omninode-memory 0.7.0__tar.gz → 0.7.2__tar.gz

{omninode_memory-0.7.0 → omninode_memory-0.7.2}/.github/workflows/test.yml

@@ -380,6 +380,11 @@ jobs:
           path: coverage.xml
           retention-days: 7
 
+  # NOTE: Version Pin Compliance check (OMN-4809) removed — prerequisite
+  # OMN-4803 (check_version_pins.py in omni_home/standards/) not yet shipped,
+  # and cross-repo checkout of private OmniNode-ai/omni_home requires a PAT.
+  # Re-add when OMN-4803 lands and a CROSS_REPO_TOKEN secret is configured.
+
   # Phase 3 - Aggregation
   ci-summary:
     name: CI Summary

{omninode_memory-0.7.0 → omninode_memory-0.7.2}/.pre-commit-config.yaml

@@ -11,7 +11,7 @@
 # CONFIGURATION FILES (shared with CI):
 # ====================================
 # - pyproject.toml: ruff settings [tool.ruff], mypy settings [tool.mypy]
-#   - Ruff version: 0.15.2 (synchronized with pre-commit repo)
+#   - Ruff version: 0.15.6 (synchronized with pre-commit repo)
 #   - Mypy version: uses poetry env (local hook, matches CI exactly)
 #   - Pyright version: 1.1.391 (synchronized with pre-commit repo)
 # - pyrightconfig.json: pyright settings (typeCheckingMode: basic, python 3.12)
@@ -84,7 +84,7 @@ repos:
   # YAML formatting (standard across ecosystem)
   # Configuration in .yamlfmt file (ecosystem-aligned settings)
   - repo: https://github.com/google/yamlfmt
-    rev: v0.17.2
+    rev: v0.21.0
     hooks:
       - id: yamlfmt
         exclude: ^\.github/
@@ -126,7 +126,7 @@ repos:
   # 5. Fix any new violations or update rule selections in pyproject.toml
   #
   - repo: https://github.com/astral-sh/ruff-pre-commit
-    rev: v0.15.2
+    rev: v0.15.6
     hooks:
       # FULL CODEBASE VALIDATION: These hooks run on src/ and tests/ (not just staged files)
       # to match CI behavior and prevent "works locally, fails in CI" issues.
@@ -443,6 +443,19 @@ repos:
         types: [python]
         stages: [pre-commit]
 
+      # --------------------------------------------------------------------------
+      # Kafka Hardcoded Fallback Guard (OMN-4860, mirrors omnibase_infra OMN-3554)
+      # Validates: No hardcoded localhost:9092 or private-IP Kafka addresses in src/
+      # Purpose: Prevents reintroduction of hardcoded broker addresses after T2-M fix
+      # --------------------------------------------------------------------------
+      - id: kafka-no-hardcoded-fallback
+        name: Reject hardcoded Kafka broker address fallbacks
+        entry: bash scripts/validation/check_kafka_no_hardcoded_fallback.sh
+        language: system
+        pass_filenames: false
+        types: [python]
+        stages: [pre-commit]
+
       # --------------------------------------------------------------------------
       # SPDX Header Enforcement (ONEX canonical)
       # Validates: All eligible source files carry MIT SPDX headers

{omninode_memory-0.7.0 → omninode_memory-0.7.2}/CHANGELOG.md

@@ -1,3 +1,25 @@
+## v0.7.2 (2026-03-13)
+
+### Other Changes
+- ci: remove premature version-pin-check job that breaks CI (OMN-4809) (#156)
+- chore(deps): bump omnibase-core to 0.27.0, omnibase-infra to 0.20.0
+
+## v0.7.1 (2026-03-13)
+
+### Features
+_(none)_
+
+### Bug Fixes
+- fix(cleanup): fix hardcoded Kafka fallback port 9092 → 19092 (OMN-4847) (#152)
+- fix(migrations): backfill NULL checksums and enforce NOT NULL on schema_migrations [OMN-4701] (#148)
+
+### Other Changes
+- chore(pre-commit): add kafka-no-hardcoded-fallback hook [OMN-4860] (#153)
+- chore(pre-commit): standardize ruff + yamlfmt versions [OMN-4858] (#151)
+- ci(standards): add version pin compliance check [OMN-4809] (#150)
+- chore(deps): bump omnibase-core/spi/infra pins to current approved versions [OMN-4799] (#149)
+- chore(deps): bump omnibase_infra to 0.18.0 (#147)
+
 # Changelog
 
 All notable changes to this project will be documented in this file.

