nexo-brain 7.20.16 → 7.20.17

package/README.md

@@ -18,7 +18,9 @@
 
 [Watch the overview video](https://nexo-brain.com/watch/) · [Watch on YouTube](https://www.youtube.com/watch?v=i2lkGhKyVqI) · [Open the infographic](https://nexo-brain.com/assets/nexo-brain-infographic-v5.png)
 
-Version `7.20.16` is the current packaged-runtime line. Patch release over v7.20.15 — packaged updates now keep the `local_context` runtime shim importable and rollback code-tree snapshots safely when compatibility directories are symlinks.
+Version `7.20.17` is the current packaged-runtime line. Patch release over v7.20.16 — validated DB backups now tolerate tiny live-write growth from the Local Memory indexer while still rejecting real protected-table loss.
+
+Previously in `7.20.16`: patch release over v7.20.15 — packaged updates keep the `local_context` runtime shim importable and rollback code-tree snapshots safely when compatibility directories are symlinks.
 
 Previously in `7.20.15`: patch release over v7.20.14 — Brain update/recovery paths now fail closed when the DB guard is missing or stale, and backup validation rejects any replacement that loses Local Memory tables.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nexo-brain",
-  "version": "7.20.16",
+  "version": "7.20.17",
   "mcpName": "io.github.wazionapps/nexo",
   "description": "NEXO Brain — Shared brain for AI agents. Persistent memory, semantic RAG, natural forgetting, metacognitive guard, trust scoring, 150+ MCP tools. Works with Claude Code, Codex, Claude Desktop & any MCP client. 100% local, free.",
   "homepage": "https://nexo-brain.com",

package/src/db_guard.py

@@ -455,13 +455,28 @@ def validate_backup_matches_source(
         if s is not None and d is None:
             discrepancies.append(f"{table}: source={s} backup=missing")
             continue
-        if s is not None and d is not None and d < s:
+        if s is not None and d is not None and d < s and not _backup_drift_is_safe(s, d):
             discrepancies.append(f"{table}: source={s} backup={d}")
     if discrepancies:
         return False, "; ".join(discrepancies)
     return True, None
 
 
+def _backup_drift_is_safe(source_count: int, backup_count: int) -> bool:
+    """Allow tiny live-write drift while still rejecting real backup data loss.
+
+    `sqlite3.backup()` creates a consistent snapshot, but NEXO's background
+    memory service can add rows immediately after the snapshot. Comparing the
+    backup with the live DB after that growth must not abort an update. Small
+    tables stay exact because a 1-row loss there can be meaningful.
+    """
+    if backup_count <= 0 or source_count < 1000:
+        return False
+    drift = source_count - backup_count
+    allowed = max(25, int(source_count * 0.005))
+    return 0 < drift <= allowed
+
+
 def _quote_identifier(identifier: str) -> str:
     if identifier not in PROTECTED_TABLES:
         raise ValueError(f"refusing unsafe table identifier: {identifier!r}")