Christian Gick 36c7e36456 security: enforce per-user data isolation in memory service ...

- Make user_id required on all request models with field validators
- Always include user_id in WHERE clause for chunk queries (prevents cross-user data leak)
- Add bearer token auth on all endpoints except /health
- Add composite index on (user_id, room_id) for conversation_chunks
- Bot: guard query_chunks with sender check, pass room_id, send auth token
- Docker: pass MEMORY_SERVICE_TOKEN to both bot and memory-service

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-08 13:45:15 +02:00

..

Dockerfile

feat(MAT-107): memory encryption & user isolation

2026-03-06 15:56:14 +00:00

main.py

security: enforce per-user data isolation in memory service

2026-03-08 13:45:15 +02:00

migrate_encrypt.py

feat(MAT-107): memory encryption & user isolation

2026-03-06 15:56:14 +00:00

migrate_json.py

feat: Replace JSON memory with pgvector semantic search (MAT-11)

2026-02-20 06:25:50 +02:00

requirements.txt

feat(MAT-107): memory encryption & user isolation

2026-03-06 15:56:14 +00:00