nexo-brain 6.0.0 → 6.0.2

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "nexo-brain",
-  "version": "6.0.0",
+  "version": "6.0.2",
   "description": "Local cognitive runtime for Claude Code \u2014 persistent memory, overnight learning, doctor diagnostics, personal scripts, recovery-aware jobs, startup preflight, and optional dashboard/power helper.",
   "author": {
     "name": "NEXO Brain",

package/README.md

@@ -18,7 +18,11 @@
 
 [Watch the overview video](https://nexo-brain.com/watch/) · [Watch on YouTube](https://www.youtube.com/watch?v=i2lkGhKyVqI) · [Open the infographic](https://nexo-brain.com/assets/nexo-brain-infographic-v5.png)
 
-Version `6.0.0` is the current packaged-runtime line: **BREAKING** tier-only setup. Onboarding asks for one resonance tier (`maximo`/`alto`/`medio`/`bajo`) and that choice drives every backend via `src/resonance_tiers.json`; the per-backend model/effort prompts are gone and the legacy `client_runtime_profiles.{claude_code,codex}.{model,reasoning_effort}` are silently purged from `schedule.json` on upgrade. Protocol strictness is no longer configurable — interactive TTY sessions run `strict`, non-TTY (crons, pipes, tests) run `lenient`; `NEXO_PROTOCOL_STRICTNESS` env, `preferences.protocol_strictness`, and the `default/normal/off/warn/soft` aliases are all removed. `preferences.show_pending_at_start` moves to NEXO Desktop's electron-store. The seven core hooks are now unified behind `src/hooks/manifest.json` (plugin and npm modes read the same file), two new hooks ship (`Notification` for live-session activity and `SubagentStop` for auto-closing stale `protocol_tasks`), and `auto_capture.py` is wired to both `UserPromptSubmit` and `PostToolUse` with a persistent 1h dedup table plus an automatic `nexo_learning_add` on correction matches. `~/.nexo/hooks_status.json` is published after every `registerAllCoreHooks()` so NEXO Desktop ≥0.12.0 can render Hooks activos X/Y. New `nexo-brain --skip` flag aliases `--yes`/`--defaults`. Full suite 1057 passed, 1 skipped.
+Version `6.0.2` is the current packaged-runtime line: adds the reserved caller prefix `personal/*` so scripts living in `~/.nexo/scripts/` can invoke the automation backend with their own caller id without editing `src/resonance_map.py`. New kwarg `tier` (`"maximo"` / `"alto"` / `"medio"` / `"bajo"`) on `run_automation_prompt`, `run_automation_interactive`, `nexo_helper.run_automation_text`, `nexo_helper.run_automation_json`, and `nexo-agent-run.py --tier`. Precedence for `personal/*` callers: explicit `tier=` → explicit `reasoning_effort=` → `calibration.preferences.default_resonance` → `DEFAULT_RESONANCE` (`alto`). Registered callers keep their behaviour unchanged. New guide: [`docs/personal-scripts-guide.md`](docs/personal-scripts-guide.md).
+
+Previously in `6.0.1`: hotfix on top of the 6.0.0 release. `protocol_settings.py` now treats the process as interactive when **either** stdin+stdout are TTYs **or** `NEXO_INTERACTIVE=1` is exported — closes the gap where NEXO Desktop 0.12.0 spawned `claude` through pipes and Brain fell back to `lenient` even with a human in the loop. The `PostToolUse` hook also gains an inbox autodetect stage: when the session has unread `nexo_send` messages and has gone 60s+ without a heartbeat, it emits a `systemMessage` asking the agent to run `nexo_heartbeat` and consume them. Rate-limited to one reminder per minute per SID (new `hook_inbox_reminders` table, migration m42). Added `sessions.last_heartbeat_ts`, stamped by every successful heartbeat. `NEXO_INTERACTIVE` is an internal Brain↔Electron contract — not user-facing, not a resurrection of the removed `NEXO_PROTOCOL_STRICTNESS`.
+
+Previously in `6.0.0`: **BREAKING** tier-only setup. Onboarding asks for one resonance tier (`maximo`/`alto`/`medio`/`bajo`) and that choice drives every backend via `src/resonance_tiers.json`; the per-backend model/effort prompts are gone and the legacy `client_runtime_profiles.{claude_code,codex}.{model,reasoning_effort}` are silently purged from `schedule.json` on upgrade. Protocol strictness is no longer configurable — interactive TTY sessions run `strict`, non-TTY (crons, pipes, tests) run `lenient`; `NEXO_PROTOCOL_STRICTNESS` env, `preferences.protocol_strictness`, and the `default/normal/off/warn/soft` aliases are all removed. `preferences.show_pending_at_start` moves to NEXO Desktop's electron-store. The seven core hooks are now unified behind `src/hooks/manifest.json` (plugin and npm modes read the same file), two new hooks ship (`Notification` for live-session activity and `SubagentStop` for auto-closing stale `protocol_tasks`), and `auto_capture.py` is wired to both `UserPromptSubmit` and `PostToolUse` with a persistent 1h dedup table plus an automatic `nexo_learning_add` on correction matches. `~/.nexo/hooks_status.json` is published after every `registerAllCoreHooks()` so NEXO Desktop ≥0.12.0 can render Hooks activos X/Y. New `nexo-brain --skip` flag aliases `--yes`/`--defaults`. Full suite 1057 passed, 1 skipped.
 
