Files
ruvnet__ruflo/tests/rvf-integration.test.ts
rUv dc8463872d feat(ADR-057): RVF native storage with security hardening (#1244)
* docs: add ADR-057 — RVF native storage backend to replace sql.js

Proposes replacing the 18MB sql.js WASM SQLite dependency with
RuVector Format (RVF) across @claude-flow/shared, memory, and
embeddings packages. Includes automatic and manual migration paths
for existing .db and .json files with full backward compatibility.

Key benefits: -18MB install size, 150x-12,500x faster vector search
via native HNSW, quantization support, crash-safe append-only format.

Co-Authored-By: claude-flow <ruv@ruv.net>

* docs: extend ADR-057 with RVF embedding provider, ruvLLM persistence, and progressive download

Add three major sections to ADR-057:

- Section 3A: RVF as 5th EmbeddingProvider (52KB WASM replaces 540MB
  agentic-flow for basic use cases). Updated auto-select hierarchy:
  rvf > agentic-flow > transformers > mock.

- Section 3B: ruvLLM learning persistence via RVF segments. SONA
  patterns (ReasoningBank), LoRA adapters, and EWC++ weights now
  survive process restarts. RuVectorProvider.searchMemory works
  offline via RVF without HTTP server.

- Section 10: Progressive download architecture. Replaces npm
  optionalDependencies (all-or-nothing 1.3GB) with on-demand
  capability downloads stored as .rvf files. 5 phases from 22MB
  core CLI to full LLM/CNN/GNN/kernel capabilities.

Implementation plan expanded from 5 to 8 phases. Testing strategy
updated with 11 new test cases covering the additions.

Co-Authored-By: claude-flow <ruv@ruv.net>

* feat: add optimized Docker images for Ruflo lite/full/workers

- Dockerfile: Multi-stage Alpine build with aggressive dependency pruning.
  Result: 324MB image, 0.6s startup (vs 1.3GB/35s baseline).
  Uses --omit=optional + explicit rm -rf of heavy transitive deps.

- Dockerfile.full: Full image variant with all optional dependencies
  including native compilation (onnxruntime-node, better-sqlite3).

- Dockerfile.headless: Updated from node:20 to node:22, claude-flow
  branding to ruflo, same prune strategy as lite.

- docker-compose.yml: Three profiles (lite, full, workers) with
  appropriate resource limits and health checks.

- .dockerignore: Excludes node_modules, tests, source maps, IDE
  configs, and secrets from build context.

Co-Authored-By: claude-flow <ruv@ruv.net>

* feat(ADR-057): implement RVF native storage backend across all packages

Replace sql.js (18MB WASM) with zero-dependency RVF format across
memory, events, embeddings, and learning subsystems. Pure TypeScript
fallback with optional native @ruvector/rvf acceleration.

New files:
- memory/rvf-backend.ts: IMemoryBackend impl with HNSW + binary persistence
- memory/hnsw-lite.ts: Lightweight HNSW graph for vector search
- memory/rvf-learning-store.ts: SONA pattern/LoRA/EWC/trajectory persistence
- memory/persistent-sona.ts: PersistentSonaCoordinator wrapping learning store
- shared/events/rvf-event-log.ts: Append-only event log (replaces EventStore)
- embeddings/rvf-embedding-cache.ts: Binary file embedding cache (FNV-1a keys)
- embeddings/rvf-embedding-service.ts: Hash-based embedding provider (<0.1ms)

Integrations:
- DatabaseProvider: 'rvf' added, auto-selected first (always available)
- EmbeddingProvider: 'rvf' added, auto-selected first in async factory
- All packages export new RVF types and classes

Tests: 163 passing (5 suites), validated in Docker (node:22-alpine)
- rvf-backend: 50 tests (CRUD, query, search, persistence, HNSW)
- rvf-event-log: 33 tests (append, replay, snapshots, crash recovery)
- rvf-embeddings: 30 tests (cache, service, determinism, normalization)
- rvf-learning-store: 31 tests (patterns, LoRA, EWC, trajectories)
- rvf-integration: 19 tests (provider selection, migration, concurrency)

Co-Authored-By: claude-flow <ruv@ruv.net>

* fix(ADR-057): harden RVF storage with security, performance, and migration

Security: atomic writes (tmp+rename) across all backends, path validation,
input validation at boundaries. Performance: persist lock prevents concurrent
flushes, stack overflow fix for large datasets, timer.unref() prevents hangs,
O(1) eviction lookup in embedding cache. New: bidirectional RVF migration
utility (JSON/SQLite/RVF), format v2 with backward compat, auto-persist
patterns and trajectories before eviction. Added HnswLite and RvfMigrator
exports. 193 tests passing, 0 TS errors.

