* fix(plugins): #1902/#1903/#1904 install-safety + CI guard
published tarballs declared @claude-flow/ruvector-upstream (a never-
published package) as a hard dep / strict peer, so `npm install` E404'd.
The repo source was already clean (the runtime does `await import(...).
catch(() => null)`), so the fix is a republish + a guard.
resolve any @claude-flow publish (they're all 3.x prereleases). Repo
source already uses ">=3.0.0-0" + optional peers; fix is a republish.
plus ./formula and ./convoy subpaths the build never emitted. tsup.config
now builds the formula/convoy entries (were commented out) and
package.json exports/main/module point at the actually-emitted .js/.cjs
filenames.
CI guard: scripts/audit-plugin-packages.mjs — fails on (A) unpublished
@claude-flow/* hard dep / non-optional peer, (B) bare-stable peer range
that can't resolve a prerelease, (C) main/module/exports path not in
`files`, (D) post-build, an exports path that doesn't exist on disk.
Wired into v3-ci.yml as `plugin-package-audit` (builds plugins first so
check D is live) + added to witness-verify needs[]. Witness markers for
Version bumps for republish: legal-contracts/healthcare-clinical/
perf-optimizer 3.0.0-alpha.1→2, agentic-qe 3.0.0-alpha.4→5 (repo was
stale at 3.5.59), gastown-bridge 0.1.3→0.1.4.
Co-Authored-By: RuFlo <ruv@ruv.net>
* chore(plugins): bump IPFS registry CID for #1902/#1903/#1904 republish
LIVE_REGISTRY_CID → QmeXmAdbWVvT84GfDXPD2Vg1HWhiTW2VdZfRLhkS96KkX2
(re-pinned to Pinata). Reflects the republished plugin versions:
@claude-flow/plugin-agentic-qe 3.0.0-alpha.4 → 3.0.0-alpha.5
@claude-flow/plugin-gastown-bridge 0.1.3 → 0.1.4
@claude-flow/plugin-legal-contracts 3.0.0-alpha.1 → 3.0.0-alpha.2
@claude-flow/plugin-healthcare-clinical 3.0.0-alpha.1 → 3.0.0-alpha.2
@claude-flow/plugin-perf-optimizer 3.0.0-alpha.1 → 3.0.0-alpha.2
Also updated the matching `version` fields in the demoPluginRegistry
offline fallback. Ships with the next @claude-flow/cli release.
Co-Authored-By: RuFlo <ruv@ruv.net>
---------
Co-authored-by: Reuven <cohen@ruv-mac-mini.local>
rUv