nexo-brain 6.0.5 → 6.0.6

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "nexo-brain",
-  "version": "6.0.5",
+  "version": "6.0.6",
   "description": "Local cognitive runtime for Claude Code \u2014 persistent memory, overnight learning, doctor diagnostics, personal scripts, recovery-aware jobs, startup preflight, and optional dashboard/power helper.",
   "author": {
     "name": "NEXO Brain",

package/README.md

@@ -18,7 +18,7 @@
 
 [Watch the overview video](https://nexo-brain.com/watch/) · [Watch on YouTube](https://www.youtube.com/watch?v=i2lkGhKyVqI) · [Open the infographic](https://nexo-brain.com/assets/nexo-brain-infographic-v5.png)
 
-Version `6.0.5` is the current packaged-runtime line: the strict pre-tool guardrail no longer blocks `Edit`/`Write` with *"unknown target"* when Claude Code's `PreToolUse` payload omits `session_id`. `process_pre_tool_event` now falls back to `$NEXO_HOME/coordination/.claude-session-id` (written by the SessionStart hook) before giving up, so a user who already called `nexo_startup` + `nexo_task_open` + `nexo_guard_check` + `nexo_track` stops seeing the block storm that several Claude Code versions triggered in 6.0.2–6.0.4. Fail-closed semantics are preserved: if neither the payload nor the coordination file yields a session id the guardrail still blocks with `missing_startup`. Release also lands a new `.github/workflows/tests.yml` that runs the full `pytest` suite on every PR — the hook-guardrail regressions that shipped unnoticed in 6.0.2+ would have been caught by CI had this job existed then.
+Version `6.0.6` is the current packaged-runtime line: the installer no longer leaks `export PATH="$NEXO_HOME/bin:$PATH"` into the developer's real shell profile (`~/.bash_profile`, `~/.bashrc`, `~/.zshrc`) when `NEXO_HOME` points somewhere other than the canonical `$HOME/.nexo` — the classic case being any pytest run with `NEXO_HOME=/tmp/pytest-xxx`. Both the Python path (`src/auto_update.py::_ensure_runtime_cli_in_shell`) and the two JavaScript twins in `bin/nexo-brain.js` (install Step 8 and the migration path that restores the operator alias) now consult `_should_skip_shell_profile_backfill()` / `shouldSkipShellProfileBackfill()` and skip the write whenever `NEXO_HOME` is non-canonical, with `NEXO_SKIP_SHELL_PROFILE=1` as an explicit escape hatch. Fresh installs at `$HOME/.nexo` are unaffected. Release also carries v6.0.5's strict-hook `unknown target` fix and the pytest CI gate that caught this regression in the first place.
 
 Previously in `6.0.2`: adds the reserved caller prefix `personal/*` so scripts living in `~/.nexo/scripts/` can invoke the automation backend with their own caller id without editing `src/resonance_map.py`. New kwarg `tier` (`"maximo"` / `"alto"` / `"medio"` / `"bajo"`) on `run_automation_prompt`, `run_automation_interactive`, `nexo_helper.run_automation_text`, `nexo_helper.run_automation_json`, and `nexo-agent-run.py --tier`. Precedence for `personal/*` callers: explicit `tier=` → explicit `reasoning_effort=` → `calibration.preferences.default_resonance` → `DEFAULT_RESONANCE` (`alto`). Registered callers keep their behaviour unchanged. New guide: [`docs/personal-scripts-guide.md`](docs/personal-scripts-guide.md).
 

package/bin/nexo-brain.js

@@ -21,6 +21,27 @@ const path = require("path");
 const readline = require("readline");
 
 let NEXO_HOME = process.env.NEXO_HOME || path.join(require("os").homedir(), ".nexo");
+
+function shouldSkipShellProfileBackfill() {
+  // Mirror of _should_skip_shell_profile_backfill() in src/auto_update.py.
+  // Prevent the installer from leaking ``export PATH`` / operator alias lines
+  // into the developer's real shell profile whenever NEXO_HOME is not the
+  // canonical $HOME/.nexo path (pytest tmp dirs, CI sandboxes, containers).
+  const flag = String(process.env.NEXO_SKIP_SHELL_PROFILE || "").trim().toLowerCase();
+  if (["1", "true", "yes", "on"].includes(flag)) {
+    return { skip: true, reason: `NEXO_SKIP_SHELL_PROFILE=${flag}` };
+  }
+  const canonical = path.join(require("os").homedir(), ".nexo");
+  let actual = NEXO_HOME;
+  try {
+    actual = path.resolve(NEXO_HOME);
+  } catch {}
+  if (actual !== canonical) {
+    return { skip: true, reason: `NEXO_HOME=${actual} is not the canonical ${canonical}` };
+  }
+  return { skip: false, reason: "" };
+}
+
 const CLAUDE_SETTINGS = path.join(
   require("os").homedir(),
   ".claude",
@@ -1856,6 +1877,10 @@ async function main() {
         const migOperatorName = installed.operator_name || "NEXO";
         const migAliasName = migOperatorName.toLowerCase();
         if (migAliasName !== "nexo") {
+          const migSkip = shouldSkipShellProfileBackfill();
+          if (migSkip.skip) {
+            log(`  Skipping shell profile alias restore — ${migSkip.reason}`);
+          } else {
           const migAliasLine = `alias ${migAliasName}='nexo chat .'`;
           const migAliasComment = `# ${migOperatorName} — open the configured NEXO terminal client`;
           const migNexoPathLine = `export PATH="${path.join(NEXO_HOME, "bin")}:$PATH"`;
@@ -1884,6 +1909,7 @@ async function main() {
               log(`  Restored '${migAliasName}' alias in ${path.basename(rcFile)}`);
             }
           }
+          }
         }
 
         console.log("");
@@ -3390,6 +3416,12 @@ ${doScan ? `- Stack: ${Object.keys(profileData.code.languages || {}).slice(0, 5)
 
   // Step 8: Create shell alias and add runtime CLI to PATH
   const aliasName = operatorName.toLowerCase();
+  const installSkipShell = shouldSkipShellProfileBackfill();
+  if (installSkipShell.skip) {
+    log(`Skipping shell profile setup — ${installSkipShell.reason}`);
+    log(`(Runtime CLI wrapper still installed at ${path.join(NEXO_HOME, "bin", "nexo")}; add it to PATH manually if needed.)`);
+    console.log("");
+  } else {
   const nexoPathLine = `export PATH="${path.join(NEXO_HOME, "bin")}:$PATH"`;
   const nexoPathComment = "# NEXO runtime CLI";
 
@@ -3442,6 +3474,7 @@ ${doScan ? `- Stack: ${Object.keys(profileData.code.languages || {}).slice(0, 5)
     log(`After setup, open a new terminal and type: ${aliasName} or nexo`);
   }
   console.log("");
+  }
 
   // Step 9: Generate CLAUDE.md template
   log("Generating operator instructions...");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nexo-brain",
-  "version": "6.0.5",
+  "version": "6.0.6",
   "mcpName": "io.github.wazionapps/nexo",
   "description": "NEXO Brain \u2014 Shared brain for AI agents. Persistent memory, semantic RAG, natural forgetting, metacognitive guard, trust scoring, 150+ MCP tools. Works with Claude Code, Codex, Claude Desktop & any MCP client. 100% local, free.",
   "homepage": "https://nexo-brain.com",

package/src/auto_update.py

@@ -383,7 +383,38 @@ def _shell_rc_files() -> list[Path]:
     return [home_dir / ".bash_profile", home_dir / ".bashrc"]
 
 
+def _should_skip_shell_profile_backfill() -> tuple[bool, str]:
+    """Decide whether to skip writing ``export PATH`` into the user's shell rc.
+
+    The backfill must only touch the real user shell profile when the runtime
+    is installed at the canonical ``$HOME/.nexo`` location. When ``NEXO_HOME``
+    points elsewhere (pytest ``tmp_path``, CI sandbox, containerised test
+    harness) writing to ``~/.bash_profile`` / ``~/.bashrc`` / ``~/.zshrc``
+    leaks a non-canonical ``export PATH`` line into the developer's real
+    shell, which is exactly the bug reported for v6.0.x. Users can force-skip
+    via ``NEXO_SKIP_SHELL_PROFILE=1``.
+    """
+    flag = os.environ.get("NEXO_SKIP_SHELL_PROFILE", "").strip().lower()
+    if flag in {"1", "true", "yes", "on"}:
+        return True, f"NEXO_SKIP_SHELL_PROFILE={flag}"
+    try:
+        canonical = managed_nexo_home()
+    except Exception:
+        canonical = Path.home() / ".nexo"
+    try:
+        same = NEXO_HOME.resolve(strict=False) == canonical.resolve(strict=False)
+    except Exception:
+        same = NEXO_HOME == canonical
+    if not same:
+        return True, f"NEXO_HOME={NEXO_HOME} is not the canonical {canonical}"
+    return False, ""
+
+
 def _ensure_runtime_cli_in_shell():
+    skip, reason = _should_skip_shell_profile_backfill()
+    if skip:
+        _log(f"Skipping shell profile backfill — {reason}")
+        return
     path_line = f'export PATH="{NEXO_HOME / "bin"}:$PATH"'
     comment = "# NEXO runtime CLI"
     for rc_file in _shell_rc_files():