ruvnet-brain 4.5.16 → 4.6.0

package/README.md

@@ -1,4 +1,4 @@
-Updated: 2026-09-11 08:00:00 EDT | Version 4.3.21
+Updated: 2026-10-10 05:06:39 EDT | Version 4.6.0
 Created: 2026-06-29 22:36:38 EDT
 
 <div align="center">
@@ -7,25 +7,23 @@ Created: 2026-06-29 22:36:38 EDT
 
 # 🧠 RuvNet Brain
 
-### 🧠 RuvNet Brain — [![RuvNet Brain version 4.5.16 — updated 2026-07-30 03:24 EDT](https://img.shields.io/badge/version_4.5.16-updated_2026--07--30_03:24_EDT-1E90FF?style=for-the-badge&labelColor=0757BA)](https://github.com/stuinfla/ruvnet-brain/blob/main/plugin/.claude-plugin/plugin.json)
+### 🧠 RuvNet Brain — [![RuvNet Brain version 4.6.0 — updated 2026-07-30 03:24 EDT](https://img.shields.io/badge/version_4.6.0-updated_2026--07--30_03:24_EDT-1E90FF?style=for-the-badge&labelColor=0757BA)](https://github.com/stuinfla/ruvnet-brain/blob/main/plugin/.claude-plugin/plugin.json)
 
 **A portable, source-grounded brain over Reuven Cohen's (rUv's) RuvNet stack — delivered as a Claude Code plugin that makes Claude _use_ the stack instead of fighting it.**
 
 </div>
 
-## Recovery milestone and proof boundaries
+## 4.6.0 coordinated updates and proof boundaries
 
-The 4.3.10 candidate is an incremental reliability repair, not a completed North Star or a new
-95-point certification. Publication is established by the protected release transaction and
-public installation receipt, not this source version. Historical release narratives and dated
-scores below are not measurements of the current candidate.
+The 4.6.0 source introduces one coordinated updater for installed tools, host plugins and the
+Brain's signed knowledge bundle. RNBC presents **Keep all tools updated** with **Latest
+(recommended)** or **Alpha**. The public default covers the RuvNet suite; wider developer-tool
+maintenance requires an explicit choice. See the update policy in `CONTRIBUTING.md` and the
+4.6.0 release notes in `docs/RELEASE-NOTES-4.6.0.md`.
 
-The recovery covers shared QA producers, explicit continuation objectives, safer private-data
-handling, and exact-artifact release verification. Full native nightly two-run proof, complete
-codebase review, and all twelve whole-product obligations remain separate work. An unavailable
-safe inverse must not be advertised as a one-click undo. See the
-[QA execution contract](docs/qa-execution-contract.md) and
-[ADR-072 stabilization boundary](docs/adr/0072-whole-product-integrity-conformance.md).
+A saved choice or registered schedule proves configuration. Completed runs, installed versions
+and the protected release's public installation receipt prove different things. This source
+version alone does not establish publication, all-tool freshness or a new product score.
 
 > ## 🧭 North Star
 >
@@ -53,12 +51,10 @@ safe inverse must not be advertised as a one-click undo. See the
 > - **`plugin`** (badge above) — the Claude Code plugin itself: SKILL.md, the grounding hooks, the MCP server. Read live from [`plugin/.claude-plugin/plugin.json`](plugin/.claude-plugin/plugin.json). Updates often — this is where behavior fixes land.
 > - **`installer (npm)`** (badge above) — the setup script's published version, read live from the [npm registry](https://www.npmjs.com/package/ruvnet-brain). It is a release surface of the same product, not an independent version track.
 > - **Brain Release** — [`releases/latest`](https://github.com/stuinfla/ruvnet-brain/releases/latest) exposes the published knowledge bundle. It must agree with that release's npm, plugin, and signed artifact identities. A moving source badge does not establish publication.
-> - **Request a verified update, with optional scheduled updates:**
->   ```
->   npx ruvnet-brain@latest --update --auto
->   ```
->   `--update` requests the published plugin and knowledge. Adding `--auto` requests **Evergreen** scheduling; successful registration alone is not proof a scheduled run completed. Drop `--auto` for a one-time update: `npx ruvnet-brain@latest --update`.
-> - **Disable scheduled updates:** `npx ruvnet-brain --disable-nightly`. Platform behavior is owned by the native scheduler adapter, not a hand-maintained cron recipe.
+> - **Update an existing Brain installation:** invoke its existing `ruvnet-brain --update` command. For an explicit developer checkout, use `node bin/install.mjs --update`. Initial installation may use `npx ruvnet-brain@latest`; routine updates preserve the installed owner instead of creating a second tool installation.
+> - **Check installed tools:** `ruvnet-brain-update --check`. Apply the saved policy with `ruvnet-brain-update --apply`; inspect the receipt for exclusions and failures.
+> - **Coordinate installed tools:** open RNBC and use **Keep all tools updated**. Choose **Latest (recommended)** or **Alpha**, and explicitly choose wider tool maintenance when wanted. The schedule runs at **03:30 in the user's local time** through the same coordinator as a manual run.
+> - **Disable scheduled updates:** use the existing `ruvnet-brain --disable-nightly` command. Registration and run health are reported separately.
 > - **Publication, local activation, and loaded session version are distinct observations.** An unchanged release does not by itself prove local health, freshness, or a successful update.
 
 <sub>Built by **[Stuart Kerr](https://isovision.ai)** at [Isovision.ai](https://isovision.ai) · free & fair use, to help everyone leverage the high end of agentic coding.</sub>

package/bin/developer-update.mjs

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+import { developerUpdateCli } from '../plugin/scripts/developer-update.mjs';
+developerUpdateCli().catch(error => { console.error(error.message); process.exitCode = 1; });

package/bin/install.mjs

@@ -27,6 +27,7 @@ import { acquireRefreshLock, finishRefreshReceipt, openRefreshReceipt, physicalP
 import { assessLifecycleEvidence, pruneLifecycleEvidence } from '../kb/lifecycle-evidence-retention.mjs';
 import { checkDiskSpace, recoverIncompleteStorageTransactions } from '../kb/update-storage-transaction.mjs';
 import { saveUpdateSource, stableNode } from '../plugin/scripts/automatic-update.mjs';
+import { acquireDeveloperLock } from '../plugin/scripts/developer-update-lock.mjs';
 import { footprintRoots, inventoryFootprint, sweepFootprint } from '../plugin/scripts/brain-footprint.mjs';
 import { kbCopyProof } from '../plugin/scripts/kb-copy-proof.mjs';
 import { assessMoveLeftovers, isVolumeMetadata } from '../plugin/scripts/footprint-io.mjs';
@@ -2191,7 +2192,7 @@ export function codexSessionSafety(status) {
   };
 }
 
-function codexAdministrativeProbeBinary() {
+export function codexAdministrativeProbeBinary() {
   if (process.env.CODEX_BIN) return process.env.CODEX_BIN;
   try {
     const brainHome = process.env.RUVNET_BRAIN_HOME || path.join(os.homedir(), '.cache', 'ruvnet-brain');
@@ -4435,7 +4436,7 @@ function enableNightly() {
       testMode: TEST_MODE });
     if (status.state !== 'on') throw new Error(status.evidence);
     ok(`nightly updates enabled — ${status.evidence}`);
-    info(c.dim(`identity ${NIGHTLY_LABEL}; immutable runner ${registration.runnerSha256.slice(0, 16)}…; 03:47 local`));
+    info(c.dim(`identity ${NIGHTLY_LABEL}; immutable runner ${registration.runnerSha256.slice(0, 16)}…; 03:30 local`));
     if (TEST_MODE) warn('RUVNET_BRAIN_TEST=1 — scheduler registration was written but OS activation was safely simulated');
   } catch (error) {
     console.error(`\n${c.red('✗ nightly updates were NOT enabled:')} ${error.message}`);
@@ -6331,7 +6332,18 @@ the installer reports that boot-level declarations changed.
   }
   if (FLAG_DEMO) return runDemo();
   if (FLAG_FEEDBACK) return runFeedback();
-  if (FLAG_UPDATE) return refuseOverSetAsideBrain() || runUpdate();
+  if (FLAG_UPDATE) {
+    if (refuseOverSetAsideBrain()) return;
+    const developerLock = acquireDeveloperLock({ brainHome: process.env.RUVNET_BRAIN_HOME || path.dirname(resolvedKbDir()) });
+    const previousToken = process.env.RUVNET_DEVELOPER_UPDATE_TOKEN;
+    process.env.RUVNET_DEVELOPER_UPDATE_TOKEN = developerLock.token;
+    try { return await runUpdate(); }
+    finally {
+      if (previousToken === undefined) delete process.env.RUVNET_DEVELOPER_UPDATE_TOKEN;
+      else process.env.RUVNET_DEVELOPER_UPDATE_TOKEN = previousToken;
+      developerLock.release();
+    }
+  }
   if (FLAG_ENABLE_NIGHTLY) return enableNightly();
   if (FLAG_DISABLE_NIGHTLY) return disableNightly();
   // Standalone, like the nightly pair above. Without these, the flags existed only as a way to

package/bin/nightly-refresh.mjs

@@ -61,13 +61,29 @@ Object.assign(process.env, registration.environment || {});
 let invocation;
 try {
   const modules = registration.updateModules;
-  if (!modules || Object.keys(modules).sort().join(',') !== 'automatic-update.mjs,ruvnet-gate1-pattern.mjs,user-settings.mjs') throw new Error('registered update module closure is missing');
+  const legacy = ['automatic-update.mjs', 'ruvnet-gate1-pattern.mjs', 'user-settings.mjs'];
+  const bridged = [...legacy, 'developer-update-owner.mjs'];
+  const currentLegacy = [...bridged, 'developer-update-policy.mjs'];
+  if (!modules?.['developer-update-policy.mjs'] && registration.mode === 'developer-suite') throw new Error('suite policy closure is missing');
+  if (registration.mode === 'developer-suite' && (!path.isAbsolute(modules['developer-update-policy.mjs'].path) || path.basename(modules['developer-update-policy.mjs'].path) !== 'developer-update-policy.mjs' || path.dirname(modules['developer-update-policy.mjs'].path) !== path.dirname(modules['automatic-update.mjs'].path) || !fs.lstatSync(modules['developer-update-policy.mjs'].path).isFile())) throw new Error('suite policy path identity mismatch');
+  if (registration.mode === 'developer-suite' && crypto.createHash('sha256').update(fs.readFileSync(modules['developer-update-policy.mjs'].path)).digest('hex') !== modules['developer-update-policy.mjs'].sha256) throw new Error('suite policy digest mismatch');
+  const executionPolicy = registration.mode === 'developer-suite' ? await import(pathToFileURL(modules['developer-update-policy.mjs'].path).href) : null;
+  const suite = executionPolicy ? [...new Set([...currentLegacy, ...executionPolicy.EXECUTION_MODULES])] : [];
+  const expected = registration.mode === 'developer-suite' ? [suite] : [legacy, bridged, currentLegacy];
+  if (!modules || !expected.some(names => Object.keys(modules).sort().join(',') === names.sort().join(','))) throw new Error('registered update module closure is missing');
   for (const [name, item] of Object.entries(modules)) {
     if (!path.isAbsolute(item.path) || path.basename(item.path) !== name
       || path.dirname(item.path) !== path.dirname(modules['automatic-update.mjs'].path)
       || !fs.lstatSync(item.path).isFile()
       || crypto.createHash('sha256').update(fs.readFileSync(item.path)).digest('hex') !== item.sha256) throw new Error('update module digest mismatch');
   }
+  if (registration.mode === 'developer-suite') {
+    const coordinator = await import(pathToFileURL(modules['developer-update.mjs'].path).href);
+    const receipt = await coordinator.runDeveloperUpdate({ mode: 'apply', env: { ...process.env,
+      RUVNET_NIGHTLY_IDENTITY: registration.identity, RUVNET_NIGHTLY: '1' } });
+    console.log(JSON.stringify(receipt));
+    process.exit(0);
+  }
   const policy = await import(pathToFileURL(modules['automatic-update.mjs'].path).href);
   process.env.PATH = policy.automaticPath({ nodePath: registration.nodePath });
   invocation = policy.automaticInvocation(['--update', '--no-nightly-prompt'], {