onemli · onemli · May 26, 2026 · May 26, 2026
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -5,6 +5,32 @@ All notable changes to Fabrik are documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.2.1] — 2026-05-26
+
+### Fixed
+
+- Mouse-wheel scrolling now works inside the package picker that opens
+  from the Class Browser dialog. The popover was being rendered through
+  a portal into `document.body`, which sat outside the dialog's scroll
+  lock allow-list, so the wheel events were being swallowed before they
+  reached the list. The package picker now renders its popover inline
+  inside the dialog content so the dialog's scroll lock recognises it
+  as a child.
+
+### Changed
+
+- README rewritten. The structure and tone are tighter; the architecture
+  section now leans on the diagram rather than restating it in prose.
+
+### Removed
+
+- Three frontend stubs in `services/ai.ts` that posted to backend AI
+  endpoints which were never implemented (`/api/ai/generate/`,
+  `/generate/suggest/`, `/generate/feedback/`), plus the test cases
+  that exercised them. Nothing in production code was calling these.
+- Stale "advisor" mentions in the `loader_v2` docstring; the feature
+  they referred to was never built.
+
 ## [1.2.0] — 2026-05-26
 
 ### Removed

diff --git a/README.md b/README.md
@@ -7,7 +7,7 @@
 
 # The fabric, finally legible.
 
-**Visualize, Query, and Automate Your Cisco ACI Fabric — Without Writing API Calls.**
+**Visualise, Query, and Automate Your Cisco ACI Fabric — Without Writing API Calls.**
 
 [![CI](https://img.shields.io/github/actions/workflow/status/onemli/fabrik/ci.yml?branch=main&style=flat-square&label=CI&logo=github)](https://github.com/onemli/fabrik/actions/workflows/ci.yml)
 [![CodeQL](https://img.shields.io/github/actions/workflow/status/onemli/fabrik/codeql.yml?branch=main&style=flat-square&label=CodeQL&logo=github)](https://github.com/onemli/fabrik/actions/workflows/codeql.yml)
@@ -18,13 +18,7 @@
 [![Docker Frontend](https://img.shields.io/docker/pulls/onemli/fabrik-frontend?style=flat-square&label=frontend%20pulls&color=2563eb&logo=docker&logoColor=white)](https://hub.docker.com/r/onemli/fabrik-frontend)
 [![Docs](https://img.shields.io/badge/docs-fabrikops.com-7c3aed?style=flat-square)](https://docs.fabrikops.com/fabrik/)
 
-[![Python](https://img.shields.io/badge/Python-3.13-3776AB?style=flat-square&logo=python&logoColor=white)](https://www.python.org/)
-[![Django](https://img.shields.io/badge/Django-6.0-092E20?style=flat-square&logo=django&logoColor=white)](https://www.djangoproject.com/)
-[![React](https://img.shields.io/badge/React-19-61DAFB?style=flat-square&logo=react&logoColor=black)](https://react.dev/)
-[![Neo4j](https://img.shields.io/badge/Neo4j-5-018BFF?style=flat-square&logo=neo4j&logoColor=white)](https://neo4j.com/)
-[![Cisco ACI](https://img.shields.io/badge/Cisco%20ACI-5.2.x%20%7C%206.0.x%20%7C%206.1.x-1BA0D7?style=flat-square&logo=cisco&logoColor=white)](https://www.cisco.com/c/en/us/solutions/data-center-virtualization/application-centric-infrastructure/index.html)
-
-[**Documentation**](https://docs.fabrikops.com/fabrik/) · [**Quickstart**](https://docs.fabrikops.com/fabrik/getting-started/) · [**Releases**](https://github.com/onemli/fabrik/releases) · [**Discussions**](https://github.com/onemli/fabrik/discussions) · [**Report a bug**](https://github.com/onemli/fabrik/issues)
+[**Docs**](https://docs.fabrikops.com/fabrik/) · [**Quickstart**](https://docs.fabrikops.com/fabrik/getting-started/) · [**Releases**](https://github.com/onemli/fabrik/releases) · [**Discussions**](https://github.com/onemli/fabrik/discussions) · [**Report a bug**](https://github.com/onemli/fabrik/issues)
 
 <br>
 
@@ -34,91 +28,80 @@
 
 ---
 
-## What is Fabrik?
+## Why this exists
 
-Fabrik is a self-hosted operations platform for Cisco ACI that replaces the APIC API browser, ad-hoc Postman collections, and the "save this moquery in a notes file" workflow with a single canvas.
+Anyone who has operated a Cisco ACI fabric long enough ends up with the same pile of tooling around APIC.
 
