5 Commits

Author	SHA1	Message	Date
Roberto Musso	90018af311	feat: add WS Gateway and Chat Service (Step 2) ... WS Gateway: - WebSocket lifecycle handler with RS256 JWT auth - Redis bridge: device registry, frame publishing, tool_result routing - Inbound routing: tool_result→LPUSH, home/floating→chat pub/sub - Outbound: subscribes to ws:out:{user_id}, forwards to Electron - Single-worker Dockerfile (long-lived WS connections) Chat Service: - Redis consumer: subscribes to chat:request:* pattern - Redis-based ws_context: tool_call→publish, BRPOP tool_result (30s timeout) - deep_agent: single-agent runner with home/floating/stream variants - memory_middleware: core/associative/episodic/proactive memory with Fernet - Domain agents: task (8 tools), note (5), project (6), timeline (4) - LLM factory via LiteLLM (100+ providers) - Output formatter (StreamFormatter) - POST /chat REST fallback with Traefik header auth - Multi-worker Dockerfile with 120s timeout for LLM calls	2026-03-22 01:20:11 +01:00
Roberto Musso	1e2e395676	fix: PEM newline parsing + shared config extra=ignore ... - Add field_validator to expand literal \n in PEM keys (auth config + shared config) - Set extra='ignore' on shared Settings so service-specific .env vars don't cause ValidationError - Add *.pem to .gitignore	2026-03-22 01:03:28 +01:00
Roberto Musso	59d3a53980	chore: update .env.example files for RS256 + Redis ... - Root .env.example: replace JWT_SECRET/JWT_ALGORITHM with JWT_PUBLIC_KEY, add REDIS_URL - Auth Service .env.example: JWT_PRIVATE_KEY + JWT_PUBLIC_KEY with generation instructions	2026-03-22 00:51:54 +01:00
Roberto Musso	9feeaa79c8	feat(auth): migrate JWT from HS256 to RS256 ... - Add services/auth/app/config.py with JWT_PRIVATE_KEY and JWT_PUBLIC_KEY (Auth Service local config - private key never leaves this service) - Update routes.py: sign tokens with RS256 private key - Update deps.py + verify.py: verify tokens with RS256 public key - Update shared/config.py: replace JWT_SECRET/JWT_ALGORITHM with JWT_PUBLIC_KEY (for optional local verification by other services) - Add sys.path fix in main.py for local dev without PYTHONPATH	2026-03-22 00:50:36 +01:00
Roberto Musso	aa219a4d08	feat: microservices scaffold + Auth Service (Step 1) ... - Add shared/ module: config, db, models, schemas, redis utilities - Add Auth Service (services/auth/): register, login, refresh, me, ForwardAuth /verify endpoint for Traefik - Add Traefik config: ACME/Cloudflare DNS-01, dynamic routing, ForwardAuth middleware, sticky sessions for WS Gateway - Add service scaffolds: ws-gateway, chat, batch-agent, billing (READMEs) - Add redis>=5.0.0 to requirements.txt - Monolith app/ is untouched — strangler fig migration	2026-03-22 00:29:51 +01:00