@aifabrix/builder 2.52.0 → 2.53.0

package/packages/builder-api/package.json

@@ -1,30 +0,0 @@
-{
-  "name": "@aifabrix/builder-api",
-  "version": "0.1.0",
-  "description": "AI Fabrix Builder API — HTTP orchestration for external system lifecycle (plan 154.0)",
-  "private": true,
-  "main": "../../lib/programmatic/builder-api-server.js",
-  "bin": {
-    "builder-api": "../../bin/builder-api-spike.js",
-    "builder-api-nest": "../../bin/builder-api-nest.js"
-  },
-  "scripts": {
-    "build": "tsc -p tsconfig.json",
-    "start": "node ../../bin/builder-api-spike.js",
-    "start:nest": "node ../../bin/builder-api-nest.js",
-    "cleanup": "node ../../bin/builder-api-cleanup.js"
-  },
-  "engines": {
-    "node": ">=18.0.0"
-  },
-  "dependencies": {
-    "@aifabrix/miso-client": "4.19.0"
-  },
-  "peerDependencies": {
-    "@nestjs/common": "^10.0.0",
-    "@nestjs/core": "^10.0.0",
-    "@nestjs/platform-express": "^10.0.0",
-    "reflect-metadata": "^0.2.0",
-    "rxjs": "^7.8.0"
-  }
-}

package/packages/builder-api/src/app.module.ts

@@ -1,7 +0,0 @@
-import { Module } from '@nestjs/common';
-
-/**
- * Root Nest module — HTTP routing is delegated to lib/programmatic via nest-http-bridge.
- */
-@Module({})
-export class AppModule {}

package/packages/builder-api/src/auth/auth.module.ts

@@ -1,5 +0,0 @@
-import { Module } from '@nestjs/common';
-
-/** Placeholder for future BearerAuthGuard wiring (V1 auth runs in lib/programmatic). */
-@Module({})
-export class AuthModule {}

package/packages/builder-api/src/external-system/external-system.module.ts

@@ -1,5 +0,0 @@
-import { Module } from '@nestjs/common';
-
-/** Placeholder for route-group modules; handlers live in lib/programmatic today. */
-@Module({})
-export class ExternalSystemModule {}

package/packages/builder-api/src/main.ts

@@ -1,16 +0,0 @@
-import 'reflect-metadata';
-import { NestFactory } from '@nestjs/core';
-import { AppModule } from './app.module';
-
-async function bootstrap() {
-  const app = await NestFactory.create(AppModule, { bodyParser: false });
-  // eslint-disable-next-line @typescript-eslint/no-require-imports
-  const { wireBuilderApiHttpBridge, BASE } = require('../../../lib/programmatic/nest-http-bridge');
-  wireBuilderApiHttpBridge(app.getHttpAdapter().getInstance());
-  const port = Number(process.env.PORT || 3005);
-  await app.listen(port);
-  // eslint-disable-next-line no-console
-  console.log(`builder-api (Nest) listening on http://localhost:${port}${BASE}/health`);
-}
-
-bootstrap();

package/packages/builder-api/tsconfig.json

@@ -1,15 +0,0 @@
-{
-  "compilerOptions": {
-    "module": "commonjs",
-    "target": "ES2020",
-    "outDir": "dist",
-    "rootDir": "src",
-    "strict": true,
-    "esModuleInterop": true,
-    "experimentalDecorators": true,
-    "emitDecoratorMetadata": true,
-    "skipLibCheck": true,
-    "declaration": false
-  },
-  "include": ["src/**/*.ts"]
-}

package/scripts/check-builder-api-architecture-grep.js

@@ -1,79 +0,0 @@
-#!/usr/bin/env node
-/**
- * Architecture grep gate for builder-api (plan 154.1).
- *
- * Fails when provider-specific strings appear under lib/programmatic or packages/builder-api.
- */
-
-'use strict';
-
-const fs = require('fs');
-const path = require('path');
-
-const ROOT = path.join(__dirname, '..');
-const SCAN_DIRS = ['lib/programmatic', 'packages/builder-api'];
-const FORBIDDEN = /\b(github|gitlab|bitbucket|octokit|azuredevops|azure devops|git clone)\b/i;
-const ALLOWLIST = new Set([
-  path.normalize('lib/programmatic/openapi-descriptions.js'),
-  path.normalize('lib/programmatic/openapi-spec.js'),
-  path.normalize('packages/builder-api/MANUAL-CHECKLIST.md')
-]);
-
-/**
- * Recursively collect scannable files under a directory.
- * @param {string} dir - Directory path to scan
- * @param {string[]} files - Output file list
- * @returns {void}
- */
-function walk(dir, files) {
-  if (!fs.existsSync(dir)) {
-    return;
-  }
-  for (const name of fs.readdirSync(dir)) {
-    const full = path.join(dir, name);
-    const stat = fs.statSync(full);
-    if (stat.isDirectory()) {
-      walk(full, files);
-      continue;
-    }
-    if (!/\.(js|ts|md|json|yml|yaml)$/.test(name)) {
-      continue;
-    }
-    files.push(full);
-  }
-}
-
-/** @type {string[]} */
-const files = [];
-for (const rel of SCAN_DIRS) {
-  walk(path.join(ROOT, rel), files);
-}
-
-/** @type {Array<{ file: string, line: number, text: string }>} */
-const violations = [];
-
-for (const file of files) {
-  const rel = path.normalize(path.relative(ROOT, file));
-  if (ALLOWLIST.has(rel)) {
-    continue;
-  }
-  const content = fs.readFileSync(file, 'utf8');
-  content.split('\n').forEach((line, index) => {
-    if (FORBIDDEN.test(line)) {
-      violations.push({ file: rel, line: index + 1, text: line.trim() });
-    }
-  });
-}
-
-if (violations.length > 0) {
-  // eslint-disable-next-line no-console
-  console.error('builder-api architecture grep failed:');
-  for (const row of violations) {
-    // eslint-disable-next-line no-console
-    console.error(`  ${row.file}:${row.line}: ${row.text}`);
-  }
-  process.exit(1);
-}
-
-// eslint-disable-next-line no-console
-console.log('builder-api architecture grep passed');

package/scripts/check-datasource-test-run-schema-sync.js

@@ -1,34 +0,0 @@
-#!/usr/bin/env node
-/**
- * CI helper: fail when Builder lib/schema/datasource-test-run.schema.json drifts from Dataplane copy.
- * @fileoverview Schema sync gate (plan §8.1)
- */
-/* eslint-disable no-console -- CLI script */
-
-const path = require('path');
-const { assertDatasourceTestRunSchemasInSync } = require('../lib/utils/datasource-test-run-schema-sync');
-
-const root = path.join(__dirname, '..');
-const builderSchema = path.join(root, 'lib/schema/datasource-test-run.schema.json');
-const dpRoot = process.env.AIFABRIX_DATAPLANE_ROOT || path.join(root, '..', 'aifabrix-dataplane');
-const dataplaneSchema = path.join(dpRoot, 'app/schemas/json/datasource-test-run.schema.json');
-
-const strict = process.env.AIFABRIX_SCHEMA_SYNC_STRICT === '1';
-
-try {
-  const result = assertDatasourceTestRunSchemasInSync(builderSchema, dataplaneSchema);
-  if (result.skipped) {
-    const msg = result.reason || 'Dataplane schema path missing';
-    if (strict) {
-      console.error(`Schema sync failed (strict): ${msg}`);
-      process.exit(1);
-    }
-    console.warn(`Schema sync skipped: ${msg}`);
-    process.exit(0);
-  }
-  console.log(`DatasourceTestRun schema OK (sha256 ${result.builderSha})`);
-  process.exit(0);
-} catch (e) {
-  console.error(e.message || String(e));
-  process.exit(1);
-}

