omninode-intelligence 0.6.0__tar.gz

omninode_intelligence-0.6.0/.claude/architecture-handshake.md

@@ -0,0 +1,71 @@
+<!-- HANDSHAKE_METADATA
+source: omnibase_core/architecture-handshakes/repos/omniintelligence.md
+source_version: 0.17.0
+source_sha256: 16fef6d817424057ed81b940c80acf88b0ee5f31835f01b5c8d7abf4349b9bcf
+installed_at: 2026-02-13T22:55:19Z
+installed_by: jonah
+-->
+
+# OmniNode Architecture – Constraint Map (omniintelligence)
+
+> **Role**: Intelligence platform – code quality, pattern learning, semantic analysis
+> **Handshake Version**: 0.1.0
+
+## Platform-Wide Rules
+
+1. **No backwards compatibility** - Breaking changes always acceptable. No deprecation periods, shims, or migration paths.
+2. **Delete old code immediately** - Never leave deprecated code "for reference." If unused, delete it.
+3. **No speculative refactors** - Only make changes that are directly requested or clearly necessary.
+4. **No silent schema changes** - All schema changes must be explicit and deliberate.
+5. **Frozen event schemas** - All models crossing boundaries (events, intents, actions, envelopes, projections) must use `frozen=True`. Internal mutable state is fine.
+6. **Explicit timestamps** - Never use `datetime.now()` defaults. Inject timestamps explicitly.
+7. **No hardcoded configuration** - All config via `.env` or Pydantic Settings. No localhost defaults.
+8. **Kafka is required infrastructure** - Use async/non-blocking patterns. Never block the calling thread waiting for Kafka acks.
+9. **No `# type: ignore` without justification** - Requires explanation comment and ticket reference.
+
+## Core Principles
+
+- Declarative nodes, imperative handlers
+- Thin shell pattern (<100 lines per node)
+- Correlation IDs threaded through all operations
+
+## This Repo Contains
+
+- Claude Code hook event processing
+- Pattern learning (extraction, clustering, lifecycle)
+- Quality scoring with ONEX compliance
+- Intent classification (pure computation)
+- Semantic code analysis
+
+**Note**: Vector storage (Qdrant) and graph operations (Memgraph) are in `omnimemory`.
+
+## Rules the Agent Must Obey
+
+1. **Node classes must be thin shells** (<100 lines) - Logic belongs in handlers
+2. **Handlers must return structured errors, not raise** - Domain errors are data, not exceptions
+3. **`correlation_id` must be threaded through all operations** - End-to-end tracing required
+
+## Non-Goals (DO NOT)
+
+- ❌ No developer convenience over strictness - Boilerplate is acceptable if it enforces boundaries
+- ❌ No framework agnosticism - This is ONEX-native, no abstraction layers
+- ❌ No flexibility over determinism - One way to do things
+- ❌ No minimal code - Explicit is better than clever
+
+## Thin Shell Pattern
+
+```python
+# CORRECT - ~22 lines, delegates to handler
+class NodeQualityScoringCompute(NodeCompute[Input, Output]):
+    async def compute(self, input_data: Input) -> Output:
+        return handle_quality_scoring_compute(input_data)
+```
+
+## Node Types
+
+| Type | Purpose | Output |
+|------|---------|--------|
+| Orchestrator | Coordinate workflows | `events[]`, `intents[]` |
+| Reducer | FSM state transitions | `projections[]` |
+| Compute | Pure data processing | `result` (required) |
+| Effect | External I/O | `events[]` |

