ruvnet-brain 4.3.30 → 4.3.32

package/README.md

@@ -7,7 +7,7 @@ Created: 2026-06-29 22:36:38 EDT
 
 # 🧠 RuvNet Brain
 
-### 🧠 RuvNet Brain — [![RuvNet Brain version 4.3.30 — updated 2026-07-30 03:24 EDT](https://img.shields.io/badge/version_4.3.30-updated_2026--07--30_03:24_EDT-1E90FF?style=for-the-badge&labelColor=0757BA)](https://github.com/stuinfla/ruvnet-brain/blob/main/plugin/.claude-plugin/plugin.json)
+### 🧠 RuvNet Brain — [![RuvNet Brain version 4.3.32 — updated 2026-07-30 03:24 EDT](https://img.shields.io/badge/version_4.3.32-updated_2026--07--30_03:24_EDT-1E90FF?style=for-the-badge&labelColor=0757BA)](https://github.com/stuinfla/ruvnet-brain/blob/main/plugin/.claude-plugin/plugin.json)
 
 **A portable, source-grounded brain over Reuven Cohen's (rUv's) RuvNet stack — delivered as a Claude Code plugin that makes Claude _use_ the stack instead of fighting it.**
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ruvnet-brain",
-  "version": "4.3.30",
+  "version": "4.3.32",
   "description": "One-command installer for RuvNet Brain \u2014 a portable, source-grounded brain over rUv's RuvNet building blocks, delivered as a Claude Code plugin so Claude uses the stack instead of fighting it.",
   "type": "module",
   "bin": {

package/plugin/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "ruvnet-brain",
   "description": "RuvNet brain transplant for Claude Code — grounds every RuvNet decision in real source across 77 rUv repositories, prefers Ruflo / RuVector-RVF / AgentDB over training-prior defaults (pgvector, Pinecone, hand-rolled cosine), and can pull in any RuvNet repo on demand. Ships a UserPromptSubmit retrieve-and-inject grounding hook and a PreToolUse write gate that refuses ungrounded rUv-product code until search_ruvnet has been consulted (ADR-0012 / ADR-067).",
-  "version": "4.3.30",
+  "version": "4.3.32",
   "author": {
     "name": "Stuart Kerr"
   },

package/plugin/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "ruvnet-brain",
-  "version": "4.3.30",
+  "version": "4.3.32",
   "description": "Source-grounded RuvNet knowledge, lifecycle enforcement, and learning for Codex.",
   "author": {
     "name": "Stuart Kerr"

package/scripts/git-hooks/pre-commit

@@ -0,0 +1,16 @@
+#!/bin/sh
+# Self-heals the convergence manifest so a commit can never carry a stale one. Twice on
+# 2026-09-27 (v4.3.30, v4.3.31) a commit was created with data/convergence-manifest.json out of
+# date with the rest of the tree being committed -- once because a source fix landed in a
+# separate commit after the manifest was written, once because the manifest was regenerated
+# before a new file was `git add`ed (so `git ls-files` could not see it yet). Both times CI
+# caught it minutes later on every OS in parallel: cheap to prevent locally, expensive to
+# discover remotely. This hook regenerates the manifest against the CURRENT tree immediately
+# before every commit and re-stages it, so the two can never drift apart again.
+set -eu
+ROOT="$(git rev-parse --show-toplevel)"
+cd "$ROOT"
+[ -f scripts/convergence-manifest.mjs ] || exit 0
+node scripts/convergence-manifest.mjs >/dev/null 2>&1 && exit 0
+node scripts/convergence-manifest.mjs --write
+git add data/convergence-manifest.json

package/scripts/release-transaction-provider.mjs

@@ -13,8 +13,16 @@ const REPO = 'stuinfla/ruvnet-brain';
 const PACKAGE = 'ruvnet-brain';
 export const ASSET_DOWNLOAD_TIMEOUT_MS = Number(process.env.RUVNET_RELEASE_ASSET_TIMEOUT_MS || 600_000);
 
+// maxBuffer: execFileSync defaults to 1MB, which this helper never overrode. `refresh()` below
+// slurps EVERY release's metadata (`releases?per_page=100 --paginate --slurp`) through it, and by
+// 2026-09-27 the accumulated release history (many releases, several now carrying 14-15 chained
+// transaction receipts as assets each) finally crossed that ceiling — same shape of bug as #77
+// (spawnSync gh ENOBUFS), just at the metadata-listing call site instead of the asset-download one.
+// 32MB matches the buffer already used for JSON metadata elsewhere in this codebase (e.g.
+// release-abort-stale.mjs's artifact fetch) and costs nothing: no call through this helper handles
+// raw asset bytes (those stream to disk via assetToFile), only ever-growing-but-still-small JSON.
 const command = (name, args, options = {}) => execFileSync(name, args, {
-  encoding: 'utf8', stdio: ['ignore', 'pipe', 'pipe'], timeout: 30_000, ...options,
+  encoding: 'utf8', stdio: ['ignore', 'pipe', 'pipe'], timeout: 30_000, maxBuffer: 32 * 1024 * 1024, ...options,
 }).trim();
 const json = (name, args, options) => JSON.parse(command(name, args, options));
 // ADR-086 S1: `releases/latest` is the customer download pointer and is a corpus generation on any