bugfixes

deploy/k8s/dev/configs/flink-config.yaml

@@ -2,7 +2,7 @@
 
 # ZeroMQ bind address and ports
 zmq_bind_address: "tcp://*"
-zmq_ingestor_work_queue_port: 5555
+zmq_ingestor_work_queue_port: 5567
 zmq_market_data_pub_port: 5558
 
 # Notification endpoints

deploy/k8s/prod/configs/flink-config.yaml

@@ -2,7 +2,7 @@
 
 # ZeroMQ bind address and ports
 zmq_bind_address: "tcp://*"
-zmq_ingestor_work_queue_port: 5555
+zmq_ingestor_work_queue_port: 5567
 zmq_market_data_pub_port: 5558
 
 # Notification endpoints (internal Flink task manager → job manager path)

deploy/k8s/prod/configs/gateway-config.yaml

@@ -21,6 +21,30 @@ data:
       model_provider: deepinfra
       model: zai-org/GLM-5
 
+    # License tier model configuration
+    license_models:
+      # Free tier models
+      free:
+        default: zai-org/GLM-5
+        cost_optimized: zai-org/GLM-5
+        complex: zai-org/GLM-5
+        allowed_models:
+          - zai-org/GLM-5
+
+      # Pro tier models
+      pro:
+        default: zai-org/GLM-5
+        cost_optimized: zai-org/GLM-5
+        complex: zai-org/GLM-5
+        blocked_models:
+          - Qwen/Qwen3-235B-A22B-Instruct-2507
+
+      # Enterprise tier models
+      enterprise:
+        default: zai-org/GLM-5
+        cost_optimized: zai-org/GLM-5
+        complex: Qwen/Qwen3-235B-A22B-Instruct-2507
+
     # Kubernetes configuration
     kubernetes:
       namespace: sandbox
@@ -40,10 +64,17 @@ data:
       url: http://qdrant:6333
       collection: gateway_memory
 
+    # Agent configuration
+    agent:
+      # Number of prior conversation turns loaded as LLM context and flushed to Iceberg at session end
+      conversation_history_limit: 20
+
     # Iceberg (for durable storage via REST catalog)
     iceberg:
       catalog_uri: http://iceberg-catalog:8181
       namespace: gateway
+      ohlc_catalog_uri: http://iceberg-catalog:8181
+      ohlc_namespace: trading
       s3_endpoint: http://minio:9000
       conversations_bucket: warehouse
 

deploy/k8s/prod/configs/ingestor-config.yaml

@@ -10,12 +10,25 @@ supported_exchanges:
   - COINBASE
   - KRAKEN
 
+# Per-exchange work slot capacity.
+# Each slot is one concurrent job. historical_slots limits parallel OHLC fetches;
+# realtime_slots limits concurrent tick subscriptions.
+exchange_capacity:
+  BINANCE:
+    historical_slots: 1
+    realtime_slots: 5
+  COINBASE:
+    historical_slots: 1
+    realtime_slots: 4
+  KRAKEN:
+    historical_slots: 1
+    realtime_slots: 3
+
 # Kafka configuration
 kafka_brokers:
   - kafka:9092
 
 # Worker configuration
-max_concurrent: 10
 poll_interval_ms: 10000
 
 # Logging

deploy/k8s/prod/kustomization.yaml

@@ -15,9 +15,8 @@ resources:
   - infrastructure.yaml
   # Sandbox namespace resources (go to sandbox namespace, not ai)
   - sandbox-config.yaml
-  # gateway-config ConfigMap is intentionally excluded from kustomize.
-  # It contains an op:// reference for the DB password. Apply via:
-  #   bin/config-update prod gateway-config
+  # gateway-config ConfigMap (database URL is in secrets, not here)
+  - configs/gateway-config.yaml
 
 patches:
   - path: patch-gateway-rbac-subject.yaml