Refs #1242

Co-Authored-By: claude-flow <ruv@ruv.net>

* fix: doctor version detection and init settings warnings (#1235, #1230)

doctor: Replace unreliable path-walking heuristic with import.meta.url
traversal to find the correct package.json. Removes stale npx cache
scanning that could report wrong versions. Fixes #1235.

init: Remove invalid TeammateIdle and TaskCompleted keys from generated
.claude/settings.json hooks section. These are not recognized by Claude
Code and caused warnings. Config remains available under the claudeFlow
namespace. Fixes #1230.

Co-Authored-By: claude-flow <ruv@ruv.net>

* fix(doctor): remove Windows-incompatible shell redirects, simplify root detection

- Remove fragile Windows root calculation (split on backslash); use
  dirname(dir) === dir instead which works on all platforms
- Remove 2>/dev/null from npm view command (fails on Windows cmd.exe);
  the catch block handles errors gracefully already

Co-Authored-By: claude-flow <ruv@ruv.net>

* security: harden RVF against crafted files and race conditions

- rvf-backend: validate dimensions (1-10000), validate RVF header
  structure and size before JSON.parse, guard persist interval
  against concurrent flushes
- rvf-embedding-cache: use random suffix for tmp files to prevent
  predictable-path attacks on multi-user systems
- rvf-event-log: add 100MB max payload size limit to prevent DoS
  from crafted event log files
- rvf-migration: add null byte and type validation on all paths

Co-Authored-By: claude-flow <ruv@ruv.net>
2026-02-27 21:46:53 -05:00

406 lines
13 KiB
TypeScript

import { describe, it, before, after, beforeEach } from 'node:test';
import assert from 'node:assert/strict';
import { mkdtempSync, rmSync } from 'node:fs';
import { tmpdir } from 'node:os';
import { join } from 'node:path';
// Use dynamic imports so the test can run against the compiled JS output.
// Adjust the import path if your build emits to a different directory.
const {
createDatabase,
getAvailableProviders,
} = await import('../v3/@claude-flow/memory/src/database-provider.js');
type MemoryEntry = import('../v3/@claude-flow/memory/src/types.js').MemoryEntry;
type IMemoryBackend = import('../v3/@claude-flow/memory/src/types.js').IMemoryBackend;
// ---------------------------------------------------------------------------
// Helpers
// ---------------------------------------------------------------------------
function makeEntry(
id: string,
namespace: string,
key: string,
content: string,
embedding?: number[],
): MemoryEntry {
return {
id,
namespace,
key,
content,
type: 'knowledge' as any,
accessLevel: 'shared' as any,
tags: [],
metadata: {},
embedding: embedding ? new Float32Array(embedding) : undefined,
createdAt: Date.now(),
updatedAt: Date.now(),
lastAccessedAt: Date.now(),
accessCount: 0,
version: 1,
ownerId: 'test',
references: [],
};
}
let tmpDir: string;
// ---------------------------------------------------------------------------
// 1. Provider Selection
// ---------------------------------------------------------------------------
describe('Provider Selection', () => {
before(() => {
tmpDir = mkdtempSync(join(tmpdir(), 'rvf-prov-'));
});
after(() => {
rmSync(tmpDir, { recursive: true, force: true });
});
it('createDatabase with provider "rvf" creates an RvfBackend', async () => {
const db = await createDatabase(join(tmpDir, 'test-rvf.rvf'), {
provider: 'rvf',
});
// RvfBackend exposes healthCheck that reports index component
const health = await db.healthCheck();
assert.ok(health);
assert.equal(health.status, 'healthy');
await db.shutdown();
});
it('createDatabase with provider "json" creates a JsonBackend', async () => {
const db = await createDatabase(join(tmpDir, 'test-json.json'), {
provider: 'json',
});
const health = await db.healthCheck();
assert.ok(health);
// JsonBackend always returns 'healthy' and recommends SQLite
assert.equal(health.status, 'healthy');
assert.ok(
health.recommendations.some((r: string) =>
r.toLowerCase().includes('sqlite'),
),
);
await db.shutdown();
});
it('createDatabase with provider "auto" selects RVF', async () => {
const db = await createDatabase(join(tmpDir, 'test-auto.db'), {
provider: 'auto',
});
// Because testRvf() always returns true, auto should pick rvf.
// Store + get round-trip proves it initialised correctly.
const entry = makeEntry('auto-1', 'ns', 'k', 'hello');
await db.store(entry);
const got = await db.get('auto-1');
assert.ok(got);
assert.equal(got.content, 'hello');
await db.shutdown();
});
it('getAvailableProviders returns rvf: true and json: true', async () => {
const providers = await getAvailableProviders();
assert.equal(providers.rvf, true);
assert.equal(providers.json, true);
});
});
// ---------------------------------------------------------------------------
// 2. RVF Path Extension
// ---------------------------------------------------------------------------
describe('RVF Path Extension', () => {
let db: IMemoryBackend;
let dir: string;
before(async () => {
dir = mkdtempSync(join(tmpdir(), 'rvf-ext-'));
db = await createDatabase(join(dir, 'foo.db'), { provider: 'rvf' });
});
after(async () => {
await db.shutdown();
rmSync(dir, { recursive: true, force: true });
});
it('input path foo.db is converted to foo.rvf for rvf provider', async () => {
// Store an entry and shutdown to force persist, then check file exists.
const entry = makeEntry('ext-1', 'ns', 'k', 'data');
await db.store(entry);
await db.shutdown();
const { existsSync } = await import('node:fs');
// The .db extension should have been replaced with .rvf
assert.ok(
existsSync(join(dir, 'foo.rvf')),
'Expected foo.rvf to exist on disk',
);
assert.ok(
!existsSync(join(dir, 'foo.db')),
'foo.db should NOT exist (path was rewritten)',
);
// Re-open for later cleanup
db = await createDatabase(join(dir, 'foo.db'), { provider: 'rvf' });
});
});
// ---------------------------------------------------------------------------
// 3. Full IMemoryBackend Contract (RVF via createDatabase)
// ---------------------------------------------------------------------------
describe('IMemoryBackend Contract (RVF)', () => {
let db: IMemoryBackend;
let dir: string;
before(async () => {
dir = mkdtempSync(join(tmpdir(), 'rvf-contract-'));
db = await createDatabase(join(dir, 'contract.rvf'), { provider: 'rvf' });
});
after(async () => {
await db.shutdown();
rmSync(dir, { recursive: true, force: true });
});
it('store + get round-trip', async () => {
const entry = makeEntry('c-1', 'ns1', 'key1', 'value1');
await db.store(entry);
const got = await db.get('c-1');
assert.ok(got);
assert.equal(got.id, 'c-1');
assert.equal(got.content, 'value1');
});
it('store + getByKey round-trip', async () => {
const entry = makeEntry('c-2', 'ns1', 'key2', 'value2');
await db.store(entry);
const got = await db.getByKey('ns1', 'key2');
assert.ok(got);
assert.equal(got.id, 'c-2');
assert.equal(got.content, 'value2');
});
it('update changes version', async () => {
const entry = makeEntry('c-3', 'ns1', 'key3', 'original');
await db.store(entry);
const updated = await db.update('c-3', { content: 'modified' });
assert.ok(updated);
assert.equal(updated.version, 2);
assert.equal(updated.content, 'modified');
assert.ok(updated.updatedAt >= entry.updatedAt);
});
it('delete removes entry', async () => {
const entry = makeEntry('c-4', 'ns1', 'key4', 'to-delete');
await db.store(entry);
const deleted = await db.delete('c-4');
assert.equal(deleted, true);
const got = await db.get('c-4');
assert.equal(got, null);
});
it('delete returns false for non-existent id', async () => {
const deleted = await db.delete('non-existent');
assert.equal(deleted, false);
});
it('bulkInsert + count', async () => {
const entries = [
makeEntry('b-1', 'bulk', 'bk1', 'bulk1'),
makeEntry('b-2', 'bulk', 'bk2', 'bulk2'),
makeEntry('b-3', 'bulk', 'bk3', 'bulk3'),
];
await db.bulkInsert(entries);
const c = await db.count('bulk');
assert.equal(c, 3);
});
it('bulkDelete removes entries', async () => {
const removed = await db.bulkDelete(['b-1', 'b-2']);
assert.equal(removed, 2);
const c = await db.count('bulk');
assert.equal(c, 1);
});
it('listNamespaces returns unique namespaces', async () => {
const namespaces = await db.listNamespaces();
assert.ok(namespaces.includes('ns1'));
assert.ok(namespaces.includes('bulk'));
// Each namespace appears exactly once
const unique = new Set(namespaces);
assert.equal(unique.size, namespaces.length);
});
it('clearNamespace removes entries for that namespace', async () => {
// Add entries to a fresh namespace
await db.store(makeEntry('cn-1', 'clearme', 'ck1', 'v1'));
await db.store(makeEntry('cn-2', 'clearme', 'ck2', 'v2'));
const cleared = await db.clearNamespace('clearme');
assert.equal(cleared, 2);
const c = await db.count('clearme');
assert.equal(c, 0);
});
it('search returns results sorted by score', async () => {
const dim = 4;
const e1 = makeEntry('s-1', 'search', 'sk1', 'apple', [1, 0, 0, 0]);
const e2 = makeEntry('s-2', 'search', 'sk2', 'banana', [0.9, 0.1, 0, 0]);
const e3 = makeEntry('s-3', 'search', 'sk3', 'cherry', [0, 0, 1, 0]);
await db.bulkInsert([e1, e2, e3]);
const query = new Float32Array([1, 0, 0, 0]);
const results = await db.search(query, { k: 3 });
assert.ok(results.length >= 2);
// Results should be sorted descending by score
for (let i = 1; i < results.length; i++) {
assert.ok(
results[i - 1].score >= results[i].score,
`results[${i - 1}].score (${results[i - 1].score}) should be >= results[${i}].score (${results[i].score})`,
);
}
// The closest match to [1,0,0,0] should be s-1 or s-2
assert.ok(['s-1', 's-2'].includes(results[0].entry.id));
});
it('healthCheck returns healthy status', async () => {
const health = await db.healthCheck();
assert.equal(health.status, 'healthy');
assert.ok(health.timestamp > 0);
assert.ok(health.components.storage.status === 'healthy');
});
});
// ---------------------------------------------------------------------------
// 4. Data Migration Scenario (JSON -> RVF)
// ---------------------------------------------------------------------------
describe('Data Migration (JSON -> RVF)', () => {
let dir: string;
before(() => {
dir = mkdtempSync(join(tmpdir(), 'rvf-migrate-'));
});
after(() => {
rmSync(dir, { recursive: true, force: true });
});
it('entries from JsonBackend can be migrated to RvfBackend', async () => {
// Step 1: Create JsonBackend with entries
const jsonDb = await createDatabase(join(dir, 'source.json'), {
provider: 'json',
});
const entries = [
makeEntry('m-1', 'migrate', 'mk1', 'first'),
makeEntry('m-2', 'migrate', 'mk2', 'second'),
makeEntry('m-3', 'other', 'mk3', 'third'),
];
await jsonDb.bulkInsert(entries);
// Step 2: Create RvfBackend
const rvfDb = await createDatabase(join(dir, 'dest.rvf'), {
provider: 'rvf',
});
// Step 3: Copy entries from JSON to RVF
for (const entry of entries) {
await rvfDb.store(entry);
}
// Step 4: Verify all entries accessible in RVF
for (const entry of entries) {
const got = await rvfDb.get(entry.id);
assert.ok(got, `Entry ${entry.id} should exist in RVF`);
assert.equal(got.content, entry.content);
assert.equal(got.namespace, entry.namespace);
}
// Verify namespaces preserved
const namespaces = await rvfDb.listNamespaces();
assert.ok(namespaces.includes('migrate'));
assert.ok(namespaces.includes('other'));
// Verify counts
assert.equal(await rvfDb.count('migrate'), 2);
assert.equal(await rvfDb.count('other'), 1);
await jsonDb.shutdown();
await rvfDb.shutdown();
});
});
// ---------------------------------------------------------------------------
// 5. Concurrent Operations
// ---------------------------------------------------------------------------
describe('Concurrent Operations', () => {
let db: IMemoryBackend;
let dir: string;
before(async () => {
dir = mkdtempSync(join(tmpdir(), 'rvf-concurrent-'));
db = await createDatabase(join(dir, 'concurrent.rvf'), {
provider: 'rvf',
});
});
after(async () => {
await db.shutdown();
rmSync(dir, { recursive: true, force: true });
});
it('multiple stores in parallel do not corrupt state', async () => {
const count = 50;
const promises: Promise<void>[] = [];
for (let i = 0; i < count; i++) {
const entry = makeEntry(
`par-${i}`,
'parallel',
`pk-${i}`,
`value-${i}`,
);
promises.push(db.store(entry));
}
await Promise.all(promises);
const total = await db.count('parallel');
assert.equal(total, count);
// Verify each entry is individually accessible
for (let i = 0; i < count; i++) {
const got = await db.get(`par-${i}`);
assert.ok(got, `Entry par-${i} should exist`);
assert.equal(got.content, `value-${i}`);
}
});
it('store while search is running works correctly', async () => {
// Seed entries with embeddings for search
const dim = 4;
for (let i = 0; i < 10; i++) {
const vec = [0, 0, 0, 0];
vec[i % dim] = 1;
await db.store(
makeEntry(`ss-${i}`, 'searchstore', `ssk-${i}`, `sv-${i}`, vec),
);
}
// Run search and store concurrently
const query = new Float32Array([1, 0, 0, 0]);
const [searchResults] = await Promise.all([
db.search(query, { k: 5 }),
db.store(
makeEntry('ss-new', 'searchstore', 'ssk-new', 'new-val', [1, 0, 0, 0]),
),
]);
assert.ok(Array.isArray(searchResults));
assert.ok(searchResults.length > 0);
// The newly stored entry should be accessible afterwards
const newEntry = await db.get('ss-new');
assert.ok(newEntry);
assert.equal(newEntry.content, 'new-val');
});
});