2 Commits

Include renames

Author	SHA1	Message	Date
Admin Bot	16ddd6d4ad	feat(sessions): sandbox resource — per-session k8s Pod+PVC+Service (§4.15.4) ... New X-Resource: sandbox on X-Service: sessions POST ?session_id= → CreateOrResume 1. Ensure PVC workspace-session-<id> (Longhorn 1Gi) 2. If pod already Running → return DNS (resume path, idempotent) 3. Ensure pi-session-sandbox NetworkPolicy (shared, created once) 4. Create Pod pi-session-<id> + Service pi-session-<id>:8787 5. Wait up to 30s for Pod Ready 6. Fire-and-forget: merge pod_name/pvc_name/svc_dns/last_active_at into session memory_entity summary DELETE ?session_id= → delete Pod + Service + PVC Idle reaper goroutine (5min interval, configurable via SANDBOX_REAPER_INTERVAL_MINUTES): lists pi-session-* pods, deletes Succeeded/Failed ones, preserves PVCs for resume. Security: runAsNonRoot/1000, readOnlyRootFilesystem, drop ALL caps, RuntimeDefault seccomp, automountServiceAccountToken:false. Resources: 500m/512Mi req, 1/1Gi limit. NetworkPolicy: egress → DNS + api:8080 only; ingress ← poimen-frontend. RBAC: Role session-sandbox-manager + RoleBinding in poimen ns. 7 unit tests — all pass (mock k8s server). Image: forgejo.riotpiao.com/riotpiao-poimen/poimen-pi-session-runtime:latest	2026-09-28 19:53:37 +08:00
rockandAdmin Bot	a24e4f7174	feat(sessions): SessionAdapter — REST CRUD for sessions/milestones/episodes (#51) ... Closes #50 ## Changes - `internal/sessions/handler.go` — new Handler; 7 endpoints dispatched via `X-Upstream-Path`; writes to `poimen-memory` via `/memory/ingest`; reads from `poimen-graphql` via GraphQL `hybridSearch`/`entity` - `internal/serviceadapter/session_adapter.go` — `NewSessionAdapter()` + `GetSessionSpec()` with 5 resources - `cmd/gateway/main.go` — register sessions adapter after memory adapter - `internal/serviceadapter/adapters.go` — add `sessions` case to factory - `internal/sessions/handler_test.go` — 30 tests, all pass ## Design - `X-Service: sessions` + `X-Resource: <sessions|session|milestones|episodes|episode>` - IDs via query params (`?session_id=`, `?episode_id=`) — dispatcher does not substitute path params - `episode_id = sha256(session_id+milestone_id+attempt)` per §4.14 Q6 - Content JSON-encoded (injection-safe) - `tracing.NewTransport` wired for cross-service trace propagation - GraphQL `errors` array detected, surfaced as 502 - limit capped at 200 --------- Co-authored-by: Admin Bot <[email protected]> Reviewed-on: #51	2026-09-28 01:53:20 +00:00