@aifabrix/builder 2.52.1 → 2.53.1

package/.cursor/skills/README.md

@@ -1,15 +0,0 @@
-# aifabrix-builder Cursor skills
-
-| Skill | Command | Purpose |
-| ----- | ------- | ------- |
-| [**aifabrix-application-lifecycle**](aifabrix-application-lifecycle/SKILL.md) | (all plan commands) | **Mandatory semantic lifecycle checklist** |
-| [builder-push-github](builder-push-github/SKILL.md) | `/push-github` | Release branch CI + optional NPM deploy PR |
-| [builder-repair-release](builder-repair-release/SKILL.md) | `/repair-release` | Version bump + CHANGELOG |
-| [builder-validate-tests](builder-validate-tests/SKILL.md) | `/validate-tests` | Lint + Jest fix loop |
-| [builder-validate-tests-ci](builder-validate-tests-ci/SKILL.md) | `/validate-tests.ci` | `build:ci` / GitHub parity |
-| [builder-validate-code](builder-validate-code/SKILL.md) | `/validate-code` | Code analysis → improvement plans |
-| [builder-validate-plan](builder-validate-plan/SKILL.md) | `/validate-plan` | Pre-implementation plan validation |
-| [builder-validate-implementation](builder-validate-implementation/SKILL.md) | `/validate-implementation` | Post-implementation plan validation |
-| [builder-validate-knowledgebase](builder-validate-knowledgebase/SKILL.md) | `/validate-knowledgebase` | `docs/` + schema validation |
-
-Commands live in `.cursor/commands/`.

package/.dockerignore

@@ -1,52 +0,0 @@
-# Builder API Docker build context (plan 154.3)
-# Deny-by-default: Dockerfile COPY uses docker-builder-api-staging/ only (host script).
-# Never ship .cursor/, integration labs, tests, full templates/, or CLI entry aifabrix.js.
-
-# Git and IDE
-.git/
-.gitignore
-.github/
-.cursor/
-.aifabrix/
-.vscode/
-.idea/
-*.swp
-*~
-.DS_Store
-
-# Dev / CI trees (not runtime)
-tests/
-docs/
-integration/
-packages/
-builder/
-scripts/
-temp/
-.temp/
-coverage/
-.nyc_output/
-eslint-report.json
-
-# Full source trees replaced by docker-builder-api-staging/
-lib/
-bin/
-templates/
-
-# Staged runtime output (must remain in context)
-!docker-builder-api-staging/
-
-# Node dev artifacts (package manifests whitelisted below)
-node_modules/
-npm-debug.log*
-
-# Env and secrets
-.env
-.env.*
-
-# Misc root clutter
-*.md
-!docker-builder-api-staging/**
-
-# Keep npm install inputs
-!package.json
-!package-lock.json

package/.eslintignore

@@ -1,22 +0,0 @@
-# Dependencies and coverage
-node_modules/
-coverage/
-.nyc_output/
-
-# Build and staging artifacts
-dist/
-build/
-out/
-docker-builder-api-staging/
-packages/builder-api/dist/
-
-# Temporary and local-only paths (see .gitignore)
-.temp/
-.temp/**
-temp/
-tmp-imgver*/
-mount/
-
-# Generated integration deploy scripts and local lab fixtures
-integration/**/deploy.js
-integration/**/backup/

package/.markdownlint.json

@@ -1,14 +0,0 @@
-{
-  "default": true,
-  "MD007": false,
-  "MD012": false,
-  "MD013": false,
-  "MD022": false,
-  "MD024": { "siblings_only": true },
-  "MD029": false,
-  "MD031": false,
-  "MD032": false,
-  "MD033": false,
-  "MD041": false
-}
-

package/anchor-docs/README.md

@@ -1,10 +0,0 @@
-# anchor-docs (Builder CLI)
-
-Canonical technical notes for the AI Fabrix Builder. Command references, JSON schemas, and generator entrypoints live here; **aifabrix-docs** `docs/builder/` should only summarize and link.
-
-## Conventions
-
-* Copy `anchor-docs/_TEMPLATE` to a new `*.md` file and fill in placeholders (the template is not `.md`, so it is not validated as an anchor).
-* `navigation_id` must match **aifabrix-docs** `docs/builder/navigation.yaml` (`builder/<url>`).
-* Use **`[path:aifabrix-builder/...]`** markers only.
-* PRs touching anchors should request review from the `owner` team.

package/anchor-docs/_TEMPLATE

@@ -1,24 +0,0 @@
-# Copy this file to `your-topic.md` and replace placeholders. This is not `*.md` so it is not validated as an anchor-doc.
-
----
-title: <Title>
-navigation_id: builder/<slug-from-navigation.yaml>
-owner: <team>
-last_verified_commit: <sha-or-TBD>
----
-
-## Summary
-
-<What this anchor covers for Builder CLI or schemas.>
-
-## Details
-
-<Implementation notes; keep persona docs in aifabrix-docs thin.>
-
-## Examples
-
-<aifabrix wizard|validate|deploy ...>
-
-## Paths
-
-[path:aifabrix-builder/README.md]

package/babel.config.js

@@ -1,6 +0,0 @@
-/** Babel config for Jest (babel-jest). Single file so all workers resolve the same config. */
-// Syntax-only plugin ensures Babel never treats config as "no configuration data" in workers.
-module.exports = {
-  presets: [['@babel/preset-env', { targets: { node: 'current' } }]],
-  plugins: ['@babel/plugin-syntax-optional-chaining']
-};

package/bin/builder-api-cleanup.js

@@ -1,26 +0,0 @@
-#!/usr/bin/env node
-/**
- * Purge expired builder-api workspaces (cron / scheduled job entry).
- */
-
-'use strict';
-
-const { purgeExpiredWorkspaces } = require('../lib/programmatic/workspace-cleanup');
-
-const dryRun = process.argv.includes('--dry-run');
-
-const result = purgeExpiredWorkspaces({ dryRun });
-
-// eslint-disable-next-line no-console
-console.log(
-  dryRun
-    ? `Would purge ${result.count} workspace(s)`
-    : `Purged ${result.count} workspace(s)`
-);
-
-if (result.count > 0) {
-  for (const row of result.purged) {
-    // eslint-disable-next-line no-console
-    console.log(`  ${row.userId}/integration/${row.systemKey}`);
-  }
-}

package/bin/builder-api-nest.js

@@ -1,10 +0,0 @@
-#!/usr/bin/env node
-/**
- * Start builder-api via NestJS bootstrap (plan 154.0 monorepo scaffold).
- */
-
-'use strict';
-
-require('reflect-metadata');
-require('ts-node/register/transpile-only');
-require('../packages/builder-api/src/main.ts');

package/bin/builder-api-spike.js

@@ -1,19 +0,0 @@
-#!/usr/bin/env node
-/**
- * Start builder-api HTTP server (plan 154.0 spike / pre-Nest).
- */
-
-'use strict';
-
-const { createBuilderApiServer, BASE } = require('../lib/programmatic/builder-api-server');
-const { ensureBuilderApiRuntimeConfigDir } = require('../lib/programmatic/builder-api-runtime-config');
-
-ensureBuilderApiRuntimeConfigDir();
-
-const port = Number(process.env.PORT || 3005);
-const server = createBuilderApiServer(port);
-
-server.on('listening', () => {
-  // eslint-disable-next-line no-console
-  console.log(`builder-api listening on http://localhost:${port}${BASE}/health`);
-});

package/enterprise-knowledge/README.md

@@ -1,50 +0,0 @@
-# Enterprise Knowledge anchors (aifabrix-builder SSOT)
-
-Authoring workspace for **Enterprise Knowledge** external systems (`systemKind: enterpriseKnowledge`).
-
-Connected Systems (vendor integrations) stay under `integration/`. Enterprise Knowledge anchors live here.
-
-## Layout
-
-```text
-enterprise-knowledge/<anchorKey>/
-  application.json
-  <anchorKey>-system.json
-  <anchorKey>-deploy.json
-  env.template
-  deploy.js
-```
-
-## CLI
-
-Commands resolve this tree automatically when `*-system.json` has `systemKind: enterpriseKnowledge`:
-
-```bash
-aifabrix validate enterprise-integration-lifecycle
-aifabrix upload enterprise-integration-lifecycle
-aifabrix deploy enterprise-integration-lifecycle
-```
-
-Optional override:
-
-```bash
-aifabrix upload <anchor>
-```
-
-Generate a full manifest preview (human review before upload/deploy):
-
-```bash
-aifabrix enterprise-knowledge generate-manifest --domain sales --source-system hubspot-e2e
-```
-
-Preview JSON is written under `enterprise-knowledge/<anchor>/generated-service-contracts/` unless `--output` or `--json` is used.
-
-User-facing CLI copy uses **Enterprise Knowledge** (not internal abbreviations).
-
-## Platform anchor
-
-| Anchor | Purpose |
-| --- | --- |
-| `enterprise-integration-lifecycle/` | Platform COM lifecycle subscriptions (repository.\*, template.\*) |
-
-See repo-root `integration/README.md` for the three-layer platform model and Connected Systems workflows.

package/enterprise-knowledge/enterprise-integration-lifecycle/README.md

@@ -1,22 +0,0 @@
-# Enterprise MCP — Integration lifecycle (Layer 2)
-
-Platform **enterpriseKnowledge** anchor for normalized **repository.*** and **template.*** Enterprise MCP tools.
-
-| Generated datasource | Trigger |
-| --- | --- |
-| `enterprise-repository` | Published datasource with `resourceType: repository` (e.g. `github-repository`) |
-| `enterprise-template` | Published datasource with `resourceType: template` |
-
-**Builder-api** calls this system via `ENTERPRISE_MCP_SYSTEM_KEY=enterprise-integration-lifecycle` (see `builder/builder-api/env.template`).
-
-## Bootstrap
-
-```bash
-aifabrix validate enterprise-integration-lifecycle
-aifabrix json enterprise-integration-lifecycle
-aifabrix upload enterprise-integration-lifecycle --probe
-```
-
-Publish **before** uploading repository provider integrations (`github`).
-
-See `tests/manual/com/integration_lifecycle_golden_path.md` in aifabrix-dataplane (manual proof).

package/enterprise-knowledge/enterprise-integration-lifecycle/application.json

@@ -1,15 +0,0 @@
-{
-  "app": {
-    "key": "enterprise-integration-lifecycle",
-    "displayName": "Enterprise MCP — Integration lifecycle",
-    "description": "Platform anchor for unified Enterprise MCP repository and template capabilities (154.1 Layer 2).",
-    "type": "external"
-  },
-  "externalIntegration": {
-    "version": "1.0.0",
-    "autopublish": false,
-    "schemaBasePath": "./",
-    "systems": ["enterprise-integration-lifecycle-system.json"],
-    "dataSources": []
-  }
-}

package/enterprise-knowledge/enterprise-integration-lifecycle/deploy.js

@@ -1,69 +0,0 @@
-#!/usr/bin/env node
-/* eslint-disable no-console */
-/**
- * Deploy enterprise-integration-lifecycle external system and datasources using aifabrix CLI.
- * Run: node deploy.js
- * Flow: check auth → login if needed → deploy → run integration tests.
- */
-
-const { execSync } = require('child_process');
-const path = require('path');
-
-const scriptDir = __dirname;
-// Project root (repo containing integration/ and builder/) so deploy/test-integration resolve app paths correctly
-const projectRoot = path.join(scriptDir, '..', '..');
-const appKey = 'enterprise-integration-lifecycle';
-const env = process.env.ENVIRONMENT || 'dev';
-// Controller URL: from config (aifabrix auth config) or set CONTROLLER env before running
-
-/**
- * Run a shell command with optional options.
- * @param {string} cmd - Command to run
- * @param {Object} [options={}] - Options (cwd, stdio, ignoreExit)
- * @returns {boolean} True if command succeeded
- */
-function run(cmd, options = {}) {
-  const opts = { cwd: scriptDir, stdio: 'inherit', ...options };
-  try {
-    execSync(cmd, opts);
-    return true;
-  } catch (err) {
-    if (options.ignoreExit) return false;
-    process.exit(err.status ?? 1);
-  }
-}
-
-/**
- * Check if aifabrix auth is logged in.
- * @returns {boolean} True if logged in
- */
-function isLoggedIn() {
-  try {
-    execSync('aifabrix auth status', { cwd: scriptDir, stdio: 'pipe' });
-    return true;
-  } catch {
-    return false;
-  }
-}
-
-console.log('🔍 Checking authentication...');
-if (!isLoggedIn()) {
-  console.log('⚠  Not logged in. Run login (e.g. aifabrix login --controller <url> --method device --environment ' + env + ').');
-  run('aifabrix login --environment ' + env);
-}
-
-console.log('🔍 Validating configuration...');
-run('aifabrix validate "' + path.join(scriptDir, 'enterprise-integration-lifecycle-system.json') + '"');
-console.log('✔ Validation passed');
-
-console.log('🚀 Deploying ' + appKey + '...');
-run('aifabrix deploy ' + appKey, { cwd: projectRoot });
-console.log('✔ Deployment complete');
-
-if (process.env.RUN_TESTS !== 'false') {
-  console.log('🧪 Running integration tests...');
-  run('aifabrix test-integration ' + appKey, { cwd: projectRoot });
-  console.log('✔ Tests passed');
-}
-
-console.log('✔ Done.');

package/enterprise-knowledge/enterprise-integration-lifecycle/enterprise-integration-lifecycle-deploy.json

@@ -1,52 +0,0 @@
-{
-  "key": "enterprise-integration-lifecycle",
-  "displayName": "Enterprise MCP — Integration lifecycle",
-  "description": "Platform anchor for unified Enterprise MCP repository and template capabilities (154.1 Layer 2).",
-  "type": "external",
-  "version": "1.0.0",
-  "externalIntegration": {
-    "schemaBasePath": "./",
-    "systems": [
-      "enterprise-integration-lifecycle-system.json"
-    ],
-    "dataSources": [],
-    "autopublish": false,
-    "version": "1.0.0"
-  },
-  "system": {
-    "key": "enterprise-integration-lifecycle",
-    "displayName": "Enterprise MCP — Integration lifecycle",
-    "description": "Platform anchor for Builder workspace lifecycle. Generates enterprise-repository and enterprise-template MCP datasources when repository or template provider datasources publish. Referenced by builder-api ENTERPRISE_MCP_SYSTEM_KEY.",
-    "type": "custom",
-    "enabled": true,
-    "systemKind": "enterpriseKnowledge",
-    "authentication": {
-      "authType": "none"
-    },
-    "configuration": [],
-    "dataSources": [],
-    "subscriptions": [
-      {
-        "key": "enterprise-integration-lifecycle-generator",
-        "displayName": "Enterprise integration lifecycle generator",
-        "description": "Regenerate enterprise repository and template MCP datasources when provider datasources publish.",
-        "event": "platform.datasource.published",
-        "filter": {
-          "resourceTypes": [
-            "repository",
-            "template"
-          ]
-        },
-        "task": {
-          "type": "generateEnterpriseDatasources",
-          "version": 1
-        },
-        "runOnCreate": true
-      }
-    ]
-  },
-  "dataSources": [],
-  "requiresDatabase": false,
-  "requiresRedis": false,
-  "requiresStorage": false
-}

package/enterprise-knowledge/enterprise-integration-lifecycle/enterprise-integration-lifecycle-system.json

@@ -1,29 +0,0 @@
-{
-  "key": "enterprise-integration-lifecycle",
-  "displayName": "Enterprise MCP — Integration lifecycle",
-  "description": "Platform anchor for Builder workspace lifecycle. Generates enterprise-repository and enterprise-template MCP datasources when repository or template provider datasources publish. Referenced by builder-api ENTERPRISE_MCP_SYSTEM_KEY.",
-  "type": "custom",
-  "enabled": true,
-  "systemKind": "enterpriseKnowledge",
-  "authentication": {
-    "authType": "none"
-  },
-  "configuration": [],
-  "dataSources": [],
-  "subscriptions": [
-    {
-      "key": "enterprise-integration-lifecycle-generator",
-      "displayName": "Enterprise integration lifecycle generator",
-      "description": "Regenerate enterprise repository and template MCP datasources when provider datasources publish.",
-      "event": "platform.datasource.published",
-      "filter": {
-        "resourceTypes": ["repository", "template"]
-      },
-      "task": {
-        "type": "generateEnterpriseDatasources",
-        "version": 1
-      },
-      "runOnCreate": true
-    }
-  ]
-}

package/enterprise-knowledge/enterprise-integration-lifecycle/env.template

@@ -1,2 +0,0 @@
-# Enterprise MCP integration lifecycle anchor — no secrets required.
-# Publish once per environment before repository/template provider datasources.

package/integration/README.md

@@ -1,81 +0,0 @@
-# Platform integrations (aifabrix-builder SSOT)
-
-Production and platform integration manifests live here — **not** in aifabrix-dataplane `integration/` (lab/CI mirrors only).
-
-**Use the Builder CLI for everything below** — do not hand-scaffold folders or copy from dataplane. SSOT files in git are maintained by the team; developers bootstrap and change integrations with `aifabrix` commands.
-
-## Three-layer model (154.0 / 154.1)
-
-| Layer | Artifact | Path | Bootstrap (Builder CLI) |
-| --- | --- | --- | --- |
-| **1 — Builder API** | Platform webapp (workspace HTTP orchestration) | `../builder/builder-api/` | `aifabrix up-builder-api` or `aifabrix create builder-api --template builder-api --type webapp` |
-| **1 — GitHub provider** | Production GitHub external system (`apiProvider: github`) | `github/` | `aifabrix create github --type external` then repair/json — **not** OpenAPI wizard (custom CIP + delegated OAuth) |
-| **2 — Enterprise MCP** | COM anchor (repository.\*, template.\*) | `../enterprise-knowledge/enterprise-integration-lifecycle/` | `aifabrix create enterprise-integration-lifecycle --type external` then edit system subscriptions — wizard does not generate COM tasks yet |
-
-**Role assistants (Layer 3):** Platform-generated from certified business roles — not hand-authored integration folders here. See [How role assistants are created](https://docs.aifabrix.ai/docs/role-assistants-how-role-assistants-are-created). Admins **Activate for AI**; users do not submit role keys or capability lists.
-
-```text
-builder-api  →  WORKSPACE_ROOT/{userId}/integration/{systemKey}/
-              →  Enterprise MCP execute on enterprise-integration-lifecycle
-github       →  production repository provider (aifabrix upload → dataplane)
-```
-
-## Builder CLI workflow (normative)
-
-### Prerequisites
-
-```bash
-aifabrix auth status
-aifabrix up-infra          # Postgres, Redis
-aifabrix up-platform       # or up-miso + up-dataplane + up-builder-api
-```
-
-### Builder API (webapp — `builder/`, not `integration/`)
-
-Materialized from `templates/applications/builder-api/` into `builder/builder-api/`:
-
-```bash
-aifabrix up-builder-api              # copy template if missing, resolve, run
-aifabrix resolve builder-api         # expand url:// and kv:// in env.template → .env
-aifabrix run builder-api --reload    # or: pnpm run dev-reload (from aifabrix-builder repo root)
-aifabrix validate builder-api
-```
-
-Repo maintainers edit SSOT under `builder/builder-api/` and run `npm run sync-json` to refresh templates — same pattern as miso-controller/dataplane.
-
-### External integrations (`integration/<systemKey>/`)
-
-| Command | When |
-| --- | --- |
-| `aifabrix create <app> --type external` | New integration folder scaffold |
-| `aifabrix wizard` / `aifabrix wizard --config …` | OpenAPI/MCP/known-platform integrations (HubSpot, etc.) |
-| `aifabrix repair <systemKey>` | Fix manifest drift, auth, env.template, `deploy.js`, deploy JSON |
-| `aifabrix json <systemKey>` | Regenerate `<systemKey>-deploy.json` |
-| `aifabrix validate <systemKey>` | Schema + deployment manifest gate |
-| `aifabrix upload <systemKey> --probe` | Publish config to dataplane (pipeline) |
-| `aifabrix download <systemKey>` | Pull an already-published system from dataplane into `integration/` |
-
-**Platform SSOT in this repo** was checked in after initial `create` + manual COM/custom auth edits (see each folder’s `INTEGRATION_CHANGELOG.md`).
-
-### Publish order (dev)
-
-```bash
-aifabrix upload enterprise-integration-lifecycle --probe
-aifabrix upload github --probe
-aifabrix run builder-api --reload
-```
-
-Enterprise MCP anchor must be on dataplane **before** repository provider integrations such as **`github`**.
-
-## Why not wizard for these two?
-
-| Integration | Reason |
-| --- | --- |
-| `github` | `type: custom`, `authType: apiProvider` (Miso GitHub App + delegated OAuth). Wizard targets OpenAPI/MCP shapes; manifests are maintained with `create` → edit → `repair` → `json`. |
-| `enterprise-integration-lifecycle` | COM subscription + `generateEnterpriseDatasources` task. Not generated by wizard today; use `create --type external` + system.json subscription block. |
-
-For standard CRM/API integrations, use `integration/wizard-configs/*.yaml` and `aifabrix wizard --config …` (see `integration/hubspot-test/` examples).
-
-**Note:** Dataplane may still mirror legacy `integration/test-e2e-github/` for CI until aligned; **production SSOT is `integration/github/`** in this repo.
-
-Lab-only fixtures (`hubspot-test/`, `roundtrip-test-local*`) remain for Builder CLI regression tests.

package/integration/github/README.md

@@ -1,53 +0,0 @@
-# GitHub (production repository provider)
-
-**Production SSOT** for the GitHub repository provider (Layer 1 — 154.1). Path: **`aifabrix-builder/integration/github/`**.
-
-Delegated OAuth via Miso **`apiProvider: github`**, issues/comments datasources, and **`github-repository`** (`resourceType: repository`) for Enterprise MCP lifecycle.
-
-**Setup:** `aifabrix upload github --probe` after Miso GitHub provider is linked.
-
-## Scope
-
-| Datasource | Operations |
-| --- | --- |
-| `github-issues` | list, get, create, update, delete (maps to **close**; GitHub has no hard delete) |
-| `github-issue-comments` | list (by `issueNumber`), create |
-| `github-repository` | repository lifecycle CIP (`status`, `sync`, branches, reviews, pipeline dispatch) |
-
-## Authentication
-
-- External system key: **`github`**
-- Auth: **`authType: apiProvider`** → Miso provider **`github`**
-- Use a **GitHub App** with **expiring user access tokens** (refresh tokens required for Miso link/mint).
-- Link the provider for your user in Miso before running CIP execute tests.
-
-## Configuration
-
-| Variable | Purpose |
-| --- | --- |
-| `BASE_URL` | `https://api.github.com` (default in manifest) |
-| `GITHUB_OWNER` | Repository owner |
-| `GITHUB_REPO` | Repository name |
-
-See [`env.template`](env.template) for deploy placeholders.
-
-## Quick start
-
-```bash
-aifabrix validate github
-aifabrix json github
-aifabrix upload github --probe
-
-# Or run the generated deploy script from the integration folder:
-node integration/github/deploy.js
-```
-
-## Manifest files
-
-| File | Role |
-| --- | --- |
-| [`github-system.json`](github-system.json) | External system |
-| [`github-datasource-issues.json`](github-datasource-issues.json) | Issues datasource |
-| [`github-datasource-issue-comments.json`](github-datasource-issue-comments.json) | Comments datasource |
-| [`github-datasource-repository.json`](github-datasource-repository.json) | Repository datasource (`resourceType: repository`) |
-| [`github-deploy.json`](github-deploy.json) | Pipeline upload payload (regenerate with `aifabrix json github`) |

package/integration/github/application.json

@@ -1,21 +0,0 @@
-{
-  "app": {
-    "key": "github",
-    "displayName": "GitHub",
-    "description": "Production GitHub repository provider: delegated OAuth via Miso apiProvider, issues, comments, and repository lifecycle CIP.",
-    "type": "external"
-  },
-  "externalIntegration": {
-    "schemaBasePath": "./",
-    "systems": [
-      "github-system.json"
-    ],
-    "dataSources": [
-      "github-datasource-issues.json",
-      "github-datasource-issue-comments.json",
-      "github-datasource-repository.json"
-    ],
-    "autopublish": true,
-    "version": "1.0.0"
-  }
-}