nexo-brain 7.9.15 → 7.9.18

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "nexo-brain",
-  "version": "7.9.13",
+  "version": "7.9.18",
   "description": "Local cognitive runtime for Claude Code \u2014 persistent memory, overnight learning, doctor diagnostics, personal scripts, recovery-aware jobs, startup preflight, and optional dashboard/power helper.",
   "author": {
     "name": "NEXO Brain",

package/README.md

@@ -18,7 +18,9 @@
 
 [Watch the overview video](https://nexo-brain.com/watch/) · [Watch on YouTube](https://www.youtube.com/watch?v=i2lkGhKyVqI) · [Open the infographic](https://nexo-brain.com/assets/nexo-brain-infographic-v5.png)
 
-Version `7.9.14` is the current packaged-runtime line. Patch release over `7.9.13`: `task_close(done)` now hard-blocks missing verify/change-log/cortex evidence instead of silently degrading to debt-only closes, self-audit auto-drains stale `protocol_debt` every day, and Codex session parity now flags partial bootstrap/startup/heartbeat drift instead of passing as healthy when only one recent session behaved correctly. Coordinated Desktop release remains v0.28.14.
+Version `7.9.18` is the current packaged-runtime line. Patch release over `7.9.17`: packaged client-sync imports now work when `NEXO_HOME` is unset, so `nexo clients sync`, `nexo update`, and runtime doctor bootstrap checks no longer hit the `_user_home` import-order crash. It includes the v7.9.17 Bandit gate fix and the v7.9.16 restart-marker deadlock fix.
+
+Previously in `7.9.17`: continuity snapshot idempotency marks its SHA-1 digest as non-security usage, keeping the high-severity Bandit gate green while preserving stable idempotency keys.
 
 Previously in `7.9.5`: patch release that fixes canonical diary confirmation for Desktop: Brain resolves the Desktop/Claude session UUID through NEXO SID aliases before checking `session_diary`, so archive/delete/app-exit can confirm diaries written by `nexo_session_diary_write` under the active `nexo-...` SID. Verification: `pytest tests/test_lifecycle_events.py` (28 passing) plus coordinated Desktop v0.28.6 shutdown/archive/delete/app-exit checks.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nexo-brain",
-  "version": "7.9.15",
+  "version": "7.9.18",
   "mcpName": "io.github.wazionapps/nexo",
   "description": "NEXO Brain — Shared brain for AI agents. Persistent memory, semantic RAG, natural forgetting, metacognitive guard, trust scoring, 150+ MCP tools. Works with Claude Code, Codex, Claude Desktop & any MCP client. 100% local, free.",
   "homepage": "https://nexo-brain.com",

package/src/bootstrap_docs.py

@@ -19,6 +19,11 @@ from client_preferences import (
 )
 from runtime_home import resolve_nexo_home
 
+
+def _user_home() -> Path:
+    return Path(os.environ.get("HOME", str(Path.home()))).expanduser()
+
+
 def _resolve_templates_dir(module_file: str | os.PathLike[str]) -> Path:
     module_dir = Path(module_file).resolve().parent
     direct = module_dir / "templates"
@@ -66,10 +71,6 @@ BOOTSTRAP_SPECS = {
 }
 
 
-def _user_home() -> Path:
-    return Path(os.environ.get("HOME", str(Path.home()))).expanduser()
-
-
 def _default_nexo_home() -> Path:
     return resolve_nexo_home(os.environ.get("NEXO_HOME", str(_user_home() / ".nexo")))
 

package/src/db/_continuity.py

@@ -46,7 +46,7 @@ def build_snapshot_idempotency_key(
             normalized,
         ]
     )
-    return hashlib.sha1(seed.encode("utf-8")).hexdigest()
+    return hashlib.sha1(seed.encode("utf-8"), usedforsecurity=False).hexdigest()
 
 
 def write_continuity_snapshot(

package/src/db/_schema.py

@@ -911,6 +911,12 @@ def _m38_evolution_log_proposal_payload(conn):
 
 def _m55_cortex_critique_trace(conn):
     """Persist heuristic-vs-LLM critique traces for Cortex decisions."""
+    # Some legacy/minimal runtimes have schema_migrations backfilled through
+    # v48 without the optional Cortex table present. Repair the dependency
+    # before adding v55 columns so update never bricks those installs.
+    _m34_cortex_evaluations(conn)
+    _m35_cortex_evaluation_outcome_link(conn)
+    _m37_cortex_goal_profile_trace(conn)
     _migrate_add_column(conn, "cortex_evaluations", "heuristic_choice", "TEXT DEFAULT ''")
     _migrate_add_column(conn, "cortex_evaluations", "heuristic_reasoning", "TEXT DEFAULT ''")
     _migrate_add_column(conn, "cortex_evaluations", "critique_payload", "TEXT DEFAULT '{}'")

package/src/runtime_versioning.py

@@ -16,7 +16,13 @@ import paths
 CONTINUITY_API_LEVEL = 1
 MCP_STATUS_SCHEMA_VERSION = 1
 PROCESS_VERSION = ""
+RESTART_CLIENT_ACTIONS = {
+    "claude_desktop": "restart_client_required",
+    "claude_code": "restart_session_required",
+    "codex": "restart_session_required",
+}
 RESTART_ALLOWLIST = {
+    "nexo_startup",
     "nexo_status",
     "nexo_system_catalog",
     "nexo_tool_explain",
@@ -48,6 +54,61 @@ def _write_json_atomic(path: Path, payload: dict) -> None:
     tmp.replace(path)
 
 
+def _normalize_restart_client(value: str | None) -> str:
+    candidate = str(value or "").strip().lower().replace("-", "_").replace(" ", "_")
+    aliases = {
+        "claude": "claude_code",
+        "claudecode": "claude_code",
+        "claude_code": "claude_code",
+        "claude_desktop": "claude_desktop",
+        "claude_desktop_app": "claude_desktop",
+        "desktop": "claude_desktop",
+        "codex": "codex",
+    }
+    resolved = aliases.get(candidate, candidate)
+    if resolved in RESTART_CLIENT_ACTIONS:
+        return resolved
+    return ""
+
+
+def _enabled_flag(value) -> bool:
+    if isinstance(value, str):
+        return value.strip().lower() not in {"", "0", "false", "no", "off", "disabled", "none"}
+    return bool(value)
+
+
+def _restart_clients_from_preferences() -> dict[str, str]:
+    try:
+        from runtime_power import load_schedule_config
+
+        prefs = load_schedule_config()
+    except Exception:
+        prefs = {}
+
+    raw_clients = prefs.get("interactive_clients") if isinstance(prefs, dict) else {}
+    clients: dict[str, str] = {}
+    if isinstance(raw_clients, dict):
+        for raw_key, raw_enabled in raw_clients.items():
+            key = _normalize_restart_client(str(raw_key or ""))
+            if key and _enabled_flag(raw_enabled):
+                clients[key] = RESTART_CLIENT_ACTIONS[key]
+    return clients
+
+
+def _restart_clients_for_marker(*, client: str = "") -> dict[str, str]:
+    explicit_client = _normalize_restart_client(client or os.environ.get("NEXO_MCP_CLIENT", ""))
+    if explicit_client:
+        return {explicit_client: RESTART_CLIENT_ACTIONS[explicit_client]}
+
+    clients = _restart_clients_from_preferences()
+    if clients:
+        return clients
+
+    # Safe default for fresh/legacy installs: Claude Code is the primary
+    # terminal client, and avoiding absent clients prevents permanent markers.
+    return {"claude_code": RESTART_CLIENT_ACTIONS["claude_code"]}
+
+
 def core_container_dir() -> Path:
     return paths.home() / "core"
 
@@ -135,6 +196,7 @@ def write_restart_required_marker(
     from_version: str,
     to_version: str,
     reason: str = "brain_update",
+    client: str = "",
 ) -> dict:
     path = restart_required_marker_path()
     payload = {
@@ -144,11 +206,7 @@ def write_restart_required_marker(
         "to_version": str(to_version or "").strip(),
         "reason": str(reason or "brain_update"),
         "updated_at": time.strftime("%Y-%m-%dT%H:%M:%SZ", time.gmtime()),
-        "clients": {
-            "claude_desktop": "restart_client_required",
-            "claude_code": "restart_session_required",
-            "codex": "restart_session_required",
-        },
+        "clients": _restart_clients_for_marker(client=client),
     }
     _write_json_atomic(path, payload)
     payload["path"] = str(path)
@@ -206,6 +264,7 @@ def activate_versioned_runtime_snapshot(*, source_root: Path | None = None, vers
 
 
 def clear_restart_required_marker(*, client: str = "", installed_version: str = "", process_version: str = "") -> dict:
+    client = _normalize_restart_client(client)
     path = restart_required_marker_path()
     marker = read_restart_required_marker()
     if not marker.get("required"):
@@ -244,6 +303,7 @@ def clear_restart_required_marker(*, client: str = "", installed_version: str =
 
 
 def resolve_restart_required(*, client: str = "", installed_version: str = "", process_version: str = "") -> dict:
+    client = _normalize_restart_client(client)
     marker = read_restart_required_marker()
     installed = str(installed_version or installed_runtime_version() or "").strip()
     process = str(process_version or PROCESS_VERSION or installed).strip()
@@ -277,6 +337,7 @@ def resolve_restart_required(*, client: str = "", installed_version: str = "", p
 
 
 def build_mcp_status(*, client: str = "") -> dict:
+    client = _normalize_restart_client(client)
     state = resolve_restart_required(client=client)
     marker = state["marker"]
     return {
@@ -319,6 +380,28 @@ def prime_process_version() -> str:
 class RestartRequiredMiddleware(Middleware):
     client: str = ""
 
+    def __post_init__(self) -> None:
+        self.client = _normalize_restart_client(self.client)
+
+    def _ack_current_client_if_restarted(self, state: dict) -> dict:
+        if not self.client or not state.get("restart_required"):
+            return state
+        installed = str(state.get("installed_version") or "").strip()
+        process = str(state.get("process_version") or "").strip()
+        if not installed or not process or installed != process:
+            return state
+
+        clear_restart_required_marker(
+            client=self.client,
+            installed_version=installed,
+            process_version=process,
+        )
+        return resolve_restart_required(
+            client=self.client,
+            installed_version=installed,
+            process_version=process,
+        )
+
     async def _tool_result_for_restart_required(self, context, payload: dict) -> ToolResult:
         payload_text = json.dumps(payload, ensure_ascii=False)
         tool = None
@@ -344,6 +427,7 @@ class RestartRequiredMiddleware(Middleware):
     async def on_call_tool(self, context, call_next):
         tool_name = str(getattr(context.message, "name", "") or "").strip()
         state = resolve_restart_required(client=self.client)
+        state = self._ack_current_client_if_restarted(state)
         if not state["restart_required"] or tool_name in RESTART_ALLOWLIST:
             return await call_next(context)