Commit graph

2 commits

Author SHA1 Message Date
Viktor Barzin
d49032b697 publication prep: gitleaksignore for synthetic test fixtures; releases go manual
All checks were successful
ci/woodpecker/push/build Pipeline was successful
ADR-0002 public flip (infra#20): the three gitleaks history findings are
synthetic test fixtures (credential-detector + crypto tests) — ignored
by fingerprint. release.yml moves from tag-trigger to workflow_dispatch:
svu now auto-cuts tags on every release-worthy push, and implicit PyPI
publishes on each bump are not wanted — releases stay deliberate.
Dead ci.yml.disabled dropped.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-06-13 01:58:36 +00:00
Viktor Barzin
0ed5e1e016
feat: standalone claude-memory-mcp with multi-user support and Vault integration
Extracted from private infra repo into standalone open-source project.

Three operating modes:
- Local: SQLite + FTS5 (zero dependencies)
- Server: PostgreSQL via HTTP API with multi-user auth
- Full: PostgreSQL + HashiCorp Vault for secret management

Features:
- MCP stdio server with 5 tools (store/recall/list/delete/secret_get)
- FastAPI HTTP API with multi-user Bearer token auth (API_KEYS JSON map)
- Regex-based credential detection with auto-redaction
- AES-256-GCM encryption fallback for non-Vault deployments
- Vault KV v2 client (stdlib urllib, K8s SA auto-auth)
- Per-user data isolation (all queries scoped by user_id)
- Secret migration endpoint for existing plain-text credentials
- Backward-compatible env var aliases (CLAUDE_MEMORY_API_URL)

Infrastructure:
- Docker + docker-compose (API + PostgreSQL + optional Vault)
- Woodpecker CI (test → build → push → kubectl deploy)
- GitHub Actions CI (Python 3.11/3.12/3.13) + Release (GHCR + PyPI)
- Helm chart + raw Kubernetes manifests

96 tests passing across 6 test files.
2026-03-14 09:42:05 +00:00