brainiac-cli 0.20.42__tar.gz → 0.20.44__tar.gz

{brainiac_cli-0.20.42/src/brainiac_cli.egg-info → brainiac_cli-0.20.44}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: brainiac-cli
-Version: 0.20.42
+Version: 0.20.44
 Summary: Brainiac — local any-LLM second-brain core engine + brain CLI (Markdown truth, derived SQLite index).
 License-Expression: Apache-2.0
 Project-URL: Homepage, https://github.com/Autopsias/brainiac
@@ -60,7 +60,7 @@ Requires-Dist: numpy>=1.24; extra == "eval"
 Provides-Extra: quant-tools
 Requires-Dist: onnx>=1.14; extra == "quant-tools"
 Provides-Extra: mcp
-Requires-Dist: mcp<2,>=1.28.1; extra == "mcp"
+Requires-Dist: mcp<2,>=1.30.0; extra == "mcp"
 Provides-Extra: index
 Requires-Dist: regex>=2023.0.0; extra == "index"
 Dynamic: license-file

{brainiac_cli-0.20.42 → brainiac_cli-0.20.44}/pyproject.toml

@@ -8,7 +8,7 @@ build-backend = "setuptools.build_meta"
 # check. The IMPORT package stays `brain` and the console script stays
 # `brain` — only the distribution/project name changes.
 name = "brainiac-cli"
-version = "0.20.42"
+version = "0.20.44"
 description = "Brainiac — local any-LLM second-brain core engine + brain CLI (Markdown truth, derived SQLite index)."
 readme = "README.md"
 license = "Apache-2.0"
@@ -122,7 +122,10 @@ quant-tools = ["onnx>=1.14"]
 # release pipeline's release-asset handshake gate, after it had already shipped).
 # Upgrade path: port the adapter off FastMCP (mcp.server.lowlevel, or the
 # separate `fastmcp` package) and lift the cap — a real migration, not a bump.
-mcp = ["mcp>=1.28.1,<2"]
+# >=1.30.0: CVE-2026-59951 (Streamable HTTP stateful sessions never reclaimed,
+# unbounded memory) is fixed there. The FLOOR, not just the lock, for the same
+# reason as pypdf above: a plain `pip install` reads this, not requirements.lock.
+mcp = ["mcp>=1.30.0,<2"]
 # Timeout-bounded regex engine (mrab-regex) used by BrainIndex.grep's --regex
 # path (RET-04 hardening) as a ReDoS guard: regex.search(text, timeout=...)
 # genuinely bounds catastrophic backtracking, unlike stdlib `re`. Absent ->
@@ -277,3 +280,19 @@ pythonpath = ["src"]
 # artifact is ever distributed, re-run the code-origin audit gate first; only a
 # recorded Legal clearance for internal-only conveyance may reinstate a fork.
 # ---------------------------------------------------------------------------
+
+[tool.ty.environment]
+# The interpreter quality-ratchet.yml installs. tools/check_types.py passes
+# --python sys.prefix, so imports resolve from that same environment.
+python-version = "3.12"
+# CI runs on ubuntu-latest; pinned so a Mac records the same `sys.platform`
+# branches the runner judges.
+python-platform = "linux"
+
+[tool.ty.src]
+# Authored Python: the package, its tools, the eval harness and the release
+# scripts. `exclude` MIRRORS [tool.claude-quality].exclude above: a bare
+# directory name there matches at any depth, so it is spelled `**/<name>` here.
+# `_assets` is the generated mirror of tools/ + scripts/ inside src/brain/.
+include = ["src", "tools", "eval", "scripts", "packaging"]
+exclude = ["**/_plans", "**/_archive", "**/_evidence", "**/_assets"]

{brainiac_cli-0.20.42 → brainiac_cli-0.20.44}/src/brain/_version.py

@@ -9,4 +9,4 @@ pip-installed host, importlib.metadata stays primary; brain/__init__.py reads
 this file only as the fallback before 0.0.0+unknown.
 """
 
-__version__ = "0.20.42"
+__version__ = "0.20.44"

{brainiac_cli-0.20.42 → brainiac_cli-0.20.44}/src/brain/doctor_desktop.py

@@ -377,7 +377,11 @@ def check_mcp_server_code(config_path: Optional[Path] = None,
             continue
         at, version = installed
         when = datetime.datetime.fromtimestamp(at).strftime("%Y-%m-%d %H:%M")
-        starts = [start for _pid, start, cmd in procs if command in cmd]
+        # Desktop runs each server under its `disclaimer --pgroup --` helper,
+        # which carries the same command line: count the server, not the
+        # wrapper too (it read "16 processes" for 8 servers, 2026-10-11).
+        starts = [start for _pid, start, cmd in procs
+                  if command in cmd and "/Helpers/disclaimer " not in cmd]
         old = [s for s in starts if s < at]
         if not starts:
             rows.append(_row(surface, NOT_DETECTABLE,
@@ -385,13 +389,13 @@ def check_mcp_server_code(config_path: Optional[Path] = None,
                              raw={"action_needed": False}))
         elif old:
             rows.append(_row(surface, MANUAL_REQUIRED,
-                             f"{len(old)} of {len(starts)} running process(es) started before the "
+                             f"{len(old)} of {len(starts)} running server(s) started before the "
                              f"engine was installed ({version}, {when}) — they still serve the old code",
                              remediation="quit Claude Desktop completely (Cmd+Q) and reopen it",
                              raw={"action_needed": True, "version": version}))
         else:
             rows.append(_row(surface, CURRENT,
-                             f"{len(starts)} running process(es), all started after the engine "
+                             f"{len(starts)} running server(s), all started after the engine "
                              f"install ({version}, {when})", raw={"action_needed": False}))
     return rows
 

{brainiac_cli-0.20.42 → brainiac_cli-0.20.44}/src/brain/doctor_plugins.py

@@ -237,6 +237,44 @@ def check_plugin_manifests(repo_root: Path, ssot: str) -> list[dict]:
 # marketplace + installed_plugins.json are both local files, no network).
 # --------------------------------------------------------------------------
 
