feat(code): gRPC server with JWT auth + tool routing

tonic 0.14 gRPC server for sunbeam code sessions:
- bidirectional streaming Session RPC
- JWT interceptor validates tokens against Hydra JWKS
- tool router classifies calls as client-side (file_read, bash,
  grep, etc.) or server-side (gitea, identity, search, etc.)
- service stub with session lifecycle (start, chat, tool results, end)
- coding_model config (default: devstral-small-2506)
- grpc config section (listen_addr, jwks_url)
- 182 tests (5 new: JWT claims, tool routing)

phase 2 TODOs: Matrix room bridge, Mistral agent loop, streaming
This commit is contained in:
2026-03-23 11:35:37 +00:00
parent 2a1d7a003d
commit 35b6246fa7
9 changed files with 472 additions and 0 deletions

1
proto/code.proto Symbolic link
View File

@@ -0,0 +1 @@
/Users/sienna/Development/sunbeam/cli-worktree/sunbeam-proto/proto/code.proto