CronCompose runtime architecture Diagram

Web surfaces

Bare / proxies to /app/landing; /docs and /use-cases redirect into the UI
Anonymous visitors get PublicChrome; signed-in users get the AppShell
Login never calls /me without a cc_session cookie

Deploy path

Control plane dispatches DeployCommand over the mTLS Agent Gateway
Deploy Manager clones, builds, activates a release, then starts pm2/systemd/docker
Process names are qualified as project-app so hosts do not collide

Trust boundaries

Browser sessions use cookie auth and role gates on /api/v1
Agents present client certificates; gateway requires and verifies them
Git webhooks are signature-checked before a redeploy is triggered

Connectors and logs

Operators fetch object logs via GET /connectors/:id/objects/:ref/logs
Agent providers run pm2 logs, journalctl, or docker logs and return content
PostgreSQL remains the system of record for servers, deploys, jobs, and audit