robrain 2.3.4 → 2.3.5

package/dist/commands/install.js

@@ -202,7 +202,7 @@ export async function installCommand(opts) {
         planningKey: provisioned.planningKey,
         embeddingProvider: embeddingProvider ?? 'openai',
         installedAt: new Date().toISOString(),
-        version: '2.3.4',
+        version: '2.3.5',
     });
     spinner.succeed('MCP servers configured');
     // ── Done ───────────────────────────────────────────────────
@@ -352,7 +352,7 @@ async function installSelfHosted(opts) {
         ...(perceptionKey ? { perceptionKey } : {}),
         embeddingProvider: provider,
         installedAt: new Date().toISOString(),
-        version: '2.3.4',
+        version: '2.3.5',
         selfHosted: true,
     });
     spinner.succeed('MCP servers configured for self-hosted mode');

package/dist/commands/up.test.js

@@ -2,9 +2,9 @@ import { describe, it } from 'node:test';
 import assert from 'node:assert/strict';
 import { ensureStackEnvContent, readEnvValue, renderStackCompose, DEFAULT_IMAGE_REPO } from './up.js';
 describe('renderStackCompose', () => {
-    const compose = renderStackCompose(`${DEFAULT_IMAGE_REPO}:2.3.4`);
+    const compose = renderStackCompose(`${DEFAULT_IMAGE_REPO}:2.3.5`);
     it('runs Perception from the published image with an env override hook', () => {
-        assert.match(compose, /image: \$\{PERCEPTION_IMAGE:-ghcr\.io\/adelinamart\/robrain-perception:2\.3\.4\}/);
+        assert.match(compose, /image: \$\{PERCEPTION_IMAGE:-ghcr\.io\/adelinamart\/robrain-perception:2\.3\.5\}/);
         assert.doesNotMatch(compose, /build:/);
     });
     it('mounts the stack-local schema and env file', () => {

package/dist/index.js

@@ -28,7 +28,7 @@ import { explainCommand } from './commands/explain.js';
 import { projectsListCommand, projectsMergeCommand } from './commands/projects.js';
 import { upCommand, downCommand, DEFAULT_IMAGE_REPO } from './commands/up.js';
 import { installHermesPlugin, resolveHermesHome } from './lib/hermes-plugin.js';
-const VERSION = '2.3.4';
+const VERSION = '2.3.5';
 program
     .name('robrain')
     .description('Institutional memory for AI coding agents — by Rory Plans')

package/dist/lib/mcp-bundle.test.js

@@ -53,11 +53,11 @@ describe('materializeSensingBundle', () => {
     it('re-copies when the package version changed', () => {
         writeFakePackage(pkgDir, '2.2.0', 'old');
         assert.equal(materializeSensingBundle(pkgDir, mcpDir), true);
-        writeFakePackage(pkgDir, '2.3.4', 'new');
+        writeFakePackage(pkgDir, '2.3.5', 'new');
         assert.equal(materializeSensingBundle(pkgDir, mcpDir), true);
         assert.equal(readFileSync(join(mcpDir, 'sensing', 'dist', 'index.js'), 'utf8'), 'new');
         const marker = JSON.parse(readFileSync(join(mcpDir, 'sensing', 'package.json'), 'utf8'));
-        assert.equal(marker.version, '2.3.4');
+        assert.equal(marker.version, '2.3.5');
     });
     it('replaces a symlinked destination from a previous --repo-root install', () => {
         // Old dev install: ~/.robrain/mcp/sensing -> clone/packages/sensing-mcp

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "robrain",
-  "version": "2.3.4",
+  "version": "2.3.5",
   "type": "module",
   "description": "RoBrain CLI for installation, setup, and memory workflows",
   "author": "Rory Plans, Inc.",

package/vendor/hermes-plugin/robrain/__init__.py

@@ -415,8 +415,20 @@ class RoBrainProvider(MemoryProvider):
     def save_config(self, values: Dict[str, Any], hermes_home: str) -> None:
         path = self._config_path(hermes_home)
         path.parent.mkdir(parents=True, exist_ok=True)
+        # Defensive: an interactive-setup mispaste can land the API key in a
+        # text field. A base_url that isn't a URL would fail silently later
+        # (fail-open hides it), so fall back to the default instead — and
+        # never persist something that looks like a pasted secret.
+        base_url = str(values.get("base_url") or "").strip()
+        if not base_url.startswith(("http://", "https://")):
+            if base_url:
+                logger.warning(
+                    "robrain: ignoring non-URL base_url from setup (%r…) — using default",
+                    base_url[:8],
+                )
+            base_url = "http://localhost:3001"
         config = {
-            "base_url": values.get("base_url") or "http://localhost:3001",
+            "base_url": base_url,
             "project_id": values.get("project_id") or "default",
             "scope": values.get("scope") or "team",
         }

package/vendor/sensing-mcp/dist/index.js

@@ -23037,7 +23037,7 @@ function resolveSessionId(raw) {
 function buildServer() {
   const server = new McpServer({
     name: "sensing-mcp",
-    version: "2.3.4"
+    version: "2.3.5"
   });
   server.tool(
     "sensing_start_session",

package/vendor/sensing-mcp/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@robrain/sensing-mcp",
-  "version": "2.3.4",
+  "version": "2.3.5",
   "private": true,
   "type": "module",
   "main": "./dist/index.js"