nexo-brain 7.13.5 → 7.13.6

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "nexo-brain",
-  "version": "7.13.5",
+  "version": "7.13.6",
   "description": "Local cognitive runtime for Claude Code \u2014 persistent memory, overnight learning, doctor diagnostics, personal scripts, recovery-aware jobs, startup preflight, and optional dashboard/power helper.",
   "author": {
     "name": "NEXO Brain",

package/README.md

@@ -18,7 +18,7 @@
 
 [Watch the overview video](https://nexo-brain.com/watch/) · [Watch on YouTube](https://www.youtube.com/watch?v=i2lkGhKyVqI) · [Open the infographic](https://nexo-brain.com/assets/nexo-brain-infographic-v5.png)
 
-Version `7.13.5` is the current packaged-runtime line. Corrective release — D.5 correction-learning enforcement is durable, doctor `--fix` explicitly repairs orphan personal schedule metadata, G5 now warns on protected `com.nexo.*.plist` unload/remove flows with the three-layer recovery path, and Codex now gets a managed `PreToolUse` guard for shell/exec_command calls plus `installation_live.codex_protocol_compliance` drift checks. Result: coordinated Desktop bundles can ship the fixed Brain without changing the Mac/Windows installation contract.
+Version `7.13.6` is the current packaged-runtime line. Patch release over v7.13.5 — Codex hook sync now renders the managed `PreToolUse` shell/exec_command guard with native Windows `cmd.exe` syntax while preserving the existing POSIX command on macOS/Linux. Result: coordinated Desktop bundles can ship the fixed Brain without changing the Mac/Windows installation contract.
 
 Previously in `7.13.3`: unified release — doctor now repairs orphan personal script metadata and ignores historical `versions/**` snapshots, `nexo update` prunes runtime snapshots older than two back, protocol compliance self-heals missing task-open/change-log/stale-session gaps, headless automation uses bounded timeouts, Guardian false positives are tightened, and Codex CLI config/default checks are release-gated. Result: coordinated Desktop bundles can ship the new Brain without changing the Mac/Windows installation contract.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nexo-brain",
-  "version": "7.13.5",
+  "version": "7.13.6",
   "mcpName": "io.github.wazionapps/nexo",
   "description": "NEXO Brain — Shared brain for AI agents. Persistent memory, semantic RAG, natural forgetting, metacognitive guard, trust scoring, 150+ MCP tools. Works with Claude Code, Codex, Claude Desktop & any MCP client. 100% local, free.",
   "homepage": "https://nexo-brain.com",

package/src/client_sync.py

@@ -917,23 +917,43 @@ def _resolve_hook_source_dir(runtime_root: Path) -> Path:
     return direct
 
 
-def _render_hook_command(spec: dict, *, nexo_home: Path, runtime_root: Path, hooks_dir: Path) -> str:
+def _cmd_env_assignment(name: str, value: str | os.PathLike[str]) -> str:
+    # `set "VAR=value"` is the safe cmd.exe form; it preserves spaces and
+    # avoids trailing quote pollution.
+    safe_value = str(value).replace('"', r'\"')
+    return f'set "{name}={safe_value}"'
+
+
+def _cmd_args(*args: str | os.PathLike[str]) -> str:
+    return subprocess.list2cmdline([str(arg) for arg in args])
+
+
+def _render_hook_command(
+    spec: dict,
+    *,
+    nexo_home: Path,
+    runtime_root: Path,
+    hooks_dir: Path,
+    windows_shell: bool | None = None,
+) -> str:
     command_template = spec.get("command_template")
     if callable(command_template):
         return command_template(nexo_home, runtime_root, hooks_dir)
     handler_name = (spec.get("handler") or spec.get("script") or "").strip()
     script_path = hooks_dir / handler_name
-    if spec.get("interpreter") == "python" or handler_name.endswith(".py"):
-        return (
-            f"NEXO_HOME={shlex.quote(str(nexo_home))} "
-            f"NEXO_CODE={shlex.quote(str(runtime_root))} "
-            f"{shlex.quote(_resolve_python(nexo_home))} {shlex.quote(str(script_path))}"
-        )
-    return (
-        f"NEXO_HOME={shlex.quote(str(nexo_home))} "
-        f"NEXO_CODE={shlex.quote(str(runtime_root))} "
-        f"bash {shlex.quote(str(script_path))}"
+    use_windows_shell = (os.name == "nt") if windows_shell is None else bool(windows_shell)
+    env_prefix = (
+        f"{_cmd_env_assignment('NEXO_HOME', nexo_home)} && {_cmd_env_assignment('NEXO_CODE', runtime_root)} && "
+        if use_windows_shell
+        else f"NEXO_HOME={shlex.quote(str(nexo_home))} NEXO_CODE={shlex.quote(str(runtime_root))} "
     )
+    if spec.get("interpreter") == "python" or handler_name.endswith(".py"):
+        if use_windows_shell:
+            return f"{env_prefix}{_cmd_args(_resolve_python(nexo_home), script_path)}"
+        return env_prefix + f"{shlex.quote(_resolve_python(nexo_home))} {shlex.quote(str(script_path))}"
+    if use_windows_shell:
+        return f"{env_prefix}{_cmd_args('bash', script_path)}"
+    return env_prefix + f"bash {shlex.quote(str(script_path))}"
 
 
 def _hook_identity(command: str) -> str: