nexo-brain 5.3.24 → 5.3.25

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "nexo-brain",
-  "version": "5.3.24",
+  "version": "5.3.25",
   "description": "Local cognitive runtime for Claude Code \u2014 persistent memory, overnight learning, doctor diagnostics, personal scripts, recovery-aware jobs, startup preflight, and optional dashboard/power helper.",
   "author": {
     "name": "NEXO Brain",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nexo-brain",
-  "version": "5.3.24",
+  "version": "5.3.25",
   "mcpName": "io.github.wazionapps/nexo",
   "description": "NEXO Brain — Shared brain for AI agents. Persistent memory, semantic RAG, natural forgetting, metacognitive guard, trust scoring, 150+ MCP tools. Works with Claude Code, Codex, Claude Desktop & any MCP client. 100% local, free.",
   "homepage": "https://nexo-brain.com",

package/src/agent_runner.py

@@ -580,7 +580,15 @@ def run_automation_prompt(
             raise AutomationBackendUnavailableError(
                 "Claude Code automation backend selected but `claude` is not installed."
             )
-        cmd = [claude_bin, "-p", prompt]
+        # Headless claude -p does NOT reliably honour permissions.allow from
+        # settings.json for MCP tool calls — it can stall waiting for an
+        # approval that will never come in non-interactive mode. All NEXO
+        # headless automation (followup-runner, email-monitor, deep-sleep,
+        # etc.) therefore must pass --dangerously-skip-permissions explicitly
+        # so the process actually runs instead of zombying. Interactive
+        # sessions (`nexo chat`) never go through this code path and keep
+        # their normal approval prompts.
+        cmd = [claude_bin, "-p", prompt, "--dangerously-skip-permissions"]
         if resolved_model:
             cmd.extend(["--model", resolved_model])
         if resolved_effort: