SDD Orchestrator Runtime Architecture

SDD Orchestrator Runtime Architecture An architecture diagram generated by Archify. Host Agent · any MCP client · Architecture component Host Agent any MCP client MCP Transport · HTTP + stdio · SDD Orchestrator process (trusted) MCP Transport HTTP + stdio MCP Server & Tools · 8 registered tools · SDD Orchestrator process (trusted) MCP Server & Tools 8 registered tools Service Layer · routing + gates · SDD Orchestrator process (trusted) Service Layer routing + gates Context Assembler · retrieval + budget · SDD Orchestrator process (trusted) Context Assembler retrieval + budget PostgreSQL + pgvector · the app's own DB · Server's own private database PostgreSQL + pgvector the app's own DB Embedding Provider · pluggable · SDD Orchestrator process (trusted) Embedding Provider pluggable Voyage AI · cloud embeddings · Architecture component Voyage AI cloud embeddings Ollama · local, optional · Architecture component Ollama local, optional Operator · runs sdd-admin · Operator / administrative plane Operator runs sdd-admin sdd-admin CLI · ingest, app, reindex · Operator / administrative plane sdd-admin CLI ingest, app, reindex connect dispatch invoke assemble persist embed query HTTPS optional ingest migrate + write SDD Orchestrator process (trusted) Operator / administrative plane Server's own private database Legend Backend Database Security External

Primary Path

  • • Postgres holds features, packs, knowledge, and pgvector embeddings
  • • get_context/start_feature assemble a pack inside one DB transaction, embedding the query mid-transaction
  • • A 30s embedding timeout bounds how long the connection is held (docs/operations.md)

MCP & Knowledge

  • • 9 tools: route_task, start_feature, get_context, advance_phase, get_feature_status, list_features, search_memory, propose_memory, record_commit
  • • HTTP builds a fresh McpServer per request (sessions not resumable); stdio is single-session
  • • Packs (bmad, openspec, spec-kit, kiro, sdlc, stack-guides…) load via sdd-admin ingest

Trust Boundaries

  • • HTTP enforces DNS-rebinding protection and SDD_ALLOWED_HOSTS at the edge
  • • Embedding provider (voyage/ollama/fake) is pinned per index; a mismatch throws
  • • sdd-admin runs migrations and needs DDL rights — a more privileged DB role than the server's