ruvnet-brain 4.3.21 → 4.3.25

package/scripts/doc-currency.mjs

@@ -966,5 +966,20 @@ export function main(argv = process.argv.slice(2)) {
   return 1;
 }
 
-const invokedDirectly = process.argv[1] && path.resolve(process.argv[1]) === path.resolve(fileURLToPath(import.meta.url));
+// Entry-point guard. Compares REALPATHS on both sides: path.resolve() normalizes a path but does
+// NOT follow symlinks, while import.meta.url IS symlink-resolved by Node. Through a symlink (npm bin
+// shims, wrapper scripts, and every os.tmpdir() path on macOS) the two sides disagree, so main()
+// never runs -- and because nothing throws, the process exits 0. A silent exit 0 is indistinguishable
+// from "ran, found nothing", which is how prepareCorpusCandidate once reported SUCCESS with no
+// archive on disk. Reproduced live 2026-07-27; pinned by tests/unit/entrypoint-symlink.test.mjs.
+function isDirectInvocation() {
+  try {
+    if (!process.argv[1]) return false;
+    return fs.realpathSync(process.argv[1]) === fs.realpathSync(fileURLToPath(import.meta.url));
+  } catch {
+    return false;
+  }
+}
+
+const invokedDirectly = isDirectInvocation();
 if (invokedDirectly) process.exit(main());

package/scripts/dual-host-deliberation.mjs

@@ -1,11 +1,18 @@
 #!/usr/bin/env node
 
 import { createHash } from 'node:crypto';
+import fs from 'node:fs';
 import { spawn } from 'node:child_process';
 import { fileURLToPath } from 'node:url';
 import { probeSubscriptionHosts, subscriptionOnlyEnv } from './subscription-hosts.mjs';
 
 const HOSTS = Object.freeze(['claude-code', 'codex']);
+// Top subscription models verified on the native hosts on 2026-09-10.
+// Keep these explicit: an implicit host default silently weakens the dual review.
+export const TOP_SUBSCRIPTION_MODELS = Object.freeze({
+  'claude-code': 'claude-fable-5-1',
+  codex: 'gpt-6-astra',
+});
 const HARD_PROBLEM = /\b(adr|architecture|architect|ddd|bounded context|aggregate|agentic[- ]?qe|holistic|security|production|migration|irreversible|threat model|experience)\b/i;
 
 export function hardProblem(task) {
@@ -107,13 +114,14 @@ export async function runSubscriptionHost(host, stage, payload, { cwd = process.
         args: [
           '-p', '--output-format', 'json', '--permission-mode', 'plan',
           '--tools', 'Read,Grep,Glob', '--no-session-persistence', '--effort', 'high',
+          '--model', TOP_SUBSCRIPTION_MODELS['claude-code'],
         ],
       }
     : {
         binary: 'codex',
         args: [
           'exec', '--ephemeral', '--sandbox', 'read-only', '--color', 'never', '--json',
-          '-m', 'gpt-5.6-sol', '-c', 'model_reasoning_effort="high"',
+          '-m', TOP_SUBSCRIPTION_MODELS.codex, '-c', 'model_reasoning_effort="medium"',
         ],
       };
   const result = await spawnHost(command.binary, command.args, { cwd, env, stdio: ['pipe', 'pipe', 'pipe'] }, prompt);
@@ -313,6 +321,21 @@ export async function main(argv = process.argv.slice(2), {
   }
 }
 
-if (process.argv[1] && fileURLToPath(import.meta.url) === process.argv[1]) {
+// Entry-point guard. Compares REALPATHS on both sides: path.resolve() normalizes a path but does
+// NOT follow symlinks, while import.meta.url IS symlink-resolved by Node. Through a symlink (npm bin
+// shims, wrapper scripts, and every os.tmpdir() path on macOS) the two sides disagree, so main()
+// never runs -- and because nothing throws, the process exits 0. A silent exit 0 is indistinguishable
+// from "ran, found nothing", which is how prepareCorpusCandidate once reported SUCCESS with no
+// archive on disk. Reproduced live 2026-07-27; pinned by tests/unit/entrypoint-symlink.test.mjs.
+function isDirectInvocation() {
+  try {
+    if (!process.argv[1]) return false;
+    return fs.realpathSync(process.argv[1]) === fs.realpathSync(fileURLToPath(import.meta.url));
+  } catch {
+    return false;
+  }
+}
+
+if (isDirectInvocation()) {
   process.exitCode = await main();
 }

package/scripts/dual-host-suggest.mjs

@@ -1,6 +1,7 @@
 #!/usr/bin/env node
 
 import { fileURLToPath } from 'node:url';
+import fs from 'node:fs';
 import { hardProblem } from './dual-host-deliberation.mjs';
 import { probeSubscriptionHosts } from './subscription-hosts.mjs';
 
@@ -53,6 +54,21 @@ export function main(argv = process.argv.slice(2), {
   return 0;
 }
 
-if (process.argv[1] && fileURLToPath(import.meta.url) === process.argv[1]) {
+// Entry-point guard. Compares REALPATHS on both sides: path.resolve() normalizes a path but does
+// NOT follow symlinks, while import.meta.url IS symlink-resolved by Node. Through a symlink (npm bin
+// shims, wrapper scripts, and every os.tmpdir() path on macOS) the two sides disagree, so main()
+// never runs -- and because nothing throws, the process exits 0. A silent exit 0 is indistinguishable
+// from "ran, found nothing", which is how prepareCorpusCandidate once reported SUCCESS with no
+// archive on disk. Reproduced live 2026-07-27; pinned by tests/unit/entrypoint-symlink.test.mjs.
+function isDirectInvocation() {
+  try {
+    if (!process.argv[1]) return false;
+    return fs.realpathSync(process.argv[1]) === fs.realpathSync(fileURLToPath(import.meta.url));
+  } catch {
+    return false;
+  }
+}
+
+if (isDirectInvocation()) {
   process.exitCode = main();
 }

package/scripts/falsify.mjs

@@ -28,6 +28,7 @@ import { spawnSync } from 'node:child_process';
 import fs from 'node:fs';
 import path from 'node:path';
 import { fileURLToPath, pathToFileURL } from 'node:url';
+import { resolveRuflo, RUFLO_MISSING } from '../plugin/scripts/ruflo-bin.mjs';
 
 const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
 const sh = (cmd, args) => spawnSync(cmd, args, { cwd: ROOT, encoding: 'utf8' });
@@ -169,9 +170,18 @@ export const CHECKS = [
       const end = Number(q("SELECT COUNT(*) FROM memory_entries WHERE key LIKE 'session-sessionend%';"));
 
       // 3. Does it RECALL? A real semantic round-trip through the REAL CLI — not a DB peek.
-      const r = spawnSync('npx', ['ruflo@latest', 'memory', 'search', '-q', 'nightly job supervision heartbeat receipts'], {
-        cwd: ROOT, encoding: 'utf8', timeout: 120_000,
-      });
+      // `npx ruflo@latest` was here before (Rule 21 violation: it resolves ITS OWN cached copy,
+      // masking drift from the global install — see ~/.claude/CLAUDE.md Rule 21) and, separately,
+      // ran with no RUFLO_DAEMON_AUTOSTART guard — every `ruflo` invocation auto-starts a project
+      // background daemon unless that is set (verified live: ~/.npm-global/lib/node_modules/ruflo/
+      // node_modules/@claude-flow/cli/dist/src/services/daemon-autostart.js:85). This falsifier
+      // must not itself leave a daemon running as a side effect of checking whether memory works.
+      const rufloBin = resolveRuflo();
+      const r = rufloBin
+        ? spawnSync(rufloBin, ['memory', 'search', '-q', 'nightly job supervision heartbeat receipts'], {
+          cwd: ROOT, encoding: 'utf8', timeout: 120_000, env: { ...process.env, RUFLO_DAEMON_AUTOSTART: '0' },
+        })
+        : { error: new Error(RUFLO_MISSING), stdout: '' };
       const recalled = /Found\s+\d+\s+results/.test(r.stdout || '') && !/Found\s+0\s+results/.test(r.stdout || '');
 
       const problems = [];