7 Commits
Author SHA1 Message Date
randRuFlo bb6a958c53 fix(plugins): review of 9 plugins (group D) - verified against the real CLI/MCP, bump versions
Checked every CLI command, flag and MCP tool the skills tell the model to use
against ruflo 3.56.5 and the tool registry. Fixed what was false:

- workflows 0.6.6: MCP tool names with underscores that do not exist; gaia-bench
  has no --dry-run/--task-id (unknown flags are ignored, so the documented cost
  estimate started a billed run); opt-in guard for native workflows; stale smoke
- security-audit 0.3.4: non-existent `security report`, wrong `audit` usage,
  scan depth table that described phases the scanner lacks; --fix gated
- swarm 0.3.7: `swarm watch/health/shutdown` do not exist; swarm-watch.mjs poller
- rag-memory 0.3.5: `ruflo recall`/`memory bridge` do not exist; shell-quoting
  of user text in /recall
- testgen 0.3.2: tdd-repair now enforces that the test is not edited; shell
  quoting; invalid --limit
- rvf 0.3.6: export went through the public IPFS marketplace; now memory export
- ruvllm 0.3.4: provider claims and persistence claims corrected
- observability 0.3.4: no invented traces when nothing wrote spans
- plugin-creator 0.4.3: required plugin.json fields and tool existence check

Co-Authored-By: RuFlo <ruv@ruv.net>
2026-10-11 11:33:24 -04:00
randRuFlo a457cbf4dc fix(plugins): clean claude.ai plugin-validator findings (nested manifest, unknown keys, XML tags in skill descriptions)
- ruflo-plugin-creator 0.4.2: mod template manifest is plugin.json.tmpl (no nested plugin); scripts/scaffold-mod.mjs + test-scaffold-mod.mjs validate and test a scaffolded mod
- ruflo-workflows 0.6.5 / ruflo-arena 0.2.4 / ruflo-graph-intelligence 0.2.0-alpha.5: drop unused components / categories keys
- ruflo-metaharness 0.2.5: seven harness-* descriptions use {braces}, not angle brackets
- ruflo-ai-team 0.2.3 (+directory 0.1.1) / ruflo-x-gateway 0.9.5 (+directory 0.8.2): documentationUrl points at main, not the feat branch; store-listing keys kept (the directory reads them)
- scripts/check-plugin-manifests.mjs wired into all-plugins-smoke

Co-Authored-By: RuFlo <ruv@ruv.net>
2026-10-09 10:18:04 -04:00
ruv 22e883c435 feat(plugin-creator): status contract in the create-mod template (0.4.1)
The scaffolded mod now writes .claude-flow/<name>-mod/status.json with the
fields the console reads (version 1, summary, modVersion, guard, calls as a
number, blocked, lastDenied), with a shape test and docs in the skill and README.

Co-Authored-By: RuFlo <ruv@ruv.net>
2026-10-05 02:47:59 -04:00
ruv 53563c63ae feat(ruflo-plugin-creator): function-hook mod (ADR-445)
Local /<short>-mod command, status file, tighten-only secret guard where the plugin has write tools, tests, smoke steps M1-M3, README section.

Co-Authored-By: RuFlo <ruv@ruv.net>
2026-10-04 15:35:35 -04:00
ruv 707977d2bc feat(plugin-creator): scaffold governed Claude Code mods (create-mod + templates/mod, ADR-404)
A working template mod, validated and kit-tested on Claude Code 2.1.287 and
live-loaded with --plugin-dir: hybrid hooks.json (classic UserPromptSubmit
fallback that exits while the module runs, via MY_MOD_ACTIVE), a host
adapter over literal $ calls, refusal-tolerant status drawing, a namespaced
command, userConfig, engine-kit tests and a tsconfig extending the
generated types. create-mod skill carries the rules (tighten-only
tool.check, no process/http from event input, state in $.store/$.state,
namespaced commands) and the validate/test/typecheck loop.

ruflo-plugin-creator 0.2.1 -> 0.3.0 (smoke sentinel + step 11).

