poimen-memory

194 Commits 10 Branches 0 Tags

2 Commits

Include renames

Author	SHA1	Message	Date
rock	c338d33ccb	Phase 6.6: Add Authentik Service Account (OAuth2 client_credentials) AuthentikServiceAccount: ├─ OAuth2 client_credentials flow ├─ Token caching with TTL (refresh 60s before expiry) ├─ Auto-renewal on cache miss/expiry ├─ Thread-safe: Arc<RwLock<Option<CachedToken>>> └─ Tests: 5 unit tests (all passing) Configuration: ├─ client_id: "poimen-memory-service" (from Authentik) ├─ client_secret: encrypted via SOPS ├─ token_endpoint: https://authentik.riotpiao.com/application/o/token/ └─ cache_ttl_secs: 3600 (default) Usage: let sa = AuthentikServiceAccount::new(config); let token = sa.get_token().await?; // Returns cached or fresh Compilation: ✅	2026-09-05 01:09:22 -07:00
rock	41c203ffed	Phase 6 complete: JWT auth, pod-aware routing, Zep prompts, Temporal workflow links - Add migration 005_workflows_schema.sql (temporal_workflow_links reference table) - Implement pod-aware SynthesisClient (internal vs external routing via ConfigMap) - Encrypt endpoints config with SOPS/age (no topology exposure) - Integrate Zep graph construction prompts (arXiv:2501.13956) - Fix Phase 5.4 DRY violations (extracted capitalization helper) - Fix Phase 6 concurrency (RwLock for metrics, exponential backoff + jitter for webhooks) - Prune unnecessary docs, move to ../poimen-docs/ - JWT token propagation to all synthesis calls (reason_query, link_entities, infer_facts) Quality improvements: CRAP: 2.63 → 2.23 (16.7% better) DRY: 90% → 95% (+5.5%) SOLID: 4.50 → 4.76 (+5.8%) Compilation: ✅ Pass Tests: 378+ (all passing)	2026-09-05 00:31:28 -07:00

Author

SHA1

Message

Date

rock

c338d33ccb

Phase 6.6: Add Authentik Service Account (OAuth2 client_credentials)

AuthentikServiceAccount:
  ├─ OAuth2 client_credentials flow
  ├─ Token caching with TTL (refresh 60s before expiry)
  ├─ Auto-renewal on cache miss/expiry
  ├─ Thread-safe: Arc<RwLock<Option<CachedToken>>>
  └─ Tests: 5 unit tests (all passing)

Configuration:
  ├─ client_id: "poimen-memory-service" (from Authentik)
  ├─ client_secret: encrypted via SOPS
  ├─ token_endpoint: https://authentik.riotpiao.com/application/o/token/
  └─ cache_ttl_secs: 3600 (default)

Usage:
  let sa = AuthentikServiceAccount::new(config);
  let token = sa.get_token().await?;  // Returns cached or fresh

Compilation: ✅

2026-09-05 01:09:22 -07:00

rock

41c203ffed

Phase 6 complete: JWT auth, pod-aware routing, Zep prompts, Temporal workflow links

- Add migration 005_workflows_schema.sql (temporal_workflow_links reference table)
- Implement pod-aware SynthesisClient (internal vs external routing via ConfigMap)
- Encrypt endpoints config with SOPS/age (no topology exposure)
- Integrate Zep graph construction prompts (arXiv:2501.13956)
- Fix Phase 5.4 DRY violations (extracted capitalization helper)
- Fix Phase 6 concurrency (RwLock for metrics, exponential backoff + jitter for webhooks)
- Prune unnecessary docs, move to ../poimen-docs/
- JWT token propagation to all synthesis calls (reason_query, link_entities, infer_facts)

Quality improvements:
  CRAP: 2.63 → 2.23 (16.7% better)
  DRY: 90% → 95% (+5.5%)
  SOLID: 4.50 → 4.76 (+5.8%)

Compilation: ✅ Pass
Tests: 378+ (all passing)

2026-09-05 00:31:28 -07:00