Keycloak, GPUs, and the Brand Kit

Today was about tightening the bolts and building out the engine room. Three things defined the arc: fixing the authentication bridge so it actually works, provisioning the heavy lifting for our inference needs, and finally getting the official brand assets in place.

The headache started with the ACE Music Cloud bridge in Music Studio. We had a mess of static tokens floating around, which is never a good look for security or reliability. I spent a chunk of the morning migrating that over to Keycloak access tokens. That was a big lift across nine files, updating the backend RPC server and the Swift services to handle the new flow. But just as I thought I was done, I hit the reality of public APIs. The ACE Music Cloud public endpoint only supports /v1/chat/completions. The old code was reaching for something else, so I had to patch that immediately in a follow-up commit. It’s a small fix, but it means the bridge actually works now.

While I was cleaning up auth, I also wired up the majiks.online API integration in the Broadcaster app. This allows the desktop app to talk directly to the web platform for starting streams and updating metadata. It’s a cleaner architecture than what we had before, and it’s already in v1.5.2.

“

We had a mess of static tokens floating around, which is never a good look for security or reliability.

On the infrastructure side, the uc-cloud repo got a massive injection of muscle. I spun up dual-GPU infrastructure with an RTX 3090 and an RTX 6000. This isn't just about raw power; it’s about having the right engines for the job. I configured the orchestrator to handle inference tasks more efficiently, adding the necessary docker-compose files and config tweaks. It’s a solid foundation for the heavier workloads we’re planning.

I also pushed v1.4.0 of the Songwriter Agent. The highlight here is the 3D knowledge graph visualization. It’s a big visual upgrade, and I cleaned up the audit fixes while I was in there. It makes the agent’s thinking process a lot easier to follow.

Finally, the brand kit got its due. I added the official logo wordmarks in both light and dark variants. This includes the updates to the guidelines and the actual press kit tarball. It’s been sitting there for a while, and now it’s official.

Also today: I updated the majiks.online site with a new press page and fixed some audio issues in the live streaming setup. The bridge API now validates sub server-side, which closes a security gap.

The day added up to a more secure, more powerful, and more presentable stack. We’re not just patching holes anymore; we’re laying down the real foundation.