feat: connection config — OpenAI-compatible LLM endpoint and Temporal namespace/TLS/API-key auth - #113

Merged

dawidaksamski merged 33 commits into

mainfrom

feat/WB-596-connection-config

Sep 15, 2026

Commits on Sep 4, 2026

feat(backend): call any OpenAI-compatible endpoint from the AI adapt route
dawid-aksamski
committed
eb7f34b
feat(execution-worker): boot without an LLM key; AI nodes fail at call time
dawid-aksamski
committed
7a50877
feat(backend): Temporal namespace and TLS/mTLS/API-key connection config
dawid-aksamski
committed
f11e3f4
feat(execution-worker): Temporal namespace and TLS/mTLS/API-key connection config
dawid-aksamski
committed
552a823
build(deps): put the AI SDK packages in the catalog
dawid-aksamski
committed
d824d39
feat(deploy): pass LLM endpoint and Temporal connection config through the demo stack
dawid-aksamski
committed
dc01fa5
fix(config): drop the OpenRouter key alias and built-in LLM defaults
dawid-aksamski
committed
9b468ed
fix(execution-worker): make ai_not_configured a permanent failure
dawid-aksamski
committed
be9bf5b
feat(deploy): pass Temporal TLS paths through compose and mount ./tls
dawid-aksamski
committed
9a336bc
feat(deploy): let an external Temporal retire the bundled cluster
dawid-aksamski
committed
e947785
test(config): isolate env tests from the runner's environment
dawid-aksamski
committed
1d5c39b
docs(site): document secured and external Temporal configuration
dawid-aksamski
committed
168c5d9
fix(deploy): run compose from the project dir and ship both files to the VM
dawid-aksamski
committed
0173914
fix(deploy): keep certificate files out of the image build context
dawid-aksamski
committed
b88c929
fix(config): ship .env.example with an empty AI_API_KEY
dawid-aksamski
committed
e0123d9
docs: align the root README with the no-default LLM configuration
dawid-aksamski
committed
9337b8b
fix(deploy): refuse to start while OPENROUTER_API_KEY is still set
dawid-aksamski
committed
f86f26f
docs: correct the Temporal failure mode and remove default-wording drift
dawid-aksamski
committed
f3ef683

Navigation Menu

Uh oh!

feat: connection config — OpenAI-compatible LLM endpoint and Temporal namespace/TLS/API-key auth - #113

feat: connection config — OpenAI-compatible LLM endpoint and Temporal namespace/TLS/API-key auth#113
dawidaksamski merged 33 commits into
mainfrom
feat/WB-596-connection-config

Commits on Sep 4, 2026

feat(backend): call any OpenAI-compatible endpoint from the AI adapt route

feat(execution-worker): boot without an LLM key; AI nodes fail at call time

feat(backend): Temporal namespace and TLS/mTLS/API-key connection config

feat(execution-worker): Temporal namespace and TLS/mTLS/API-key connection config

build(deps): put the AI SDK packages in the catalog

feat(deploy): pass LLM endpoint and Temporal connection config through the demo stack

fix(config): drop the OpenRouter key alias and built-in LLM defaults

fix(execution-worker): make ai_not_configured a permanent failure

feat(deploy): pass Temporal TLS paths through compose and mount ./tls

feat(deploy): let an external Temporal retire the bundled cluster

test(config): isolate env tests from the runner's environment

docs(site): document secured and external Temporal configuration

fix(deploy): run compose from the project dir and ship both files to the VM

fix(deploy): keep certificate files out of the image build context

fix(config): ship .env.example with an empty AI_API_KEY

docs: align the root README with the no-default LLM configuration

fix(deploy): refuse to start while OPENROUTER_API_KEY is still set

docs: correct the Temporal failure mode and remove default-wording drift

Commits on Sep 8, 2026

fix(deploy): keep custom TEMPORAL_TLS_DIR out of the image build context

fix(ci): persist deployed image tags in the VM's .env

test(backend,execution-worker): prove TLS, mTLS and API-key transport end to end

refactor(temporal-connection): one copy of the TEMPORAL_* rules

refactor(ai-config): share the AI_* contract, keep the runtime reactions apart

docs: limit the "no external traffic" promise to model requests

refactor: drop a header that restated the function, name the PEM reader

test(temporal-connection): remove the TLS test's temp PKI directories

docs(deploy): the backend calls the LLM too, for the visualize route

Commits on Sep 15, 2026

fix(deploy): check the retired key in the deploy script, not in compose

fix(backend): validate TEMPORAL_* at boot, like the worker

feat(ai-config): name a retired AI variable that is still set

test(backend): pin the env defaults the deploy depends on

test(temporal-connection): prove the plaintext default connects

fix(ai-studio): drop the provider name from the disclaimer