livrare lot 2

backend/CLAUDE.md

@@ -0,0 +1,135 @@
+# DIDI Backend Platform
+
+Misinformation detection platform — 3-layer microservices architecture (TypeScript/Node.js).
+
+> **⚠️ READ FIRST**: [`REFACTOR_CONTEXT.md`](./REFACTOR_CONTEXT.md) — convenții, helpers,
+> structură nouă post-refactor (sesiune 2026-05-07). Conține pattern-urile
+> obligatorii (`log`, `requireEnv`, `internalError`, `lazyRedis`, `acquireLock`,
+> `LogicalInputError`, etc) + anti-pattern-uri de evitat + fișierele mari rămase.
+
+## Active Services
+
+| Service | Port | Container | Compose file |
+|---------|------|-----------|--------------|
+| Agent V3 | 24803 | didi-agent-v3 | `services/orchestration-layer/agent-v3/docker-compose.yml` |
+| didiFramework | 3005 | didi-framework | `services/orchestration-layer/didiFramework/docker-compose.yml` |
+| Admin Dashboard | 3000 (HTTPS) | didi-admin | `services/data-layer/docker-compose.yml` |
+
+Workers (in agent-v3 compose): worker-techniques ×2, worker-ai-tampered ×2, worker-claims ×3, worker-domain ×2, worker-media-preprocess ×2, verdict-aggregator ×2.
+
+## Quick Commands
+
+```bash
+# Rebuild agent-v3 (+ all workers)
+cd services/orchestration-layer/agent-v3 && docker compose up -d --build agent-v3
+
+# Rebuild framework
+cd services/orchestration-layer/didiFramework && docker compose up -d --build didi-framework
+
+# Rebuild admin dashboard
+cd admin-dashboard && docker build -t didi-admin:latest .
+cd ../services/data-layer && docker compose up -d --force-recreate didi-admin
+
+# Sync parameters to Redis
+docker exec didi-framework sh -c 'wget -qO- --post-data="" http://127.0.0.1:3005/api/sync-redis'
+
+# View logs
+docker logs -f didi-agent-v3
+docker logs -f didi-framework
+```
+
+## Structure
+
+```
+backend/
+├── admin-dashboard/                # React 19, MUI 7, TypeScript
+│   ├── src/components/             # ServiceCard, AnalysisHistory, UserManagement, etc.
+│   ├── src/services/api.ts         # API client (health checks via Docker container state)
+│   ├── nginx-ssl.conf              # Nginx proxy (/framework/ → :3005, /agent-v3/ → :24803)
+│   └── Dockerfile                  # Multi-stage: node:20 build → nginx:alpine serve
+├── production/                     # Production docker-compose + .env
+└── services/
+    ├── data-layer/
+    │   ├── didiCache/              # Redis 7 config
+    │   ├── didiDatabase/           # Local PG (waitlist only, main DB is external cluster)
+    │   ├── didiQueue/              # RabbitMQ init scripts
+    │   ├── didiStorage/            # MinIO init + lifecycle
+    │   ├── pgadmin/
+    │   └── docker-compose.yml      # All data layer + admin dashboard containers
+    ├── gateway-auth-layer/
+    │   ├── didiKeycloak/           # Realm import + 3 custom themes
+    │   └── didiKong/               # Declarative config + SSL certs
+    └── orchestration-layer/
+        ├── agent-v3/               # Analysis engine (Express 5, TypeScript)
+        │   ├── src/api/            # routes.ts, ai-tampered-routes.ts, claims-routes.ts, pipeline-routes.ts
+        │   ├── src/components/     # techniques/, ai-tampered/, claims/, pipeline/ executors
+        │   ├── src/shared/         # media/, persistence/, redis/, types/
+        │   ├── src/queue/          # dispatcher.ts, connection.ts, aggregator.ts, workers/
+        │   └── docker-compose.yml  # agent-v3 + 13 worker containers
+        └── didiFramework/          # Parameters CRUD API (Express 4, TypeScript)
+            ├── src/routes/         # 20+ route files (CRUD for all parameters)
+            ├── sql/migrations/     # PG migrations
+            └── docker-compose.yml
+```
+
+## Databases
+
+| Database | Host | Schema | Used by |
+|----------|------|--------|---------|
+| DIDI (PG cluster) | 10.11.50.167:5000 | bos_parammgmt | didiFramework (parameters CRUD) |
+| | | bos_analysis | agent-v3 (analysis results) |
+| | | bos_sysadmin | didiFramework (users, subscriptions) |
+| | | bos_subscriber | didiFramework (personal data) |
+| Redis | didi-cache:6379 | — | Both (framework config cache, session state) |
+| RabbitMQ | rabbitmq:5672 | — | agent-v3 (async analysis queues) |
+| MinIO | minio:9000 | — | Both (media file storage) |
+
+## API Routes (Agent V3, all async)
+
+All `/analyze` and `/analyze-media` endpoints dispatch to RabbitMQ workers and return 202.
+
+| Prefix | File | What |
+|--------|------|------|
+| `/api/v3/techniques/*` | routes.ts | Manipulation technique detection |
+| `/api/v3/ai-tampered/*` | ai-tampered-routes.ts | AI content detection |
+| `/api/v3/claims/*` | claims-routes.ts | Claim extraction + verification |
+| `/api/v3/pipeline/*` | pipeline-routes.ts | Full pipeline, history, extension |
+| `/api/v3/source-assessment/*` | source-assessment-routes.ts | Source credibility |
+| `/api/v3/domain/*` | routes.ts | Domain analysis |
+| `/api/v3/media/*` | routes.ts | File upload/download (MinIO) |
+
+## LLM Models
+
+| Role | Model | Location |
+|------|-------|----------|
+| Primary (all) | Qwen 3.5 397B | Local GPU 10.11.10.17:14011 |
+| Fallback 1 | Claude Sonnet 4.6 (Opus 4.6 for ai-tampered) | OpenRouter |
+| Fallback 2 | GPT-4o | OpenRouter |
+| Vision | Qwen Vision → Gemini Flash → GPT-4o | 10.11.10.42:14001 + OpenRouter |
+| Transcription | M17-Whisper → Groq → OpenAI | 10.11.10.17:54300 + Cloud |
+
+Managed via `component_stage_assignment` PG table → sync to Redis.
+
+## Tech Stack
+
+| Component | Technology |
+|-----------|------------|
+| Agent V3 | Node.js, TypeScript, Express 5 |
+| didiFramework | Node.js, TypeScript, Express 4 |
+| Admin Dashboard | React 19, MUI 7, TypeScript |
+| Database | PostgreSQL 14 (Patroni/HAProxy) |
+| Cache | Redis 7 |
+| Queue | RabbitMQ 3.12 |
+| Storage | MinIO |
+| Gateway | Kong 3.4 (SSL :443) |
+| Auth | Keycloak 22 |
+
+## Credentials (Staging)
+
+| Service | User | Password |
+|---------|------|----------|
+| PostgreSQL (cluster) | bos_interface | interface |
+| Redis | — | redis123 |
+| RabbitMQ | admin | rabbitmq123 |
+| MinIO | minioadmin | minio123 |
+| Keycloak | admin@didi.local | admin123 |