2025-10-24 - 2026-10-24
Overview
2 Releases published by 1 user
Published
v0.1.0
Published
v0.0.0
38 Pull requests merged by 2 users
Merged
#66 fix(proxy): admission-control review fixes missing from the #65 merge
Merged
#65 feat(proxy): engine-wide LLM admission control via vLLM gauges
Merged
#63 fix(proxy): wire LLM latency metrics into the streaming response path
Merged
#62 fix(netpol): allow Prometheus scrape of gateway /metrics
Merged
#61 feat(sessions): SandboxFleet integration — fleet primary, k8s fallback
Merged
#60 feat(sessions): sandbox resource — per-session k8s Pod+PVC+Service (§4.15.4)
Merged
#59 fix(sessions): use entities query for list (hybridSearch requires project)
Merged
#58 fix(netpol): add poimen:8090+6379 egress for sessions adapter
Merged
#57 fix(test): update TestPromote_KustomizeSuccess for kustomize patch path
Merged
#56 fix(promoter): correct Forgejo registry service hostname
Merged
#55 feat(webhook): Forgejo package webhook → ArgoCD image promotion
Merged
#53 feat(sessions): switch writes to GraphQL upsertEntity mutation
Merged
#51 feat(sessions): SessionAdapter — REST CRUD for sessions/milestones/episodes
Merged
#48 fix(netpol): allow api-gateway egress to notifications:80 (Gotify)
Merged
#47 feat(cag): CAG integration — memory adapter, warmup semaphore, cache-aware routing
Merged
#42 fix: use query params for workflow_id in Poimen endpoints
Merged
#41 ci: skip canary deploy, kubeconfig, and k8s promotion (RBAC not ready)
Merged
#39 ci: skip canary deploy + integration tests (RBAC not ready)
Merged
#38 fix(ci): use namespace-scoped kubeconfig check, guard empty pod name
Merged
#37 feat: Poimen AI orchestrator API (Stream A: #31, #32, #33, #34)
Merged
#36 feat: add SSE streaming endpoint for workflow events
Merged
#30 fix(ci): relax namespace validation test + add webhook endpoint test
Merged
#29 feat(webhook): Forgejo → Gotify notification bridge
Merged
#28 Add TTFT & ITL Metrics for LLM Inference
Merged
#26 feat(network): SSE optimization for local LLM streaming (#31 #32 #33)
Merged
#25 feat: add Tekton Pipelines for integration testing
Merged
#22 fix: gateway authentik port from 80 to 9000
Merged
#21 feat(audit): log successful JWT auth with subject, acting_party, roles
Merged
#20 feat: route qwen2.5:3b-instruct to CPU service
Merged
#19 feat(proxy): add /auth/exchange token exchange endpoint
Merged
#18 feat(proxy): add /auth/token and /auth/refresh endpoints
Merged
#17 feat(config): add tokenUrl, clientId, clientSecret to auth config
Merged
#16 feat(serviceadapter): enforce JWT auth on X-Service dispatch
Merged
#15 feat(identity): inject X-Forwarded-User headers after JWT validation
Merged
#14 fix(s3): correct MinIO service port and allow egress
Merged
#4 ci: unified workflow - single job, DOCKER_HOST, build+push on all events
Merged
#2 fix: use env vars for docker registry credentials
Merged
#1 fix: accept multi-issuer JWTs from any Authentik provider
21 Issues closed from 2 users
Closed
#64 CAG-4: cluster-wide LLM admission control + gateway CPU/GOMAXPROCS tuning
Closed
#54 feat(webhook): Forgejo package webhook → ArgoCD image promotion
Closed
#52 feat(sessions): use GraphQL upsertEntity mutation for structured writes
Closed
#50 feat: sessions service adapter — REST CRUD for sessions/milestones/episodes
Closed
#43 Test Issue
Closed
#45 CAG-2: vLLM-aware request routing — warmup delay + per-backend concurrency semaphore
Closed
#46 CAG-3: Cache-aware routing (rendezvous hash) + prefix cache hit logging
Closed
#44 CAG-1: Register memory service standing-context resource in ServiceAdapter
Closed
#34 Wire Poimen-specific workflow types to Temporal
Closed
#32 Add typed Poimen REST endpoints (/v1/poimen/*)
Closed
#31 Clean up dead Temporal operations.go stubs
Closed
#33 Add SSE streaming endpoint for workflow events
Closed
#13 P3.9: End-to-end integration test — user login through token exchange to downstream
Closed
#12 P3.8: Audit NetworkPolicy — downstream services must only accept gateway traffic
Closed
#11 P3.7: Wire auth config (tokenUrl, clientId, clientSecret) into gateway deployment
Closed
#10 P3.6: Enforce JWT auth on X-Service adapter dispatch
Closed
#9 P3.5: Implement RFC 8693 OAuth2 Token Exchange endpoint
Closed
#8 P3.4: Inject X-Forwarded-User identity headers after JWT validation
Closed
#7 P3.3: Add /auth/refresh endpoint (token renewal)
Closed
#6 P3.2: Enable password grant on local-llm Authentik provider
Closed
#5 P3.1: Add /auth/token endpoint (password grant proxy)
22 Issues created by 1 user
Opened
#5 P3.1: Add /auth/token endpoint (password grant proxy)
Opened
#6 P3.2: Enable password grant on local-llm Authentik provider
Opened
#7 P3.3: Add /auth/refresh endpoint (token renewal)
Opened
#8 P3.4: Inject X-Forwarded-User identity headers after JWT validation
Opened
#9 P3.5: Implement RFC 8693 OAuth2 Token Exchange endpoint
Opened
#10 P3.6: Enforce JWT auth on X-Service adapter dispatch
Opened
#11 P3.7: Wire auth config (tokenUrl, clientId, clientSecret) into gateway deployment
Opened
#12 P3.8: Audit NetworkPolicy — downstream services must only accept gateway traffic
Opened
#13 P3.9: End-to-end integration test — user login through token exchange to downstream
Opened
#31 Clean up dead Temporal operations.go stubs
Opened
#32 Add typed Poimen REST endpoints (/v1/poimen/*)
Opened
#33 Add SSE streaming endpoint for workflow events
Opened
#34 Wire Poimen-specific workflow types to Temporal
Opened
#43 Test Issue
Opened
#44 CAG-1: Register memory service standing-context resource in ServiceAdapter
Opened
#45 CAG-2: vLLM-aware request routing — warmup delay + per-backend concurrency semaphore
Opened
#46 CAG-3: Cache-aware routing (rendezvous hash) + prefix cache hit logging
Opened
#49 Gotify webhook integration test
Opened
#50 feat: sessions service adapter — REST CRUD for sessions/milestones/episodes
Opened
#52 feat(sessions): use GraphQL upsertEntity mutation for structured writes
Opened
#54 feat(webhook): Forgejo package webhook → ArgoCD image promotion
Opened
#64 CAG-4: cluster-wide LLM admission control + gateway CPU/GOMAXPROCS tuning