package/scripts/ci-fix.sh

@@ -1,19 +0,0 @@
-#!/bin/bash
-# CI Fix Script Wrapper
-# This script is a wrapper that calls the actual CI fix script
-# located in tests/scripts/ci-fix.sh
-
-SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
-ACTUAL_SCRIPT="$SCRIPT_DIR/../tests/scripts/ci-fix.sh"
-
-if [ ! -f "$ACTUAL_SCRIPT" ]; then
-  echo "Error: CI fix script not found at $ACTUAL_SCRIPT" >&2
-  exit 1
-fi
-
-# Make sure the script is executable
-chmod +x "$ACTUAL_SCRIPT" 2>/dev/null || true
-
-# Execute the actual script
-exec "$ACTUAL_SCRIPT" "$@"
-

package/scripts/ci-simulate.sh

@@ -1,19 +0,0 @@
-#!/bin/bash
-# CI Simulation Script Wrapper
-# This script is a wrapper that calls the actual CI simulation script
-# located in tests/scripts/ci-simulate.sh
-
-SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
-ACTUAL_SCRIPT="$SCRIPT_DIR/../tests/scripts/ci-simulate.sh"
-
-if [ ! -f "$ACTUAL_SCRIPT" ]; then
-  echo "Error: CI simulation script not found at $ACTUAL_SCRIPT" >&2
-  exit 1
-fi
-
-# Make sure the script is executable
-chmod +x "$ACTUAL_SCRIPT" 2>/dev/null || true
-
-# Execute the actual script
-exec "$ACTUAL_SCRIPT" "$@"
-

package/scripts/diagnose-cli.js

@@ -1,150 +0,0 @@
-#!/usr/bin/env node
-/* eslint-disable no-console */
-
-/**
- * List every PATH hit for aifabrix / af and each --version (find duplicate installs).
- *
- * @fileoverview CLI path diagnostic for @aifabrix/builder
- */
-
-const { execFileSync, execSync } = require('child_process');
-const fs = require('fs');
-const path = require('path');
-
-/**
- * Reads package.json `bin` field.
- * @returns {Record<string, string>|string} Bin map or single path string
- */
-function readBins() {
-  const pkgPath = path.join(__dirname, '..', 'package.json');
-  const pkg = JSON.parse(fs.readFileSync(pkgPath, 'utf8'));
-  return pkg.bin || { aifabrix: 'bin/aifabrix.js' };
-}
-
-/**
- * Resolves every PATH directory that exposes an executable named `binName`.
- * @param {string} binName - CLI name (e.g. aifabrix)
- * @returns {Array<{ path: string, real: string }>} Deduped hits with real paths
- */
-function locationsOnPath(binName) {
-  if (process.platform === 'win32') {
-    try {
-      const out = execSync(`where ${binName}`, {
-        encoding: 'utf8',
-        stdio: ['ignore', 'pipe', 'ignore']
-      }).trim();
-      return out.split(/\r?\n/).filter(Boolean).map((p) => ({ path: p, real: p }));
-    } catch {
-      return [];
-    }
-  }
-
-  const dirs = (process.env.PATH || '').split(path.delimiter).filter(Boolean);
-  const out = [];
-  const seenReal = new Set();
-  for (const dir of dirs) {
-    const candidate = path.join(dir, binName);
-    try {
-      const st = fs.lstatSync(candidate);
-      if (!st.isFile() && !st.isSymbolicLink()) continue;
-      fs.accessSync(candidate, fs.constants.X_OK);
-      const real = fs.realpathSync(candidate);
-      if (seenReal.has(real)) continue;
-      seenReal.add(real);
-      out.push({ path: candidate, real });
-    } catch {
-      // not found or not executable
-    }
-  }
-  return out;
-}
-
-/**
- * Runs `executablePath --version` and returns stdout or null on failure.
- * @param {string} executablePath - Absolute path to the binary
- * @returns {string|null} Trimmed version output
- */
-function versionAt(executablePath) {
-  try {
-    return execFileSync(executablePath, ['--version'], {
-      encoding: 'utf8',
-      stdio: ['ignore', 'pipe', 'ignore']
-    }).trim();
-  } catch {
-    return null;
-  }
-}
-
-/**
- * Prints PNPM_HOME and npm prefix for debugging PATH issues.
- * @returns {void}
- */
-function printEnvironment() {
-  console.log('Environment (relevant to global CLIs)\n');
-  console.log(`  PNPM_HOME     ${process.env.PNPM_HOME || '(not set)'}`);
-  try {
-    const prefix = execSync('npm config get prefix', {
-      encoding: 'utf8',
-      stdio: ['ignore', 'pipe', 'ignore']
-    }).trim();
-    console.log(`  npm prefix    ${prefix}`);
-  } catch {
-    console.log('  npm prefix    (could not read)');
-  }
-  console.log('');
-}
-
-/**
- * @param {string[]} names - Bin names from package.json
- * @returns {void}
- */
-function printBinReports(names) {
-  for (const name of names) {
-    console.log(`── ${name} ──`);
-    const hits = locationsOnPath(name);
-    if (!hits.length) {
-      console.log('  (not found on PATH)\n');
-      continue;
-    }
-    hits.forEach((h, i) => {
-      const ver = versionAt(h.path);
-      const marker = i === 0 ? '  ← first on PATH (what your shell runs)' : '';
-      console.log(`  [${i + 1}] ${h.path}`);
-      if (h.real !== h.path) console.log(`      → ${h.real}`);
-      console.log(`      --version: ${ver ?? '(failed to run)'}${marker}`);
-    });
-    console.log('');
-  }
-}
-
-/**
- * @param {string[]} names - Bin names from package.json
- * @returns {void}
- */
-function warnIfMultipleVersions(names) {
-  const uniqVersions = new Set();
-  for (const name of names) {
-    for (const h of locationsOnPath(name)) {
-      const v = versionAt(h.path);
-      if (v) uniqVersions.add(v);
-    }
-  }
-  if (uniqVersions.size > 1) {
-    console.log('⚠  Multiple distinct --version values above: remove or reorder PATH so only one install remains.');
-    console.log('   Often: npm uninstall -g @aifabrix/builder, then ensure PNPM_HOME is before /usr/local/bin in PATH.\n');
-  }
-}
-
-/**
- * Entry: list PATH hits and versions for each package bin.
- * @returns {void}
- */
-function main() {
-  const binField = readBins();
-  const names = typeof binField === 'string' ? ['aifabrix'] : Object.keys(binField);
-  printEnvironment();
-  printBinReports(names);
-  warnIfMultipleVersions(names);
-}
-
-main();