omninode_intelligence-0.6.0/.cross-repo-policy.yaml

@@ -0,0 +1,59 @@
+# SPDX-FileCopyrightText: 2025 OmniNode.ai Inc.
+# SPDX-License-Identifier: MIT
+
+# =============================================================================
+# Cross-Repo Validation Policy - Kafka Import Guard
+# =============================================================================
+#
+# Purpose: Prevent direct Kafka library imports in ONEX node code.
+# Nodes must use ProtocolKafkaPublisher abstractions, not raw Kafka clients.
+#
+# Reference: ARCH-002 "Runtime owns all Kafka plumbing"
+# Ticket: OMN-1749
+# =============================================================================
+
+---
+policy_id: omniintelligence_kafka_guard
+policy_version:
+  major: 1
+  minor: 0
+  patch: 0
+repo_id: omniintelligence
+
+# =============================================================================
+# Discovery - What files to scan
+# =============================================================================
+discovery:
+  include_globs:
+    - "src/omniintelligence/nodes/**/*.py"
+  exclude_globs:
+    - "**/__pycache__/**"
+    - "**/node_tests/**"
+    - "**/__init__.py"
+  language_mode: python
+  skip_generated: true
+  generated_markers:
+    - "# AUTO-GENERATED"
+    - "# DO NOT EDIT"
+
+# =============================================================================
+# Rules
+# =============================================================================
+rules:
+  forbidden_imports:
+    enabled: true
+    severity: error
+    # Block entire Kafka libraries, not just consumer classes.
+    # This prevents bypassing via aliases or alternate import paths.
+    forbidden_prefixes:
+      - "aiokafka"
+      - "confluent_kafka"
+      - "kafka"
+    forbidden_modules: []
+    exceptions: []
+
+# =============================================================================
+# Baselines
+# =============================================================================
+# No baseline needed - nodes directory is clean (verified 2026-02-01)
+baselines: []

omninode_intelligence-0.6.0/.env.example

@@ -0,0 +1,116 @@
+# =============================================================================
+# OmniIntelligence Environment Configuration
+# =============================================================================
+#
+# QUICK START:
+# 1. Copy this file to .env:  cp .env.example .env
+# 2. Add OMNIINTELLIGENCE_DB_URL=postgresql://postgres:<password>@<host>:5436/omniintelligence to .env
+#    where <host> is 192.168.86.200 for the remote server or localhost for a local PostgreSQL instance.
+#    (this variable is not in this file; obtain credentials from your team lead)
+# 3. Run tests: pytest tests/integration -m integration -v
+#
+# IMPORTANT: The .env file contains secrets and should NEVER be committed.
+#            It is already in .gitignore.
+#
+# =============================================================================
+
+# =============================================================================
+# PostgreSQL Database Configuration
+# =============================================================================
+# Single connection URL for the OmniIntelligence database.
+# Host options:
+#   - Remote server: 192.168.86.200:5436 (OmniNode Bridge stack, external port)
+#   - Local PostgreSQL container: localhost:5436
+#
+# REQUIRED: Replace <password> with the actual PostgreSQL password.
+# Contact your team lead or check secure credential storage.
+# DO NOT commit credentials to version control.
+OMNIINTELLIGENCE_DB_URL=postgresql://postgres:<password>@192.168.86.200:5436/omniintelligence
+
+# Connection pool settings (optional, sensible defaults provided)
+POSTGRES_MIN_POOL_SIZE=2
+POSTGRES_MAX_POOL_SIZE=10
+
+# Command timeout in seconds for database operations (optional).
+# Read by plugin.py and tests/integration/conftest.py with a default of 60.0.
+# POSTGRES_COMMAND_TIMEOUT=60.0
+
+# =============================================================================
+# Kafka/Redpanda Event Bus Configuration
+# =============================================================================
+# Remote Redpanda server at 192.168.86.200
+# Port 29092 is the EXTERNAL port for host machine access.
+# Docker services use port 9092 via hostname omninode-bridge-redpanda.
+#
+# IMPORTANT: Use different configurations depending on context:
+#   - Host scripts/tests: 192.168.86.200:29092 (external port)
+#   - Docker services: omninode-bridge-redpanda:9092 (internal port via DNS)
+
+KAFKA_BOOTSTRAP_SERVERS=192.168.86.200:29092
+KAFKA_REQUEST_TIMEOUT_MS=30000
+KAFKA_MAX_BLOCK_MS=10000
+
+# =============================================================================
+# Qdrant Vector Database Configuration (Optional)
+# =============================================================================
+# Used for vector search and embeddings storage.
+# Typically runs locally on the development machine.
+
+QDRANT_HOST=localhost
+QDRANT_PORT=6333
+QDRANT_URL=http://localhost:6333
+
+# =============================================================================
+# AI/ML API Keys (Optional)
+# =============================================================================
+# Required for intelligence operations that call external AI services.
+
+OPENAI_API_KEY=
+
+# =============================================================================
+# LLM Endpoints (Multi-Server Architecture)
+# =============================================================================
+# See ~/.claude/CLAUDE.md for complete endpoint documentation.
+#
+# Linux GPU Server (192.168.86.201):
+#   - Port 8000: Qwen2.5-Coder-14B (code generation)
+#   - Port 8002: GTE-Qwen2 (embeddings)
+#
+# Mac Studio (192.168.86.200):
+#   - Port 8100: Qwen2.5-72B (documentation/analysis)
+
+LLM_CODER_URL=http://192.168.86.201:8000
+LLM_EMBEDDING_URL=http://192.168.86.201:8002
+LLM_QWEN_72B_URL=http://192.168.86.200:8100
+
+# =============================================================================
+# Feature Flags (Optional)
+# =============================================================================
+
+# Allow Kafka producers/consumers to use default configuration when
+# bootstrap servers are not explicitly configured.
+OMNIINTELLIGENCE_ALLOW_DEFAULT_KAFKA=true
+
+# Shared Kafka consumer group ID for all intelligence topic consumers (OMN-2439).
+# All runtime containers (omninode-runtime, omninode-runtime-effects, runtime-worker-*)
+# must use the same group so Kafka load-balances partitions across the group rather
+# than delivering each message to every container independently.
+# Defaults to "omniintelligence-hooks" when unset or empty.
+# Must not contain whitespace characters.
+# OMNIINTELLIGENCE_CONSUMER_GROUP=omniintelligence-hooks
+
+# Enable real-time event publishing for intelligence operations.
+ENABLE_REAL_TIME_EVENTS=true
+
+# Enable Kafka-based intelligence operations.
+KAFKA_ENABLE_INTELLIGENCE=true
+
+# =============================================================================
+# Development/Test Settings
+# =============================================================================
+
+# Log level for debugging
+LOG_LEVEL=INFO
+
+# Enable verbose test output
+PYTEST_ADDOPTS=-v --tb=short

