Architecture Overview

See the detailed spec for the original design context. The current local-dev decisions are captured in AGENTS.md and in the DX reports under docs/specs/.

Summary:

• Runtime: Bun 1.3.10 + TypeScript 6 + Hono 4
• Data: PostgreSQL 18, row-level security, audit tables, transactional outbox
• Events: NATS JetStream + CloudEvents 1.0 + transactional outbox relay
• Cache: Redis 8 OSS for cache, rate-limit state, and short-lived shared state
• Identity: Keycloak 26 with FAPI 1.0 Advanced and FAPI 2.0 policies
• Gateway: Kong 3.8 with mTLS, rate-limit, correlation ID, and CORS
• Observability: Local Compose uses grafana/otel-lgtm; production Helm keeps Alloy and backends independently deployable
• Deploy: Dagger CI/CD, cosign-signed multi-arch images, Helm on Kubernetes