@xmarts/genius-setup 1.7.1 → 1.7.2

package/hooks/genius_inject.py

@@ -63,7 +63,7 @@ def _inject(cfg, prompt):
     base = (cfg.get("base_url") or "https://beesmart.digital").rstrip("/")
     token = cfg.get("token")
     if not token or not prompt.strip():
-        return ""
+        return "", None, None
     body = json.dumps({"jsonrpc": "2.0", "method": "call", "id": 1,
                        "params": {"prompt": prompt[:4000], "limit": 4}}).encode()
     req = urllib.request.Request(base + "/xma/genius/v1/inject", data=body)
@@ -75,13 +75,34 @@ def _inject(cfg, prompt):
         resp = urllib.request.urlopen(req, timeout=TIMEOUT)
         data = json.loads(resp.read())
         result = data.get("result", data) or {}
-        return (result.get("context", "") or ""), result.get("hook_force_epoch")
+        return ((result.get("context", "") or ""),
+                result.get("hook_force_epoch"),
+                result.get("hook_pin_version"))
     except Exception:
-        return "", None
+        return "", None, None
 
 
-def _maybe_self_update(cfg, force_epoch=None):
-    """Keep the consultant on the LATEST Genius package with ZERO action: at most
+# M6 (Phase-0 integrity gate): NEVER resolve `@latest`. An unsigned `npx @latest`
+# self-update is a standing fleet-wide RCE channel. We install an EXACT pinned
+# version dictated by the server (xma_genius.hook_pin_version, returned in the
+# inject response) and otherwise fall back to this bundled known-good pin — the
+# client never resolves the mutable `@latest` tag.
+PINNED_FALLBACK = "1.7.2"
+
+
+def _pkg_spec(pin_version):
+    """Resolve the exact package spec to install. Accepts only a plain semver pin
+    from the server; anything else falls back to the bundled PINNED_FALLBACK.
+    Never returns an `@latest` spec."""
+    import re
+    v = (pin_version or "").strip()
+    if v and re.match(r"^[0-9]+\.[0-9]+\.[0-9]+([.-][0-9A-Za-z.]+)?$", v):
+        return "@xmarts/genius-setup@%s" % v
+    return "@xmarts/genius-setup@%s" % PINNED_FALLBACK
+
+
+def _maybe_self_update(cfg, force_epoch=None, pin_version=None):
+    """Keep the consultant on the SERVER-PINNED Genius package with ZERO action: at most
     once/day, silently re-run the installer in the background. New hooks, MCP
     tools, settings and the CLAUDE.md protocol then flow automatically — the
     consultant never re-onboards. Detached + fully guarded; never blocks a turn.
@@ -124,15 +145,16 @@ def _maybe_self_update(cfg, force_epoch=None):
         env = dict(os.environ)
         env["GENIUS_TOKEN"] = token
         base = cfg.get("base_url")
+        spec = _pkg_spec(pin_version)  # exact pinned version — never @latest
         devnull = open(os.devnull, "w")
         if os.name == "nt":
-            cmd = "npx -y @xmarts/genius-setup@latest"
+            cmd = "npx -y %s" % spec
             if base:
                 cmd += ' --base-url "%s"' % base
             subprocess.Popen(cmd, shell=True, env=env, stdout=devnull, stderr=devnull,
                              stdin=subprocess.DEVNULL, creationflags=0x00000008)  # DETACHED_PROCESS
         else:
-            args = ["npx", "-y", "@xmarts/genius-setup@latest"]
+            args = ["npx", "-y", spec]
             if base:
                 args += ["--base-url", base]
             subprocess.Popen(args, env=env, stdout=devnull, stderr=devnull,
@@ -152,10 +174,11 @@ def main():
         _maybe_self_update(cfg)   # TTL-only on priming
         _emit("SessionStart", SESSION_PRIMER)
     else:
-        context, force_epoch = _inject(cfg, event.get("prompt") or "")
+        context, force_epoch, pin_version = _inject(cfg, event.get("prompt") or "")
         # The inject call already round-tripped the server, so honour any
-        # admin-pushed force-update epoch here (bypasses the daily TTL).
-        _maybe_self_update(cfg, force_epoch)
+        # admin-pushed force-update epoch here (bypasses the daily TTL) and install
+        # the exact server-pinned version (never @latest).
+        _maybe_self_update(cfg, force_epoch, pin_version)
         _emit("UserPromptSubmit", context)
 
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xmarts/genius-setup",
-  "version": "1.7.1",
+  "version": "1.7.2",
   "description": "One-command, self-updating onboarding for Xmarts Genius (Brain MCP + per-turn injection + automatic session/time capture + CLAUDE.md protocol). Secret-free onboarding via single-use setup-token exchange (no Bearer in the GET-able bootstrap). Installs once; self-updates daily so new tools/skills/features arrive with zero action.",
   "bin": {
     "genius-setup": "bin/genius-setup.js"