nexo-brain 5.3.14 → 5.3.16

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "nexo-brain",
-  "version": "5.3.14",
+  "version": "5.3.16",
   "description": "Local cognitive runtime for Claude Code \u2014 persistent memory, overnight learning, doctor diagnostics, personal scripts, recovery-aware jobs, startup preflight, and optional dashboard/power helper.",
   "author": {
     "name": "NEXO Brain",

package/bin/nexo-brain.js

@@ -177,6 +177,54 @@ function getCoreRuntimePackages() {
   return ["db", "cognitive", "doctor"];
 }
 
+function resolveLaunchAgentPath(home) {
+  const parts = ["/opt/homebrew/bin", "/usr/local/bin", "/usr/bin", "/bin",
+    path.join(home, ".local/bin"), path.join(home, ".nexo/bin")];
+  // Detect nvm node
+  const nvmDir = path.join(home, ".nvm/versions/node");
+  try {
+    const versions = fs.readdirSync(nvmDir)
+      .map(v => ({ name: v, mtime: fs.statSync(path.join(nvmDir, v)).mtimeMs }))
+      .sort((a, b) => b.mtime - a.mtime);
+    for (const v of versions) {
+      const nodeBin = path.join(nvmDir, v.name, "bin");
+      if (fs.existsSync(path.join(nodeBin, "node"))) {
+        parts.unshift(nodeBin);
+        break;
+      }
+    }
+  } catch { /* nvm not installed — skip */ }
+  return parts.join(":");
+}
+
+function setupKeychainPassFile(nexoHome) {
+  if (process.platform !== "darwin") return;
+  const configDir = path.join(nexoHome, "config");
+  const passFile = path.join(configDir, ".keychain-pass");
+  if (fs.existsSync(passFile)) return; // already set up
+  fs.mkdirSync(configDir, { recursive: true });
+  log("");
+  log("macOS Keychain setup for headless automation:");
+  log("  Claude Code stores auth in the login Keychain, which auto-locks.");
+  log("  Background jobs need to unlock it. Enter your macOS login password");
+  log("  (stored locally in ~/.nexo/config/.keychain-pass, chmod 600).");
+  log("");
+  return new Promise((resolve) => {
+    const rl = require("readline").createInterface({ input: process.stdin, output: process.stdout });
+    rl.question("  macOS login password (or Enter to skip): ", (answer) => {
+      rl.close();
+      if (answer && answer.trim()) {
+        fs.writeFileSync(passFile, answer.trim(), { mode: 0o600 });
+        log("  Keychain password saved. Background jobs will auto-unlock.");
+      } else {
+        log("  Skipped. Background jobs may fail with 'Not logged in' if Keychain locks.");
+        log("  Run: echo 'YOUR_PASSWORD' > ~/.nexo/config/.keychain-pass && chmod 600 ~/.nexo/config/.keychain-pass");
+      }
+      resolve();
+    });
+  });
+}
+
 function isProtectedMacPath(candidate) {
   if (process.platform !== "darwin" || !candidate) return false;
   const homeDir = require("os").homedir();
@@ -1250,7 +1298,7 @@ function installAllProcesses(platform, pythonPath, nexoHome, schedule, launchAge
         <key>NEXO_CODE</key>
         <string>${nexoCode}</string>
         <key>PATH</key>
-        <string>/opt/homebrew/bin:/usr/local/bin:/usr/bin:/bin</string>
+        <string>${resolveLaunchAgentPath(home)}</string>
     </dict>
 </dict>
 </plist>`;
@@ -1717,12 +1765,21 @@ async function main() {
       const templatesDest = path.join(NEXO_HOME, "templates");
       if (fs.existsSync(templatesSrc)) {
         fs.mkdirSync(templatesDest, { recursive: true });
-        ["script-template.py", "nexo_helper.py", "skill-template.md", "skill-script-template.py"].forEach((f) => {
+        for (const f of fs.readdirSync(templatesSrc)) {
           const src = path.join(templatesSrc, f);
-          if (fs.existsSync(src)) {
-            fs.copyFileSync(src, path.join(templatesDest, f));
+          const dest = path.join(templatesDest, f);
+          if (fs.statSync(src).isFile()) {
+            fs.copyFileSync(src, dest);
+          } else if (fs.statSync(src).isDirectory()) {
+            fs.mkdirSync(dest, { recursive: true });
+            for (const sf of fs.readdirSync(src)) {
+              const ssrc = path.join(src, sf);
+              if (fs.statSync(ssrc).isFile()) {
+                fs.copyFileSync(ssrc, path.join(dest, sf));
+              }
+            }
           }
-        });
+        }
       }
 
       logMacPermissionsNotice(NEXO_HOME, syncPython);
@@ -2386,13 +2443,23 @@ async function main() {
   const templatesDest = path.join(NEXO_HOME, "templates");
   fs.mkdirSync(templatesDest, { recursive: true });
   if (fs.existsSync(templateDir)) {
-    ["script-template.py", "nexo_helper.py", "skill-template.md", "skill-script-template.py"].forEach(f => {
+    // Copy all template files (not just a hardcoded subset)
+    for (const f of fs.readdirSync(templateDir)) {
       const src = path.join(templateDir, f);
-      if (fs.existsSync(src)) {
-        fs.copyFileSync(src, path.join(templatesDest, f));
+      const dest = path.join(templatesDest, f);
+      if (fs.statSync(src).isFile()) {
+        fs.copyFileSync(src, dest);
+      } else if (fs.statSync(src).isDirectory()) {
+        fs.mkdirSync(dest, { recursive: true });
+        for (const sf of fs.readdirSync(src)) {
+          const ssrc = path.join(src, sf);
+          if (fs.statSync(ssrc).isFile()) {
+            fs.copyFileSync(ssrc, path.join(dest, sf));
+          }
+        }
       }
-    });
-    log("  Script and skill templates installed.");
+    }
+    log("  All templates installed.");
   }
 
   // Hooks directory
@@ -2965,6 +3032,9 @@ ${doScan ? `- Stack: ${Object.keys(profileData.code.languages || {}).slice(0, 5)
   // Note: prevent-sleep and tcc-approve are now part of ALL_PROCESSES
   // and installed by installAllProcesses() above. No separate caffeinate block needed.
 
+  // Step 7b: macOS Keychain setup for headless automation
+  await setupKeychainPassFile(NEXO_HOME);
+
   // Step 8: Create shell alias and add runtime CLI to PATH
   log("Creating shell alias...");
   const aliasName = operatorName.toLowerCase();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nexo-brain",
-  "version": "5.3.14",
+  "version": "5.3.16",
   "mcpName": "io.github.wazionapps/nexo",
   "description": "NEXO Brain — Shared brain for AI agents. Persistent memory, semantic RAG, natural forgetting, metacognitive guard, trust scoring, 150+ MCP tools. Works with Claude Code, Codex, Claude Desktop & any MCP client. 100% local, free.",
   "homepage": "https://nexo-brain.com",

package/src/client_preferences.py

@@ -474,11 +474,35 @@ def _claude_desktop_config_path(home: Path) -> Path:
     return home / ".config" / "Claude" / "claude_desktop_config.json"
 
 
+def _which_with_nvm(name: str, home: Path | None = None) -> str:
+    """Like shutil.which but also searches nvm and ~/.nexo/bin."""
+    found = shutil.which(name)
+    if found:
+        return found
+    home = home or _user_home()
+    # Check ~/.nexo/bin
+    candidate = home / ".nexo" / "bin" / name
+    if candidate.exists():
+        return str(candidate)
+    # Check nvm node bins
+    nvm_dir = home / ".nvm" / "versions" / "node"
+    if nvm_dir.is_dir():
+        try:
+            versions = sorted(nvm_dir.iterdir(), key=lambda p: p.stat().st_mtime, reverse=True)
+            for v in versions:
+                candidate = v / "bin" / name
+                if candidate.exists():
+                    return str(candidate)
+        except OSError:
+            pass
+    return ""
+
+
 def detect_installed_clients(user_home: str | os.PathLike[str] | None = None) -> dict[str, dict]:
     home = Path(user_home).expanduser() if user_home else _user_home()
 
-    claude_bin = os.environ.get("CLAUDE_BIN", "").strip() or shutil.which("claude") or ""
-    codex_bin = os.environ.get("CODEX_BIN", "").strip() or shutil.which("codex") or ""
+    claude_bin = os.environ.get("CLAUDE_BIN", "").strip() or _which_with_nvm("claude", home)
+    codex_bin = os.environ.get("CODEX_BIN", "").strip() or _which_with_nvm("codex", home)
 
     if sys.platform == "darwin":
         desktop_app = next(

package/src/scripts/nexo-cron-wrapper.sh

@@ -14,6 +14,13 @@ shift
 NEXO_HOME="${NEXO_HOME:-$HOME/.nexo}"
 DB="$NEXO_HOME/data/nexo.db"
 
+# Unlock macOS Keychain so headless Claude Code can read auth tokens.
+# Claude Code stores its API key in the login keychain which auto-locks.
+KEYCHAIN_PASS_FILE="$NEXO_HOME/config/.keychain-pass"
+if [ -f "$KEYCHAIN_PASS_FILE" ] && [ "$(uname)" = "Darwin" ]; then
+    security unlock-keychain -p "$(cat "$KEYCHAIN_PASS_FILE")" ~/Library/Keychains/login.keychain-db 2>/dev/null || true
+fi
+
 # Record start
 RUN_ID=$(sqlite3 "$DB" "INSERT INTO cron_runs (cron_id) VALUES ('$CRON_ID'); SELECT last_insert_rowid();" 2>/dev/null)