fix: harden install scripts and align version across all configs

- Remove npx oh-my-logo from install.sh/install.ps1 (supply chain risk)
- Add Python 3.11+ version check before install
- Hard fail on dependency install failure instead of false ONLINE status
- Fix pyproject.toml dependency: fastmcp → mcp (correct package)
- Align Cargo.toml version with tauri.conf.json (0.1.0 → 0.3.2)
- Restrict ~/.jarvis-orb/ permissions to owner only (chmod 700)
- Set install.ps1 ErrorActionPreference to Stop
- Add CONTRIBUTING.md

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: TheStack-ai

CONTRIBUTING.md

@@ -0,0 +1,45 @@
+# Contributing to Jarvis Orb
+
+Thanks for your interest in contributing!
+
+## Getting Started
+
+```bash
+git clone https://github.com/whynowlab/jarvis-orb.git
+cd jarvis-orb
+```
+
+### Brain (Python)
+
+```bash
+cd brain
+uv venv .venv && source .venv/bin/activate
+uv pip install aiosqlite websockets mcp pytest pytest-asyncio
+python -m pytest tests/ -v
+```
+
+### Orb (Tauri + Three.js)
+
+```bash
+cd orb
+pnpm install
+pnpm tauri dev
+```
+
+## Pull Requests
+
+1. Fork the repo and create a feature branch
+2. Make your changes
+3. Run tests: `cd brain && python -m pytest tests/ -v`
+4. Submit a PR with a clear description
+
+## Reporting Bugs
+
+Open an issue at [GitHub Issues](https://github.com/whynowlab/jarvis-orb/issues) with:
+- Steps to reproduce
+- Expected vs actual behavior
+- OS and Python version
+
+## License
+
+By contributing, you agree that your contributions will be licensed under the MIT License.

brain/jarvis_brain/config.py

@@ -1,4 +1,5 @@
 """Jarvis Brain Lite — Configuration."""
+import os
 from pathlib import Path
 
 BRAIN_DIR = Path.home() / ".jarvis-orb"
@@ -9,3 +10,8 @@
 def ensure_dirs():
     """Create brain directory on demand (not on import)."""
     BRAIN_DIR.mkdir(parents=True, exist_ok=True)
+    # Restrict permissions to owner only
+    try:
+        os.chmod(BRAIN_DIR, 0o700)
+    except OSError:
+        pass

brain/pyproject.toml

@@ -5,7 +5,7 @@ description = "Lightweight AI memory brain with MCP server"
 requires-python = ">=3.11"
 dependencies = [
     "aiosqlite>=0.20.0",
-    "fastmcp>=0.1.0",
+    "mcp>=1.0.0",
     "websockets>=12.0,<15.0",
 ]
 

install.ps1

@@ -1,8 +1,8 @@
 # Jarvis Orb — Windows Installer (PowerShell)
 # Usage: irm https://raw.githubusercontent.com/whynowlab/jarvis-orb/main/install.ps1 | iex
 
-$ErrorActionPreference = "Continue"
-$Version = "0.3.1"
+$ErrorActionPreference = "Stop"
+$Version = "0.3.2"
 $Repo = "whynowlab/jarvis-orb"
 $BrainDir = "$env:USERPROFILE\.jarvis-orb"
 $BrainBin = "$BrainDir\bin"
@@ -28,48 +28,43 @@ function Write-Step($msg) {
 # ── Header ──
 Write-Host ""
 Write-Host ""
-# Generate logo with oh-my-logo if npx available
-$hasNpx = Get-Command npx -ErrorAction SilentlyContinue
-if ($hasNpx) {
-    npx -y oh-my-logo "JARVIS" --palette-colors "#4A9EBF,#8EE4FF,#6B4FA0" --filled --block-font block -d diagonal --color 2>$null
-    Write-Host "                                  " -NoNewline
-    Write-Host "◉ ORB" -ForegroundColor Cyan
-    Write-Host "                                  " -NoNewline
-    Write-Host "AI Brain + Visualizer · v$Version" -ForegroundColor DarkGray
-} else {
-    Write-Host "  J A R V I S" -NoNewline -ForegroundColor Cyan
-    Write-Host "  ◉ ORB" -ForegroundColor White
-    Write-Host "  AI Brain + Visualizer · v$Version" -ForegroundColor DarkGray
-}
+Write-Host "  J A R V I S" -NoNewline -ForegroundColor Cyan
+Write-Host "  ◉ ORB" -ForegroundColor White
+Write-Host "  AI Brain + Visualizer · v$Version" -ForegroundColor DarkGray
 Write-Host ""
 
 # ── Step 1: Environment ──
 Write-Step "Checking environment"
 Write-Info "Windows $([System.Environment]::OSVersion.Version)"
 
 $hasPython = Get-Command python -ErrorAction SilentlyContinue
-if ($hasPython) {
-    Write-Ok "Python found: $(python --version 2>&1)"
-} else {
-    Write-Warn "Python not found — Brain Lite requires Python 3.11+"
+if (-not $hasPython) {
+    Write-Host "  Python not found. Install Python 3.11+ first." -ForegroundColor Red
+    exit 1
+}
+
+$pyVersion = python -c "import sys; print(f'{sys.version_info.major}.{sys.version_info.minor}')" 2>&1
+$pyParts = $pyVersion -split '\.'
+if ([int]$pyParts[0] -lt 3 -or ([int]$pyParts[0] -eq 3 -and [int]$pyParts[1] -lt 11)) {
+    Write-Host "  Python 3.11+ required (found $pyVersion)." -ForegroundColor Red
+    exit 1
 }
+Write-Ok "Python $pyVersion"
 
 # ── Step 2: Brain Lite ──
 Write-Step "Installing Brain Lite"
 
 New-Item -ItemType Directory -Force -Path $BrainDir | Out-Null
 New-Item -ItemType Directory -Force -Path $BrainBin | Out-Null
 
-if ($hasPython) {
-    Write-Info "Installing dependencies..."
-    $pipOutput = python -m pip install --target "$BrainDir\lib" aiosqlite websockets mcp 2>&1
-    if ($LASTEXITCODE -eq 0) {
-        Write-Ok "Dependencies installed"
-    } else {
-        Write-Warn "Dependency install failed — check Python/pip"
-        Write-Info ($pipOutput | Out-String)
-    }
+Write-Info "Installing dependencies..."
+$pipOutput = python -m pip install --target "$BrainDir\lib" aiosqlite websockets mcp 2>&1
+if ($LASTEXITCODE -ne 0) {
+    Write-Host "  Dependency install failed. Check your Python/pip setup." -ForegroundColor Red
+    Write-Info ($pipOutput | Out-String)
+    exit 1
 }
+Write-Ok "Dependencies installed"
 
 # Download Brain source
 Write-Info "Downloading Brain Lite..."
@@ -165,15 +160,8 @@ try {
 # ── Done ──
 Write-Host ""
 Write-Host ""
-if ($hasNpx) {
-    npx -y oh-my-logo "JARVIS" --palette-colors "#8EE4FF,#B0F0FF,#8EE4FF" --filled --block-font block -d diagonal --color 2>$null
-    Write-Host "                                  " -NoNewline
-    Write-Host "◉ ORB" -NoNewline -ForegroundColor Green
-    Write-Host "  ONLINE" -ForegroundColor Green
-} else {
-    Write-Host "  J A R V I S" -NoNewline -ForegroundColor Green
-    Write-Host "  ◉ ORB  ONLINE" -ForegroundColor Green
-}
+Write-Host "  J A R V I S" -NoNewline -ForegroundColor Green
+Write-Host "  ◉ ORB" -ForegroundColor Green
 Write-Host ""
 Write-Host "  I N S T A L L E D" -ForegroundColor Green
 Write-Host ""

install.sh

@@ -16,35 +16,22 @@ WHITE='\033[97m'
 HOLO='\033[38;2;142;228;255m'
 
 REPO="whynowlab/jarvis-orb"
-VERSION="0.3.1"
+VERSION="0.3.2"
 BRAIN_DIR="$HOME/.jarvis-orb"
 BRAIN_BIN="$BRAIN_DIR/bin"
 
 # ── Logo ──
 show_logo() {
   echo ""
-  # Generate logo with oh-my-logo if available, else fallback
-  if command -v npx &>/dev/null; then
-    npx -y oh-my-logo "JARVIS" --palette-colors "#4A9EBF,#8EE4FF,#6B4FA0" --filled --block-font block -d diagonal --color 2>/dev/null
-    echo -e "                                  ${HOLO}◉ ORB${R}"
-    echo -e "                                  ${DIM}AI Brain + Visualizer · v${VERSION}${R}"
-  else
-    echo -e "  ${CYAN}${B}J A R V I S${R}  ${HOLO}◉ ORB${R}"
-    echo -e "  ${DIM}AI Brain + Visualizer · v${VERSION}${R}"
-  fi
+  echo -e "  ${CYAN}${B}J A R V I S${R}  ${HOLO}◉ ORB${R}"
+  echo -e "  ${DIM}AI Brain + Visualizer · v${VERSION}${R}"
   echo ""
 }
 
 show_logo_done() {
   echo ""
-  if command -v npx &>/dev/null; then
-    npx -y oh-my-logo "JARVIS" --palette-colors "#8EE4FF,#B0F0FF,#8EE4FF" --filled --block-font block -d diagonal --color 2>/dev/null
-    echo -e "                                  ${GREEN}${B}◉ ORB${R}"
-    echo -e "                                  ${GREEN}ONLINE${R} ${DIM}· v${VERSION}${R}"
-  else
-    echo -e "  ${GREEN}${B}J A R V I S${R}  ${GREEN}◉ ORB${R}"
-    echo -e "  ${GREEN}ONLINE${R} ${DIM}· v${VERSION}${R}"
-  fi
+  echo -e "  ${GREEN}${B}J A R V I S${R}  ${GREEN}◉ ORB${R}"
+  echo -e "  ${GREEN}INSTALLED${R} ${DIM}· v${VERSION}${R}"
   echo ""
 }
 
@@ -93,26 +80,44 @@ show_logo
 step "Checking environment"
 info "$OS $ARCH"
 
+# Python version check
+if ! command -v python3 &>/dev/null; then
+  echo -e "  ${RED}Python 3 not found. Install Python 3.11+ first.${R}"
+  exit 1
+fi
+
+PY_VERSION=$(python3 -c 'import sys; print(f"{sys.version_info.major}.{sys.version_info.minor}")' 2>/dev/null)
+PY_MAJOR=$(echo "$PY_VERSION" | cut -d. -f1)
+PY_MINOR=$(echo "$PY_VERSION" | cut -d. -f2)
+
+if [ "$PY_MAJOR" -lt 3 ] || ([ "$PY_MAJOR" -eq 3 ] && [ "$PY_MINOR" -lt 11 ]); then
+  echo -e "  ${RED}Python 3.11+ required (found $PY_VERSION).${R}"
+  exit 1
+fi
+ok "Python $PY_VERSION"
+
 if command -v uv &>/dev/null; then
   ok "uv found"
   PIP_CMD="uv pip install"
 elif command -v pip3 &>/dev/null; then
   ok "pip3 found"
   PIP_CMD="pip3 install"
 else
-  warn "No Python package manager"
-  PIP_CMD=""
+  echo -e "  ${RED}No Python package manager (pip3 or uv) found.${R}"
+  exit 1
 fi
 
 # ── Step 2: Brain Lite ──
 step "Installing Brain Lite"
 
 mkdir -p "$BRAIN_DIR" "$BRAIN_BIN"
+chmod 700 "$BRAIN_DIR"
 
-if [ -n "$PIP_CMD" ]; then
-  $PIP_CMD --target "$BRAIN_DIR/lib" aiosqlite websockets mcp >/dev/null 2>&1 && \
-    ok "Dependencies installed" || warn "Dependency install failed"
+if ! $PIP_CMD --target "$BRAIN_DIR/lib" aiosqlite websockets mcp >/dev/null 2>&1; then
+  echo -e "  ${RED}Dependency install failed. Check your Python/pip setup.${R}"
+  exit 1
 fi
+ok "Dependencies installed"
 
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]:-$0}")" && pwd)"
 if [ -d "$SCRIPT_DIR/brain/jarvis_brain" ]; then

orb/src-tauri/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "jarvis-orb"
-version = "0.1.0"
+version = "0.3.2"
 edition = "2021"
 
 [dependencies]

orb/src-tauri/tauri.conf.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://raw.githubusercontent.com/nicoptere/tauri/tauri-v2/tooling/cli/schema.json",
   "productName": "Jarvis Orb",
-  "version": "0.3.1",
+  "version": "0.3.2",
   "identifier": "com.jarvis.orb",
   "build": {
     "frontendDist": "../dist",