saudi operating requirements.

It is not a generic CRM, chatbot, or blind sales automation tool. Its operating rule is:

AI explores, analyzes, and recommends. Deterministic workflows execute. Humans approve critical external commitments.

Commercial readiness

Gate	Status	Link
Production readiness	Tracked	Checklist
Commercial go-live	Tracked	Gate
Trust & evidence	Active	Trust docs
Saudi compliance	Native	PDPL integration

What is in this repository

Area	Contents
Backend	FastAPI, SQLAlchemy async, Postgres-oriented persistence, routers across sales, compliance, analytics, agents, and webhooks.
Frontend	Static landing assets plus a Next.js app under `apps/web`.
Trust/compliance	PDPL-aware controls, no-overclaim register, Saudi compliance register, approval classes, and audit/evidence concepts.
Operations	Docker, docker-compose, Makefile, CI, production readiness docs, deploy/runbook material.
Commercial kit	Pricing, service catalog, onboarding, Saudi B2B accounts, outreach/channel material, and service packaging docs.
V3 Commercial OS	Daily operator script, lead scoring, outreach drafts, proposal generator, founder dashboard, industry playbooks, and closing system.

Daily Operator (V3)

Run the full daily commercial sequence in one command:

# Demo mode — no external APIs needed
python3 scripts/dealix_daily_operator.py --mode demo

# Production mode — requires leads CSV
python3 scripts/dealix_daily_operator.py --mode production --leads data/imports/leads.csv

Outputs: outreach drafts (pending review), prospect packs, CEO brief, pipeline report.

Quick start

git clone https://github.com/Dealix-sa/dealix.git
cd dealix
make setup
cp .env.example .env
# edit .env, then:
make run
# API docs: http://localhost:8000/docs

Full local stack:

make docker-up
curl http://localhost:8000/health

Production-style verification bundle:

make prod-verify

Useful verification commands:

make env-check             # checks backend and frontend env templates
make api-contract-check    # checks OpenAPI contract stability
make security-smoke        # dependency-free repository security smoke
make production-smoke      # smoke production API when PRODUCTION_BASE_URL is set
make dependency-inventory  # export lightweight dependency inventory
make release-manifest      # export production release manifest
make test                  # test suite with project pytest defaults
make security              # Bandit + detect-secrets baseline scan when configured

Live production gates

Before paid traffic, public demos, or enterprise pilots, review these in order:

Gate	Document / command
Launch operator runbook	`docs/ops/LAUNCH_OPERATOR_RUNBOOK.md`
Production readiness	`docs/ops/PRODUCTION_READINESS_CHECKLIST.md`
Commercial go-live	`docs/ops/COMMERCIAL_GO_LIVE_GATE.md`
Domain operations	`docs/ops/DOMAIN_OPERATIONS_RUNBOOK.md`
Frontend production	`docs/ops/FRONTEND_PRODUCTION_RUNBOOK.md`
Server hardening	`docs/ops/SERVER_HARDENING_CHECKLIST.md`
Monitoring	`docs/ops/MONITORING_MATRIX.md`
Incident drill	`docs/ops/LIVE_DOMAIN_INCIDENT_DRILL.md`
Founder rhythm	`docs/ops/FOUNDER_DAILY_OPERATING_RHYTHM.md`
Finalization status	`docs/ops/PRODUCTION_FINALIZATION_STATUS.md`

Public endpoints

Public endpoints intentionally available without application auth include:

/health
/api/v1/public/demo-request
/api/v1/pricing/plans
/api/v1/checkout
/api/v1/webhooks/moyasar

Admin, customer, and privileged operational routes must remain protected by their configured API-key or future RBAC boundary.

Repository operating controls

Dealix now has explicit repository controls for the most important production risks:

Control	File / command
Python and web CI	`.github/workflows/ci.yml`
CodeQL and dependency review	`.github/workflows/security.yml`
Secret and filesystem vulnerability scans	`.github/workflows/repository-hardening.yml`
OpenSSF Scorecard	`.github/workflows/scorecard.yml`
Web lockfile generation workflow	`.github/workflows/generate-web-lockfile.yml`
Environment contract validation	`scripts/check_env_contract.py`, `make env-check`
OpenAPI contract export/check	`scripts/export_openapi.py`, `scripts/check_openapi_contract.py`
Dependency inventory	`scripts/export_dependency_inventory.py`, `make dependency-inventory`
Release manifest	`scripts/export_release_manifest.py`, `make release-manifest`
Production launch checklist	`docs/ops/PRODUCTION_READINESS_CHECKLIST.md`
Repository gap register	`docs/architecture/REPO_GAP_AUDIT.md`
Production verification bundle	`make prod-verify`

Architecture model

Dealix is organized into five planes. Features should cross planes through explicit contracts, not hidden shared state.

Plane	Responsibility	Example modules
Decision	Agents, reasoning, synthesis, recommendation, evidence assembly	`auto_client_acquisition/`, `autonomous_growth/`, `core/agents/`
Execution	Deterministic workflows, retries, compensation, external commitments	`auto_client_acquisition/pipeline.py`, `dealix/execution/`
Trust	Policy, approval, audit, verification, evidence packs	`dealix/trust/`, `dealix/registers/`
Data	Operational source of truth, lineage, metrics, integrations	`db/`, `integrations/`
Operating	CI/CD, Docker, release discipline, repo governance, runbooks	`.github/`, `Dockerfile`, `Makefile`, `docs/ops/`

Full blueprint: docs/blueprint/master-architecture.md.

Trust and safety posture

Dealix is designed around:

Structured outputs with approval, reversibility, and sensitivity classes.
Policy evaluation before high-impact external actions.
Human approval for pricing commitments, contract changes, sensitive exports, legal/regulatory messages, and other high-stakes actions.
Evidence packs for decisions that need traceability.
Public claim tracking through dealix/registers/no_overclaim.yaml.

Security posture includes .env-based configuration, sensitive settings patterns, webhook verification where implemented, Docker hardening, CI checks, and local/CI-compatible security commands. Keep README/security claims aligned with actual configured CI jobs.

Saudi compliance posture

Designed from inception for Saudi B2B operating constraints, including:

PDPL consent, lawful basis, retention, suppression, breach, and transfer posture.
Saudi-specific business language, SAR pricing, Riyadh-time operations, and Arabic/English workflows.
Compliance mappings and registers under dealix/registers/.

Compliance documentation does not replace legal review. Production launch requires evidence from tests, controls, logs, and operational procedures.

Development workflow

make install-dev
make lint
make test
make env-check
make api-contract-check

Before a production release:

make prod-verify

Then review:

Key docs

Purpose	Document
Master architecture	`docs/blueprint/master-architecture.md`
API map	`docs/architecture/API_MAP.md`
API contract policy	`docs/architecture/API_CONTRACT_POLICY.md`
Gap audit	`docs/architecture/REPO_GAP_AUDIT.md`
Launch operator runbook	`docs/ops/LAUNCH_OPERATOR_RUNBOOK.md`
Production readiness	`docs/ops/PRODUCTION_READINESS_CHECKLIST.md`
Commercial go-live	`docs/ops/COMMERCIAL_GO_LIVE_GATE.md`
Deploy runbook	`docs/ops/DEPLOY_RUNBOOK.md`
Domain operations	`docs/ops/DOMAIN_OPERATIONS_RUNBOOK.md`
Frontend production	`docs/ops/FRONTEND_PRODUCTION_RUNBOOK.md`
Server hardening	`docs/ops/SERVER_HARDENING_CHECKLIST.md`
Monitoring	`docs/ops/MONITORING_MATRIX.md`
Founder operating rhythm	`docs/ops/FOUNDER_DAILY_OPERATING_RHYTHM.md`
Supply chain policy	`docs/ops/SBOM_AND_SUPPLY_CHAIN_POLICY.md`
No-overclaim register	`dealix/registers/no_overclaim.yaml`
Saudi compliance register	`dealix/registers/compliance_saudi.yaml`

License

MIT — see LICENSE.