 Previously in `5.10.2`: auto-bootstraps `brain/profile.json` from `brain/calibration.json` on `nexo update` when the profile file is missing, empty, or corrupt AND calibration carries at least one of `meta.role`, `meta.technical_level`, `name`, `language`. NEXO Desktop's *Preferencias → Avanzado* tab used to render an empty `{}` for that block when the onboarding flow had been interrupted; now it either shows the seeded profile or a friendly explanation of what each file is for, paired with Desktop `v0.11.2` which adds header descriptions to both JSON blocks. Never overwrites a populated profile, never raises, idempotent. Also fixes a latent host-filesystem leak in `test_user_facing_caller_with_no_user_default_uses_alto` exposed by the v5.10.1 migration.
 
@@ -1143,6 +1147,7 @@ If NEXO Brain is useful to you, consider:
 - **Share your experience** — tell others how you're using cognitive memory in your AI workflows
 - **Contribute** — see [CONTRIBUTING.md](CONTRIBUTING.md) for guidelines. Issues and PRs welcome
 - **Client parity / shared-brain maintenance** — see [docs/client-parity-checklist.md](docs/client-parity-checklist.md)
+- **Writing a personal script that calls the automation backend** — see [docs/personal-scripts-guide.md](docs/personal-scripts-guide.md)
 
 [![Star History Chart](https://api.star-history.com/svg?repos=wazionapps/nexo&type=Date)](https://star-history.com/#wazionapps/nexo&Date)
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nexo-brain",
-  "version": "6.0.0",
+  "version": "6.0.2",
   "mcpName": "io.github.wazionapps/nexo",
   "description": "NEXO Brain \u2014 Shared brain for AI agents. Persistent memory, semantic RAG, natural forgetting, metacognitive guard, trust scoring, 150+ MCP tools. Works with Claude Code, Codex, Claude Desktop & any MCP client. 100% local, free.",
   "homepage": "https://nexo-brain.com",

package/src/agent_runner.py

@@ -531,6 +531,7 @@ def run_automation_interactive(
     env: dict | None = None,
     preferences: dict | None = None,
     session_type: str = "interactive_chat",
+    tier: str = "",
 ) -> subprocess.CompletedProcess:
     """Launch an interactive Claude/Codex session with automation_runs logging.
 
@@ -564,8 +565,13 @@ def run_automation_interactive(
         user_default = ""
         if isinstance(prefs, dict):
             user_default = str(prefs.get("default_resonance") or "").strip()
+        # v6.0.2 — respect explicit ``tier`` override so personal/* callers
+        # can force a resonance without registering in the core map.
+        explicit_tier_arg = (tier or "").strip() or None
         resonance_tier = resolve_tier_for_caller(
-            caller, user_default=user_default or None
+            caller,
+            user_default=user_default or None,
+            explicit_tier=explicit_tier_arg,
         )
     except Exception:
         resonance_tier = ""
@@ -848,6 +854,7 @@ def run_automation_prompt(
     env: dict | None = None,
     model: str = "",
     reasoning_effort: str = "",
+    tier: str = "",
     timeout: int = 300,
     output_format: str = "",
     append_system_prompt: str = "",
@@ -891,13 +898,22 @@ def run_automation_prompt(
     user_default = ""
     if isinstance(prefs, dict):
         user_default = str(prefs.get("default_resonance") or "").strip()
+    # v6.0.2 — ``tier`` kwarg propagates to the resolver as ``explicit_tier``
+    # so personal/* callers can pin their reasoning budget per-invocation
+    # without editing the registry. Registered callers remain unchanged.
+    explicit_tier_arg = (tier or "").strip() or None
     # This raises UnregisteredCallerError if caller is unknown — the
     # same fail-closed rule we wanted. No silent fallback.
     resonance_tier = resolve_tier_for_caller(
-        caller, user_default=user_default or None
+        caller,
+        user_default=user_default or None,
+        explicit_tier=explicit_tier_arg,
     )
     mapped_model, mapped_effort = resolve_model_and_effort(
-        caller, selected_backend, user_default=user_default or None
+        caller,
+        selected_backend,
+        user_default=user_default or None,
+        explicit_tier=explicit_tier_arg,
     )
     if mapped_model and not model:
         model = mapped_model

package/src/db/__init__.py

@@ -81,6 +81,14 @@ from db._sessions import (
     track_files, untrack_files, get_all_tracked_files,
     send_message, get_inbox,
     ask_question, answer_question, get_pending_questions, check_answer,
+    update_last_heartbeat_ts, get_last_heartbeat_ts,
+    count_pending_inbox_messages, resolve_sid_from_external,
+)
+
+# PostToolUse inbox-reminder rate limit (v6.0.1)
+_hook_inbox_reminders = _load_submodule("db._hook_inbox_reminders")
+from db._hook_inbox_reminders import (
+    get_last_reminder_ts, mark_reminder_sent, reset_reminders_for_sid,
 )
 
 # Reminders and followups

package/src/db/_hook_inbox_reminders.py

@@ -0,0 +1,73 @@
+"""NEXO DB — Hook inbox reminder bookkeeping (v6.0.1).
+
+The ``PostToolUse`` hook may surface a ``systemMessage`` that tells the
+agent it has unread ``nexo_send`` messages when the session has been
+autopiloting through tool calls for a while. This module backs the rate
+limit: at most one reminder per minute per SID, stored in the tiny
+``hook_inbox_reminders`` table created by migration m42.
+
+All helpers are best-effort on the read path and raise on unexpected
+write failures — callers (the hook itself) wrap calls in try/except so
+a malformed DB never breaks the tool pipeline.
+"""
+from __future__ import annotations
+
+from db._core import get_db
+
+
+def get_last_reminder_ts(sid: str) -> float | None:
+    """Return the epoch seconds of the last inbox reminder for ``sid``.
+
+    Returns None when no row exists yet. Never raises — treats any
+    unexpected error as "no prior reminder recorded" so the hook can
+    decide to emit a fresh one.
+    """
+    if not sid:
+        return None
+    try:
+        row = get_db().execute(
+            "SELECT last_reminder_ts FROM hook_inbox_reminders WHERE sid = ?",
+            (sid,),
+        ).fetchone()
+    except Exception:
+        return None
+    if row is None:
+        return None
+    try:
+        return float(row[0]) if row[0] is not None else None
+    except (TypeError, ValueError):
+        return None
+
+
+def mark_reminder_sent(sid: str, ts: float) -> None:
+    """Record that a reminder was surfaced for ``sid`` at ``ts``.
+
+    Uses SQLite UPSERT so the table tracks one row per SID. Silently
+    swallows DB errors; the hook caller logs / skips as needed.
+    """
+    if not sid:
+        return
+    try:
+        conn = get_db()
+        conn.execute(
+            "INSERT INTO hook_inbox_reminders (sid, last_reminder_ts) "
+            "VALUES (?, ?) "
+            "ON CONFLICT(sid) DO UPDATE SET last_reminder_ts = excluded.last_reminder_ts",
+            (sid, float(ts)),
+        )
+        conn.commit()
+    except Exception:
+        pass
+
+
+def reset_reminders_for_sid(sid: str) -> None:
+    """Delete the reminder row for ``sid``. Used by tests that want to
+    start from a clean slate between assertions."""
+    if not sid:
+        return
+    try:
+        conn = get_db()
+        conn.execute("DELETE FROM hook_inbox_reminders WHERE sid = ?", (sid,))
+        conn.commit()
+    except Exception:
+        pass

package/src/db/_schema.py

@@ -1010,6 +1010,37 @@ def _m41_automation_sessions_columns(conn):
     )
 
 
+def _m42_v6_0_1_hotfix(conn):
+    """v6.0.1 hotfix — last_heartbeat_ts on sessions + hook_inbox_reminders.
+
+    Two surfaces:
+
+    1. ``sessions.last_heartbeat_ts`` is a REAL column holding the epoch
+       seconds of the most recent ``nexo_heartbeat`` call for that SID.
+       The PostToolUse hook uses it to decide whether to emit an
+       inbox-reminder systemMessage on autopilot sessions that have not
+       checked their inbox in a while.
+
+    2. ``hook_inbox_reminders`` is a tiny table storing the last time we
+       surfaced an inbox reminder per SID. The hook reads/writes it to
+       enforce a rate limit of at most one reminder per minute per
+       session, so long streams of tool calls do not spam the user.
+
+    Idempotent by construction: ``_migrate_add_column`` is a no-op when
+    the column exists, ``CREATE TABLE IF NOT EXISTS`` likewise.
+    """
+    _migrate_add_column(conn, "sessions", "last_heartbeat_ts", "REAL")
+    _migrate_add_index(
+        conn, "idx_sessions_last_heartbeat_ts", "sessions", "last_heartbeat_ts"
+    )
+    conn.execute(
+        """CREATE TABLE IF NOT EXISTS hook_inbox_reminders (
+            sid TEXT PRIMARY KEY,
+            last_reminder_ts REAL NOT NULL
+        )"""
+    )
+
+
 MIGRATIONS = [
     (1, "learnings_columns", _m1_learnings_columns),
     (2, "followups_reasoning", _m2_followups_reasoning),
@@ -1052,6 +1083,7 @@ MIGRATIONS = [
     (39, "hook_runs", _m39_hook_runs),
     (40, "classification_columns", _m40_classification_columns),
     (41, "automation_sessions_columns", _m41_automation_sessions_columns),
+    (42, "v6_0_1_hotfix", _m42_v6_0_1_hotfix),
 ]
 
