mosaicstack/stack
1
0
Fork 0
Code Issues 42 Pull Requests Actions Packages Projects Releases 15 Wiki Activity

feat(memory): add operator retrieval plugin #736

Merged
jason.woltje merged 3 commits from feat/tess-operator-plugins into main 2026-07-13 12:44:32 +00:00
Conversation 1 Commits 3 Files Changed 8 +380 -6
jason.woltje commented 2026-07-13 12:32:44 +00:00
Owner
Copy Link

Summary

  • add a leaf-package OperatorMemoryPlugin contract for scoped capture, retrieval, startup context, and provenance
  • make adapter and namespace configuration-injected while tenant/owner/session storage keys are runtime-validated and collision-safe
  • add redaction-before-persist, bounded startup prioritization, wildcard adapter contract coverage, and M4-003 documentation/scratchpad

Boundaries

  • no gateway or Mosaic catalog integration
  • no durable inbox/outbox ownership changes
  • no changes to apps/gateway/src/commands/command-authorization.service.ts

Verification

  • pnpm --filter @mosaicstack/memory test (32 tests)
  • pnpm --filter @mosaicstack/memory typecheck
  • pnpm --filter @mosaicstack/memory lint
  • pnpm --filter @mosaicstack/memory build
  • TURBO_FORCE=true pnpm typecheck
  • TURBO_FORCE=true pnpm lint
  • TURBO_FORCE=true pnpm format:check
  • TURBO_FORCE=true pnpm test (42 tasks, 0 cached)
  • Codex code review: approve; security review: no findings

Implements TESS-M4-003 for #710.

## Summary - add a leaf-package `OperatorMemoryPlugin` contract for scoped capture, retrieval, startup context, and provenance - make adapter and namespace configuration-injected while tenant/owner/session storage keys are runtime-validated and collision-safe - add redaction-before-persist, bounded startup prioritization, wildcard adapter contract coverage, and M4-003 documentation/scratchpad ## Boundaries - no gateway or Mosaic catalog integration - no durable inbox/outbox ownership changes - no changes to `apps/gateway/src/commands/command-authorization.service.ts` ## Verification - `pnpm --filter @mosaicstack/memory test` (32 tests) - `pnpm --filter @mosaicstack/memory typecheck` - `pnpm --filter @mosaicstack/memory lint` - `pnpm --filter @mosaicstack/memory build` - `TURBO_FORCE=true pnpm typecheck` - `TURBO_FORCE=true pnpm lint` - `TURBO_FORCE=true pnpm format:check` - `TURBO_FORCE=true pnpm test` (42 tasks, 0 cached) - Codex code review: approve; security review: no findings Implements TESS-M4-003 for #710.
jason.woltje added 3 commits 2026-07-13 12:32:45 +00:00
wip(m4-003): memory/retrieval slice handoff from coder4 5b99c82193
fix(memory): scope operator plugin retrieval c27f0dea60
feat(memory): add operator retrieval plugin
All checks were successful
ci/woodpecker/pr/ci Pipeline was successful
Details
a1d63ca8ed
jason.woltje commented 2026-07-13 12:40:49 +00:00
Author
Owner
Copy Link

VERIFIED APPROVE reviewer-of-record [W-jarvis:reviewer] head a1d63ca8ed

Findings: CI pipeline 1756 is green at the exact head. This is a leaf packages/memory plugin/doc change only: no gateway/catalog/durable-inbox changes, and apps/gateway/src/commands/command-authorization.service.ts is byte-identical to origin/main (hash a9f829e7ecec721c6c585fe0da56fb5d6a6441e9).
The plugin validates non-empty tenant/owner/session runtime scope before keying storage, uses config-injected adapter/namespace/instance metadata, redacts before persistence, records provenance, and relies on the explicit scoped * wildcard adapter contract. Tests cover namespace isolation with divergent tenant/session scopes, configured non-default instance provenance, startup prioritization, scope rejection before persistence, and redaction/provenance; no live creds or hardcoded Tess identity were introduced.

Marker: ROR-736-APPROVE-a1d63ca8

VERIFIED APPROVE reviewer-of-record [W-jarvis:reviewer] head a1d63ca8ed07610828e9c51a213fffe9123b3de4 Findings: CI pipeline `1756` is green at the exact head. This is a leaf `packages/memory` plugin/doc change only: no gateway/catalog/durable-inbox changes, and `apps/gateway/src/commands/command-authorization.service.ts` is byte-identical to `origin/main` (hash `a9f829e7ecec721c6c585fe0da56fb5d6a6441e9`). The plugin validates non-empty tenant/owner/session runtime scope before keying storage, uses config-injected adapter/namespace/instance metadata, redacts before persistence, records provenance, and relies on the explicit scoped `*` wildcard adapter contract. Tests cover namespace isolation with divergent tenant/session scopes, configured non-default instance provenance, startup prioritization, scope rejection before persistence, and redaction/provenance; no live creds or hardcoded Tess identity were introduced. Marker: ROR-736-APPROVE-a1d63ca8
jason.woltje merged commit 2363f155b4 into main 2026-07-13 12:44:32 +00:00
jason.woltje deleted branch feat/tess-operator-plugins 2026-07-13 12:44:33 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
fleet-enhancement
Fleet-wide reliability/speed/cost improvements surfaced by the nightly enhance pass
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
jason.woltje
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: mosaicstack/stack#736
Delete Branch "feat/tess-operator-plugins"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?