feat(memory): add operator retrieval plugin #736

2026-07-13T12:32:44Z

jason.woltje commented

2026-07-13 12:32:44 +00:00

Summary

add a leaf-package OperatorMemoryPlugin contract for scoped capture, retrieval, startup context, and provenance
make adapter and namespace configuration-injected while tenant/owner/session storage keys are runtime-validated and collision-safe
add redaction-before-persist, bounded startup prioritization, wildcard adapter contract coverage, and M4-003 documentation/scratchpad

Boundaries

no gateway or Mosaic catalog integration
no durable inbox/outbox ownership changes
no changes to apps/gateway/src/commands/command-authorization.service.ts

Verification

pnpm --filter @mosaicstack/memory test (32 tests)
pnpm --filter @mosaicstack/memory typecheck
pnpm --filter @mosaicstack/memory lint
pnpm --filter @mosaicstack/memory build
TURBO_FORCE=true pnpm typecheck
TURBO_FORCE=true pnpm lint
TURBO_FORCE=true pnpm format:check
TURBO_FORCE=true pnpm test (42 tasks, 0 cached)
Codex code review: approve; security review: no findings

Implements TESS-M4-003 for #710.

## Summary - add a leaf-package `OperatorMemoryPlugin` contract for scoped capture, retrieval, startup context, and provenance - make adapter and namespace configuration-injected while tenant/owner/session storage keys are runtime-validated and collision-safe - add redaction-before-persist, bounded startup prioritization, wildcard adapter contract coverage, and M4-003 documentation/scratchpad ## Boundaries - no gateway or Mosaic catalog integration - no durable inbox/outbox ownership changes - no changes to `apps/gateway/src/commands/command-authorization.service.ts` ## Verification - `pnpm --filter @mosaicstack/memory test` (32 tests) - `pnpm --filter @mosaicstack/memory typecheck` - `pnpm --filter @mosaicstack/memory lint` - `pnpm --filter @mosaicstack/memory build` - `TURBO_FORCE=true pnpm typecheck` - `TURBO_FORCE=true pnpm lint` - `TURBO_FORCE=true pnpm format:check` - `TURBO_FORCE=true pnpm test` (42 tasks, 0 cached) - Codex code review: approve; security review: no findings Implements TESS-M4-003 for #710.

jason.woltje added 3 commits 2026-07-13 12:32:45 +00:00

wip(m4-003): memory/retrieval slice handoff from coder4 5b99c82193

fix(memory): scope operator plugin retrieval c27f0dea60

feat(memory): add operator retrieval plugin

ci/woodpecker/pr/ci Pipeline was successful

Details

a1d63ca8ed

jason.woltje commented

2026-07-13 12:40:49 +00:00

VERIFIED APPROVE reviewer-of-record [W-jarvis:reviewer] head a1d63ca8ed

Findings: CI pipeline 1756 is green at the exact head. This is a leaf packages/memory plugin/doc change only: no gateway/catalog/durable-inbox changes, and apps/gateway/src/commands/command-authorization.service.ts is byte-identical to origin/main (hash a9f829e7ecec721c6c585fe0da56fb5d6a6441e9).
The plugin validates non-empty tenant/owner/session runtime scope before keying storage, uses config-injected adapter/namespace/instance metadata, redacts before persistence, records provenance, and relies on the explicit scoped * wildcard adapter contract. Tests cover namespace isolation with divergent tenant/session scopes, configured non-default instance provenance, startup prioritization, scope rejection before persistence, and redaction/provenance; no live creds or hardcoded Tess identity were introduced.

Marker: ROR-736-APPROVE-a1d63ca8

VERIFIED APPROVE reviewer-of-record [W-jarvis:reviewer] head a1d63ca8ed07610828e9c51a213fffe9123b3de4 Findings: CI pipeline `1756` is green at the exact head. This is a leaf `packages/memory` plugin/doc change only: no gateway/catalog/durable-inbox changes, and `apps/gateway/src/commands/command-authorization.service.ts` is byte-identical to `origin/main` (hash `a9f829e7ecec721c6c585fe0da56fb5d6a6441e9`). The plugin validates non-empty tenant/owner/session runtime scope before keying storage, uses config-injected adapter/namespace/instance metadata, redacts before persistence, records provenance, and relies on the explicit scoped `*` wildcard adapter contract. Tests cover namespace isolation with divergent tenant/session scopes, configured non-default instance provenance, startup prioritization, scope rejection before persistence, and redaction/provenance; no live creds or hardcoded Tess identity were introduced. Marker: ROR-736-APPROVE-a1d63ca8

jason.woltje referenced this issue from a commit

2026-07-13 12:42:23 +00:00

docs(tess): M4-001 merged (76325ca3); M4-003 #736 open, CI 1756 green, ROR routed

jason.woltje referenced this issue from a commit

2026-07-13 12:43:29 +00:00

docs(tess): M4-003 #736 ROR complete (17044), head unmoved, MERGEABLE

jason.woltje merged commit 2363f155b4 into main

2026-07-13 12:44:32 +00:00

jason.woltje deleted branch feat/tess-operator-plugins

2026-07-13 12:44:33 +00:00

jason.woltje referenced this issue from a commit

2026-07-13 12:44:34 +00:00