ruvnet-brain 4.5.3 → 4.5.5

package/config/model-router/routing-policy.template.json

@@ -0,0 +1,76 @@
+{
+  "schemaVersion": 1,
+  "reviewedAt": "2026-10-04T13:32:24.704091Z",
+  "maxAgeMs": 604800000,
+  "routes": {
+    "codex": {
+      "fast": {
+        "model": "gpt-6-luna",
+        "effort": "low"
+      },
+      "medium": {
+        "model": "gpt-6.1-sol",
+        "effort": "medium"
+      },
+      "hard": {
+        "model": "gpt-6-astra",
+        "effort": "high"
+      },
+      "substantial": {
+        "model": "gpt-6.1-sol",
+        "effort": "high"
+      },
+      "exceptional": {
+        "model": "gpt-6-astra",
+        "effort": "xhigh",
+        "requiresNamedReason": true
+      }
+    },
+    "claude-code": {
+      "fast": {
+        "model": "claude-sonnet-5-5",
+        "effort": "low"
+      },
+      "medium": {
+        "model": "claude-sonnet-5-5",
+        "effort": "medium"
+      },
+      "hard": {
+        "model": "claude-opus-5-5",
+        "effort": "high"
+      },
+      "codingEffort": "high"
+    }
+  },
+  "sources": [
+    {
+      "url": "https://artificialanalysis.ai/models/releases/comparisons/gpt-6-1-sol-vs-claude-sonnet-5-5",
+      "benchmark": "Intelligence Index v4.3.2; Terminal-Bench 4.0",
+      "checkedAt": "2026-10-04T13:32:24.704295Z"
+    },
+    {
+      "url": "https://artificialanalysis.ai/models/releases/comparisons/gpt-6-luna-vs-gpt-6-astra",
+      "benchmark": "Intelligence Index v4.3.2; Terminal-Bench 4.0",
+      "checkedAt": "2026-10-04T13:32:24.704301Z"
+    }
+  ],
+  "qualification": {
+    "basis": "live provider metadata, five native subscription smoke launches, independent effort comparisons, user allocation constraint",
+    "limits": [
+      "Not project-specific optimality proof",
+      "Luna fast limited to noncoding",
+      "No automatic newmodel entitlement claim",
+      "Parent conversation model remains host-controlled",
+      "Substantial/exceptional allocation reflects user correctness preference, not newly measured optimality",
+      "Free-text task classes are heuristic; caller taskFacts can express uncertainty and scope",
+      "No assumed completion-speed or subscription-quota multipliers",
+      "Native agent hook updatedInput rewrite has not passed host acceptance proof"
+    ]
+  },
+  "policyRevisionAt": "2026-10-04T13:50:05.851549+00:00",
+  "objectivePriority": [
+    "correctness",
+    "subscription-allowance",
+    "completion-time"
+  ]
+}

package/config/model-router/weekly-analyst-instruction.md

@@ -0,0 +1,60 @@
+Updated: 2026-10-04 14:16:00 EDT | Version 1.0.4
+Created: 2026-10-04 09:56:00 EDT
+
+# Weekly model-routing analyst mandate
+
+Act as Stuart's model-routing analyst for software development. Maintain an evidence-based, per-user policy for native OpenAI Codex and Anthropic Claude subscriptions. This instruction describes the required analyst work; storing it or collecting metadata does not establish that the analyst ran.
+
+## When this assessment runs
+
+Stuart's October 4 clarification governs the schedule: check weekly for newly released OpenAI or Anthropic text-capable models. If no new relevant model is discovered, retain the existing owner-approved routing policy byte-for-byte, record the successful catalog check, and finish quietly. Do not rerun this full assessment merely because another week passed or benchmark/pricing data changed.
+
+The first successful catalog check establishes the release baseline while retaining the policy Stuart already approved. That is a baseline receipt, not proof that a semantic assessment ran. A new canonical provider/model release triggers the full instructions below. Failed discovery is unknown, never "no change." An unavailable selected route must be surfaced and must not silently downgrade. Preserve pending new releases when an assessment fails so they can be retried.
+
+Allow up to 15 minutes for a triggered assessment, aiming to finish within five minutes. A timeout remains a failed assessment and preserves the approved policy. Changing the timer or collecting fresh metadata does not establish successful review or authorize promotion.
+
+## Objective and authority
+
+Prioritize correctness, completeness and sound architectural judgment; then efficient included subscription allowance use; then time to a verified result including planning, handoffs, implementation, repairs and review. Treat the providers' allowances separately. Never infer included usage from API prices, credit rates, message counts or token counts. Do not weaken capability when the task needs stronger reasoning. Surface capacity constraints and defer optional work instead.
+
+Use native subscription authentication. Never enable paid API fallback, extra credits, or a new subscription. Never introduce API billing, purchase credits, upgrade plans or enable overages. Before a Codex analyst launch verify ordinary included usage is available; block when exhausted or unavailable. Authentication and this check do not reserve allowance or guarantee existing credits cannot be consumed after concurrent usage exhausts it. Disclose that limit without claiming a hard spending cap. Do not change existing billing controls. Comparative inference needs standing authorization and an explicit allowance budget. The routine evidence collector must not launch unbudgeted experiments.
+
+## Baseline and research
+
+On the first run inspect installed tools, supported configuration, exact models and efforts actually available through the subscriptions, accessible usage/reset information, existing routing rules, user overrides and evaluation history. Never expose credentials. On subsequent runs compare with the prior report, refresh changeable facts and retain valid historical evidence. Report inaccessible dashboards or providers without guessing entitlement or allowance.
+
+Distinguish public announcements, API availability, native selectable subscription models and independently observed execution. Check official OpenAI and Anthropic sources for exact identifiers, releases, retirements, client effort support, speed modes, usage rules, coding/review capabilities and context handling.
+
+Check independent primary evaluations relevant to architecture, repository understanding, implementation, debugging, long-running coding and review. Start with Artificial Analysis model AND coding-agent evaluations (https://artificialanalysis.ai/), VulcanBench reports and methodology (https://vulcanbench.com/), Terminal-Bench (https://www.tbench.ai/) and SWE-bench (https://www.swebench.com/). Include other relevant reproducible independent evaluations. Trace aggregators to the original evaluator. Trace repeated claims to original experiments; repetitions are not independent evidence. Personal reports are supplementary. Record source URL, evaluation date, benchmark version, exact model and effort, harness, task count, success rate, uncertainty where available, runtime, token use and reported cost basis. Compare efforts within each model; investigate whether more effort reduces total work, retries, tokens or time. Low/medium effort is not automatically more economical. Report conflicting evidence and its workloads. Do not combine incompatible evaluations into a ranking. General intelligence scores do not prove architecture/review superiority; maximum-effort results do not prove medium-effort behavior. Cite direct sources and separate measurements, vendor claims and recommendations.
+
+## Evaluate dispatch independently of worker quality
+
+The entry model must route reliably and enforce its handoff. Do not select a cheap dispatcher without evidence. Maintain representative routing cases: obvious mechanical tasks, deceptively short hard tasks, ambiguous requirements, architectural decisions, security-sensitive changes, migrations, cross-system bugs and difficult reviews. Measure dangerous under-routing, unnecessary escalation, handoff failures, routing latency and whole-workflow usage. Confidence claims from the dispatcher are insufficient.
+
+Prefer deterministic dispatch for clear rules. Uncertain classifications go upward or receive a stronger assessment before implementation. Preserve the original request and relevant evidence; a weak summary must not be the worker's only context. Verify actual execution model and effort. Requested arguments, messages and configuration edits are not proof. State whether each supported route changes the parent, starts a child, or launches another native client.
+
+## Recommendations and escalation
+
+Produce OpenAI-only, Anthropic-only and supported combined policies. Every route needs exact identifier, supported effort or documented equivalent, speed mode, entry conditions, escalation triggers and confidence. Do not invent equivalent effort semantics across providers.
+
+Cover entry/dispatch, mechanical work, routine settled-design implementation, substantial development, consequential architecture/scope/ambiguity and cross-system reasoning, difficult debugging, hardest implementation, substantive final review and exceptional escalation. Include exact model, effort, speed mode, fallback, escalation and separately chosen reviewer for each role. The reviewer checks requirements, implementation, tests and unresolved risks, and requires repairs; approval cannot replace execution evidence.
+
+Reassess this current OpenAI hypothesis: Astra high for consequential planning and review; Sol 6.1 high for demanding implementation under a clear design; Sol 6.1 medium for routine implementation; Astra retains implementation when essential judgment remains tightly coupled; Luna low only for explicit mechanical transformations with complete cheap verification. Treat Luna low dispatch, Sol 6.1 high implementation, Sol xhigh difficult implementation and Astra high architecture/review as hypotheses, not permanent rules. Apply equally independent reasoning to Anthropic. Verify the identifiers/settings before recommending replacements. The strongest suitable model handles consequential judgment; do not require failures on weaker models first.
+
+Reassess when scope, assumptions, boundaries or verification change. Missing information requires evidence; tooling/environment failure requires repair; difficult implementation reasoning may warrant more effort or capability; architectural uncertainty warrants strongest suitable architectural reasoning promptly. Avoid rigid retry ladders. Final review cannot guarantee recovery from bad early assumptions. Require appropriate executable checks and runtime evidence. Cross-provider review needs expected benefit; different providers do not guarantee independent errors.
+
+## Evaluation and application
+
+Save allowance through clear scope, relevant context, preserved decisions, fewer redundant investigations, suitable checks and fewer repairs. Measure the whole accepted-task path rather than decode speed. Standard delivery is preferred unless acceleration's documented benefit justifies its allowance use. Use existing local telemetry first. Account for dispatcher work, context transfer, all children, retries, review and repairs. Record actual telemetry where available; mark attribution uncertain under concurrent activity, resets, rounding or other sessions. Keep separate provider budgets and any shared/model-specific limits. Verify usage multipliers each week. Never promise zero quality loss or guaranteed savings.
+
+Newer models are not automatically better. Use credible evaluations and task outcomes first. Uncertain options stay experimental. Local comparisons need explicit success criteria, a budget and an independent quality judge. Evaluate correctness, review findings, repairs, completion time and attributable allowance where available.
+
+Research and update proposals automatically. Maintain a last-known-good policy and dated candidate. Require a demonstrated quality floor for every role, availability, routing, actual handoff and quality checks. Avoid exhaustive evaluations that consume a large fraction of allowance. Automatically promote only evidence-qualified, supported changes within the router's existing authorized update mechanism and standing authorization; preserve recovery. Preserve user overrides, validate settings, retain previous versions and distinguish applied from recommended. If evidence is insufficient, retain the established route with an uncertainty label. Never mark metadata collection as completed semantic review or reset a policy review date merely because HTTP fetches succeeded.
+
+## Weekly output and triggering
+
+Save an initial full report and concise dated change reports, sources and a versioned policy proposal in the authorized per-user output directory. Include changes; original third-party charts with dates/links; clearly labelled recreated model-and-effort charts with separate quality-versus-cost and quality-versus-completion-time views; API cost versus measured subscription usage; recommended VS Code entry model and reasons; OpenAI, Anthropic and combined routing diagrams/tables; exact identifiers/efforts/speed/fallback; escalation/review rules; confidence, evidence gaps and policy changes. Include a machine-readable candidate compatible with the existing router. Mark unmeasured configurations missing, never invent scores. Preserve source snapshots and policy reasoning. Preserve the prior policy for comparison and recovery.
+
+Keep unchanged findings quiet. Notify for actionable improvement, retirement, availability change, regression, access failure or a required decision. A schedule needs actual run receipts. Active-session weekly catch-up is not a guarantee of execution while clients are closed. Never claim a recommendation is implemented, a model accessible or every prompt enforced without checking the actual supported runtime path.
+
+The native release check also refreshes account-visible model metadata without inference. For newly discovered models only, semantic analysis and independent qualification share one fifteen-minute deadline. A source-reviewed fixed role suite compares the incumbent and candidate, and a separate approved hard reviewer grades anonymized outputs. Automatic application requires standing user authorization, actual native configured-turn evidence, passing quality checks and an unchanged prior policy. Requested settings are not backend identity proof. Incomplete qualification keeps its bound proposal for retry without repeating the completed analysis; terminal rejection retains the approved route.

package/data/model-catalog.json

@@ -1,20 +1,20 @@
 {
   "_meta": {
-    "purpose": "Per-provider (house) tier ladders. The FRONTIER — the escalation target AND the savings baseline — is personalized to the user's own house: a Claude shop's frontier is Fable 5, a ChatGPT shop's is GPT-5.6 Sol, a Codex shop's is Sol, a Gemini shop's is Gemini 3.1 Pro, a Grok shop's is Grok 4.5. Modeled on ruflo ADR-148 (assets/model-router/openrouter-alts.json), extended with a provider-house axis rUv's registry does not carry.",
+    "purpose": "Verified provider tier ladders and task-fit recommendations. Frontier is the hard-work target; it is not the routine default. API prices are comparison metadata, not subscription charges.",
     "generated": "2026-07-15",
     "schema_version": 1,
     "sources": {
-      "prices": "OpenRouter /api/v1/models live catalog, pulled 2026-09-19 (in/out USD per Mtok).",
-      "rankings": "Artificial Analysis Intelligence Index (artificialanalysis.ai) + Arena/LMArena (arena.ai) — the ONLY independent evaluators carrying current-generation models as of 2026-07-15; each figure cross-verified twice.",
-      "provenance_rule": "rUv ADR-206: vendor-reported scores are optimistic and harness-confounded — trust independent (AA/Arena) numbers, treat vendor self-scaffold SWE-bench/LiveCodeBench figures as noisy features, never as truth.",
-      "benchmark_lag": "The canonical hard coding benchmarks (SWE-bench Verified standardized harness, LiveCodeBench, Aider polyglot) were ALL months stale on 2026-07-15 and carry NONE of these models. The '88.6% / 95% SWE-bench' figures in the press are vendor self-scaffold scores, not the standardized harness — excluded here.",
+      "prices": "OpenRouter /api/v1/models live catalog, pulled 2026-10-04 (in/out USD per Mtok).",
+      "rankings": "Anthropic/OpenAI official role guidance checked 2026-10-04 for refreshed entries. Historical ranks for other providers unchanged and not revalidated in this two-provider refresh.",
+      "provenance_rule": "rUv ADR-206: vendor-reported scores are optimistic and harness-confounded \u2014 trust independent (AA/Arena) numbers, treat vendor self-scaffold SWE-bench/LiveCodeBench figures as noisy features, never as truth.",
+      "benchmark_lag": "The canonical hard coding benchmarks (SWE-bench Verified standardized harness, LiveCodeBench, Aider polyglot) were ALL months stale on 2026-07-15 and carry NONE of these models. The '88.6% / 95% SWE-bench' figures in the press are vendor self-scaffold scores, not the standardized harness \u2014 excluded here.",
       "release_refs": "OpenAI GPT-5.6 GA 2026-07-09 (openai.com/index/gpt-5-6); Anthropic Fable 5 2026-06-09 (anthropic.com/news/claude-fable-5-mythos-5); Google Gemini 3.1 Pro 2026-02-19; xAI/SpaceXAI Grok 4.5 2026-07-08."
     },
-    "caveat": "Prices are live-verified; tier placements are sensible, independent-benchmark-grounded starters, NOT this user's measured results. Override per-installation via $RUVNET_MODEL_CATALOG or the console. The automated always-current path is rUv's ADR-206 (BenchPress predictor + hourly OpenRouter watcher) — see scripts/refresh-model-catalog.mjs for the live re-pull.",
-    "effort_note": "Frontier effort defaults to 'xhigh' (the max reasoning a shop reaches for on the hardest tasks); this is a principled default, not a per-effort measurement."
+    "caveat": "Refreshed Anthropic/OpenAI tiers use official provider guidance and owner preferences, not newly measured independent rankings. Other provider claims remain historical and were not reassessed in this refresh.",
+    "effort_note": "Start ordinary work at low/medium, hard work at high; xhigh/max only when representative evals justify latency and cost. Per-model supports and API/host defaults differ; see dated October 4 refresh."
   },
   "default_provider": "anthropic",
-  "default_provider_reason": "This is a Claude Code plugin, so DEVELOPMENT genuinely runs on Anthropic — that is a detected fact, not an arbitrary house preference. Set your PRODUCTION house in the console (or $RUVNET_PROVIDER) if your app runs on a different provider; it is never assumed silently.",
+  "default_provider_reason": "This is a Claude Code plugin, so DEVELOPMENT genuinely runs on Anthropic \u2014 that is a detected fact, not an arbitrary house preference. Set your PRODUCTION house in the console (or $RUVNET_PROVIDER) if your app runs on a different provider; it is never assumed silently.",
   "providers": {
     "anthropic": {
       "label": "Claude (Anthropic)",
@@ -24,29 +24,27 @@
         "CLAUDECODE"
       ],
       "frontier": {
-        "model": "claude-fable-5",
-        "in": 10,
-        "out": 50,
-        "released": "2026-06-09",
-        "rank": "AA Intelligence #1 (60) · Arena #1 (1508 Elo)",
-        "source": "independent (AA + Arena)"
+        "model": "anthropic/claude-opus-5.5",
+        "in": 4,
+        "out": 20,
+        "rank": "Hard work; Fable 5.1 is a bounded exceptional escalation, not the ordinary baseline",
+        "source": "2026-10-04 provider documentation + live OpenRouter catalog; project task-fit recommendation, not measured independent rank"
       },
       "mid": {
-        "model": "claude-sonnet-5",
+        "model": "anthropic/claude-sonnet-5.5",
         "in": 2,
         "out": 10,
-        "released": "2026-06-30",
-        "rank": "AA 53; intro price $2/$10 → $3/$15 after 2026-08-31",
-        "source": "independent (AA)"
+        "rank": "Routine work at medium effort",
+        "source": "2026-10-04 provider documentation + live OpenRouter catalog; project task-fit recommendation, not measured independent rank"
       },
       "cheap": {
-        "model": "claude-haiku-4.5",
-        "in": 1,
-        "out": 5,
-        "released": "2025-10-15",
-        "rank": "cheap tier (AA index low; cost-cascade prefers a cross-provider value pick when an OpenRouter key is present)",
-        "source": "catalog"
-      }
+        "model": "anthropic/claude-sonnet-5.5",
+        "in": 2,
+        "out": 10,
+        "rank": "Fast work at low effort; Haiku excluded by owner preference, not claimed discontinued",
+        "source": "2026-10-04 provider documentation + live OpenRouter catalog; project task-fit recommendation, not measured independent rank"
+      },
+      "note": "API/OpenRouter IDs differ from native Claude IDs: claude-opus-5-5 and claude-sonnet-5-5. Same Sonnet model serves two effort roles. No measured latency/quality guarantee."
     },
     "openai": {
       "label": "ChatGPT (OpenAI)",
@@ -54,35 +52,32 @@
         "OPENAI_API_KEY"
       ],
       "frontier": {
-        "model": "openai/gpt-5.6-sol",
-        "in": 2,
-        "out": 10,
-        "released": "2026-07-09",
-        "rank": "AA Intelligence #2 (59) · AA Coding Index leader (80) · Terminal-Bench 2.1 SOTA · ~1/3 Fable 5's cost/task",
-        "source": "independent (AA)"
+        "model": "openai/gpt-6-astra",
+        "in": 10,
+        "out": 50,
+        "rank": "Bounded difficult reasoning and critical independent review",
+        "source": "2026-10-04 provider documentation + live OpenRouter catalog; project task-fit recommendation, not measured independent rank"
       },
       "mid": {
-        "model": "openai/gpt-5.6-terra",
+        "model": "openai/gpt-6.1-sol",
         "in": 2,
-        "out": 12,
-        "released": "2026-07-09",
-        "rank": "AA Coding 77.4 — beats prev-gen flagship GPT-5.5 (76.4) at lower live catalog pricing",
-        "source": "independent (AA)"
+        "out": 10,
+        "rank": "Default ordinary coding, research and debugging",
+        "source": "2026-10-04 provider documentation + live OpenRouter catalog; project task-fit recommendation, not measured independent rank"
       },
       "cheap": {
-        "model": "openai/gpt-5.6-luna",
-        "in": 0.2,
-        "out": 1.2,
-        "released": "2026-07-09",
-        "rank": "AA 51 · Coding 74.6 — beats most last-gen mid-tier",
-        "source": "independent (AA)"
+        "model": "openai/gpt-6-luna",
+        "in": 0.1,
+        "out": 0.5,
+        "rank": "Focused high-volume tasks and small well-specified coding changes",
+        "source": "2026-10-04 provider documentation + live OpenRouter catalog; project task-fit recommendation, not measured independent rank"
       }
     },
     "codex": {
       "label": "Codex (OpenAI)",
       "detect_env": [],
       "aliasOf": "openai",
-      "note": "Codex folded into the GPT-5.6 Sol/Terra/Luna tiers on 2026-07-09 — there is NO separate '-codex' SKU this generation; gpt-5.3-codex (2026-02-05) was the last dedicated one and is superseded. A Codex shop's frontier IS Sol."
+      "note": "Alias of current OpenAI tier ladder; native availability checked through fresh Codex account catalog. Updating metadata does not switch active conversations."
     },
     "google": {
       "label": "Gemini (Google)",
@@ -95,15 +90,15 @@
         "in": 2,
         "out": 12,
         "released": "2026-02-19",
-        "rank": "AA Intelligence 46 — BELOW the Anthropic/OpenAI/xAI frontier cluster (54–60); still preview-named. Honest: Gemini is not frontier-competitive on independent indices right now.",
-        "source": "independent (AA) — vendor's GPQA-D 94.3% / ARC-AGI-2 77.1% are Google's own, uncorroborated"
+        "rank": "AA Intelligence 46 \u2014 BELOW the Anthropic/OpenAI/xAI frontier cluster (54\u201360); still preview-named. Honest: Gemini is not frontier-competitive on independent indices right now.",
+        "source": "independent (AA) \u2014 vendor's GPQA-D 94.3% / ARC-AGI-2 77.1% are Google's own, uncorroborated"
       },
       "mid": {
         "model": "google/gemini-3.5-flash",
         "in": 1.5,
         "out": 9,
         "released": "2026",
-        "rank": "AA 50 — out-scores Google's own 3.1 Pro on this index (real anomaly, not a typo)",
+        "rank": "AA 50 \u2014 out-scores Google's own 3.1 Pro on this index (real anomaly, not a typo)",
         "source": "independent (AA)"
       },
       "cheap": {
@@ -121,13 +116,13 @@
         "XAI_API_KEY",
         "GROK_API_KEY"
       ],
-      "note": "xAI's live lineup has no distinct budget SKU below Grok 4.3 as of 2026-07-15 (the 'grok-4.1-fast' I first wrote does not exist in the live catalog — the verify gate caught it). A Grok shop's cheap tasks route to Grok 4.3 or a cross-provider value pick.",
+      "note": "xAI's live lineup has no distinct budget SKU below Grok 4.3 as of 2026-07-15 (the 'grok-4.1-fast' I first wrote does not exist in the live catalog \u2014 the verify gate caught it). A Grok shop's cheap tasks route to Grok 4.3 or a cross-provider value pick.",
       "frontier": {
         "model": "x-ai/grok-4.5",
         "in": 2,
         "out": 6,
         "released": "2026-07-08",
-        "rank": "AA Intelligence 54 (#8) at ~1/3 Opus 4.7's blended price — the frontier VALUE standout; 'Opus-class, faster, cheaper' (Musk)",
+        "rank": "AA Intelligence 54 (#8) at ~1/3 Opus 4.7's blended price \u2014 the frontier VALUE standout; 'Opus-class, faster, cheaper' (Musk)",
         "source": "independent (AA)"
       },
       "mid": {
@@ -135,7 +130,7 @@
         "in": 1.25,
         "out": 2.5,
         "released": "2026-04-30",
-        "rank": "AA 38 — also xAI's cheapest verified stable tier",
+        "rank": "AA 38 \u2014 also xAI's cheapest verified stable tier",
         "source": "independent (AA)"
       }
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ruvnet-brain",
-  "version": "4.5.3",
+  "version": "4.5.5",
   "description": "One-command installer for RuvNet Brain \u2014 a portable, source-grounded brain over rUv's RuvNet building blocks, delivered as a Claude Code plugin so Claude uses the stack instead of fighting it.",
   "type": "module",
   "bin": {
@@ -40,6 +40,8 @@
     "test:all": "npm run test:unit && npm run test:mesh && npm run test:mutation && npm run test:regression && npm run test:integration && npm test",
     "metaharness:receipts": "node scripts/metaharness-receipts.mjs",
     "route:cheap": "node scripts/route-cheap.mjs",
+    "routing:eval": "node scripts/model-routing-eval.mjs",
+    "hooks:security-guidance:compat": "node scripts/security-guidance-codex-compat.mjs",
     "route:receipt": "node scripts/dispatch-receipt.mjs",
     "trismart": "node scripts/trismart.mjs",
     "metaharness:fix": "node scripts/fix-metaharness-memretrieve.mjs --apply",

package/plugin/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "ruvnet-brain",
   "description": "RuvNet brain transplant for Claude Code — grounds every RuvNet decision in real source across 77 rUv repositories, prefers Ruflo / RuVector-RVF / AgentDB over training-prior defaults (pgvector, Pinecone, hand-rolled cosine), and can pull in any RuvNet repo on demand. Ships a UserPromptSubmit retrieve-and-inject grounding hook and a PreToolUse write gate that refuses ungrounded rUv-product code until search_ruvnet has been consulted (ADR-0012 / ADR-067).",
-  "version": "4.5.3",
+  "version": "4.5.5",
   "author": {
     "name": "Stuart Kerr"
   },

package/plugin/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "ruvnet-brain",
-  "version": "4.5.3",
+  "version": "4.5.5",
   "description": "Source-grounded RuvNet knowledge, lifecycle enforcement, and learning for Codex.",
   "author": {
     "name": "Stuart Kerr"

package/plugin/hooks/codex-hooks.json

@@ -1,5 +1,5 @@
 {
-  "description": "RuvNet Brain continuity plane for Codex. Broad legacy automatic gates remain retired. Registrations here are MEASURED, not assumed: a probe hook was registered on all twelve event names the installed codex-cli 0.154.0 binary declares and a real `codex exec` run was observed (2026-09-11). SessionStart, UserPromptSubmit and SessionEnd FIRED and carry handlers. Stop keeps the pre-existing, project-scoped continuation gate; session-snapshot was added at Stop on 2026-09-29 to record each turn's outcome (turn-outcome-capture.mjs) — Codex SessionEnd carries no last_assistant_message, so Stop is the only boundary that can. Its delivery rests on codex-cli 0.158.0's declared stop.command.input schema and the other Codex Stop handlers; it has NOT been live-observed and fails open. PreCompact is DECLARED ABSENT here: the binary declares the event but the probe never observed it, and a capture registered on an unobserved event would look symmetrical while capturing nothing. All handlers are bounded and fail open. Amended 2026-09-11: UserPromptSubmit also runs ground-ruvnet (grounding injection, ADR-040 §Amendment). Amended 2026-09-12: the 2026-09-11 PreToolUse/PostToolUse \"not observed\" note was measured with a prompt (`codex exec \"reply OK\"`) that never invoked a tool, so neither event had anything to fire on — that was an untested path, not a failing one. Re-probed with prompts that actually call a tool: a real apply_patch write fired PreToolUse/PostToolUse with tool_name \"apply_patch\", and a real MCP call to this repo's own search_ruvnet server fired both with tool_name \"mcp__ruvnet_brain__search_ruvnet\". Both are now registered below: decision-gate's write route (matcher includes apply_patch, Codex's raw write-tool name) and grounding-stamp (unchanged matcher already recognizes the mcp__..__search_ruvnet shape). The bash route (exec_command) remains unregistered — today's measurement covered a write and an MCP call, not exec_command, and extending on that evidence would be the same unproven leap this note replaces. Also added 2026-09-12: grounding-turn-mark (UserPromptSubmit) and grounding-turn-gate (Stop), the \"answered without searching\" pair — a prompt-level grounding directive is advisory, so this records whether it fired and forces continuation at Stop if no search_ruvnet call was recorded since (reusing grounding-stamp's own stamp evidence). Both are registered on Codex identically to Claude: the Stop-block contract (hookSpecificOutput.additionalContext) already has a proven Codex translation via codex-hook-adapter.mjs's Stop branch (see tests/unit/codex-lifecycle-hooks.test.mjs), the same path continuation-gate already uses. Capacity-aware parallel-work guidance is also registered at UserPromptSubmit: it advises the coordinator to launch only real independent workers within sampled resource headroom and the live runtime/tool cap; it never spawns workers or claims execution.",
+  "description": "RuvNet Brain continuity plane for Codex. Broad legacy automatic gates remain retired. Registrations here are MEASURED, not assumed: a probe hook was registered on all twelve event names the installed codex-cli 0.154.0 binary declares and a real `codex exec` run was observed (2026-09-11). SessionStart, UserPromptSubmit and SessionEnd FIRED and carry handlers. Stop keeps the pre-existing, project-scoped continuation gate; session-snapshot was added at Stop on 2026-09-29 to record each turn's outcome (turn-outcome-capture.mjs) \u2014 Codex SessionEnd carries no last_assistant_message, so Stop is the only boundary that can. Its delivery rests on codex-cli 0.158.0's declared stop.command.input schema and the other Codex Stop handlers; it has NOT been live-observed and fails open. PreCompact is DECLARED ABSENT here: the binary declares the event but the probe never observed it, and a capture registered on an unobserved event would look symmetrical while capturing nothing. All handlers are bounded and fail open. Amended 2026-09-11: UserPromptSubmit also runs ground-ruvnet (grounding injection, ADR-040 \u00a7Amendment). Amended 2026-09-12: the 2026-09-11 PreToolUse/PostToolUse \"not observed\" note was measured with a prompt (`codex exec \"reply OK\"`) that never invoked a tool, so neither event had anything to fire on \u2014 that was an untested path, not a failing one. Re-probed with prompts that actually call a tool: a real apply_patch write fired PreToolUse/PostToolUse with tool_name \"apply_patch\", and a real MCP call to this repo's own search_ruvnet server fired both with tool_name \"mcp__ruvnet_brain__search_ruvnet\". Both are now registered below: decision-gate's write route (matcher includes apply_patch, Codex's raw write-tool name) and grounding-stamp (unchanged matcher already recognizes the mcp__..__search_ruvnet shape). The bash route (exec_command) remains unregistered \u2014 today's measurement covered a write and an MCP call, not exec_command, and extending on that evidence would be the same unproven leap this note replaces. Also added 2026-09-12: grounding-turn-mark (UserPromptSubmit) and grounding-turn-gate (Stop), the \"answered without searching\" pair \u2014 a prompt-level grounding directive is advisory, so this records whether it fired and forces continuation at Stop if no search_ruvnet call was recorded since (reusing grounding-stamp's own stamp evidence). Both are registered on Codex identically to Claude: the Stop-block contract (hookSpecificOutput.additionalContext) already has a proven Codex translation via codex-hook-adapter.mjs's Stop branch (see tests/unit/codex-lifecycle-hooks.test.mjs), the same path continuation-gate already uses. Capacity-aware parallel-work guidance is also registered at UserPromptSubmit: it advises the coordinator to launch only real independent workers within sampled resource headroom and the live runtime/tool cap; it never spawns workers or claims execution. Automatic normalized project observations are captured at prompt, pre-tool, post-tool and child completion; Claude also observes PostToolUseFailure. Pending and degraded memory are disclosed; this does not establish synchronous ADR-073 conformance or native Grok recall. SessionStart has an 8-second measured replay/restore envelope.",
   "hooks": {
     "SessionStart": [
       {
@@ -7,8 +7,8 @@
         "hooks": [
           {
             "type": "command",
-            "command": "node -e \"const f=require('node:fs'),o=require('node:os'),p=require('node:path'),c=require('node:child_process'),d=process.env.CODEX_HOME||p.join(o.homedir(),'.codex'),b=process.env.RUVNET_BRAIN_HOME||p.join(p.dirname(d),'.cache','ruvnet-brain'),w=p.join(b,'codex-hook.mjs');let s;try{s=f.statSync(w)}catch{}if(!s?.isFile())process.exit(0);const r=c.spawnSync(process.execPath,[w,...process.argv.slice(2)],{stdio:['inherit','pipe','pipe'],encoding:'utf8',env:process.env,timeout:Number(process.argv[1]),killSignal:'SIGKILL'});if(r.status===0||r.status===2){if(r.stdout)process.stdout.write(r.stdout);if(r.stderr)process.stderr.write(r.stderr)}process.exit(r.status===2?2:0)\" 4500 session-start",
-            "timeout": 5
+            "command": "node -e \"const f=require('node:fs'),o=require('node:os'),p=require('node:path'),c=require('node:child_process'),d=process.env.CODEX_HOME||p.join(o.homedir(),'.codex'),b=process.env.RUVNET_BRAIN_HOME||p.join(p.dirname(d),'.cache','ruvnet-brain'),w=p.join(b,'codex-hook.mjs');let s;try{s=f.statSync(w)}catch{}if(!s?.isFile())process.exit(0);const r=c.spawnSync(process.execPath,[w,...process.argv.slice(2)],{stdio:['inherit','pipe','pipe'],encoding:'utf8',env:process.env,timeout:Number(process.argv[1]),killSignal:'SIGKILL'});if(r.status===0||r.status===2){if(r.stdout)process.stdout.write(r.stdout);if(r.stderr)process.stderr.write(r.stderr)}process.exit(r.status===2?2:0)\" 7500 session-start",
+            "timeout": 8
           }
         ]
       }
@@ -36,6 +36,16 @@
       }
     ],
     "PreToolUse": [
+      {
+        "matcher": "*",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node -e \"const f=require('node:fs'),o=require('node:os'),p=require('node:path'),c=require('node:child_process'),d=process.env.CODEX_HOME||p.join(o.homedir(),'.codex'),b=process.env.RUVNET_BRAIN_HOME||p.join(p.dirname(d),'.cache','ruvnet-brain'),w=p.join(b,'codex-hook.mjs');let s;try{s=f.statSync(w)}catch{}if(!s?.isFile())process.exit(0);const r=c.spawnSync(process.execPath,[w,...process.argv.slice(2)],{stdio:['inherit','pipe','pipe'],encoding:'utf8',env:process.env,timeout:Number(process.argv[1]),killSignal:'SIGKILL'});if(r.status===0||r.status===2){if(r.stdout)process.stdout.write(r.stdout);if(r.stderr)process.stderr.write(r.stderr)}process.exit(r.status===2?2:0)\" 9000 session-snapshot PreToolUse",
+            "timeout": 10
+          }
+        ]
+      },
       {
         "matcher": "^(Write|Edit|MultiEdit|NotebookEdit|apply_patch)$",
         "hooks": [
@@ -48,6 +58,16 @@
       }
     ],
     "PostToolUse": [
+      {
+        "matcher": "*",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node -e \"const f=require('node:fs'),o=require('node:os'),p=require('node:path'),c=require('node:child_process'),d=process.env.CODEX_HOME||p.join(o.homedir(),'.codex'),b=process.env.RUVNET_BRAIN_HOME||p.join(p.dirname(d),'.cache','ruvnet-brain'),w=p.join(b,'codex-hook.mjs');let s;try{s=f.statSync(w)}catch{}if(!s?.isFile())process.exit(0);const r=c.spawnSync(process.execPath,[w,...process.argv.slice(2)],{stdio:['inherit','pipe','pipe'],encoding:'utf8',env:process.env,timeout:Number(process.argv[1]),killSignal:'SIGKILL'});if(r.status===0||r.status===2){if(r.stdout)process.stdout.write(r.stdout);if(r.stderr)process.stderr.write(r.stderr)}process.exit(r.status===2?2:0)\" 9000 session-snapshot PostToolUse",
+            "timeout": 10
+          }
+        ]
+      },
       {
         "matcher": "^(?:.*__)?search_ruvnet$",
         "hooks": [
@@ -63,6 +83,11 @@
       {
         "matcher": "*",
         "hooks": [
+          {
+            "type": "command",
+            "command": "node -e \"const f=require('node:fs'),o=require('node:os'),p=require('node:path'),c=require('node:child_process'),d=process.env.CODEX_HOME||p.join(o.homedir(),'.codex'),b=process.env.RUVNET_BRAIN_HOME||p.join(p.dirname(d),'.cache','ruvnet-brain'),w=p.join(b,'codex-hook.mjs');let s;try{s=f.statSync(w)}catch{}if(!s?.isFile())process.exit(0);const r=c.spawnSync(process.execPath,[w,...process.argv.slice(2)],{stdio:['inherit','pipe','pipe'],encoding:'utf8',env:process.env,timeout:Number(process.argv[1]),killSignal:'SIGKILL'});if(r.status===0||r.status===2){if(r.stdout)process.stdout.write(r.stdout);if(r.stderr)process.stderr.write(r.stderr)}process.exit(r.status===2?2:0)\" 9000 session-snapshot UserPromptSubmit",
+            "timeout": 10
+          },
           {
             "type": "command",
             "command": "node -e \"const f=require('node:fs'),o=require('node:os'),p=require('node:path'),c=require('node:child_process'),d=process.env.CODEX_HOME||p.join(o.homedir(),'.codex'),b=process.env.RUVNET_BRAIN_HOME||p.join(p.dirname(d),'.cache','ruvnet-brain'),w=p.join(b,'codex-hook.mjs');let s;try{s=f.statSync(w)}catch{}if(!s?.isFile())process.exit(0);const r=c.spawnSync(process.execPath,[w,...process.argv.slice(2)],{stdio:['inherit','pipe','pipe'],encoding:'utf8',env:process.env,timeout:Number(process.argv[1]),killSignal:'SIGKILL'});if(r.status===0||r.status===2){if(r.stdout)process.stdout.write(r.stdout);if(r.stderr)process.stderr.write(r.stderr)}process.exit(r.status===2?2:0)\" 9000 unprompted-speech UserPromptSubmit",
@@ -97,6 +122,18 @@
           }
         ]
       }
+    ],
+    "SubagentStop": [
+      {
+        "matcher": "*",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node -e \"const f=require('node:fs'),o=require('node:os'),p=require('node:path'),c=require('node:child_process'),d=process.env.CODEX_HOME||p.join(o.homedir(),'.codex'),b=process.env.RUVNET_BRAIN_HOME||p.join(p.dirname(d),'.cache','ruvnet-brain'),w=p.join(b,'codex-hook.mjs');let s;try{s=f.statSync(w)}catch{}if(!s?.isFile())process.exit(0);const r=c.spawnSync(process.execPath,[w,...process.argv.slice(2)],{stdio:['inherit','pipe','pipe'],encoding:'utf8',env:process.env,timeout:Number(process.argv[1]),killSignal:'SIGKILL'});if(r.status===0||r.status===2){if(r.stdout)process.stdout.write(r.stdout);if(r.stderr)process.stderr.write(r.stderr)}process.exit(r.status===2?2:0)\" 9000 session-snapshot SubagentStop",
+            "timeout": 10
+          }
+        ]
+      }
     ]
   }
 }