ruvnet-brain 4.3.37 → 4.3.39

package/README.md

@@ -7,7 +7,7 @@ Created: 2026-06-29 22:36:38 EDT
 
 # 🧠 RuvNet Brain
 
-### 🧠 RuvNet Brain — [![RuvNet Brain version 4.3.37 — updated 2026-07-30 03:24 EDT](https://img.shields.io/badge/version_4.3.37-updated_2026--07--30_03:24_EDT-1E90FF?style=for-the-badge&labelColor=0757BA)](https://github.com/stuinfla/ruvnet-brain/blob/main/plugin/.claude-plugin/plugin.json)
+### 🧠 RuvNet Brain — [![RuvNet Brain version 4.3.39 — updated 2026-07-30 03:24 EDT](https://img.shields.io/badge/version_4.3.39-updated_2026--07--30_03:24_EDT-1E90FF?style=for-the-badge&labelColor=0757BA)](https://github.com/stuinfla/ruvnet-brain/blob/main/plugin/.claude-plugin/plugin.json)
 
 **A portable, source-grounded brain over Reuven Cohen's (rUv's) RuvNet stack — delivered as a Claude Code plugin that makes Claude _use_ the stack instead of fighting it.**
 
@@ -562,7 +562,7 @@ node forge-ask-all.mjs --dir . --q "How does RuVector implement HNSW vector sear
 
 This project versions in the open (see the live badge up top for the exact plugin version; the downloadable knowledge bundle is a separate track) — we don't claim “done,” “complete,” or “zero hallucinations.” Where it stands:
 
-- ✅ **The grounding brain is real and proven** — 199 public stores · 160,685 public source chunks, dual embeddings, cross-encoder rerank, plugin (MCP tool + explicit skills; automatic hooks retired), all re-runnable.
+- ✅ **The grounding brain is real and proven** — 199 public stores · 161,322 public source chunks, dual embeddings, cross-encoder rerank, plugin (MCP tool + explicit skills; automatic hooks retired), all re-runnable.
 - ✅ **Code-level depth** — the code-rich repos are indexed to full function bodies; “how is it implemented?” returns the implementation. Verified in the shipped bundle (clean-room 3/3).
 - ✅ **Routing holds** — named 47/48, described 26/28, scenario 7/8; behavioral L1–L3 all pass (**L4 downgraded — it measures that the brain spoke, not that anything listened**); private stores fenced out of the public bundle (zero-leak verified).
 - ⚠️ **Two routing residuals** (above) — surfaced, not hidden.

package/bin/install.mjs

@@ -528,21 +528,42 @@ export function copyLocalBundleInto(sourceDir, cacheDir) {
 // which a private-overlay brain refuses. Idempotent, byte-compared, atomic; a symlink is replaced by
 // a real file because a link is not a trusted regular file.
 const TRUSTED_VALIDATOR_SOURCE = path.join(REPO_ROOT, 'plugin', 'scripts', 'coverage-integrity.mjs');
-export function placeTrustedCoverageValidator(kbDir, { source = TRUSTED_VALIDATOR_SOURCE,
-  brainVersion = PACKAGE_VERSION } = {}) {
-  let bytes;
-  try { bytes = fs.readFileSync(source); }
-  catch (error) { throw new Error(`trusted coverage validator is missing from this package (${source}): ${error.message}`); }
-  const target = path.join(kbDir, 'coverage-integrity.mjs');
+// Byte-compared, atomic, symlink-safe placement of one file the installer owns inside the KB.
+function placeFileAtomic(target, bytes) {
   let existing = null;
   try { existing = fs.lstatSync(target); } catch (error) { if (error.code !== 'ENOENT') throw error; }
-  const unchanged = existing && existing.isFile() && !existing.isSymbolicLink() && fs.readFileSync(target).equals(bytes);
+  const unchanged = !!(existing && existing.isFile() && !existing.isSymbolicLink() && fs.readFileSync(target).equals(bytes));
   if (!unchanged) {
     const staged = `${target}.${process.pid}.${Date.now()}.tmp`;
     fs.writeFileSync(staged, bytes, { mode: 0o644 });
     if (existing && existing.isSymbolicLink()) fs.unlinkSync(target); // never write through a link
     fs.renameSync(staged, target);
   }
+  return { existing, unchanged };
+}
+// The updater that runs on a customer is the forge-update.mjs inside their OWN installed KB, which only
+// changes when a bundle replaces it — so a fix to the updater never reached installs that already had
+// one. The signed npm package carries the updater and the sibling modules it imports; the `--update`
+// preflight places them (same trust as the validator) so a stale updater upgrades itself before it runs.
+const UPDATER_FILES = ['forge-update.mjs', 'zip-extract.mjs', 'brain-profile.mjs', 'refresh-run.mjs',
+  'update-storage-transaction.mjs', 'lifecycle-evidence-retention.mjs', 'corpus-release-identity.mjs'];
+export function placeUpdater(kbDir, { sourceDir = path.join(REPO_ROOT, 'kb') } = {}) {
+  const placed = {};
+  for (const name of UPDATER_FILES) {
+    let bytes;
+    try { bytes = fs.readFileSync(path.join(sourceDir, name)); }
+    catch (error) { throw new Error(`updater file ${name} is missing from this package (${sourceDir}): ${error.message}`); }
+    placed[name] = placeFileAtomic(path.join(kbDir, name), bytes).unchanged ? 'unchanged' : 'placed';
+  }
+  return placed;
+}
+export function placeTrustedCoverageValidator(kbDir, { source = TRUSTED_VALIDATOR_SOURCE,
+  brainVersion = PACKAGE_VERSION } = {}) {
+  let bytes;
+  try { bytes = fs.readFileSync(source); }
+  catch (error) { throw new Error(`trusted coverage validator is missing from this package (${source}): ${error.message}`); }
+  const target = path.join(kbDir, 'coverage-integrity.mjs');
+  const { existing, unchanged } = placeFileAtomic(target, bytes);
   // STAMP THE APPROVED RUNTIME IN THE SAME BREATH AS PLACING ITS EXECUTABLES (ADR-086 step 16).
   //
   // This is the one moment where "which runtime is this brain running" is a measured fact rather
@@ -558,7 +579,7 @@ export function placeTrustedCoverageValidator(kbDir, { source = TRUSTED_VALIDATO
 /** `--update` preflight: place the validator only where an updater exists to consume it. */
 export function ensureUpdaterPrerequisites(kbDir) {
   if (!fs.existsSync(path.join(kbDir, 'forge-update.mjs'))) return { updater: false, validator: null };
-  return { updater: true, validator: placeTrustedCoverageValidator(kbDir) };
+  return { updater: true, files: placeUpdater(kbDir), validator: placeTrustedCoverageValidator(kbDir) };
 }
 
 export async function unzipInto(zipPath, cacheDir, sourceDir = null, { releaseTag = null, activate = true } = {}) {
@@ -2729,10 +2750,12 @@ async function doctor() {
     ok(`nightly scheduler: ${nightlyHealth.evidence}`);
     if (nightlyHealth.runHealth?.state === 'ok' || nightlyHealth.runHealth?.state === 'running') {
       ok(`nightly execution: ${nightlyHealth.runHealth.evidence}`);
+    } else if (nightlyHealth.runHealth?.state === 'failed') {
+      warn(`nightly refresh FAILED — the brain is not updating: ${nightlyHealth.runHealth.evidence}`);
     } else warn(`nightly execution unproven: ${nightlyHealth.runHealth?.evidence || 'no run receipt'}`);
   }
   else if (nightlyHealth.state === 'degraded') warn(`nightly scheduler degraded: ${nightlyHealth.evidence}`);
-  else if (nightlyHealth.state === 'off') info('nightly scheduler is off (optional; enable with --enable-nightly)');
+  else if (nightlyHealth.state === 'off') warn('nightly scheduler is OFF — knowledge updates only when a session starts (SessionStart retries at most every 6h); for nightly updates run  npx ruvnet-brain --enable-nightly  (skip if agentic-kit manages this machine)');
   else info(`nightly scheduler status unavailable: ${nightlyHealth.evidence}`);
   have('node') ? ok('node present') : warn('node missing');
   have('npm') ? ok('npm present') : warn('npm missing');