nexo-brain 2.6.4 → 2.6.6

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "nexo-brain",
-  "version": "2.6.4",
+  "version": "2.6.6",
   "mcpName": "io.github.wazionapps/nexo",
-  "description": "NEXO — Cognitive co-operator for Claude Code. Memory, emotional intelligence, overnight learning (Deep Sleep), personal scripts registry, cron management, trust scoring, managed evolution, and adaptive calibration.",
+  "description": "NEXO — local cognitive runtime for Claude Code. Persistent memory, overnight learning, recovery-aware crons, personal scripts, doctor diagnostics, startup preflight, and optional power helper.",
   "bin": {
     "nexo-brain": "./bin/nexo-brain.js",
     "nexo": "./bin/nexo.js"

package/src/auto_update.py

@@ -1378,8 +1378,8 @@ def _run_runtime_post_sync(dest: Path = NEXO_HOME) -> tuple[bool, list[str]]:
                     "init_db = getattr(db, 'init_db', None); "
                     "init_db() if callable(init_db) else None; "
                     "import script_registry; "
-                    "sync_scripts = getattr(script_registry, 'sync_personal_scripts', None); "
-                    "sync_scripts() if callable(sync_scripts) else None"
+                    "reconcile_scripts = getattr(script_registry, 'reconcile_personal_scripts', None); "
+                    "reconcile_scripts(dry_run=False) if callable(reconcile_scripts) else None"
                 ),
             ],
             cwd=str(dest),
@@ -1521,14 +1521,27 @@ def startup_preflight(*, entrypoint: str, interactive: bool = False) -> dict:
         "claude_md_update": None,
         "migrations": [],
         "power_policy": None,
+        "power_message": None,
+        "full_disk_access_status": None,
+        "full_disk_access_message": None,
         "error": None,
     }
 
-    from runtime_power import apply_power_policy, ensure_power_policy_choice, get_power_policy
+    from runtime_power import (
+        apply_power_policy,
+        ensure_power_policy_choice,
+        get_power_policy,
+        ensure_full_disk_access_choice,
+        get_full_disk_access_status,
+    )
 
     choice = ensure_power_policy_choice(interactive=interactive, reason=entrypoint)
     power_result = apply_power_policy(choice.get("policy"))
+    fda_choice = ensure_full_disk_access_choice(interactive=interactive, reason=entrypoint)
     result["power_policy"] = choice.get("policy") or get_power_policy()
+    result["power_message"] = power_result.get("message")
+    result["full_disk_access_status"] = fda_choice.get("status") or get_full_disk_access_status()
+    result["full_disk_access_message"] = fda_choice.get("message")
     if power_result.get("ok"):
         result["actions"].append(f"power:{power_result.get('action')}")
 
@@ -1536,7 +1549,7 @@ def startup_preflight(*, entrypoint: str, interactive: bool = False) -> dict:
     if src_dir is not None and repo_dir is not None:
         try:
             from db import init_db
-            from script_registry import sync_personal_scripts
+            from script_registry import reconcile_personal_scripts
 
             _run_db_migrations()
             result["migrations"] = run_file_migrations()
@@ -1546,7 +1559,7 @@ def startup_preflight(*, entrypoint: str, interactive: bool = False) -> dict:
             _ensure_runtime_cli_wrapper()
             _ensure_runtime_cli_in_shell()
             init_db()
-            sync_personal_scripts()
+            reconcile_personal_scripts(dry_run=False)
             result["actions"].append("db+personal-sync")
         except Exception as e:
             result["error"] = str(e)
@@ -1601,6 +1614,9 @@ def startup_preflight(*, entrypoint: str, interactive: bool = False) -> dict:
     result = auto_update_check()
     result["entrypoint"] = entrypoint
     result["power_policy"] = choice.get("policy") or get_power_policy()
+    result["power_message"] = power_result.get("message")
+    result["full_disk_access_status"] = fda_choice.get("status") or get_full_disk_access_status()
+    result["full_disk_access_message"] = fda_choice.get("message")
     if power_result.get("ok"):
         actions = result.setdefault("actions", [])
         actions.append(f"power:{power_result.get('action')}")

package/src/cli.py

@@ -451,7 +451,13 @@ def _update(args):
     - Packaged/runtime-only install: delegate to plugins.update handle_update()
     """
     from auto_update import manual_sync_update, _resolve_sync_source
-    from runtime_power import ensure_power_policy_choice, apply_power_policy
+    from runtime_power import (
+        ensure_power_policy_choice,
+        apply_power_policy,
+        format_power_policy_label,
+        ensure_full_disk_access_choice,
+        format_full_disk_access_label,
+    )
 
     interactive = sys.stdin.isatty() and sys.stdout.isatty()
 
@@ -472,24 +478,43 @@ def _update(args):
         result = handle_update()
         choice = ensure_power_policy_choice(interactive=interactive, reason="update")
         power_result = apply_power_policy(choice.get("policy"))
+        fda_choice = ensure_full_disk_access_choice(interactive=interactive, reason="update")
         if args.json:
             print(json.dumps({
                 "mode": "packaged",
                 "message": result,
                 "power_policy": choice.get("policy"),
                 "power_action": power_result.get("action"),
+                "power_details": power_result.get("details"),
+                "full_disk_access_status": fda_choice.get("status"),
+                "full_disk_access_reasons": fda_choice.get("reasons"),
+                "full_disk_access_message": fda_choice.get("message"),
             }, indent=2, ensure_ascii=False))
         else:
             print(result)
             if choice.get("prompted"):
-                print(f"Power policy: {choice.get('policy')}")
+                print(f"Power policy: {format_power_policy_label(choice.get('policy'))}")
+            if power_result.get("message"):
+                print(f"Power helper: {power_result.get('message')}")
+            if fda_choice.get("prompted"):
+                print(f"Full Disk Access: {format_full_disk_access_label(fda_choice.get('status'))}")
+            if fda_choice.get("message"):
+                print(f"Full Disk Access: {fda_choice.get('message')}")
         return 0 if "UPDATE SUCCESSFUL" in result or "Already up to date" in result else 1
 
     choice = ensure_power_policy_choice(interactive=interactive, reason="update")
     power_result = apply_power_policy(choice.get("policy"))
+    fda_choice = ensure_full_disk_access_choice(interactive=interactive, reason="update")
     result = manual_sync_update(interactive=interactive, allow_source_pull=True)
     result["power_policy"] = choice.get("policy")
     result["power_action"] = power_result.get("action")
+    result["power_details"] = power_result.get("details")
+    result["full_disk_access_status"] = fda_choice.get("status")
+    result["full_disk_access_reasons"] = fda_choice.get("reasons")
+    if power_result.get("message"):
+        result["power_message"] = power_result.get("message")
+    if fda_choice.get("message"):
+        result["full_disk_access_message"] = fda_choice.get("message")
     if args.json:
         print(json.dumps(result, indent=2, ensure_ascii=False))
     else:
@@ -502,7 +527,13 @@ def _update(args):
             if result.get("pulled_source"):
                 print("  Source repo: pulled latest fast-forward before sync")
             if choice.get("prompted"):
-                print(f"  Power policy: {choice.get('policy')}")
+                print(f"  Power policy: {format_power_policy_label(choice.get('policy'))}")
+            if power_result.get("message"):
+                print(f"  Power helper: {power_result.get('message')}")
+            if fda_choice.get("prompted"):
+                print(f"  Full Disk Access: {format_full_disk_access_label(fda_choice.get('status'))}")
+            if fda_choice.get("message"):
+                print(f"  Full Disk Access: {fda_choice.get('message')}")
         else:
             print(f"UPDATE FAILED: {result.get('error', 'sync failed')}", file=sys.stderr)
     return 0 if result.get("ok") else 1

package/src/cron_recovery.py

@@ -272,6 +272,48 @@ def latest_successful_runs(cron_ids: list[str], *, db_path: Path = DB_PATH) -> d
     return result
 
 
+def active_started_runs(cron_ids: list[str], *, db_path: Path = DB_PATH) -> dict[str, datetime]:
+    """Return currently open cron_runs keyed by cron_id.
+
+    A run is considered active if it has started but not yet recorded a final
+    exit/ended timestamp. Catchup uses this to avoid relaunching the same cron
+    window while another invocation is already in flight.
+    """
+    if not cron_ids or not db_path.is_file():
+        return {}
+    conn = None
+    try:
+        conn = sqlite3.connect(str(db_path), timeout=2)
+        conn.row_factory = sqlite3.Row
+        placeholders = ",".join("?" for _ in cron_ids)
+        rows = conn.execute(
+            f"""
+            SELECT c1.cron_id, c1.started_at
+            FROM cron_runs c1
+            JOIN (
+                SELECT cron_id, MAX(id) AS max_id
+                FROM cron_runs
+                WHERE cron_id IN ({placeholders})
+                  AND (exit_code IS NULL OR ended_at IS NULL)
+                GROUP BY cron_id
+            ) latest ON latest.max_id = c1.id
+            """,
+            tuple(cron_ids),
+        ).fetchall()
+    except Exception:
+        return {}
+    finally:
+        with contextlib.suppress(Exception):
+            conn.close()
+
+    result: dict[str, datetime] = {}
+    for row in rows:
+        parsed = _parse_timestamp(row["started_at"], assume_utc=True)
+        if parsed is not None:
+            result[row["cron_id"]] = parsed
+    return result
+
+
 def legacy_state_runs(*, state_file: Path = STATE_FILE) -> dict[str, datetime]:
     state = _load_json(state_file, {})
     if not isinstance(state, dict):
@@ -315,6 +357,7 @@ def catchup_candidates(now: datetime | None = None) -> list[dict]:
     crons = load_enabled_crons() + load_managed_personal_crons()
     contracts = {cron["id"]: recovery_contract(cron) for cron in crons if cron.get("id")}
     successes = latest_successful_runs(list(contracts), db_path=DB_PATH)
+    active_runs = active_started_runs(list(contracts), db_path=DB_PATH)
     legacy = legacy_state_runs(state_file=STATE_FILE)
     candidates: list[dict] = []
 
@@ -341,8 +384,10 @@ def catchup_candidates(now: datetime | None = None) -> list[dict]:
                 continue
             due_at = now - timedelta(seconds=interval_seconds)
         last_success = successes.get(cron_id) or legacy.get(cron_id)
+        active_started = active_runs.get(cron_id)
         age_seconds = max(int((now - due_at).total_seconds()), 0)
-        missed = last_success is None or last_success < due_at
+        is_inflight = active_started is not None and active_started >= due_at
+        missed = (last_success is None or last_success < due_at) and not is_inflight
         within_window = contract["max_catchup_age"] <= 0 or age_seconds <= contract["max_catchup_age"]
 
         candidates.append({
@@ -354,8 +399,10 @@ def catchup_candidates(now: datetime | None = None) -> list[dict]:
             "schedule": schedule,
             "last_due_at": due_at,
             "last_success_at": last_success,
+            "active_started_at": active_started,
             "age_seconds": age_seconds,
             "missed": missed,
+            "inflight": is_inflight,
             "within_window": within_window,
         })
 

package/src/doctor/providers/runtime.py

@@ -747,6 +747,11 @@ def check_launchagent_integrity(fix: bool = False) -> DoctorCheck:
             "and treat recent 'Operation not permitted' against Documents/Desktop/Downloads as a TCC/runtime path issue."
         ),
     )
+    if tcc_risk:
+        check.repair_plan.append(
+            "On macOS, grant Full Disk Access manually if protected folders are required; "
+            "NEXO can only open the System Settings pane and verify best effort"
+        )
 
     if fix:
         sync_ok, sync_evidence = _sync_launchagents_from_manifest()

package/src/hooks/caffeinate-guard.sh

@@ -2,7 +2,7 @@
 # NEXO Caffeinate Guard — keeps the Mac awake so nocturnal processes run on schedule.
 # Runs as a LaunchAgent with KeepAlive=true. If killed, launchd restarts it.
 #
-# Uses caffeinate -s (prevent system sleep) with -i (prevent idle sleep).
-# The Mac screen can turn off but the system stays awake.
+# Uses the native macOS caffeinate helper. Closed-lid behavior remains
+# best-effort and depends on the host setup.
 
-exec caffeinate -s -i -w $$
+exec /usr/bin/caffeinate -d -i -m -s /bin/bash -lc 'while :; do sleep 3600; done'