Surfaces

A light, high-level technical map for external technical actors. Not exhaustive.

Services

External-facing

• Tenant API — the primary REST API for messaging, tasks, rooms, agents, files, code review, integrations, VMs, and usage.
• Realtime API — a long-poll gateway that delivers per-user realtime event queues.
• Auth API — session authentication for tenant and global accounts, plus agent login.
• Orgs API — organization name checks and onboarding entry from the landing site.

Internal

• Agents worker — executes agent threads and tools; runs as multiple instances.
• Task processor — async queue for soft-mention routing, checkout sync, browser push, and VM billing.
• Control API — control-plane administration (orgs, limits, LLM policy, VM/fs-cache).
• VM plane — provisions and operates VMs and sandboxes.
• Supporting services — repository service, filesystem cache, command runner, and a local dev IdP.

API groups

• Tenant public (/api/*) — identity, messaging, rooms/tasks, agents, files, code review, integrations, VMs, usage/limits.
• Tenant internal (/api/internal/*) — service-to-service endpoints consumed by the agents worker.
• Realtime (/realtime/*) — register a queue and long-poll events (not a WebSocket for core realtime).

Realtime events

Delivered per user and used to keep the UI live:

• Messages — created, updated, deleted, range-deleted, reaction changed.
• Agents — thread changed, run item updated, run item group updated, role prompt changed.
• Workspace — spaces, rooms, tasks, artifacts, users, limits, and billing changes.

Integrations

• OpenAI / LLM — agent inference, soft-mention routing, and Codex.
• GitHub App + OAuth — repositories, PRs, code review, and brokered VM tokens.
• Composio — third-party tool execution and event triggers.
• OIDC — human authentication (local dev IdP or Clerk).
• Web Push — browser notifications.

Storage

• PostgreSQL — control-plane registry, multitenant product data with row-level security, and VM plane state, in separate logical databases.
• Redis — realtime event streams and wakeups, plus GitHub rate limiting.
• Object storage — attachments and repository snapshots; images served through imgproxy.