Co-Authored-By: RuFlo <ruv@ruv.net>
2026-10-01 18:13:02 -04:00
ReuvenandRuFlo 003624f740 feat(ruflo-plugin-creator): v0.2.0 — scaffold the canonical contract + MCP-drift warnings (ADR-0001)
The meta-plugin that creates new plugins now (a) follows the same
contract every other plugin adopted, and (b) propagates that contract
to every newly-scaffolded plugin. The retrofit work the loop is doing
right now becomes unnecessary for new plugins.

Drift fixed:
- create-plugin skill claimed "19 AgentDB controllers" (the same myth
  ruflo-agentdb ADR-0001 killed). Replaced with "15 controller-bridge
  tools; defer to agentdb_controllers runtime for canonical list".

Scaffolder updates (the create-plugin skill now generates):
- docs/adrs/0001-<name>-contract.md (Proposed)
- scripts/smoke.sh (≥8 structural checks)
- README sections: Compatibility (pin v3.6), Namespace coordination
  (defers to ruflo-agentdb ADR-0001), Verification, Architecture Decisions
- "MCP-tool drift to avoid" section warning new authors about the four
  real bugs found in sibling ADRs:
    1. embeddings_embed does not exist (use embeddings_generate)
    2. agentdb_hierarchical-* ignores namespace arg (use tier or memory_*)
    3. agentdb_pattern-* ignores namespace arg (ReasoningBank routes;
       fallback writes to pattern reserved)
    4. pattern (singular) ≠ patterns (plural) — different reserved namespaces

Plugin contract additions:
- ADR-0001 (Proposed) at docs/adrs/0001-plugin-creator-contract.md
- README adds Compatibility (pin v3.6), Canonical plugin contract block
  showing the scaffolded directory shape, MCP-tool drift table,
  Verification + Architecture Decisions
- plugin.json bumps 0.1.0 → 0.2.0; description names the canonical
  contract; keywords add mcp, scaffolding, contract-bootstrap
- scripts/smoke.sh — 10 structural checks: version + keywords, both
  skills + agent + command, scaffolder generates ADR + smoke + Compat +
  Namespace, scaffolder includes MCP-drift warnings, regression check
  on "19 controllers", v3.6 pin, Architecture Decisions section,
  ADR Proposed, validate-plugin present, no wildcard tools

Verification: bash plugins/ruflo-plugin-creator/scripts/smoke.sh → 10/10

Co-Authored-By: RuFlo <ruv@ruv.net>
2026-05-04 20:29:01 -04:00
Reuvenandclaude-flow 81418649c6 feat: add 19 Claude Code native plugins with 64 skills, 25 commands, 21 agents
Complete plugin marketplace for Ruflo with validated Claude Code plugin format:

- ruflo-core: MCP server, status, doctor, plugin discovery
- ruflo-swarm: swarm coordination, Monitor, worktree isolation
- ruflo-autopilot: autonomous /loop completion with learning
- ruflo-intelligence: SONA neural patterns, trajectory learning, routing
- ruflo-agentdb: AgentDB controllers, HNSW vector search, RuVector
- ruflo-aidefence: AI safety scanning, PII detection, prompt defense
- ruflo-browser: Playwright browser automation, testing, scraping
- ruflo-jujutsu: git diff analysis, risk scoring, reviewer recs
- ruflo-wasm: sandboxed WASM agents and gallery sharing
- ruflo-workflows: workflow templates, orchestration, lifecycle
- ruflo-daa: Dynamic Agentic Architecture, cognitive patterns
- ruflo-ruvllm: local LLM inference, MicroLoRA, SONA, chat format
- ruflo-rvf: RVF portable memory, session persistence, transfer
- ruflo-loop-workers: background /loop workers, CronCreate
- ruflo-security-audit: CVE scanning, dependency checks
- ruflo-rag-memory: simple store/search/recall interface
- ruflo-testgen: test gap detection, TDD workflow
- ruflo-docs: doc generation, drift detection
- ruflo-plugin-creator: scaffold, validate, publish new plugins

All 19 pass `claude plugin validate`. Skills auto-discovered from
directory structure (not declared in plugin.json). Each skill wires
to ruflo MCP tools via allowed-tools frontmatter.

Includes: marketplace.json, GitHub Pages storefront, CI validation
workflow, minimalist README with USERGUIDE split.

Co-Authored-By: claude-flow <ruv@ruv.net>
2026-04-27 23:07:33 -04:00