ruvnet-brain 4.7.13 → 4.7.15

package/README.md

@@ -9,7 +9,7 @@ Created: 2026-06-29 22:36:38 EDT
 
 ### Discover the stack. Read the source. Build with confidence.
 
-[![RuvNet Brain version 4.6.2 — README updated 2026-10-10 EDT](https://img.shields.io/badge/version_4.7.13-updated_2026--10--10_EDT-1E90FF?style=for-the-badge&labelColor=0757BA)](plugin/.claude-plugin/plugin.json)
+[![RuvNet Brain version 4.6.2 — README updated 2026-10-10 EDT](https://img.shields.io/badge/version_4.7.15-updated_2026--10--10_EDT-1E90FF?style=for-the-badge&labelColor=0757BA)](plugin/.claude-plugin/plugin.json)
 
 **A source-grounded companion for Claude Code and Codex that helps you find and use Reuven Cohen's (rUv's) RuvNet ecosystem.**
 
@@ -255,7 +255,7 @@ uses the protected release workflow; a consumer update downloads an available ge
 does not rebuild upstream knowledge. Check `--doctor`, `SOURCE.json` and refresh receipts
 before treating an installation as current.
 
-The **4.6.0 published-corpus baseline** is **203 public stores · 164,401 public source chunks**.
+The **4.6.0 published-corpus baseline** is **203 public stores · 164,668 public source chunks**.
 Those are bundle census values, not a claim that every upstream repository is fresh today.
 Later corpus publication may advance the knowledge generation independently of code changes.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ruvnet-brain",
-  "version": "4.7.13",
+  "version": "4.7.15",
   "description": "One-command installer for RuvNet Brain — a portable, source-grounded brain over rUv's RuvNet building blocks, delivered as a Claude Code plugin so Claude uses the stack instead of fighting it.",
   "type": "module",
   "bin": {

package/plugin/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "ruvnet-brain",
   "description": "RuvNet brain transplant for Claude Code — grounds every RuvNet decision in real source across 77 rUv repositories, prefers Ruflo / RuVector-RVF / AgentDB over training-prior defaults (pgvector, Pinecone, hand-rolled cosine), and can pull in any RuvNet repo on demand. Ships a UserPromptSubmit retrieve-and-inject grounding hook and a PreToolUse write gate that refuses ungrounded rUv-product code until search_ruvnet has been consulted (ADR-0012 / ADR-067).",
-  "version": "4.7.13",
+  "version": "4.7.15",
   "author": {
     "name": "Stuart Kerr"
   },

package/plugin/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "ruvnet-brain",
-  "version": "4.7.13",
+  "version": "4.7.15",
   "description": "Source-grounded RuvNet knowledge, lifecycle enforcement, and learning for Codex.",
   "author": {
     "name": "Stuart Kerr"

package/plugin/scripts/developer-update.mjs

@@ -286,7 +286,7 @@ export async function synchronizePlugins(run, dryRun, notes, { home, prefix, sco
   if (JSON.stringify(flags) !== JSON.stringify(pluginFlags(writable, home))) throw Error('Codex plugin enablement changed');
   return { before, after, steps, provider };
 }
-function knowledge(run, dryRun, runId, { brainHome, root, node }) {
+export function knowledge(run, dryRun, runId, { brainHome, root, node }) {
   const kb = path.join(brainHome, 'kb'), updater = path.join(kb, 'forge-update.mjs');
   if (!exists(updater)) throw Error('existing Brain KB updater absent; fresh install refused');
   const file = path.join(brainHome, `nightly-suite-corpus-${runId}.json`);
@@ -299,7 +299,10 @@ function knowledge(run, dryRun, runId, { brainHome, root, node }) {
   }
   const before = check();
   if (before.currencyVerdict === 'CURRENT' || before.currencyVerdict === 'REFUSED') return { before, after: before, state: before.currencyVerdict === 'CURRENT' ? 'current' : 'ahead-preserved' };
-  if (before.currencyVerdict !== 'UPDATE_AVAILABLE') throw Error(`corpus currency unverified: ${before.currencyVerdict}`);
+  // UNKNOWN is what a tree installed from a code release reports (no corpus generation stamp): forge-update
+  // documents it as apply-allowed, exactly like UPDATE_AVAILABLE, and the check after the apply must reach
+  // CURRENT or REFUSED. Throwing here failed every scheduled night until someone ran --update by hand.
+  if (before.currencyVerdict !== 'UPDATE_AVAILABLE' && before.currencyVerdict !== 'UNKNOWN') throw Error(`corpus currency unverified: ${before.currencyVerdict}`);
   if (dryRun) return { before, state: 'update-available' };
   const installer = path.join(root, 'ruvnet-brain/bin/install.mjs');
   if (!exists(installer)) throw Error('existing Brain installer absent');

package/scripts/corpus-canary.mjs

@@ -315,10 +315,28 @@ function runUpdater({ kbDir, env, resultFile }) {
   });
 }
 
