ruvnet-brain 4.7.8 → 4.7.10

package/README.md

@@ -9,7 +9,7 @@ Created: 2026-06-29 22:36:38 EDT
 
 ### Discover the stack. Read the source. Build with confidence.
 
-[![RuvNet Brain version 4.6.2 — README updated 2026-10-10 EDT](https://img.shields.io/badge/version_4.7.8-updated_2026--10--10_EDT-1E90FF?style=for-the-badge&labelColor=0757BA)](plugin/.claude-plugin/plugin.json)
+[![RuvNet Brain version 4.6.2 — README updated 2026-10-10 EDT](https://img.shields.io/badge/version_4.7.10-updated_2026--10--10_EDT-1E90FF?style=for-the-badge&labelColor=0757BA)](plugin/.claude-plugin/plugin.json)
 
 **A source-grounded companion for Claude Code and Codex that helps you find and use Reuven Cohen's (rUv's) RuvNet ecosystem.**
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ruvnet-brain",
-  "version": "4.7.8",
+  "version": "4.7.10",
   "description": "One-command installer for RuvNet Brain — a portable, source-grounded brain over rUv's RuvNet building blocks, delivered as a Claude Code plugin so Claude uses the stack instead of fighting it.",
   "type": "module",
   "bin": {

package/plugin/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "ruvnet-brain",
   "description": "RuvNet brain transplant for Claude Code — grounds every RuvNet decision in real source across 77 rUv repositories, prefers Ruflo / RuVector-RVF / AgentDB over training-prior defaults (pgvector, Pinecone, hand-rolled cosine), and can pull in any RuvNet repo on demand. Ships a UserPromptSubmit retrieve-and-inject grounding hook and a PreToolUse write gate that refuses ungrounded rUv-product code until search_ruvnet has been consulted (ADR-0012 / ADR-067).",
-  "version": "4.7.8",
+  "version": "4.7.10",
   "author": {
     "name": "Stuart Kerr"
   },

package/plugin/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "ruvnet-brain",
-  "version": "4.7.8",
+  "version": "4.7.10",
   "description": "Source-grounded RuvNet knowledge, lifecycle enforcement, and learning for Codex.",
   "author": {
     "name": "Stuart Kerr"

package/plugin/scripts/continuation-gate.mjs

@@ -709,7 +709,9 @@ function securityAlertWork() {
 }
 
 const observations = [...artifactOpenWork(), ...redCiOpenWork(), ...openPrWork(), ...securityAlertWork()];
-if (observations.length) console.error(JSON.stringify({ kind: 'continuation-advisory',
+// Quiet by default (2026-10-15): an observed open issue/PR/CI row is information the user can read on GitHub;
+// printing it on every Stop turned an advisory into per-turn noise. RUVNET_STOP_NUDGES=full restores it.
+if (observations.length && STOP_NUDGES_FULL) console.error(JSON.stringify({ kind: 'continuation-advisory',
   authority: false, items: observations.map(({ text, at }) => ({ text, at })) }));
 // ONE correction per turn: a single item however many claims the answer made; the stop_hook_active
 // exit and the cooldown lock below bound it to one request per stop episode.

package/plugin/scripts/developer-update-lock.mjs

@@ -16,7 +16,20 @@ export function sharedLockStatus({ brainHome, alive = pid => { try { process.kil
 export function acquireDeveloperLock({ brainHome, token = process.env.RUVNET_DEVELOPER_UPDATE_TOKEN, pid = process.pid, alive } = {}) {
   const status = sharedLockStatus({ brainHome, alive });
   if (token && status.state === 'running' && status.owner.token === token) return { token, ownerPid: status.owner.pid, inherited: true, release() {} };
-  if (status.state !== 'idle') throw Error(`developer update lock ${status.state}; ${status.directory}`);
+  // A dead owner's lock (dead for 10+ minutes) must not wedge every future update (measured 2026-10-15: a coordinator killed mid-run
+  // left `stale` behind and the automatic updater refused with "developer update lock stale" until a person
+  // removed the directory). Reclaim it: move the directory aside atomically (so two reclaimers cannot both
+  // win), then fall through to the normal atomic mkdir claim. Only a PROVABLY dead pid qualifies; a live,
+  // unknown or malformed lock still refuses.
+  const STALE_RECLAIM_MS = 10 * 60 * 1000;
+  const ageMs = status.state === 'stale' ? Date.now() - Date.parse(status.owner?.startedAt || '') : NaN;
+  if (status.state === 'stale' && Number.isFinite(ageMs) && ageMs >= STALE_RECLAIM_MS) {
+    const tomb = `${status.directory}.stale-${process.pid}-${Date.now()}`;
+    try { fs.renameSync(status.directory, tomb); fs.rmSync(tomb, { recursive: true, force: true }); }
+    catch { /* another reclaimer won, or the owner came back: re-read below */ }
+    const after = sharedLockStatus({ brainHome, alive });
+    if (after.state !== 'idle') throw Error(`developer update lock ${after.state}; ${after.directory}`);
+  } else if (status.state !== 'idle') throw Error(`developer update lock ${status.state}; ${status.directory}`);
   fs.mkdirSync(path.dirname(status.directory), { recursive: true });
   fs.mkdirSync(status.directory, { mode: 0o700 }); // atomic claim; racing owners get EEXIST
   const owner = { pid, token: crypto.randomUUID(), startedAt: new Date().toISOString() };

package/scripts/source-coverage.mjs

@@ -103,6 +103,22 @@ export function observeRepositories(owner, { gh = runGh } = {}) {
   return { rows: withDeltas, expected, pages };
 }
 