 

package/src/db/_sessions.py

@@ -123,6 +123,110 @@ def clean_stale_sessions() -> int:
     return count
 
 
+def update_last_heartbeat_ts(sid: str, ts: float | None = None) -> None:
+    """Stamp ``sessions.last_heartbeat_ts`` with the current heartbeat time.
+
+    Added in v6.0.1 so the PostToolUse hook can decide whether an
+    autopilot session has gone long enough without a heartbeat to
+    deserve an inbox reminder. Called from ``handle_heartbeat`` after
+    every successful heartbeat. Never raises — treats a missing
+    session row (test harnesses, race on cleanup) as a no-op.
+    """
+    if not sid:
+        return
+    try:
+        sid = _validate_sid(sid)
+    except Exception:
+        return
+    stamp = float(ts) if ts is not None else now_epoch()
+    conn = get_db()
+    try:
+        conn.execute(
+            "UPDATE sessions SET last_heartbeat_ts = ? WHERE sid = ?",
+            (stamp, sid),
+        )
+        conn.commit()
+    except Exception:
+        pass
+
+
+def get_last_heartbeat_ts(sid: str) -> float | None:
+    """Return the epoch seconds of the most recent heartbeat for ``sid``.
+
+    Returns None when either the session does not exist or the column
+    has never been populated (pre-v6.0.1 rows, or a brand-new session
+    that has not yet called ``nexo_heartbeat``). The hook treats None
+    as "too new to reason about" and skips the reminder.
+    """
+    if not sid:
+        return None
+    conn = get_db()
+    try:
+        row = conn.execute(
+            "SELECT last_heartbeat_ts FROM sessions WHERE sid = ?", (sid,)
+        ).fetchone()
+    except Exception:
+        return None
+    if not row:
+        return None
+    try:
+        return float(row["last_heartbeat_ts"]) if row["last_heartbeat_ts"] is not None else None
+    except (TypeError, ValueError, KeyError):
+        return None
+
+
+def count_pending_inbox_messages(sid: str) -> int:
+    """Count unread ``messages`` addressed to ``sid`` (direct or broadcast).
+
+    The concrete read-tracking table is ``message_reads``; a message is
+    "pending" when no row in ``message_reads`` matches ``(message_id, sid)``
+    and the message is not self-sent. Added in v6.0.1 for the PostToolUse
+    inbox-autodetect reminder.
+    """
+    if not sid:
+        return 0
+    try:
+        row = get_db().execute(
+            "SELECT COUNT(*) FROM messages m "
+            "WHERE (m.to_sid = 'all' OR m.to_sid = ?) "
+            "AND m.from_sid != ? "
+            "AND m.id NOT IN (SELECT message_id FROM message_reads WHERE sid = ?)",
+            (sid, sid, sid),
+        ).fetchone()
+    except Exception:
+        return 0
+    if not row:
+        return 0
+    try:
+        return int(row[0])
+    except (TypeError, ValueError):
+        return 0
+
+
+def resolve_sid_from_external(external_id: str) -> str:
+    """Map a Claude Code ``session_id`` back to the NEXO SID we track.
+
+    The PostToolUse hook payload carries the external Claude session id;
+    we want the internal SID to query the messages table. Returns an
+    empty string when no session matches or the external id is empty.
+    """
+    external = (external_id or "").strip()
+    if not external:
+        return ""
+    try:
+        conn = get_db()
+        row = conn.execute(
+            "SELECT sid FROM sessions WHERE external_session_id = ? OR claude_session_id = ? "
+            "ORDER BY last_update_epoch DESC LIMIT 1",
+            (external, external),
+        ).fetchone()
+    except Exception:
+        return ""
+    if row and row["sid"]:
+        return str(row["sid"])
+    return ""
+
+
 def search_sessions(keyword: str) -> list[dict]:
     """Find sessions whose task contains keyword (case-insensitive)."""
     conn = get_db()

package/src/hooks/post_tool_use.py

@@ -7,6 +7,12 @@ heartbeat-posttool). Also pipes the tool result through auto_capture.py so
 decision/correction/explicit facts from tool outputs reach the cognitive
 layer.
 
+v6.0.1 adds an inbox-autodetect stage at the end: when the session has
+unread ``nexo_send`` messages AND has gone for ≥60s without a heartbeat,
+the hook emits a ``systemMessage`` telling the agent to run
+``nexo_heartbeat`` and pick them up. Rate-limited to one reminder per
+minute per SID via the ``hook_inbox_reminders`` table (migration m42).
+
 Failures in one sub-step do not cancel the others. Hook is best-effort;
 exit code is always 0 so Claude Code never sees a PostToolUse failure.
 """
@@ -23,6 +29,91 @@ from pathlib import Path
 _DIR = Path(__file__).resolve().parent
 _NEXO_HOME = Path(os.environ.get("NEXO_HOME", str(Path.home() / ".nexo")))
 
+INBOX_CHECK_THRESHOLD_SECONDS = int(
+    os.environ.get("NEXO_INBOX_CHECK_THRESHOLD_SECONDS", "60")
+)
+
+
+def _resolve_sid_from_payload(payload: dict) -> str:
+    """Resolve the NEXO SID from the hook payload or fall back to env.
+
+    Claude Code delivers its own ``session_id`` in the payload; we map
+    it back to our SID via ``sessions.external_session_id``. The
+    fallback is ``NEXO_SID`` in the environment, which headless crons
+    export directly.
+    """
+    candidates: list[str] = []
+    if isinstance(payload, dict):
+        for key in ("nexo_sid", "sid", "session_id", "sessionId"):
+            value = payload.get(key)
+            if isinstance(value, str) and value.strip():
+                candidates.append(value.strip())
+    env_sid = os.environ.get("NEXO_SID", "").strip()
+    if env_sid:
+        candidates.append(env_sid)
+    env_claude = os.environ.get("CLAUDE_SESSION_ID", "").strip()
+    if env_claude:
+        candidates.append(env_claude)
+
+    # Try each candidate: first as a NEXO-shaped SID (nexo-<epoch>-<pid>),
+    # then as a Claude external id we need to translate.
+    try:
+        sys.path.insert(0, str(_DIR.parent))
+        from db import (  # type: ignore
+            resolve_sid_from_external,
+            get_last_heartbeat_ts,
+        )
+    except Exception:
+        return ""
+
+    for cand in candidates:
+        if cand.startswith("nexo-"):
+            return cand
+        resolved = resolve_sid_from_external(cand)
+        if resolved:
+            return resolved
+    return ""
+
+
+def check_inbox_and_emit_reminder(sid: str, now: float | None = None) -> str | None:
+    """Return the systemMessage string when a reminder should be surfaced.
+
+    Returns ``None`` when any gate fails (no sid, no pending messages,
+    heartbeat too recent, rate-limited on reminders).
+    """
+    if not sid:
+        return None
+    try:
+        sys.path.insert(0, str(_DIR.parent))
+        from db import (  # type: ignore
+            count_pending_inbox_messages,
+            get_last_heartbeat_ts,
+            get_last_reminder_ts,
+            mark_reminder_sent,
+        )
+    except Exception:
+        return None
+
+    pending = count_pending_inbox_messages(sid)
+    if pending <= 0:
+        return None
+    last_hb = get_last_heartbeat_ts(sid)
+    if last_hb is None:
+        return None  # pre-v6.0.1 row or brand-new session
+    current = float(now) if now is not None else time.time()
+    if current - last_hb < INBOX_CHECK_THRESHOLD_SECONDS:
+        return None
+    last_rem = get_last_reminder_ts(sid) or 0.0
+    if current - last_rem < INBOX_CHECK_THRESHOLD_SECONDS:
+        return None  # rate limit: max 1 reminder/min/session
+    mark_reminder_sent(sid, current)
+    return (
+        f"[NEXO Protocol Enforcer] You have {pending} unread inbox message(s) "
+        f"sent by other NEXO sessions. Run nexo_heartbeat with your SID now "
+        f"to receive them before continuing — other sessions may be blocked "
+        f"waiting on your response."
+    )
+
 
 def _record(duration_ms: int, exit_code: int, summary: str) -> None:
     try:
@@ -116,6 +207,18 @@ def main() -> int:
 
     exits.append(_run_auto_capture(payload))
 
+    # v6.0.1 — inbox autodetect runs LAST so it sees the latest DB state
+    # (including any writes the previous steps may have done). Emits a
+    # single-line JSON systemMessage so Claude Code surfaces it to the
+    # agent without breaking the tool pipeline.
+    try:
+        sid = _resolve_sid_from_payload(payload)
+        reminder = check_inbox_and_emit_reminder(sid)
+        if reminder:
+            print(json.dumps({"systemMessage": reminder}))
+    except Exception:
+        pass
+
     final_exit = max(exits) if exits else 0
     duration_ms = int((time.time() - started) * 1000)
     _record(duration_ms, final_exit, f"steps={len(exits)}")

package/src/protocol_settings.py

@@ -2,62 +2,87 @@ from __future__ import annotations
 
 """Protocol-discipline settings.
 
-v6.0.0 breaking change: there is no user-facing toggle anymore.
-
-- Interactive TTY sessions always run ``strict``.
-- Non-TTY contexts (crons, tests, pipes) always run ``lenient`` — exactly
-  what every scheduled background job needs to avoid noisy protocol nags.
-- ``VALID_PROTOCOL_STRICTNESS`` still exposes ``learning`` for internal
-  use by self-audit and onboarding flows, but it is never the active mode
-  unless the code explicitly asks for it.
-
-The v5.x surfaces this module used to expose — ``NEXO_PROTOCOL_STRICTNESS``
-environment variable, ``preferences.protocol_strictness`` in calibration,
-and the ``default/normal/off/warn/soft`` aliases — are all removed on
-purpose. Users who relied on them see their value silently cleared by the
-v6.0.0 calibration migration and fall through to the TTY/no-TTY decision.
+v6.0.0 removed the user-facing strictness toggle. v6.0.1 layers an
+Electron-class escape hatch on top:
+
+- Interactive contexts run ``strict``. Interactive is defined as either
+  of two signals:
+    * both stdin and stdout are attached to a TTY (terminal users), OR
+    * the client set ``NEXO_INTERACTIVE=1`` in the child process env
+      (Electron clients like NEXO Desktop spawn ``claude`` through
+      pipes, so ``isatty()`` returns False even with a human in the
+      loop).
+- Everything else (crons, tests, piped scripts, headless automation)
+  runs ``lenient``.
+
+``NEXO_INTERACTIVE`` is a contract between Brain and its interactive
+clients. It is NOT user-facing. It is NOT documented to operators. It
+is NOT the removed ``NEXO_PROTOCOL_STRICTNESS`` knob — that one let a
+user force a strictness value, which confused people. This one only
+signals interactivity; the actual strictness still follows the
+TTY/interactive test above.
+
+``VALID_PROTOCOL_STRICTNESS`` still exposes ``learning`` for internal
+use by self-audit and onboarding flows, but nothing in this module
+ever selects it.
 """
 
+import os
 import sys
 
 
 DEFAULT_PROTOCOL_STRICTNESS = "strict"
 VALID_PROTOCOL_STRICTNESS = {"lenient", "strict", "learning"}
 
+# The only accepted value is the exact string "1". Truthy-looking values
+# such as "true", "yes", "on" are deliberately ignored so a typo cannot
+# silently re-enable strict mode on a headless machine.
+_NEXO_INTERACTIVE_OPT_IN = "1"
 
-def _stdio_is_tty() -> bool:
-    """True only when both stdin and stdout are attached to a terminal.
 
-    The double-check matters: a headless cron typically redirects stdout
-    to a log file but leaves stdin as a TTY. Treating that as interactive
-    would re-enable strict mode for every cron invocation, which is
-    exactly the noise v6.0.0 set out to eliminate.
+def _is_interactive() -> bool:
+    """True when the process should be treated as interactive.
+
+    Two signals are accepted (OR semantics):
+      1. stdin and stdout are both TTYs.
+      2. ``NEXO_INTERACTIVE`` is exactly ``"1"`` — the Brain↔Electron
+         contract used by NEXO Desktop ≥0.12.0.
+    Anything else returns False, falling through to ``lenient``.
     """
+    if os.environ.get("NEXO_INTERACTIVE") == _NEXO_INTERACTIVE_OPT_IN:
+        return True
     try:
         return bool(sys.stdin.isatty() and sys.stdout.isatty())
     except Exception:
         return False
 
 
+# Kept as a thin alias for any v6.0.0 caller that imported the old helper
+# directly. New code should prefer ``_is_interactive()``.
+def _stdio_is_tty() -> bool:
+    """Deprecated in v6.0.1. Delegates to ``_is_interactive()`` so the
+    NEXO_INTERACTIVE contract applies regardless of which name the caller
+    imported."""
+    return _is_interactive()
+
+
 def normalize_protocol_strictness(value: str | None) -> str:
     """Coerce an arbitrary input into one of the canonical values.
 
-    Unknown or empty values return the TTY-derived default. The only
-    normalization done is lowercasing and whitespace stripping — the v5.x
-    alias table is gone.
+    Unknown or empty values fall through to the interactivity test. The
+    only normalisation is lowercasing and whitespace stripping — the
+    v5.x alias table (default/normal/off/warn/soft) is gone.
     """
     candidate = str(value or "").strip().lower()
     if candidate in VALID_PROTOCOL_STRICTNESS:
         return candidate
-    return "strict" if _stdio_is_tty() else "lenient"
+    return "strict" if _is_interactive() else "lenient"
 
 
 def get_protocol_strictness() -> str:
     """Return the active strictness for this process.
 
