Major WHOOSH system refactoring and feature enhancements

- Migrated from HIVE branding to WHOOSH across all components
- Enhanced backend API with new services: AI models, BZZZ integration, templates, members
- Added comprehensive testing suite with security, performance, and integration tests
- Improved frontend with new components for project setup, AI models, and team management
- Updated MCP server implementation with WHOOSH-specific tools and resources
- Enhanced deployment configurations with production-ready Docker setups
- Added comprehensive documentation and setup guides
- Implemented age encryption service and UCXL integration

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>

docker-compose.swarm.yml

@@ -1,23 +1,22 @@
 services:
-  # Hive Backend API
-  hive-backend:
-    image: registry.home.deepblack.cloud/tony/hive-backend:v4
+  # WHOOSH Backend API
+  whoosh_backend:
+    image: registry.home.deepblack.cloud/tony/whoosh-backend:latest
     build:
       context: ./backend
-      dockerfile: Dockerfile
+      dockerfile: Dockerfile.prod
     environment:
-      - DATABASE_URL=postgresql://hive:hivepass@postgres:5432/hive
-      - REDIS_URL=redis://:hivepass@redis:6379
+      - DATABASE_URL=postgresql://whoosh:whooshpass@postgres:5432/whoosh
+      - REDIS_URL=redis://:whooshpass@redis:6379
       - ENVIRONMENT=production
       - LOG_LEVEL=info
-      - CORS_ORIGINS=${CORS_ORIGINS:-https://hive.home.deepblack.cloud}
+      - CORS_ORIGINS=${CORS_ORIGINS:-https://whoosh.home.deepblack.cloud}
     depends_on:
       - postgres
       - redis
-    ports:
-      - "8087:8000"
+    # No external ports - backend accessed only via frontend nginx proxy
     networks:
-      - hive-network
+      - whoosh-network
       - tengig
     secrets:
       - github_token
@@ -35,38 +34,19 @@ services:
       placement:
         constraints: 
           - node.hostname == walnut
-      labels:
-        - "traefik.enable=true"
-        - "traefik.docker.network=tengig"
-        # API routes
-        - "traefik.http.routers.hive-api.rule=Host(`hive.home.deepblack.cloud`) && PathPrefix(`/api`)"
-        - "traefik.http.routers.hive-api.entrypoints=web,web-secured"
-        - "traefik.http.routers.hive-api.tls.certresolver=letsencryptresolver"
-        - "traefik.http.routers.hive-api.service=hive-api"
-        - "traefik.http.routers.hive-api.priority=200"
-        - "traefik.http.services.hive-api.loadbalancer.server.port=8000"
-        - "traefik.http.services.hive-api.loadbalancer.passhostheader=true"
-        # Socket.IO routes
-        - "traefik.http.routers.hive-socketio.rule=Host(`hive.home.deepblack.cloud`) && PathPrefix(`/socket.io`)"
-        - "traefik.http.routers.hive-socketio.entrypoints=web,web-secured"
-        - "traefik.http.routers.hive-socketio.tls.certresolver=letsencryptresolver"
-        - "traefik.http.routers.hive-socketio.service=hive-socketio"
-        - "traefik.http.routers.hive-socketio.priority=200"
-        - "traefik.http.services.hive-socketio.loadbalancer.server.port=8000"
-        - "traefik.http.services.hive-socketio.loadbalancer.passhostheader=true"
 
-  # Hive Frontend
-  hive-frontend:
-    image: registry.home.deepblack.cloud/tony/hive-frontend:v6
+  # WHOOSH Frontend
+  whoosh_frontend:
+    image: registry.home.deepblack.cloud/tony/whoosh-frontend:latest
     build:
       context: ./frontend
-      dockerfile: Dockerfile
+      dockerfile: Dockerfile.prod
     depends_on:
-      - hive-backend
+      - whoosh_backend
     ports:
-      - "3001:3000"
+      - "3001:8080"
     networks:
-      - hive-network
+      - whoosh-network
       - tengig
     deploy:
       replicas: 1
@@ -86,13 +66,13 @@ services:
         - "traefik.enable=true"
         - "traefik.docker.network=tengig"
         # Frontend routes (catch-all with lower priority)
-        - "traefik.http.routers.hive-frontend.rule=Host(`hive.home.deepblack.cloud`)"
-        - "traefik.http.routers.hive-frontend.entrypoints=web,web-secured"
-        - "traefik.http.routers.hive-frontend.tls.certresolver=letsencryptresolver"
-        - "traefik.http.routers.hive-frontend.service=hive-frontend"
-        - "traefik.http.routers.hive-frontend.priority=100"
-        - "traefik.http.services.hive-frontend.loadbalancer.server.port=3000"
-        - "traefik.http.services.hive-frontend.loadbalancer.passhostheader=true"
+        - "traefik.http.routers.whoosh-frontend.rule=Host(`whoosh.home.deepblack.cloud`)"
+        - "traefik.http.routers.whoosh-frontend.entrypoints=web,web-secured"
+        - "traefik.http.routers.whoosh-frontend.tls.certresolver=letsencryptresolver"
+        - "traefik.http.routers.whoosh-frontend.service=whoosh-frontend"
+        - "traefik.http.routers.whoosh-frontend.priority=100"
+        - "traefik.http.services.whoosh-frontend.loadbalancer.server.port=8080"
+        - "traefik.http.services.whoosh-frontend.loadbalancer.passhostheader=true"
 
   # N8N Workflow Automation
 #  n8n:
@@ -103,12 +83,12 @@ services:
 #    environment:
 #      - N8N_REDIS_HOST=redis
 #      - N8N_REDIS_PORT=6379
-#      - N8N_REDIS_PASSWORD=hivepass
+#      - N8N_REDIS_PASSWORD=whooshpass
 #      - N8N_QUEUE_BULL_REDIS_HOST=redis
 #      - N8N_QUEUE_BULL_REDIS_PORT=6379
-#      - N8N_QUEUE_BULL_REDIS_PASSWORD=hivepass
+#      - N8N_QUEUE_BULL_REDIS_PASSWORD=whooshpass
 #    networks:
-#      - hive-network
+#      - whoosh-network
 #      - tengig
 #    ports:
 #      - 5678:5678
@@ -129,16 +109,16 @@ services:
   postgres:
     image: postgres:15
     environment:
-      - POSTGRES_DB=hive
-      - POSTGRES_USER=hive
-      - POSTGRES_PASSWORD=hivepass
+      - POSTGRES_DB=whoosh
+      - POSTGRES_USER=whoosh
+      - POSTGRES_PASSWORD=whooshpass
       - PGDATA=/var/lib/postgresql/data/pgdata
     volumes:
       - postgres_data:/var/lib/postgresql/data
     ports:
       - "5433:5432"
     networks:
-      - hive-network
+      - whoosh-network
     deploy:
       replicas: 1
       restart_policy:
@@ -151,18 +131,19 @@ services:
         reservations:
           memory: 256M
       placement:
-        constraints: []
+        constraints: 
+          - node.hostname == walnut
 
   # Redis Cache (Password Protected)
   redis:
     image: redis:7-alpine
-    command: ["redis-server", "--requirepass", "hivepass", "--appendonly", "yes", "--maxmemory", "256mb", "--maxmemory-policy", "allkeys-lru"]
+    command: ["redis-server", "--requirepass", "whooshpass", "--appendonly", "yes", "--maxmemory", "256mb", "--maxmemory-policy", "allkeys-lru"]
     volumes:
       - redis_data:/data
     ports:
       - "6380:6379"
     networks:
-      - hive-network
+      - whoosh-network
     deploy:
       replicas: 1
       restart_policy:
@@ -190,7 +171,7 @@ services:
     ports:
       - "9091:9090"
     networks:
-      - hive-network
+      - whoosh-network
       - tengig
     deploy:
       replicas: 1
@@ -204,13 +185,14 @@ services:
         reservations:
           memory: 256M
       placement:
-        constraints: []
+        constraints: 
+          - node.hostname == walnut
       labels:
         - "traefik.enable=true"
-        - "traefik.http.routers.hive-prometheus.rule=Host(`hive.home.deepblack.cloud`) && PathPrefix(`/prometheus`)"
-        - "traefik.http.routers.hive-prometheus.entrypoints=web-secured"
-        - "traefik.http.routers.hive-prometheus.tls.certresolver=letsencryptresolver"
-        - "traefik.http.services.hive-prometheus.loadbalancer.server.port=9090"
+        - "traefik.http.routers.whoosh-prometheus.rule=Host(`whoosh.home.deepblack.cloud`) && PathPrefix(`/prometheus`)"
+        - "traefik.http.routers.whoosh-prometheus.entrypoints=web-secured"
+        - "traefik.http.routers.whoosh-prometheus.tls.certresolver=letsencryptresolver"
+        - "traefik.http.services.whoosh-prometheus.loadbalancer.server.port=9090"
         - "traefik.docker.network=tengig"
 
   # Grafana Dashboard
@@ -218,9 +200,9 @@ services:
     image: grafana/grafana:latest
     environment:
       - GF_SECURITY_ADMIN_USER=admin
-      - GF_SECURITY_ADMIN_PASSWORD=hiveadmin
+      - GF_SECURITY_ADMIN_PASSWORD=whooshadmin
       - GF_INSTALL_PLUGINS=grafana-clock-panel,grafana-simple-json-datasource
-      - GF_SERVER_ROOT_URL=https://hive.home.deepblack.cloud/grafana
+      - GF_SERVER_ROOT_URL=https://whoosh.home.deepblack.cloud/grafana
       - GF_SERVER_SERVE_FROM_SUB_PATH=true
     volumes:
       - grafana_data:/var/lib/grafana
@@ -229,7 +211,7 @@ services:
     ports:
       - "3002:3000"
     networks:
-      - hive-network
+      - whoosh-network
       - tengig
     deploy:
       replicas: 1
@@ -243,17 +225,18 @@ services:
         reservations:
           memory: 256M
       placement:
-        constraints: []
+        constraints: 
+          - node.hostname == walnut
       labels:
         - "traefik.enable=true"
-        - "traefik.http.routers.hive-grafana.rule=Host(`hive.home.deepblack.cloud`) && PathPrefix(`/grafana`)"
-        - "traefik.http.routers.hive-grafana.entrypoints=web-secured"
-        - "traefik.http.routers.hive-grafana.tls.certresolver=letsencryptresolver"
-        - "traefik.http.services.hive-grafana.loadbalancer.server.port=3000"
+        - "traefik.http.routers.whoosh-grafana.rule=Host(`whoosh.home.deepblack.cloud`) && PathPrefix(`/grafana`)"
+        - "traefik.http.routers.whoosh-grafana.entrypoints=web-secured"
+        - "traefik.http.routers.whoosh-grafana.tls.certresolver=letsencryptresolver"
+        - "traefik.http.services.whoosh-grafana.loadbalancer.server.port=3000"
         - "traefik.docker.network=tengig"
 
 networks:
-  hive-network:
+  whoosh-network:
     driver: overlay
     attachable: true
   tengig: