4 Commits
Author SHA1 Message Date
RuFlo 06756fbf70 review(plugins): group C — fix claims that do not match the real CLI/MCP/tools, harden unsafe flows
Verified every CLI flag, MCP tool parameter and neural-trader flag these plugins
tell the model to use against @claude-flow/cli 3.56.5 (--help and MCP schemas) and
neural-trader 2.8.11 (run offline), and fixed what was false:

- intelligence: neural_train needs modelType (no patternType/--pattern-type; CLI
  flag is --pattern), hooks_model-outcome/trajectory-end/pretrain/build-agents/
  explain parameters, mcp tool call -> mcp exec, microlora has no consolidate;
  intelligence-transfer rewritten (hooks_transfer only copies from a local
  project; marketplace is hooks transfer store ..., PINATA_API_KEY/SECRET, PII
  scan + confirmation before publish).
- loop-workers: CronCreate takes {cron,prompt,recurring} and is session-scoped
  (7-day expiry), ScheduleWakeup needs prompt, 270s heartbeat qualified by TTL.
- market-data: candles were routed to the ~11-pattern ruvllm_hnsw router;
  untrusted-feed rules; no order placement.
- neural-trader: many documented flags answer "Unknown command" in 2.8.11; several
  handlers return demo output; backtests/signals use synthetic bars without
  --live; backtest signing now refuses non-live data; live/broker path and
  circuit-breaker claims corrected; signal TTL used a non-existent expiresAt.
- iot-cognitum: pin the fleet CLI instead of @latest; confirmation gates for
  firmware deploy/advance/rollback and fleet delete.
- migrations: confirmation/dry-run/validate gates before migrate up/down.
- music: bearer token only sent to music.cognitum.one; pin cogmusic@0.1.1; token
  never enters the transcript.
- jujutsu: analyze_diff* take a ref, not diff text; gate PR merge/close/create.
- knowledge-graph: align relation weights with kg-extract.
- Removed the invalid post-task --train-neural flag everywhere in these plugins.

Plugin versions bumped (marketplace users only receive changes after a bump):
intelligence 0.4.3, loop-workers 0.3.4, market-data 0.3.4, neural-trader 0.3.5,
iot-cognitum 0.3.3, jujutsu 0.3.4, knowledge-graph 0.3.4, migrations 0.3.4,
music 0.2.4. metaharness reviewed, no change needed.

Co-Authored-By: RuFlo <ruv@ruv.net>
2026-10-11 11:33:03 -04:00
ruv 57d24a1617 feat(plugins): jujutsu, knowledge-graph, loop-workers, market-data, metaharness as mods (ADR-445)
Each gets a tighten-only tool.call guard on its own tools, a status file
(.claude-flow/<short>-mod/status.json), a local /<short>-mod command, userConfig,
tests, smoke steps M1-M3, and a README 'As a mod' section. Minor version bumps.

Co-Authored-By: RuFlo <ruv@ruv.net>
2026-10-04 15:34:50 -04:00
ReuvenandRuFlo e24481f51e feat(ruflo-loop-workers): v0.2.0 — adopt plugin contract + 12-worker trigger map (ADR-0001)
5 hooks_worker-* MCP tools (worker-list, worker-dispatch, worker-status,
worker-detect, worker-cancel) plus 12 worker triggers were already wired.
The contract pieces were missing.

Notable: this ADR maps each of the 12 worker triggers to its consumer
plugin so downstream plugins (ruflo-docs/ruflo-security-audit/ruflo-testgen
/ruflo-knowledge-graph/etc.) can verify their trigger names against a
single canonical source. And the 270s cache-aware ScheduleWakeup heartbeat
is now anchored to ruflo-autopilot ADR-0001 which owns that contract.

- ADR-0001 (Proposed) at docs/adrs/0001-loop-workers-contract.md
- README adds Compatibility (pin v3.6), 5-tool MCP surface table,
  12-worker → consumer-plugin attribution table, Cache-aware /loop
  integration block (270s heartbeat, defers to ruflo-autopilot
  ADR-0001), Namespace coordination (claims worker-history),
  Verification + Architecture Decisions sections
- plugin.json bumps 0.1.0 → 0.2.0; description names the 5 MCP tools +
  12 trigger names; keywords add mcp, background-workers, cache-aware,
  schedule-wakeup
- scripts/smoke.sh — 12 structural checks: version + keywords, both
  skills + agent + 2 commands present, 5 worker MCP tools referenced,
  12 trigger names documented, v3.6 pin, namespace coordination,
  worker-history claimed, 270s cache-aware note, autopilot
  cross-reference, attribution table, ADR Proposed, no wildcard tools

Verification: bash plugins/ruflo-loop-workers/scripts/smoke.sh → 12/12

Co-Authored-By: RuFlo <ruv@ruv.net>
2026-05-04 20:16:24 -04:00
Reuvenandclaude-flow 81418649c6 feat: add 19 Claude Code native plugins with 64 skills, 25 commands, 21 agents
Complete plugin marketplace for Ruflo with validated Claude Code plugin format:

- ruflo-core: MCP server, status, doctor, plugin discovery
- ruflo-swarm: swarm coordination, Monitor, worktree isolation
- ruflo-autopilot: autonomous /loop completion with learning
- ruflo-intelligence: SONA neural patterns, trajectory learning, routing
- ruflo-agentdb: AgentDB controllers, HNSW vector search, RuVector
- ruflo-aidefence: AI safety scanning, PII detection, prompt defense
- ruflo-browser: Playwright browser automation, testing, scraping
- ruflo-jujutsu: git diff analysis, risk scoring, reviewer recs
- ruflo-wasm: sandboxed WASM agents and gallery sharing
- ruflo-workflows: workflow templates, orchestration, lifecycle
- ruflo-daa: Dynamic Agentic Architecture, cognitive patterns
- ruflo-ruvllm: local LLM inference, MicroLoRA, SONA, chat format
- ruflo-rvf: RVF portable memory, session persistence, transfer
- ruflo-loop-workers: background /loop workers, CronCreate
- ruflo-security-audit: CVE scanning, dependency checks
- ruflo-rag-memory: simple store/search/recall interface
- ruflo-testgen: test gap detection, TDD workflow
- ruflo-docs: doc generation, drift detection
- ruflo-plugin-creator: scaffold, validate, publish new plugins

All 19 pass `claude plugin validate`. Skills auto-discovered from
directory structure (not declared in plugin.json). Each skill wires
to ruflo MCP tools via allowed-tools frontmatter.

Includes: marketplace.json, GitHub Pages storefront, CI validation
workflow, minimalist README with USERGUIDE split.

Co-Authored-By: claude-flow <ruv@ruv.net>
2026-04-27 23:07:33 -04:00