fagoon-upgrade 2.0.0__tar.gz

fagoon_upgrade-2.0.0/.dockerignore

@@ -0,0 +1,15 @@
+.git
+.github
+.vscode
+.env
+.env.local
+*.pyc
+__pycache__
+.pytest_cache
+.mypy_cache
+frontend/node_modules
+frontend/.next
+.venv
+*.egg-info
+dist
+build

fagoon_upgrade-2.0.0/.env.example

@@ -0,0 +1,27 @@
+# ---- Mode ----
+# Contributors typically run full mode. Leave LITE_MODE unset/false here.
+LITE_MODE=false
+DATA_DIR=./data
+WEB_CONCURRENCY=2
+
+# ---- Infra (required in full mode) ----
+DATABASE_URL=postgresql+asyncpg://fagoon:fagoon@localhost:5432/fagoon
+REDIS_URL=redis://localhost:6379/0
+CELERY_BROKER_URL=redis://localhost:6379/1
+CELERY_RESULT_BACKEND=redis://localhost:6379/2
+
+# ---- Secrets (auto-generated in package mode; set explicitly for dev) ----
+JWT_SECRET=change-me-in-dev
+JWT_ALGORITHM=HS256
+ENCRYPTION_KEY=                 # leave empty to auto-generate a Fernet key
+
+# ---- Feature gating ----
+FEATURES=chat,agents,workflow,vibecoder
+
+# ---- Integrations (optional; can also be set via the UI) ----
+OPENAI_API_KEY=
+GEMINI_API_KEY=
+GROQ_API_KEY=
+GOOGLE_CLIENT_ID=
+GOOGLE_CLIENT_SECRET=
+OLLAMA_BASE_URL=

