Files

T

RainbowBird 88625a8d84 feat(api): hot-reload ConfigKV from Postgres (#2289 )

## Summary

- Add the `config_kv` schema and Drizzle migration `0020`.
- Keep the ConfigKV schema, cache store, and invalidation contract in
the Resource API.
- Read ConfigKV through a five-minute Redis cache with PostgreSQL
fallback.
- Reload Router and TTS voice state through `configkv:invalidate`.
- Keep Auth rate limits fixed at 20 requests per 60 seconds.

## Stack

- Depends on #2294 for the Redis test implementation.
- This PR adds ConfigKV-specific cache-aside and Pub/Sub tests on top of
that implementation.

## Deployment

Run migration `0020` before this runtime reaches production traffic.

Then freeze ConfigKV writes. Audit and backfill the data with
[proj-airi/backend#2](https://github.com/proj-airi/backend/pull/2).
Merge
[proj-airi/backend#4](https://github.com/proj-airi/backend/pull/4)
first, so
the fixed Auth rate-limit keys are skipped.

Keep writes frozen until the hashes match and two API instances pass the
Pub/Sub reload check. This PR does not run production DDL or data
migration.

## Verification

- `pnpm exec vitest run <ConfigKV cache store, sync subscriber, and Auth
rate-limit tests>` (12 tests passed)
- `pnpm -F @proj-airi/api-server typecheck`
- `git diff --check`

See #2294 for its frozen-install, ESLint, and 73-test verification.

## Visual changes

None. This PR changes backend persistence and rate-limit wiring only.


<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->

## Summary by CodeRabbit

- **New Features**
- Added centralized configuration storage with validation, caching,
refresh, and automatic synchronization across services.
- Configuration updates now refresh related language-model and
text-to-speech settings automatically.

- **Bug Fixes**
- Improved recovery after service reconnects by clearing stale
configuration and reloading current values.
- Invalid or unavailable configuration data now produces clearer
service-unavailable responses.

- **Changes**
- Authentication rate limiting now uses a consistent limit of 20
requests per minute per client.

<!-- end of auto-generated comment: release notes by coderabbit.ai -->

---------

Signed-off-by: RainbowBird <git@luoling.moe>
Signed-off-by: RainbowBird <rbxin2003@outlook.com>

2026-08-15 22:24:32 +08:00

docs

chore: move the server to an independent folder

2026-08-02 18:43:57 +08:00

drizzle

feat(api): hot-reload ConfigKV from Postgres (#2289 )

2026-08-15 22:24:32 +08:00

production/railway

refactor(server): split independent auth service (#2202 )

2026-08-12 23:33:58 +08:00

sql

chore: move the server to an independent folder

2026-08-02 18:43:57 +08:00

src

feat(api): hot-reload ConfigKV from Postgres (#2289 )

2026-08-15 22:24:32 +08:00

.gitignore

chore: move the server to an independent folder

2026-08-02 18:43:57 +08:00

CLAUDE.md

chore(server): remove admin routes

2026-08-15 14:27:59 +08:00

Dockerfile

refactor(server): split independent auth service (#2202 )

2026-08-12 23:33:58 +08:00

drizzle.config.ts

refactor(server): split independent auth service (#2202 )

2026-08-12 23:33:58 +08:00

instrumentation.ts

chore: move the server to an independent folder

2026-08-02 18:43:57 +08:00

package.json

test(server): use ioredis-mock for Redis behavior (#2294 )

2026-08-15 21:43:30 +08:00

railway.toml

chore(server): define Railway service deployment config

2026-08-12 23:33:58 +08:00

README.md

chore(server): remove admin routes

2026-08-15 14:27:59 +08:00

tsconfig.json

chore: move the server to an independent folder

2026-08-02 18:43:57 +08:00

vitest.config.ts

chore: move the server to an independent folder

2026-08-02 18:43:57 +08:00

README.md

`@proj-airi/api-server`

Project AIRI's resource API. Authentication is a separate workspace app at server/apps/auth; this package does not instantiate Better Auth or expose auth/OIDC routes.

Responsibilities

Hono business APIs and WebSocket endpoints.
Characters, chats, providers, Flux, Stripe, model routing, and billing.
PostgreSQL migration ownership for the currently shared database.
Redis cache, configuration KV, and cross-instance Pub/Sub.
Local verification of Auth-issued OIDC JWTs through public JWKS.

Run locally

pnpm -F @proj-airi/api-server dev
pnpm -F @proj-airi/api-server typecheck
pnpm -F @proj-airi/api-server exec vitest run
pnpm -F @proj-airi/api-server build

Run the complete local backend from the repository root:

pnpm dev:backend

For source-level debugging, start @proj-airi/api-server and @proj-airi/auth-server separately instead.

server/docker-compose.yaml exposes the local Caddy gateway at http://localhost:6112 and keeps the API and Auth container ports private.

Service boundaries

AUTH_SERVER_URL is Auth's canonical public issuer origin used for JWKS, issuer, and audience validation. It must exactly equal Auth's PUBLIC_URL.
/internal/auth/* is reachable only on the deployment's trusted private network. The public edge must reject /internal/* and the API service must not have its own public ingress.
AUTH_SERVER_INTERNAL_URL optionally sends JWKS fetches directly to Auth on the private network while issuer and audience remain AUTH_SERVER_URL.
Auth tables and principal types come from @proj-airi/auth-shared; no module under server/apps/auth is imported.

Railway

Deploy this as the Resource API Railway service with Config File Path /server/apps/api/railway.toml; keep the service Root Directory at the repository root because the Dockerfile copies shared workspace packages. The config owns its Dockerfile, start command, /readyz healthcheck, and the watch patterns for every copied build input.

Set AUTH_SERVER_INTERNAL_URL from Auth's Railway private domain. It is only the private JWKS route; AUTH_SERVER_URL remains the public Auth issuer URL. See server/README.md for the complete cross-service variable and migration contract.