omninode_intelligence-0.6.0/.github/ISSUE_TEMPLATE/bug_report.md

@@ -0,0 +1,13 @@
+---
+name: Bug Report
+about: Report a reproducible bug
+title: '[Bug] '
+labels: bug
+---
+## Describe the bug
+## To Reproduce
+## Expected behavior
+## Environment
+- OS:
+- Python:
+- Package version:

omninode_intelligence-0.6.0/.github/ISSUE_TEMPLATE/feature_request.md

@@ -0,0 +1,9 @@
+---
+name: Feature Request
+about: Suggest an enhancement
+title: '[Feature] '
+labels: enhancement
+---
+## Problem
+## Proposed solution
+## Alternatives considered

omninode_intelligence-0.6.0/.github/PULL_REQUEST_TEMPLATE.md

@@ -0,0 +1,12 @@
+## Summary
+
+## Changes
+-
+
+## Test plan
+- [ ] `uv run pytest tests/ -m unit`
+- [ ] `uv run pre-commit run --all-files`
+- [ ] `uv run mypy src/ --strict`
+
+## Related issues
+Closes #

omninode_intelligence-0.6.0/.github/dependabot.yml

@@ -0,0 +1,13 @@
+---
+# SPDX-FileCopyrightText: 2025 OmniNode.ai Inc.
+# SPDX-License-Identifier: MIT
+version: 2
+updates:
+  - package-ecosystem: "pip"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"

