skills/ruvnet__ruflo
1
0
Fork 0
mirror of https://github.com/ruvnet/ruflo.git synced 2026-09-14 14:01:28 +08:00
Code Issues Packages Projects Releases Wiki Activity
Files
main
ruvnet__ruflo/plugins/ruflo-metaharness
T
History
rUv 0f3c45101b fix: address #3045 #3064 #3065 + new ruflo-deepseek-harness plugin (3.38.13) (#3078) 
Bug fixes
- #3045 statusline.cjs: getGitInfo() runs the 5-command git chain per render;
  on large repos with concurrent Claude Code sessions this queued subprocesses
  faster than they finished (reporter observed hundreds of orphan children +
  load-avg in the hundreds). Added a per-cwd tmp file cache with 5s TTL —
  dirty status still feels live, pileup is bounded.

- #3064 hooks post-task: the narrow ad-hoc regex /^[a-zA-Z0-9_-]+$/ silently
  dropped every colon-namespaced plugin agent (ruflo-core:reviewer,
  feature-dev:code-explorer, ...) — i.e. every Claude Code plugin agent. The
  canonical validateIdentifier() upstream already allows ':' and '.', so the
  redundant regex is removed. Regression test locks in 4 agent-shape cases,
  proven to catch the bug: 2 pass / 2 fail on revert, 4 pass with fix.

- #3065 harness-gepa SKILL.md: unquoted colon in `description` broke YAML
  parsing in `npx skills add`. Quoted the description; rephrased the bare
  "(default:" to avoid the leading colon.

New plugin: ruflo-deepseek-harness
- plugins/ruflo-deepseek-harness/: sibling to ruflo-metaharness (ADR-150
  shape). Two skills: `deepseek-chat` (non-reasoning) and `deepseek-reason`
  (surfaces reasoning_content separately). Reads DEEPSEEK_API_KEY from env;
  degrades gracefully (exit 0 with `{status: 'degraded', reason, hint}`)
  when the key is missing or the API is unreachable. `--alert-on-error`
  flag opts into hard exit 1 for CI gates. Smoke-tested locally.

Release
- Bump @claude-flow/cli, claude-flow, ruflo: 3.38.12 → 3.38.13 (PATCH:
  bug fixes; the new plugin is scaffolding under plugins/ and not part of
  the npm-published CLI packages).

Not fixed
- #3051 memory_store tags: current source's memory_store handler passes
  tags straight through to storeEntry; a maintainer already verified live
  round-trip works on fa13ee4ad. Reporter has not yet supplied the
  ruflo/@claude-flow/cli version that hosted the affected MCP server,
  so the affected release path is unknown. Left as-is pending that reply.


Claude-Session: https://claude.ai/code/session_0118jMsYhwHD5dx2vStENsEB
2026-08-21 10:10:13 -04:00
..
.claude-plugin
fix(release): harden hooks, statusline, security, and plugin MCP integration
2026-07-16 23:06:29 -04:00
agents
feat: review-driven upgrades — perf, security, SOTA capabilities (6-agent concurrent implementation) (#2547)
2026-07-03 16:52:09 -04:00
commands
fix: complete reports and consistent initialization for v3.32.37 (#2851)
2026-07-29 15:40:17 -04:00
scripts
MetaHarness hardening: repair the dependency contract + strict sequential promotion evidence (#2956)
2026-08-10 11:32:40 -02:30
skills
fix: address #3045 #3064 #3065 + new ruflo-deepseek-harness plugin (3.38.13) (#3078)
2026-08-21 10:10:13 -04:00
README.md
feat(metaharness): learn + gepa integration — metaharness@0.3.0 / darwin@0.8.0 (15 MCP tools) (#2540)
2026-07-03 14:17:09 -04:00

README.md

ruflo-metaharness

MetaHarness integration plugin for ruflo. Surfaces the upstream metaharness / harness / @metaharness/darwin CLIs through eleven ruflo skills, honoring ADR-150's architectural constraint that MetaHarness must remain a removable augmentation — never a required runtime dependency.

ADR-150 architectural constraint (load-bearing)

Ruflo remains operational if every MetaHarness package is removed. Every code path in this plugin satisfies four rules:

  1. Removable — no static import '@metaharness/*' outside the optional-router path in v3/@claude-flow/cli/src/ruvector/neural-router.ts.
  2. Optional in package.json — metaharness is in optionalDependencies, never dependencies.
  3. Graceful degradation — every script catches MODULE_NOT_FOUND/network failure and emits { degraded: true, reason: 'metaharness-not-available' } JSON, exits 0. The graceful path is the default behavior, not a special case.
  4. CI gate — no-metaharness-smoke.yml runs the plugin smoke with npm install --no-optional and asserts the contract still passes.

Skills

Skill Usage Description
harness-score /harness-score [--path .] [--alert-on-fit-below 70] 5-dim readiness scorecard (harnessFit/compile/coverage/safety/memory + cost)
harness-genome /harness-genome [--path .] [--alert-on-risk-above 0.5] 7-section categorical report (repo_type/topology/risk/mcp/test/publish)
harness-mcp-scan /harness-mcp-scan [--path .] [--fail-on high] Static MCP security findings — pure-read, no dispatch
harness-threat-model /harness-threat-model [--path .] [--fail-on high] Enterprise-grade threat model (clean/low/medium/high + findings)
harness-mint /harness-mint --name <id> --template <id> [--confirm] Scaffold a custom harness; DRY-RUN by default; refuses project-root writes
harness-similarity /harness-similarity --a a.json --b b.json [--per-dimension] [--alert-below 0.5] ADR-152 §3.1 weighted similarity between two harness fingerprints (cosine + categorical + jaccard)
harness-oia-audit /harness-oia-audit [--path .] [--alert-on-worst high] [--dry-run] Composite Phase-2 audit (oia-manifest + threat-model + mcp-scan) into metaharness-audit namespace
harness-drift-from-history /harness-drift-from-history [--baseline-since 7d] [--threshold 0.95] 1-command drift detection — composes audit-list + oia-audit + audit-trend
harness-bench /harness-bench --op create|verify --repo <path> Manage @metaharness/darwin bench suites — fixed evaluation corpora for harness-evolve
harness-evolve /harness-evolve --repo <path> [--generations 3] [--sandbox real|mock|agent] Run @metaharness/darwin evolve — mutate seven policy surfaces, sandbox-score variants, promote measured wins
harness-security-bench /harness-security-bench [--population 2] [--cycles 1] [--alert-on-fail] "Darwin Shield" / ADR-155 — evolve a security-detection harness against a 10-vuln corpus
harness-learn /harness-learn --host <h> --model <m> --slice <manifest> [--repo <checkout>] [--run] metaharness@0.3.0 / upstream ADR-235 — GEPA learning run; $0 dry-run default, --run to spend; needs a metaharness repo checkout
harness-gepa /harness-gepa --op genome|validate|render|analyze [--path <genome.json>] darwin@0.8.0 GEPA library surface — genome load/validate/render + transcript failure analysis; gepaOptimize stays library-only

Phase-0 baseline (ruflo itself, 2026-06-16)

{
  "harnessFit": 82,
  "compileConfidence": 100,
  "taskCoverage": 79,
  "toolSafety": 100,
  "memoryUsefulness": 40,
  "estCostPerRunUsd": 0.048,
  "recommendedMode": "CLI + MCP",
  "archetype": "typescript-sdk-harness",
  "template": "vertical:coding",
  "scaffoldReady": true,
  "risk_score": 0.27,
  "publish_readiness": 0.9
}

Architecture

All skills use subprocess invocation through the _harness.mjs shared helper:

skills/X/SKILL.md → scripts/X.mjs → scripts/_harness.mjs → spawnSync('npx', ['metaharness', …])
                                                  ↘ on MODULE_NOT_FOUND → emit degraded JSON, exit 0

This means:

  • No library import overhead on ruflo's boot path
  • 60s hard timeout per subprocess (bounded blast radius)
  • --json flag forced for structured parsing
  • Graceful degradation is a single helper used by every skill

Cross-links

  • ADR-150 — decision + architectural constraint
  • Issue #2399 — phase rollout tracker
  • Research dossier — full graded-evidence sourcing
  • Upstream — metaharness source
  • ADR-148/149 — @metaharness/router cost-optimal routing (sibling integration)
Reference in New Issue View Git Blame Copy Permalink