{omninode_memory-0.7.0 → omninode_memory-0.7.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: omninode-memory
-Version: 0.7.0
+Version: 0.7.2
 Summary: OmniNode document ingestion and semantic retrieval
 Project-URL: Homepage, https://github.com/OmniNode-ai/omnimemory
 Project-URL: Repository, https://github.com/OmniNode-ai/omnimemory
@@ -20,9 +20,9 @@ Requires-Dist: cachetools<8.0.0,>=6.2.4
 Requires-Dist: fastapi<1.0.0,>=0.120.1
 Requires-Dist: httpx<1.0.0,>=0.28.0
 Requires-Dist: mcp<2.0.0,>=1.8.0
-Requires-Dist: omnibase-core==0.25.0
-Requires-Dist: omnibase-infra==0.17.0
-Requires-Dist: omnibase-spi==0.16.0
+Requires-Dist: omnibase-core==0.27.0
+Requires-Dist: omnibase-infra==0.20.0
+Requires-Dist: omnibase-spi>=0.16.1
 Requires-Dist: pinecone-client<7.0.0,>=4.1.0
 Requires-Dist: psutil<8.0.0,>=7.0.0
 Requires-Dist: psycopg2-binary<3.0.0,>=2.9.10

omninode_memory-0.7.2/deployment/database/migrations/005_backfill_null_checksums.sql

@@ -0,0 +1,38 @@
+-- =============================================================================
+-- MIGRATION: Backfill NULL checksums and enforce NOT NULL on schema_migrations
+-- =============================================================================
+-- Ticket: OMN-4701 (OMN-4653 root cause fix — omnimemory DB)
+-- Version: 1.0.0
+--
+-- PURPOSE:
+--   The live omnimemory DB has 4 NULL checksum rows in schema_migrations.
+--   These rows were applied before checksum tracking was implemented.
+--
+--   This migration:
+--   1. Backfills NULL checksums with a sentinel prefix so they are
+--      identifiable as pre-checksum-era rows.
+--   2. Enforces NOT NULL on the checksum column to prevent future nulls.
+--
+-- SAFETY:
+--   Wrapped in a transaction. Idempotent: UPDATE only touches NULL rows.
+--   ALTER TABLE SET NOT NULL is safe once all rows have a non-null checksum.
+-- =============================================================================
+
+BEGIN;
+
+-- Step 1: Backfill all NULL checksum rows with a stable sentinel value.
+UPDATE schema_migrations
+SET checksum = 'backfilled:pre-checksum-era:' || version
+WHERE checksum IS NULL;
+
+-- Step 2: Enforce NOT NULL now that all rows have a value.
+ALTER TABLE schema_migrations
+    ALTER COLUMN checksum SET NOT NULL;
+
+-- Step 3: Document the column contract with a comment.
+COMMENT ON COLUMN schema_migrations.checksum IS
+    'SHA-256 of migration file at apply time. '
+    'Prefix "backfilled:pre-checksum-era:" = applied before checksum tracking '
+    '(2026-03-12 backfill, OMN-4653 / OMN-4701).';
+
+COMMIT;

{omninode_memory-0.7.0 → omninode_memory-0.7.2}/pyproject.toml

@@ -7,7 +7,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "omninode-memory"
-version = "0.7.0"
+version = "0.7.2"
 description = "OmniNode document ingestion and semantic retrieval"
 readme = "README.md"
 requires-python = ">=3.12,<4.0"
@@ -59,9 +59,9 @@ dependencies = [
     "pyyaml>=6.0.2,<7.0.0",
 
     # ONEX dependencies - versioned releases from PyPI
-    "omnibase-core==0.25.0",
-    "omnibase-spi==0.16.0",
-    "omnibase-infra==0.17.0",
+    "omnibase-core==0.27.0",
+    "omnibase-spi>=0.16.1",
+    "omnibase-infra==0.20.0",
 
     # Logging and monitoring
     # Version ^23.3.0 required for compatibility with omnibase-infra (requires ^23.2.0)

omninode_memory-0.7.2/scripts/validation/check_kafka_no_hardcoded_fallback.sh

@@ -0,0 +1,76 @@
+#!/usr/bin/env bash
+# SPDX-FileCopyrightText: 2025 OmniNode.ai Inc.
+# SPDX-License-Identifier: MIT
+
+# OMN-4860: Reject hardcoded Kafka broker address fallbacks in omnimemory
+# Mirrors the omnibase_infra hook (OMN-3554) for ecosystem parity.
+#
+# Suppressions:
+#   # kafka-fallback-ok         — intentional test fixture default
+#   # noqa                      — general suppression
+#   # onex-allow-internal-ip    — intentional private-IP reference
+
+set -euo pipefail
+
+FAILED=0
+
+# R1: os.getenv("KAFKA_*", non-empty) pattern in src/
+MATCHES=$(grep -rn --include="*.py" \
+    --exclude-dir=".venv" \
+    --exclude-dir="node_modules" \
+    -E "os\.getenv\([[:space:]]*[\"']KAFKA_[^\"']+[\"'][[:space:]]*,[[:space:]]*[\"'][^\"']+[\"']" \
+    src/ 2>/dev/null | \
+    grep -v "# kafka-fallback-ok" | \
+    grep -v "# noqa" || true)
+
+if [ -n "$MATCHES" ]; then
+    echo "ERROR: Hardcoded Kafka bootstrap fallback detected in src/:"
+    echo "$MATCHES"
+    echo ""
+    echo "FIX: Replace os.getenv(\"KAFKA_...\", \"fallback\") with:"
+    echo "  os.environ[\"KAFKA_BOOTSTRAP_SERVERS\"]  # fails loudly when unset"
+    echo "  os.getenv(\"KAFKA_BOOTSTRAP_SERVERS\")   # returns None when unset"
+    echo "  If intentional (test fixture): add # kafka-fallback-ok"
+    FAILED=1
+fi
+
+# R2: Private-IP Kafka broker addresses (Kafka-specific ports only) in src/
+IP_MATCHES=$(grep -rn --include="*.py" \
+    --exclude-dir=".venv" \
+    --exclude-dir="node_modules" \
+    -E "192\.168\.[0-9]+\.[0-9]+:(9092|19092|29092|29093)" \
+    src/ 2>/dev/null | \
+    grep -v "# kafka-fallback-ok" | \
+    grep -v "# noqa" | \
+    grep -v "# onex-allow-internal-ip" || true)
+
+if [ -n "$IP_MATCHES" ]; then
+    echo "ERROR: Hardcoded private-IP Kafka broker address in src/:"
+    echo "$IP_MATCHES"
+    echo ""
+    echo "FIX: Use KAFKA_BOOTSTRAP_SERVERS env var."
+    echo "  If intentional (test fixture): add # kafka-fallback-ok"
+    FAILED=1
+fi
+
+# R3: localhost:9092 hardcoded in src/ (the canonical bad pattern)
+LOCALHOST_MATCHES=$(grep -rn --include="*.py" \
+    --exclude-dir=".venv" \
+    --exclude-dir="node_modules" \
+    -E "localhost:9092" \
+    src/ 2>/dev/null | \
+    grep -v "# kafka-fallback-ok" | \
+    grep -v "# noqa" || true)
+
+if [ -n "$LOCALHOST_MATCHES" ]; then
+    echo "ERROR: Hardcoded localhost:9092 Kafka broker in src/:"
+    echo "$LOCALHOST_MATCHES"
+    echo ""
+    echo "FIX: Use KAFKA_BOOTSTRAP_SERVERS env var instead of localhost:9092."
+    echo "  Docker services use redpanda:9092 (internal DNS)."
+    echo "  Host scripts use localhost:19092 (external port)."
+    echo "  If intentional: add # kafka-fallback-ok"
+    FAILED=1
+fi
+
+exit $FAILED

{omninode_memory-0.7.0 → omninode_memory-0.7.2}/src/omnimemory/handlers/handler_subscription.py

