FlowForge AI — Technical Explainer

Concept

FlowForge AI is an autonomous AI execution layer for cross-system workflow automation targeting Revenue Operations (RevOps) teams at B2B tech companies. Instead of rigid rule-based automation (Zapier), FlowForge deploys an AI agent that interprets business intent in plain English, connects to SaaS systems (Salesforce, Slack, Google Workspace), and executes multi-step workflows autonomously — handling edge cases without manual reconfiguration.

Core value: Replace the ops analyst who spends 40% of their week copying data between CRM, email, and messaging tools.

---

Architecture

┌─────────────────────────────────────────────────────────────────────┐
│                        FlowForge AI — Spring Boot 4.0.4             │
│                                                                     │
│  REST API (JWT-secured)                                             │
│  ┌─────────────┐ ┌──────────────────┐ ┌────────────┐ ┌──────────┐  │
│  │AuthController│ │WorkflowController│ │Connector   │ │Dashboard │  │
│  │ /api/auth   │ │ /api/workflows   │ │Controller  │ │Controller│  │
│  └──────┬──────┘ └────────┬─────────┘ │/api/connect│ │/api/dash │  │
│         │                 │           └─────┬──────┘ └────┬─────┘  │
│         ▼                 ▼                 ▼             ▼         │
│  ┌──────────┐   ┌─────────────────┐  ┌─────────────────────────┐   │
│  │AuthService│  │ WorkflowService  │  │    WorkspaceService      │   │
│  └──────────┘  │ NlpPlannerService│  │    ConnectorService      │   │
│                │ OrchestrationSvc │  │    ExecutionLogService   │   │
│                └────────┬─────────┘  └─────────────────────────┘   │
│                         │                                           │
│       ┌─────────────────┴──────────────────┐                        │
│       │     Autonomous Execution Engine     │                        │
│       │  (Virtual Threads — Java 25)        │                        │
│       └────┬──────────────┬────────────────┘                        │
│            │              │                                         │
│  ┌─────────▼───┐  ┌───────▼────────┐  ┌─────────────┐             │
│  │SlackClient  │  │SalesforceClient│  │GoogleClient │             │
│  │(Feign+R4j)  │  │(Feign+R4j)    │  │(Feign+R4j)  │             │
│  └─────────────┘  └────────────────┘  └─────────────┘             │
│                                                                     │
│  ┌─────────────────┐   ┌──────────────────────────────────────┐    │
│  │TriggerPolling   │   │  H2 (dev) / PostgreSQL (prod)        │    │
│  │Scheduler        │   │  User, Workspace, ThirdPartyConn     │    │
│  │@Scheduled 5min  │   │  Workflow, ExecutionLog              │    │
│  └─────────────────┘   └──────────────────────────────────────┘    │
└─────────────────────────────────────────────────────────────────────┘

Layer Responsibilities

Layer	Classes	Role
API	*Controller	REST endpoints, JWT auth guard
Security	%%INLINE1%%, %%INLINE2%%, SecurityConfig	Stateless JWT validation
Service	*Service	Business logic, transaction boundary
NLP Engine	NlpPlannerService	NL→ActionPlan parsing (LLM-ready)
Orchestration	OrchestrationService	Step-by-step plan executor
Connectors	*Client (Feign)	Declarative HTTP clients to SaaS APIs
Scheduler	TriggerPollingScheduler	5-min polling for trigger events
Persistence	*Repository (Spring Data JPA)	H2/PostgreSQL via JPA
Crypto	EncryptionService	AES-256-GCM for tokens at rest

---

Endpoints

Authentication (public)

Method	Path	Description
%%INLINE11%%	%%INLINE12%%	Register user + create workspace. Returns JWT.
%%INLINE13%%	%%INLINE14%%	Authenticate user. Returns JWT.

Register:

POST /api/auth/register
{
  "email": "alice@acme.com",
  "password": "S3cur3P@ss",
  "firstName": "Alice",
  "lastName": "Smith"
}
→ 201 { "token": "eyJ...", "email": "alice@acme.com", "fullName": "Alice Smith" }

Workflows (JWT required)

Method	Path	Description
%%INLINE15%%	%%INLINE16%%	Create from NL description — NLP engine parses intent
%%INLINE17%%	%%INLINE18%%	List all workspace workflows
%%INLINE19%%	%%INLINE20%%	Get single workflow
%%INLINE21%%	%%INLINE22%%	Update name / status
%%INLINE23%%	%%INLINE24%%	Delete workflow
%%INLINE25%%	%%INLINE26%%	Execution logs for workflow

Natural-language workflow creation:

POST /api/workflows/nlp
Authorization: Bearer <token>
{
  "name": "Fintech Lead → Slack Alert + CRM Task",
  "naturalLanguageDescription":
    "When a lead from the Fintech industry is assigned in Salesforce,
     notify the #ventas-prioritarias Slack channel and create a
     follow-up task for the owner."
}
→ 201 {
  "id": 1,
  "name": "Fintech Lead → Slack Alert + CRM Task",
  "status": "ACTIVE",
  "triggerConnector": "SALESFORCE",
  ...
}

Connectors (JWT required)

Method	Path	Description
%%INLINE27%%	%%INLINE28%%	Connect a third-party service (tokens encrypted at rest)
%%INLINE29%%	%%INLINE30%%	List workspace connections (no tokens returned)
%%INLINE31%%	%%INLINE32%%	Soft-delete a connection

Connect Slack:

POST /api/connectors
{
  "connectorType": "SLACK",
  "accessToken": "xoxb-real-slack-bot-token",
  "scope": "chat:write,channels:read"
}
→ 201 { "id": 1, "connectorType": "SLACK", "active": true, ... }

Dashboard (JWT required)

Method	Path	Description
%%INLINE33%%	%%INLINE34%%	Workspace KPIs (workflow counts, execution stats)
%%INLINE35%%	%%INLINE36%%	Recent activity feed (all workflows)

Stats response:

{
  "totalWorkflows": 5,
  "activeWorkflows": 3,
  "totalExecutions": 142,
  "successfulSteps": 138,
  "failedSteps": 4,
  "connectedSystems": 2
}

---

Key Technical Decisions

1 — Natural Language → ActionPlan (NlpPlannerService)

%%INLINE37%% converts plain-English descriptions into a typed %%INLINE38%% (list of %%INLINE39%% records). Pattern matching detects Salesforce/Slack/Google keywords and extracts %%INLINE40%% names and email addresses. The plan is serialized as JSON and stored in Workflow.actionPlan.

Production upgrade path: Replace the rule-based parser with a single LLM call:

// POST to Anthropic / OpenAI with a system prompt:
// "Parse the user's workflow description into this JSON schema: { steps: [...] }"
// Response is validated and deserialized directly into ActionPlan.class

2 — Secure Credential Storage (EncryptionService)

AES-256-GCM encryption with a random 12-byte IV prepended to the ciphertext. The combined IV+ciphertext is Base64-encoded for database storage. The encryption key is externalized via flowforge.encryption.key.

3 — Virtual Threads (Java 25)

The %%INLINE43%% starts each action step on a virtual thread (%%INLINE44%%), allowing thousands of concurrent I/O-bound API calls without blocking OS threads. The %%INLINE45%% similarly dispatches each workflow check to its own virtual thread. %%INLINE46%% enables virtual threads for Tomcat and Spring MVC automatically.

4 — Feign + Resilience4j

Three Feign clients (%%INLINE47%%, %%INLINE48%%, %%INLINE49%%) provide declarative HTTP interfaces to external APIs. When live tokens are unavailable the %%INLINE50%% catches exceptions and logs simulated responses, keeping the agent running. Resilience4j is on the classpath for production circuit-breaker wiring.

5 — JWT Security

JJWT 0.12.6 with HMAC-SHA256 signing. Tokens expire after 24 hours (configurable via %%INLINE51%%). %%INLINE52%% validates the bearer token on every request and populates the Spring Security context.

---

Business Analysis

Market Opportunity

• TAM: $13B+ iPaaS/workflow automation market (2025), growing at 23% CAGR
• Beachhead: RevOps teams in B2B SaaS (50–500 employees) — ~120,000 companies globally
• Differentiation: AI interprets intent, handles exceptions, learns patterns → 10× more flexible than Zapier

Revenue Model (B2B SaaS Tiers)

Tier	Price	Limits
Starter	$199/mo	5 active workflows, 2,000 tasks/mo
Growth	$599/mo	25 active workflows, 15,000 tasks/mo
Scale	$1,499/mo	Unlimited workflows, 100,000 tasks/mo + custom connectors

GTM Strategy

1. Land: Target RevOps leads at 200 mid-market B2B SaaS companies via LinkedIn + cold outbound
2. Expand: Land in Sales Ops → expand to Marketing Ops, Finance Ops, CS Ops
3. Retain: Network effects (shared workflow templates) + data moat (execution patterns improve AI)

Key Risks & Mitigations

Risk	Mitigation
LLM hallucination in action plans	Human approval mode for new workflows before activation
API rate limits from Salesforce/Slack	Resilience4j circuit breakers + exponential backoff
Data sovereignty concerns	On-prem/VPC deployment option in Scale tier
Zapier counter-move	Focus on AI decision-making that Zapier's rule engine can't replicate

---

How to Run

Prerequisites

• Java 25+
• Maven 3.9+

Development (H2 in-memory)

cd solutions/2026-06-16-flowforge-ai
mvn spring-boot:run

The app starts on http://localhost:8080. H2 console available at %%INLINE54%% (JDBC URL: %%INLINE55%%).

Production (PostgreSQL)

export SPRING_DATASOURCE_URL=jdbc:postgresql://localhost:5432/flowforge
export SPRING_DATASOURCE_USERNAME=flowforge
export SPRING_DATASOURCE_PASSWORD=secret
export FLOWFORGE_JWT_SECRET=your-256-bit-production-secret
export FLOWFORGE_ENCRYPTION_KEY=your-32-byte-aes-key-here!!
mvn spring-boot:run -Dspring.jpa.hibernate.ddl-auto=validate

Quick API Test

# 1. Register
TOKEN=$(curl -s -X POST http://localhost:8080/api/auth/register \
  -H 'Content-Type: application/json' \
  -d '{"email":"demo@forge.ai","password":"Demo1234","firstName":"Demo","lastName":"User"}' \
  | jq -r .token)

# 2. Create NL workflow
curl -X POST http://localhost:8080/api/workflows/nlp \
  -H "Authorization: Bearer $TOKEN" \
  -H 'Content-Type: application/json' \
  -d '{
    "name": "Fintech Lead Alert",
    "naturalLanguageDescription": "When a Fintech lead is assigned in Salesforce, notify #ventas-prioritarias on Slack and create a follow-up task for the owner."
  }'

# 3. Dashboard stats
curl http://localhost:8080/api/dashboard/stats \
  -H "Authorization: Bearer $TOKEN"

Compile check

mvn clean compile

---

References

• Autonomous AI as an Execution Layer — EMA.ai
• Spring Boot 4.0.4 Reference
• Spring Security 7 JWT Guide
• JJWT 0.12.x API
• Spring Cloud OpenFeign
• Resilience4j Spring Boot Starter
• Java 25 Virtual Threads (Project Loom)