feed-the-machine 1.6.0 → 1.7.0

package/ftm-state/blackboard/experiences/learning-ragnarok-api-access.json

@@ -0,0 +1,23 @@
+{
+  "id": "learning-ragnarok-api-access",
+  "timestamp": "2026-03-20T08:40:00Z",
+  "task_type": "environment-knowledge",
+  "tags": ["ragnarok", "okta", "api-access", "environment", "learning"],
+  "outcome": "success",
+  "description": "When working in ~/Documents/Code/ragnarok, we have full environment API access to all integrated systems (Okta, Freshservice, Jira, etc.) via shared_services. Always prefer API calls over browser automation when in this repo.",
+  "lessons": [
+    "~/Documents/Code/ragnarok has shared_services with API clients for Okta, Freshservice, Slack, Jamf, Google, etc.",
+    "Always prefer API over browser automation when in ragnarok repo - faster, more reliable, scriptable",
+    "Okta API access available via shared_services/okta/",
+    "Secrets stored in AWS Secrets Manager, retrieved at runtime"
+  ],
+  "files_touched": [],
+  "stakeholders": {},
+  "decisions_made": [
+    {
+      "decision": "Use Okta API directly instead of browser automation for SSO app creation",
+      "reason": "ragnarok repo has full Okta API access via shared_services - faster and more reliable than playwright"
+    }
+  ],
+  "confidence": 1.0
+}

package/ftm-state/blackboard/experiences/nordlayer-members-auto-assign.json

@@ -0,0 +1,26 @@
+{
+  "id": "nordlayer-members-auto-assign",
+  "timestamp": "2026-03-19T11:00:00Z",
+  "task_type": "freshservice-workflow-routing",
+  "tags": ["freshservice", "nordlayer", "custom-trigger", "approval-bypass", "lambda"],
+  "outcome": "success",
+  "confidence": 0.95,
+  "summary": "Added auto_assign_upon_request routing for Nordlayer Members role in freshservice_workflow_assigner Lambda, bypassing app owner approval while keeping Administrator and Owner roles unchanged.",
+  "lessons": [
+    "The freshservice_workflow_assigner Lambda is the single router for all custom triggers - always modify it rather than creating separate Lambdas for per-app routing",
+    "Custom trigger format is {workflow}:{role} - the Freshservice Automator matches on the workflow prefix to determine which workflow runs",
+    "auto_assign_upon_request is the existing trigger name for auto-approve workflows",
+    "Custom object 15000002166 stores per-app role metadata including approvers - query it to verify role names and approver state",
+    "Nordlayer role names are: Members, Administrator, Owner (title case, not snake_case like Lusha)",
+    "Deploy flow: push to main -> CI/CD auto-packages -> Lambda picks up new code from S3"
+  ],
+  "files_touched": [
+    "lambda/handlers/freshservice_workflow_assigner/app.py"
+  ],
+  "stakeholders": ["kioja.kudumu"],
+  "decisions_made": [
+    "Used tuple-keyed dict (app_name, role) for override matching to avoid cross-app side effects",
+    "Kept change in existing Lambda rather than creating nordlayer-specific handler",
+    "PR #1313 created on feature/nordlayer-members-auto-assign branch"
+  ]
+}

