ruvnet-brain 4.7.7 → 4.7.9

package/README.md

@@ -9,7 +9,7 @@ Created: 2026-06-29 22:36:38 EDT
 
 ### Discover the stack. Read the source. Build with confidence.
 
-[![RuvNet Brain version 4.6.2 — README updated 2026-10-10 EDT](https://img.shields.io/badge/version_4.7.7-updated_2026--10--10_EDT-1E90FF?style=for-the-badge&labelColor=0757BA)](plugin/.claude-plugin/plugin.json)
+[![RuvNet Brain version 4.6.2 — README updated 2026-10-10 EDT](https://img.shields.io/badge/version_4.7.9-updated_2026--10--10_EDT-1E90FF?style=for-the-badge&labelColor=0757BA)](plugin/.claude-plugin/plugin.json)
 
 **A source-grounded companion for Claude Code and Codex that helps you find and use Reuven Cohen's (rUv's) RuvNet ecosystem.**
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ruvnet-brain",
-  "version": "4.7.7",
+  "version": "4.7.9",
   "description": "One-command installer for RuvNet Brain — a portable, source-grounded brain over rUv's RuvNet building blocks, delivered as a Claude Code plugin so Claude uses the stack instead of fighting it.",
   "type": "module",
   "bin": {

package/plugin/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "ruvnet-brain",
   "description": "RuvNet brain transplant for Claude Code — grounds every RuvNet decision in real source across 77 rUv repositories, prefers Ruflo / RuVector-RVF / AgentDB over training-prior defaults (pgvector, Pinecone, hand-rolled cosine), and can pull in any RuvNet repo on demand. Ships a UserPromptSubmit retrieve-and-inject grounding hook and a PreToolUse write gate that refuses ungrounded rUv-product code until search_ruvnet has been consulted (ADR-0012 / ADR-067).",
-  "version": "4.7.7",
+  "version": "4.7.9",
   "author": {
     "name": "Stuart Kerr"
   },

package/plugin/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "ruvnet-brain",
-  "version": "4.7.7",
+  "version": "4.7.9",
   "description": "Source-grounded RuvNet knowledge, lifecycle enforcement, and learning for Codex.",
   "author": {
     "name": "Stuart Kerr"

package/plugin/scripts/agentdb-recall.mjs

@@ -319,6 +319,18 @@ async function consequentialRecall({ prompt, root, store, bin, scratch, env, dea
       records: selected.map(({ category, namespace, key, storePath, valueDigest }) => ({ category, namespace, key, storePath, valueDigest })), authority: false } };
 }
 
+/**
+ * Quiet by default (2026-10-15): a recall that found nothing because it timed out or was unavailable says
+ * nothing — "Search timed out; no records verified" on every prompt under load is noise, not information.
+ * RUVNET_STOP_NUDGES=full keeps the honest status line.
+ */
+export function recallIsWorthSurfacing(r, env = process.env) {
+  if (!r?.block) return false;
+  if (String(env.RUVNET_STOP_NUDGES || '').toLowerCase() === 'full') return true;
+  if (Array.isArray(r.picks) && r.picks.length) return true;
+  return !/\b(timed[- ]out|unavailable)\b/i.test(String(r.outcome || r.status || r.block));
+}
+
 export async function recall({ prompt, projectDir = process.cwd(), env = process.env, deadlineMs, ruflo, scratch,
   binding = {}, signal, absoluteDeadline, consequential = false, enumerateKeys = enumerateCanonicalKeys } = {}) {
   const started = Date.now();
@@ -451,6 +463,7 @@ async function main() {
   const projectDir = typeof ev.cwd === 'string' && ev.cwd ? ev.cwd : process.cwd();
   const r = await recall({ prompt, projectDir, deadlineMs: Math.max(1, DEFAULT_DEADLINE_MS - (Date.now() - started)) });
   if (!r.block) return;
+  if (!recallIsWorthSurfacing(r)) return;
   const hash = crypto.createHash('sha256').update(r.block).digest('hex').slice(0, 12);
   // Hash only, never raw memory values, enters the per-session dedupe markers.
   process.stdout.write(`${hash}\n${r.block}\n`);

package/plugin/scripts/continuation-gate.mjs

@@ -709,7 +709,9 @@ function securityAlertWork() {
 }
 
 const observations = [...artifactOpenWork(), ...redCiOpenWork(), ...openPrWork(), ...securityAlertWork()];
-if (observations.length) console.error(JSON.stringify({ kind: 'continuation-advisory',
+// Quiet by default (2026-10-15): an observed open issue/PR/CI row is information the user can read on GitHub;
+// printing it on every Stop turned an advisory into per-turn noise. RUVNET_STOP_NUDGES=full restores it.
+if (observations.length && STOP_NUDGES_FULL) console.error(JSON.stringify({ kind: 'continuation-advisory',
   authority: false, items: observations.map(({ text, at }) => ({ text, at })) }));
 // ONE correction per turn: a single item however many claims the answer made; the stop_hook_active
 // exit and the cooldown lock below bound it to one request per stop episode.

package/plugin/scripts/decision-gate.mjs

@@ -31,6 +31,8 @@ import { append as appendOutcome, actionKey, recordRefusal, resolve as resolveOu
 // see a host-native spelling — the 4.4 measurement was a Grok write silently allowed. hook-input.mjs.
 import { normalizePayloadText } from './hook-input.mjs';
 
+const QUIET_FULL = String(process.env.RUVNET_STOP_NUDGES || '').toLowerCase() === 'full';
+
 const SCRIPTS_DIR = path.dirname(fileURLToPath(import.meta.url));
 const EVENT = process.argv[2] || '';
 
@@ -415,7 +417,10 @@ function reportBudget({ session, unconsulted, trace, started, budgetMs, refused
   try {
     appendOutcome({ kind: 'budget-exceeded', event: EVENT, session, unconsulted, elapsedMs: elapsed, budgetMs, ts: Date.now() });
   } catch { /* a ledger must never break a tool call */ }
-  process.stderr.write(
+  // Quiet by default (2026-10-15): the outcome is already in the ledger above. On an ALLOW, a stderr line only
+  // makes the host show a hook "error" for a decision that was made. It is kept when the action was refused
+  // and under RUVNET_STOP_NUDGES=full.
+  if (refused || QUIET_FULL) process.stderr.write(
     `[decision-gate] ${budgetMs}ms budget exhausted after ${elapsed}ms — ${refused ? 'REFUSED; UNCONSULTED' : 'ALLOWED WITHOUT CONSULTING'}: `
     + `${unconsulted.join(', ')}. These policies did not vote; ${refused ? 'another policy refused the action.' : 'this allow is a timeout, not a verdict.'}\n`,
   );
@@ -424,7 +429,7 @@ function reportBudget({ session, unconsulted, trace, started, budgetMs, refused
 function reportSelfSkipped({ session, selfSkipped }) {
   for (const r of selfSkipped) {
     try { appendOutcome({ kind: 'policy-skipped', event: EVENT, session, policy: r.id, reason: r.reason, ts: Date.now() }); } catch { /* a ledger must never break a tool call */ }
-    process.stderr.write(`[decision-gate] ${r.reason || `${r.id} skipped`} — ${r.id} did not vote; it supplied no authorization verdict.\n`);
+    if (QUIET_FULL) process.stderr.write(`[decision-gate] ${r.reason || `${r.id} skipped`} — ${r.id} did not vote; it supplied no authorization verdict.\n`);
   }
 }
 /**

package/plugin/scripts/developer-update-lock.mjs

@@ -16,7 +16,20 @@ export function sharedLockStatus({ brainHome, alive = pid => { try { process.kil
 export function acquireDeveloperLock({ brainHome, token = process.env.RUVNET_DEVELOPER_UPDATE_TOKEN, pid = process.pid, alive } = {}) {
   const status = sharedLockStatus({ brainHome, alive });
   if (token && status.state === 'running' && status.owner.token === token) return { token, ownerPid: status.owner.pid, inherited: true, release() {} };
-  if (status.state !== 'idle') throw Error(`developer update lock ${status.state}; ${status.directory}`);
+  // A dead owner's lock (dead for 10+ minutes) must not wedge every future update (measured 2026-10-15: a coordinator killed mid-run
+  // left `stale` behind and the automatic updater refused with "developer update lock stale" until a person
+  // removed the directory). Reclaim it: move the directory aside atomically (so two reclaimers cannot both
+  // win), then fall through to the normal atomic mkdir claim. Only a PROVABLY dead pid qualifies; a live,
+  // unknown or malformed lock still refuses.
+  const STALE_RECLAIM_MS = 10 * 60 * 1000;
+  const ageMs = status.state === 'stale' ? Date.now() - Date.parse(status.owner?.startedAt || '') : NaN;
+  if (status.state === 'stale' && Number.isFinite(ageMs) && ageMs >= STALE_RECLAIM_MS) {
+    const tomb = `${status.directory}.stale-${process.pid}-${Date.now()}`;
+    try { fs.renameSync(status.directory, tomb); fs.rmSync(tomb, { recursive: true, force: true }); }
+    catch { /* another reclaimer won, or the owner came back: re-read below */ }
+    const after = sharedLockStatus({ brainHome, alive });
+    if (after.state !== 'idle') throw Error(`developer update lock ${after.state}; ${after.directory}`);
+  } else if (status.state !== 'idle') throw Error(`developer update lock ${status.state}; ${status.directory}`);
   fs.mkdirSync(path.dirname(status.directory), { recursive: true });
   fs.mkdirSync(status.directory, { mode: 0o700 }); // atomic claim; racing owners get EEXIST
   const owner = { pid, token: crypto.randomUUID(), startedAt: new Date().toISOString() };

package/plugin/scripts/hook-shim.mjs

@@ -209,6 +209,15 @@ if (!entry) {
 // forgets to declare one fails toward the pre-ADR-054 behaviour rather than toward silent death.
 if (BRAIN_OFF && entry.offBehavior === 'silence') process.exit(0);
 
+// QUIET BY DEFAULT (owner, 2026-10-15). These advisory hooks only ever add text to a turn (advocacy offers,
+// "ADRs are living plans", MetaHarness/QE offers, parallel-work sizing, the answered-without-searching
+// nudge). None of them blocks or protects anything, and together they were the constant noise on every
+// prompt. They stay registered and run only when RUVNET_STOP_NUDGES=full, so nothing is deleted and the
+// tests still exercise them. The blocking hooks (decision-gate), the grounding directive and the silent
+// capture hooks are unaffected.
+const QUIET_BY_DEFAULT = new Set(['unprompted-speech', 'capacity-aware-parallel-work', 'grounding-turn-gate']);
+if (QUIET_BY_DEFAULT.has(hookId) && String(process.env.RUVNET_STOP_NUDGES || '').toLowerCase() !== 'full') process.exit(0);
+
 // Read a bounded payload before dispatch. The ground body owns the quiet-prompt
 // decision because it resolves canonical memory beyond the hook process's cwd.
 let hookInput = null;