feat: multi-tenant gRPC storage with embedded Rust in NativeAOT#48

Merged

valdo404 merged 85 commits intomainfrom

feat/sse-grpc-multi-tenant-20

Feb 19, 2026

Commits on Feb 5, 2026

feat(proto): add gRPC storage protocol definition

Laurent Valdes
and
claude
committed
feat(storage): add gRPC storage server in Rust

Laurent Valdes
and
claude
committed
feat(dotnet): multi-tenant gRPC storage integration

Laurent Valdes
and
claude
committed
feat(proxy): add SSE/HTTP proxy with PAT authentication

Laurent Valdes
and
claude
committed
build(docker): add Dockerfiles for all components

Laurent Valdes
and
claude
committed
build(compose): add docker-compose for full stack

Laurent Valdes
and
claude
committed
refactor: replace client-side locks with atomic index operations

Laurent Valdes
and
claude
committed
feat(ci): build Rust storage server for all architectures first

Laurent Valdes
and
claude
committed
fix(ci): use macos-15-intel runner (macos-13 retired)

Laurent Valdes
and
claude
committed
ci: add path filters to skip builds when unrelated files change

Laurent Valdes
and
claude
committed
fix(ci): install protoc for Rust gRPC builds

Laurent Valdes
and
claude
committed
fix(storage): make Unix socket code conditional for Windows

Laurent Valdes
and
claude
committed
fix(ci): use paths-filter for per-push website change detection

Laurent Valdes
and
claude
committed
fix(storage): make effective_unix_socket conditional on unix

Laurent Valdes
and
claude
committed
fix(grpc): pass --local-storage-dir to storage server

Laurent Valdes
and
claude
committed
fix(tests): use temporary directory for test storage isolation

Laurent Valdes
and
claude
committed
fix(docker): remove missing Directory.Build.props copy

Laurent Valdes
and
claude
committed
feat(installers): include docx-mcp-storage in Windows and macOS installers

Laurent Valdes
and
claude
committed
fix(storage): use fully qualified fs2::FileExt::unlock to avoid name collision

Laurent Valdes
and
claude
committed
fix: use empty tenant ID for backward-compatible session paths

Laurent Valdes
and
claude
committed
fix(storage): full backward compatibility with .NET file formats

Laurent Valdes
and
claude
committed
fix(dotnet): align SessionIndex format with Rust storage server

Laurent Valdes
and
claude
committed
fix(storage): correct truncate_wal semantics for undo/redo

Laurent Valdes
and
claude
committed

Commits on Feb 6, 2026

refactor: declare docx-storage-local for common stuff, and create watching service, sync service
Laurent Valdes
committed
feat: external saving is working
Laurent Valdes
committed
fix: redo / undo / notifications
Laurent Valdes
committed
fix: build
Laurent Valdes
committed
feat(infra): add Pulumi IaC for Cloudflare resources and fix storage-cloudflare S3 client

Laurent Valdes
and
claude
committed

Commits on Feb 7, 2026

fix(storage-cloudflare): add exponential backoff retry on KV 429 rate limits

Laurent Valdes
and
claude
committed

Commits on Feb 12, 2026

ci: restrict macOS/Windows builds to manual workflow_dispatch only

Laurent Valdes
and
claude
committed
feat: embed Rust storage as staticlib in .NET NativeAOT binaries

Laurent Valdes
and
claude
committed

Commits on Feb 13, 2026

fix: style-element on direct run path and heading style with runs

Laurent Valdes
and
claude
committed
fix(storage-cloudflare): replace KV lock with R2 ETag optimistic locking (CAS)

Laurent Valdes
and
claude
committed
test: skip local-file-only tests when STORAGE_GRPC_URL is set

Laurent Valdes
and
claude
committed
refactor: split IStorageClient into IHistoryStorage + ISyncStorage with caller-orchestrated sync

Laurent Valdes
and
claude
committed

Commits on Feb 14, 2026

test: remove all test skips, enable dual-server mode for Cloudflare R2 tests

Laurent Valdes
and
claude
committed
feat: dual-mode HTTP+stdio MCP server with multi-tenant TenantScope

Laurent Valdes
and
claude
committed

Commits on Feb 15, 2026

refactor(storage-cloudflare): remove sync/watch, StorageService only

Laurent Valdes
and
claude
committed
refactor(proxy): simplify to transparent HTTP reverse proxy

Laurent Valdes
and
claude
committed
feat(storage-gdrive): multi-tenant Google Drive sync/watch server

Laurent Valdes
and
claude
committed
feat(dotnet): SYNC_GRPC_URL support for dual-server deployment

Laurent Valdes
and
claude
committed
feat(website): Google Drive OAuth connection flow

Laurent Valdes
and
claude
committed
feat(infra): GCP Drive API + OAuth credentials via Pulumi

Laurent Valdes
and
claude
committed
feat(docker): root Dockerfiles + simplified single-mode compose

Laurent Valdes
and
claude
committed
docs: update CLAUDE.md with docker deployment and multi-tenant architecture

Laurent Valdes
and
claude
committed
fix(website): correct import paths for oauth-connections lib

Laurent Valdes
and
claude
committed
refactor(website): add @/ path alias, use clean imports

Laurent Valdes
and
claude
committed
fix(website): Doccy close button broken due to define:vars + import conflict

Laurent Valdes
and
claude
committed
feat(website): add ConnectionsManager component for external storage connections

Laurent Valdes
and
claude
committed
feat(infra): manage Cloudflare Pages secrets via Pulumi

Laurent Valdes
and
claude
committed
refactor(website): move ConnectionsManager into Stockage section

Laurent Valdes
and
claude
committed
fix(website): fix scoped styles for dynamic content in dashboard components

Laurent Valdes
and
claude
committed
fix(website): mobile responsive layout + update wrangler to 4.65

Laurent Valdes
and
claude
committed
fix: claude enabled commands
Laurent Valdes
committed
fix: tenant isolation on OAuth connection lookup + dashboard spacing

Laurent Valdes
and
claude
committed
feat: typed source descriptors + connection browsing + OAuth scope fix

Laurent Valdes
and
claude
committed
feat: document_open supports cloud sources (Google Drive)

Laurent Valdes
and
claude
committed
feat: persist ExternalChangeGate in gRPC storage index

Laurent Valdes
and
claude
committed

Commits on Feb 16, 2026

feat: proxy transparent session recovery on backend restart

Laurent Valdes
and
claude
committed
chore: docker build cache + debug logging

Laurent Valdes
and
claude
committed
feat: GDrive file creation on first sync

Laurent Valdes
and
claude
committed
feat: cloud source support in document tools and external changes

Laurent Valdes
and
claude
committed

Commits on Feb 19, 2026

feat: deploy MCP backend to Koyeb via Pulumi

Laurent Valdes
and
claude
committed
feat: OAuth 2.1 authorization server + dashboard management

Laurent Valdes
and
claude
committed
feat: add OAuth env vars to proxy Koyeb deployment

Laurent Valdes
and
claude
committed
feat: OAuth 2.1 resource server support in proxy

Laurent Valdes
and
claude
committed
fix: disable Astro CSRF origin check for cross-origin OAuth token exchange

Laurent Valdes
and
claude
committed
feat: add source_path to UpdateSessionInIndex for stateless SessionManager

Laurent Valdes
and
claude
committed
feat: AppendWal always saves checkpoint + pass bytes from tools

Laurent Valdes
and
claude
committed
feat: unified gRPC error handling across all MCP tools

Laurent Valdes
and
claude
committed
feat: consolidate export tools into single export command

Laurent Valdes
and
claude
committed
feat: proxy resilience — retry with backoff, health probe, remove OAuth cache

Laurent Valdes
and
claude
committed
feat: Koyeb auto-scaling with scale-to-zero and per-service sizing

Laurent Valdes
and
claude
committed
fix: reduce log noise in HTTP mode and fix session pool retry

Laurent Valdes
and
claude
committed
chore: update Claude Code local permission settings

Laurent Valdes
and
claude
committed
feat: make SessionManager fully stateless — remove in-memory dictionaries

Laurent Valdes
and
claude
committed
refactor: remove SessionRestoreService and cleanup for stateless SessionManager

Laurent Valdes
and
claude
committed
feat: cold-start resilience across proxy, gRPC, and infra

Laurent Valdes
and
claude
committed
fix: revert scale-to-zero on mesh-only services

Laurent Valdes
and
claude
committed
chore: align Pulumi with CLI-applied scale-to-zero on storage/gdrive

Laurent Valdes
and
claude
committed
docs: add Koyeb deployment, mcptools proxy testing, and debugging docs to CLAUDE.md

Laurent Valdes
and
claude
committed
fix: grpcurl release uses x86_64 not amd64 in filename

Laurent Valdes
and
claude
committed
fix: proxy /health should not test upstream (causes Koyeb 502)

Laurent Valdes
and
claude
committed
fix: proxy dual-stack HTTP/1.1 + HTTP/2 (h2c) via hyper

Laurent Valdes
and
claude
committed
fix: Koyeb 502 — internal services must use tcp protocol with no routes

Laurent Valdes
and
claude
committed