Verify each finding against the current code and only fix it if needed.

Inline comments:
In `@coordinode/coordinode/client.py`:
- Around line 525-545: Extract the duplicated schema_mode handling into a shared
static helper (e.g., ClientClass._normalize_schema_mode(schema_mode: str | int,
mode_map: dict[str,int]) -> int) that implements the integer/str validation and
normalization logic shown (use the passed mode_map, check ints against
set(mode_map.values()), normalize strings with .strip().lower(), and raise the
same ValueError messages on invalid input), then replace the duplicated blocks
in the methods that build proto_schema_mode (the current block in the shown
function and the analogous block in create_edge_type) to call
_normalize_schema_mode(schema_mode, _mode_map) and assign its return to
proto_schema_mode.

In `@demo/docker-compose.yml`:
- Around line 42-43: The install script /tmp/install-sdk.sh is missing
installation of the coordinode-embedded package referenced by the notebooks;
update the script to add a pip installation step for coordinode-embedded by
inserting a line that runs pip install --no-cache-dir -e
/sdk/coordinode-embedded (same pattern used for coordinode,
llama-index-coordinode, and langchain-coordinode) so that coordinode-embedded is
available at runtime for the notebooks (e.g., ensure the pip install call is
executed before start-notebook.sh is invoked in the command that runs
"/tmp/install-sdk.sh && start-notebook.sh").

Verify each finding against the current code and only fix it if needed.

Inline comments:
In `@coordinode-rs`:
- Line 1: PR summary incorrectly states "bump coordinode-rs to v0.3.15" despite
the submodule commit 6df09c87a94eebd4c63dde08df420396df480487 and docker-compose
updates pointing to coordinode:0.3.17; update the PR title/body and any
changelog or commit message that mentions "v0.3.15" to "v0.3.17" so the PR
summary, commit messages, and docker-compose/submodule references are consistent
(search for the string "v0.3.15" in the PR description, title, and related
metadata and replace it with "v0.3.17").

In `@demo/docker-compose.yml`:
- Around line 42-43: The container command currently runs bash -c
"/tmp/install-sdk.sh && start-notebook.sh" which leaves bash as PID 1; update
the command so after running /tmp/install-sdk.sh it uses exec to replace the
shell with the Jupyter process (start-notebook.sh) — e.g., change the bash
invocation to run "/tmp/install-sdk.sh && exec start-notebook.sh" so
start-notebook.sh becomes PID 1 and improves signal handling.

In `@demo/notebooks/03_langgraph_agent.ipynb`:
- Around line 83-84: The same pinned coordinode-embedded install spec string
("git+https://github.com/structured-world/coordinode-python.git@8da94d694ecaabee6f8380147d02f08220061bfa#subdirectory=coordinode-embedded")
is duplicated; extract it into a single named constant (e.g.,
COORDINODE_EMBEDDED_INSTALL_SPEC) near the notebook's top and replace both
occurrences (the install list and the error/guidance message) to reference that
constant so future bumps only need one change.
- Around line 256-263: In query_facts, avoid appending a second LIMIT by
changing the logic that handles q and _LIMIT_AT_END_RE: keep the existing
terminal-numeric LIMIT capping via _cap_limit when _LIMIT_AT_END_RE.search(q) is
true, but if any other LIMIT exists (detect with a case-insensitive
re.search(r"\\bLIMIT\\b", q)), do not append " LIMIT 20" — leave q unchanged;
only append or replace when there is no existing LIMIT at all. Update the code
around _LIMIT_AT_END_RE, _cap_limit, and the q reassignment to implement this
check.

Verify each finding against the current code and only fix it if needed.

Inline comments:
In `@coordinode/coordinode/client.py`:
- Around line 527-533: The public methods (e.g., create_label) advertise
properties: list[dict[str, Any]] | None but the internal helper
_build_property_definitions accepts tuples as well; update the type hints to
accept both lists and tuples of property definitions (e.g., list[dict[str, Any]]
| tuple[dict[str, Any], ...] | None or more concisely Sequence[dict[str, Any]] |
None) so static checkers allow tuple inputs; apply the same change to the other
affected methods (the ones around lines referenced: the method at ~570-576 and
the block at ~963-979) and ensure any import for typing (Sequence or Tuple) is
added if necessary.
- Around line 116-125: HybridResult currently only stores node_id and score, but
callers of hybrid_text_vector_search() expect a full node accessible as r.node;
update the HybridResult class (constructor __init__) to also set self.node from
proto_result.node (or otherwise resolve the node object corresponding to
proto_result.node_id) so consumers can inspect r.node.properties without an
extra lookup, and adjust __repr__ if needed to include or safely display the
node (while preserving existing node_id and score behavior).

In `@demo/notebooks/03_langgraph_agent.ipynb`:
- Around line 245-272: The query_facts function currently allows parameter
placeholders like $n to pass the LIMIT handling but then calls client.cypher
with only params={"sess": SESSION}, causing unbound-parameter errors; fix by
scanning q for any $placeholders (e.g. with regex r"\$([A-Za-z_][A-Za-z0-9_]*)")
and if any placeholder name other than "sess" is present return an error message
rejecting non-$sess placeholders (so only $sess is permitted), then proceed to
run client.cypher(q, params={"sess": SESSION}); update the validation logic
inside query_facts (around where q is built and before rows =
client.cypher(...)) to enforce this check.

Verify each finding against the current code and only fix it if needed.

Inline comments:
In `@coordinode/coordinode/client.py`:
- Around line 770-771: Validate the `limit` argument before building the
TextSearchRequest and before the similar block at 818-827: ensure `limit` is an
int but not a bool (reject using isinstance(limit, bool)), and that it is
non-negative (or meets the same positive/zero constraint used elsewhere in this
class); if the check fails raise ValueError with a clear message. Apply this
same guard to the other request path referenced (the block around 818-827) so
both TextSearchRequest creation and the other RPC won't receive booleans or
negative values.

In `@demo/notebooks/03_langgraph_agent.ipynb`:
- Around line 160-167: The implicit localhost branch currently raises a
RuntimeError if a process is listening on grpc_port but not serving CoordiNode;
change this so that after creating CoordinodeClient(COORDINODE_ADDR) and
checking client.health() you only raise the hard error when COORDINODE_ADDR was
explicitly provided by the user, otherwise call client.close() and fall through
to the embedded fallback (e.g., construct/use LocalClient); keep the _port_open
check and ensure COORDINODE_ADDR remains set for explicit mode but is treated as
non-fatal when auto-detected.
- Around line 250-256: The current session-scope check (around q =
cypher.strip() using _SESSION_WHERE_SCOPE_RE and _SESSION_NODE_SCOPE_RE) can be
bypassed by queries that include at least one scoped pattern while returning or
matching other unscoped nodes (e.g., MATCH (n), (m {session: $sess}) RETURN n),
leaking other sessions; update the query_facts validation to require that every
node identifier used in MATCH/RETURN is session-scoped or reject the query:
parse the cypher (or use regex) to extract all node aliases from MATCH clauses
and all aliases referenced in RETURN, then ensure each alias either appears in a
node pattern that includes {session: $sess} or is constrained by an explicit
WHERE alias.session = $sess; if any alias is unscoped, return an error (or
alternatively narrow the allowed shape to a single MATCH with all nodes scoped
or remove arbitrary Cypher from query_facts). Ensure you modify the guard around
_SESSION_WHERE_SCOPE_RE/_SESSION_NODE_SCOPE_RE in query_facts to implement this
per-alias check.

Verify each finding against the current code and only fix it if needed.

Duplicate comments:
In `@coordinode/coordinode/client.py`:
- Around line 774-828: Add the same input validation guard used in text_search
to hybrid_text_vector_search: at the start of
CoordinatorNodeClient.hybrid_text_vector_search validate the limit parameter
exactly as in text_search (check positive and within the same upper bound and
raise the same ValueError/message), so the method enforces the same limit
constraints before building HybridTextVectorSearchRequest and calling
self._text_stub.HybridTextVectorSearch.
- Around line 732-772: The text_search implementation currently forwards limit
without validation; add the same guards used elsewhere (e.g., traverse's
max_depth) to ensure limit is an int (reject bool) and non-negative before
constructing TextSearchRequest: if limit is not an int or is a bool raise
TypeError, and if limit < 0 raise ValueError; only then create
TextSearchRequest(label=..., query=..., limit=limit, ... ) and call
self._text_stub.TextSearch.

In `@demo/notebooks/03_langgraph_agent.ipynb`:
- Around line 213-217: The current notebook guard that only verifies "AT LEAST
ONE" pattern or WHERE mentions $sess is insufficient (it allows queries like
MATCH (n), (m {session: $sess}) RETURN n); update the guard logic that lives
alongside the commented note to either (A) parse the Cypher AST and enforce a
per-alias check so every node pattern identifier (each match alias) contains
{session: $sess}, or (B) restrict allowed query shapes to a single MATCH with
all node patterns explicitly bearing {session: $sess}; implement the chosen fix
where the guard is evaluated (the code referenced by the comment block about the
Cartesian-product query and $sess) and reject/raise on queries that do not
satisfy the per-alias session scoping requirement.
- Around line 155-181: The auto-detect logic treats any open listener on
COORDINODE_PORT as a hard failure when health() fails; change it so only an
explicit COORDINODE_ADDR environment override is fatal. In the block that
constructs CoordinodeClient(COORDINODE_ADDR) and calls client.health(), detect
whether os.environ.get("COORDINODE_ADDR") was set: if it was set and health() is
false, keep raising the RuntimeError; if it was not set (implicit localhost
auto-detect), close the client and fall back to creating LocalClient(":memory:")
and printing the embedded message instead of raising. Ensure you still close the
CoordinodeClient before falling back.

Verify each finding against the current code and only fix it if needed.

Inline comments:
In `@demo/notebooks/03_langgraph_agent.ipynb`:
- Around line 176-185: The import-failure handler in the "if _use_embedded"
block references _EMBEDDED_PIP_SPEC which may not be defined if the cell runs
standalone; fix by ensuring a local fallback pip spec string is used or by
defining a local constant before the try/except and then use that in the
RuntimeError message (refer to the LocalClient import/except block and
_EMBEDDED_PIP_SPEC symbol), so the exception message always contains a valid pip
install suggestion and never raises NameError.