e332689b8c
fix(release): harden hooks, statusline, security, and plugin MCP integration
2026-07-16 23:06:29 -04:00
0024355145
darwin-plugins iter 3 — ruflo-rag-memory: replace remaining unverified HNSW perf table with measured audit numbers
2026-06-26 20:29:25 -04:00
1432cd642b
darwin-plugins iter 2 — ruflo-rag-memory: replace unverified 150x-12,500x HNSW claim with measured numbers from intelligence audit
2026-06-26 20:15:27 -04:00
07054168d1
darwin-plugins iter 1 — ruflo-rag-memory: replace unverified 150x-12,500x HNSW claim with measured numbers
2026-06-26 20:03:26 -04:00
26d69e504c
darwin: iter 22 advance — memory documentation (Quick Start + EXAMPLES.md)
...
Added comprehensive getting-started guide and usage examples for ruflo-rag-memory plugin to improve memoryUsefulness scoring dimension.
Changes:
- Quick Start section in README with practical CLI and agent examples
- EXAMPLES.md with 5+ real-world usage patterns across namespaces
- Integration examples for auto-memory bridge and cross-session recall
Aim: Increase memoryUsefulness score from 40 (lowest dimension).
Co-Authored-By: RuFlo <ruv@ruv.net >
2026-06-26 18:17:21 -04:00
6198abfab7
fix(plugins): reconcile stale smoke contract assertions across 23 plugins
...
full-system-test surfaced 23/32 plugin smoke contracts failing on a
single drifted assertion: the smoke gate greps ADR-0001 for
`status: Proposed`, but those ADRs were long since promoted to
`Accepted` without updating the gate. Flip the assertion (label, grep,
message) Proposed -> Accepted only where the ADR is genuinely Accepted.
ruflo-core additionally had a stale version assertion (0.2.0 -> 0.2.2).
Left untouched: ruflo-adr, ruflo-browser, ruflo-intelligence — their
ADR-0001 is genuinely Proposed, so their smokes correctly assert it.
No plugin source or ADR changed — only the drifted test assertions.
All 32 plugin smoke contracts now pass; full-system-test is 4/4 green.
Co-Authored-By: RuFlo <ruv@ruv.net >
2026-05-29 15:00:34 -04:00
02eee0bcdc
docs(adr): bulk-update plugin contract ADR statuses (sweep)
...
- 27 plugins moved Proposed → Accepted (shipped versions, in marketplace)
- 0 plugins kept as Proposed (all have real versions ≥ 0.2.0)
Per-plugin breakdown:
ruflo-aidefence v0.2.0 Accepted — 3-gate pattern, 6 aidefence_* tools
ruflo-autopilot v0.2.0 Accepted — 10 autopilot_* tools, /loop integration
ruflo-core v0.2.1 Accepted — MCP server contract, plugin-catalog discovery
ruflo-cost-tracker v0.16.1 Accepted — namespace-routing fix, ADR-097 budget integration
ruflo-daa v0.2.0 Accepted — 8 daa_* tools, intelligence-pipeline alignment
ruflo-ddd v0.2.0 Accepted — AgentDB domain graph, SPARC Architecture-phase
ruflo-docs v0.2.0 Accepted — document worker dispatch, drift detection
ruflo-federation v0.2.0 Accepted — ADR-097 Phase 1+2, 3-gate alignment
ruflo-goals v0.2.0 Accepted — 6 namespaces, GOAP + dossier ADR-099
ruflo-iot-cognitum v0.2.0 Accepted — 5-tier trust, 6 background workers
ruflo-jujutsu v0.2.0 Accepted — 6 analyze_* tools, ADR-compliance cross-link
ruflo-knowledge-graph v0.2.0 Accepted — embeddings_generate fix, pathfinder
ruflo-loop-workers v0.2.0 Accepted — 12 worker triggers, 5 hooks_worker-* tools
ruflo-market-data v0.2.0 Accepted — embeddings + namespace-routing bugs fixed
ruflo-migrations v0.2.0 Accepted — namespace-routing bug fixed both skills
ruflo-neural-trader v0.2.0 Accepted — 4 namespaces already compliant
ruflo-observability v0.2.0 Accepted — namespace-routing bug fixed both skills
ruflo-plugin-creator v0.2.0 Accepted — scaffolding templates updated with contract
ruflo-rag-memory v0.2.0 Accepted — claude-memories reserved namespace consumer
ruflo-ruvllm v0.2.0 Accepted — LLM-config + chat-format slice ownership
ruflo-rvf v0.2.0 Accepted — portable-memory + session-persistence slice
ruflo-security-audit v0.2.0 Accepted — 3-gate + audit_1776853149979 regression class
ruflo-sparc v0.2.0 Accepted — all 5 SPARC phases cross-linked
ruflo-swarm v0.2.0 Accepted — 12 MCP tools (4 swarm_* + 8 agent_*)
ruflo-testgen v0.2.0 Accepted — testgaps worker + coverage CLI commands
ruflo-wasm v0.2.0 Accepted — 10 wasm_* tools, ADR-070 cross-ref
ruflo-workflows v0.2.0 Accepted — 10 workflow_* tools, SPARC phase transitions
Each ADR received: updated: 2026-05-09 in frontmatter + Implementation status
section noting version, marketplace presence, and contract element alignment.
