new changes

architecture/2026/07-microservices-breakdown.md

@@ -0,0 +1,37 @@
+# Go Microservices Breakdown
+
+## Services
+
+### agent-gateway
+- Terminates mTLS channels from agents.
+- Tracks sessions, heartbeats, and capability maps.
+- Relays command envelopes and result events.
+
+### engine-site
+- Manages site config generation, domain bindings, and SSL apply pipelines.
+- Supports Nginx, Apache, OpenLiteSpeed provider adapters.
+
+### engine-docker
+- Deploys one-click apps via compose templates.
+- Handles image pulls, health checks, and rollback.
+
+### engine-db
+- Manages MySQL and Redis lifecycle commands.
+- Executes create database/user, backup, restore primitives.
+
+### engine-security
+- Applies firewall policies and security hardening commands.
+- Integrates fail2ban and baseline checks.
+
+### engine-backup
+- Runs backup plans and restore workflows.
+- Pushes artifacts to object storage providers.
+
+### engine-fileops
+- Secure file manager operations with path policy controls.
+- Chunked upload, download token issuance, lock-aware editing.
+
+## Communication Model
+- Inbound command envelopes from Laravel orchestrator.
+- Internal queue topic fan-out by command type.
+- Outbound event stream for progress, logs, and terminal results.