fagoon_upgrade-2.0.0/.env.template

@@ -0,0 +1,129 @@
+# ============================================
+# FAGOON UPGRADE + WORKFLOW � FULL .env TEMPLATE
+# Generated after workflow migration
+# ============================================
+
+FRONTEND_HOST=*
+API_V1_STR=/api/v1
+PROJECT_NAME=Fagoon Agents Workflow
+API_SWAGGER_PATH=docs
+ALLOWED_CORS_ORIGIN=
+OPENAI_API_KEY=
+GROQ_API_KEY=
+HUGGINGFACE_API_KEY=
+ELEVENLABS_API_KEY=
+GOOGLE_API_KEY=
+ANTHROPIC_API_KEY=
+ENV=development
+DATABASE_URL=
+GROQ_MODEL_NAME=llama3-8b-8192
+GOOGLE_CLIENT_ID=
+GOOGLE_CLIENT_SECRET=
+GOOGLE_REDIRECT_URI=
+FRONTEND_REDIRECT_URI=http://localhost:3000
+GOOGLE_AUTH_SCOPES=
+GCS_BUCKET_NAME=
+GEMINI_API_KEY=
+VIDEO_STORAGE_PATH=
+CELERY_BROKER_URL=
+CELERY_RESULT_BACKEND=
+SECRET_KEY=
+LOG_LEVEL=INFO
+ENABLE_VEO_GENERATION=true
+MAX_VEO_GENERATIONS_PER_JOB=15
+MAX_VEO_VIDEO_DURATION_SECONDS=5
+MOCK_VEO_API_IF_DISABLED=true
+JWT_EXPIRES_IN=90d
+JWT_ALGORITHM=HS256
+JWT_COOKIE_EXPIRES_IN_DAYS=90
+JWT_ACCESS_TOKEN_EXPIRE_MINUTES=30
+JWT_REFRESH_TOKEN_EXPIRE_DAYS=7
+COOKIE_DOMAIN_1=
+COOKIE_DOMAIN_2=
+COOKIE_DOMAIN_3=
+EMAIL_HOST=localhost
+EMAIL_PORT=587
+EMAIL_USERNAME=mock_username
+EMAIL_PASSWORD=mock_password
+EMAIL_FROM=mock_from@example.com
+FAGOON_URL=
+DEFAULT_URL=
+SERPER_API_KEY=
+SERPAPI_API_KEY=
+FAL_KEY=
+FAST_MODEL_PROVIDER=gemini
+FAST_MODEL_ID=gemini-2.5-flash
+SMART_MODEL_PROVIDER=gemini
+SMART_MODEL_ID=gemini-2.5-pro
+REDIS_URL=
+WEBHOOK_VERIFY_TOKEN=
+WHATSAPP_APP_SECRET=
+WHATSAPP_PHONE_NUMBER_ID=
+WHATSAPP_ACCESS_TOKEN=
+FACEBOOK_APP_SECRET=
+FACEBOOK_PAGE_ACCESS_TOKEN=
+TELEGRAM_BOT_TOKEN=
+TELEGRAM_BOT_SECRET_TOKEN=
+EVOLUTION_API_KEY=
+EVOLUTION_API_URL=
+WEBHOOK_URL=
+DB_POOL_SIZE=20
+DB_MAX_OVERFLOW=10
+DB_POOL_TIMEOUT=30
+DB_ECHO=
+ENCRYPTION_KEY=
+ACCESS_TOKEN_EXPIRE_MINUTES=30
+REFRESH_TOKEN_EXPIRE_DAYS=7
+PASSWORD_HASH_ROUNDS=12
+VERSION=2.0.0
+DEBUG=false
+API_V1_PREFIX=/api/v1
+ALLOWED_HOSTS=
+CORS_ORIGINS=
+REDIS_HOST=localhost
+REDIS_PORT=6379
+REDIS_PASSWORD=
+REDIS_SSL=false
+REDIS_DB=0
+REDIS_MAX_CONNECTIONS=10
+GCS_SIGNED_URL_EXPIRY=3600
+MAX_UPLOAD_SIZE_MB=100
+GOOGLE_APPLICATION_CREDENTIALS=
+CELERY_TASK_TIMEOUT=3600
+FEATURE_ENABLE_REGISTRATION=true
+FEATURE_ENABLE_OAUTH=true
+FEATURE_ENABLE_WEBHOOKS=true
+FEATURE_ENABLE_BROWSER_NODE=true
+FEATURE_ENABLE_CODE_NODE=true
+SANDBOX_MODE=docker
+SANDBOX_DOCKER_IMAGE=workflow-sandbox-python:latest
+SANDBOX_TIMEOUT_SECONDS=10
+SANDBOX_MAX_MEMORY_MB=128
+SANDBOX_MAX_CPU_PERCENT=50
+SANDBOX_MAX_OUTPUT_BYTES=1000000
+SANDBOX_NETWORK_ENABLED=false
+RATE_LIMIT_ENABLED=true
+RATE_LIMIT_REQUESTS=100
+RATE_LIMIT_WINDOW_SECONDS=60
+RATE_LIMIT_BACKEND=redis
+RATE_LIMIT_FAIL_OPEN=true
+RATE_LIMIT_TIER_ANONYMOUS=30
+RATE_LIMIT_TIER_FREE=60
+RATE_LIMIT_TIER_PRO=300
+RATE_LIMIT_TIER_ENTERPRISE=1000
+RATE_LIMIT_EXECUTE_PER_MINUTE=30
+RATE_LIMIT_AUTH_PER_MINUTE=10
+RATE_LIMIT_BYPASS_IPS=
+RATE_LIMIT_BYPASS_HEADER=
+RATE_LIMIT_BYPASS_SECRET=
+LOG_FORMAT=json
+LOG_FILE_PATH=
+BROWSERLESS_API_URL=https://production-sfo.browserless.io
+SENTRY_DSN=
+
+# ============================================
+# INTERNAL / DUAL-MODE FIELDS (lowercase)
+# ============================================
+LITE_MODE=true
+DATA_DIR=/data
+FEATURES=chat,agents,workflow,vibecoder

fagoon_upgrade-2.0.0/.geminiignore

@@ -0,0 +1,7 @@
+.git/
+dist/
+build/
+*.log
+venv/
+.venv/
+__pycache__/

fagoon_upgrade-2.0.0/.github/CODEOWNERS

@@ -0,0 +1,10 @@
+# Changes to the mode machinery require maintainer review even if CI passes.
+/src/core/runtime.py        @fagoon
+/src/core/settings.py       @fagoon
+/src/core/bootstrap.py      @fagoon
+/src/services/limiter/      @fagoon
+/src/services/taskqueue/    @fagoon
+/src/services/cache/        @fagoon
+/importlinter.ini           @fagoon
+/scripts/guard_imports.sh   @fagoon
+/.github/workflows/         @fagoon

fagoon_upgrade-2.0.0/.github/pull_request_template.md

@@ -0,0 +1,9 @@
+## What this changes
+
+
+## Lite-mode contract checklist
+- [ ] No direct `redis` / `celery` import outside approved backend modules
+- [ ] New background work goes through `app.state.queue`, not Celery directly
+- [ ] New shared state has a lite (in-memory) backend, not Redis-only
+- [ ] No new *required* env var (must have a safe default or config.json path)
+- [ ] `uv run pytest` and `uv run lint-imports --config importlinter.ini` pass locally

