Prepare 1.7.10: preserve historical memory and repair hosted client flows

.claude-plugin/marketplace.json

@@ -9,7 +9,7 @@
       "name": "engraphis-memory",
       "source": "./",
       "description": "Discipline for giving agents durable, scoped, explainable memory across sessions and repos with the Engraphis MCP tools.",
-      "version": "1.7.9"
+      "version": "1.7.10"
     }
   ]
 }

.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "engraphis-memory",
-  "version": "1.7.9",
+  "version": "1.7.10",
   "description": "Give agents durable, scoped, explainable memory across sessions and repos via the Engraphis MCP tools. Use when you learn something worth keeping, need prior context before acting, or ask why/how a fact changed. Covers remember/recall, why/timeline, forget/pin/correct, sessions, and code search.",
   "author": {
     "name": "The Engraphis Authors",

.claude-plugin/skill-assets.sha256

@@ -1,5 +1,5 @@
-c1d184247775c8b3bf4d3f185d54fcac983aca8c54638a05d85b21e20db3ae7c  .claude-plugin/marketplace.json
-c5d0c26f28c9ee14092f9deaf24c98dd8bef49d971fef2b7a537ffb1ab9f2887  .claude-plugin/plugin.json
+8da43b92bc5ece3e7bdc63779713f76552a7bcd46adaf5ff12c0427dbfad98ae  .claude-plugin/marketplace.json
+b1adecc8e456a3dbe168adb7adc6a9c7c7ae63429d38b88c02722eaf293a9fba  .claude-plugin/plugin.json
 aeee7a94671ceb306fe2d24c5acc9f2d96ad8a8e7410536566799eea6265f080  skills/engraphis-memory/SKILL.md
 055655db84af07561d002f0c69744313d8413c39f3e873f941f0fa0b1e76dc66  skills/engraphis-memory/references/CONVENTIONS.md
 9d090a03f5b3f36a34d91f66b72c3844591f6915755ac3a6c6ba5f1b16977de5  skills/engraphis-memory/references/SCOPING.md

.gitattributes

@@ -3,9 +3,16 @@
 *.pyd binary
 *.so binary
 *.dll binary
+*.py text eol=lf
 .github/workflows/*.yml text eol=lf
 .github/workflows/*.yaml text eol=lf
 *.sh text eol=lf
+# Frozen corpus/evidence manifests hash exact bytes, including executable oracles.
+eval/datasets/** text eol=lf
+eval/artifacts/** text eol=lf
+# Historical reports include both LF and CRLF snapshots; preserve their signed bytes.
+docs/benchmark-evidence/** -text
+engraphis/**/vendor/*.js text eol=lf
 deploy/*.lock text eol=lf
 deploy/*.licenses.json text eol=lf
 .claude-plugin/*.json text eol=lf

.github/workflows/ci.yml

@@ -39,10 +39,12 @@ jobs:
         run: |
           python scripts/check_commercial_manifest.py
           python scripts/externalize_dashboard_assets.py
+      # pytest-xdist (from the test extra) runs one worker per runner core; each worker
+      # gets its own subdirectory under --basetemp, inside ENGRAPHIS_INDEX_ROOTS.
       - name: Unit tests (full suite — extras-gated tests included)
         run: |
           python -c "import fastapi, httpx, mcp, multipart, pydantic, uvicorn"
-          ENGRAPHIS_INDEX_ROOTS="${GITHUB_WORKSPACE}:${RUNNER_TEMP}:$(python -c 'import tempfile; print(tempfile.gettempdir())')" python -m pytest -o addopts="" tests/ -q -rs --basetemp="${RUNNER_TEMP}/engraphis-pytest"
+          ENGRAPHIS_INDEX_ROOTS="${GITHUB_WORKSPACE}:${RUNNER_TEMP}:$(python -c 'import tempfile; print(tempfile.gettempdir())')" python -m pytest -o addopts="" tests/ -q -rs -n auto --basetemp="${RUNNER_TEMP}/engraphis-pytest"
       - name: Retrieval eval gate
         run: python -m eval.harness --dataset eval/datasets/sample.jsonl --k 5
       - name: Retrieval eval gate — CodeMem (coding-agent wedge, incl. conflict resolution)
@@ -109,7 +111,8 @@ jobs:
 
   core-py39:
     name: core floor (numpy-only, Python 3.9)
-    runs-on: ubuntu-latest
+    # Ubuntu 26.04 no longer ships Python 3.9 in actions/python-versions.
+    runs-on: ubuntu-24.04
     timeout-minutes: 30
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
@@ -196,8 +199,10 @@ jobs:
         run: |
           python -m pip install --upgrade pip
           pip install -e ".[test]" pytest-cov
+      # Line coverage measured 86.7% when this floor was set (it was 60). The floor
+      # sits a few points below that, so a real regression fails and normal churn passes.
       - name: Coverage run (all extras-gated tests, tracked modules)
-        run: ENGRAPHIS_INDEX_ROOTS="${GITHUB_WORKSPACE}:${RUNNER_TEMP}:$(python -c 'import tempfile; print(tempfile.gettempdir())')" python -m pytest -o addopts="" tests/ -q -rs --basetemp="${RUNNER_TEMP}/engraphis-pytest" --cov=engraphis --cov-report=term-missing --cov-fail-under=60
+        run: ENGRAPHIS_INDEX_ROOTS="${GITHUB_WORKSPACE}:${RUNNER_TEMP}:$(python -c 'import tempfile; print(tempfile.gettempdir())')" python -m pytest -o addopts="" tests/ -q -rs -n auto --basetemp="${RUNNER_TEMP}/engraphis-pytest" --cov=engraphis --cov-report=term-missing --cov-fail-under=80
 
   hygiene:
     name: repo hygiene gate (no stray DBs/logs)
@@ -255,14 +260,16 @@ jobs:
           # npm 10 crashes while repairing a nested published shrinkwrap.
           npm install --global --ignore-scripts npm@11.12.1
           npm ci --ignore-scripts
-          # The test host's published shrinkwrap overrides this package's nested pin.
-          # Repair that exact leaf in the installed host, preserving its other locked deps.
+          # The test host's published shrinkwrap overrides this package's nested pins.
+          # Repair those exact leaves in the installed host, preserving its other locked deps.
           # --omit=dev excludes the host's own authoring tools, not this package's test tools.
-          npm install --prefix node_modules/@earendil-works/pi-coding-agent --ignore-scripts --no-save --omit=dev brace-expansion@5.0.12
+          npm install --prefix node_modules/@earendil-works/pi-coding-agent --ignore-scripts --no-save --omit=dev brace-expansion@5.0.12 undici@8.12.2
           node -e "require('node:assert/strict').equal(require('./node_modules/@earendil-works/pi-coding-agent/node_modules/brace-expansion/package.json').version, '5.0.12')"
+          node -e "require('node:assert/strict').equal(require('./node_modules/@earendil-works/pi-coding-agent/node_modules/undici/package.json').version, '8.12.2')"
           npm run verify
           npm run test:integration
-          npm audit
+          # Audit production from the lock, then the complete repaired install including dev.
+          npm audit --omit=dev
           npm audit --no-package-lock --include=dev
 
   browser-accessibility: