7328a61c44
- policies/authz.rego: Rego policy with path normalisation and scope enforcement - policies/data/scopes.json: all 13 endpoint → scope mappings - src/middleware/opa.ts: OpaMiddleware with Wasm primary path + scopes.json fallback; exports createOpaMiddleware() and reloadOpaPolicy() for SIGHUP hot-reload - All four route files: opaMiddleware wired after authMiddleware - AuditController, OAuth2Service: manual scope checks removed (now centralised in OPA) - src/server.ts: SIGHUP handler calls reloadOpaPolicy() - docs/devops/environment-variables.md: POLICY_DIR documented - 38 new tests; 302/302 passing; opa.ts coverage 98.66% statements Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
SentryAgent.ai AgentIdP — DevOps Documentation
Operational reference for engineers who deploy, configure, and maintain the AgentIdP infrastructure.
System Overview
SentryAgent.ai AgentIdP is a Node.js REST API backed by PostgreSQL and Redis. It runs as a single stateless application process. All state lives in PostgreSQL (durable) and Redis (ephemeral cache and rate limiting).
Stack:
- Runtime: Node.js 18+ (TypeScript, compiled to JS)
- Application: Express 4.18 on port 3000
- Database: PostgreSQL 14+ (primary data store)
- Cache: Redis 7+ (token revocation, rate limiting, monthly token counters)
Documentation
| Document | What it covers |
|---|---|
| Architecture | Components, ports, data flow, Redis key patterns |
| Environment Variables | Every env var — required, optional, format, examples |
| Database | Schema (4 tables), migrations, how to apply and verify |
| Local Development | docker-compose setup, startup, health checks |
| Security | JWT key generation and rotation, CORS, secret storage |
| Operations | Startup order, graceful shutdown, log interpretation, troubleshooting |
Quick Reference — Ports
| Service | Port |
|---|---|
| AgentIdP app | 3000 |
| PostgreSQL | 5432 |
| Redis | 6379 |
Quick Reference — npm Scripts
| Script | Purpose |
|---|---|
npm run dev |
Run from TypeScript source (development) |
npm run build |
Compile TypeScript to dist/ |
npm start |
Run compiled output from dist/ (production) |
npm run db:migrate |
Apply pending database migrations |
npm test |
Run all tests |
npm run test:unit |
Unit tests only |
Developer Documentation
For API usage (registering agents, getting tokens, calling endpoints) — see docs/developers/.