fagoon_upgrade-2.0.0/.github/workflows/ci.yml

@@ -0,0 +1,63 @@
+name: ci
+
+# Runs on every PR and on main. Publishes NOTHING. These jobs are the required
+# status checks that block a PR which would break lite mode or the architecture.
+
+on:
+  pull_request:
+  push:
+    branches: [main]
+
+jobs:
+  tests:
+    runs-on: ubuntu-latest
+    services:
+      postgres:
+        image: pgvector/pgvector:pg16
+        env:
+          POSTGRES_USER: test
+          POSTGRES_PASSWORD: test
+          POSTGRES_DB: test
+        ports: ["5432:5432"]
+        options: >-
+          --health-cmd "pg_isready -U test"
+          --health-interval 5s --health-timeout 5s --health-retries 10
+    steps:
+      - uses: actions/checkout@v4
+      - uses: astral-sh/setup-uv@v5
+      - run: uv sync --all-extras --dev
+      - run: uv run pytest -q
+        env:
+          DATABASE_URL: postgresql+asyncpg://test:test@localhost:5432/test
+
+  lite-boot:
+    # Deliberately installs WITHOUT the `full` extra. If any non-backend module
+    # imports redis/celery, this fails at import time - a dependency-level proof
+    # that lite mode is self-contained.
+    runs-on: ubuntu-latest
+    services:
+      postgres:
+        image: pgvector/pgvector:pg16
+        env:
+          POSTGRES_USER: test
+          POSTGRES_PASSWORD: test
+          POSTGRES_DB: test
+        ports: ["5432:5432"]
+        options: >-
+          --health-cmd "pg_isready -U test"
+          --health-interval 5s --health-timeout 5s --health-retries 10
+    steps:
+      - uses: actions/checkout@v4
+      - uses: astral-sh/setup-uv@v5
+      - run: uv sync --dev          # no --extra full
+      - run: uv run pytest tests/test_lite_boot.py -q
+        env:
+          DATABASE_URL_DEFAULT: postgresql+asyncpg://test:test@localhost:5432/test
+
+  architecture:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: astral-sh/setup-uv@v5
+      - run: uv sync --all-extras --dev
+      - run: uv run lint-imports

fagoon_upgrade-2.0.0/.github/workflows/deploy.yml

@@ -0,0 +1,71 @@
+name: Upgrade CI/CD Pipeline
+
+on:
+  push:
+    branches:
+      - development
+
+jobs:
+  deploy-to-vm:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v3
+
+      - name: Install UV package manager locally (for the runner)
+        run: |
+          curl -LsSf https://astral.sh/uv/install.sh | sh
+
+      - name: Install Python 3.11 with UV (on runner)
+        run: |
+          uv python install 3.11
+
+      - name: Create virtual environment (runner)
+        run: uv venv
+
+      - name: Install dependencies (runner)
+        run: uv sync
+
+      - name: Setup SSH
+        run: |
+          mkdir -p ~/.ssh
+          echo "${{ secrets.VM_SSH_KEY }}" > ~/.ssh/deploy_key
+          chmod 600 ~/.ssh/deploy_key
+          ssh-keyscan -H "${{ secrets.VM_HOST }}" >> ~/.ssh/known_hosts
+
+      - name: Test SSH connection
+        run: |
+          ssh -v -o StrictHostKeyChecking=no -i ~/.ssh/deploy_key ${{ secrets.VM_USER }}@${{ secrets.VM_HOST }} "echo 'SSH connection successful'"
+
+      - name: Deploy to VM via SSH
+        uses: appleboy/ssh-action@v0.1.8
+        with:
+          host: ${{ secrets.VM_HOST }}
+          username: ${{ secrets.VM_USER }}
+          key: ${{ secrets.VM_SSH_KEY }}
+          script: |
+            cd /home/vimuser/development/agents-workflow
+            git pull origin development
+
+            # Load user profile to set PATH and NVM environment
+            source ~/.profile
+
+            # Install uv if missing
+            if ! command -v uv > /dev/null 2>&1; then
+              echo "uv not found, installing..."
+              curl -LsSf https://astral.sh/uv/install.sh | sh
+              export PATH=$PATH:/home/vimuser/.local/bin
+            fi
+
+            # Install pm2 if missing
+            if ! command -v pm2 > /dev/null 2>&1; then
+              echo "pm2 not found, installing..."
+              export NVM_DIR="$HOME/.nvm"
+              [ -s "$NVM_DIR/nvm.sh" ] && \. "$NVM_DIR/nvm.sh"
+              npm install -g pm2
+            fi
+
+            # Run sync and pm2 commands
+            uv sync
+            pm2 reload dev-agent-workflow || pm2 start scripts/run.sh --name dev-agent-workflow

fagoon_upgrade-2.0.0/.github/workflows/release.yml

@@ -0,0 +1,96 @@
+name: release
+
+on:
+  push:
+    tags:
+      - "v*"
+
+permissions:
+  contents: read
+  packages: write
+  actions: read
+
+env:
+  IMAGE: ghcr.io/fagoon-ai/upgrade
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    services:
+      postgres:
+        image: pgvector/pgvector:pg16
+        env:
+          POSTGRES_USER: test
+          POSTGRES_PASSWORD: test
+          POSTGRES_DB: test
+        ports: ["5432:5432"]
+        options: >-
+          --health-cmd "pg_isready -U test"
+          --health-interval 5s --health-timeout 5s --health-retries 10
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          token: ${{ secrets.RELEASE_TOKEN || secrets.GITHUB_TOKEN }}
+      - uses: astral-sh/setup-uv@v5
+      - run: uv sync --all-extras --dev
+      - run: uv run pytest -q
+        env:
+          DATABASE_URL: postgresql+asyncpg://test:test@localhost:5432/test
+
+  image:
+    needs: test
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          token: ${{ secrets.RELEASE_TOKEN || secrets.GITHUB_TOKEN }}
+      - name: Derive version from tag
+        id: ver
+        run: echo "version=${GITHUB_REF_NAME#v}" >> "$GITHUB_OUTPUT"
+      - uses: docker/setup-qemu-action@v3
+      - uses: docker/setup-buildx-action@v3
+      - name: Log in to GHCR
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+      - name: Build and push (multi-arch)
+        uses: docker/build-push-action@v6
+        with:
+          context: .
+          file: deploy/Dockerfile
+          platforms: linux/amd64,linux/arm64
+          push: true
+          tags: |
+            ${{ env.IMAGE }}:${{ steps.ver.outputs.version }}
+            ${{ env.IMAGE }}:latest
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
+
+  pypi:
+    needs: test
+    runs-on: ubuntu-latest
+    environment: pypi
+    permissions:
+      id-token: write
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          token: ${{ secrets.RELEASE_TOKEN || secrets.GITHUB_TOKEN }}
+      - uses: astral-sh/setup-uv@v5
+      - run: uv build
+      - uses: pypa/gh-action-pypi-publish@release/v1
+
+  github-release:
+    needs: [image, pypi]
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          token: ${{ secrets.RELEASE_TOKEN || secrets.GITHUB_TOKEN }}
+      - uses: softprops/action-gh-release@v2
+        with:
+          generate_release_notes: true

fagoon_upgrade-2.0.0/.gitignore

@@ -0,0 +1,201 @@
+# Project Ignored
+logs/
+google_client_config.json
+test.py
+assets/
+
+# UV Dependencies
+uv.lock
+
+# Byte-compiled / optimized / DLL files
+__pycache__/
+*.py[cod]
+*$py.class
+
+# C extensions
+*.so
+
+*.lock
+
+# Distribution / packaging
+.Python
+build/
+develop-eggs/
+dist/
+downloads/
+eggs/
+.eggs/
+/lib/
+lib64/
+parts/
+sdist/
+var/
+wheels/
+share/python-wheels/
+*.egg-info/
+.installed.cfg
+*.egg
+MANIFEST
+
+# PyInstaller
+#  Usually these files are written by a python script from a template
+#  before PyInstaller builds the exe, so as to inject date/other infos into it.
+*.manifest
+*.spec
+
+# Installer logs
+pip-log.txt
+pip-delete-this-directory.txt
+
+# Unit test / coverage reports
+htmlcov/
+.tox/
+.nox/
+.coverage
+.coverage.*
+.cache
+nosetests.xml
+coverage.xml
+*.cover
+*.py,cover
+.hypothesis/
+.pytest_cache/
+cover/
+
+# Translations
+*.mo
+*.pot
+
+# Django stuff:
+*.log
+local_settings.py
+db.sqlite3
+db.sqlite3-journal
+
+# Flask stuff:
+instance/
+.webassets-cache
+
+# Scrapy stuff:
+.scrapy
+
+# Sphinx documentation
+docs/_build/
+
+# PyBuilder
+.pybuilder/
+target/
+
+# Jupyter Notebook
+.ipynb_checkpoints
+
+# IPython
+profile_default/
+ipython_config.py
+
+# pyenv
+#   For a library or package, you might want to ignore these files since the code is
+#   intended to run in multiple environments; otherwise, check them in:
+# .python-version
+
+# pipenv
+#   According to pypa/pipenv#598, it is recommended to include Pipfile.lock in version control.
+#   However, in case of collaboration, if having platform-specific dependencies or dependencies
+#   having no cross-platform support, pipenv may install dependencies that don't work, or not
+#   install all needed dependencies.
+#Pipfile.lock
+
+# UV
+#   Similar to Pipfile.lock, it is generally recommended to include uv.lock in version control.
+#   This is especially recommended for binary packages to ensure reproducibility, and is more
+#   commonly ignored for libraries.
+#uv.lock
+
+# poetry
+#   Similar to Pipfile.lock, it is generally recommended to include poetry.lock in version control.
+#   This is especially recommended for binary packages to ensure reproducibility, and is more
+#   commonly ignored for libraries.
+#   https://python-poetry.org/docs/basic-usage/#commit-your-poetrylock-file-to-version-control
+#poetry.lock
+
+# pdm
+#   Similar to Pipfile.lock, it is generally recommended to include pdm.lock in version control.
+#pdm.lock
+#   pdm stores project-wide configurations in .pdm.toml, but it is recommended to not include it
+#   in version control.
+#   https://pdm.fming.dev/latest/usage/project/#working-with-version-control
+.pdm.toml
+.pdm-python
+.pdm-build/
+
+# PEP 582; used by e.g. github.com/David-OConnor/pyflow and github.com/pdm-project/pdm
+__pypackages__/
+
+# Celery stuff
+celerybeat-schedule
+celerybeat.pid
+
+# SageMath parsed files
+*.sage.py
+
+# Environments
+.env
+.venv
+env/
+venv/
+ENV/
+env.bak/
+venv.bak/
+
+# Spyder project settings
+.spyderproject
+.spyproject
+
+# Rope project settings
+.ropeproject
+
+# mkdocs documentation
+/site
+
+# mypy
+.mypy_cache/
+.dmypy.json
+dmypy.json
+
+# Pyre type checker
+.pyre/
+
+# pytype static type analyzer
+.pytype/
+
+# Cython debug symbols
+cython_debug/
+
+# PyCharm
+#  JetBrains specific template is maintained in a separate JetBrains.gitignore that can
+#  be found at https://github.com/github/gitignore/blob/main/Global/JetBrains.gitignore
+#  and can be added to the global gitignore or merged into this file.  For a more nuclear
+#  option (not recommended) you can uncomment the following to ignore the entire idea folder.
+.idea/
+
+# PyPI configuration file
+.pypirc
+
+# Vscode Related
+.vscode
+
+# ignore researh outputs
+outputs/
+
+#ignore md files
+PostgreSQL_Migration_Plan.md
+Workflow.md
+gcs.json
+
+
+clients-application.json
+QR.html
+
+DUAL_MODE_IMPLEMENTATION.md
+DB_SWITCH_IMPLEMENTATION.md
+IMPLEMENTATION_PHASES.md

fagoon_upgrade-2.0.0/.importlinter

@@ -0,0 +1,24 @@
+[importlinter]
+root_package = src
+include_external_packages = True
+
+[importlinter:contract:no-direct-redis]
+name = Only backend modules may import redis
+type = forbidden
+source_modules =
+    src.api
+    src.services.agents
+    src.services.tool_handlers
+    src.services.google_workspace
+forbidden_modules =
+    redis
+
+[importlinter:contract:no-direct-celery]
+name = Only the celery backend may import celery
+type = forbidden
+source_modules =
+    src.api
+    src.services.agents
+    src.services.tool_handlers
+forbidden_modules =
+    celery

fagoon_upgrade-2.0.0/Dockerfile

@@ -0,0 +1,33 @@
+# Stage 1: Builder
+FROM python:3.11-slim AS builder
+WORKDIR /app
+
+RUN apt-get update && apt-get install -y \
+    curl \
+    gcc \
+    && rm -rf /var/lib/apt/lists/*
+
+RUN pip install --no-cache-dir uv
+
+COPY . .
+
+# Install dependencies into .venv
+RUN uv sync
+
+RUN chmod +x scripts/run.sh
+
+# Stage 2: Runtime
+FROM python:3.11-slim
+WORKDIR /app
+
+RUN apt-get update && apt-get install -y \
+    curl \
+    && rm -rf /var/lib/apt/lists/*
+
+COPY --from=builder /usr/local/lib/python3.11/site-packages /usr/local/lib/python3.11/site-packages
+COPY --from=builder /usr/local/bin/uv /usr/local/bin/uv
+COPY --from=builder /app /app
+
+RUN chmod +x scripts/run.sh
+
+ENTRYPOINT ["scripts/run.sh"]