package/scripts/docker_image_content_gate.js

@@ -1,47 +0,0 @@
-#!/usr/bin/env node
-/**
- * Fail when a built Docker image contains dev-only paths (plan 154.3).
- *
- * @fileoverview builder-api image content gate
- * @author AI Fabrix Team
- * @version 1.0.0
- */
-
-'use strict';
-
-const { checkImage } = require('./lib/docker-image-content-gate-core');
-
-/**
- * @param {string[]} argv
- * @returns {number}
- */
-function main(argv) {
-  const args = argv.slice(2);
-  if (args.length < 2) {
-    console.error('Usage: docker_image_content_gate.js <image> <profile>');
-    return 1;
-  }
-
-  const [image, profile] = args;
-  try {
-    const violations = checkImage(image, profile);
-    if (violations.length > 0) {
-      console.error(`Image ${image} failed ${profile} content gate:`);
-      for (const path of violations) {
-        console.error(`  - forbidden: ${path}`);
-      }
-      return 1;
-    }
-    console.log(`OK: ${image} passed ${profile} content gate`);
-    return 0;
-  } catch (error) {
-    console.error(`ERROR: ${error.message}`);
-    return 1;
-  }
-}
-
-if (require.main === module) {
-  process.exit(main(process.argv));
-}
-
-module.exports = { main };

package/scripts/docker_image_content_gate.sh

@@ -1,5 +0,0 @@
-#!/usr/bin/env sh
-# Plan 154.3 — verify a built builder-api image does not contain dev-only trees.
-set -eu
-ROOT="$(CDPATH= cd -- "$(dirname "$0")/.." && pwd)"
-exec node "$ROOT/scripts/docker_image_content_gate.js" "$@"