Co-Authored-By: RuFlo <ruv@ruv.net >
2026-05-09 15:10:42 -04:00
2b6cefd579
feat(ruflo-rag-memory): adopt plugin contract — claude-memories reserved-namespace consumer (ADR-0001)
...
Plugin already at v0.2.0 with 1 agent + 2 skills + 2 commands. The
contract pieces were missing, plus one stale "19 AgentDB controllers"
reference in the related-plugins block (same myth ruflo-agentdb ADR-0001
killed).
Notable: this plugin is the canonical user-facing consumer of the
reserved 'claude-memories' namespace. The auto-import flow:
Claude Code SessionStart → memory_import_claude (MCP) →
claude-memories namespace (ruflo-agentdb-owned) → memory-bridge skill +
memory_search_unified
ADR-0001 makes the consumer-of-reserved-namespace relationship explicit
so this plugin's writes don't accidentally drift into ownership.
- ADR-0001 (Proposed) at docs/adrs/0001-rag-memory-contract.md
- README adds Compatibility (pin v3.6), Namespace coordination block
(defers to ruflo-agentdb ADR-0001; documents the import flow),
Verification + Architecture Decisions
- README "19 AgentDB controllers" → "15 agentdb_* MCP tools; namespace
convention owner"
- plugin.json keywords add mcp, claude-memories, bridged-memory
(already at 0.2.0)
- scripts/smoke.sh — 10 structural checks: version + keywords, both
skills + agent + 2 commands present, v3.6 pin, namespace coordination,
claude-memories consumer doc'd, memory_search_unified referenced,
encryption-at-rest (ADR-096) block intact, ADR Proposed,
no '19 controllers' regression, no wildcard tools
Verification: bash plugins/ruflo-rag-memory/scripts/smoke.sh → 10/10
Co-Authored-By: RuFlo <ruv@ruv.net >
2026-05-04 20:30:48 -04:00
6130f4061c
feat(plugins): ADR-098 Part 1 (slice 2/4) — encryption-at-rest notes for memory plugins
...
Adds ADR-096 references to ruflo-rag-memory and ruflo-rvf — the two
plugins whose write surfaces (.swarm/memory.db and
.claude-flow/sessions/*.json) are now opt-in encrypted at rest.
ruflo-rag-memory/README.md:
New "Encryption at rest (ruflo 3.6.25+)" section before "Memory
Namespaces". Covers:
- Each .swarm/memory.db write encrypted with fresh 12-byte IV via
writeFileRestricted({encrypt:true})
- Reads use readFileMaybeEncrypted(path, null) — RFE1 magic-byte
sniff for backward compat (legacy plaintext memory.db still works)
- Embeddings encrypted along with the SQLite blob — no separate
column-level encryption needed for Phase 1
- Tamper detection: flipped byte fails GCM auth, throws on read
- ruflo doctor -c encryption reports gate state
ruflo-rvf/README.md:
New section between Features and Commands explaining session
persistence's relationship to the encryption gate:
- Off-by-default: plaintext JSON at mode 0600 (legacy behavior)
- On: AES-256-GCM session saves, transparent decrypt on restore
- Important caveat: when exporting RVF files for cross-machine
transfer, the gate doesn't apply to the exported bytes — that's
transport security, separate from at-rest. Sealed-box backups
are the next phase per ADR-096.
Plugin versions:
ruflo-rag-memory 0.1.0 → 0.2.0 (minor — capability sync)
ruflo-rvf 0.1.0 → 0.2.0 (minor — capability sync)
ADR-098 Part 1 progress: 2/4 slices done. Remaining:
- slice 3: ruflo-cost-tracker — federation budget breaker pairing,
federation_spend events
- slice 4: ruflo-agentdb + ruflo-knowledge-graph — G7 controllers
2026-05-03 22:05:33 -04:00
1405eab669
fix: rename plugin commands to avoid built-in conflicts; bump default Opus to 4.7 ( #1678 )
...
* chore: bump all packages to v3.6.11 — published to npm
SmartRetrieval integration + 4 bug fixes (#1604 , #1605 , #1606 , #1616 ).
Co-Authored-By: claude-flow <ruv@ruv.net >
* fix: rename plugin commands to avoid built-in conflicts; bump default Opus model
- Rename 9 plugin commands/skills whose bare names collided with built-in
Claude Code slash commands and skills (/doctor, /loop, /schedule, /browser,
/status, /cost, /memory, /docs, /sparc) to ruflo-* prefixed names
- Update ruflo init to default to claude-opus-4-7 (was 4.6) in
settings.json modelPreferences and statusline display
- Update statusline pkgVersion fallback 3.5 -> 3.6 to match published version
- Add plugin showcase GIF above Quick Start in README
Co-Authored-By: claude-flow <ruv@ruv.net >
---------
Co-authored-by: Reuven <cohen@ruv-mac-mini.local >
2026-04-30 10:56:47 -04:00
d663581497
feat: wire SmartRetrieval (ADR-090) into production memory pipeline
...
Integrates the 5-phase SmartRetrieval pipeline into production:
- Export smartSearch + types from @claude-flow/memory package index
- Add `smart` flag to memory_search MCP tool
- Add `--smart` / `-s` flag to CLI `memory search` command
- Update ruflo-rag-memory plugin skill and README
Pipeline: query expansion → RRF fusion → recency boost → MMR diversity → session round-robin.
11/11 tests pass, both packages build clean.
Co-authored-by: Reuven <cohen@ruv-mac-mini.local >
2026-04-30 00:24:52 -04:00
7ed18b8335
feat: upgrade neural-trader, ruvector, rag-memory plugins to wrap npm packages
...
- ruflo-neural-trader: wrap npx neural-trader (v2.7+), add market-analyst
and backtest-engineer agents, add trader-regime/train/risk skills (4 agents, 6 skills)
- ruflo-ruvector: wrap npx ruvector — FlashAttention-3, Graph RAG, hybrid
search, DiskANN, 103 MCP tools, Brain AGI
- ruflo-rag-memory: SOTA upgrade — hybrid search (sparse+dense RRF),
Graph RAG multi-hop, MMR diversity, adaptive chunking, consolidation
- plugins/README.md: add npm package integration section
Co-Authored-By: claude-flow <ruv@ruv.net >
2026-04-30 00:02:40 -04:00
f25bcf2073
feat: add 10 new ruflo plugins, optimize all 32, add READMEs and user guide
...
New plugins: ruflo-adr (ADR lifecycle), ruflo-ddd (domain-driven design),
ruflo-sparc (SPARC methodology), ruflo-neural-trader (trading strategies),
ruflo-ruvector (vector embeddings), ruflo-knowledge-graph (entity graphs),
ruflo-market-data (OHLCV ingestion), ruflo-migrations (schema management),
ruflo-observability (logging/tracing), ruflo-cost-tracker (token budgets).
Optimizations across all 32 plugins:
- All pass `claude plugin validate` (removed invalid manifest arrays)
- 51/51 skills have argument-hint frontmatter
- Model routing: 4 haiku, 24 sonnet, 2 opus (cost-optimized)
- Neural learning hooks on 25/30 agents
- Cross-references between 6 related plugin pairs
- Pathfinder graph traversal algo for researcher agent
- READMEs for all 32 plugins + plugins/README.md catalog
- discover-plugins skill updated with full 32-plugin catalog
Co-Authored-By: claude-flow <ruv@ruv.net >
2026-04-29 23:46:54 -04:00
81418649c6
feat: add 19 Claude Code native plugins with 64 skills, 25 commands, 21 agents
...
Complete plugin marketplace for Ruflo with validated Claude Code plugin format:
- ruflo-core: MCP server, status, doctor, plugin discovery
- ruflo-swarm: swarm coordination, Monitor, worktree isolation
- ruflo-autopilot: autonomous /loop completion with learning
- ruflo-intelligence: SONA neural patterns, trajectory learning, routing
- ruflo-agentdb: AgentDB controllers, HNSW vector search, RuVector
- ruflo-aidefence: AI safety scanning, PII detection, prompt defense
- ruflo-browser: Playwright browser automation, testing, scraping
- ruflo-jujutsu: git diff analysis, risk scoring, reviewer recs
- ruflo-wasm: sandboxed WASM agents and gallery sharing
- ruflo-workflows: workflow templates, orchestration, lifecycle
- ruflo-daa: Dynamic Agentic Architecture, cognitive patterns
- ruflo-ruvllm: local LLM inference, MicroLoRA, SONA, chat format
- ruflo-rvf: RVF portable memory, session persistence, transfer
- ruflo-loop-workers: background /loop workers, CronCreate
- ruflo-security-audit: CVE scanning, dependency checks
- ruflo-rag-memory: simple store/search/recall interface
- ruflo-testgen: test gap detection, TDD workflow
- ruflo-docs: doc generation, drift detection
- ruflo-plugin-creator: scaffold, validate, publish new plugins
All 19 pass `claude plugin validate`. Skills auto-discovered from
directory structure (not declared in plugin.json). Each skill wires
to ruflo MCP tools via allowed-tools frontmatter.
Includes: marketplace.json, GitHub Pages storefront, CI validation
workflow, minimalist README with USERGUIDE split.
Co-Authored-By: claude-flow <ruv@ruv.net >
2026-04-27 23:07:33 -04:00
ruvnet