omninode_intelligence-0.6.0/.github/required-checks.yaml

@@ -0,0 +1,148 @@
+# SPDX-FileCopyrightText: 2025 OmniNode.ai Inc.
+# SPDX-License-Identifier: MIT
+---
+# Required Status Checks for `main` Branch Protection (v2)
+#
+# This manifest is the SINGLE SOURCE OF TRUTH for branch protection configuration.
+# The `gates` list defines the only operational contract -- these are the API-stable
+# check_names that branch protection rules reference.
+#
+# INVARIANTS:
+# 1. Gate check_name values are API-stable. Renames require coordinated branch
+#    protection update (temp dual-require, merge, remove old).
+# 2. Individual job names inside gates can change freely without updating
+#    branch protection rules.
+# 3. The `gates` list is the only operational contract. The `checks` section
+#    is documentation only.
+#
+# Supersedes: v1 (OMN-2185) -- flat required_checks list
+# Added: OMN-2227
+# Last verified: 2026-02-15
+# Schema version: v2
+
+schema_version: 2
+
+# ── Gates (operational contract for branch protection) ────────────────────────
+# These check_names are required in GitHub branch protection settings.
+# They are API-stable -- do NOT rename without the migration safety procedure.
+gates:
+  - check_name: "Quality Gate"
+    workflow_file: ci.yaml
+    workflow_job_key: quality-gate
+    rationale: >
+      Aggregates all unconditional governance checks: pre-commit, scope-alignment, contract-validation,
+      io-audit, cross-repo-validation, migration-freeze, check-handshake, detect-secrets. Replaces 8 individual
+      branch protection checks with a single stable gate.
+  - check_name: "CI Summary"
+    workflow_file: ci.yaml
+    workflow_job_key: ci-summary
+    rationale: >
+      Final aggregator for Quality Gate + path-filtered production code jobs (Lint, Type Check, Unit Tests).
+      REQUIRED because this repo uses path filtering -- ensures skipped jobs are distinguished as "skipped
+      by policy" vs "missing due to misconfiguration".
+# ── Checks (documentation only -- not used for branch protection) ─────────────
+# These are the individual jobs aggregated by Quality Gate.
+# Listed here for documentation and cross-referencing purposes only.
+checks:
+  - name: "Pre-commit Hooks"
+    workflow_file: ci.yaml
+    workflow_job_key: pre-commit
+    aggregated_by: "Quality Gate"
+
+  - name: "Scope Alignment"
+    workflow_file: ci.yaml
+    workflow_job_key: scope-alignment
+    aggregated_by: "Quality Gate"
+
+  - name: "Contract Validation"
+    workflow_file: ci.yaml
+    workflow_job_key: contract-validation
+    aggregated_by: "Quality Gate"
+
+  - name: "I/O Audit"
+    workflow_file: ci.yaml
+    workflow_job_key: io-audit
+    aggregated_by: "Quality Gate"
+
+  - name: "Cross-Repo Validation"
+    workflow_file: ci.yaml
+    workflow_job_key: cross-repo-validation
+    aggregated_by: "Quality Gate"
+
+  - name: "Migration Freeze Check"
+    workflow_file: ci.yaml
+    workflow_job_key: migration-freeze
+    aggregated_by: "Quality Gate"
+
+  - name: "Verify Architecture Handshake"
+    workflow_file: ci.yaml
+    workflow_job_key: check-handshake
+    aggregated_by: "Quality Gate"
+    note: "Skipped on fork PRs (acceptable -- no fork PRs accepted for this repo)"
+
+  - name: "Detect Secrets"
+    workflow_file: ci.yaml
+    workflow_job_key: detect-secrets
+    aggregated_by: "Quality Gate"
+
+  - name: "Lint"
+    workflow_file: ci.yaml
+    workflow_job_key: lint
+    aggregated_by: "CI Summary"
+    note: "Path-filtered via Detect Changes -- skipped on docs-only PRs"
+
+  - name: "Type Check"
+    workflow_file: ci.yaml
+    workflow_job_key: type-check
+    aggregated_by: "CI Summary"
+    note: "Path-filtered via Detect Changes -- skipped on docs-only PRs"
+
+  - name: "Unit Tests"
+    workflow_file: ci.yaml
+    workflow_job_key: test-unit
+    aggregated_by: "CI Summary"
+    note: "Path-filtered via Detect Changes -- skipped on docs-only PRs"
+
+# ── Explicitly excluded from required checks ──────────────────────────────────
+# These checks run in CI but are NOT configured as required status checks in
+# branch protection. They are either aggregated by a gate or informational only.
+excluded_checks:
+  - name: "Detect Changes"
+    workflow_file: ci.yaml
+    reason: "Path-filter helper job -- outputs whether production code changed. Not a correctness check."
+
+  - name: "Pre-commit Hooks"
+    reason: "Aggregated by Quality Gate (v2). No longer a direct branch protection check."
+
+  - name: "Scope Alignment"
+    reason: "Aggregated by Quality Gate (v2)."
+
+  - name: "Contract Validation"
+    reason: "Aggregated by Quality Gate (v2)."
+
+  - name: "I/O Audit"
+    reason: "Aggregated by Quality Gate (v2)."
+
+  - name: "Cross-Repo Validation"
+    reason: "Aggregated by Quality Gate (v2)."
+
+  - name: "Migration Freeze Check"
+    reason: "Aggregated by Quality Gate (v2)."
+
+  - name: "Verify Architecture Handshake"
+    reason: "Aggregated by Quality Gate (v2)."
+
+  - name: "Lint"
+    reason: "Path-filtered. Aggregated by CI Summary."
+
+  - name: "Type Check"
+    reason: "Path-filtered. Aggregated by CI Summary."
+
+  - name: "Unit Tests"
+    reason: "Path-filtered. Aggregated by CI Summary."
+
+  - name: "claude"
+    reason: "Claude Code bot (claude.yml). Triggered by @claude mentions, not PR CI."
+
+  - name: "Dependabot"
+    reason: "Dependabot compatibility score. Informational, not a correctness gate."