@@ -61,7 +61,7 @@ Example::
         db_dsn=os.environ["OMNIMEMORY_DB_URL"],
         valkey_host="localhost",
         valkey_port=6379,
-        kafka_bootstrap_servers="localhost:9092",
+        kafka_bootstrap_servers=os.environ["KAFKA_BOOTSTRAP_SERVERS"],
     )
     handler = HandlerSubscription(container)
     await handler.initialize(config)
@@ -299,7 +299,7 @@ class ModelHandlerSubscriptionConfig(  # omnimemory-model-exempt: handler config
         description="Optional Valkey password",
     )
     kafka_bootstrap_servers: str = Field(
-        default="localhost:9092",
+        ...,
         description="Event bus bootstrap servers, comma-separated (Kafka endpoint)",
     )
     cache_ttl_seconds: int = Field(

{omninode_memory-0.7.0 → omninode_memory-0.7.2}/tests/integration/test_node_agent_coordinator.py

@@ -307,6 +307,7 @@ async def orchestrator_node(
         db_dsn=test_db_dsn,
         valkey_host=test_valkey_host,
         valkey_port=test_valkey_port,
+        kafka_bootstrap_servers="localhost:19092",  # kafka-fallback-ok
     )
     node = NodeAgentCoordinatorOrchestrator(config)
     await node.initialize()
@@ -735,6 +736,7 @@ class TestOrchestratorErrorHandling:
             db_dsn=test_db_dsn,
             valkey_host=test_valkey_host,
             valkey_port=test_valkey_port,
+            kafka_bootstrap_servers="localhost:19092",  # kafka-fallback-ok
         )
         node = NodeAgentCoordinatorOrchestrator(config)
 

{omninode_memory-0.7.0 → omninode_memory-0.7.2}/tests/unit/test_validate_ci_precommit_alignment.py

@@ -326,6 +326,7 @@ class TestPrecommitHooksCoveredByAlignments:
             "no-env-file",
             "validate-string-versions",
             "no-hardcoded-bolt-fallback",
+            "kafka-no-hardcoded-fallback",
             "validate-spdx-headers",
             "check-stub-implementations",
         }

{omninode_memory-0.7.0 → omninode_memory-0.7.2}/uv.lock

@@ -1756,7 +1756,7 @@ wheels = [
 
 [[package]]
 name = "omnibase-core"
-version = "0.25.0"
+version = "0.27.0"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "blake3" },
@@ -1771,14 +1771,14 @@ dependencies = [
     { name = "pyyaml" },
     { name = "ruamel-yaml" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/56/1e/bb184b9d46ea07ef279c3ea8de6a78b3cfce130e2201e2e1f96461e39b7b/omnibase_core-0.25.0.tar.gz", hash = "sha256:43006cc698611145cebf693404a36f819fdf0c2be786b686bd889278b1911a9a", size = 8460590, upload-time = "2026-03-11T00:08:35.113Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/89/96/195b61a63a5aceefb3d97ce90ee3db2cac151bf7f25abe25d2c5fe6553f3/omnibase_core-0.27.0.tar.gz", hash = "sha256:406feb4e61488e5cad67807b5e99bb1057f2d526f9f0c51cd36e7442710ccafa", size = 8466845, upload-time = "2026-03-13T23:57:17.005Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/18/bb/17c7dd6f656fd7a63016ea2b397aaa3c04df8d1e95cca4bf7b1dd1cdab99/omnibase_core-0.25.0-py3-none-any.whl", hash = "sha256:8018351c795d6264e5c0d84d886ee0f7f04d4bae888eab9996e423cc6793ec91", size = 5168558, upload-time = "2026-03-11T00:08:32.088Z" },
+    { url = "https://files.pythonhosted.org/packages/ac/df/76cdd282ebadbdaf0a951253e199965a5675d4678e6703419a98e63c26f8/omnibase_core-0.27.0-py3-none-any.whl", hash = "sha256:b6ec4364388f82c28819bda3d2adf881b7bf826e0284373ce7bad08a25331de5", size = 5169449, upload-time = "2026-03-13T23:57:20.285Z" },
 ]
 
 [[package]]
 name = "omnibase-infra"
-version = "0.17.0"
+version = "0.20.0"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "aiofiles" },
@@ -1825,28 +1825,28 @@ dependencies = [
     { name = "uvicorn" },
     { name = "watchdog" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/7f/c9/ae9fa82658071f8993e1cae5cdbdadb3678d00f66b6068b2e1a86c3e62c9/omnibase_infra-0.17.0.tar.gz", hash = "sha256:4abea6955133fc39186b4821b9e35da9939f0c02c3bebf03f13d85ad6f20d79d", size = 6443721, upload-time = "2026-03-11T00:57:57.557Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/27/ac/144af54e91d18701373f0dba2b06e11dc9f4285d43f0753621e6b85e1f4a/omnibase_infra-0.20.0.tar.gz", hash = "sha256:f2cc412288fc9ef226b2ee894a3859b921d6c1ca47ee4911dbffea815b66d53c", size = 6500540, upload-time = "2026-03-14T00:28:23.4Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/e8/f3/52195264da3218cd6578ec48f3053514f0b51ed667974d5959aa9c63404f/omnibase_infra-0.17.0-py3-none-any.whl", hash = "sha256:72d94dd3fe1529a2a4d74d7ffc39f7f4bdbd549494bc3b9882e9cdbdca5eff2c", size = 3806380, upload-time = "2026-03-11T00:57:55.322Z" },
+    { url = "https://files.pythonhosted.org/packages/9f/64/3e98401075d2f097693a8389259095de312ea5021c7a2b5a0925a2e97a90/omnibase_infra-0.20.0-py3-none-any.whl", hash = "sha256:0b26ec79ea2e2a2b08e1b1f3c80207da53894f17026aa5f1b22cde036ff82075", size = 3804442, upload-time = "2026-03-14T00:28:21.001Z" },
 ]
 
 [[package]]
 name = "omnibase-spi"
-version = "0.16.0"
+version = "0.16.1"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "omnibase-core" },
     { name = "pydantic" },
     { name = "typing-extensions" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/d2/fb/d3807a19eb726942b175f42123091330ae12ac061f383ca8ba5ce68dbbbd/omnibase_spi-0.16.0.tar.gz", hash = "sha256:36d4dfe086bf7d7481f21b2df72ff2b1225f4c971977212d440b8dba2fb7ae5f", size = 1115900, upload-time = "2026-03-10T23:12:17.468Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/81/b9/8b0157239ecdcb3f6df067dc5972c42572990e705e9483ad745a6507c715/omnibase_spi-0.16.1.tar.gz", hash = "sha256:fc5c7f7c9d0ca3e9fd2ea3525ccd917a910969ddf48da6d2a2c3371a137b2c24", size = 1115928, upload-time = "2026-03-12T12:28:06.775Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/35/f4/737d663083d74662449c4599b8552102936efd2b7dd8a5ae5e3bc1dce382/omnibase_spi-0.16.0-py3-none-any.whl", hash = "sha256:8deee8aeeccbb57c5883c80b7760b2976f4e17adcd36ebeb37c6f8bb1e15b8b9", size = 761835, upload-time = "2026-03-10T23:12:15.128Z" },
+    { url = "https://files.pythonhosted.org/packages/a2/db/4ddda8ca1f677ecef3047265a63d5cca298e26dd58b7998c3ee3ad48f227/omnibase_spi-0.16.1-py3-none-any.whl", hash = "sha256:643fd294cf49efd9ce3a80ec813da33bdf29ab4827a9f1061747e9d980352ff4", size = 761836, upload-time = "2026-03-12T12:28:05.231Z" },
 ]
 
 [[package]]
 name = "omninode-memory"
-version = "0.7.0"
+version = "0.7.2"
 source = { editable = "." }
 dependencies = [
     { name = "aiohttp" },
@@ -1904,9 +1904,9 @@ requires-dist = [
     { name = "fastapi", specifier = ">=0.120.1,<1.0.0" },
     { name = "httpx", specifier = ">=0.28.0,<1.0.0" },
     { name = "mcp", specifier = ">=1.8.0,<2.0.0" },
-    { name = "omnibase-core", specifier = "==0.25.0" },
-    { name = "omnibase-infra", specifier = "==0.17.0" },
-    { name = "omnibase-spi", specifier = "==0.16.0" },
+    { name = "omnibase-core", specifier = "==0.27.0" },
+    { name = "omnibase-infra", specifier = "==0.20.0" },
+    { name = "omnibase-spi", specifier = ">=0.16.1" },
     { name = "pinecone-client", specifier = ">=4.1.0,<7.0.0" },
     { name = "psutil", specifier = ">=7.0.0,<8.0.0" },
     { name = "psycopg2-binary", specifier = ">=2.9.10,<3.0.0" },