API Events

Licensing has no asynchronous messaging surface. Application.configureComponents() registers only a Redis cache (useCacheRedis). There is no Kafka producer/consumer, no BullMQ queue, and no WebSocket emitter. The @platformatic/kafka and bullmq dependencies in package.json are unused.

1. Inbound - Kafka

Topic	Producer	Handler	Idempotency Key	Failure Mode
None	-	-	-	-

2. Outbound - Kafka

Topic	Trigger	Consumers	Payload Schema
None	-	-	-

3. Inbound - BullMQ

Queue	Job Type	Producer	Handler	Concurrency
None	-	-	-	-

4. Outbound - BullMQ

Queue	Job Type	Trigger	Consumer Service
None	-	-	-

5. WebSocket Emissions

Topic	Room	Trigger	Action Enum
None	-	-	-

6. Payload Schemas

The only cross-service payload is the license certificate written to Redis. It is not a message-bus event - it is a key the consumer pulls on demand via @nx/core's LicenseMiddleware.

Redis certificate channel

Aspect	Value
Producer	LicensingBaseService.publishCertificate() - redis.client.set(key, cert, 'EX', certTtl)
Consumer	@nx/core LicenseProvider (a.k.a. LicenseMiddleware) - redis.client.get(key)
Key	lic:certs:<entityType>:<entityId> (e.g. lic:certs:Merchant:123)
Value	Base64 string envelope (AES-256-GCM payload + Ed25519 signature)
TTL	APP_ENV_LICENSING_CERT_TTL_SECONDS (default 86400)

// Decrypted certificate payload - ILicenseCertificatePayload (@nx/core)
export interface ILicenseCertificatePayload<FeaturesType = Record<string, unknown>> {
  license: { id: string; key: string };
  entity: { type: string; id: string };
  status: string;             // LicenseStatuses
  tier: string;               // policy.type (PolicyTypes)
  features: FeaturesType;      // resolved PolicyFeature map (with override merge)
  activation: { limit: number } | null;
  expiresAt: string | null;
  issuedAt: string;
  certExpiresAt: string;       // independent of license.expiresAt - drives Redis EX
}

// On-the-wire envelope - ICertificateEnvelope (@nx/core)
export interface ICertificateEnvelope {
  enc: string;  // AES-256-GCM ciphertext of JSON payload
  sig: string;  // Ed25519 signature (base64url) over "MESSAGE_PREFIX:enc"
  alg: string;  // "aes-256-gcm+ed25519"
}

7. Idempotency & Ordering

Surface	Delivery	Ordering	Recovery
Redis certificate	last-write-wins (single key per entity)	n/a (latest state only)	Re-published on every lifecycle mutation; expires after TTL → consumer sees null (fail-open) until re-issued

When the cert is missing or fails verification, LicenseMiddleware is fail-open: it sets the license context to null (treated as "unknown", not "unlicensed").

8. Related Pages

• Integration - the trust seam with @nx/core
• Certificate System - signing/verification detail
• Architecture - Runtime Scenarios