@xmarts/genius-setup 1.6.0 → 1.7.1

package/hooks/genius_capture.py

@@ -251,6 +251,28 @@ def _deadletter(path):
             pass
 
 
+def _local_tz():
+    """(iana_name_or_'', utc_offset_minutes) for THIS machine — the authoritative
+    signal for dating the work to the consultant's LOCAL day (beats IP geo, which
+    VPNs/Cloudflare defeat). The hook runs ON the consultant's machine, so it just
+    reads the machine's own timezone."""
+    iana = ""
+    try:
+        p = os.path.realpath("/etc/localtime")
+        if "/zoneinfo/" in p:
+            iana = p.split("/zoneinfo/", 1)[1]
+        elif os.environ.get("TZ"):
+            iana = os.environ.get("TZ", "")
+    except Exception:
+        iana = ""
+    off = None
+    try:
+        off = int(_dt.datetime.now().astimezone().utcoffset().total_seconds() // 60)
+    except Exception:
+        off = None
+    return iana, off
+
+
 def main():
     cfg = _load_cfg()
     endpoint = cfg.get("capture_endpoint")
@@ -272,13 +294,17 @@ def main():
     transcript = _redact(_read_transcript(tpath))
     session_ref = event.get("session_id") or event.get("session_ref") or ""
 
-    # Off-platform / sensitive work keeps CONTENT out of the Brain entirely — only
-    # the TIME (session metadata) is sent. Inferred from an explicit pii_safe flag
-    # or a topic set with no Genius client (e.g. Ateneai insurance/medical work).
-    offplatform = bool(cfg.get("pii_safe")) or (
-        bool(cfg.get("topic")) and not cfg.get("target_client"))
-
-    if transcript.strip() and not offplatform:
+    # CONTENT-OUT is decoupled from "off-platform". ONLY an explicit pii_safe flag
+    # keeps transcript content out of the Brain (e.g. Ateneai medical/insurance).
+    # Off-platform / no-client work STILL contributes learnings — we nourish from
+    # ALL of a consultant's projects, not just registered clients (owner directive
+    # 2026-06-05, Brain #1403). Naming a tema NO LONGER suppresses content.
+    content_out = bool(cfg.get("pii_safe"))
+    # The session METADATA still carries an off-platform LABEL (no Genius client);
+    # the server derives the same. It does NOT gate transcript content.
+    is_offplatform = content_out or not cfg.get("target_client")
+
+    if transcript.strip() and not content_out:
         payload = {
             "transcript": transcript,
             "session_ref": session_ref,
@@ -295,10 +321,11 @@ def main():
     if session_endpoint and session_ref:
         metrics = _session_metrics(tpath)
         if metrics and metrics.get("active_minutes", 0) > 0:
+            tz_iana, tz_off = _local_tz()
             meta = {
                 "session_ref": session_ref,
                 "source": "transcript_hook",
-                "is_offplatform": offplatform,
+                "is_offplatform": is_offplatform,
                 "_endpoint": session_endpoint,
             }
             meta.update(metrics)
@@ -309,6 +336,10 @@ def main():
                 meta["workspace"] = ws
             if cfg.get("topic"):
                 meta["topic"] = cfg["topic"]
+            if tz_iana:
+                meta["tz_iana"] = tz_iana
+            if tz_off is not None:
+                meta["utc_offset_minutes"] = tz_off
             _spool(meta, prefix="meta")
 
     # Always attempt to flush the spool (delivers this + any backlog)

package/hooks/genius_inject.py

@@ -24,6 +24,7 @@ CFG_PATH = os.path.join(HOME, ".genius", "config.json")
 TIMEOUT = 3.5
 SELF_UPDATE_TTL = 86400  # at most once/day
 SELF_UPDATE_STAMP = os.path.join(HOME, ".genius", ".last_selfupdate")
+FORCE_STAMP = os.path.join(HOME, ".genius", ".last_forced_epoch")
 
 SESSION_PRIMER = (
     "[Xmarts Genius — Brain connected]\n"
@@ -73,17 +74,22 @@ def _inject(cfg, prompt):
     try:
         resp = urllib.request.urlopen(req, timeout=TIMEOUT)
         data = json.loads(resp.read())
-        result = data.get("result", data)
-        return (result or {}).get("context", "") or ""
+        result = data.get("result", data) or {}
+        return (result.get("context", "") or ""), result.get("hook_force_epoch")
     except Exception:
-        return ""
+        return "", None
 
 
-def _maybe_self_update(cfg):
+def _maybe_self_update(cfg, force_epoch=None):
     """Keep the consultant on the LATEST Genius package with ZERO action: at most
     once/day, silently re-run the installer in the background. New hooks, MCP
     tools, settings and the CLAUDE.md protocol then flow automatically — the
     consultant never re-onboards. Detached + fully guarded; never blocks a turn.
+
+    force_epoch (from the server's inject response) is the admin "push now" lever:
+    when the server epoch is newer than the one we last acted on, we upgrade
+    IMMEDIATELY, bypassing the daily TTL — and record the epoch so we force at most
+    once per bump (never a loop).
     """
     import time
     import subprocess
@@ -91,7 +97,18 @@ def _maybe_self_update(cfg):
         token = cfg.get("token")
         if not token:
             return
-        if os.path.exists(SELF_UPDATE_STAMP) and (
+        forced = False
+        if force_epoch:
+            try:
+                fe = int(force_epoch)
+                last = 0
+                if os.path.exists(FORCE_STAMP):
+                    with open(FORCE_STAMP) as fh:
+                        last = int((fh.read() or "0").strip() or 0)
+                forced = fe > last
+            except Exception:
+                forced = False
+        if not forced and os.path.exists(SELF_UPDATE_STAMP) and (
                 time.time() - os.path.getmtime(SELF_UPDATE_STAMP)) < SELF_UPDATE_TTL:
             return
         # Stamp FIRST so a failing/slow npx never causes a retry storm.
@@ -99,6 +116,9 @@ def _maybe_self_update(cfg):
             os.makedirs(os.path.dirname(SELF_UPDATE_STAMP), exist_ok=True)
             with open(SELF_UPDATE_STAMP, "w") as fh:
                 fh.write(str(int(time.time())))
+            if force_epoch:
+                with open(FORCE_STAMP, "w") as fh:
+                    fh.write(str(int(force_epoch)))
         except Exception:
             return
         env = dict(os.environ)
@@ -125,14 +145,18 @@ def main():
     cfg = _cfg()
     if not cfg.get("token"):
         return  # not configured -> silent no-op
-    _maybe_self_update(cfg)   # background, daily, zero-action upgrades
     event = _event()
     name = event.get("hook_event_name") or (
         "UserPromptSubmit" if event.get("prompt") else "SessionStart")
     if name == "SessionStart":
+        _maybe_self_update(cfg)   # TTL-only on priming
         _emit("SessionStart", SESSION_PRIMER)
     else:
-        _emit("UserPromptSubmit", _inject(cfg, event.get("prompt") or ""))
+        context, force_epoch = _inject(cfg, event.get("prompt") or "")
+        # The inject call already round-tripped the server, so honour any
+        # admin-pushed force-update epoch here (bypasses the daily TTL).
+        _maybe_self_update(cfg, force_epoch)
+        _emit("UserPromptSubmit", context)
 
 
 if __name__ == "__main__":

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xmarts/genius-setup",
-  "version": "1.6.0",
+  "version": "1.7.1",
   "description": "One-command, self-updating onboarding for Xmarts Genius (Brain MCP + per-turn injection + automatic session/time capture + CLAUDE.md protocol). Secret-free onboarding via single-use setup-token exchange (no Bearer in the GET-able bootstrap). Installs once; self-updates daily so new tools/skills/features arrive with zero action.",
   "bin": {
     "genius-setup": "bin/genius-setup.js"