+def _plugin_copies(entries: list, folder_version: Optional[str] = None,
+                   ) -> tuple[list[dict], Optional[str], int]:
+    """Each installed copy of one plugin as (scope, project_path, version),
+    plus the last unreadable installPath and the count of orphaned copies.
+
+    An orphaned copy is a project-scope entry whose project no longer exists
+    (a deleted worktree): Claude Code never loads it, and `brain update`
+    crashed running `claude plugin update` from the missing directory
+    (v0.20.42 deploy, 2026-10-11). It is not a copy to judge or update.
+
+    ``folder_version`` is set when the marketplace is a local folder. Claude
+    Code then reads a project copy straight from that folder ("is read from
+    its folder: nothing to update") and never rewrites its registry record, so
+    the recorded cache path stays at an old version forever: judge the copy
+    by the folder it actually loads (false stale rows after 0.20.42)."""
+    copies, unreadable, orphaned = [], None, 0
+    for entry in entries:
+        if not isinstance(entry, dict):
+            unreadable = None
+            continue
+        project = entry.get("projectPath")
+        if entry.get("scope") in ("project", "local") and project and not Path(project).is_dir():
+            orphaned += 1
+            continue
+        if folder_version and entry.get("scope") in ("project", "local"):
+            copies.append({"scope": entry["scope"], "project_path": project,
+                           "version": folder_version})
+            continue
+        install_path = entry.get("installPath")
+        pjson = _read_json(Path(install_path) / ".claude-plugin" / "plugin.json") if install_path else None
+        if not (pjson and pjson.get("version")):
+            unreadable = install_path
+            continue
+        copies.append({"scope": entry.get("scope") or "user",
+                       "project_path": project, "version": pjson["version"]})
+    return copies, unreadable, orphaned
+
+
 def check_installed_cli_plugins(
     claude_home: Path, ssot: str, marketplace_name: str = "brainiac",
     marketplace_dir: Optional[Path] = None,
@@ -246,6 +284,8 @@ def check_installed_cli_plugins(
     # installLocation, NOT the hardcoded marketplaces/<name> dir — the caller
     # passes the resolved dir; keep the hardcoded guess only as the fallback.
     marketplace_dir = marketplace_dir or (claude_home / "plugins" / "marketplaces" / marketplace_name)
+    known = (_read_json(claude_home / "plugins" / "known_marketplaces.json") or {}).get(marketplace_name)
+    from_folder = ((known or {}).get("source") or {}).get("source") == "directory"
     for pname in PLUGIN_NAMES:
         surface = f"Installed CLI plugin ({pname})"
         mkt_json = marketplace_dir / "plugins" / pname / ".claude-plugin" / "plugin.json"
@@ -289,16 +329,13 @@ def check_installed_cli_plugins(
         # at its own version. Judge the oldest copy: reading only the first
         # entry reported a stale copy current (or the reverse) by list order.
         entries = plugin_entries if isinstance(plugin_entries, list) else [plugin_entries]
-        copies, unreadable = [], None
-        for entry in entries:
-            install_path = entry.get("installPath") if isinstance(entry, dict) else None
-            pjson = _read_json(Path(install_path) / ".claude-plugin" / "plugin.json") if install_path else None
-            if not (pjson and pjson.get("version")):
-                unreadable = install_path
-                continue
-            copies.append({"scope": entry.get("scope") or "user",
-                           "project_path": entry.get("projectPath"),
-                           "version": pjson["version"]})
+        copies, unreadable, orphaned = _plugin_copies(entries, mkt_version if from_folder else None)
+        if orphaned and not copies and unreadable is None:
+            rows.append(_row(surface, NOT_DETECTABLE,
+                             f"installed only for {orphaned} deleted project(s) "
+                             f"(marketplace has {mkt_version})",
+                             raw={"marketplace": mkt_version, "orphaned_copies": orphaned}))
+            continue
         if unreadable is not None or not copies:
             rows.append(_row(surface, UNKNOWN,
                              f"installed but version unreadable at {unreadable}"))
@@ -309,6 +346,8 @@ def check_installed_cli_plugins(
         pick = min if stale_copies else max
         installed_version = pick((c["version"] for c in copies), key=cmp_to_key(_compare))
         where = "" if len(copies) == 1 else f" ({len(stale_copies)} of {len(copies)} copies behind)"
+        if orphaned:
+            where += f" ({orphaned} copy(ies) for deleted projects ignored)"
         cmp_ = _compare(installed_version, mkt_version or "")
         if cmp_ == 0:
             rows.append(_row(surface, CURRENT, f"installed {installed_version} == marketplace {mkt_version}",

{brainiac_cli-0.20.42 → brainiac_cli-0.20.44/src/brainiac_cli.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: brainiac-cli
-Version: 0.20.42
+Version: 0.20.44
 Summary: Brainiac — local any-LLM second-brain core engine + brain CLI (Markdown truth, derived SQLite index).
 License-Expression: Apache-2.0
 Project-URL: Homepage, https://github.com/Autopsias/brainiac
@@ -60,7 +60,7 @@ Requires-Dist: numpy>=1.24; extra == "eval"
 Provides-Extra: quant-tools
 Requires-Dist: onnx>=1.14; extra == "quant-tools"
 Provides-Extra: mcp
-Requires-Dist: mcp<2,>=1.28.1; extra == "mcp"
+Requires-Dist: mcp<2,>=1.30.0; extra == "mcp"
 Provides-Extra: index
 Requires-Dist: regex>=2023.0.0; extra == "index"
 Dynamic: license-file

{brainiac_cli-0.20.42 → brainiac_cli-0.20.44}/src/brainiac_cli.egg-info/requires.txt

@@ -52,7 +52,7 @@ openpyxl>=3.1
 Pillow>=12.3.0
 
 [mcp]
-mcp<2,>=1.28.1
+mcp<2,>=1.30.0
 
 [ocr]
 pytesseract>=0.3.10