nexo-brain 7.17.7 → 7.17.8

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "nexo-brain",
-  "version": "7.17.7",
+  "version": "7.17.8",
   "description": "Local cognitive runtime for Claude Code \u2014 persistent memory, overnight learning, doctor diagnostics, personal scripts, recovery-aware jobs, startup preflight, and optional dashboard/power helper.",
   "author": {
     "name": "NEXO Brain",

package/README.md

@@ -18,7 +18,9 @@
 
 [Watch the overview video](https://nexo-brain.com/watch/) · [Watch on YouTube](https://www.youtube.com/watch?v=i2lkGhKyVqI) · [Open the infographic](https://nexo-brain.com/assets/nexo-brain-infographic-v5.png)
 
-Version `7.17.7` is the current packaged-runtime line. Patch release over v7.17.6 - macOS TCC privacy denials now become a guided Full Disk Access permission state instead of an unexplained cron failure, with Desktop-ready status written for user action.
+Version `7.17.8` is the current packaged-runtime line. Patch release over v7.17.7 - standalone `nexo chat` now surfaces macOS Full Disk Access guidance, and Brain clears stale permission state after a live access probe succeeds.
+
+Previously in `7.17.7`: patch release over v7.17.6 - macOS TCC privacy denials now become a guided Full Disk Access permission state instead of an unexplained cron failure, with Desktop-ready status written for user action.
 
 Previously in `7.17.6`: patch release over v7.17.5 - cron health diagnostics are clearer for macOS TCC approval, and catch-up fallback executions now stay visible in `cron_runs` even on legacy or partially migrated runtimes.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nexo-brain",
-  "version": "7.17.7",
+  "version": "7.17.8",
   "mcpName": "io.github.wazionapps/nexo",
   "description": "NEXO Brain — Shared brain for AI agents. Persistent memory, semantic RAG, natural forgetting, metacognitive guard, trust scoring, 150+ MCP tools. Works with Claude Code, Codex, Claude Desktop & any MCP client. 100% local, free.",
   "homepage": "https://nexo-brain.com",

package/src/cli.py

@@ -2187,6 +2187,29 @@ def _prompt_for_terminal_client(
         print("Invalid choice. Try again.", file=sys.stderr)
 
 
+def _ensure_chat_full_disk_access_notice(*, interactive: bool | None = None) -> dict:
+    runtime_power = _load_runtime_power_support()
+    if interactive is None:
+        interactive = bool(getattr(sys.stdin, "isatty", lambda: False)())
+    try:
+        choice = runtime_power["ensure_full_disk_access_choice"](
+            interactive=interactive,
+            reason="chat",
+            output_fn=lambda message: print(message, file=sys.stderr),
+        )
+    except EOFError:
+        return {
+            "status": "later",
+            "prompted": False,
+            "reasons": [],
+            "message": "Full Disk Access setup skipped because stdin closed.",
+        }
+    message = str(choice.get("message") or "").strip()
+    if message and (choice.get("prompted") or choice.get("relevant")):
+        print(f"[NEXO] Full Disk Access: {message}", file=sys.stderr)
+    return choice
+
+
 def _chat(args):
     target = args.path or "."
     selected_client = getattr(args, "client", None)
@@ -2211,6 +2234,11 @@ def _chat(args):
     except Exception:
         pass
 
+    try:
+        _ensure_chat_full_disk_access_notice()
+    except Exception as exc:
+        print(f"[NEXO] Full Disk Access check warning: {exc}", file=sys.stderr)
+
     try:
         from client_preferences import (
             detect_installed_clients,

package/src/runtime_power.py

@@ -49,6 +49,7 @@ FULL_DISK_ACCESS_UNSET = "unset"
 FULL_DISK_ACCESS_GRANTED = "granted"
 FULL_DISK_ACCESS_DECLINED = "declined"
 FULL_DISK_ACCESS_LATER = "later"
+FULL_DISK_ACCESS_STATE_FILE = NEXO_HOME / "runtime" / "state" / "full-disk-access-required.json"
 VALID_FULL_DISK_ACCESS_STATUSES = {
     FULL_DISK_ACCESS_UNSET,
     FULL_DISK_ACCESS_GRANTED,
@@ -794,14 +795,25 @@ def set_power_policy(policy: str) -> dict:
 
 def set_full_disk_access_status(status: str, *, reasons: list[str] | None = None) -> dict:
     schedule = load_schedule_config()
-    schedule[FULL_DISK_ACCESS_STATUS_KEY] = normalize_full_disk_access_status(status)
+    normalized = normalize_full_disk_access_status(status)
+    schedule[FULL_DISK_ACCESS_STATUS_KEY] = normalized
     schedule[FULL_DISK_ACCESS_STATUS_VERSION_KEY] = FULL_DISK_ACCESS_STATUS_VERSION
+    if normalized == FULL_DISK_ACCESS_GRANTED:
+        reasons = []
+        clear_full_disk_access_required_state()
     if reasons is not None:
         schedule[FULL_DISK_ACCESS_REASONS_KEY] = normalize_full_disk_access_reasons(reasons)
     save_schedule_config(schedule)
     return schedule
 
 
+def clear_full_disk_access_required_state() -> None:
+    try:
+        FULL_DISK_ACCESS_STATE_FILE.unlink(missing_ok=True)
+    except Exception:
+        pass
+
+
 def prompt_for_power_policy(
     *,
     reason: str = "install",
@@ -938,6 +950,9 @@ def ensure_full_disk_access_choice(
         )
 
     schedule[FULL_DISK_ACCESS_STATUS_KEY] = status
+    if status == FULL_DISK_ACCESS_GRANTED:
+        schedule[FULL_DISK_ACCESS_REASONS_KEY] = []
+        clear_full_disk_access_required_state()
     save_schedule_config(schedule)
     return {
         "status": status,