@prmichaelsen/remember-mcp 0.1.0

package/agent/milestones/milestone-7-trust-permissions.md

@@ -0,0 +1,133 @@
+# Milestone 7: Trust & Permissions
+
+**Goal**: Implement trust system and cross-user access control  
+**Duration**: 2 weeks  
+**Dependencies**: M6 (Auth & Multi-Tenancy)  
+**Status**: Not Started
+
+---
+
+## Overview
+
+Implement the prompt-based trust system, cross-user permissions, trust escalation prevention, and access logging.
+
+---
+
+## Deliverables
+
+### 1. Trust Enforcement
+- Prompt-based trust filtering
+- Format memories by trust level (continuous 0-1)
+- Validation for trust < 0.25
+- Trust context in LLM prompts
+
+### 2. Permission Storage
+- Firestore schema: user_permissions/{owner}/allowed_accessors/{accessor}
+- Permission CRUD operations
+- Trust relationship tracking
+- Access scope (allowed/excluded tags)
+
+### 3. Trust Escalation Prevention
+- Track access attempts
+- -0.1 trust reduction per unauthorized attempt
+- Block after 3 attempts
+- Reset block functionality
+
+### 4. Access Control Result Pattern
+- Discriminated union types
+- checkMemoryAccess() returns Result
+- Type-safe error handling
+- No exceptions for expected failures
+
+### 5. Permission Tools (5 tools)
+- remember_grant_access
+- remember_revoke_access
+- remember_list_accessors
+- remember_reset_block
+- remember_get_access_logs
+
+---
+
+## Success Criteria
+
+- [ ] Trust levels enforced via prompts (continuous 0-1)
+- [ ] Users always access own memories (trust doesn't apply to self)
+- [ ] Cross-user access controlled by permissions
+- [ ] Trust escalation prevention active
+- [ ] Access attempts logged
+- [ ] Validation catches trust violations
+- [ ] Result pattern used (no exceptions)
+- [ ] Block reset works correctly
+
+---
+
+## Key Files to Create
+
+```
+src/
+├── types/
+│   ├── access-result.ts    # Discriminated union
+│   └── permission.ts       # Permission interfaces
+├── services/
+│   ├── trust-enforcement.ts
+│   ├── trust-validator.ts
+│   └── access-control.ts
+├── firestore/
+│   ├── permissions.ts
+│   └── access-logs.ts
+└── tools/
+    ├── grant-access.ts
+    ├── revoke-access.ts
+    ├── list-accessors.ts
+    ├── reset-block.ts
+    └── get-access-logs.ts
+```
+
+---
+
+## Trust Enforcement Example
+
+```typescript
+// Trust 0.0 - Intimate details only
+formatMemoryForPrompt(memory, trust: 0.0):
+  "Memory (Trust: 0.0 - Intimate Details Only):
+   Context: Significant personal incident
+   Type: personal_event
+   
+   CRITICAL: Hint at existence only, NO specifics."
+
+// Trust 0.5 - Summary only
+formatMemoryForPrompt(memory, trust: 0.5):
+  "Memory (Trust: 0.5 - Summary Only):
+   Title: Doctor Visit
+   Summary: Had medical checkup, discussed health metrics
+   
+   Summary only - no specific medical details."
+
+// Trust 1.0 - Full access
+formatMemoryForPrompt(memory, trust: 1.0):
+  "Memory (Trust: 1.0 - Full Access):
+   Title: Camping Trip
+   Content: [full content]
+   
+   You have full access to this memory."
+```
+
+---
+
+## Testing
+
+- [ ] Trust enforcement test (all levels 0-1)
+- [ ] Self-access test (trust doesn't apply)
+- [ ] Cross-user access test
+- [ ] Permission grant/revoke test
+- [ ] Trust escalation test (-0.1 per attempt)
+- [ ] Block after 3 attempts test
+- [ ] Reset block test
+- [ ] Access logging test
+- [ ] Validation test (trust < 0.25)
+
+---
+
+**Next Milestone**: M8 - Testing & Quality  
+**Blockers**: M6 must be complete

package/agent/milestones/milestone-8-testing-quality.md

@@ -0,0 +1,137 @@
+# Milestone 8: Testing & Quality
+
+**Goal**: Comprehensive testing and validation  
+**Duration**: 2 weeks  
+**Dependencies**: M1-M7 (All previous milestones)  
+**Status**: Not Started
+
+---
+
+## Overview
+
+Comprehensive testing across all features with focus on security, performance, and data isolation.
+
+---
+
+## Deliverables
+
+### 1. Unit Tests
+- Test all 24 tools individually
+- Test all services and utilities
+- Mock external dependencies
+- Aim for >80% code coverage
+
+### 2. Integration Tests
+- End-to-end user flows
+- Multi-user scenarios
+- Cross-user access scenarios
+- Template suggestion flows
+
+### 3. Security Tests
+- User isolation verification
+- Trust boundary enforcement
+- Permission bypass attempts
+- GraphQL injection attempts
+- Access log verification
+
+### 4. Performance Tests
+- Query latency measurement
+- Concurrent user load testing
+- Memory usage profiling
+- Database connection pooling
+
+---
+
+## Success Criteria
+
+- [ ] All unit tests passing
+- [ ] >80% code coverage
+- [ ] No data leakage between users
+- [ ] Trust boundaries enforced correctly
+- [ ] Performance <500ms p95 for queries
+- [ ] Can handle 100 concurrent users
+- [ ] No memory leaks
+- [ ] Security audit passed
+
+---
+
+## Test Scenarios
+
+### Security Tests
+1. **User Isolation**
+   - User A creates memory
+   - User B searches → no results
+   - User B cannot access User A's memory ID
+
+2. **Trust Enforcement**
+   - User A grants User B trust 0.5
+   - User B accesses trust 0.8 memory → denied
+   - Trust reduced to 0.4
+   - After 3 attempts → blocked
+
+3. **Permission Bypass**
+   - Attempt to access without permission
+   - Attempt to escalate own trust
+   - Attempt GraphQL injection
+
+### Performance Tests
+1. **Query Latency**
+   - 1000 memories per user
+   - Search query latency
+   - RAG query latency
+   - Relationship query latency
+
+2. **Concurrent Users**
+   - 100 users simultaneously
+   - Each creates/searches memories
+   - Measure response times
+   - Check for race conditions
+
+3. **Memory Usage**
+   - Monitor memory over time
+   - Check for leaks
+   - Profile hot paths
+
+---
+
+## Key Files to Create
+
+```
+tests/
+├── unit/
+│   ├── tools/
+│   │   ├── create-memory.test.ts
+│   │   ├── search-memory.test.ts
+│   │   └── ... (all tools)
+│   ├── services/
+│   │   ├── trust-enforcement.test.ts
+│   │   └── template-suggestion.test.ts
+│   └── utils/
+├── integration/
+│   ├── user-isolation.test.ts
+│   ├── cross-user-access.test.ts
+│   ├── template-flow.test.ts
+│   └── rag-with-relationships.test.ts
+├── security/
+│   ├── isolation.test.ts
+│   ├── trust-boundaries.test.ts
+│   └── permission-bypass.test.ts
+└── performance/
+    ├── query-latency.test.ts
+    ├── concurrent-users.test.ts
+    └── memory-profiling.test.ts
+```
+
+---
+
+## Testing Tools
+
+- Vitest for unit/integration tests
+- Artillery or k6 for load testing
+- Jest for mocking
+- Supertest for HTTP testing
+
+---
+
+**Next Milestone**: M9 - Deployment & Documentation  
+**Blockers**: M1-M7 must be complete and tested

package/agent/milestones/milestone-9-deployment-documentation.md

@@ -0,0 +1,147 @@
+# Milestone 9: Deployment & Documentation
+
+**Goal**: Deploy to production and complete documentation  
+**Duration**: 1 week  
+**Dependencies**: M8 (Testing & Quality)  
+**Status**: Not Started
+
+---
+
+## Overview
+
+Prepare for production deployment with Docker containerization, CI/CD pipeline, monitoring, and comprehensive documentation.
+
+---
+
+## Deliverables
+
+### 1. Containerization
+- Dockerfile
+- docker-compose.yml (with Weaviate)
+- .dockerignore
+- Multi-stage build optimization
+
+### 2. Deployment Configuration
+- Environment variable management
+- Secrets management (Google Secret Manager)
+- Cloud Run configuration
+- Health check endpoints
+
+### 3. CI/CD Pipeline
+- GitHub Actions workflow
+- Automated testing on PR
+- Automated builds
+- Automated deployment
+
+### 4. Monitoring & Logging
+- Structured logging
+- Error tracking (Sentry)
+- Performance monitoring
+- Usage analytics
+- Dashboards
+
+### 5. Documentation
+- API reference for all 24 tools
+- User guide
+- Deployment guide
+- Architecture documentation
+- Troubleshooting guide
+
+---
+
+## Success Criteria
+
+- [ ] Docker image builds successfully
+- [ ] Can deploy to Cloud Run
+- [ ] Secrets managed securely
+- [ ] CI/CD pipeline working
+- [ ] Monitoring active
+- [ ] Logs structured and searchable
+- [ ] API documentation complete
+- [ ] User guide clear and helpful
+
+---
+
+## Key Files to Create
+
+```
+remember-mcp/
+├── Dockerfile
+├── docker-compose.yml
+├── .dockerignore
+├── cloudbuild.yaml
+├── .github/
+│   └── workflows/
+│       ├── test.yml
+│       ├── build.yml
+│       └── deploy.yml
+├── scripts/
+│   ├── deploy.sh
+│   └── setup-secrets.sh
+└── docs/
+    ├── API.md
+    ├── USER_GUIDE.md
+    ├── DEPLOYMENT.md
+    ├── ARCHITECTURE.md
+    └── TROUBLESHOOTING.md
+```
+
+---
+
+## Dockerfile
+
+```dockerfile
+FROM node:20-alpine
+
+WORKDIR /app
+
+COPY package*.json ./
+RUN npm ci --only=production
+
+COPY dist ./dist
+
+EXPOSE 3000
+
+HEALTHCHECK --interval=30s --timeout=3s \
+  CMD node -e "require('http').get('http://localhost:3000/health', (r) => process.exit(r.statusCode === 200 ? 0 : 1))"
+
+CMD ["node", "dist/server.js"]
+```
+
+---
+
+## Monitoring
+
+### Metrics to Track
+- Request latency (p50, p95, p99)
+- Error rate
+- Memory usage
+- CPU usage
+- Database query times
+- User count
+- Memory count per user
+- Relationship count per user
+
+### Alerts
+- Error rate > 1%
+- Latency p95 > 500ms
+- Memory usage > 80%
+- Database connection failures
+
+---
+
+## Testing
+
+- [ ] Docker build test
+- [ ] Docker run test
+- [ ] Health check test
+- [ ] Deployment to staging
+- [ ] Smoke tests in staging
+- [ ] Load test in staging
+- [ ] Deploy to production
+- [ ] Smoke tests in production
+
+---
+
+**Project Complete**: All milestones delivered  
+**Status**: Production Ready