# 13 — Memory-bank embedding cost (round three of the egress work) **Goal:** stop every turn fetching the entire memory bank's embeddings. Measured at **3,024 KB per turn** on adventure 25 against **129 KB** for everything else a turn reads — the memory bank is ~96% of a turn's database traffic, and it is fetched fresh every single turn to pick `memory_top_k = 5` memories. Found 2026-08-16 while designing the story tree (see `14-phase-story-tree.md`), because memory retrieval is the one read a tree **cannot** window — it is long-range recall by design, so it always spans the full path. That makes this the cost floor of a turn under the tree, which is why it lands first. ## The measurement (production, Neon SQL editor) ```sql SELECT count(*), avg(json_array_length(embedding))::int, avg(length(embedding::text))::int, pg_size_pretty(sum(length(embedding::text))::bigint) FROM memories WHERE embedding IS NOT NULL; -- 134 memories | 1536 dims | 30,971 bytes each | 4,053 kB total ``` | adventure | active | fetched | per turn | |---|---|---|---| | 25 | 100 | 100 | **3,024 kB** | | 21 | 18 | 18 | 545 kB | | 12 | 12 | 12 | 363 kB | | 20 | 4 | 4 | 121 kB | Break-even against the rest of a turn is **4.2 memories**, i.e. about action 25. Every adventure past that is dominated by this. `active == fetched` everywhere: nothing has been evicted yet, so the Python-side `forgotten` filter currently costs nothing. It becomes a real leak the moment eviction starts. ## Why round two missed it `retrieve_memories` needs `settings.embedding_model`, and embedding providers are **BYOK-only by construction** — they never touch the demo key. So the public demo never embeds anything, and the round-two stress harness (which had no embedding model configured) measured the turn loop with its heaviest read switched off. The 23.0 MB figure for a 200-action playthrough is the memory-bank-**off** number; with it on, adventure 25 is closer to 300 MB. **Rule going forward: any egress measurement must run with an embedding model set.** ## Root cause `memorybank.py:208` ```python candidates = [m for m in adventure.memories if not m.forgotten and m.embedding] ``` Walks the relationship, so every memory row for the adventure loads with its embedding. `embedding` is `Mapped[list]` on a `JSON` column — 1536 floats serialised as text is ~31 KB. Cosine ranking happens in Python (a deliberate choice, documented at `models.py:144`), so all of it must cross the wire. The comment sized it by **count** ("fine at a few hundred") rather than by **bytes**. Not the same bug as migration 36/37 — the column is not a repeating group and there is no denormalisation to fix. It is a *format* problem plus a *fetch-frequency* problem. ## Decisions (settled 2026-08-16) - **Packed float32, keep 1536 dimensions.** 31 KB → 6 KB, a straight 5x, with **zero retrieval-quality risk**. Explicitly rejected dropping to 512/768 dims: the size fix plus the cache makes the extra 3x unnecessary, and it would have meant re-embedding. - **No re-embedding.** Dimensions are unchanged, so the migration is a pure format conversion of the 134 existing rows — read the JSON, write packed bytes, no API calls. One-time 4 MB read. - **In-process cache alongside the size fix**, not sequenced after it. Turns for one adventure arrive back-to-back, so a dict keyed by adventure id takes steady-state cost to ~0. 100 vectors as float32 is 600 KB of RAM — negligible. - **`memory_bank_capacity` 200 → ~80.** Taken on *quality* grounds as much as cost: ranking 200 memories to pick 5 dilutes retrieval. Note this will start evicting on adventure 25 immediately (it sits at 100). - **Not pgvector.** It is the structural answer and would keep vectors in the database entirely, but it breaks SQLite dev parity — which the codebase protects deliberately (`context/history.py:42`, the `replace()`/`trim()` dialect dance). Revisit only if the bank grows past what Python cosine can handle. ## Work, in order 1. **Rebuild the byte-meter harness — in the repo this time.