Dev

.coolify

@@ -0,0 +1,32 @@
+# ============================================
+# FlexGate Proxy - Coolify Configuration
+# ============================================
+# Open-source self-hosted deployment platform
+# Website: https://coolify.io
+# License: Apache 2.0
+# ============================================
+
+# This file is auto-detected by Coolify
+# No manual configuration needed!
+
+# Build settings are configured in Coolify dashboard:
+# - Build Command: npm ci && npm run build
+# - Start Command: npm start
+# - Port: 3000
+
+# Environment variables (set in Coolify UI):
+# NODE_ENV=production
+# PORT=3000
+# REDIS_URL=${COOLIFY_REDIS_URL}
+# JWT_SECRET=${COOLIFY_AUTO_SECRET_1}
+# ADMIN_JWT_SECRET=${COOLIFY_AUTO_SECRET_2}
+
+# Health check endpoint (auto-detected):
+# /health/live
+
+# Coolify automatically handles:
+# ✅ SSL certificates (Let's Encrypt)
+# ✅ Zero-downtime deployments
+# ✅ Auto-restart on crash
+# ✅ Git auto-deploy on push
+# ✅ Preview deployments for PRs

.env.example

@@ -0,0 +1,56 @@
+# FlexGate Environment Configuration
+
+# ==============================================================================
+# DATABASE (PostgreSQL)
+# ==============================================================================
+DB_HOST=localhost
+DB_PORT=5432
+DB_NAME=flexgate
+DB_USER=flexgate
+DB_PASSWORD=flexgate
+DB_POOL_SIZE=20
+
+# For production, use strong passwords:
+# DB_PASSWORD=<generate-with>: openssl rand -base64 32
+
+# ==============================================================================
+# SERVER
+# ==============================================================================
+NODE_ENV=development
+PORT=3000
+
+# ==============================================================================
+# EINSTRUST SSO (Optional)
+# ==============================================================================
+# EINSTRUST_API_URL=https://api.einstrust.com
+# EINSTRUST_TENANT_ID=your-tenant-id
+# EINSTRUST_IDP_ID=your-idp-id
+# EINSTRUST_RETURN_URL=http://localhost:3000/auth/callback
+# EINSTRUST_SESSION_CACHE_TTL=300
+# FLEXGATE_FALLBACK_AUTH=true
+
+# ==============================================================================
+# REDIS (Optional)
+# ==============================================================================
+# REDIS_HOST=localhost
+# REDIS_PORT=6379
+# REDIS_PASSWORD=
+# REDIS_DB=0
+
+# ==============================================================================
+# LOGGING
+# ==============================================================================
+LOG_LEVEL=info
+
+# ==============================================================================
+# SECURITY
+# ==============================================================================
+# Generate with: openssl rand -hex 32
+JWT_SECRET=your-secret-key-change-this-in-production
+SESSION_SECRET=your-session-secret-change-this-in-production
+
+# ==============================================================================
+# CORS
+# ==============================================================================
+CORS_ORIGIN=*
+# For production: CORS_ORIGIN=https://yourdomain.com

.gitignore

@@ -109,3 +109,8 @@ dump.rdb
 # Temporary files
 tmp/
 temp/
+
+# TypeScript build output
+dist/
+*.d.ts
+*.js.map

.npmrc

@@ -0,0 +1,3 @@
+registry=https://registry.npmjs.org/
+@magnetic:registry=https://engci-maven.cisco.com/artifactory/api/npm/magnetic-npm/
+always-auth=false

.progress/phase-0-core-stabilization.md

@@ -0,0 +1,95 @@
+# Phase 0: Core Stabilization - Progress Log
+
+**Branch:** `feature/core-stabilization`  
+**Started:** January 27, 2026  
+**Status:** 🟢 In Progress
+
+---
+
+## Current Session - January 27, 2026
+
+### Code Audit Results
+
+#### ✅ Existing Implementation (Good Foundation)
+- **app.js** - Main application with Express setup
+- **Health endpoints** - `/health/live`, `/health/ready`, `/health/deep` ✅
+- **Metrics** - Prometheus integration with custom metrics ✅
+- **Circuit breakers** - Implemented for upstreams ✅
+- **Rate limiting** - Basic rate limiter in place ✅
+- **Logging** - Winston-based structured logging ✅
+- **Correlation IDs** - Request tracking implemented ✅
+
+#### 📋 Current Dependencies (package.json)
+- Express 4.18.2
+- http-proxy-middleware 2.0.6
+- prom-client 15.1.0
+- winston 3.11.0
+- rate-limit-redis 4.2.0
+- redis 4.6.12
+
+---
+
+## Tasks Completed ✅
+
+### Week 1 - Code Audit
+- [x] Review app.js structure
+- [x] Identify existing features
+- [x] Review package.json dependencies
+- [x] Review logger implementation
+
+---
+
+## Tasks In Progress 🔄
+
+### Config Schema Versioning
+- [ ] Design config version system
+- [ ] Create v1 schema definition
+- [ ] Add schema validation
+- [ ] Implement version migration
+
+---
+
+## Next Steps (Today)
+
+1. Create config schema v1 with versioning
+2. Add config validation
+3. Implement backward compatibility tests
+4. Set up testing infrastructure (Jest)
+5. Document current API
+
+---
+
+## Notes & Decisions
+
+### Observations:
+- Code quality is good, clean Express patterns
+- Health endpoints already exist (great!)
+- Prometheus metrics already integrated
+- Correlation IDs implemented
+- Circuit breaker pattern in place
+- Rate limiting using Redis
+
+### Areas for Improvement:
+1. **Config versioning** - Not yet implemented
+2. **Schema validation** - Need to add
+3. **Tests** - No tests found yet
+4. **API versioning** - Should add version headers
+5. **Deprecation policy** - Need to define
+6. **Documentation** - Need API docs
+
+### Technical Decisions:
+- Keep Winston for logging (already good)
+- Keep prom-client for metrics (standard)
+- Add Joi or Ajv for schema validation
+- Add Jest for testing
+- Use semantic versioning for config
+
+---
+
+## Blockers
+
+None currently
+
+---
+
+**Last Updated:** January 27, 2026