feat: RoutingWorkflow + LLM Router + Memory Activity

- Add RoutingWorkflow: generic state machine executor for WorkflowSpec
- Add LLM Router: natural language → WorkflowSpec generation
- Add RetrieveMemoryActivity: query poimen-memory for context
- Add activities: AnalyzeCode, SecurityScan, GenerateReport, Notify, etc.
- Add agent-prompts/router: LLM prompt documentation
- Extend starter with --route flag for routing workflows
- Remove orchestrator job (trigger via API/message instead)
- Clean up: move docs to Desktop, add .gitignore for *.md

k8s/configmap.yaml

@@ -6,4 +6,5 @@ metadata:
 data:
   TEMPORAL_NAMESPACE: "poimen-harness"
   TEMPORAL_HOSTPORT: "temporal-frontend.temporal:7233"
-  # ANTHROPIC_API_KEY is handled via Secret
+  LOCAL_LLM_BASE_URL: "http://api-gateway.api:8080"
+  POIMEN_MEMORY_URL: "http://poimen-memory.poimen.svc.cluster.local:8080"

k8s/git-commit.yaml

@@ -9,6 +9,6 @@ metadata:
     app.kubernetes.io/name: poimen
     app.kubernetes.io/component: orchestrator
 data:
-  GIT_COMMIT: "38dd3f8d"  # Updated automatically by CI/CD
+  GIT_COMMIT: "303e78f7"  # Updated automatically by CI/CD
   GIT_BRANCH: "main"
-  DEPLOYMENT_DATE: "2026-08-31"
+  DEPLOYMENT_DATE: "2026-09-02"

k8s/kustomization.yaml

@@ -4,23 +4,15 @@ kind: Kustomization
 namespace: poimen
 
 resources:
-  - orchestrator-job.yaml
   - worker-deployment.yaml
-  - git-commit.yaml
+  - configmap.yaml
 
 commonLabels:
   app.kubernetes.io/name: poimen
-  app.kubernetes.io/component: orchestrator
+  app.kubernetes.io/component: worker
 
 secretGenerator:
   - name: poimen-secrets
     envs:
       - secrets.env
     behavior: create
-
-configMapGenerator:
-  - name: poimen-config
-    literals:
-      - TEMPORAL_NAMESPACE=poimen-harness
-      - TEMPORAL_HOSTPORT=temporal-frontend.temporal:7233
-    behavior: create

k8s/orchestrator-job.yaml

@@ -1,63 +0,0 @@
-apiVersion: batch/v1
-kind: Job
-metadata:
-  name: poimen-orchestrator
-  namespace: poimen
-spec:
-  backoffLimit: 3
-  template:
-    metadata:
-      labels:
-        app: poimen-orchestrator
-    spec:
-      restartPolicy: Never
-      containers:
-      - name: orchestrator
-        image: golang:latest
-        imagePullPolicy: Always  # ✅ Force latest image pull
-        workingDir: /app
-        command: ["/bin/sh", "-c"]
-        args:
-          - |
-            set -e
-            echo "[$(date)] Starting poimen orchestrator job..."
-            apt-get update && apt-get install -y --no-install-recommends git
-            echo "[$(date)] Cloning latest code from git..."
-            git clone https://forgejo.riotpiao.com/rock/poimen-workflows.git /app
-            cd /app
-            echo "[$(date)] Latest commit: $(git rev-parse HEAD)"
-            echo "[$(date)] Downloading dependencies..."
-            go mod download
-            echo "[$(date)] Starting orchestrator with T0-T4 complete implementation..."
-            go run ./cmd/starter \
-              --repo https://forgejo.riotpiao.com/rock/poimen \
-              --remote file:///tmp/poimen-output \
-              --milestone T0 \
-              --planner-model ornith \
-              --judge-model ornith \
-              --implementer-model claude-sonnet-5
-        env:
-        - name: TEMPORAL_NAMESPACE
-          valueFrom:
-            configMapKeyRef:
-              name: poimen-config
-              key: TEMPORAL_NAMESPACE
-        - name: TEMPORAL_HOSTPORT
-          valueFrom:
-            configMapKeyRef:
-              name: poimen-config
-              key: TEMPORAL_HOSTPORT
-        - name: ANTHROPIC_API_KEY
-          valueFrom:
-            secretKeyRef:
-              name: poimen-secrets
-              key: ANTHROPIC_API_KEY
-        - name: LOCAL_LLM_BASE_URL
-          value: "http://api-gateway.api:8080"
-        resources:
-          requests:
-            memory: "512Mi"
-            cpu: "500m"
-          limits:
-            memory: "2Gi"
-            cpu: "2000m"

k8s/worker-deployment.yaml

@@ -13,8 +13,8 @@ spec:
       labels:
         app: poimen-worker
       annotations:
-        git-commit: "38dd3f8d"  # ✅ Updated on each push, triggers rolling restart
-        deployment-date: "2026-08-31"
+        git-commit: "303e78f7"  # ✅ Updated on each push, triggers rolling restart
+        deployment-date: "2026-09-02"
     spec:
       containers:
       - name: worker
@@ -52,7 +52,15 @@ spec:
               name: poimen-secrets
               key: ANTHROPIC_API_KEY
         - name: LOCAL_LLM_BASE_URL
-          value: "http://api-gateway.api:8080"
+          valueFrom:
+            configMapKeyRef:
+              name: poimen-config
+              key: LOCAL_LLM_BASE_URL
+        - name: POIMEN_MEMORY_URL
+          valueFrom:
+            configMapKeyRef:
+              name: poimen-config
+              key: POIMEN_MEMORY_URL
         resources:
           requests:
             memory: "512Mi"