SimplicityGuy
diff --git a/‎.github/workflows/code-quality.yml‎
Lines changed: 2 additions & 0 deletions b/‎.github/workflows/code-quality.yml‎
Lines changed: 2 additions & 0 deletions
diff --git a/‎.github/workflows/docker-validate.yml‎
Lines changed: 1 addition & 1 deletion b/‎.github/workflows/docker-validate.yml‎
Lines changed: 1 addition & 1 deletion
diff --git a/‎.github/workflows/list-sub-projects.yml‎
Lines changed: 2 additions & 0 deletions b/‎.github/workflows/list-sub-projects.yml‎
Lines changed: 2 additions & 0 deletions
diff --git a/‎.github/workflows/test.yml‎
Lines changed: 83 additions & 1 deletion b/‎.github/workflows/test.yml‎
Lines changed: 83 additions & 1 deletion
diff --git a/‎CLAUDE.md‎
Lines changed: 2 additions & 0 deletions b/‎CLAUDE.md‎
Lines changed: 2 additions & 0 deletions
diff --git a/‎README.md‎
Lines changed: 22 additions & 8 deletions b/‎README.md‎
Lines changed: 22 additions & 8 deletions
diff --git a/‎api/Dockerfile‎
Lines changed: 132 additions & 0 deletions b/‎api/Dockerfile‎
Lines changed: 132 additions & 0 deletions
@@ -105,7 +105,9 @@ jobs:
         run: |
           just install
           # Install workspace packages
+          uv pip install -e api
           uv pip install -e common
+          uv pip install -e curator
           uv pip install -e dashboard
           uv pip install -e explore
 
 
@@ -90,7 +90,7 @@ jobs:
       - name: 🔍 Check docker-compose services
         run: |
           services=$(docker-compose config --services | sort | tr "\n" " " | sed "s/ $//")
-          expected="dashboard explore extractor graphinator neo4j postgres rabbitmq redis schema-init tableinator"
+          expected="api curator dashboard explore extractor graphinator neo4j postgres rabbitmq redis schema-init tableinator"
 
           if [ "$services" != "$expected" ]; then
             echo "❌ Service mismatch!"
 
@@ -30,6 +30,8 @@ jobs:
           # Define sub-projects with their properties
           cat << "EOF" > projects.json
           [
+            {"name": "api", "use_cache": true},
+            {"name": "curator", "use_cache": true},
             {"name": "dashboard", "use_cache": true},
             {"name": "explore", "use_cache": true},
             {"name": "extractor", "use_cache": true},
 
@@ -40,6 +40,82 @@ permissions:
   pull-requests: write  # Required for coverage report comments
 
 jobs:
+  # ============================================================================
+  # API SERVICE TESTS - Runs in parallel with all other test jobs
+  # ============================================================================
+  test-api:
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+
+    steps:
+      - name: 🔀 Checkout repository
+        uses: actions/checkout@v6
+
+      - name: 🔧 Setup Python and UV
+        uses: ./.github/actions/setup-python-uv
+        with:
+          python-version: ${{ env.PYTHON_VERSION }}
+
+      - name: 🔧 Setup Just
+        uses: ./.github/actions/setup-just
+
+      - name: 📦 Install dependencies
+        run: just install
+
+      - name: 🧪 Run api tests
+        run: just test-api
+
+      - name: 📊 Upload coverage (api)
+        if: always()
+        uses: codecov/codecov-action@v5
+        with:
+          token: ${{ secrets.CODECOV_TOKEN }}
+          slug: SimplicityGuy/discogsography
+          files: ./coverage.xml
+          flags: api
+          name: api-tests
+          fail_ci_if_error: false
+          disable_search: true
+          verbose: false
+
+  # ============================================================================
+  # CURATOR SERVICE TESTS - Runs in parallel with all other test jobs
+  # ============================================================================
+  test-curator:
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+
+    steps:
+      - name: 🔀 Checkout repository
+        uses: actions/checkout@v6
+
+      - name: 🔧 Setup Python and UV
+        uses: ./.github/actions/setup-python-uv
+        with:
+          python-version: ${{ env.PYTHON_VERSION }}
+
+      - name: 🔧 Setup Just
+        uses: ./.github/actions/setup-just
+
+      - name: 📦 Install dependencies
+        run: just install
+
+      - name: 🧪 Run curator tests
+        run: just test-curator
+
+      - name: 📊 Upload coverage (curator)
+        if: always()
+        uses: codecov/codecov-action@v5
+        with:
+          token: ${{ secrets.CODECOV_TOKEN }}
+          slug: SimplicityGuy/discogsography
+          files: ./coverage.xml
+          flags: curator
+          name: curator-tests
+          fail_ci_if_error: false
+          disable_search: true
+          verbose: false
+
   # ============================================================================
   # COMMON/SHARED LIBRARY TESTS - Runs in parallel with all other test jobs
   # ============================================================================
@@ -357,6 +433,8 @@ jobs:
   aggregate-results:
     runs-on: ubuntu-latest
     needs:
+      - test-api
+      - test-curator
       - test-common
       - test-dashboard
       - test-explore
@@ -370,6 +448,8 @@ jobs:
       - name: 📊 Check test results
         run: |
           echo "Test Results Summary:"
+          echo "  API: ${{ needs.test-api.result }}"
+          echo "  Curator: ${{ needs.test-curator.result }}"
           echo "  Common: ${{ needs.test-common.result }}"
           echo "  Dashboard: ${{ needs.test-dashboard.result }}"
           echo "  Explore: ${{ needs.test-explore.result }}"
@@ -379,7 +459,9 @@ jobs:
           echo "  Extractor: ${{ needs.test-extractor.result }}"
 
           # Check if any test job failed
-          if [[ "${{ needs.test-common.result }}" == "failure" ]] || \
+          if [[ "${{ needs.test-api.result }}" == "failure" ]] || \
+             [[ "${{ needs.test-curator.result }}" == "failure" ]] || \
+             [[ "${{ needs.test-common.result }}" == "failure" ]] || \
              [[ "${{ needs.test-dashboard.result }}" == "failure" ]] || \
              [[ "${{ needs.test-explore.result }}" == "failure" ]] || \
              [[ "${{ needs.test-graphinator.result }}" == "failure" ]] || \
 
@@ -344,6 +344,8 @@ http://localhost:8000/api/health
 
 ### Service Ports
 
+- API: 8004 (service), 8005 (health)
+- Curator: 8010 (service), 8011 (health)
 - Dashboard: 8003
 - Explore: 8006 (service), 8007 (health)
 - Neo4j: 7474 (browser), 7687 (bolt)
 
@@ -41,14 +41,16 @@ Perfect for music researchers, data scientists, developers, and music enthusiast
 
 ### ⚙️ Core Services
 
-| Service                                                       | Purpose                                | Key Technologies                       |
-| ------------------------------------------------------------- | -------------------------------------- | -------------------------------------- |
-| **[📊](docs/emoji-guide.md#service-identifiers) Dashboard**   | Real-time system monitoring            | `FastAPI`, WebSocket, reactive UI      |
-| **[🔍](docs/emoji-guide.md#service-identifiers) Explore**     | Interactive graph exploration & trends | `FastAPI`, `D3.js`, `Plotly.js`, Neo4j |
-| **[⚡](docs/emoji-guide.md#service-identifiers) Extractor**   | High-performance Rust-based extractor  | `tokio`, `quick-xml`, `lapin`          |
-| **[🔗](docs/emoji-guide.md#service-identifiers) Graphinator** | Builds Neo4j knowledge graphs          | `neo4j-driver`, graph algorithms       |
-| **[🔧](docs/emoji-guide.md#service-identifiers) Schema-Init** | One-shot database schema initialiser   | `neo4j-driver`, `psycopg3`             |
-| **[🐘](docs/emoji-guide.md#service-identifiers) Tableinator** | Creates PostgreSQL analytics tables    | `psycopg3`, JSONB, full-text search    |
+| Service                                                       | Purpose                                | Key Technologies                                  |
+| ------------------------------------------------------------- | -------------------------------------- | ------------------------------------------------- |
+| **[🔐](docs/emoji-guide.md#service-identifiers) API**         | User accounts and JWT authentication   | `FastAPI`, `psycopg3`, `redis`, Discogs OAuth 1.0 |
+| **[🗂️](docs/emoji-guide.md#service-identifiers) Curator**     | Discogs collection & wantlist sync     | `FastAPI`, `psycopg3`, `neo4j-driver`             |
+| **[📊](docs/emoji-guide.md#service-identifiers) Dashboard**   | Real-time system monitoring            | `FastAPI`, WebSocket, reactive UI                 |
+| **[🔍](docs/emoji-guide.md#service-identifiers) Explore**     | Interactive graph exploration & trends | `FastAPI`, `D3.js`, `Plotly.js`, Neo4j            |
+| **[⚡](docs/emoji-guide.md#service-identifiers) Extractor**   | High-performance Rust-based extractor  | `tokio`, `quick-xml`, `lapin`                     |
+| **[🔗](docs/emoji-guide.md#service-identifiers) Graphinator** | Builds Neo4j knowledge graphs          | `neo4j-driver`, graph algorithms                  |
+| **[🔧](docs/emoji-guide.md#service-identifiers) Schema-Init** | One-shot database schema initializer   | `neo4j-driver`, `psycopg3`                        |
+| **[🐘](docs/emoji-guide.md#service-identifiers) Tableinator** | Creates PostgreSQL analytics tables    | `psycopg3`, JSONB, full-text search               |
 
 ### 📐 System Architecture
 
@@ -65,6 +67,8 @@ graph TD
     TABLE[["🐘 Tableinator<br/>Table Builder"]]
     DASH[["📊 Dashboard<br/>Real-time Monitor<br/>WebSocket"]]
     EXPLORE[["🔍 Explore<br/>Graph Explorer<br/>Trends & Paths"]]
+    API[["🔐 API<br/>User Auth<br/>JWT & OAuth"]]
+    CURATOR[["🗂️ Curator<br/>Collection<br/>Sync"]]
 
     SCHEMA -->|0. Create Indexes & Constraints| NEO4J
     SCHEMA -->|0. Create Tables & Indexes| PG
@@ -78,6 +82,12 @@ graph TD
     EXPLORE -.->|Query Graph| NEO4J
     EXPLORE -.->|Explore Paths| NEO4J
 
+    API -.->|User Accounts| PG
+    API -.->|OAuth State| REDIS
+
+    CURATOR -.->|Sync Collections| NEO4J
+    CURATOR -.->|Sync History| PG
+
     DASH -.->|Monitor| EXT
     DASH -.->|Monitor| GRAPH
     DASH -.->|Monitor| TABLE
@@ -98,6 +108,8 @@ graph TD
     style TABLE fill:#fce4ec,stroke:#880e4f,stroke-width:2px
     style DASH fill:#fce4ec,stroke:#880e4f,stroke-width:2px
     style EXPLORE fill:#e8eaf6,stroke:#283593,stroke-width:2px
+    style API fill:#e3f2fd,stroke:#0d47a1,stroke-width:2px
+    style CURATOR fill:#fff8e1,stroke:#f57f17,stroke-width:2px
 ```
 
 ## 🌟 Key Features
@@ -124,6 +136,8 @@ open http://localhost:8003
 
 | Service           | URL                    | Default Credentials                 |
 | ----------------- | ---------------------- | ----------------------------------- |
+| 🔐 **API**        | http://localhost:8004  | Register via `/api/auth/register`   |
+| 🗂️ **Curator**    | http://localhost:8010  | JWT required (via API)              |
 | 📊 **Dashboard**  | http://localhost:8003  | None                                |
 | 🔍 **Explore**    | http://localhost:8006  | None                                |
 | 🔗 **Neo4j**      | http://localhost:7474  | `neo4j` / `discogsography`          |
 
@@ -0,0 +1,132 @@
+# syntax=docker/dockerfile:1
+
+# Build arguments
+ARG PYTHON_VERSION=3.13
+ARG UID=1000
+ARG GID=1000
+
+FROM python:${PYTHON_VERSION}-slim AS builder
+
+# Install uv
+COPY --from=ghcr.io/astral-sh/uv:0.10.4 /uv /bin/uv
+
+# Set environment for build
+ENV UV_SYSTEM_PYTHON=1 \
+    UV_CACHE_DIR=/tmp/.cache/uv \
+    UV_LINK_MODE=copy \
+    PYTHONUNBUFFERED=1 \
+    PYTHONDONTWRITEBYTECODE=1
+
+WORKDIR /app
+
+# Copy dependency files first for better caching
+COPY pyproject.toml uv.lock ./
+COPY common/pyproject.toml ./common/
+COPY api/pyproject.toml ./api/
+
+# Install dependencies and clean up
+# hadolint ignore=SC2015
+RUN --mount=type=cache,target=/tmp/.cache/uv \
+    uv sync --frozen --no-dev --extra api && \
+    # Clean up cache and test files
+    find /app/.venv -type f -name "*.pyc" -delete && \
+    find /app/.venv -type f -name "*.pyo" -delete && \
+    find /app/.venv -type d -name "__pycache__" -exec rm -rf {} + 2>/dev/null || true && \
+    find /app/.venv -type d -name ".pytest_cache" -exec rm -rf {} + 2>/dev/null || true && \
+    find /app/.venv -type d -name "tests" -exec rm -rf {} + 2>/dev/null || true && \
+    # Remove type stubs and docs
+    find /app/.venv -type d -name "*.dist-info" -exec rm -rf {}/tests {} + 2>/dev/null || true && \
+    find /app/.venv -name "py.typed" -delete 2>/dev/null || true && \
+    # Strip compiled extensions
+    find /app/.venv -name "*.so" -exec strip --strip-unneeded {} \; 2>/dev/null || true
+
+# Copy source files
+COPY common/ ./common/
+COPY api/ ./api/
+
+# Final stage
+FROM python:${PYTHON_VERSION}-slim
+
+# Build arguments for labels
+ARG BUILD_DATE
+ARG BUILD_VERSION
+ARG VCS_REF
+ARG UID=1000
+ARG GID=1000
+
+# OCI Image Spec Annotations
+# https://github.com/opencontainers/image-spec/blob/main/annotations.md
+LABEL org.opencontainers.image.title="Discogsography API" \
+      org.opencontainers.image.description="API service for user authentication and Discogs OAuth integration for Discogsography." \
+      org.opencontainers.image.authors="Robert Wlodarczyk <robert@simplicityguy.com>" \
+      org.opencontainers.image.url="https://github.com/SimplicityGuy/discogsography" \
+      org.opencontainers.image.documentation="https://github.com/SimplicityGuy/discogsography/blob/main/README.md" \
+      org.opencontainers.image.source="https://github.com/SimplicityGuy/discogsography" \
+      org.opencontainers.image.vendor="SimplicityGuy" \
+      org.opencontainers.image.licenses="MIT" \
+      org.opencontainers.image.version="${BUILD_VERSION:-0.1.0}" \
+      org.opencontainers.image.revision="${VCS_REF}" \
+      org.opencontainers.image.created="${BUILD_DATE}" \
+      org.opencontainers.image.base.name="docker.io/library/python:${PYTHON_VERSION}-slim" \
+      com.discogsography.service="api" \
+      com.discogsography.dependencies="fastapi,uvicorn,psycopg,bcrypt,pyjwt" \
+      com.discogsography.python.version="${PYTHON_VERSION}"
+
+# Install minimal runtime dependencies
+# hadolint ignore=DL3008
+RUN apt-get update && \
+    apt-get upgrade -y && \
+    apt-get install -y --no-install-recommends \
+        curl \
+        && \
+    apt-get clean && \
+    rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/*
+
+# Create user and directories with configurable UID/GID
+RUN groupadd -r -g ${GID} discogsography && \
+    useradd -r -l -u ${UID} -g discogsography -m -s /bin/bash discogsography && \
+    mkdir -p /tmp /app /logs && \
+    chown -R discogsography:discogsography /tmp /app /logs
+
+WORKDIR /app
+
+# Copy only necessary files from builder
+COPY --from=builder --chown=discogsography:discogsography /app/.venv /app/.venv
+COPY --from=builder --chown=discogsography:discogsography /app/common /app/common
+COPY --from=builder --chown=discogsography:discogsography /app/api /app/api
+
+# Create startup script
+# hadolint ignore=SC2016
+RUN printf '#!/bin/sh\nset -e\nsleep "${STARTUP_DELAY:-0}"\nexec /app/.venv/bin/python -m api.api "$@"\n' > /app/start.sh && \
+    chmod +x /app/start.sh
+
+# Health check on health port 8005
+HEALTHCHECK --interval=30s --timeout=10s --start-period=60s --retries=3 \
+    CMD curl -f http://localhost:8005/health || exit 1
+
+USER discogsography:discogsography
+
+# Environment variables
+ENV HOME=/home/discogsography \
+    PYTHONUNBUFFERED=1 \
+    PYTHONDONTWRITEBYTECODE=1 \
+    UV_SYSTEM_PYTHON=1 \
+    UV_NO_CACHE=1 \
+    PATH="/app/.venv/bin:$PATH" \
+    POSTGRES_ADDRESS="" \
+    POSTGRES_USERNAME="" \
+    POSTGRES_PASSWORD="" \
+    POSTGRES_DATABASE="" \
+    JWT_SECRET_KEY="" \
+    JWT_ALGORITHM="HS256" \
+    JWT_EXPIRE_MINUTES="30"
+
+EXPOSE 8004 8005
+
+# Declare volume for logs
+VOLUME ["/logs"]
+
+# Security: This container should be run with:
+# docker run --cap-drop=ALL --security-opt=no-new-privileges:true ...
+
+CMD ["/app/start.sh"]
Original file line number	Diff line number	Diff line change
`@@ -30,6 +30,8 @@ jobs:`
`30`	`30`	`# Define sub-projects with their properties`
`31`	`31`	`cat << "EOF" > projects.json`
`32`	`32`	`[`
	`33`	`+ {"name": "api", "use_cache": true},`
	`34`	`+ {"name": "curator", "use_cache": true},`
`33`	`35`	`{"name": "dashboard", "use_cache": true},`
`34`	`36`	`{"name": "explore", "use_cache": true},`
`35`	`37`	`{"name": "extractor", "use_cache": true},`