-    No configuration, no environment, no calibration — only the process
-    context decides. Callers that want to force a value for tests can
-    monkeypatch ``sys.stdin.isatty`` / ``sys.stdout.isatty`` or call
-    ``normalize_protocol_strictness`` directly with an explicit value.
+    No configuration, no user-facing environment, no calibration value —
+    only the process context and the Brain↔client contract decide.
     """
-    return "strict" if _stdio_is_tty() else "lenient"
+    return "strict" if _is_interactive() else "lenient"

package/src/resonance_map.py

@@ -213,6 +213,21 @@ ALL_REGISTERED_CALLERS: frozenset[str] = frozenset(
 )
 
 
+# v6.0.2 — Reserved caller prefix for user-owned personal scripts that live
+# outside this repo (``~/.nexo/scripts/``). Callers matching this prefix
+# bypass the registry entirely: they cannot be required to register because
+# they ship with each operator's own install. Instead, the script passes
+# either an explicit ``tier`` (semantic) or a ``reasoning_effort`` (direct
+# override) — or falls back to the user's ``default_resonance`` preference,
+# and finally to ``DEFAULT_RESONANCE`` as the last line of defence.
+#
+# The prefix is NOT a loophole for new core scripts. Anything inside the
+# ``src/`` tree or shipped via the core manifest continues to require a
+# registered entry. The docs (``docs/personal-scripts-guide.md``) explain
+# the split to any NEXO session helping an operator author a new script.
+PERSONAL_CALLER_PREFIX = "personal/"
+
+
 class UnregisteredCallerError(ValueError):
     """Raised when a caller string is not in the resonance registry.
 
@@ -271,22 +286,55 @@ def _load_user_default_resonance() -> str:
     return ""
 
 
-def resolve_tier_for_caller(caller: str, user_default: str | None = None) -> str:
-    """Return the resonance tier that should apply to ``caller``.
+def _normalise_tier(candidate: str | None) -> str:
+    """Coerce a tier string to canonical lowercase; empty when invalid."""
+    if not candidate:
+        return ""
+    value = str(candidate).strip().lower()
+    return value if value in TIERS else ""
 
-    - User-facing callers resolve to ``user_default`` (or ``DEFAULT_RESONANCE``
-      if the user has no preference recorded).
-    - System-owned callers resolve to their fixed tier.
-    - Unknown callers raise ``UnregisteredCallerError``.
 
-    When ``user_default`` is not passed, the function looks it up from the
-    calibration.json preferences first and schedule.json second.
+def resolve_tier_for_caller(
+    caller: str,
+    user_default: str | None = None,
+    *,
+    explicit_tier: str | None = None,
+) -> str:
+    """Return the resonance tier that should apply to ``caller``.
+
+    Resolution order:
+
+    1. ``caller`` is empty → raise ``UnregisteredCallerError`` (same as v6.0.0).
+    2. ``caller`` starts with ``PERSONAL_CALLER_PREFIX``:
+         a. ``explicit_tier`` if valid — semantic override from the script.
+         b. ``user_default`` if valid — operator's configured default.
+         c. Stored ``preferences.default_resonance`` via the loader.
+         d. ``DEFAULT_RESONANCE`` as the final fallback.
+       The registry is NEVER consulted for personal callers: scripts outside
+       the repo cannot register, and forcing them to pin a tier there would
+       defeat the whole purpose of the ``personal/`` contract.
+    3. User-facing callers: user default → DEFAULT (unchanged).
+    4. System-owned callers: fixed tier (unchanged).
+    5. Anything else: ``UnregisteredCallerError`` (unchanged).
     """
     if not caller:
         raise UnregisteredCallerError(
             "caller= is required. Every automation subprocess must be registered "
             "in src/resonance_map.py so its reasoning budget is deliberate."
         )
+
+    if caller.startswith(PERSONAL_CALLER_PREFIX):
+        explicit = _normalise_tier(explicit_tier)
+        if explicit:
+            return explicit
+        from_user = _normalise_tier(user_default)
+        if from_user:
+            return from_user
+        from_prefs = _normalise_tier(_load_user_default_resonance())
+        if from_prefs:
+            return from_prefs
+        return DEFAULT_RESONANCE
+
     if caller in USER_FACING_CALLERS:
         resolved_default = user_default
         if resolved_default is None:
@@ -308,6 +356,8 @@ def resolve_model_and_effort(
     caller: str,
     backend: str,
     user_default: str | None = None,
+    *,
+    explicit_tier: str | None = None,
 ) -> Tuple[str, str]:
     """Return ``(model, reasoning_effort)`` for ``caller`` on ``backend``.
 
@@ -316,7 +366,9 @@ def resolve_model_and_effort(
     empty pair; the caller is expected to handle that by raising or by
     passing its own explicit model/effort arguments.
     """
-    tier = resolve_tier_for_caller(caller, user_default=user_default)
+    tier = resolve_tier_for_caller(
+        caller, user_default=user_default, explicit_tier=explicit_tier
+    )
     backend_entry = _RESONANCE_TABLE.get(tier, {}).get(backend)
     if backend_entry is None:
         return "", ""

package/src/scripts/nexo-agent-run.py

@@ -33,6 +33,20 @@ def main(argv: list[str] | None = None) -> int:
     parser.add_argument("--task-profile", default="", help="Automation task profile: default|fast|balanced|deep")
     parser.add_argument("--model", default="", help="Backend model hint")
     parser.add_argument("--reasoning-effort", default="", help="Backend reasoning effort/profile")
+    parser.add_argument(
+        "--tier",
+        default="",
+        help="Resonance tier — 'maximo'/'alto'/'medio'/'bajo'. "
+             "v6.0.2+ — used by personal/* callers to override the "
+             "resonance without editing src/resonance_map.py.",
+    )
+    parser.add_argument(
+        "--caller",
+        default="",
+        help="Registered caller id (e.g. nexo_chat) or 'personal/<id>' for "
+             "user-owned scripts. Required in practice; empty falls back "
+             "to 'agent_run/generic' for backward compatibility.",
+    )
     parser.add_argument("--timeout", type=int, default=AUTOMATION_SUBPROCESS_TIMEOUT, help="Timeout in seconds")
     parser.add_argument("--output-format", default="text", help="Requested output format")
     parser.add_argument("--allowed-tools", default="", help="Claude-style allowed tools contract")
@@ -52,11 +66,12 @@ def main(argv: list[str] | None = None) -> int:
     try:
         result = run_automation_prompt(
             prompt,
-            caller=getattr(args, "caller", "") or "agent_run/generic",
+            caller=args.caller or "agent_run/generic",
             cwd=args.cwd or None,
             task_profile=args.task_profile,
             model=args.model,
             reasoning_effort=args.reasoning_effort,
+            tier=args.tier,
             timeout=args.timeout,
             output_format=args.output_format,
             append_system_prompt=append_system_prompt,

package/src/tools_sessions.py

@@ -465,8 +465,15 @@ def handle_heartbeat(sid: str, task: str, context_hint: str = '') -> str:
 
 def _handle_heartbeat_inner(sid: str, task: str, context_hint: str = '') -> str:
     """Inner body of handle_heartbeat — wrapped by tool_span above."""
-    from db import get_db
+    from db import get_db, update_last_heartbeat_ts
     update_session(sid, task)
+    # v6.0.1 — stamp last_heartbeat_ts so the PostToolUse hook can
+    # decide whether to surface a pending-inbox reminder on autopilot
+    # sessions. Best-effort: never break the heartbeat on failure.
+    try:
+        update_last_heartbeat_ts(sid)
+    except Exception:
+        pass
 
     # Temporal anchor — surface authoritative UTC time so clients never drift
     # on date/day-of-week across long sessions. Neutral ISO-8601, no locale,

package/templates/nexo_helper.py

@@ -206,18 +206,29 @@ def run_automation_text(
     allowed_tools: str = DEFAULT_ALLOWED_TOOLS,
     append_system_prompt: str = "",
     include_bootstrap: bool = True,
+    caller: str = "",
+    tier: str = "",
 ) -> str:
     """Run the configured NEXO automation backend and return text output.
 
     This avoids hardcoding provider CLIs such as `claude -p` inside personal
     scripts. The runtime routes the call through the selected backend and its
     configured model profile.
+
+    Personal scripts (those living in ``~/.nexo/scripts/``) should pass
+    ``caller="personal/<descriptive-id>"`` and optionally ``tier="alto"``
+    (or another canonical tier) to pick their resonance without editing the
+    NEXO Brain repo. See ``docs/personal-scripts-guide.md`` for the rules.
     """
     runner = NEXO_HOME / "scripts" / "nexo-agent-run.py"
     if not runner.exists():
         raise RuntimeError(f"Automation runner not found: {runner}")
 
     cmd = [sys.executable, str(runner), "--prompt", prompt, "--output-format", "text"]
+    if caller:
+        cmd.extend(["--caller", caller])
+    if tier:
+        cmd.extend(["--tier", tier])
     if model:
         cmd.extend(["--model", model])
     if reasoning_effort:
@@ -261,13 +272,25 @@ def run_automation_json(
     allowed_tools: str = DEFAULT_ALLOWED_TOOLS,
     append_system_prompt: str = "",
     include_bootstrap: bool = True,
+    caller: str = "",
+    tier: str = "",
 ) -> dict:
-    """Run the configured backend and return a parsed JSON object."""
+    """Run the configured backend and return a parsed JSON object.
+
+    v6.0.2 adds ``caller`` and ``tier`` kwargs so personal scripts
+    (``~/.nexo/scripts/``) can identify themselves and pick a resonance
+    without registering in the core repo. See
+    ``docs/personal-scripts-guide.md``.
+    """
     runner = NEXO_HOME / "scripts" / "nexo-agent-run.py"
     if not runner.exists():
         raise RuntimeError(f"Automation runner not found: {runner}")
 
     cmd = [sys.executable, str(runner), "--prompt", prompt, "--output-format", "json"]
+    if caller:
+        cmd.extend(["--caller", caller])
+    if tier:
+        cmd.extend(["--tier", tier])
     if model:
         cmd.extend(["--model", model])
     if reasoning_effort: