omninode-memory 0.6.4__tar.gz → 0.7.0__tar.gz

omninode_memory-0.7.0/.github/workflows/build-and-push-migrate-image.yml

@@ -0,0 +1,42 @@
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2026 OmniNode Team
+name: Build and push migration image to ECR
+on:
+  push:
+    branches: [main]
+    paths:
+      - 'deployment/docker/Dockerfile.migrate'
+      - 'deployment/database/migrations/**'
+      - '.github/workflows/build-and-push-migrate-image.yml'
+  workflow_dispatch:
+concurrency:
+  group: build-migrate-${{ github.ref }}
+  cancel-in-progress: false
+permissions:
+  id-token: write
+  contents: read
+env:
+  AWS_REGION: us-east-1
+  ECR_REGISTRY: ${{ vars.AWS_ACCOUNT_ID }}.dkr.ecr.us-east-1.amazonaws.com
+  ECR_REPOSITORY: omnimemory-migrate
+jobs:
+  build-and-push:
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    steps:
+      - uses: actions/checkout@v4
+      - uses: aws-actions/configure-aws-credentials@v4
+        with:
+          role-to-assume: arn:aws:iam::${{ vars.AWS_ACCOUNT_ID }}:role/omninode-github-actions-role
+          role-session-name: gha-build-migrate-omnimemory
+          aws-region: ${{ env.AWS_REGION }}
+      - run: aws sts get-caller-identity
+      - uses: aws-actions/amazon-ecr-login@v2
+      - name: Build and push
+        env:
+          IMAGE_URI: ${{ env.ECR_REGISTRY }}/${{ env.ECR_REPOSITORY }}
+          COMMIT_SHA: ${{ github.sha }}
+        run: |
+          docker build -f deployment/docker/Dockerfile.migrate -t "${IMAGE_URI}:${COMMIT_SHA}" -t "${IMAGE_URI}:latest" .
+          docker push "${IMAGE_URI}:${COMMIT_SHA}"
+          docker push "${IMAGE_URI}:latest"

omninode_memory-0.7.0/.github/workflows/contract-validation.yml

@@ -0,0 +1,135 @@
+# SPDX-FileCopyrightText: 2025 OmniNode.ai Inc.
+# SPDX-License-Identifier: MIT
+
+# Contract Validation Gate
+#
+# Validates ONEX ticket contracts for PRs in omnimemory using the
+# reusable composite action from onex_change_control.
+#
+# Required status check: "contract-validation"
+# Must pass (or skip) before merging to main.
+#
+# The validation is intentionally lenient on missing contracts:
+# - If branch name has no OMN-XXXX ticket ID → skipped
+# - If contracts/<ticket_id>.yaml does not exist → skipped
+# - If contract file exists but fails schema validation → fails
+#
+# This prevents blocking PRs that legitimately have no contract
+# (e.g., dependency bumps, docs-only changes) while enforcing schema
+# correctness when a contract is present.
+
+name: Contract Validation
+
+on:
+  pull_request:
+    branches: [main, develop]
+  merge_group:
+  workflow_dispatch:
+    inputs:
+      branch-name:
+        description: "Branch name to validate contracts for (defaults to current branch)"
+        required: false
+        default: ""
+
+# Allow concurrent runs on different PRs; cancel stale runs on the same ref
+concurrency:
+  group: contract-validation-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  contract-validation:
+    name: contract-validation
+    # OMNINODE_SELF_HOSTED_RUNS_ON_V1 — do not edit inline; update plan + all occurrences together
+    runs-on: >-
+      ${{
+        (vars.USE_SELF_HOSTED_RUNNERS == 'true' &&
+         (github.event_name == 'push' ||
+          github.event_name == 'workflow_dispatch' ||
+          github.event_name == 'schedule'))
+        && fromJSON('["self-hosted","omnibase-ci"]')
+        || fromJSON('["ubuntu-latest"]')
+      }}
+    timeout-minutes: 10
+
+    steps:
+      - name: Auth preflight — confirm onex_change_control action is accessible
+        id: auth-preflight
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: |
+          echo "Checking visibility of OmniNode-ai/onex_change_control..."
+          if gh api repos/OmniNode-ai/onex_change_control --silent; then
+            echo "::notice::onex_change_control repo is accessible."
+          else
+            echo "::error::Cannot reach OmniNode-ai/onex_change_control. Composite action will not resolve."
+            exit 1
+          fi
+
+      - name: Resolve branch name
+        id: resolve-branch
+        env:
+          WORKFLOW_INPUT_BRANCH: ${{ inputs.branch-name }}
+          GITHUB_HEAD_REF: ${{ github.head_ref }}
+          GITHUB_REF_NAME: ${{ github.ref_name }}
+          EVENT_NAME: ${{ github.event_name }}
+        run: |
+          # merge_group events run on gh-readonly-queue/... branches with no PR head ref.
+          # Contract validation is not meaningful in this context — skip immediately.
+          if [[ "$EVENT_NAME" == "merge_group" ]]; then
+            echo "resolved_branch=" >> "$GITHUB_OUTPUT"
+            echo "skip_validation=true" >> "$GITHUB_OUTPUT"
+            echo "::notice::merge_group event — contract validation skipped (validated on PR branch instead)."
+            exit 0
+          fi
+
+          echo "skip_validation=false" >> "$GITHUB_OUTPUT"
+
+          # Prefer workflow_dispatch input, then PR head ref, then ref name
+          if [[ -n "$WORKFLOW_INPUT_BRANCH" ]]; then
+            BRANCH="$WORKFLOW_INPUT_BRANCH"
+          elif [[ -n "$GITHUB_HEAD_REF" ]]; then
+            BRANCH="$GITHUB_HEAD_REF"
+          else
+            BRANCH="$GITHUB_REF_NAME"
+          fi
+          echo "resolved_branch=$BRANCH" >> "$GITHUB_OUTPUT"
+          echo "::notice::Resolved branch name: $BRANCH"
+
+      - name: Run contract validation
+        id: validate-contract
+        if: steps.resolve-branch.outputs.skip_validation != 'true'
+        uses: OmniNode-ai/onex_change_control/.github/actions/validate-contract@main
+        with:
+          branch-name: ${{ steps.resolve-branch.outputs.resolved_branch }}
+          contracts-path: contracts
+
+      - name: Report validation result
+        if: always()
+        env:
+          TICKET_ID: ${{ steps.validate-contract.outputs.ticket-id }}
+          VALIDATION_STATUS: ${{ steps.validate-contract.outputs.validation-status }}
+          SKIP_VALIDATION: ${{ steps.resolve-branch.outputs.skip_validation }}
+        run: |
+          if [[ "$SKIP_VALIDATION" == "true" ]]; then
+            echo "::notice::Contract validation SKIPPED — merge_group event."
+            exit 0
+          fi
+          case "$VALIDATION_STATUS" in
+            passed)
+              echo "::notice::Contract validation PASSED for ticket $TICKET_ID"
+              ;;
+            skipped)
+              if [[ -z "$TICKET_ID" ]]; then
+                echo "::notice::Contract validation SKIPPED — no OMN-XXXX ticket ID found in branch name."
+              else
+                echo "::notice::Contract validation SKIPPED — no contract file found for $TICKET_ID in contracts/."
+              fi
+              ;;
+            failed)
+              echo "::error::Contract validation FAILED for ticket $TICKET_ID. See validate-contract step for details."
+              exit 1
+              ;;
+            *)
+              echo "::warning::Unexpected validation status: '$VALIDATION_STATUS'. Treating as skipped."
+              ;;
+          esac

{omninode_memory-0.6.4 → omninode_memory-0.7.0}/.github/workflows/pre-commit.yml

@@ -12,9 +12,9 @@ jobs:
   pre-commit:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
-      - uses: actions/setup-python@v5
+      - uses: actions/setup-python@v6
         with:
           python-version: '3.12'
 

{omninode_memory-0.6.4 → omninode_memory-0.7.0}/.github/workflows/release-dry-run.yml

@@ -13,7 +13,7 @@ jobs:
   dry-run:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           fetch-depth: 0
       - uses: astral-sh/setup-uv@v7

{omninode_memory-0.6.4 → omninode_memory-0.7.0}/.github/workflows/release.yml

@@ -22,7 +22,7 @@ jobs:
   release:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           fetch-depth: 0
           ref: ${{ github.event_name == 'workflow_dispatch' && inputs.tag || github.ref }}

{omninode_memory-0.6.4 → omninode_memory-0.7.0}/.github/workflows/test.yml

@@ -34,12 +34,12 @@ jobs:
   #
   # Phase 2 - Full Test Suite (after Phase 1 completes):
   #   - test: Run all tests (depends on lint, pyright, onex-validation)
-  #   Note: check-handshake runs independently and is evaluated in test-summary,
+  #   Note: check-handshake runs independently and is evaluated in ci-summary,
   #   NOT in test's needs, because it may be skipped on fork PRs and GitHub Actions
   #   propagates skipped status to dependent jobs.
   #
   # Phase 3 - Aggregation:
-  #   - test-summary: Aggregates all job results
+  #   - ci-summary: Aggregates all job results
   #
   # CONFIGURATION SYNC NOTE:
   # These validations are synchronized with .pre-commit-config.yaml
@@ -84,7 +84,7 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0  # Needed for three-dot diff (merge-base with origin/main)
 
@@ -101,13 +101,13 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Install uv
         uses: astral-sh/setup-uv@v7
 
       - name: Install dependencies
-        run: uv sync
+        run: uv sync --reinstall-package omnibase-core --reinstall-package omnibase-spi --reinstall-package omnibase-infra
 
       # SYNC: Pre-commit hook 'ruff-format' at pre-commit stage
       # Both pre-commit and CI use --check for consistent validation
@@ -132,13 +132,13 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Install uv
         uses: astral-sh/setup-uv@v7
 
       - name: Install dependencies
-        run: uv sync
+        run: uv sync --reinstall-package omnibase-core --reinstall-package omnibase-spi --reinstall-package omnibase-infra
 
       # SYNC: Pre-commit hook 'pyright-type-check' at pre-push stage
       # Uses pyrightconfig.json for project-level settings
@@ -153,13 +153,13 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Install uv
         uses: astral-sh/setup-uv@v7
 
       - name: Install dependencies
-        run: uv sync
+        run: uv sync --reinstall-package omnibase-core --reinstall-package omnibase-spi --reinstall-package omnibase-infra
 
       # SYNC: Pre-commit hook 'validate-pydantic-patterns' at pre-commit stage
       - name: Validate Pydantic patterns
@@ -222,10 +222,10 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Set up Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version: ${{ env.PYTHON_VERSION }}
 
@@ -245,13 +245,13 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Install uv
         uses: astral-sh/setup-uv@v7
 
       - name: Install dependencies
-        run: uv sync
+        run: uv sync --reinstall-package omnibase-core --reinstall-package omnibase-spi --reinstall-package omnibase-infra
 
       - name: Find and validate contract YAML files
         run: |
@@ -275,13 +275,13 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Install uv
         uses: astral-sh/setup-uv@v7
 
       - name: Install dependencies
-        run: uv sync
+        run: uv sync --reinstall-package omnibase-core --reinstall-package omnibase-spi --reinstall-package omnibase-infra
 
       - name: Run I/O audit
         run: uv run python -m omnimemory.audit
@@ -295,13 +295,13 @@ jobs:
     if: github.event.pull_request.head.repo.full_name == github.repository || github.event_name != 'pull_request'
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       # Uses default GITHUB_TOKEN which has read access to public repos in the org.
       # Same pattern as omniclaude ci-cd.yml. If omnibase_core becomes private,
       # add: token: ${{ secrets.OMNIBASE_CORE_ACCESS_TOKEN }}
       - name: Checkout omnibase_core
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           repository: OmniNode-ai/omnibase_core
           path: omnibase_core
@@ -344,13 +344,13 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Install uv
         uses: astral-sh/setup-uv@v7
 
       - name: Install dependencies
-        run: uv sync
+        run: uv sync --reinstall-package omnibase-core --reinstall-package omnibase-spi --reinstall-package omnibase-infra
 
       - name: Run tests
         run: |
@@ -381,8 +381,8 @@ jobs:
           retention-days: 7
 
   # Phase 3 - Aggregation
-  test-summary:
-    name: Test Summary
+  ci-summary:
+    name: CI Summary
     runs-on: ubuntu-latest
     needs: [migration-freeze, lint, pyright, onex-validation, transport-import-guard, contract-validation, io-audit, check-handshake, test]
     if: always()
@@ -438,11 +438,11 @@ jobs:
     name: AI-Slop Pattern Check (strict, PR diff)
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           fetch-depth: 0
       - name: Set up Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version: '3.12'
       - name: Compute changed Python/Markdown files vs PR base

{omninode_memory-0.6.4 → omninode_memory-0.7.0}/.pre-commit-config.yaml

@@ -76,6 +76,11 @@
 #   pre-commit run --all-files --hook-stage pre-push  # Run pre-push hooks
 
 repos:
+  # Stub implementation detection — sourced from omnibase_core (OMN-4472)
+  - repo: https://github.com/OmniNode-ai/omnibase_core
+    rev: 30a06f85bb5849902d33c8d0bdb90fc6cba0c346  # pragma: allowlist secret
+    hooks:
+      - id: check-stub-implementations
   # YAML formatting (standard across ecosystem)
   # Configuration in .yamlfmt file (ecosystem-aligned settings)
   - repo: https://github.com/google/yamlfmt
@@ -101,6 +106,10 @@ repos:
       - id: check-toml
       - id: debug-statements
 
+  # ONEX String Version Anti-Pattern Detection
+  # TODO(OMN-3832-followup): Re-enable once validate-string-versions is packaged as a
+  # proper Python CLI entrypoint in omnibase_core (currently only works as a local script).
+
   # Python code quality with ruff (replaces black, isort, flake8 - 10-100x faster)
   # Configuration: pyproject.toml [tool.ruff] section (shared with CI)
   # Using official ruff-pre-commit repo for CI compatibility (no Poetry dependency)
@@ -415,6 +424,39 @@ repos:
         always_run: true
         stages: [pre-commit]
 
+      # --------------------------------------------------------------------------
+      # Bolt URI Hardcode Guard (OMN-4314)
+      # Validates: No bolt://localhost literal strings in production Python source.
+      # Scope: src/ (non-test files). Test files exempt (*test_*, *conftest*, */tests/*).
+      # Purpose: Catches the class of bug where a developer hardcodes
+      #          connection_uri="bolt://localhost:7687" in production code.
+      #          bolt://localhost resolves to the container itself inside Docker,
+      #          not the Memgraph service (omnibase-infra-memgraph). Always read
+      #          OMNIMEMORY_MEMGRAPH_HOST/PORT from environment instead.
+      # Parallel to: kafka-no-hardcoded-fallback in omnibase_infra
+      # --------------------------------------------------------------------------
+      - id: no-hardcoded-bolt-fallback
+        name: "No hardcoded bolt://localhost URIs"
+        language: script
+        entry: scripts/check_no_hardcoded_bolt.sh
+        pass_filenames: false
+        types: [python]
+        stages: [pre-commit]
+
+      # --------------------------------------------------------------------------
+      # SPDX Header Enforcement (ONEX canonical)
+      # Validates: All eligible source files carry MIT SPDX headers
+      # Scope: src/, tests/, scripts/, examples/ (py, sh, bash, yml, yaml, toml)
+      # --------------------------------------------------------------------------
+      - id: validate-spdx-headers
+        name: ONEX SPDX Header Requirement
+        entry: python scripts/validation/validate_spdx_headers.py
+        language: system
+        pass_filenames: true
+        files: ^(src|tests|scripts|examples)/.*\.py$
+        exclude: ^(archived/|archive/)
+        stages: [pre-commit]
+
 # Configuration
 default_install_hook_types: [pre-commit, pre-push]
 default_stages: [pre-commit]

{omninode_memory-0.6.4 → omninode_memory-0.7.0}/CLAUDE.md

@@ -13,7 +13,8 @@
 5. [Forbidden Patterns](#forbidden-patterns)
 6. [Required Patterns](#required-patterns)
 7. [Model Exemption Pattern](#model-exemption-pattern)
-8. [Documentation](#documentation)
+8. [SPDX Headers](#spdx-headers)
+9. [Documentation](#documentation)
 
 ---
 
@@ -216,6 +217,17 @@ All other models belong in `src/omnimemory/models/<domain>/`.
 
 ---
 
+## SPDX Headers
+
+All source files in `src/`, `tests/`, `scripts/`, `examples/` require MIT SPDX headers.
+Canonical spec: `omnibase_core/docs/conventions/FILE_HEADERS.md`
+
+- Stamp missing headers: `onex spdx fix src tests scripts examples`
+- Check without writing: `onex spdx fix --check src tests scripts examples`
+- Bypass a file: add `# spdx-skip: <reason>` in the first 10 lines
+
+---
+
 ## Documentation
 
 | Topic | Document |

{omninode_memory-0.6.4 → omninode_memory-0.7.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: omninode-memory
-Version: 0.6.4
+Version: 0.7.0
 Summary: OmniNode document ingestion and semantic retrieval
 Project-URL: Homepage, https://github.com/OmniNode-ai/omnimemory
 Project-URL: Repository, https://github.com/OmniNode-ai/omnimemory
@@ -20,9 +20,9 @@ Requires-Dist: cachetools<8.0.0,>=6.2.4
 Requires-Dist: fastapi<1.0.0,>=0.120.1
 Requires-Dist: httpx<1.0.0,>=0.28.0
 Requires-Dist: mcp<2.0.0,>=1.8.0
-Requires-Dist: omnibase-core==0.24.0
-Requires-Dist: omnibase-infra==0.16.0
-Requires-Dist: omnibase-spi==0.15.1
+Requires-Dist: omnibase-core==0.25.0
+Requires-Dist: omnibase-infra==0.17.0
+Requires-Dist: omnibase-spi==0.16.0
 Requires-Dist: pinecone-client<7.0.0,>=4.1.0
 Requires-Dist: psutil<8.0.0,>=7.0.0
 Requires-Dist: psycopg2-binary<3.0.0,>=2.9.10

{omninode_memory-0.6.4 → omninode_memory-0.7.0}/deployment/database/migrations_pending/004_create_navigation_paths_collection.py

@@ -35,7 +35,9 @@ logger = logging.getLogger(__name__)
 
 QDRANT_HOST = os.environ.get("QDRANT_HOST", "localhost")
 QDRANT_PORT = int(os.environ.get("QDRANT_PORT", "6333"))
-QDRANT_API_KEY = os.environ.get("QDRANT_API_KEY") or os.environ.get("QDRANT__SERVICE__API_KEY")
+QDRANT_API_KEY = os.environ.get("QDRANT_API_KEY") or os.environ.get(
+    "QDRANT__SERVICE__API_KEY"
+)
 COLLECTION_NAME = "navigation_paths"
 
 # Qwen3-Embedding-8B produces 4096-dimensional vectors.
@@ -53,7 +55,13 @@ async def create_collection() -> None:
     - ``start_state``: Embedding of the start-state identifier.
     """
     # https=False keeps plain HTTP even when api_key is set (localhost dev setup).
-    client = AsyncQdrantClient(host=QDRANT_HOST, port=QDRANT_PORT, api_key=QDRANT_API_KEY, https=False, timeout=30)
+    client = AsyncQdrantClient(
+        host=QDRANT_HOST,
+        port=QDRANT_PORT,
+        api_key=QDRANT_API_KEY,
+        https=False,
+        timeout=30,
+    )
 
     try:
         try:
@@ -103,7 +111,9 @@ async def create_collection() -> None:
                 field_name="start_state_id",
                 field_schema=qdrant_models.PayloadSchemaType.KEYWORD,
             )
-            logger.info("Created payload indexes on outcome, graph_fingerprint, start_state_id.")
+            logger.info(
+                "Created payload indexes on outcome, graph_fingerprint, start_state_id."
+            )
         except UnexpectedResponse as exc:
             logger.error("Qdrant API error during index creation: %s", exc)
             sys.exit(1)

omninode_memory-0.7.0/deployment/docker/Dockerfile.migrate

@@ -0,0 +1,16 @@
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2026 OmniNode Team
+#
+# Dockerfile.migrate — omnimemory database migration image
+#
+# Ownership: omnimemory repo owns all migration SQL artifacts.
+# This image is pulled by the k8s/migrations/omnimemory-migrate.yaml
+# initContainer and used by the omnimemory migration Job.
+#
+# Build context: repo root (docker build -f deployment/docker/Dockerfile.migrate .)
+#
+# Note: omnimemory migrations are at deployment/database/migrations/ (no forward/ subdir).
+
+FROM alpine:3.19
+
+COPY deployment/database/migrations/*.sql /migrations/

{omninode_memory-0.6.4 → omninode_memory-0.7.0}/docs/handler_reuse_matrix.md

@@ -27,7 +27,6 @@ This document maps existing handlers from `omnibase_infra` to the Core 8 memory
 | `HandlerFileSystem` | `handler_filesystem` | Secure file I/O | read_file, write_file, list_directory | MEDIUM - persistent storage |
 | `HandlerGraph` | `handler_graph` | Graph database (Neo4j/Memgraph) | execute_query, create_node, traverse | HIGH - relationship memory |
 | `HandlerHttp` | `handler_http` | HTTP REST client | GET, POST | MEDIUM - external LLM calls |
-| `HandlerConsul` | `handler_consul` | Service discovery | register, deregister, health | LOW - infrastructure only |
 | `HandlerVault` | `handler_vault` | Secrets management | read, write secrets | LOW - security only |
 | `HandlerMcp` | `handler_mcp` | MCP protocol | MCP operations | LOW - agent communication |
 | `HandlerManifestPersistence` | `handler_manifest_persistence` | Manifest storage | persist manifests | LOW - specialized |
@@ -43,7 +42,6 @@ This document maps existing handlers from `omnibase_infra` to the Core 8 memory
 
 | Handler Class | Module | Purpose | Reuse Potential |
 |---------------|--------|---------|-----------------|
-| `HandlerServiceDiscoveryConsul` | `handler_service_discovery_consul` | Consul discovery | LOW - infrastructure |
 | `HandlerServiceDiscoveryMock` | `handler_service_discovery_mock` | Mock discovery | HIGH - testing patterns |
 
 ### Node-Specific Handlers (`omnibase_infra.nodes.node_registration_orchestrator.handlers`)
@@ -61,8 +59,6 @@ This document maps existing handlers from `omnibase_infra` to the Core 8 memory
 |---------------|--------|---------|-----------------|
 | `HandlerPostgresUpsert` | `handler_postgres_upsert` | PostgreSQL upsert | HIGH - storage patterns |
 | `HandlerPostgresDeactivate` | `handler_postgres_deactivate` | PostgreSQL deactivation | MEDIUM - lifecycle |
-| `HandlerConsulRegister` | `handler_consul_register` | Consul registration | LOW - infrastructure |
-| `HandlerConsulDeregister` | `handler_consul_deregister` | Consul deregistration | LOW - infrastructure |
 | `HandlerPartialRetry` | `handler_partial_retry` | Retry logic | HIGH - resilience patterns |
 
 ### Runtime Handlers (`omnibase_infra.runtime`)
@@ -321,7 +317,6 @@ Handler access must be controlled at multiple layers.
 | **handler_http.py** | Bearer tokens / API keys | Endpoint-specific | Rotate keys; use short-lived tokens |
 | **handler_graph.py** | Connection credentials | Label-based access control | Restrict node/edge type access |
 | **handler_vault.py** | Vault token | Policy-based | Use AppRole for services |
-| **handler_consul.py** | ACL token | Service-level policies | Read-only for most operations |
 
 #### Implementation Pattern
 

{omninode_memory-0.6.4 → omninode_memory-0.7.0}/pyproject.toml

@@ -7,7 +7,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "omninode-memory"
-version = "0.6.4"
+version = "0.7.0"
 description = "OmniNode document ingestion and semantic retrieval"
 readme = "README.md"
 requires-python = ">=3.12,<4.0"
@@ -59,9 +59,9 @@ dependencies = [
     "pyyaml>=6.0.2,<7.0.0",
 
     # ONEX dependencies - versioned releases from PyPI
-    "omnibase-core==0.24.0",
-    "omnibase-spi==0.15.1",
-    "omnibase-infra==0.16.0",
+    "omnibase-core==0.25.0",
+    "omnibase-spi==0.16.0",
+    "omnibase-infra==0.17.0",
 
     # Logging and monitoring
     # Version ^23.3.0 required for compatibility with omnibase-infra (requires ^23.2.0)

omninode_memory-0.7.0/scripts/check_no_hardcoded_bolt.sh

@@ -0,0 +1,34 @@
+#!/usr/bin/env bash
+# SPDX-FileCopyrightText: 2025 OmniNode.ai Inc.
+# SPDX-License-Identifier: MIT
+
+# Reject bolt://localhost literal strings in production Python source.
+# Docstrings (triple-quoted blocks) and test files are exempt.
+# This is the memory-pipeline equivalent of kafka-no-hardcoded-fallback.
+#
+# Usage: called by pre-commit (pass_filenames: false, scans src/ directly)
+# Exempt: files matching *test_*, *conftest*, */tests/*
+set -euo pipefail
+
+VIOLATIONS=0
+
+while IFS= read -r -d '' file; do
+    # Skip test files
+    case "$file" in
+        *test_* | *conftest* | */tests/*) continue ;;
+    esac
+
+    if grep -n 'bolt://localhost' "$file" 2>/dev/null; then
+        echo "ERROR: Hardcoded bolt://localhost in $file"
+        echo "       Read OMNIMEMORY_MEMGRAPH_HOST/PORT from env instead of hardcoding."
+        echo "       (Check plugin config, Settings model, or env helper for the project-standard pattern.)"
+        VIOLATIONS=$((VIOLATIONS + 1))
+    fi
+done < <(find src/ -name "*.py" -type f -print0)
+
+if [[ $VIOLATIONS -gt 0 ]]; then
+    echo ""
+    echo "Found $VIOLATIONS file(s) with hardcoded bolt://localhost URIs."
+    echo "These will fail inside Docker where 'localhost' resolves to the container itself."
+    exit 1
+fi

{omninode_memory-0.6.4 → omninode_memory-0.7.0}/scripts/validate_no_transport_imports.py

@@ -264,7 +264,7 @@ class TransportImportChecker(ast.NodeVisitor):
 
     def _extract_root_module(self, module_name: str) -> str:
         """Extract the root module from a potentially dotted module path."""
-        return module_name.split(".")[0]
+        return module_name.split(".", maxsplit=1)[0]
 
     def _is_type_checking_guard(self, node: ast.If) -> bool:
         """Detect if an If node is a TYPE_CHECKING guard.

{omninode_memory-0.6.4 → omninode_memory-0.7.0}/scripts/validation/check_ai_slop.py

@@ -43,7 +43,6 @@ import re
 import sys
 from pathlib import Path
 
-
 # ---------------------------------------------------------------------------
 # Data models
 # ---------------------------------------------------------------------------

{omninode_memory-0.6.4 → omninode_memory-0.7.0}/scripts/validation/validate_http_imports.py

@@ -106,9 +106,9 @@ ALLOWED_PATHS = [
     "handlers/adapters/",
     # Legacy clients directory - allowed during migration
     # TODO: Remove this allowance after migration to adapters is complete
-    "nodes/memory_retrieval_effect/clients/",
+    "nodes/node_memory_retrieval_effect/clients/",
     # Kreuzberg effect client - HTTP transport boundary for document extraction (OMN-2733)
-    "nodes/kreuzberg_parse_effect/clients/",
+    "nodes/node_kreuzberg_parse_effect/clients/",
     # Tests can mock HTTP clients
     "tests/",
 ]