rock/poimen-memory
1
0
Fork 0
Code Issues Pull Requests Actions 3 Packages Projects Releases Wiki Activity
157 Commits 8 Branches 0 Tags
2448e5ebe2fd34ae0285f75b669fda1a87111dc0
Commit Graph
7 Commits
Author SHA1 Message Date
rock cd3d00048a feat: M8.2 Gateway Queue Adapter for SQS via api.riotpiao.com 
- Unified QueueAdapter trait for concurrent dual-write operations
- GatewayQueueAdapter routes messages via api.riotpiao.com with X-Service: sqs header
- TokenProvider abstraction: StaticTokenProvider + AuthentikTokenProvider
- JWT bearer token support (from Authentik OAuth2)
- InMemoryQueueAdapter for testing
- Base64 encoding/decoding for SQS message bodies
- HTTP/REST integration (no direct gRPC complexity)
- 8 unit tests + comprehensive documentation
- Supports long-polling (ReceiveMessage), visibility timeout, DLQ

Uses standard SQS API patterns:
- SendMessage: Queue chunk for dual-write processing
- ReceiveMessage: Long-poll up to 10 messages, 20s wait
- DeleteMessage: Acknowledge on success
- ChangeMessageVisibility: Retry on failure
- SendToDLQ: After max retries

Files:
- crates/mem-cli/src/queue_adapter.rs (310 LOC)
- crates/mem-cli/src/gateway_queue_adapter.rs (530 LOC)
- tests/it_gateway_queue_adapter.rs (110 LOC)
- docs/M8.2-GATEWAY_QUEUE_ADAPTER.md (400 LOC)
 2026-08-28 13:11:56 -07:00
Story Crater Bot dbcefd8853 feat: M3.7.7 signature extraction CLI + integration tests (unit tests pass, integration tests pending mem-cli fix) 2026-08-28 07:46:36 -07:00
Story Crater Bot 47e55afae3 feat: JWT auth validation with Authentik OIDC 
- Add jwt_validator module with JWKS caching (TTL + refresh-on-miss)
- Implement RS256 algorithm pinning + claim validation
- Replace apikey with Bearer token validation in http_server
- Add capability-based access control (memory:read/write/*)
- Backward compatible: MEM_AUTH_MODE=jwt|apikey (default: apikey)
- 16 tests passing (7 unit + 9 integration)
- Docs: JWT_AUTH.md with deployment guide

Config via env vars:
- MEM_AUTH_MODE=jwt
- AUTHENTIK_ISSUER=https://authentik.riotpiao.com/application/o/poimen-memory/
- AUTHENTIK_AUDIENCE=poimen-memory
- JWT_CACHE_TTL_SECS=3600 (optional)

Gw passes Authorization: Bearer <token> header
Memory validates + checks permissions claim
 2026-08-27 12:29:23 -07:00
rock af6f22217d feat(core): implement full memory pipeline (#11) 2026-08-24 01:37:16 +00:00
Story Crater Bot 695e115212 Deploy Poimen Memory K8s cluster with ArgoCD tracking (M2.2, M3.5-M3.7) 2026-08-22 23:13:42 -07:00
Story Crater Bot 51d025d24f feat: complete M0 phase - read-only spine (8/51 tasks) 
M0.1 - Cargo workspace + crate skeletons (4 tests)
  ✅ 6-crate workspace with enforced dependency direction
  ✅ GitHub Actions CI pipeline

M0.2 - Domain types and sha256 identity (6 tests)
  ✅ Level, Role, Record, Chunk, MemoryNode types
  ✅ Content-hash identity (sha256) ensuring rebuild idempotence
  ✅ Newtypes (ProjectId, QueryId, RunId) without Default

M0.3 - RecordSource trait + ChunkPolicy (6 tests)
  ✅ RecordSource streaming trait
  ✅ Chunk policy with token budgets and record boundaries
  ✅ Chunking stream that respects budgets without splitting records

M0.4 - Tokenizer-backed chunk sizing (3 tests + 1 ignored)
  ✅ Vendored Qwen2 tokenizer with hash verification
  ✅ QwenTokenCounter for accurate token counting
  ✅ mem tokens CLI subcommand

M0.5 - pi session adapter (5 tests)
  ✅ PiSessionSource implementing RecordSource
  ✅ Project key extraction from cwd field
  ✅ Content flattening for various shapes
  ✅ Shared flatten_content helper module

M0.6 - Claude transcript adapter (4 tests)
  ✅ ClaudeTranscriptSource implementing RecordSource
  ✅ Identical content flattening as pi source
  ✅ Cross-source project key agreement

M0.7 - ingest --dry-run (2 tests)
  ✅ mem ingest --project --dry-run command
  ✅ Zero network calls guarantee

M0.8 - M0 composition gate (5 tests)
  ✅ Both sources compose through chunker identically
  ✅ Sources are swappable via RecordSource trait
  ✅ All role types properly emitted
  ✅ Chunk boundaries respected, t values contiguous

Summary:
- 35 integration tests (34 passing, 1 ignored)
- Zero clippy warnings with -D warnings
- All phases compose and verify correctly
- Read-only spine foundation proves extensibility
 2026-08-22 23:13:42 -07:00
Story Crater Bot 33b7150f56 feat: complete M0.1-M0.4 phases 
M0.1 - Cargo workspace + crate skeletons
  - 6-crate workspace with correct dependency direction
  - CI/CD pipeline with GitHub Actions
  - Integration tests verifying build and dependency structure

M0.2 - Domain types and sha256 identity
  - Level (L0, L1, L2) enum with proper serde formatting
  - Role enum (User, Assistant, ToolResult, System)
  - Record, Chunk, and MemoryNode domain types
  - Content-hash identity system ensuring rebuild idempotence
  - Newtypes (ProjectId, QueryId, RunId) with validation
  - Round-trip serde tests for all types

M0.3 - RecordSource trait + ChunkPolicy
  - RecordSource trait for streaming record sources
  - Chunk policy with token budgets and boundary modes
  - TokenCounter trait with CharsOverFourCounter stub
  - Chunking stream that respects budgets without splitting records
  - VecSource for testing
  - Integration tests verifying lossless chunking and budget adherence

M0.4 - Tokenizer-backed chunk sizing
  - Vendored Qwen2 tokenizer with hash verification
  - QwenTokenCounter implementing proper token counting
  - Hash guard that fails on modified tokenizer
  - mem tokens CLI subcommand for token counting
  - Integration tests with known string counts, hash guards, and budget verification

Total: 19 integration tests passing, all phases verified to compose correctly
Workspace builds cleanly with no clippy warnings
 2026-08-22 23:13:42 -07:00