5 Commits

Include renames

Author	SHA1	Message	Date
Admin Bot	1e17706367	feat(sessions): SandboxFleet integration — fleet controller primary, SandboxManager fallback ... FleetClient calls tool-definition-controller:8788 /sessions/{id}/assign as the primary sandbox create path. Falls back to direct k8s SandboxManager if fleet controller is unreachable. handleSandboxCreate: 1. fleet.Assign() → podSvcDns from pre-warmed fleet pod (fast, no wait) 2. fallback: sandbox.CreateOrResume() → dedicated pod (slow, 30s wait) handleSandboxDelete: fleet.Release() + sandbox.Delete() both run (non-fatal). updateSandboxSummary: extracted helper, updates session memory_entity with pod_name / svc_dns / last_active_at. NetworkPolicy: added port 8788 to poimen egress (fleet controller REST API). Response adds fleet:true field when served by fleet.	2026-09-29 16:10:43 +08:00
Admin Bot	16ddd6d4ad	feat(sessions): sandbox resource — per-session k8s Pod+PVC+Service (§4.15.4) ... New X-Resource: sandbox on X-Service: sessions POST ?session_id= → CreateOrResume 1. Ensure PVC workspace-session-<id> (Longhorn 1Gi) 2. If pod already Running → return DNS (resume path, idempotent) 3. Ensure pi-session-sandbox NetworkPolicy (shared, created once) 4. Create Pod pi-session-<id> + Service pi-session-<id>:8787 5. Wait up to 30s for Pod Ready 6. Fire-and-forget: merge pod_name/pvc_name/svc_dns/last_active_at into session memory_entity summary DELETE ?session_id= → delete Pod + Service + PVC Idle reaper goroutine (5min interval, configurable via SANDBOX_REAPER_INTERVAL_MINUTES): lists pi-session-* pods, deletes Succeeded/Failed ones, preserves PVCs for resume. Security: runAsNonRoot/1000, readOnlyRootFilesystem, drop ALL caps, RuntimeDefault seccomp, automountServiceAccountToken:false. Resources: 500m/512Mi req, 1/1Gi limit. NetworkPolicy: egress → DNS + api:8080 only; ingress ← poimen-frontend. RBAC: Role session-sandbox-manager + RoleBinding in poimen ns. 7 unit tests — all pass (mock k8s server). Image: forgejo.riotpiao.com/riotpiao-poimen/poimen-pi-session-runtime:latest	2026-09-28 19:53:37 +08:00
Admin Bot	bb7a490f5c	fix(sessions): use entities query for list — hybridSearch requires project arg ... hybridSearch mandates a project scope, but sessions scatter across per-session projects (session-<uuid>). The entities query accepts optional project — omit it to list SESSION entities across all projects. Also adds projectId to the list response so callers can scope follow-up queries to the right session project. Fixes: GET X-Service:sessions X-Resource:sessions returning 502	2026-09-28 18:43:00 +08:00
rockandAdmin Bot	50bcd19634	feat(sessions): switch writes to GraphQL upsertEntity mutation (#53) ... Closes #52 ## Summary Migrates all session/milestone writes from REST `/memory/ingest` to GraphQL `upsertEntity` mutation — direct, typed, no LLM extraction lag. ## Changes - **Removed**: `memoryURL` field, `defaultMemoryURL` const, `ingest()` REST helper, `"io"` import - **Added**: `upsertEntity()` GraphQL mutation helper - **Added**: `fetchEntitySummary()` helper — reads current entity before patch for read-modify-write - **handlePatch**: now fetches current summary, merges patch fields, re-upserts full blob — no data loss on partial updates - **handleCreate / handleCreateMilestone**: `json.Marshal` error now returns 500 instead of silently ignoring - 29 tests pass, 85.4% coverage ## Mutation used ```graphql mutation { upsertEntity(input: { project: "session-<uuid>" name: "<sessionID | milestoneID>" entityType: SESSION | MILESTONE summary: "{...json blob...}" }) { id created } } ``` ## Single upstream All reads and writes now go through `graphqlURL` (poimen-graphql:8090). `MEMORY_UPSTREAM_URL` env var no longer read by this adapter. --------- Co-authored-by: Admin Bot <[email protected]> Reviewed-on: #53	2026-09-28 02:24:11 +00:00
rockandAdmin Bot	a24e4f7174	feat(sessions): SessionAdapter — REST CRUD for sessions/milestones/episodes (#51) ... Closes #50 ## Changes - `internal/sessions/handler.go` — new Handler; 7 endpoints dispatched via `X-Upstream-Path`; writes to `poimen-memory` via `/memory/ingest`; reads from `poimen-graphql` via GraphQL `hybridSearch`/`entity` - `internal/serviceadapter/session_adapter.go` — `NewSessionAdapter()` + `GetSessionSpec()` with 5 resources - `cmd/gateway/main.go` — register sessions adapter after memory adapter - `internal/serviceadapter/adapters.go` — add `sessions` case to factory - `internal/sessions/handler_test.go` — 30 tests, all pass ## Design - `X-Service: sessions` + `X-Resource: <sessions|session|milestones|episodes|episode>` - IDs via query params (`?session_id=`, `?episode_id=`) — dispatcher does not substitute path params - `episode_id = sha256(session_id+milestone_id+attempt)` per §4.14 Q6 - Content JSON-encoded (injection-safe) - `tracing.NewTransport` wired for cross-service trace propagation - GraphQL `errors` array detected, surfaced as 502 - limit capped at 200 --------- Co-authored-by: Admin Bot <[email protected]> Reviewed-on: #51	2026-09-28 01:53:20 +00:00