Commit Graph
7 Commits
Author SHA1 Message Date
Story Crater Bot a0832751bc feat: JWT auth validation with Authentik OIDC
Build and Push / Test (push) Failing after 3m1s
Build and Push / Build and push image (push) Skipped
- Add jwt_validator module with JWKS caching (TTL + refresh-on-miss)
- Implement RS256 algorithm pinning + claim validation
- Replace apikey with Bearer token validation in http_server
- Add capability-based access control (memory:read/write/*)
- Backward compatible: MEM_AUTH_MODE=jwt|apikey (default: apikey)
- 16 tests passing (7 unit + 9 integration)
- Docs: JWT_AUTH.md with deployment guide

Config via env vars:
- MEM_AUTH_MODE=jwt
- AUTHENTIK_ISSUER=https://authentik.riotpiao.com/application/o/poimen-memory/
- AUTHENTIK_AUDIENCE=poimen-memory
- JWT_CACHE_TTL_SECS=3600 (optional)

Gw passes Authorization: Bearer <token> header
Memory validates + checks permissions claim
2026-08-27 12:29:23 -07:00
Story Crater Bot 57c806ea25 Implement M3.5.7: Rate limiting + idempotency (20 tests) 2026-08-26 13:35:50 -07:00
Story Crater Bot f8a06ef49d feat: add web UI for Obsidian vault browser
Build and Push / Test (push) Failing after 1m56s
Build and Push / Build and push image (push) Skipped
- POST /memory/vault/generate: Generate vault from L1/L2 memories
- GET /memory/vault: List all projects with clickable links
- GET /memory/vault/{project}: List .md files in project vault
- GET /memory/vault/{project}/{file}: View markdown with syntax highlighting
- HTML UI with navigation and YAML frontmatter display
- Security: Path traversal prevention on file access

Vault structure accessible via browser:
  http://poimen-memory:8080/memory/vault/
    → poimen/ (click project)
      → index.md (L2 synthesis)
      → architecture.md (L1 memory)
      → ... (one .md per L1)
2026-08-26 13:09:28 -07:00
rock a4a4053d57 feat: add Obsidian vault projection with Longhorn storage (#13)
Build and Push / Test (push) Successful in 3m37s
Build and Push / Build and push image (push) Successful in 2m45s
2026-08-24 01:58:39 +00:00
rock e6e39cf6fd feat(core): implement full memory pipeline (#11)
Build and Push / Test (push) Failing after 2m37s
Build and Push / Build and push image (push) Skipped
2026-08-24 01:37:16 +00:00
Story Crater Bot a0ebc1183c Add K8s app deployment, Dockerfile, and CI workflow (Option A)
ci / markdown (push) Waiting to run
2026-08-23 00:01:30 -07:00
Story Crater Bot d3be7f6fd4 Deploy Poimen Memory K8s cluster with ArgoCD tracking (M2.2, M3.5-M3.7)
ci / markdown (push) Waiting to run
2026-08-22 23:13:42 -07:00