Architecture Hub
ORISO Repository Map
Detailed repository table for the merged ORISO super graph.
ORISO Repository Map
| Repository | Role | Graph path | Node count | Edge count | Major modules | Important APIs/routes | Known dependencies | Graph completeness | Needs verification |
|---|---|---|---|---|---|---|---|---|---|
| ORISO-Frontend | Frontend application for the Online-Beratung platform, covering registration, messaging, bookings, profile flows, theming, and Matrix-backed real-time communication. | ../ORISO-Frontend/.understand-anything/knowledge-graph.json | 1967 | 4204 | file: tokens.cy.ts — cypress/e2e/tokens.cy.tsfile: apiLogoutKeycloak.ts — src/api/apiLogoutKeycloak.tsfile: apiMatrixUpload.ts — src/api/apiMatrixUpload.tsfile: apiPostError.ts — src/api/apiPostError.tsfile: apiUploadAttachment.ts — src/api/apiUploadAttachment.tsfile: ErrorBoundary.tsx — src/components/app/ErrorBoundary.tsx | file: apiLogoutKeycloak.ts — src/api/apiLogoutKeycloak.tsfunction: apiKeycloakLogout — src/api/apiLogoutKeycloak.tsfile: apiMatrixUpload.ts — src/api/apiMatrixUpload.tsfunction: apiMatrixUploadFile — src/api/apiMatrixUpload.tsfunction: apiMatrixSendFileMessage — src/api/apiMatrixUpload.tsfile: apiPostError.ts — src/api/apiPostError.tsfunction: ERROR_LEVEL_FATAL — src/api/apiPostError.tsfunction: ERROR_LEVEL_ERROR — src/api/apiPostError.ts | file: apiLogoutKeycloak.ts — src/api/apiLogoutKeycloak.tsfunction: apiKeycloakLogout — src/api/apiLogoutKeycloak.tsfile: apiMatrixUpload.ts — src/api/apiMatrixUpload.tsfunction: apiMatrixUploadFile — src/api/apiMatrixUpload.tsfunction: apiMatrixSendFileMessage — src/api/apiMatrixUpload.tsfile: refreshKeycloakAccessToken.ts — src/components/sessionCookie/refreshKeycloakAccessToken.tsfunction: refreshKeycloakAccessToken — src/components/sessionCookie/refreshKeycloakAccessToken.tsfile: getKeycloakAccessToken.ts — src/components/sessionCookie/getKeycloakAccessToken.ts | 1967 nodes; 4204 edges; 884 file/module; 983 class/function; has gaps | No endpoint nodes detected; API/routes may only be represented as files/functions.; No visual graph artifacts found. |
| ORISO-Admin | Admin dashboard for the Online-Beratung platform, managing tenants, agencies, counselors, topics, invite links, global settings, user administration, and audit/log views. | ../ORISO-Admin/.understand-anything/knowledge-graph.json | 776 | 1547 | file: .eslintignorefile: .prettierignorefile: .understandignore — .understand-anything/.understandignorefile: babel.config.jsfile: counselor.spec.js — cypress/integration/counselor.spec.jsfile: post-login.spec.js — cypress/integration/post-login.spec.js | file: addAgencyAdminData.ts — src/api/admins/addAgencyAdminData.tsfunction: addAgencyAdminData — src/api/admins/addAgencyAdminData.tsfile: deleteAgencyAdminData.ts — src/api/admins/deleteAgencyAdminData.tsfunction: deleteAgencyAdminData — src/api/admins/deleteAgencyAdminData.tsfile: ediAgencytAdminData.ts — src/api/admins/ediAgencytAdminData.tsfunction: editAgencyAdminData — src/api/admins/ediAgencytAdminData.tsfile: addAgencyData.ts — src/api/agency/addAgencyData.tsfunction: buildAgencyDataRequestBody — src/api/agency/addAgencyData.ts | file: apiLogoutKeycloak.ts — src/api/auth/apiLogoutKeycloak.tsfile: refreshKeycloakAccessToken.ts — src/api/auth/refreshKeycloakAccessToken.tsfile: useLoginMutation.hook.ts — src/hooks/useLoginMutation.hook.tsfile: ProtectedRoute.tsx — src/router/ProtectedRoute.tsx | 776 nodes; 1547 edges; 444 file/module; 318 class/function; has gaps | No endpoint nodes detected; API/routes may only be represented as files/functions. |
| ORISO-UserService | Spring Boot backend responsible for user, asker, consultant, session, conversation, chat, admin, notification, deletion, and external messaging lifecycle behavior in the ORISO Online-Beratung platform. | ../ORISO-UserService/.understand-anything/knowledge-graph.json | 2295 | 3854 | file: .gitignorefile: .swagger-codegen-ignorefile: LICENSEfile: commitlint.config.jsfile: mvnwfile: run-local-remote-db.sh.example | config: api/appointmentservice.yamlconfig: api/conversationservice.yamlconfig: api/useradminservice.yamlconfig: api/userservice.yamlconfig: api/userstatisticsservice.yamlfile: src/main/java/de/caritas/cob/userservice/api/AccountManager.javafile: src/main/java/de/caritas/cob/userservice/api/IdentityManager.javafile: src/main/java/de/caritas/cob/userservice/api/Messenger.java | file: .gitignorefile: .swagger-codegen-ignoredocument: CHANGELOG.mdpipeline: Dockerfiledocument: INVITE_LINKS_API.mdfile: LICENSEconfig: api/appointmentservice.yamlconfig: api/conversationservice.yaml | 2295 nodes; 3854 edges; 908 file/module; 983 class/function; 182 API/route; has gaps | Database tables may be represented in ORISO-Database, not this service graph. |
| ORISO-AgencyService | Spring Boot backend for public agency lookup, agency administration, postcode ranges, topic/demographic enrichment, Matrix agency accounts, and ORISO peer-service integration. | ../ORISO-AgencyService/.understand-anything/knowledge-graph.json | 623 | 835 | file: .swagger-codegen-ignorefile: check-version.shfile: commitlint.config.jsfile: docker-build.cmdfile: AgencyService-Architektur.graphml — documentation/AgencyService-Architektur.graphmlfile: mvnw | schema: agencyadminservice.yaml — api/agencyadminservice.yamlschema: agencyservice.yaml — api/agencyservice.yamlfile: AgencyServiceApplication.java — src/main/java/de/caritas/cob/agencyservice/AgencyServiceApplication.javafile: AgencyAdminController.java — src/main/java/de/caritas/cob/agencyservice/api/admin/controller/AgencyAdminController.javafile: AgencyLinksBuilder.java — src/main/java/de/caritas/cob/agencyservice/api/admin/hallink/AgencyLinksBuilder.javafile: HalLinkBuilder.java — src/main/java/de/caritas/cob/agencyservice/api/admin/hallink/HalLinkBuilder.javafile: RootDTOBuilder.java — src/main/java/de/caritas/cob/agencyservice/api/admin/hallink/RootDTOBuilder.javafile: SearchResultLinkBuilder.java — src/main/java/de/caritas/cob/agencyservice/api/admin/hallink/SearchResultLinkBuilder.java | file: .swagger-codegen-ignoreschema: agencyservice.yaml — api/agencyservice.yamlfile: check-version.shfile: commitlint.config.jsfile: docker-build.cmdservice: Dockerfilefile: AgencyService-Architektur.graphml — documentation/AgencyService-Architektur.graphmlconfig: google_checks_light.xml | 623 nodes; 835 edges; 221 file/module; 224 class/function; 86 API/route; has gaps | Source graph uses legacy edge direction labels; merge normalized directions and preserves originalDirection. |
| ORISO-ConsultingTypeService | Spring Boot service that owns consulting type settings, topics, topic groups, application settings, tenant-aware access, and OpenAPI contracts for the ORISO platform. | ../ORISO-ConsultingTypeService/.understand-anything/knowledge-graph.json | 470 | 515 | file: check-version.shfile: docker-build.cmdfile: ConsultingTypeService-architecture.graphml — documentation/ConsultingTypeService-architecture.graphmlfile: mvnwfile: mvnw.cmdfile: run-trivy.sh | config: applicationsettingsservice.yml — api/applicationsettingsservice.ymlconfig: consultingtypeadminservice.yml — api/consultingtypeadminservice.ymlconfig: consultingtypeservice.yml — api/consultingtypeservice.ymlconfig: topicservice.yml — api/topicservice.ymlfile: ConsultingTypeServiceApplication.java — src/main/java/de/caritas/cob/consultingtypeservice/ConsultingTypeServiceApplication.javafile: ApiDefaultResponseEntityExceptionHandler.java — src/main/java/de/caritas/cob/consultingtypeservice/api/ApiDefaultResponseEntityExceptionHandler.javafile: ApiResponseEntityExceptionHandler.java — src/main/java/de/caritas/cob/consultingtypeservice/api/ApiResponseEntityExceptionHandler.javafile: ConsultingTypeAdminController.java — src/main/java/de/caritas/cob/consultingtypeservice/api/admin/controller/ConsultingTypeAdminController.java | config: consultingtypeservice.yml — api/consultingtypeservice.ymlfile: ConsultingTypeService-architecture.graphml — documentation/ConsultingTypeService-architecture.graphmlconfig: pom.xmlconfig: tenantservice.yaml — services/tenantservice.yamlfile: ConsultingTypeServiceApplication.java — src/main/java/de/caritas/cob/consultingtypeservice/ConsultingTypeServiceApplication.javafile: ApiDefaultResponseEntityExceptionHandler.java — src/main/java/de/caritas/cob/consultingtypeservice/api/ApiDefaultResponseEntityExceptionHandler.javafile: ApiResponseEntityExceptionHandler.java — src/main/java/de/caritas/cob/consultingtypeservice/api/ApiResponseEntityExceptionHandler.javafile: ConsultingTypeAdminController.java — src/main/java/de/caritas/cob/consultingtypeservice/api/admin/controller/ConsultingTypeAdminController.java | 470 nodes; 515 edges; 158 file/module; 160 class/function; 32 API/route; usable | No major graph-shape gaps detected; still verify behavior in source before changing production flows. |
| ORISO-TenantService | Spring Boot service that owns ORISO tenant records, tenant settings, legal content, subdomain resolution, and tenant-specific integration with ConsultingType, ApplicationSettings, and UserAdmin services. | ../ORISO-TenantService/.understand-anything/knowledge-graph.json | 380 | 623 | file: mvnwfile: Authority.java — src/main/java/com/vi/tenantservice/api/authorisation/Authority.javafile: RoleAuthorizationAuthorityMapper.java — src/main/java/com/vi/tenantservice/api/authorisation/RoleAuthorizationAuthorityMapper.javafile: UserRole.java — src/main/java/com/vi/tenantservice/api/authorisation/UserRole.javafile: CacheEventLogger.java — src/main/java/com/vi/tenantservice/api/cache/CacheEventLogger.javafile: ApplicationSettingsApiClient.java — src/main/java/com/vi/tenantservice/api/config/apiclient/ApplicationSettingsApiClient.java | class: Authority — src/main/java/com/vi/tenantservice/api/authorisation/Authority.javaclass: AuthorityValue — src/main/java/com/vi/tenantservice/api/authorisation/Authority.javaclass: RoleAuthorizationAuthorityMapper — src/main/java/com/vi/tenantservice/api/authorisation/RoleAuthorizationAuthorityMapper.javaclass: UserRole — src/main/java/com/vi/tenantservice/api/authorisation/UserRole.javaclass: CacheEventLogger — src/main/java/com/vi/tenantservice/api/cache/CacheEventLogger.javaclass: ApplicationSettingsApiClient — src/main/java/com/vi/tenantservice/api/config/apiclient/ApplicationSettingsApiClient.javaclass: ApplicationSettingsApiControllerFactory — src/main/java/com/vi/tenantservice/api/config/apiclient/ApplicationSettingsApiControllerFactory.javaclass: ConsultingTypeServiceApiControllerFactory — src/main/java/com/vi/tenantservice/api/config/apiclient/ConsultingTypeServiceApiControllerFactory.java | class: Authority — src/main/java/com/vi/tenantservice/api/authorisation/Authority.javaclass: AuthorityValue — src/main/java/com/vi/tenantservice/api/authorisation/Authority.javaclass: RoleAuthorizationAuthorityMapper — src/main/java/com/vi/tenantservice/api/authorisation/RoleAuthorizationAuthorityMapper.javaclass: UserRole — src/main/java/com/vi/tenantservice/api/authorisation/UserRole.javaclass: CacheEventLogger — src/main/java/com/vi/tenantservice/api/cache/CacheEventLogger.javaclass: ApplicationSettingsApiClient — src/main/java/com/vi/tenantservice/api/config/apiclient/ApplicationSettingsApiClient.javaclass: ApplicationSettingsApiControllerFactory — src/main/java/com/vi/tenantservice/api/config/apiclient/ApplicationSettingsApiControllerFactory.javaclass: ConsultingTypeServiceApiControllerFactory — src/main/java/com/vi/tenantservice/api/config/apiclient/ConsultingTypeServiceApiControllerFactory.java | 380 nodes; 623 edges; 107 file/module; 98 class/function; 66 API/route; usable | No major graph-shape gaps detected; still verify behavior in source before changing production flows. |
| ORISO-Database | Central ORISO database architecture and operations repository containing service-owned MariaDB schema exports, MongoDB dumps, Matrix PostgreSQL docs, Redis/RabbitMQ docs, backup artifacts, and initialization jobs. | ../ORISO-Database/.understand-anything/knowledge-graph.json | 192 | 312 | module: Backup and Recovery — Timestamped MariaDB/MongoDB backups and Kubernetes restore job.module: Cache and Messaging — Redis cache/session and RabbitMQ async messaging operational docs.module: Database Platform — Central schema and data operations repository for ORISO persistence systems.module: DevOps Access and Initialization — phpMyAdmin access, database restore job, and system user creation job.module: MariaDB Service Schemas — Relational schemas owned per backend service: agency, consulting type metadata, tenant, user, upload, video, and caritas.module: Matrix PostgreSQL — Matrix Synapse owned PostgreSQL database boundary. | concept: Cross-service ids without FK enforcement — Many agency_id, user_id, session_id, consulting_type, and tenant_id references cross service/database boundaries and are not enforced by MariaDB constconfig: collections.txt — mongodb/consultingtypeservice/collections.txtconfig: application_settings.metadata.json — mongodb/consultingtypeservice/dump/application_settings.metadata.jsonconfig: consulting_types.metadata.json — mongodb/consultingtypeservice/dump/consulting_types.metadata.jsonconfig: prelude.json — mongodb/consultingtypeservice/dump/prelude.jsonfunction: agency_postcode_range_update — mariadb/agencyservice/schema.sqlfunction: agency_topic_update — mariadb/agencyservice/schema.sqlfunction: agency_update — mariadb/agencyservice/schema.sql | concept: Redis cache and sessions — Redis is used for Spring sessions, cache prefixes, tokens, and temporary/rate-limit data.concept: Cross-service ids without FK enforcement — Many agency_id, user_id, session_id, consulting_type, and tenant_id references cross service/database boundaries and are not enforced by MariaDB constconcept: Database initialize job — database-initialize.yaml restores MariaDB and MongoDB from backup files copied into the job pod.concept: Manual schema exports — Schema changes are applied manually to running databases, then exported back into mariadb/*/schema.sql.concept: Matrix-owned PostgreSQL — PostgreSQL is dedicated to Matrix Synapse and is not part of ORISO service schema ownership.concept: phpMyAdmin read-only access — k8s/mariadb-client exposes phpMyAdmin through ingress, basic auth, and a view-only database user.concept: RabbitMQ auto-created topology — Services create queues/exchanges/bindings at runtime; repository documents operations but not definitions.concept: No executable migration history — The repo stores schema snapshots and DATABASECHANGELOG tables, but not the actual ordered migration files for each service. | 192 nodes; 312 edges; 11 file/module; 13 class/function; usable | No major graph-shape gaps detected; still verify behavior in source before changing production flows. |
| ORISO-Keycloak | Keycloak realm and deployment configuration for ORISO identity, authentication, authorization, token issuance, and IAM integration. | ../ORISO-Keycloak/.understand-anything/knowledge-graph.json | 152 | 247 | module: Authentication Flows — Browser, direct grant, registration, reset credentials, client, and Docker auth flows exported from the realm.module: Kubernetes Runtime — Deployment, Service, Ingress, namespace, host networking, hostname, proxy, and TLS configuration.module: OIDC Clients — Keycloak clients used by the ORISO frontend, admin console, CLI, account console, and built-in realm management.module: Operations and Admin Scripts — HTTP access setup, realm export/backup, deployment documentation, and status notes.module: ORISO Service Integration — How ORISO frontend, admin, and backend services authenticate against the realm and validate tokens.module: Realm Configuration — The online-beratung Keycloak realm, clients, scopes, roles, flows, token settings, and user-attribute mappers. | endpoint: client:account — realm.jsonendpoint: client:account-console — realm.jsonendpoint: client:admin-cli — realm.jsonendpoint: client:app — realm.jsonendpoint: client:broker — realm.jsonendpoint: client:realm-management — realm.jsonendpoint: client:security-admin-console — realm.json | concept: kcadm admin automation — configure-http-access.sh and backup/realm-backup.sh use kcadm inside the running Keycloak pod to change realm settings and export configuration.concept: Keycloak as central IAM — ORISO-Keycloak is the identity provider for ORISO services, issuing OIDC tokens and centralizing user role management.concept: No external identity providers — identityProviders is empty; SSO is internal to Keycloak, with no Google/Azure/SAML/social broker configured in this realm export.concept: Hardcoded admin credentials — keycloak-deployment.yaml and scripts use admin/admin directly instead of Kubernetes Secrets.concept: start-dev runtime risk — The Deployment runs Keycloak with start-dev, no external database configuration, no probes, no resource limits, and hostNetwork enabled.concept: Tenant isolation by tenantId claim — Tenant isolation is represented by a user attribute mapped into the tenantId token claim; services enforce tenant boundaries from the token, not Keyclconfig: realm.jsondocument: DEPLOYMENT.md | 152 nodes; 247 edges; 9 file/module; 7 API/route; usable | No major graph-shape gaps detected; still verify behavior in source before changing production flows. |
| ORISO-Kubernetes | Kubernetes infrastructure and deployment orchestration repository for the ORISO platform. | ../ORISO-Kubernetes/.understand-anything/knowledge-graph.json | 339 | 588 | file: apply-ingress.sh — ingress/apply-ingress.shmodule: Authentication and Communication — Keycloak, Matrix Synapse, Element, Element Call, and LiveKit workloads.module: Backend Services — TenantService, UserService, AgencyService, and ConsultingTypeService deployment/config boundaries.module: Environment Values — Global dev values and a local macOS override example; no committed staging/prod overlay exists.module: Frontend Services — Frontend, Admin, Storybook, Status Page, and Health Dashboard web workloads.module: Helm Umbrella Chart — helm/oriso-platform composes all subcharts through local file dependencies and enable flags. | concept: Observability stack — SigNoz uses ClickHouse; OTEL Collector receives OTLP and forwards metrics; service-health-exporter polls backend health endpoints.concept: oriso-dev.site domains — Dev/staging-like external domains route app, admin, API, auth, Matrix, LiveKit, SigNoz, Redis Commander, Status Page, and Storybook.config: Chart.yaml — helm/charts/agencyservice/Chart.yamlconfig: values.yaml — helm/charts/agencyservice/values.yamlconfig: Chart.yaml — helm/charts/consultingtypeservice/Chart.yamlconfig: values.yaml — helm/charts/consultingtypeservice/values.yamlconfig: Chart.yaml — helm/charts/tenantservice/Chart.yamlconfig: values.yaml — helm/charts/tenantservice/values.yaml | concept: Kubernetes service DNS — Internal services use oriso-platform-* names under caritas.svc.cluster.local.concept: Externally exposed utility UIs — Redis Commander, SigNoz, Storybook, Health Dashboard, and Status Page have public ingress definitions.concept: Local Helm dependencies — The umbrella chart depends on local file:// subcharts and packaged chart archives.concept: Keycloak dev mode — Keycloak starts with start-dev, hostNetwork true, default-style admin values, no probes, and no resources in chart values.concept: No NetworkPolicy manifests — No NetworkPolicy manifests were found; service isolation depends on namespace/default cluster policy.concept: oriso-dev.site domains — Dev/staging-like external domains route app, admin, API, auth, Matrix, LiveKit, SigNoz, Redis Commander, Status Page, and Storybook.concept: kubectl last-applied annotations committed — Several ingress files include kubectl.kubernetes.io/last-applied-configuration annotations with stale embedded service names.concept: Stateful storage — MariaDB, ClickHouse, and SigNoz use StatefulSets/volumeClaimTemplates; MongoDB/Redis/Matrix mount existing PVCs. | 339 nodes; 588 edges; 13 file/module; 68 API/route; usable | No major graph-shape gaps detected; still verify behavior in source before changing production flows. |