-- **Visual query builder.** Drag classes, attach filters, run queries — Fabrik translates the diagram into APIC REST calls and returns structured results.
-- **Configuration time machine.** Snapshot anything you can query. Diff snapshots, track a single DN over time, detect drift before it becomes an incident.
-- **Automation orchestration.** Drive AWX/Ansible Tower job templates and workflows from automation requests. Structured table input with field validation backed by live APIC queries. AWX pulls the playbooks from your own Git repository (GitLab / GitHub / Gitea).
-- **MIM browser.** Search 17,500+ ACI classes by name, label, description, DN pattern, or property — with AI-assisted suggestions validated against the live MIM.
+A folder full of moquery commands.
+A Postman collection nobody maintains anymore.
+Python scripts that manually build /api/mo/... URLs.
+Screenshots from Visore tabs saved “just in case.”
+Spreadsheets for bulk changes.
+Shell history full of copied queries.
 
-> Full documentation, screenshots, and tutorials live at **[docs.fabrikops.com](https://docs.fabrikops.com/fabrik/)**.
+The reality is that most ACI operational workflows still live outside APIC itself.
 
----
+Fabrik brings those workflows into a single place.
+
+## What it does
+
+- **Visual query builder.** Draw a query on a React Flow canvas: drag classes, attach filters, connect parents to children. Fabrik turns the diagram into the right APIC REST call and shows the result as a table you can export.
+- **A library you can share.** Save the queries that work, tag them, give them to your team. New hires stop reinventing the BGP-peer query on day three.
+- **Time Machine.** Snapshot anything you can query. Diff two snapshots side by side, or follow one DN across weeks. Useful when someone asks "did this BD always have this subnet?".
+- **AWX automation, with guardrails.** Build a request from a structured table (each column validated against live APIC data), then hand it to AWX as a job or workflow. AWX pulls playbooks from your own Git (GitLab / GitHub / Gitea); Fabrik never touches your repo.
+- **MIM browser.** The full ACI Managed Information Model (17,500+ classes), searchable by name, label, description, DN pattern, or property. Optional AI assist suggests classes from a plain-English description and validates every suggestion against the live MIM before showing it.
 
-## Quickstart
+The pieces are designed to work together. A query you save in the Library can become the input source for an automation request. A Time Machine snapshot can be the basis for a diff that triggers an alert. A class lookup on the MIM browser is one click from a new query on the canvas.
 
-> **Requirements:** Docker 24+ · Docker Compose v2. Sizing depends on fabric size and Time Machine retention — see the [deployment guide](https://docs.fabrikops.com/fabrik/deployment) for current recommendations.
+## Quick start
+
+You need Docker 24+ and Docker Compose v2. That's it.
 
 ```bash
 mkdir fabrik && cd fabrik
 curl -fLo docker-compose.yml https://github.com/onemli/fabrik/releases/latest/download/docker-compose.release.yml
 curl -fLo .env.example       https://github.com/onemli/fabrik/releases/latest/download/.env.example
 cp .env.example .env
+```
+
+Open `.env` and fill in the four things you have to fill in:
 
-# Edit .env — at minimum set:
-#   DJANGO_SECRET_KEY, ENCRYPTION_KEY
-#   POSTGRES_PASSWORD          (and update the password inside DATABASE_URL!)
-#   NEO4J_PASSWORD
-#   ALLOWED_HOSTS, CORS_ALLOWED_ORIGINS
+- `DJANGO_SECRET_KEY` and `ENCRYPTION_KEY`: generate fresh values, don't leave the placeholders
+- `POSTGRES_PASSWORD`, plus the same password inside `DATABASE_URL` on the line below
+- `NEO4J_PASSWORD`
+- `ALLOWED_HOSTS` and `CORS_ALLOWED_ORIGINS`: the hostname you'll actually reach Fabrik at
 
+Then bring it up:
+
+```bash
 docker compose pull
 docker compose up -d
 docker compose exec backend python manage.py createsuperuser
 ```
 
-> **Heads up:** `DATABASE_URL` embeds the same password as `POSTGRES_PASSWORD`. Django reads the URL form, not the individual fields — if the two drift apart you'll get `password authentication failed` on first boot. Change them together.
-
-Open **`http://<server-host>`** (or whatever hostname / reverse-proxy URL you've put in front of the frontend container — the frontend serves on port 80 by default), sign in, then go to **Settings → MIM Management** to import the ACI schema (~25 minutes, runs in the background).
+Open `http://<your-host>` (port 80 by default), sign in with the superuser, and head to **Settings → MIM Management** to import the ACI schema for your APIC version. The import runs in the background and takes around 25 minutes the first time. Once it's done, the canvas knows every class in the fabric.
 
-That's it. Detailed walkthrough, production deployment, reverse proxy, backups, and upgrades on **[docs.fabrikops.com](https://docs.fabrikops.com/fabrik/)**.
+Everything beyond this (TLS, reverse proxy, backup, upgrade paths, sizing for larger fabrics) is on **[docs.fabrikops.com](https://docs.fabrikops.com/fabrik/)**.
 
----
-
-## Architecture
+## Under the hood
 
 <p align="center">
   <img src="https://docs.fabrikops.com/images/architecture.svg" alt="Fabrik architecture: operator → web tier (React + Django) → workers (Celery) → stateful services (Neo4j, PostgreSQL, Redis) → external systems (APIC, AWX, Git SCM)" width="100%">
 </p>
 
-<!--
-Diagram source: frontend/src/assets/architecture.mmd
-Re-render after edits with:
-  docker run --rm -v $PWD/frontend/src/assets:/data minlag/mermaid-cli:11.4.0 \
-    -i /data/architecture.mmd -o /data/architecture.svg -b transparent
-Upload the SVG to docs.fabrikops.com/images/architecture.svg.
--->
-
-
-> Solid arrows are synchronous calls; dashed arrows are asynchronous events.
-
-### How a request flows
-
-A user signs into the React frontend, which talks to the Django backend over JSON + JWT. Synchronous reads — class lookups, query validation, MIM browsing — return on the request thread. Anything long-running (a query against APIC, a snapshot capture, an AWX automation) is handed to **Celery** through Redis, runs in a worker, and streams progress back to the browser over a Redis-backed WebSocket channel layer. AWX job status comes back the other way: AWX posts webhook events to a Django endpoint, which updates Postgres and broadcasts progress over the same WebSocket. A 30-second Celery sync poll backs the webhook up so status stays correct even if a webhook is missed. The user never blocks on a slow API call.
-
-### What lives where
-
-| Service | Role |
+| | |
 |---|---|
-| **Frontend** | React 19 + Vite. Holds the React Flow canvas, query builder state (Zustand), and TanStack Query for server cache. |
-| **Backend** | Django 6 + DRF served by Daphne (ASGI). REST endpoints, WebSocket consumers, RBAC, audit logging, APIC client with automatic token refresh. |
-| **Neo4j** | The ACI Managed Information Model as a graph: 17,500+ classes, containment, `Rs*` references, properties. Powers query validation and the MIM browser. |
-| **PostgreSQL** | Saved queries, snapshots (Time Machine), users, AWX automations, the immutable audit trail. |
-| **Redis** | Backend cache, Celery broker, and Channels layer for WebSocket fan-out. |
-| **Celery worker + beat** | Background query execution, scheduled tasks (every minute), AWX job polling, daily Time Machine retention sweep. |
-| **AWX / Tower** *(optional)* | Runs Ansible playbooks. Only needed if you use the automation feature. |
-| **Git SCM** *(optional)* | Playbook source for AWX. Fabrik launches a job; AWX pulls the latest playbook from GitLab / GitHub / Gitea before running it. Fabrik itself never writes to the repo. |
+| Frontend | React 19, Vite, React Flow, Zustand, TanStack Query, Tailwind |
+| Backend | Django 6, DRF, Channels, Daphne ASGI |
+| Workers | Celery worker + beat |
+| Graph | Neo4j 5.26 (ACI MIM only) |
+| Relational | PostgreSQL 17 |
+| Cache, broker, channel layer | Redis 8 |
+| Optional | AWX / Ansible Tower for automation; LDAP for SSO; SMTP for notifications |
 
-### Boundaries
+## Status
 
-The full stack runs from a single `docker compose up`. **APIC** is the only required out-of-stack dependency; **AWX** is optional and only used when the automation feature is enabled. AWX in turn pulls playbooks from a Git repository you operate — Fabrik never writes to that repo, it just hands AWX a job spec. No Kubernetes, no managed services, no telemetry, no phone-home.
-
----
-
-## Project status
-
-Fabrik is in **active development** with a stable core in production use. Bug reports and feature requests are welcome via GitHub Issues and Discussions.
+Fabrik is in active development with a stable core that runs in production. Breaking changes are flagged in the changelog and called out in release notes. Bug reports and ideas are welcome.
 
 | | |
 |---|---|
@@ -127,10 +110,8 @@ Fabrik is in **active development** with a stable core in production use. Bug re
 | **Security disclosure** | [SECURITY.md](./SECURITY.md) |
 | **Release history** | [CHANGELOG.md](./CHANGELOG.md) |
 
----
-
 ## License
 
-Released under the [Apache License 2.0](./LICENSE).
+Apache License 2.0. See [LICENSE](./LICENSE).
 
 Cisco, ACI, APIC, and AWX are trademarks of their respective owners. Fabrik is an independent open-source project and is not affiliated with or endorsed by Cisco Systems.
diff --git a/backend/awx/services/execution_engine.py b/backend/awx/services/execution_engine.py
@@ -256,7 +256,7 @@ def execute_bulk(
             )
 
             # Platform info
-            extra_vars['fabrik_platform_version'] = getattr(settings, 'FABRIK_VERSION', '1.2.0')
+            extra_vars['fabrik_platform_version'] = getattr(settings, 'FABRIK_VERSION', '1.2.1')
 
             # Add any additional variables from template
             if template.variable_mappings:

diff --git a/backend/dashboard/views.py b/backend/dashboard/views.py
@@ -29,7 +29,7 @@ def platform_info(request):
     return Response(
         {
             'demo_mode': getattr(settings, 'DEMO_MODE', False),
-            'version': os.getenv('FABRIK_VERSION', '1.2.0'),
+            'version': os.getenv('FABRIK_VERSION', '1.2.1'),
             'ldap_enabled': getattr(settings, 'LDAP_ENABLED', False),
             'registration_enabled': getattr(settings, 'FABRIK_ALLOW_PUBLIC_REGISTRATION', False),
         }

diff --git a/backend/fabrik/settings.py b/backend/fabrik/settings.py
@@ -212,7 +212,7 @@
 # OpenAPI / Swagger (drf-spectacular)
 SPECTACULAR_SETTINGS = {
     'TITLE': 'FABRIK API',
-    'VERSION': '1.2.0',
+    'VERSION': '1.2.1',
     'DESCRIPTION': 'Visualise, Query, and Automate Your Cisco ACI Fabric — Without Writing API Calls.',
     'SCHEMA_PATH_PREFIX': '/api/',
     'SERVE_INCLUDE_SCHEMA': False,
@@ -503,7 +503,7 @@
 # =============================================================================
 
 # Platform metadata (used in audit trails and extra_vars)
-FABRIK_VERSION = os.getenv('FABRIK_VERSION', '1.2.0')
+FABRIK_VERSION = os.getenv('FABRIK_VERSION', '1.2.1')
 FABRIK_BASE_URL = os.getenv('FABRIK_BASE_URL', 'http://localhost:3000')
 
 # Feature Flags

diff --git a/backend/mim_registry/services/loader_v2.py b/backend/mim_registry/services/loader_v2.py
@@ -6,7 +6,7 @@
 
 1. Input format: devnet bundles use keys like "fv:Tenant" (package-colon-class).
    v2 normalizes to "fvTenant" internally so Neo4j stores, query builder output,
-   frontend references, and advisor lookups all stay on the existing convention.
+   and frontend references all stay on the existing convention.
    The original package-qualified form is preserved as Class.qualifiedName
    (e.g. "fv:Tenant") for reverse lookup and to stay source-agnostic — any
    future devnet/cobra/XML schema source provides the same representation.
@@ -29,7 +29,7 @@
 
 5. New label: :EnumValue (one per enum/bitmask constant).
 
-Preserved from v1 (zero breakage for existing query builder / advisor code):
+Preserved from v1 (zero breakage for existing query builder code):
 - (:Class {className})                       — className is still the normalized form
 - (:Class)-[:HAS_PROPERTY]->(:Property)
 - (:Class)-[:CONTAINS]->(:Class)
@@ -443,7 +443,7 @@ def _prepare_single(
                 {
                     'className': class_name,
                     'propName': prop_name,
-                    # Semantic metadata (new in v2 — the key win for advisor/UI)
+                    # Semantic metadata (new in v2 — the key win for UI)
                     'label': pdata.get('label', ''),
                     'comment': pdata.get('comment', []) or [],
                     'baseType': pdata.get('baseType', ''),

diff --git a/frontend/package.json b/frontend/package.json
@@ -1,7 +1,7 @@
 {
   "name": "fabrik-frontend",
   "private": true,
-  "version": "1.2.0",
+  "version": "1.2.1",
   "type": "module",
   "scripts": {
     "dev": "vite",

diff --git a/frontend/src/assets/architecture.mmd b/frontend/src/assets/architecture.mmd
@@ -22,7 +22,6 @@ flowchart LR
         NEO[(Neo4j<br/>MIM graph)]
         PG[(PostgreSQL<br/>state · snapshots · audit)]
         REDIS[(Redis<br/>cache · Celery broker · channel layer)]
-        MQ[(RabbitMQ<br/>AWX event bus)]
     end
 
     User -->|HTTPS| FE
@@ -43,8 +42,8 @@ flowchart LR
 
     BE -->|class&nbsp;/&nbsp;mo queries| APIC
     WORKER -->|launch jobs| AWX
-    AWX -.->|webhook events| MQ
-    MQ -.->|consume| WORKER
+    AWX -.->|webhook events| BE
+    BEAT -.->|30s status poll| AWX
     AWX -.->|pull playbooks| SCM
 
     classDef ext stroke:#64748b,stroke-width:1.5px
@@ -54,7 +53,7 @@ flowchart LR
     classDef user stroke:#6b7280,stroke-width:1.5px
 
     class APIC,AWX,SCM ext
-    class NEO,PG,REDIS,MQ data
+    class NEO,PG,REDIS data
     class WORKER,BEAT worker
     class FE,BE,WS web
     class User user
diff --git a/frontend/src/assets/architecture.svg b/frontend/src/assets/architecture.svg
diff --git a/frontend/src/components/ui/PackageCombobox.tsx b/frontend/src/components/ui/PackageCombobox.tsx
@@ -101,7 +101,7 @@ export function PackageCombobox({
           )}
         </Button>
       </PopoverTrigger>
-      <PopoverContent className={cn('p-0', className)} align="start">
+      <PopoverContent className={cn('p-0', className)} align="start" withoutPortal>
         <Command>
           <CommandInput placeholder="Search packages…" />
           <CommandList>

diff --git a/frontend/src/components/ui/popover.tsx b/frontend/src/components/ui/popover.tsx
@@ -7,11 +7,22 @@ const Popover = PopoverPrimitive.Root
 
 const PopoverTrigger = PopoverPrimitive.Trigger
 
+type PopoverContentProps = React.ComponentPropsWithoutRef<typeof PopoverPrimitive.Content> & {
+  /**
+   * Opt out of the default Radix Portal that renders into document.body.
+   * When this Popover lives inside a Radix Dialog, the Dialog's RemoveScroll
+   * blocks wheel events on anything outside its content subtree — including
+   * portaled popover bodies. Rendering inline keeps the popover inside the
+   * Dialog's whitelist so mouse-wheel scrolling works.
+   */
+  withoutPortal?: boolean
+}
+
 const PopoverContent = React.forwardRef<
   React.ElementRef<typeof PopoverPrimitive.Content>,
-  React.ComponentPropsWithoutRef<typeof PopoverPrimitive.Content>
->(({ className, align = "center", sideOffset = 4, ...props }, ref) => (
-  <PopoverPrimitive.Portal>
+  PopoverContentProps
+>(({ className, align = "center", sideOffset = 4, withoutPortal = false, ...props }, ref) => {
+  const content = (
     <PopoverPrimitive.Content
       ref={ref}
       align={align}
@@ -22,8 +33,10 @@ const PopoverContent = React.forwardRef<
       )}
       {...props}
     />
-  </PopoverPrimitive.Portal>
-))
+  )
+
+  return withoutPortal ? content : <PopoverPrimitive.Portal>{content}</PopoverPrimitive.Portal>
+})
 PopoverContent.displayName = PopoverPrimitive.Content.displayName
 
 export { Popover, PopoverTrigger, PopoverContent }