-async function fetchRelease({ apiBase, repo, tag }) {
-  const response = await fetch(candidateManifestUrl({ apiBase, repo, tag }), { headers: { accept: 'application/vnd.github+json' } });
-  if (!response.ok) throw new Error(`release ${tag} returned HTTP ${response.status}`);
-  return response.json();
+// An anonymous GitHub API read from a shared runner address is sometimes refused (403/429) or fails (5xx)
+// for a moment; one such blip must not fail the night. The same call is retried after a short wait.
+const TRANSIENT_HTTP = new Set([403, 429, 500, 502, 503, 504]);
+async function fetchJson(url, what, { retryDelayMs = 15_000, maxAttempts = 4 } = {}) {
+  for (let attempt = 1; ; attempt += 1) {
+    let status = null;
+    try {
+      const response = await fetch(url, { headers: { accept: 'application/vnd.github+json' } });
+      if (response.ok) return await response.json();
+      status = response.status;
+      if (!TRANSIENT_HTTP.has(status)) throw new Error(`${what} returned HTTP ${status}`);
+    } catch (error) {
+      if (status !== null && !TRANSIENT_HTTP.has(status)) throw error;
+      if (status === null && attempt >= maxAttempts) throw error;
+    }
+    if (attempt >= maxAttempts) throw new Error(`${what} returned HTTP ${status}`);
+    await new Promise((resolve) => setTimeout(resolve, retryDelayMs * attempt));
+  }
+}
+
+async function fetchRelease({ apiBase, repo, tag, retryDelayMs }) {
+  return fetchJson(candidateManifestUrl({ apiBase, repo, tag }), `release ${tag}`, { retryDelayMs });
 }
 
 /**
@@ -340,10 +358,8 @@ export const CANARY_CASES = Object.freeze({
   'older-runtime': Object.freeze({ runtime: 'N-1', door: 'installer', overlay: false }),
 });
 
-async function fetchReleaseList({ apiBase, repo }) {
-  const response = await fetch(`${apiBase}/repos/${repo}/releases?per_page=100`, { headers: { accept: 'application/vnd.github+json' } });
-  if (!response.ok) throw new Error(`release list returned HTTP ${response.status}`);
-  return response.json();
+async function fetchReleaseList({ apiBase, repo, retryDelayMs }) {
+  return fetchJson(`${apiBase}/repos/${repo}/releases?per_page=100`, 'release list', { retryDelayMs });
 }
 
 /** The footprint of a customer HOME after one update (plugin/scripts/brain-footprint.mjs, never restated). */
@@ -372,7 +388,7 @@ async function runCase({ name, spec, repo, tag, approvedVersion, release, work,
   retryDelayMs, maxAttempts, log, writerRoot, approvedInstaller, footprintUpdates = false }) {
   fs.mkdirSync(home, { recursive: true });
   let runtime = approvedVersion;
-  if (spec.runtime !== 'approved') runtime = resolveRuntime(spec.runtime, { candidateTag: `v${approvedVersion}`, releases: await fetchReleaseList({ apiBase, repo }) });
+  if (spec.runtime !== 'approved') runtime = resolveRuntime(spec.runtime, { candidateTag: `v${approvedVersion}`, releases: await fetchReleaseList({ apiBase, repo, retryDelayMs }) });
   const installed = await install({ approvedVersion: runtime, work, home, log });
   const { kbDir } = installed;
   home = installed.home || home;
@@ -465,7 +481,7 @@ export async function runCanary({
     throw new Error(`--cases must start with clean and name only: ${Object.keys(CANARY_CASES).join(', ')}`);
   }
   const started = now();
-  const release = await fetchRelease({ apiBase, repo, tag });
+  const release = await fetchRelease({ apiBase, repo, tag, retryDelayMs });
   // The approved package's installer — what `npx ruvnet-brain@latest` runs — fetched once, on demand.
   let installerPath = null;
   const resolveInstaller = approvedInstaller || (async () => {