🚀 Launch · ✅ Production · 💼 Go-Live · 🧭 Gap Audit · 🇸🇦 Compliance

Name		Name	Last commit message	Last commit date
Latest commit History 1,068 Commits
.agents/skills		.agents/skills
.claude		.claude
.codex/agents		.codex/agents
.cursor/rules		.cursor/rules
.githooks		.githooks
.github		.github
agents/sales_agent		agents/sales_agent
api		api
app		app
apps/web		apps/web
auto_client_acquisition		auto_client_acquisition
autonomous_growth		autonomous_growth
brand		brand
business		business
business_autopilot		business_autopilot
cli		cli
clients		clients
company		company
continuous_improvement		continuous_improvement
core		core
customers		customers
data		data
db		db
dealix		dealix
demos		demos
design-skills		design-skills
design-systems/dealix		design-systems/dealix
docs		docs
evals		evals
executive		executive
founder_os		founder_os
frontend		frontend
gtm		gtm
integrations		integrations
intelligence		intelligence
intelligence_os		intelligence_os
landing		landing
learning_flywheel		learning_flywheel
ledgers		ledgers
mcp_server		mcp_server
memory		memory
observability		observability
ops		ops
os		os
outbox/2026-06-15		outbox/2026-06-15
outreach-execution		outreach-execution
patches		patches
platform		platform
platform_core		platform_core
presentations		presentations
projects		projects
prompts		prompts
qa		qa
readiness		readiness
reports		reports
sales		sales
schemas		schemas
scripts		scripts
self_evolving_os		self_evolving_os
simulations		simulations
skills/dealix-autonomous-company-os		skills/dealix-autonomous-company-os
templates		templates
tests		tests
token-optimizer		token-optimizer
tools		tools
transformation		transformation
transformation_os		transformation_os
trust		trust
workflows/sales		workflows/sales
.claudeignore		.claudeignore
.dockerignore		.dockerignore
.editorconfig		.editorconfig
.env.exa.example		.env.exa.example
.env.example		.env.example
.env.railway.example		.env.railway.example
.gitignore		.gitignore
.gitleaks.toml		.gitleaks.toml
.mcp.testsprite.example.json		.mcp.testsprite.example.json
.pa11yrc.json		.pa11yrc.json
.pre-commit-config.yaml		.pre-commit-config.yaml
.secrets.baseline		.secrets.baseline
.trivyignore.yaml		.trivyignore.yaml
AGENTS.md		AGENTS.md
AUTO14_RUNBOOK.md		AUTO14_RUNBOOK.md
BUSINESS_BUNDLE.md		BUSINESS_BUNDLE.md
CHANGELOG.md		CHANGELOG.md
CLAUDE.md		CLAUDE.md
CLIENT_OPS_MAX_RUNBOOK.md		CLIENT_OPS_MAX_RUNBOOK.md
CODEOWNERS		CODEOWNERS
COMMERCIAL_IDENTITY.md		COMMERCIAL_IDENTITY.md
CONTRIBUTING.md		CONTRIBUTING.md
DESIGN_SYSTEM.md		DESIGN_SYSTEM.md
DX3_COMMANDS.md		DX3_COMMANDS.md
Dockerfile		Dockerfile
Dockerfile.company-brain		Dockerfile.company-brain
Dockerfile.watchdog		Dockerfile.watchdog
Dockerfile.web		Dockerfile.web
Dockerfile.worker		Dockerfile.worker
FOUNDER_DASHBOARD_GUIDE.md		FOUNDER_DASHBOARD_GUIDE.md
FOUNDER_QUICK_REFERENCE.txt		FOUNDER_QUICK_REFERENCE.txt

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Repository files navigation

Dealix — Saudi-first AI Business Operating System

What Dealix is

Commercial readiness

What is in this repository

Daily Operator (V3)

Quick start

Live production gates

Public endpoints

Repository operating controls

Architecture model

Trust and safety posture

Saudi compliance posture

Development workflow

Key docs

License

About

Releases

Packages

Used by

Contributors

Languages

Uh oh!

Folders and files

Latest commit

History

Repository files navigation

Dealix — Saudi-first AI Business Operating System

What Dealix is

Commercial readiness

What is in this repository

Daily Operator (V3)

Quick start

Live production gates

Public endpoints

Repository operating controls

Architecture model

Trust and safety posture

Saudi compliance posture

Development workflow

Key docs

License

About

Resources

Contributing

Security policy

Stars

Watchers

Forks

Releases

Packages

Used by

Contributors

Languages