** `backend/tools/dbmeter.py` + `stress_session.py`. The originals lived outside the repo and are gone. **Default it to running with an embedding model configured**, since that omission is precisely what hid this finding. Do this first so every item below is measured, not assumed. **Done 2026-08-16** — see the baseline below. 2. **Migration 38 — `memories.embedding_blob` (`LargeBinary`).** **Done.** Backfill in Python (`struct.pack(f"<{n}f", *vec)`); the conversion cannot be expressed in portable SQL, so unlike migration 36/37 this one does pay a one-time 4 MB read. Drop the old JSON column in a follow-up migration once verified, not in the same one. 3. **Read path.** **Done.** `retrieve_memories` queries `memories` directly with `forgotten = false AND embedding_blob IS NOT NULL` in **SQL**, not Python. Unpack with `struct`/`numpy`. Same for `_evict_over_capacity` and `_embed_pending`, which walk the same relationship for a count and for the unembedded rows (see the baseline above). 4. **Vector cache.** **Done.** Keyed by `adventure_id`, bounded to 8 adventures. It turned out to need no invalidation callbacks at all — see below. 5. **Capacity default 200 → 80.** **Done** (migration 41, only rows still on the old default). Eviction checked at scale first: trimming a 100-memory bank to 80 costs 0.8 kB and eight statements, and reads no vectors at all. 6. **Infinite scroll upward in `Play.jsx`** for the remaining 423 KB page load of a finished adventure — the last open item from round two. Load the newest turns, fetch older ones as the reader scrolls up. ## Baseline from the harness (2026-08-16) `python -m tools.stress_session`, 200 actions × 4 KB, 100 memories × 1536 dims: | shape | fetched | memories' share | |---|---|---| | `GET /adventures` (index) | 0.7 kB | — | | `GET /adventures/{id}` (page load) | 426.7 kB | — | | `POST /adventures/{id}/actions` (one turn) | **3,258.7 kB** | 96% | | `GET /adventures/{id}/context` (Insights) | 3,223.7 kB | 97% | | `run_post_turn` (background) | **3,139.1 kB** | 100% | It reproduces both production figures independently — 426.7 kB against the measured 423 KB page load, 3,258.7 kB against 3,024 + 129 kB for a turn, and 31.4 KB per embedding against 31.0 KB. `--no-embeddings` reports 112.0 kB for the same turn, so the round-two blind spot is now a **29x** gap anyone can see in one flag. **Two findings the SQL measurement could not have shown**, both the same root cause in a different caller: - **`run_post_turn` fetches the whole bank again**, every turn. `_evict_over_capacity` walks `adventure.memories` to count the active ones, and `_embed_pending` walks it to find the unembedded ones. So a played turn actually costs ~6.4 MB, not 3.2 — the original estimate was half the real number. - **Insights pays it a third time**, on a page the player can open repeatedly without spending a turn. So step 3 below is not just `retrieve_memories`: **every walk of `adventure.memories` has to go**. `_evict_over_capacity` wants a count and an ordering, `_embed_pending` wants rows where `embedding IS NULL` — neither needs a single vector, and both are pure SQL. ## After (2026-08-16, same harness, same fixture) | shape | before | after (cold) | after (warm) | |---|---|---|---| | `POST .../actions` (one turn) | 3,258.7 kB | 723.4 kB | **122.3 kB** | | `run_post_turn` | 3,139.1 kB | 0.7 kB | 0.7 kB | | `GET .../context` (Insights) | 3,223.7 kB | 117.9 kB | 117.9 kB | | `GET .../memories` (drawer) | ~3,138 kB | 23.6 kB | 23.6 kB | A played turn is turn + post_turn: **6,398 kB → 123 kB** once warm, a 52x cut. The targets above were ~700 kB cold and ~130 kB warm, so both were met. Steps 2–5 landed together, because they are one deployable unit: the columns are no use unless something reads them, and deferring them breaks the old readers. Two additions the plan did not anticipate: - **`memories.embedded`, a boolean beside the blob** (migration 39/40). Once the vectors are deferred, every "does this have an embedding?" check becomes a lazy load — an N+1 of 6 KB reads down the Memories drawer. Same shape as `actions.variant_count` beside `actions.variants`, and the same reason. - **The cache needs no invalidation callbacks.** Vectors only ever change through `set_vector`, which drops the one entry; everything that *removes* a memory from play leaves the catalogue query, and entries missing from the catalogue are dropped on the next read. So eviction, deletion and pruning need no hooks and cannot be forgotten. Vectors are held as `array("f")` — 6 KB each, matching the column; a list of Python floats would have been eight times the plan's RAM estimate. **Step 6 landed on 2026-08-17**, along with everything else this plan left open — see "Closing the plan" at the end. The page load is a window of 60 actions now: 62.6 kB on a 600-action fixture, down from 606.0 kB, and no longer a function of the story's length. ## Guardrails to add with this work - **Query-count / byte assertions per endpoint**, extending the `test_egress.py` idea: assert an endpoint issues at most N queries and fetches under X KB against production-sized fixtures. This class of bug is invisible at ten rows. - **Explicit column projections on read paths.** List endpoints name the fields they need rather than loading whole entities, so the next heavy column is opt-**in**. This is the structural version of what `deferred=True` does by hand. - **Row-width review rule.** Any new large column justifies itself or goes out-of-line. `actions` now carries five JSON columns. Deliberately **not** taken: moving `context_snapshot` out of the database. It costs nothing on reads now that it is deferred, and storage is ~$0.02/mo. Revisit only if backups or storage start to hurt. > **Revisit it.** That call weighed egress and got egress right, but it never weighed > the free tier's *storage* ceiling — see "Storage, which this plan did not cost" below. ## Verification - Harness: `python -m tools.stress_session`, memory bank **on**, before and after, against the baseline table above. Target for the turn shape is 3,258 kB → ~700 kB cold, ~130 kB warm (the cache leaves only what a turn reads besides the bank). `run_post_turn` should fall to roughly nothing: neither of its two walks needs a vector at all. - Re-run the round-two shapes with an embedding model configured, so the 200-action playthrough number is finally honest. - The existing `test_egress.py` guard must still pass — nothing here should touch the deferred action columns. ## Verified on production, 2026-08-17 Two things were still taken on trust when this shipped: every measurement had run on SQLite, and every number came from a synthetic fixture. Both are now checked. ### The migration landed on real Postgres `schema_version` reads **41**, matching the repo's `LATEST_VERSION`. The live schema has `embedding_blob bytea` and `embedded boolean`, so the `{dialect: sql}` map in migration 38 spells BYTEA correctly against a real server — the one thing tests could not prove, since `test_migration_38_is_spelled_for_both_dialects` only inspects the SQL string. The backfill is complete: 134 memories, `embedded = 134`, `embedding_blob = 134`, no stragglers and no rows skipped as malformed. ### The 5x is real, on real vectors | | bytes | per memory | |---|---|---| | `embedding` (JSON) | 4,150,121 | 30,971 | | `embedding_blob` (float32) | 823,296 | 6,144 | **5.04x**, against the plan's predicted ~31 KB → 6,144 B. The largest real bank is 100 memories = 614,400 B of vectors, so the old code fetched **~3.10 MB per retrieval** on that adventure — which is where the 3,153 kB measured on production came from. That figure is now fully accounted for. ### SQLite and Postgres agree `tools.stress_session` gained an `AIDND_STRESS_DATABASE_URL` escape hatch and was run against a throwaway Neon database at the default fixture (200 actions, 100 memories): | shape | SQLite | Postgres | |---|---|---| | index | 4.1 kB | 4.1 kB | | page load | 426.7 kB | 425.0 kB | | one turn, cold | 723.4 kB | 722.3 kB | | one turn, warm | 122.3 kB | **121.1 kB** | | Insights | 117.9 kB | 116.7 kB | | Memories drawer | 23.7 kB | 21.7 kB | | `run_post_turn` | 0.7 kB | 0.6 kB | Within 0.5% everywhere. The dialect caveat in the harness docstring is real but small: what dominates is which columns get asked for, and the ORM decides that identically. The warm turn spends **1.7 kB on `memories`, 1% of the read** — the cache behaves on psycopg exactly as it does on SQLite. ### The page load is worse than modelled, for a different reason The synthetic fixture is **~2x heavier per action than production**: 994 B/action real against ~2,133 B/action synthetic, so a real 200-action adventure is ~194 kB, not 427. But the largest real adventure is **607 actions**, not 200, and costs **589.5 kB** in one response. Step 6 is more urgent than this plan assumed, and for the opposite reason to the one modelled — stories get *longer* than the fixture, not heavier. Worth fixing the fixture's narration size when step 6 lands, so the harness stops flattering the per-action figure while understating the length. ### Storage, which this plan did not cost `context_snapshot` is **150.8 MB of uncompressed JSON across 944 actions** — ~163 kB a row on average, and ~232 kB a row in the largest adventure, against the ~74 KB/row the comment in `models.py` claims. TOAST compresses it to ~89 MB on disk, but `octet_length` is what would cross the wire, because Postgres decompresses before sending. Deferral is the only thing standing between a bulk read and a 137 MB query. The database is **99.6 MB total**, of which `actions` is **88.9 MB**. Neon's free tier is 512 MB. At ~94 kB of disk per action that ceiling arrives at roughly **5,400 actions**, and 944 are already stored. So the "~$0.02/mo, leave it in the database" call above is wrong for the tier this actually runs on — not because reads cost anything, but because the free tier meters *storage*, and that is the constraint with a cliff. Dropping the dead `memories.embedding` column reclaims 4.05 MB (4%), which helps and does not solve it. None of the numbers above required reading a single row of anyone's content: counts, `octet_length` sums and catalog sizes only. ## Closing the plan, 2026-08-17 Everything above landed the same day the verification did. | | before | after | |---|---|---| | page load, 600 actions | 606.0 kB | **62.6 kB**, and flat in story length | | adventures index, 6 adventures | 469.7 kB | **0.3 kB** | | `context_snapshot` stored | ~89 MB | ~43 MB (after a VACUUM) | | a played turn | 6.4 MB (2026-08-16) | 123 kB | **Step 6, the window.** `GET /adventures/{id}` returns the newest `ACTION_PAGE` actions and the story's length; `GET /{id}/actions?before_id=` walks back from there. Anchored on an action rather than an offset — the offset version breaks precisely when a turn lands mid-scroll, handing the reader one action twice and hiding another — and that choice is also what makes it survive the story tree, since it compares indices to order a branch rather than treating them as positions. **Byte assertions.** `tests/test_egress.py` now carries per-action budgets as well as column guards, plus one test whose only job is to fail if the fixture ever gets too small for the budgets to catch anything. **Column projections.** `ACTION_LIST_COLUMNS` and `MEMORY_LIST_COLUMNS` name what a list response renders, and the adventures index selects four columns instead of the entity. That one was not just future-proofing: an Adventure carries seven text and JSON columns the index never shows. **The JSON vector column is gone**, and dropping it exposed a live bug — changing your embedding model had stopped re-embedding the bank the day migration 38 shipped. See `tests/test_embedding_model_switch.py`. **Storage.** `context_snapshot` is zlib-compressed through a TypeDecorator (`app/compression.py`, migrations 43–45), so the call sites never learned about it. 3.5x on real Postgres. **This does not shrink anything until `VACUUM FULL actions` runs** — Postgres marks dropped columns rather than reclaiming them, and the backfill leaves a dead tuple per row. Not done: nothing exercises the scroll behaviour in a browser. The frontend has no test runner, and prepend-and-restore-scroll is the part most likely to feel wrong even when it is correct.