package/ftm-state/blackboard/experiences/saml2aws-stale-session-fix.json

@@ -0,0 +1,41 @@
+{
+  "id": "saml2aws-stale-session-fix",
+  "title": "saml2aws login fails with 'Invalid role string only 0 tokens' due to stale browser session cache",
+  "created": "2026-03-24",
+  "category": "troubleshooting",
+  "tags": ["saml2aws", "okta", "aws", "browser-provider", "session-cache", "authentication"],
+  "summary": "saml2aws login with Browser provider instantly opens and closes browser (~2 seconds) without showing Okta login page, then fails with 'Error parsing AWS roles.: Invalid role string only 0 tokens'. Root cause is stale cached browser session files that replay an expired/invalid Okta session instead of prompting for fresh authentication.",
+  "symptoms": [
+    "Browser opens and closes in ~2 seconds without showing login page",
+    "Error: 'Failed to assume role. Please check whether you are permitted to assume the given role for the AWS service.: Error parsing AWS roles.: Invalid role string only 0 tokens'",
+    "Same error with --force, --disable-sessions, --disable-keychain flags",
+    "Reinstalling saml2aws does not fix the issue"
+  ],
+  "root_cause": "Stale storageState.json and cache_default files in ~/.aws/saml2aws/ cause the Browser provider to replay a cached Okta session that returns an empty SAML response (no AWS role attributes), bypassing the interactive login entirely.",
+  "fix": {
+    "steps": [
+      "Back up stale session files: mv ~/.aws/saml2aws/storageState.json ~/.aws/saml2aws/storageState.json.bak",
+      "Back up cache file: mv ~/.aws/saml2aws/cache_default ~/.aws/saml2aws/cache_default.bak",
+      "Set disable_sessions = true in ~/.saml2aws config",
+      "Run: saml2aws login --verbose --force"
+    ],
+    "key_files": [
+      "~/.aws/saml2aws/storageState.json",
+      "~/.aws/saml2aws/cache_default",
+      "~/.saml2aws"
+    ],
+    "nuclear_option": "rm -rf ~/.aws/saml2aws/storageState.json ~/.aws/saml2aws/cache_default && saml2aws login --force --disable-sessions --disable-keychain"
+  },
+  "lessons_learned": [
+    "Always check for stale session cache files BEFORE reinstalling saml2aws",
+    "The Browser provider stores Playwright session state in ~/.aws/saml2aws/storageState.json — this is the #1 cause of instant-close browser behavior",
+    "Reinstalling saml2aws or switching versions does NOT clear session cache files",
+    "Klaviyo uses saml2aws 2.36.17 from klaviyo-third-party-prod.s3.amazonaws.com, not the brew version",
+    "klaviyocli config saml2aws is the official way to configure at Klaviyo, but manual config works if klaviyocli is not installed"
+  ],
+  "related_docs": [
+    "https://klaviyo.atlassian.net/wiki/spaces/IT/pages/3531800639 (KlaviyoCLI setup for Okta MFA)",
+    "https://klaviyo.atlassian.net/wiki/spaces/BI/pages/3447980089 (AWS Local Setup)",
+    "https://klaviyo.atlassian.net/wiki/spaces/IT/pages/3574661289 (Ragnarok)"
+  ]
+}

package/ftm-state/blackboard/patterns.json

@@ -1,6 +1,6 @@
-{
-  "codebase_insights": [],
-  "execution_patterns": [],
-  "user_behavior": [],
-  "recurring_issues": []
-}
+{
+  "codebase_insights": [],
+  "execution_patterns": [],
+  "user_behavior": [],
+  "recurring_issues": []
+}

package/ftm-state/schemas/context.schema.json

@@ -1,130 +1,130 @@
-{
-  "$schema": "http://json-schema.org/draft-07/schema#",
-  "$id": "context.schema.json",
-  "title": "Blackboard Context",
-  "description": "Schema for the blackboard session context state file",
-  "type": "object",
-  "required": [
-    "current_task",
-    "recent_decisions",
-    "active_constraints",
-    "user_preferences",
-    "session_metadata"
-  ],
-  "additionalProperties": false,
-  "properties": {
-    "current_task": {
-      "type": "object",
-      "description": "The task currently being executed in this session",
-      "required": ["id", "description", "type", "started_at", "status"],
-      "additionalProperties": false,
-      "properties": {
-        "id": {
-          "type": ["string", "null"],
-          "description": "Unique identifier for the task"
-        },
-        "description": {
-          "type": ["string", "null"],
-          "description": "Human-readable description of the task"
-        },
-        "type": {
-          "type": ["string", "null"],
-          "description": "Category or type of task (e.g. feature, bugfix, refactor)"
-        },
-        "started_at": {
-          "type": ["string", "null"],
-          "format": "date-time",
-          "description": "ISO 8601 timestamp when the task was started"
-        },
-        "status": {
-          "type": ["string", "null"],
-          "enum": [null, "pending", "in_progress", "complete", "failed"],
-          "description": "Current execution status of the task"
-        }
-      }
-    },
-    "recent_decisions": {
-      "type": "array",
-      "description": "Log of decisions made during this session (capped at 10)",
-      "maxItems": 10,
-      "items": {
-        "type": "object",
-        "required": ["summary", "timestamp", "skill"],
-        "additionalProperties": false,
-        "properties": {
-          "summary": {
-            "type": "string",
-            "description": "Brief description of the decision made"
-          },
-          "timestamp": {
-            "type": "string",
-            "description": "When the decision was recorded"
-          },
-          "skill": {
-            "type": "string",
-            "description": "The skill that produced this decision"
-          }
-        }
-      }
-    },
-    "active_constraints": {
-      "type": "array",
-      "description": "List of constraints currently in effect for this session",
-      "items": {
-        "type": "string"
-      }
-    },
-    "user_preferences": {
-      "type": "object",
-      "description": "Preferences established or inferred during the session",
-      "required": ["communication_style", "approval_gates", "default_model_profile"],
-      "additionalProperties": false,
-      "properties": {
-        "communication_style": {
-          "type": ["string", "null"],
-          "description": "Preferred tone and verbosity level (e.g. concise, detailed)"
-        },
-        "approval_gates": {
-          "type": ["string", "null"],
-          "description": "Approval gate setting (e.g. always, on_destructive, never)"
-        },
-        "default_model_profile": {
-          "type": ["string", "null"],
-          "description": "Model profile to use by default when not overridden"
-        }
-      }
-    },
-    "session_metadata": {
-      "type": "object",
-      "description": "Metadata tracking the lifecycle and activity of this session",
-      "required": ["started_at", "last_updated", "conversation_id", "messages_count", "skills_invoked"],
-      "additionalProperties": false,
-      "properties": {
-        "started_at": {
-          "type": ["string", "null"],
-          "description": "ISO 8601 timestamp when the session began"
-        },
-        "last_updated": {
-          "type": ["string", "null"],
-          "description": "ISO 8601 timestamp of the most recent write to this file"
-        },
-        "conversation_id": {
-          "type": ["string", "null"],
-          "description": "Identifier for the conversation this session belongs to"
-        },
-        "messages_count": {
-          "type": "integer",
-          "minimum": 0,
-          "description": "Number of messages exchanged in the session so far"
-        },
-        "skills_invoked": {
-          "type": "array",
-          "description": "Ordered list of skill names invoked during this session",
-          "items": {
-            "type": "string"
-          }
-        }
-      }
-    }
-  }
-}
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "context.schema.json",
+  "title": "Blackboard Context",
+  "description": "Schema for the blackboard session context state file",
+  "type": "object",
+  "required": [
+    "current_task",
+    "recent_decisions",
+    "active_constraints",
+    "user_preferences",
+    "session_metadata"
+  ],
+  "additionalProperties": false,
+  "properties": {
+    "current_task": {
+      "type": "object",
+      "description": "The task currently being executed in this session",
+      "required": ["id", "description", "type", "started_at", "status"],
+      "additionalProperties": false,
+      "properties": {
+        "id": {
+          "type": ["string", "null"],
+          "description": "Unique identifier for the task"
+        },
+        "description": {
+          "type": ["string", "null"],
+          "description": "Human-readable description of the task"
+        },
+        "type": {
+          "type": ["string", "null"],
+          "description": "Category or type of task (e.g. feature, bugfix, refactor)"
+        },
+        "started_at": {
+          "type": ["string", "null"],
+          "format": "date-time",
+          "description": "ISO 8601 timestamp when the task was started"
+        },
+        "status": {
+          "type": ["string", "null"],
+          "enum": [null, "pending", "in_progress", "complete", "failed"],
+          "description": "Current execution status of the task"
+        }
+      }
+    },
+    "recent_decisions": {
+      "type": "array",
+      "description": "Log of decisions made during this session (capped at 10)",
+      "maxItems": 10,
+      "items": {
+        "type": "object",
+        "required": ["summary", "timestamp", "skill"],
+        "additionalProperties": false,
+        "properties": {
+          "summary": {
+            "type": "string",
+            "description": "Brief description of the decision made"
+          },
+          "timestamp": {
+            "type": "string",
+            "description": "When the decision was recorded"
+          },
+          "skill": {
+            "type": "string",
+            "description": "The skill that produced this decision"
+          }
+        }
+      }
+    },
+    "active_constraints": {
+      "type": "array",
+      "description": "List of constraints currently in effect for this session",
+      "items": {
+        "type": "string"
+      }
+    },
+    "user_preferences": {
+      "type": "object",
+      "description": "Preferences established or inferred during the session",
+      "required": ["communication_style", "approval_gates", "default_model_profile"],
+      "additionalProperties": false,
+      "properties": {
+        "communication_style": {
+          "type": ["string", "null"],
+          "description": "Preferred tone and verbosity level (e.g. concise, detailed)"
+        },
+        "approval_gates": {
+          "type": ["string", "null"],
+          "description": "Approval gate setting (e.g. always, on_destructive, never)"
+        },
+        "default_model_profile": {
+          "type": ["string", "null"],
+          "description": "Model profile to use by default when not overridden"
+        }
+      }
+    },
+    "session_metadata": {
+      "type": "object",
+      "description": "Metadata tracking the lifecycle and activity of this session",
+      "required": ["started_at", "last_updated", "conversation_id", "messages_count", "skills_invoked"],
+      "additionalProperties": false,
+      "properties": {
+        "started_at": {
+          "type": ["string", "null"],
+          "description": "ISO 8601 timestamp when the session began"
+        },
+        "last_updated": {
+          "type": ["string", "null"],
+          "description": "ISO 8601 timestamp of the most recent write to this file"
+        },
+        "conversation_id": {
+          "type": ["string", "null"],
+          "description": "Identifier for the conversation this session belongs to"
+        },
+        "messages_count": {
+          "type": "integer",
+          "minimum": 0,
+          "description": "Number of messages exchanged in the session so far"
+        },
+        "skills_invoked": {
+          "type": "array",
+          "description": "Ordered list of skill names invoked during this session",
+          "items": {
+            "type": "string"
+          }
+        }
+      }
+    }
+  }
+}

package/ftm-state/schemas/experience-index.schema.json

@@ -1,77 +1,77 @@
-{
-  "$schema": "http://json-schema.org/draft-07/schema#",
-  "$id": "experience-index.schema.json",
-  "title": "Blackboard Experience Index",
-  "description": "Schema for the experience index file that tracks all stored experience entries",
-  "type": "object",
-  "required": ["entries", "metadata"],
-  "additionalProperties": false,
-  "properties": {
-    "entries": {
-      "type": "array",
-      "description": "Index records pointing to individual experience files",
-      "items": {
-        "type": "object",
-        "required": ["id", "file", "task_type", "tags", "timestamp", "confidence"],
-        "additionalProperties": false,
-        "properties": {
-          "id": {
-            "type": "string",
-            "description": "Unique identifier for this experience entry"
-          },
-          "file": {
-            "type": "string",
-            "description": "Relative path to the experience JSON file (e.g. YYYY-MM-DD_task-slug.json)"
-          },
-          "task_type": {
-            "type": "string",
-            "description": "Category of task this experience was recorded from"
-          },
-          "tags": {
-            "type": "array",
-            "description": "Labels for filtering and retrieval",
-            "items": {
-              "type": "string"
-            }
-          },
-          "timestamp": {
-            "type": "string",
-            "description": "ISO 8601 timestamp when the experience was recorded"
-          },
-          "confidence": {
-            "type": "number",
-            "minimum": 0,
-            "maximum": 1,
-            "description": "Confidence score for this experience (0.0 = low, 1.0 = high)"
-          }
-        }
-      }
-    },
-    "metadata": {
-      "type": "object",
-      "description": "Administrative metadata about the experience index",
-      "required": ["total_count", "last_updated", "max_entries", "pruning_strategy"],
-      "additionalProperties": false,
-      "properties": {
-        "total_count": {
-          "type": "integer",
-          "minimum": 0,
-          "description": "Total number of experience entries in the index"
-        },
-        "last_updated": {
-          "type": ["string", "null"],
-          "description": "ISO 8601 timestamp of the most recent write to this index"
-        },
-        "max_entries": {
-          "type": "integer",
-          "default": 200,
-          "description": "Maximum number of entries to retain before pruning is triggered"
-        },
-        "pruning_strategy": {
-          "type": "string",
-          "description": "Strategy used to remove entries when max_entries is exceeded (e.g. remove_oldest_low_confidence)"
-        }
-      }
-    }
-  }
-}
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "experience-index.schema.json",
+  "title": "Blackboard Experience Index",
+  "description": "Schema for the experience index file that tracks all stored experience entries",
+  "type": "object",
+  "required": ["entries", "metadata"],
+  "additionalProperties": false,
+  "properties": {
+    "entries": {
+      "type": "array",
+      "description": "Index records pointing to individual experience files",
+      "items": {
+        "type": "object",
+        "required": ["id", "file", "task_type", "tags", "timestamp", "confidence"],
+        "additionalProperties": false,
+        "properties": {
+          "id": {
+            "type": "string",
+            "description": "Unique identifier for this experience entry"
+          },
+          "file": {
+            "type": "string",
+            "description": "Relative path to the experience JSON file (e.g. YYYY-MM-DD_task-slug.json)"
+          },
+          "task_type": {
+            "type": "string",
+            "description": "Category of task this experience was recorded from"
+          },
+          "tags": {
+            "type": "array",
+            "description": "Labels for filtering and retrieval",
+            "items": {
+              "type": "string"
+            }
+          },
+          "timestamp": {
+            "type": "string",
+            "description": "ISO 8601 timestamp when the experience was recorded"
+          },
+          "confidence": {
+            "type": "number",
+            "minimum": 0,
+            "maximum": 1,
+            "description": "Confidence score for this experience (0.0 = low, 1.0 = high)"
+          }
+        }
+      }
+    },
+    "metadata": {
+      "type": "object",
+      "description": "Administrative metadata about the experience index",
+      "required": ["total_count", "last_updated", "max_entries", "pruning_strategy"],
+      "additionalProperties": false,
+      "properties": {
+        "total_count": {
+          "type": "integer",
+          "minimum": 0,
+          "description": "Total number of experience entries in the index"
+        },
+        "last_updated": {
+          "type": ["string", "null"],
+          "description": "ISO 8601 timestamp of the most recent write to this index"
+        },
+        "max_entries": {
+          "type": "integer",
+          "default": 200,
+          "description": "Maximum number of entries to retain before pruning is triggered"
+        },
+        "pruning_strategy": {
+          "type": "string",
+          "description": "Strategy used to remove entries when max_entries is exceeded (e.g. remove_oldest_low_confidence)"
+        }
+      }
+    }
+  }
+}