From ba708bd28f4ae0311f5e09c5eb16e790025703fa Mon Sep 17 00:00:00 2001
From: Manish Kumar <mandecent.gupta@gmail.com>
Date: Sun, 9 Aug 2026 19:54:40 -0500
Subject: [PATCH] feat(compose): wire interaction-worker (PR-B4)

Adds the interaction-worker service, mirroring the established
security-audit-worker/billing-worker precedent in this file exactly
(build: Dockerfile.worker, restart: on-failure, depends_on mysql/redis
service_healthy) -- no ghcr.io image published for it today, same gap
those two services' own PR-B0/billing reports already flagged.

Reuses auth-service's own DB_*/REDIS_URL values verbatim: the worker
writes to the same `omnibioai` database auth-service itself uses
(the `interactions` table PR-B2 created there), not a separate
database.

See omnibioai-auth's feature/pr-b4-interaction-consumer branch for the
worker implementation this wires up.
---
 docker-compose.yml | 27 +++++++++++++++++++++++++++
 1 file changed, 27 insertions(+)

diff --git a/docker-compose.yml b/docker-compose.yml
index b7d3293..2804014 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -870,6 +870,33 @@ services:
         condition: service_healthy
     restart: on-failure
 
+  # PR-B4: drains interactions:events (published by auth-service's own
+  # interaction_service.publish_interaction, and by rag's PR-B3 producer)
+  # into auth-service's own `interactions` table via persist_interaction.
+  # Same shape as security-audit-worker below (build:, not image: -- no
+  # ghcr.io/omnibioai/omnibioai-auth-worker image is published by CI
+  # today, identical gap to that service's own PR-B0 report) and reuses
+  # auth-service's own DB_*/REDIS_URL values verbatim: it writes to the
+  # same `omnibioai` database auth-service itself uses, not a separate one.
+  interaction-worker:
+    build:
+      context: ${MACHINE_DIR}/omnibioai-auth
+      dockerfile: Dockerfile.worker
+    restart: on-failure
+    environment:
+      PYTHONUNBUFFERED: "1"
+      DB_HOST: mysql
+      DB_PORT: "3306"
+      DB_NAME: omnibioai
+      DB_USER: root
+      DB_PASSWORD: ${MYSQL_ROOT_PASSWORD:-omnibioai}
+      SECRET_KEY: ${AUTH_SECRET_KEY:-change-me}
+      REDIS_URL: redis://redis:6379
+    depends_on:
+      mysql:
+        condition: service_healthy
+      redis:
+        condition: service_healthy
 
   policy-engine:
     build: