ruvnet-brain 4.7.12 → 4.7.14

package/README.md

@@ -9,7 +9,7 @@ Created: 2026-06-29 22:36:38 EDT
 
 ### Discover the stack. Read the source. Build with confidence.
 
-[![RuvNet Brain version 4.6.2 — README updated 2026-10-10 EDT](https://img.shields.io/badge/version_4.7.12-updated_2026--10--10_EDT-1E90FF?style=for-the-badge&labelColor=0757BA)](plugin/.claude-plugin/plugin.json)
+[![RuvNet Brain version 4.6.2 — README updated 2026-10-10 EDT](https://img.shields.io/badge/version_4.7.14-updated_2026--10--10_EDT-1E90FF?style=for-the-badge&labelColor=0757BA)](plugin/.claude-plugin/plugin.json)
 
 **A source-grounded companion for Claude Code and Codex that helps you find and use Reuven Cohen's (rUv's) RuvNet ecosystem.**
 
@@ -255,7 +255,7 @@ uses the protected release workflow; a consumer update downloads an available ge
 does not rebuild upstream knowledge. Check `--doctor`, `SOURCE.json` and refresh receipts
 before treating an installation as current.
 
-The **4.6.0 published-corpus baseline** is **203 public stores · 164,393 public source chunks**.
+The **4.6.0 published-corpus baseline** is **203 public stores · 164,402 public source chunks**.
 Those are bundle census values, not a claim that every upstream repository is fresh today.
 Later corpus publication may advance the knowledge generation independently of code changes.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ruvnet-brain",
-  "version": "4.7.12",
+  "version": "4.7.14",
   "description": "One-command installer for RuvNet Brain — a portable, source-grounded brain over rUv's RuvNet building blocks, delivered as a Claude Code plugin so Claude uses the stack instead of fighting it.",
   "type": "module",
   "bin": {

package/plugin/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "ruvnet-brain",
   "description": "RuvNet brain transplant for Claude Code — grounds every RuvNet decision in real source across 77 rUv repositories, prefers Ruflo / RuVector-RVF / AgentDB over training-prior defaults (pgvector, Pinecone, hand-rolled cosine), and can pull in any RuvNet repo on demand. Ships a UserPromptSubmit retrieve-and-inject grounding hook and a PreToolUse write gate that refuses ungrounded rUv-product code until search_ruvnet has been consulted (ADR-0012 / ADR-067).",
-  "version": "4.7.12",
+  "version": "4.7.14",
   "author": {
     "name": "Stuart Kerr"
   },

package/plugin/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "ruvnet-brain",
-  "version": "4.7.12",
+  "version": "4.7.14",
   "description": "Source-grounded RuvNet knowledge, lifecycle enforcement, and learning for Codex.",
   "author": {
     "name": "Stuart Kerr"

package/plugin/scripts/ruflo-bin.mjs

@@ -67,6 +67,27 @@ function defaultNodeCandidates(env) {
   return [...new Set(out)].filter((c) => { try { return fs.statSync(c).isFile(); } catch { return false; } });
 }
 
+// Where ruflo's native better-sqlite3 lives depends on the ruflo release. Measured 2026-10-17 with npm -g: ruflo
+// 3.56.10 hoisted nothing (copies nested under @claude-flow/cli, @claude-flow/memory and agentdb), so probing only
+// <ruflo>/node_modules/better-sqlite3 found nothing and node selection silently never ran; ruflo 3.57.0 hoists it.
+// We probe the hoisted copy first, so a machine that has one behaves exactly as before, then the nested layouts.
+// Every candidate is a fixed path under ruflo's own realpath. Copies can differ in version (3.57.0: hoisted 12.11.1,
+// agentdb's nested 11.10.0), so the probed copy is a proxy for the one the writer loads, not proof of it.
+const ADDON_DIRS = [
+  ['node_modules', 'better-sqlite3'],
+  ['node_modules', '@claude-flow', 'cli', 'node_modules', 'better-sqlite3'],
+  ['node_modules', '@claude-flow', 'memory', 'node_modules', 'better-sqlite3'],
+  ['node_modules', 'agentdb', 'node_modules', 'better-sqlite3'],
+];
+
+function findAddon(packageRoot) {
+  for (const parts of ADDON_DIRS) {
+    const dir = path.join(packageRoot, ...parts);
+    try { if (fs.statSync(dir).isDirectory()) return dir; } catch { /* try the next layout */ }
+  }
+  return null;
+}
+
 const nativeNodeCache = new Map();
 const PROBE_TIMEOUT_MS = 2000;
 const PROBE_BUDGET_MS = 3000;
@@ -91,8 +112,8 @@ export function rufloInvocationOrPlain(binary, args, opts) {
 export function nativeNodeFor(binary, { env = process.env, candidates } = {}) {
   let entry;
   try { entry = fs.realpathSync(binary); } catch { return null; }
-  const addon = path.join(path.dirname(path.dirname(entry)), 'node_modules', 'better-sqlite3');
-  try { if (!fs.statSync(addon).isDirectory()) return null; } catch { return null; }
+  const addon = findAddon(path.dirname(path.dirname(entry)));
+  if (!addon) return null;
 
   const list = candidates ?? defaultNodeCandidates(env);
   const cacheKey = `${entry}\0${list.join('\0')}`;

package/scripts/corpus-canary.mjs

@@ -315,10 +315,28 @@ function runUpdater({ kbDir, env, resultFile }) {
   });
 }
 
-async function fetchRelease({ apiBase, repo, tag }) {
-  const response = await fetch(candidateManifestUrl({ apiBase, repo, tag }), { headers: { accept: 'application/vnd.github+json' } });
-  if (!response.ok) throw new Error(`release ${tag} returned HTTP ${response.status}`);
-  return response.json();
+// An anonymous GitHub API read from a shared runner address is sometimes refused (403/429) or fails (5xx)
+// for a moment; one such blip must not fail the night. The same call is retried after a short wait.
+const TRANSIENT_HTTP = new Set([403, 429, 500, 502, 503, 504]);
+async function fetchJson(url, what, { retryDelayMs = 15_000, maxAttempts = 4 } = {}) {
+  for (let attempt = 1; ; attempt += 1) {
+    let status = null;
+    try {
+      const response = await fetch(url, { headers: { accept: 'application/vnd.github+json' } });
+      if (response.ok) return await response.json();
+      status = response.status;
+      if (!TRANSIENT_HTTP.has(status)) throw new Error(`${what} returned HTTP ${status}`);
+    } catch (error) {
+      if (status !== null && !TRANSIENT_HTTP.has(status)) throw error;
+      if (status === null && attempt >= maxAttempts) throw error;
+    }
+    if (attempt >= maxAttempts) throw new Error(`${what} returned HTTP ${status}`);
+    await new Promise((resolve) => setTimeout(resolve, retryDelayMs * attempt));
+  }
+}
+
+async function fetchRelease({ apiBase, repo, tag, retryDelayMs }) {
+  return fetchJson(candidateManifestUrl({ apiBase, repo, tag }), `release ${tag}`, { retryDelayMs });
 }
 
 /**
@@ -340,10 +358,8 @@ export const CANARY_CASES = Object.freeze({
   'older-runtime': Object.freeze({ runtime: 'N-1', door: 'installer', overlay: false }),
 });
 
-async function fetchReleaseList({ apiBase, repo }) {
-  const response = await fetch(`${apiBase}/repos/${repo}/releases?per_page=100`, { headers: { accept: 'application/vnd.github+json' } });
-  if (!response.ok) throw new Error(`release list returned HTTP ${response.status}`);
-  return response.json();
+async function fetchReleaseList({ apiBase, repo, retryDelayMs }) {
+  return fetchJson(`${apiBase}/repos/${repo}/releases?per_page=100`, 'release list', { retryDelayMs });
 }
 
 /** The footprint of a customer HOME after one update (plugin/scripts/brain-footprint.mjs, never restated). */
@@ -372,7 +388,7 @@ async function runCase({ name, spec, repo, tag, approvedVersion, release, work,
   retryDelayMs, maxAttempts, log, writerRoot, approvedInstaller, footprintUpdates = false }) {
   fs.mkdirSync(home, { recursive: true });
   let runtime = approvedVersion;
-  if (spec.runtime !== 'approved') runtime = resolveRuntime(spec.runtime, { candidateTag: `v${approvedVersion}`, releases: await fetchReleaseList({ apiBase, repo }) });
+  if (spec.runtime !== 'approved') runtime = resolveRuntime(spec.runtime, { candidateTag: `v${approvedVersion}`, releases: await fetchReleaseList({ apiBase, repo, retryDelayMs }) });
   const installed = await install({ approvedVersion: runtime, work, home, log });
   const { kbDir } = installed;
   home = installed.home || home;
@@ -465,7 +481,7 @@ export async function runCanary({
     throw new Error(`--cases must start with clean and name only: ${Object.keys(CANARY_CASES).join(', ')}`);
   }
   const started = now();
-  const release = await fetchRelease({ apiBase, repo, tag });
+  const release = await fetchRelease({ apiBase, repo, tag, retryDelayMs });
   // The approved package's installer — what `npx ruvnet-brain@latest` runs — fetched once, on demand.
   let installerPath = null;
   const resolveInstaller = approvedInstaller || (async () => {