nexo-brain 7.20.16 → 7.20.18

package/README.md

@@ -18,7 +18,11 @@
 
 [Watch the overview video](https://nexo-brain.com/watch/) · [Watch on YouTube](https://www.youtube.com/watch?v=i2lkGhKyVqI) · [Open the infographic](https://nexo-brain.com/assets/nexo-brain-infographic-v5.png)
 
-Version `7.20.16` is the current packaged-runtime line. Patch release over v7.20.15 — packaged updates now keep the `local_context` runtime shim importable and rollback code-tree snapshots safely when compatibility directories are symlinks.
+Version `7.20.18` is the current packaged-runtime line. Patch release over v7.20.17 — Desktop-managed setup now preserves a completed onboarding flag when Brain is later invoked with the non-interactive `--skip` bootstrap path.
+
+Previously in `7.20.17`: patch release over v7.20.16 — validated DB backups now tolerate tiny live-write growth from the Local Memory indexer while still rejecting real protected-table loss.
+
+Previously in `7.20.16`: patch release over v7.20.15 — packaged updates keep the `local_context` runtime shim importable and rollback code-tree snapshots safely when compatibility directories are symlinks.
 
 Previously in `7.20.15`: patch release over v7.20.14 — Brain update/recovery paths now fail closed when the DB guard is missing or stale, and backup validation rejects any replacement that loses Local Memory tables.
 

package/bin/nexo-brain.js

@@ -3551,6 +3551,13 @@ async function runSetup() {
     },
   };
 
+  const existingCalibrationRecord = readRuntimeCalibration(NEXO_HOME);
+  const existingCalibrationPayload = existingCalibrationRecord.payload || {};
+  const existingCalibrationMeta = existingCalibrationPayload.meta && typeof existingCalibrationPayload.meta === "object"
+    ? existingCalibrationPayload.meta
+    : {};
+  const preserveExistingOnboardingCompletion = useDefaults && isOnboardingComplete(existingCalibrationPayload);
+  const onboardingCompletedAt = new Date().toISOString();
   const existingIdentity = resolveExistingIdentityDefaults(NEXO_HOME);
 
   // Detect language from input or use default
@@ -3695,8 +3702,10 @@ async function runSetup() {
       // lives in the renderer. Marking it complete here used to short-
       // circuit that wizard and leave new users staring at an empty chat
       // (Inma 2026-05-03 smoke install).
-      onboarding_completed: !useDefaults,
-      onboarding_completed_at: !useDefaults ? new Date().toISOString() : null,
+      onboarding_completed: preserveExistingOnboardingCompletion ? true : !useDefaults,
+      onboarding_completed_at: preserveExistingOnboardingCompletion
+        ? (existingCalibrationMeta.onboarding_completed_at || onboardingCompletedAt)
+        : (!useDefaults ? onboardingCompletedAt : null),
     },
     auto_install: "ask", // updated later if user answers P11
     calibrated_at: new Date().toISOString(),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nexo-brain",
-  "version": "7.20.16",
+  "version": "7.20.18",
   "mcpName": "io.github.wazionapps/nexo",
   "description": "NEXO Brain — Shared brain for AI agents. Persistent memory, semantic RAG, natural forgetting, metacognitive guard, trust scoring, 150+ MCP tools. Works with Claude Code, Codex, Claude Desktop & any MCP client. 100% local, free.",
   "homepage": "https://nexo-brain.com",

package/src/db_guard.py

@@ -455,13 +455,28 @@ def validate_backup_matches_source(
         if s is not None and d is None:
             discrepancies.append(f"{table}: source={s} backup=missing")
             continue
-        if s is not None and d is not None and d < s:
+        if s is not None and d is not None and d < s and not _backup_drift_is_safe(s, d):
             discrepancies.append(f"{table}: source={s} backup={d}")
     if discrepancies:
         return False, "; ".join(discrepancies)
     return True, None
 
 
+def _backup_drift_is_safe(source_count: int, backup_count: int) -> bool:
+    """Allow tiny live-write drift while still rejecting real backup data loss.
+
+    `sqlite3.backup()` creates a consistent snapshot, but NEXO's background
+    memory service can add rows immediately after the snapshot. Comparing the
+    backup with the live DB after that growth must not abort an update. Small
+    tables stay exact because a 1-row loss there can be meaningful.
+    """
+    if backup_count <= 0 or source_count < 1000:
+        return False
+    drift = source_count - backup_count
+    allowed = max(25, int(source_count * 0.005))
+    return 0 < drift <= allowed
+
+
 def _quote_identifier(identifier: str) -> str:
     if identifier not in PROTECTED_TABLES:
         raise ValueError(f"refusing unsafe table identifier: {identifier!r}")