@aifabrix/builder 2.54.1 → 2.55.2

package/lib/utils/external-system-readiness-compact-blocks.js

@@ -75,7 +75,11 @@ function logUploadReadinessSummaryCompact(ctx) {
   const genMcp = publication?.generateMcpContract !== false;
   const tierA = summarizeDatasourceTiersA(publication?.datasources || [], genMcp);
   const systemCfg = manifest?.system || {};
-  const statusLabel = resolveConnectedSystemStatus({ publication });
+  const statusLabel = resolveConnectedSystemStatus({
+    command: 'upload',
+    publication,
+    systemFromDataplane: ctx.systemFromDataplane
+  });
 
   logCompactHeader({ command: 'upload', systemKey, environment, dataplaneUrl });
   if (forcePublish) {

package/lib/utils/external-system-readiness-compact-display.js

@@ -29,12 +29,33 @@ const PILLAR_LABELS = Object.freeze({
   governance: 'Governance'
 });
 
+/** Connected System lifecycle labels — same Draft / Published / Archived as the web. */
+const CONNECTED_SYSTEM_LIFECYCLE_LABELS = Object.freeze({
+  draft: 'Draft',
+  published: 'Published',
+  archived: 'Archived',
+  deployed: 'Published'
+});
+
+/**
+ * Product lifecycle label, or null when the value is not Draft/Published/Archived
+ * (controller `active` is not Published).
+ * @param {string|null|undefined} status
+ * @returns {string|null}
+ */
+function formatConnectedSystemLifecycleLabel(status) {
+  const raw = String(status || '').trim().toLowerCase();
+  return CONNECTED_SYSTEM_LIFECYCLE_LABELS[raw] || null;
+}
+
 /**
  * @param {string|null|undefined} status
  * @returns {string}
  */
 function formatLifecycleLabel(status) {
   const raw = String(status || 'unknown').trim().toLowerCase();
+  const lifecycle = formatConnectedSystemLifecycleLabel(raw);
+  if (lifecycle) return lifecycle;
   if (!raw || raw === 'unknown') return 'Unknown';
   return raw.charAt(0).toUpperCase() + raw.slice(1);
 }
@@ -159,8 +180,14 @@ function resolveManifestAuthMethod(systemCfg) {
  * @returns {string}
  */
 function resolveConnectedSystemStatus(opts = {}) {
-  const fromPub = opts.publication?.system?.status;
   const fromGet = opts.systemFromDataplane?.status;
+  if (fromGet) {
+    return formatLifecycleLabel(fromGet);
+  }
+  if (opts.command === 'upload') {
+    return formatLifecycleLabel('draft');
+  }
+  const fromPub = opts.publication?.system?.status;
   return formatLifecycleLabel(fromGet || fromPub || opts.status);
 }
 
@@ -307,6 +334,8 @@ function logCompactTip(opts) {
 
 module.exports = {
   PILLAR_LABELS,
+  CONNECTED_SYSTEM_LIFECYCLE_LABELS,
+  formatConnectedSystemLifecycleLabel,
   formatLifecycleLabel,
   truncateKeyList,
   formatCredentialPushLine,

package/lib/utils/external-system-validators.js

@@ -52,7 +52,8 @@ function validateFieldMappingExpression(expression) {
     'replace',
     'join',
     'split',
-    'normalizeWhitespace'
+    'normalizeWhitespace',
+    'index'
   ];
   for (const trans of transformations) {
     const transName = trans.split('(')[0].trim();

package/lib/utils/help-builder.js

@@ -80,6 +80,7 @@ const CATEGORIES = [
       { name: 'resource-type' },
       { name: 'role' },
       { name: 'role-assistant' },
+      { name: 'search' },
       { name: 'evidence-kind' },
       { name: 'enterprise-knowledge' },
       { name: 'identity' },
@@ -133,7 +134,8 @@ const CATEGORIES = [
       { name: 'dev' },
       { name: 'secret' },
       { name: 'npm', term: 'npm config' },
-      { name: 'secure' }
+      { name: 'secure' },
+      { name: 'agent-kit' }
     ]
   }
 ];

package/lib/utils/keycloak-realm-ready.js

@@ -82,15 +82,18 @@ async function waitForKeycloakRealmReady(opts = {}) {
   const directUrl = directBase ? buildRealmWellKnownUrl(directBase) : null;
   const deadline = Date.now() + timeoutSeconds * 1000;
 
-  while (Date.now() < deadline) {
+  do {
     if (await probeRealmWellKnown(url)) {
       return;
     }
     if (directUrl && (await probeRealmWellKnown(directUrl))) {
       return;
     }
+    if (Date.now() >= deadline) {
+      break;
+    }
     await new Promise((resolve) => setTimeout(resolve, intervalMs));
-  }
+  } while (Date.now() < deadline);
 
   throw new Error(
     `Keycloak realm "aifabrix" was not ready within ${timeoutSeconds}s (checked ${url}${directUrl ? ` and ${directUrl}` : ''}). ` +

package/lib/utils/logger.js

@@ -83,4 +83,5 @@ const logger = {
 };
 
 module.exports = logger;
+module.exports.sanitizeValue = sanitizeValue;
 

package/lib/utils/paths.js

@@ -957,6 +957,24 @@ async function ensureShippedBuilderAppTemplate(appName) {
   return true;
 }
 
+/**
+ * Finds an existing local app workspace without copying shipped templates.
+ *
+ * @param {string} appName - Application name
+ * @param {Object} [options] - Detection options (reserved; options.type is ignored)
+ * @returns {{isExternal: boolean, appPath: string, appType: string, baseDir?: string}|null}
+ */
+function findExistingAppType(appName, options = {}) {
+  if (!appName || typeof appName !== 'string') {
+    return null;
+  }
+  const externalResult = checkExternalWorkspaceFolder(appName, options);
+  if (externalResult) {
+    return externalResult;
+  }
+  return checkBuilderFolder(appName);
+}
+
 /**
  * Detects if an app is external type by checking application config.
  * Resolution order: integration/ first, then builder/; if neither exists, throws.
@@ -971,13 +989,15 @@ async function detectAppType(appName, options = {}) {
   if (!appName || typeof appName !== 'string') {
     throw new Error('App name is required and must be a string');
   }
-  const externalResult = checkExternalWorkspaceFolder(appName, options);
-  if (externalResult) return externalResult;
-  const builderResult = checkBuilderFolder(appName);
-  if (builderResult) return builderResult;
+  const existing = findExistingAppType(appName, options);
+  if (existing) {
+    return existing;
+  }
   await ensureShippedBuilderAppTemplate(appName);
   const builderAfterTemplate = checkBuilderFolder(appName);
-  if (builderAfterTemplate) return builderAfterTemplate;
+  if (builderAfterTemplate) {
+    return builderAfterTemplate;
+  }
   throw new Error(
     `App '${appName}' not found in integration/${appName}, enterprise-knowledge/${appName}, role-assistant/${appName}, or builder/${appName}`
   );
@@ -1121,6 +1141,7 @@ module.exports = {
   resolveApplicationConfigPath,
   resolveRbacPath,
   ensureShippedBuilderAppTemplate,
+  findExistingAppType,
   detectAppType,
   getResolveAppPath,
   resolveIntegrationAppKeyFromCwd,

package/lib/utils/schema-loader.js

@@ -19,6 +19,7 @@ const addFormats = require('ajv-formats');
 let externalSystemValidator = null;
 let externalDataSourceValidator = null;
 let roleAssistantSettingsValidator = null;
+let roleAssistantTestCaseValidator = null;
 
 /**
  * Reset validators cache (for testing)
@@ -28,6 +29,7 @@ function resetValidators() {
   externalSystemValidator = null;
   externalDataSourceValidator = null;
   roleAssistantSettingsValidator = null;
+  roleAssistantTestCaseValidator = null;
 }
 
 /**
@@ -172,6 +174,37 @@ function loadRoleAssistantSettingsSchema() {
   return roleAssistantSettingsValidator;
 }
 
+/**
+ * Loads and compiles role-assistant test-case schema.
+ * @function loadRoleAssistantTestCaseSchema
+ * @returns {Function}
+ */
+function loadRoleAssistantTestCaseSchema() {
+  if (roleAssistantTestCaseValidator) {
+    return roleAssistantTestCaseValidator;
+  }
+
+  const schemaPath = path.join(__dirname, '..', 'schema', 'role-assistant-test-case.schema.json');
+  let schema;
+  try {
+    schema = JSON.parse(fsRealSync.readFileSync(schemaPath, 'utf8'));
+  } catch (error) {
+    try {
+      schema = require('../schema/role-assistant-test-case.schema.json');
+    } catch {
+      if (error && error.code === 'ENOENT') {
+        throw new Error(`Role assistant test-case schema not found: ${schemaPath}`);
+      }
+      throw new Error(`Invalid JSON in role-assistant-test-case.schema.json: ${error.message}`);
+    }
+  }
+
+  const ajv = new Ajv({ allErrors: true, verbose: true, strict: false, strictSchema: false });
+  addFormats(ajv);
+  roleAssistantTestCaseValidator = ajv.compile(schema);
+  return roleAssistantTestCaseValidator;
+}
+
 /**
  * Detect schema type from $id field
  * @param {Object} parsed - Parsed JSON object
@@ -194,6 +227,9 @@ function detectFromId(parsed) {
   if (parsed.$id.includes('role-assistant-settings')) {
     return 'role-assistant-settings';
   }
+  if (parsed.$id.includes('role-assistant-test-case')) {
+    return 'role-assistant-test-case';
+  }
 
   return null;
 }
@@ -388,6 +424,7 @@ module.exports = {
   loadExternalSystemSchema,
   loadExternalDataSourceSchema,
   loadRoleAssistantSettingsSchema,
+  loadRoleAssistantTestCaseSchema,
   registerExternalDatasourceAjvDependencies,
   detectSchemaType,
   detectSchemaTypeFromParsed,

package/lib/utils/secrets-helpers.js

@@ -47,7 +47,8 @@ const { resolveBashKvFromProcessEnv } = require('./secrets-bash-kv');
 const EMPTY_ALLOWED_KV_FALLBACK = new Set([
   'redis-passwordKeyVault',
   'azure-openaiapi-urlKeyVault',
-  'secrets-azureOpenaiApiKeyVault'
+  'secrets-azureOpenaiApiKeyVault',
+  'miso-controller-secrets-apiKeyVault'
 ]);
 
 /**
@@ -486,4 +487,3 @@ module.exports = {
   rewriteInfraEndpoints,
   getEnvHosts
 };
-

package/lib/utils/write-stream-and-wait.js

@@ -0,0 +1,63 @@
+/**
+ * Flush a writable stream chunk without hanging on Jest write mocks.
+ *
+ * @fileoverview Shared stdout/stderr write + wait for CLI exits.
+ * @author AI Fabrix Team
+ * @version 1.0.0
+ */
+
+'use strict';
+
+/**
+ * @param {unknown} writeFn - Stream write implementation
+ * @returns {boolean}
+ */
+function isJestMockWrite(writeFn) {
+  return typeof jest !== 'undefined'
+    && typeof jest.isMockFunction === 'function'
+    && jest.isMockFunction(writeFn);
+}
+
+/**
+ * Write `chunk` and resolve after the stream flushes.
+ *
+ * Piped stdout/stderr on Linux is asynchronous; exiting before the write
+ * callback can truncate output. Jest spies that ignore the callback, and
+ * native writes inside a Jest worker, must not hang the test.
+ *
+ * @param {NodeJS.WritableStream} stream - stdout or stderr
+ * @param {string} chunk - Bytes to write
+ * @returns {Promise<void>}
+ */
+function writeStreamAndWait(stream, chunk) {
+  return new Promise(resolve => {
+    let settled = false;
+    const finish = () => {
+      if (settled) {
+        return;
+      }
+      settled = true;
+      resolve();
+    };
+    if (!stream || typeof stream.write !== 'function') {
+      finish();
+      return;
+    }
+    const writeFn = stream.write;
+    try {
+      writeFn.call(stream, chunk, finish);
+    } catch {
+      finish();
+      return;
+    }
+    if (isJestMockWrite(writeFn) && writeFn.length < 2) {
+      finish();
+      return;
+    }
+    if (!isJestMockWrite(writeFn) && process.env.JEST_WORKER_ID) {
+      setImmediate(finish);
+    }
+  });
+}
+
+module.exports = { writeStreamAndWait };

package/lib/validation/validate-external-file.js

@@ -13,7 +13,8 @@ const yaml = require('js-yaml');
 const {
   loadExternalSystemSchema,
   loadExternalDataSourceSchema,
-  loadRoleAssistantSettingsSchema
+  loadRoleAssistantSettingsSchema,
+  loadRoleAssistantTestCaseSchema
 } = require('../utils/schema-loader');
 const { formatValidationErrors } = require('../utils/error-formatter');
 const { validateFieldReferences } = require('../datasource/field-reference-validator');
@@ -60,6 +61,9 @@ function getValidatorForType(normalizedType) {
   if (normalizedType === 'role-assistant-settings') {
     return loadRoleAssistantSettingsSchema();
   }
+  if (normalizedType === 'role-assistant-test-case') {
+    return loadRoleAssistantTestCaseSchema();
+  }
   throw new Error(`Unknown file type: ${normalizedType}`);
 }
 

package/lib/validation/validate.js

@@ -27,6 +27,7 @@ const {
   isRoleAssistantWorkspace,
   isEnterpriseKnowledgeWorkspace
 } = require('../utils/platform-shell-package');
+const { validateRoleAssistantPackage } = require('../role-assistant/package-validate');
 
 /**
  * Validates a file path (detects type and validates)
@@ -335,7 +336,7 @@ function skippedComponentsStep() {
   return { valid: true, errors: [], warnings: [], files: [], skipped: true };
 }
 
-async function validatePlatformShellPackage(appName, baseDir, appPath, options) {
+async function validatePlatformShellPackage(_appName, baseDir, appPath, _options) {
   if (isEnterpriseKnowledgeWorkspace(baseDir)) {
     return aggregateExternalValidationSteps({
       application: skippedValidationStep(),
@@ -348,7 +349,7 @@ async function validatePlatformShellPackage(appName, baseDir, appPath, options)
   }
   return aggregateExternalValidationSteps({
     application: skippedValidationStep(),
-    components: await validateComponentsStep(appName, options),
+    components: await validateRoleAssistantPackage(appPath),
     manifest: skippedValidationStep()
   }, appPath);
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aifabrix/builder",
-  "version": "2.54.1",
+  "version": "2.55.2",
   "description": "AI Fabrix Builder — CLI and developer scripts (pnpm + af)",
   "main": "lib/index.js",
   "bin": {
@@ -86,28 +86,42 @@
   "overrides": {
     "@babel/core": "^7.29.7",
     "@babel/plugin-transform-modules-systemjs": "^7.29.7",
-    "fast-uri": "^4.1.0",
+    "baseline-browser-mapping": "^2.11.21",
+    "brace-expansion@5": "5.0.9",
+    "browserslist": "^4.28.9",
+    "fast-uri": "^4.1.4",
     "flatted": "^3.4.2",
     "follow-redirects": "^1.16.0",
     "form-data": "^4.0.6",
+    "js-yaml@3": "3.15.2",
+    "js-yaml@5": "5.4.1",
     "lodash": "^4.18.1",
     "minimatch": "^10.2.5",
+    "multer": "^2.3.0",
     "picomatch": "^4.0.5",
-    "qs": "^6.15.3"
+    "qs": "^6.16.0",
+    "smol-toml": "^1.8.0"
   },
   "pnpm": {
     "overrides": {
       "@bcoe/v8-coverage": "^1.0.2",
       "@babel/core": "^7.29.7",
       "@babel/plugin-transform-modules-systemjs": "^7.29.7",
-      "fast-uri": "^4.1.0",
+      "baseline-browser-mapping": "^2.11.21",
+      "brace-expansion@5": "5.0.9",
+      "browserslist": "^4.28.9",
+      "fast-uri": "^4.1.4",
       "flatted": "^3.4.2",
       "follow-redirects": "^1.16.0",
       "form-data": "^4.0.6",
+      "js-yaml@3": "3.15.2",
+      "js-yaml@5": "5.4.1",
       "lodash": "^4.18.1",
       "minimatch": "^10.2.5",
+      "multer": "^2.3.0",
       "picomatch": "^4.0.5",
-      "qs": "^6.15.3"
+      "qs": "^6.16.0",
+      "smol-toml": "^1.8.0"
     }
   },
   "dependencies": {
@@ -121,7 +135,7 @@
     "handlebars": "^4.7.9",
     "inquirer": "^8.2.5",
     "inquirer-autocomplete-prompt": "^2.0.0",
-    "js-yaml": "^4.3.0",
+    "js-yaml": "^4.3.2",
     "ora": "^5.4.1",
     "yaml": "^2.9.0"
   },

package/templates/agent-kit/adapters/claude/nested.CLAUDE.md

@@ -0,0 +1 @@
+@AGENTS.md

package/templates/agent-kit/adapters/claude/root.CLAUDE.md

@@ -0,0 +1,5 @@
+@AGENTS.md
+
+Delivery skills: `/aifabrix-plan`, `/aifabrix-connected-system`, `/aifabrix-role-assistant`, `/aifabrix-prove`.
+The skill body lives under `.agents/skills/`. Do not invent a parallel workflow.
+Local vs SSH (tmux, Remote Control): `.agents/skills/shared/hosts.md`.

package/templates/agent-kit/adapters/cursor/commands/cust-0-plan.md

@@ -0,0 +1,5 @@
+# cust-0-plan
+
+Compatibility alias for skill **aifabrix-plan**. Optional system key.
+
+Contains no business rules. Prefer `/aifabrix-plan` on fresh installs.

package/templates/agent-kit/adapters/cursor/commands/cust-1-validate.md

@@ -0,0 +1,5 @@
+# cust-1-validate
+
+Compatibility alias for skill **aifabrix-connected-system** phase `validate`.
+
+Contains no business rules. Prefer `/aifabrix-connected-system`.

package/templates/agent-kit/adapters/cursor/commands/cust-2-build.md

@@ -0,0 +1,5 @@
+# cust-2-build
+
+Compatibility alias for skill **aifabrix-connected-system** phase `build`.
+
+Contains no business rules. Prefer `/aifabrix-connected-system`.

package/templates/agent-kit/adapters/cursor/commands/cust-3-push.md

@@ -0,0 +1,5 @@
+# cust-3-push
+
+Compatibility alias for skill **aifabrix-connected-system** phase `publish`.
+
+Contains no business rules. Prefer `/aifabrix-connected-system`.

package/templates/agent-kit/adapters/cursor/commands/cust-biz-1-validate.md

@@ -0,0 +1,5 @@
+# cust-biz-1-validate
+
+Compatibility alias for skill **aifabrix-prove** phase `validate`.
+
+Contains no business rules. Prefer `/aifabrix-prove`.

package/templates/agent-kit/adapters/cursor/commands/cust-biz-2-build.md

@@ -0,0 +1,5 @@
+# cust-biz-2-build
+
+Compatibility alias for skill **aifabrix-prove** phase `build`.
+
+Contains no business rules. Prefer `/aifabrix-prove`.

package/templates/agent-kit/adapters/cursor/commands/cust-biz-3-prove.md

@@ -0,0 +1,5 @@
+# cust-biz-3-prove
+
+Compatibility alias for skill **aifabrix-prove** phase `prove`.
+
+Contains no business rules. Prefer `/aifabrix-prove`.

package/templates/agent-kit/agent-kit.yaml

@@ -0,0 +1,45 @@
+schemaVersion: "1"
+kitVersion: "1.1.2"
+minimumBuilderVersion: "2.54.2"
+skills:
+  - aifabrix-plan
+  - aifabrix-connected-system
+  - aifabrix-role-assistant
+  - aifabrix-prove
+managed:
+  - source: skills
+    target: .agents/skills
+    mode: tree
+  - source: instructions/root.AGENTS.md
+    target: AGENTS.md
+    mode: managed-section
+  - source: instructions/integration.AGENTS.md
+    target: integration/AGENTS.md
+    mode: managed-section
+  - source: instructions/role-assistant.AGENTS.md
+    target: role-assistant/AGENTS.md
+    mode: managed-section
+  - source: instructions/AGENTKIT.md
+    target: AGENTKIT.md
+    mode: file
+    render: hosts
+  - source: workspace/README.md
+    target: README.md
+    mode: if-missing
+optional:
+  - source: adapters/cursor/commands
+    target: .cursor/commands
+    mode: tree
+    when: v1-migration
+  - source: adapters/claude/root.CLAUDE.md
+    target: CLAUDE.md
+    mode: managed-section
+    when: host-claude
+  - source: adapters/claude/nested.CLAUDE.md
+    target: integration/CLAUDE.md
+    mode: managed-section
+    when: host-claude
+  - source: adapters/claude/nested.CLAUDE.md
+    target: role-assistant/CLAUDE.md
+    mode: managed-section
+    when: host-claude

package/templates/agent-kit/instructions/AGENTKIT.md

@@ -0,0 +1,104 @@
+# Agent Kit
+
+Builder-owned. `aifabrix agent-kit update` refreshes this file. If workspace `README.md` is missing, install/update creates it. An existing README is never overwritten.
+
+## Install
+
+From this git repository (Builder CLI on PATH):
+
+```bash
+aifabrix agent-kit install --host {{hostFlag}}{{#if autoApprove}} --approve-all --yes{{/if}}
+aifabrix agent-kit status
+```
+
+`--host` may be `all`, `cursor`, `codex`, or `claude`. Shared skills always land in `.agents/skills/`.
+{{#if claude}}
+`claude` also writes `CLAUDE.md` and thin `.claude/skills` pointers.
+{{/if}}
+
+## Update
+
+When this CLI is newer than the workspace kit, or you add or switch coding hosts:
+
+```bash
+aifabrix agent-kit update --host {{hostFlag}}{{#if autoApprove}} --approve-all --yes{{/if}}
+aifabrix agent-kit validate
+```
+
+Omit `--host` to keep the hosts already recorded. Pass `--host` when the developer changes Cursor / Claude Code / Codex.
+
+New workspace instead of an existing repo: `aifabrix agent-kit init <workspaceName> --host {{hostFlag}}`.
+
+## Activate hosts
+
+Install the coding app, then sign in. How to **run** it locally or over SSH is in `.agents/skills/shared/hosts.md` (linked from every Agent Kit skill).
+{{#if autoApprove}}
+
+On TTY, install **asks** which hosts to support (omit `--host`) and which tools to auto-approve. `--approve-all claude` or `--approve-all codex` writes only that host's config. Claude Code also allows `Bash(aifabrix *)` (delivery CLI) and `Read(~/**)` (home Read). Silent (`--yes` / non-TTY) writes them; `--skip-approve-all` skips.
+{{#if claude}}
+- Claude Code writes `.claude/settings.local.json` (gitignored).
+{{/if}}
+{{#if codex}}
+- Codex writes `.codex/config.toml` (gitignored).
+{{/if}}
+{{/if}}
+{{#if cursor}}
+
+### Cursor
+
+Open this folder in Cursor (this machine, or Cursor Remote SSH). Skills: `/aifabrix-plan`, `/aifabrix-connected-system`, `/aifabrix-role-assistant`, `/aifabrix-prove`.
+{{/if}}
+{{#if claude}}
+
+### Claude Code
+
+```bash
+curl -fsSL https://claude.ai/install.sh | bash
+claude auth login
+```
+
+**Run in tmux** from this workspace so closing the terminal does not kill Claude. `--remote-control` is the **same** session on this PC, [claude.ai/code](https://claude.ai/code), and the Claude mobile app (Code). That is not `claude --cloud` (a separate cloud VM). Claude `--tmux` is for worktrees only.
+
+```bash
+aifabrix agent-kit start claude --remote-control --approve-all --yes
+```
+
+tmux session name defaults to this folder. Remote Control name is `hostname-user-folder` (for example `builder01-dev03-aifabrix-docs`). Override the folder with `--name`. Detach: `Ctrl-b` then `d`. Reattach: `tmux attach -t <folder>`. Several workspaces can run at once. Same account on phone and PC (`claude auth login`, Pro/Max/Team — not an API key). On the phone: Claude app → **Code**. Skills: `/aifabrix-plan` (and the other `/aifabrix-*` names). First `claude` must run inside this workspace, not your home directory. Full notes: `.agents/skills/shared/hosts.md`.
+{{/if}}
+{{#if codex}}
+
+### Codex
+
+Install the Codex CLI (`@openai/codex`, not the unrelated `codex` package), then sign in with ChatGPT (Plus, Pro, Business, Edu, or Enterprise):
+
+```bash
+npm install -g @openai/codex
+codex login
+```
+
+**Run in tmux** from this workspace so the session stays if you close the terminal:
+
+```bash
+aifabrix agent-kit start codex --approve-all --yes
+```
+
+Detach: `Ctrl-b` then `d`. Reattach: `tmux attach -t <folder>`, or `aifabrix agent-kit start codex` from this workspace. Default session name is this folder. Skills: `$aifabrix-plan` (and the other `$aifabrix-*` names). Codex reads `AGENTS.md`. Full notes: `.agents/skills/shared/hosts.md`.
+{{/if}}
+
+## Auth for delivery CLI
+
+Do not tell the user to open a terminal for Builder login. Follow `.agents/skills/shared/login.md`.
+
+```bash
+aifabrix auth status
+```
+
+If that is not authenticated, ask for the Miso Controller URL, run device login, and paste the printed authenticate URL into chat.
+
+## How to start
+
+After this folder is open in the coding host, follow **How to start** in the workspace `README.md` (how to use prompts, then plan → validate/build → publish, then Role Assistant).
+
+## Docs
+
+Agents load the public index from `AGENTS.md`. Humans: the workspace `README.md` Docs section.