+// The row an external source reports once its upstream is gone: exactly what was last observed, so the
+// stored content classifies CURRENT, nothing is re-ingested, and the row says plainly it is no longer live.
+function goneExternalRow(source) {
+  const gone = source.ifGone;
+  if (!/^[0-9a-f]{40}$/i.test(String(gone.sourceCommit || ''))) {
+    throw new Error(`external source ${source.repository}: ifGone.sourceCommit must be the 40-hex commit last ingested`);
+  }
+  return {
+    name: source.repository.split('/')[1], fullName: source.repository, storeName: source.store,
+    url: `https://github.com/${source.repository}`, description: gone.description ?? null, homepageUrl: null,
+    isFork: false, upstreamIsFork: false, isArchived: false, isDisabled: false,
+    updatedAt: gone.updatedAt ?? null, pushedAt: gone.pushedAt ?? null, upstreamUnavailable: true,
+    defaultBranchRef: { name: gone.defaultBranch || 'HEAD', target: { oid: gone.sourceCommit, committedDate: gone.committedAt ?? null } },
+  };
+}
+
 export function observeExternalRepositories(sources, { gh = runGh } = {}) {
   const rows = [];
   const pages = [];
@@ -110,10 +126,23 @@ export function observeExternalRepositories(sources, { gh = runGh } = {}) {
     if (!source?.store || !/^[^/]+\/[^/]+$/.test(source?.repository || '')) {
       throw new Error('external source requires a store and owner/repository');
     }
-    const repo = JSON.parse(gh(['api', `repos/${source.repository}`]));
-    const commit = repo.default_branch
-      ? JSON.parse(gh(['api', `repos/${source.repository}/commits/${repo.default_branch}`]))
-      : null;
+    let repo;
+    let commit;
+    try {
+      repo = JSON.parse(gh(['api', `repos/${source.repository}`]));
+      commit = repo.default_branch
+        ? JSON.parse(gh(['api', `repos/${source.repository}/commits/${repo.default_branch}`]))
+        : null;
+    } catch (error) {
+      // An upstream that GitHub reports gone (404/410) must not stop every night for every customer.
+      // Only a source whose policy entry records `ifGone` (the commit it was last ingested at) may be
+      // carried; anything else -- 403, rate limit, a mistyped repository -- still fails the observation.
+      if (!source.ifGone || !/\(HTTP (404|410)\)/.test(String(error.message))) throw error;
+      process.stderr.write(`[source-coverage] external source ${source.repository} is gone upstream; carrying the last ingested content (${source.ifGone.sourceCommit})\n`);
+      rows.push(goneExternalRow(source));
+      pages.push({ repository: source.repository, responseDigest: digest({ gone: source.repository, ifGone: source.ifGone }), count: 1, terminal: true });
+      continue;
+    }
     const row = {
       databaseId: repo.id, name: repo.name, fullName: repo.full_name, storeName: source.store,
       url: repo.html_url, description: repo.description || null, homepageUrl: repo.homepage || null,
@@ -192,6 +221,7 @@ export function canonicalRepositoryRows(rows = []) {
     } }),
     isArchived: repo?.isArchived === true,
     isDisabled: repo?.isDisabled === true,
+    ...(repo?.upstreamUnavailable === true ? { upstreamUnavailable: true } : {}),
     diskUsage: repo?.diskUsage,
     updatedAt: repo?.updatedAt ?? null,
     pushedAt: repo?.pushedAt ?? null,
@@ -384,6 +414,7 @@ export function classifyRepository(repo, evidence, exclusion = null, outcome = n
     status = 'FAILED';
     reasons.push(outcome.integrity);
   }
+  if (repo.upstreamUnavailable === true) reasons.push(`upstream ${repo.fullName} is no longer reachable (HTTP 404/410); serving the content last ingested at ${upstreamSha}`);
   const record = {};
   if (disposed && outcome?.carry && status === 'STALE') record.carry = { ...outcome.carry };
   if (disposed && outcome?.failure && status === 'MISSING') record.failure = { ...outcome.failure };
@@ -396,6 +427,7 @@ export function classifyRepository(repo, evidence, exclusion = null, outcome = n
       capabilityCardPresent: evidence.cardPresent === true },
     disposition,
     archived: repo.isArchived === true,
+    ...(repo.upstreamUnavailable === true ? { upstreamUnavailable: true } : {}),
     ...(repo.forkDelta ? { forkDelta: { ...repo.forkDelta } } : {}),
     upstream: { sha: upstreamSha, committedAt: repo.defaultBranchRef?.target?.committedDate || null,
       pushedAt: repo.pushedAt, updatedAt: repo.updatedAt },