NEXO 7.13.7 — authenticated official protocol cards

Published 2026-05-05. Patch release over v7.13.6 — adds the Brain-side authenticated client for official protocol cards while keeping the protocol corpus private on the backend.

Agents can now ask for the right protocol at runtime

Brain exposes three new authenticated tools: nexo_card_catalog, nexo_card_get, and nexo_card_match. Agent templates now instruct supported clients to call the matcher before non-trivial user-facing work when the tool is available.

The catalog is not shipped in Brain

The open-source package contains only the remote client, tool registration, and guidance. Official protocol content stays on the NEXO Desktop backend and is fetched only with a valid authenticated session. That keeps the runtime useful for Desktop coordination without publishing the private protocol corpus in npm or GitHub.

Validation

python3 -m py_compile src/plugins/cards.py
python3 -m json.tool tool-enforcement-map.json
pytest -q tests/test_cards_plugin.py tests/test_r11_plugin_inventory.py

10 passed

Full changelog entry → · src/plugins/cards.py · tests/test_cards_plugin.py