ruvnet-brain 4.5.12 → 4.5.13

package/README.md

@@ -7,7 +7,7 @@ Created: 2026-06-29 22:36:38 EDT
 
 # 🧠 RuvNet Brain
 
-### 🧠 RuvNet Brain — [![RuvNet Brain version 4.5.12 — updated 2026-07-30 03:24 EDT](https://img.shields.io/badge/version_4.5.12-updated_2026--07--30_03:24_EDT-1E90FF?style=for-the-badge&labelColor=0757BA)](https://github.com/stuinfla/ruvnet-brain/blob/main/plugin/.claude-plugin/plugin.json)
+### 🧠 RuvNet Brain — [![RuvNet Brain version 4.5.13 — updated 2026-07-30 03:24 EDT](https://img.shields.io/badge/version_4.5.13-updated_2026--07--30_03:24_EDT-1E90FF?style=for-the-badge&labelColor=0757BA)](https://github.com/stuinfla/ruvnet-brain/blob/main/plugin/.claude-plugin/plugin.json)
 
 **A portable, source-grounded brain over Reuven Cohen's (rUv's) RuvNet stack — delivered as a Claude Code plugin that makes Claude _use_ the stack instead of fighting it.**
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ruvnet-brain",
-  "version": "4.5.12",
+  "version": "4.5.13",
   "description": "One-command installer for RuvNet Brain — a portable, source-grounded brain over rUv's RuvNet building blocks, delivered as a Claude Code plugin so Claude uses the stack instead of fighting it.",
   "type": "module",
   "bin": {

package/plugin/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "ruvnet-brain",
   "description": "RuvNet brain transplant for Claude Code — grounds every RuvNet decision in real source across 77 rUv repositories, prefers Ruflo / RuVector-RVF / AgentDB over training-prior defaults (pgvector, Pinecone, hand-rolled cosine), and can pull in any RuvNet repo on demand. Ships a UserPromptSubmit retrieve-and-inject grounding hook and a PreToolUse write gate that refuses ungrounded rUv-product code until search_ruvnet has been consulted (ADR-0012 / ADR-067).",
-  "version": "4.5.12",
+  "version": "4.5.13",
   "author": {
     "name": "Stuart Kerr"
   },

package/plugin/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "ruvnet-brain",
-  "version": "4.5.12",
+  "version": "4.5.13",
   "description": "Source-grounded RuvNet knowledge, lifecycle enforcement, and learning for Codex.",
   "author": {
     "name": "Stuart Kerr"

package/scripts/model-managed-workflow-service.mjs

@@ -54,7 +54,10 @@ export async function managedRoute({ originalPrompt, taskFacts, harness, feedbac
     const stronger = decision.model === priorDecision.model
       ? efforts.indexOf(decision.effort) > efforts.indexOf(priorDecision.effort)
       : classes.indexOf(decision.taskClass) > classes.indexOf(priorDecision.taskClass);
-    assert(stronger, 'No stronger eligible owner-approved native repair route; same or weaker route refused');
+    const hardContinuation = priorDecision.taskClass === 'hard' && decision.taskClass === 'hard'
+      && ['harness', 'provider', 'model', 'effort'].every((field) => decision[field] === priorDecision[field]);
+    assert(stronger || hardContinuation, 'No stronger eligible owner-approved native repair route; same or weaker route refused');
+    if (hardContinuation) decision.reason += '; bounded scoped repair at approved hard allocation';
   }
   return decision;
 }

package/scripts/release-qualification-contract.mjs

@@ -80,6 +80,7 @@ export const RELEASE_REQUIREMENTS = Object.freeze({
         "tests/unit/protected-release-invocation.test.mjs",
         "tests/unit/release-identity-invariants.test.mjs",
         "tests/unit/release-transaction.test.mjs",
+        "tests/unit/release-transaction-provider-buffer.test.mjs",
         "tests/unit/prepublication-evidence.test.mjs",
         "tests/unit/candidate-host-evidence.test.mjs",
         "tests/unit/host-install-matrix-concurrency.test.mjs",

package/scripts/release-transaction-provider.mjs

@@ -24,6 +24,13 @@ export const ASSET_DOWNLOAD_TIMEOUT_MS = Number(process.env.RUVNET_RELEASE_ASSET
 const command = (name, args, options = {}) => execFileSync(name, args, {
   encoding: 'utf8', stdio: ['ignore', 'pipe', 'pipe'], timeout: 30_000, maxBuffer: 32 * 1024 * 1024, ...options,
 }).trim();
+
+// The 683MB 4.5.12 payload outlasted metadata's 30s budget despite completing remotely.
+// Size uploads independently at 1MiB/s, capped at ten minutes per file; no added retry.
+export function assetUploadTimeoutMs(bytes) {
+  if (!Number.isSafeInteger(bytes) || bytes < 0) throw new Error('Safe asset byte count required');
+  return Math.max(30_000, Math.min(600_000, Math.ceil(bytes / (1024 * 1024)) * 1000));
+}
 const json = (name, args, options) => JSON.parse(command(name, args, options));
 // ADR-086 S1: `releases/latest` is the customer download pointer and is a corpus generation on any
 // night a corpus round shipped. Every question this provider asks is about the CODE generation, so
@@ -436,7 +443,9 @@ export function liveReleaseProvider({ root = process.cwd() } = {}) {
           }
           continue;
         }
-        command('gh', ['release', 'upload', draft.tag, file, '--repo', REPO]);
+        command('gh', ['release', 'upload', draft.tag, file, '--repo', REPO], {
+          timeout: assetUploadTimeoutMs(fs.statSync(file).size),
+        });
       }
     },