Files

Alejandro Gutiérrez 5f8567614a docs(broker): production deployment spec

Authoritative runtime contract for the broker. Documents:
- HTTP + WS routes (single-port architecture)
- Required + optional env vars (DATABASE_URL, caps, TTLs, limits)
- /health and /metrics semantics, including 503 behavior on DB drop
- SIGTERM/SIGINT graceful shutdown sequence
- Recommended multi-stage Docker build (node:slim for pnpm, oven/bun
  for runtime) with GIT_SHA build-arg convention
- Signal/grace-period guidance for orchestrators
- Prometheus metric names + suggested alert thresholds
- CI pattern for the test suite (needs a live Postgres)
- Deployment target hand-off to the deploy lane

Complements the existing Dockerfile (claudemesh-3's work) with the
runtime contract the Dockerfile implements.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-04-04 22:15:24 +01:00

scripts

test(broker): smoke test for hello + direct message flow

2026-04-04 21:53:33 +01:00

src

feat(broker): production hardening — caps, limits, metrics, logging

2026-04-04 22:14:31 +01:00

tests

test(broker): port test suite from claude-intercom to drizzle/postgres

2026-04-04 22:09:06 +01:00

DEPLOY_SPEC.md

docs(broker): production deployment spec

2026-04-04 22:15:24 +01:00

eslint.config.js

feat(broker): scaffold apps/broker workspace (bun WS runtime, no port yet)

2026-04-04 21:24:17 +01:00

package.json

test(broker): port test suite from claude-intercom to drizzle/postgres

2026-04-04 22:09:06 +01:00

README.md

fix(broker): default port 7899 → 7900 to avoid collision with claude-intercom dev

2026-04-04 21:48:57 +01:00

tsconfig.json

feat(broker): scaffold apps/broker workspace (bun WS runtime, no port yet)

2026-04-04 21:24:17 +01:00

vitest.config.ts

test(broker): port test suite from claude-intercom to drizzle/postgres

2026-04-04 22:09:06 +01:00

README.md

@claudemesh/broker

WebSocket broker for claudemesh — routes E2E-encrypted messages between Claude Code peer sessions, tracks presence, and stores metadata-only audit logs in Postgres.

What it is

A standalone Bun-runtime WebSocket server that sits between Claude Code sessions. Peers connect with their identity pubkey, join meshes they've been invited to, and exchange encrypted envelopes. The broker never sees plaintext — it only routes ciphertext and records routing events.

Running locally

# from the repo root
pnpm --filter=@claudemesh/broker dev     # watch mode
pnpm --filter=@claudemesh/broker start   # production

Required env vars

Var	Default	Purpose
`BROKER_PORT`	`7900`	Single port for HTTP routes + WebSocket upgrade
`DATABASE_URL`	—	Postgres connection string (shared with apps/web)
`STATUS_TTL_SECONDS`	`60`	Flip stuck-"working" peers to idle after this TTL
`HOOK_FRESH_WINDOW_SECONDS`	`30`	How long a hook signal beats JSONL inference

Routes (single port)

Path	Protocol	Purpose
`/ws`	WebSocket	Authenticated peer connections
`/hook/set-status`	HTTP POST	Claude Code hook scripts report status
`/health`	HTTP GET	Liveness probe

Depends on

@turbostarter/db — Drizzle/Postgres schema (uses the mesh pgSchema)
@turbostarter/shared — cross-package utilities

Deployment

Runs as a separate process (not inside Next.js). Intended deployment targets: Fly.io, Railway, or Coolify on the surfquant VPS. WebSocket server must be reachable at ic.claudemesh.com.

Status

Scaffold only. The broker logic (status detection, message queue, presence tracking, hook endpoints) is ported from ~/tools/claude-intercom/broker.ts in a follow-up step.