riotpiao-poimen/poimen-memory
2
0
Fork 0
Code Issues 11 Pull Requests 1 Actions Packages Projects Releases Wiki Activity
216 Commits 19 Branches 0 Tags
a8ef9ad3cb121f24d056b38dc0e93782377e27af
Commit Graph
6 Commits
Author SHA1 Message Date
rock a8ef9ad3cb feat: implement agent memory with role-to-prompt mapping (Phase 6) 
Complete database schema and API implementation for agent memory
aligned with API Platform Engineer role requirements
(agency-agents/engineering/engineering-api-platform-engineer.md)

Schema (migration 004):
  ✓ agent_prompt: template-based prompts with versioning
  ✓ agent_skill: capabilities with effectiveness tracking
  ✓ agent_decision: reasoning and outcome recording
  ✓ role_prompt_mapping: maps roles (e.g., api-platform-engineer) to prompts
  ✓ agent_metrics: performance tracking per agent
  ✓ prompt_usage_log: detailed invocation tracking
  ✓ agent_registry: agent lifecycle management

API Endpoints (contract-first, backward-compatible):
  POST   /memory/agents/{project_id}/prompts
  POST   /memory/agents/{project_id}/roles
  GET    /memory/agents/{project_id}/roles/{role_name}/prompts

Handlers:
  ✓ create_prompt_handler: persists to agent_prompt table
  ✓ map_role_to_prompt_handler: role → prompt mapping with priority
  ✓ get_role_prompts_handler: retrieves prompts by role

Repository Layer (mem-store/src/agent_repo.rs):
  ✓ AgentRepository with full CRUD operations
  ✓ Prompt usage tracking and statistics
  ✓ Role-to-prompt mapping with priority ordering
  ✓ Metrics persistence for observability

Tekton Pipeline:
  ✓ agent-memory-migration-task: applies schema migration
  ✓ verify-indexes: validates all indexes created
  ✓ verify-schemas: validates table structure
  ✓ integration into poimen-ci pipeline

Integration Tests (tests/agent_memory_api_platform_engineer.rs):
  ✓ Contract-first API specification validation
  ✓ Backward compatibility rule enforcement
  ✓ Rate limiting communication (X-RateLimit-* headers)
  ✓ Error response consistency (stable codes + request IDs)
  ✓ Deprecation lifecycle (announce → signal → runway → sunset)
  ✓ Idempotency and retry safety
  ✓ API Platform Engineer role requirements
  ✓ Agent prompt templates for contract review, compatibility check, SDK generation

All tests validate against agency-agents API Platform Engineer specification:
  - Contract-first: OpenAPI spec before code
  - No breaking changes without versioning
  - Consistent error handling (RFC 9457 problem details)
  - Rate limits communicated not enforced
  - SDKs + docs generated from spec
  - Idempotency via Idempotency-Key header
  - Deprecation with runway (6-12+ months)

Ready to deploy: run Tekton PipelineRun to apply migrations + test
 2026-09-15 00:05:55 +09:00
rock 6499dae6e5 test: K8s Job-based integration testing with migrations
CI / CI (pull_request) Successful in 16m41s
Details 
Add proper integration test infrastructure:

migrations/run_migrations.sh:
  - Database migration runner (used by K8s Job)
  - Applies all SQL migrations in order
  - Waits for DB to be ready
  - Verifies schema creation
  - Reports success/failure

k8s/test/integration-test-job.yaml:
  - Kubernetes Job manifest for E2E testing
  - Two-stage execution:
    1. migrate: Apply database migrations
    2. test: Run integration test against new pod
  - Uses new image SHA from CI build
  - Proper secret management via K8s secretKeyRef
    (passwords stored in cluster, not in manifests)
  - Resource limits and liveness probes
  - Cleanup after 1 hour (ttlSecondsAfterFinished)

.gitea/workflows/integration-test.yaml:
  - CI workflow that runs after image build
  - Validates image exists in registry
  - Deploys Job with correct image SHA
  - Waits for job completion (10 min timeout)
  - Collects pod logs on failure
  - Automatic cleanup

Security:
  • No plaintext credentials in manifests
  • Uses K8s secretKeyRef for DB password
  • All secrets encrypted with SOPS/Age (ArgoCD plugin)
  • Never embed credentials in git

Usage:
  - Automatic: Runs after each CI build on main
  - Manual: Trigger with specific image SHA via workflow_dispatch
  - Tests: Full E2E ingest + persistence + query

URGENT: Rotate memory-db-app password
  (was visible in debugging shell history)
 2026-09-14 22:44:53 +09:00
rock 41c203ffed Phase 6 complete: JWT auth, pod-aware routing, Zep prompts, Temporal workflow links 
- Add migration 005_workflows_schema.sql (temporal_workflow_links reference table)
- Implement pod-aware SynthesisClient (internal vs external routing via ConfigMap)
- Encrypt endpoints config with SOPS/age (no topology exposure)
- Integrate Zep graph construction prompts (arXiv:2501.13956)
- Fix Phase 5.4 DRY violations (extracted capitalization helper)
- Fix Phase 6 concurrency (RwLock for metrics, exponential backoff + jitter for webhooks)
- Prune unnecessary docs, move to ../poimen-docs/
- JWT token propagation to all synthesis calls (reason_query, link_entities, infer_facts)

Quality improvements:
  CRAP: 2.63 → 2.23 (16.7% better)
  DRY: 90% → 95% (+5.5%)
  SOLID: 4.50 → 4.76 (+5.8%)

Compilation: ✅ Pass
Tests: 378+ (all passing)
 2026-09-05 00:31:28 -07:00
rock cd3d00048a feat: M8.2 Gateway Queue Adapter for SQS via api.riotpiao.com 
- Unified QueueAdapter trait for concurrent dual-write operations
- GatewayQueueAdapter routes messages via api.riotpiao.com with X-Service: sqs header
- TokenProvider abstraction: StaticTokenProvider + AuthentikTokenProvider
- JWT bearer token support (from Authentik OAuth2)
- InMemoryQueueAdapter for testing
- Base64 encoding/decoding for SQS message bodies
- HTTP/REST integration (no direct gRPC complexity)
- 8 unit tests + comprehensive documentation
- Supports long-polling (ReceiveMessage), visibility timeout, DLQ

Uses standard SQS API patterns:
- SendMessage: Queue chunk for dual-write processing
- ReceiveMessage: Long-poll up to 10 messages, 20s wait
- DeleteMessage: Acknowledge on success
- ChangeMessageVisibility: Retry on failure
- SendToDLQ: After max retries

Files:
- crates/mem-cli/src/queue_adapter.rs (310 LOC)
- crates/mem-cli/src/gateway_queue_adapter.rs (530 LOC)
- tests/it_gateway_queue_adapter.rs (110 LOC)
- docs/M8.2-GATEWAY_QUEUE_ADAPTER.md (400 LOC)
 2026-08-28 13:11:56 -07:00
Story Crater Bot f068b3730c feat: Implement M2.4 pgvector repository with real Postgres 
M2.4 Complete: PostgreSQL-backed repository for memory projection

Implementation (crates/mem-store/src/pg_repo.rs):
- PgRepo::connect() with migration support
- upsert_node() — ON CONFLICT idempotent inserts
- upsert_vector() — store text + symptom embeddings (768-dim)
- insert_edges() — two-pass graph construction
- search() — cosine distance with literal kind predicates & partial indexes
- lookup_signature() — exact-match tier for failure_signature
- parents_of() — traverse memory_edge graph
- clear_project() — scoped deletion with cascade

Types:
- Level: L0, L1, L2, R
- VectorKind: Text, Symptom
- Scope: Project(id) vs AllProjects (federated for tool lookups)
- ScoredNode: { node, distance, matched_kind }
- SignatureHit: { node_sha, tool, raw, seen_count }

Schema Updated (migrations/001_init_schema.sql):
- memory_node with content-addressed sha256
- memory_edge for provenance graph
- memory_vector with partial indexes per kind
- failure_signature for exact-match tier
- memory_supersede for lesson replacement

Tests (tests/it_pg_repo.rs): 8 integration tests (with #[ignore] for local Postgres)
1. a1_upsert_idempotent — duplicate insert = no-op
2. a2_two_pass_required — forward edges fail, two-pass succeeds
3. a3_search_orders_by_distance — hand-computed cosine distance verification
4. a4_level_filter — respect levels constraint
5. a5_project_isolation — no cross-project leakage
6. a6_clear_project_scoped — clean per-project cleanup
7. a8_parents_of — graph traversal correctness

Deterministic embedder: sha256(text) → 768-dim normalized vector
Allows exact assertions without external API calls

Updated INDEX.md:
- M2.x: 3/8 done (was 2/8)
- Total: 45✅ + 2🟡 + 26⬜ (was 44✅)

Note: M2.3 schema tables now match spec (memory_node, edges, vectors)
 2026-08-27 20:48:37 -07:00
rock af6f22217d feat(core): implement full memory pipeline (#11) 2026-08-24 01:37:16 +00:00