Dragan Spiridonov f18ff4c427 fix(policy): authenticate retained ledgers and stream full audits with fenced writers (#4216) ...

* fix(policy): preserve authenticated ledger receipts across crash recovery

* Register operator policy ledger limits in environment precedence audit

* test(policy): assert bounded retention work instead of shared-runner latency

2026-10-17 23:10:58 +01:00

..

__tests__

test(skills): check that every MCP tool a shipped skill names exists in the registry (#4141)

2026-10-13 13:38:45 +05:00

e2e

feat(tui): the AI page: ask Codex (read-only, pinned) or OpenRouter, each question after a card (ADR-489 phase 3)

2026-10-11 16:54:16 -04:00

fixtures/witness-source-only

test(ci): isolate witness fixture and search mocks

2026-09-27 10:30:47 -04:00

lib

fix(plugins): allow native freeform inputs and version Codex hook repair

2026-10-08 16:52:49 -04:00

audit-better-sqlite3-override.mjs

fix: #2219 #2221 #2222 #2215 #2226 — memory/routing/statusline bug cluster (3.10.6) (#2227)

2026-05-29 08:52:31 -04:00

audit-cli-mcp-tools.mjs

fix(#1916): register agent_logs + hive worker resolution + all 20 dangling CLI↔MCP tools — published 3.7.0-alpha.26 (#1924)

2026-05-12 00:40:47 -04:00

audit-codex-integration.mjs

fix(bridge): retire unsupported Codex MCP backend

2026-09-28 09:40:35 -04:00

audit-env-var-precedence.mjs

fix(policy): authenticate retained ledgers and stream full audits with fenced writers (#4216)

2026-10-17 23:10:58 +01:00

audit-exit-bypass-antipattern.mjs

v3.11.0 — router ADR-148/149 + cost-tracker observability + fleet audits (#2398)

2026-06-16 12:10:35 -04:00

audit-fix-invariants.mjs

fix(init): Windows hooks launch through node -e, not cmd /c (#4045)

2026-10-11 09:31:30 -04:00

audit-hook-commands.mjs

fix(#1921): plugin hooks use a resilient shim, not bare npx @alpha per fire (#1923)

2026-05-12 00:51:18 -04:00

audit-hook-handler-prompt.mjs

fix(hooks): pre-bash TypeError + global-install MODULE_NOT_FOUND (#1944, #1943) (#1957)

2026-05-13 09:02:51 -04:00

audit-leaf-package-publish.mjs

chore(release): point consumers at the stable internal leaves

2026-09-28 17:13:43 -04:00

audit-neural-trader-safety.mjs

fix(neural-trader): mitigate upstream fork-bomb on install + CI guard (#1974) (#1976)

2026-05-14 08:03:31 -04:00

audit-package-dep-overlap.mjs

fix(embeddings): #2018 — drop @huggingface/transformers from optionalDependencies (npx Invalid Version)

2026-05-15 21:44:39 -04:00

audit-plugin-hooks-cross-platform.mjs

fix(hooks): Codex hooks.json schema + PreToolUse verdict compat (#2857)

2026-07-29 21:36:20 -04:00

audit-plugin-manifest.mjs

v3.11.0 — router ADR-148/149 + cost-tracker observability + fleet audits (#2398)

2026-06-16 12:10:35 -04:00

audit-plugin-mcp-prefix.mjs

test(plugins): preserve standalone MCP catalog assertions

2026-07-16 23:20:35 -04:00

audit-plugin-packages.mjs

fix(plugins): #1902/#1903/#1904 install-safety + plugin-package CI guard (#1925)

2026-05-12 00:44:57 -04:00

audit-skill-frontmatter.mjs

fix(release): harden hooks, statusline, security, and plugin MCP integration

2026-07-16 23:06:29 -04:00

audit-skill-mcp-tools.mjs

test(skills): check that every MCP tool a shipped skill names exists in the registry (#4141)

2026-10-13 13:38:45 +05:00

audit-supply-chain.mjs

fix(security): patch CVEs, shell injection, SSRF in ruflo (#2114)

2026-05-23 04:52:41 -04:00

audit-tool-descriptions.mjs

feat(mcp): ADR-112 — 285/285 tool descriptions have 'Use when …' guidance + CI guard + #1892 statusline (#1897)

2026-05-11 00:29:58 -04:00

audit-umbrella-version-lockstep.mjs

fix(release): reject missing umbrella package identities

2026-10-10 11:20:45 -04:00

audit-vector-dim.mjs

fix(memory): schema vector_indexes dim 768→384 + CI guard (#1947, #1942, #1952) (#1956)

2026-05-13 09:02:02 -04:00

audit-wrapper-dep-ranges.mjs

fix(ruflo): require matching wrapper and CLI runtime versions

2026-09-29 09:22:24 -04:00

auto-retrain-router.mjs

v3.11.0 — router ADR-148/149 + cost-tracker observability + fleet audits (#2398)

2026-06-16 12:10:35 -04:00

bench-agenticow.mjs

feat(mcp): integrate agenticow@~0.2.3 — COW memory branching (4 MCP tools) (#2500)

2026-06-29 11:59:20 -04:00

bench-mod-hooks.mjs

bench(mods): per-event hook latency across the plugin mods; measured, no optimization justified

2026-10-04 19:47:20 -04:00

bench-mods-latency.ts

test(mods): declaration-faithful harness, parity and no-double-fire suites, latency bench (ADR-404)

2026-10-01 17:51:14 -04:00

bench-skill-distillation.mjs

darwin-core iter 4 — skill-distillation: promote all successful traces Δ=0.1429

2026-06-27 11:42:23 -04:00

benchmark-graph.mjs

fix(ci): graph benchmark process.exit — eliminate 40-min hang (#2148)

2026-05-26 00:14:53 -04:00

benchmark-intelligence.mjs

darwin-core infra: add --only=<dim> flag to benchmark-intelligence.mjs

2026-06-27 11:41:06 -04:00

benchmark-models-midtier.mjs

v3.11.0 — router ADR-148/149 + cost-tracker observability + fleet audits (#2398)

2026-06-16 12:10:35 -04:00

benchmark-models.mjs

v3.11.0 — router ADR-148/149 + cost-tracker observability + fleet audits (#2398)

2026-06-16 12:10:35 -04:00

benchmark-multiagent.mjs

darwin: iter 11 advance — nfcorpus bm25 weight 0.7→0.4, ndcg10 0.3372→0.3443 (+0.71%)

2026-06-26 16:58:54 -04:00

benchmark-router.mjs

v3.11.0 — router ADR-148/149 + cost-tracker observability + fleet audits (#2398)

2026-06-16 12:10:35 -04:00

benchmark-seed-corpus.mjs

v3.11.0 — router ADR-148/149 + cost-tracker observability + fleet audits (#2398)

2026-06-16 12:10:35 -04:00

build-codex-mod-hooks.mjs

fix(plugins): add native Codex adapters for ADR DDD and SPARC mods

2026-10-08 16:52:42 -04:00

bulk-fix-tool-descriptions.mjs

feat(mcp): ADR-112 — 285/285 tool descriptions have 'Use when …' guidance + CI guard + #1892 statusline (#1897)

2026-05-11 00:29:58 -04:00

calibration-check.mjs

v3.11.0 — router ADR-148/149 + cost-tracker observability + fleet audits (#2398)

2026-06-16 12:10:35 -04:00

check-adr-links.mjs

docs(adr): mod-system ADR index, status/date/cross-link corrections, ADR link check

2026-10-04 22:03:45 -04:00

check-adr-links.test.mjs

docs(adr): mod-system ADR index, status/date/cross-link corrections, ADR link check

2026-10-04 22:03:45 -04:00

check-fingerprint-schema.mjs

test(metaharness): fingerprint-schema compat tripwire (iter 81)

2026-06-16 22:42:19 -04:00

check-guard-tool-names.mjs

fix(scripts): run tool guard through symlinked paths

2026-10-10 11:23:58 -04:00

check-mcp-scan-format.mjs

fix: resolve current runtime and verification defects for v3.32.36 (#2850)

2026-07-29 15:08:51 -04:00

check-metaharness-compat.mjs

ci(metaharness): CI gates + ADR-150 constraint-#4 enforcement (iter 2)

2026-06-16 13:14:49 -04:00

check-metaharness-pins.mjs

fix(metaharness): fail unreadable oracle pin audits

2026-10-10 11:36:33 -04:00

check-plugin-manifests.mjs

fix(plugins): clean claude.ai plugin-validator findings (nested manifest, unknown keys, XML tags in skill descriptions)

2026-10-09 10:18:04 -04:00

check-status-forwarding.mjs

test(mods): tripwire against forwarding a mod status file into model context (ADR-450 T7)

2026-10-05 05:37:46 -04:00

ci-test-baseline.txt

feat(x-gateway): read-only GitHub/npm query tools on /mcp (ADR-485)

2026-10-09 14:28:35 -04:00

ci-test-excluded.txt

fix(ruflo-agentdb): stop the secret screen treating a hyphen-named memory key as a credential field (#4202) (#4211)

2026-10-17 14:58:08 +01:00

ci-test-ratchet.mjs

fix(ci): the test ratchet no longer runs files vitest cannot run (71 plugin kit tests and node:test files)

2026-10-05 13:21:43 -04:00

cleanup-v3.sh

checkpoint: File edit:

2026-01-04 19:30:59 +00:00

gen-seed-corpus-v2.mjs

v3.11.0 — router ADR-148/149 + cost-tracker observability + fleet audits (#2398)

2026-06-16 12:10:35 -04:00

gen-seed-corpus.mjs

v3.11.0 — router ADR-148/149 + cost-tracker observability + fleet audits (#2398)

2026-06-16 12:10:35 -04:00

guard-tool-names.allow.json

test(mods): check that every tool name a plugin guard watches exists in the registry

2026-10-04 19:02:02 -04:00

install.sh

fix: 5 critical bugs — cwd, intelligence hang, memory init, ruvector v3.5.52

2026-04-06 11:47:30 -04:00

inventory-capabilities.mjs

chore(verification): regenerate inventory + fix CRLF bug in extractor

2026-05-05 22:18:18 -04:00

live-agentdb-recall.sh

fix(ruflo-agentdb): live-verified recall (0.4.1) + live harness and validation report

2026-10-04 22:48:04 -04:00

live-agentdb-writers.sh

test(agentdb): live check that the four newly guarded writers refuse a secret in a real session

2026-10-05 03:07:59 -04:00

live-ruflo-mods-compact.mjs

fix(scripts): unbiased canary id generation in the compact live driver (CodeQL)

2026-10-10 17:48:37 -04:00

live-ruflo-mods-options.sh

test(ruflo-mods): live verification of capabilityProbe and sessionRollup against real headless sessions

2026-10-05 04:36:37 -04:00

live-ruflo-mods-paths.sh

test(mods): live headless proof of ruflo-mods route, deny, heartbeat and /ruflo-mods paths

2026-10-05 01:56:36 -04:00

live-ruflo-mods-trim.sh

test(ruflo-mods): measure agentTrim token saving and dispatch behaviour live

2026-10-05 02:53:23 -04:00

live-ruflo-mods.sh

ruflo-mods 0.3.2: live validation of toolHints/agentTrim/status, correct the agentTrim option text

2026-10-05 00:25:30 -04:00

loop-checkpoint.mjs

fix(bridge): wire bridgeRecordFeedback to real intelligence.recordTrajectory (#2786 fix-3)

2026-07-26 18:47:59 -04:00

metaharness-clean-install-test.mjs

feat(metaharness): pull in @metaharness/turn-credit + fix stale router/darwin pins (#2958)

2026-08-10 15:08:06 -02:30

mod-capability-matrix.mjs

docs(mods): capability review 2026-10 and matrix generator

2026-10-04 21:19:34 -04:00

prepare-root-publish.mjs

fix(release): spawn npm.cmd with shell:true in prepare-root-publish too (#3348)

2026-09-16 16:36:46 +00:00

probe-mod-guards.known-holes.json

fix(mods): shared textsOf reports truncation and every guard fails closed on it

2026-10-05 00:27:13 -04:00

probe-mod-guards.mjs

test(mods): guard probe timing is a hang gate (median of 3 > 1000 ms), 50 ms/50x advisory; bare --known-holes; wider watchdog

2026-10-04 20:34:20 -04:00

probe-nested-spawn-depth.mjs

feat(agents): ADR-147 nested subagent (depth=5) infrastructure + P2 stage 1 (#2336)

2026-06-09 12:15:03 -04:00

refit-calibrator-from-production.mjs

v3.11.0 — router ADR-148/149 + cost-tracker observability + fleet audits (#2398)

2026-06-16 12:10:35 -04:00

regen-statusline-artifact.mjs

fix(statusline): real model name from stdin + worktree version resolution

2026-07-20 15:58:21 -04:00

regen-witness.mjs

feat: per-OS verification cognitive containers + tutorial README

2026-05-09 10:47:43 -04:00

render-tui-svg.mjs

docs: mention the optional standalone ruflo tui in the README, with a user-guide section and animated SVGs

2026-10-12 11:41:11 -04:00

sign-witness-from-inventory.mjs

feat(verification): per-source-file MCP witnesses (task #25, iteration #51)

2026-05-03 21:47:15 -04:00

smoke-adr104-transport.mjs

fix(verification): unblock ADR-104 and witness source checks

2026-07-09 10:40:08 -04:00

smoke-agent-execute-providers.mjs

fix(agent): propagate explicit provider/model config into agent execution (#2962) (#3007)

2026-08-12 18:28:25 -04:00

smoke-agentbbs.sh

test(agentbbs): allow lazy runtime loading

2026-07-16 19:10:33 -04:00

smoke-agenticow.sh

feat(mcp): integrate agenticow@~0.2.3 — COW memory branching (4 MCP tools) (#2500)

2026-06-29 11:59:20 -04:00

smoke-all-plugins.mjs

feat(console): What's new page under TOOLS, plugin changelog parser and marker (ADR-478), console 0.38.0

2026-10-07 14:37:28 -04:00

smoke-attribution-opt-in.mjs

feat(init): #2089 ADR-127 Phase 4 — attribution opt-in across 19 github command files + last-updated stamps

2026-05-21 14:19:35 -04:00

smoke-browser-rvf-create-flags.mjs

ci: #2041 ADR-122 — make browser rvf smoke tolerant of missing dist

2026-05-18 20:55:31 -04:00

smoke-cli-npx-install.mjs

fix(embeddings): #2018 — drop @huggingface/transformers from optionalDependencies (npx Invalid Version)

2026-05-15 21:44:39 -04:00

smoke-deprecated-actions.mjs

fix(github): #2089 — complete Phase 3 (5 init-template agents missed) + strengthen smoke + alpha.75

2026-05-21 14:37:43 -04:00

smoke-github-actions-pins.mjs

feat(ci): #2089 ADR-127 Phase 1 — github-safe injection smoke + uses: pin smoke + supply-chain allowed-deps actions block

2026-05-21 14:03:29 -04:00

smoke-github-safe-injection.mjs

test(security): distinguish direct argv from shell splitting

2026-09-24 06:26:44 +00:00

smoke-graph-pathfinder.mjs

feat(graph): ADR-130 — unified graph intelligence backend (P1-P6) (#2129)

2026-05-24 23:46:50 -04:00

smoke-graph-plugin-adapter.mjs

feat(graph): ADR-130 — unified graph intelligence backend (P1-P6) (#2129)

2026-05-24 23:46:50 -04:00

smoke-graph-query-dispatch.mjs

feat(graph): ADR-130 — unified graph intelligence backend (P1-P6) (#2129)

2026-05-24 23:46:50 -04:00

smoke-graph-schema-migration.mjs

fix(ci): graph schema smoke — checkpoint WAL before sql.js re-read

2026-06-25 18:32:28 -04:00

smoke-helper-signing-security.mjs

fix(helpers): ship router as .cjs so it loads in ESM projects (#3555)

2026-09-30 18:02:37 -04:00

smoke-init-bundle-invariants.mjs

feat(ci): #2095 ADR-128 Phase 5 — init-bundle-invariants smoke (no orphans, no plugin-init overlap)

2026-05-21 15:41:47 -04:00

smoke-init-scaffold-references.mjs

fix(scaffold): add dead-reference guard + deterministic CLI remap (ADR-382 Part C) (#2974)

2026-08-11 18:39:17 -04:00

smoke-kg-extract-type-imports.mjs

fix(kg-extract): #2049 — separate import type from value imports + drop disabled semantic-route + CI guard

2026-05-19 12:19:16 -04:00

smoke-memory-db-path.mjs

feat: #2105 CLAUDE_FLOW_DB_PATH + #2058 team gateway checklist (#2146)

2026-05-26 00:01:46 -04:00

smoke-memory-no-stray-db.mjs

chore: project-wide quality sweep — no dead code, no slop, witness-validated (#2139)

2026-05-25 22:44:55 -04:00

smoke-memory-stats-legacy-db.mjs

fix(memory): #2120 — accept NULL status in memory_entries (legacy DBs) + 3.7.0 stable

2026-05-24 11:13:50 -04:00

smoke-neural-trader-backtest-signing.mjs

feat(neural-trader): #2068 ADR-126 Phase 4 — Ed25519-signed backtest artifacts

2026-05-19 22:39:21 -04:00

smoke-neural-trader-feature-attribution.mjs

feat(neural-trader): #2068 ADR-126 Phase 6 — feature attribution via single-entry PR

2026-05-19 23:04:14 -04:00

smoke-neural-trader-pipeline.mjs

feat(neural-trader): #2068 ADR-126 Phase 5 — SendMessage risk-gate pipeline

2026-05-19 22:44:34 -04:00

smoke-neural-trader-portfolio-cg.mjs

test(plugins): align namespace and stable hook shims

2026-07-16 23:14:09 -04:00

smoke-plugin-registry-signature.mjs

fix(plugins): review follow-ups for registry trust fail-closed

2026-10-10 16:51:15 +02:00

smoke-pre-bash-hook.mjs

fix(hooks): use blocking exit status for pre-bash denials

2026-10-02 09:44:53 +02:00

smoke-router-regex.mjs

release: 3.10.33 + CI regression guards for #2267 / #2257 / #2256

2026-06-02 03:59:36 -04:00

smoke-ruflo-hook-cjs.mjs

fix: complete reports and consistent initialization for v3.32.37 (#2851)

2026-07-29 15:40:17 -04:00

smoke-ruvllm-wasm-auto-init.mjs

fix(mcp): #2086 — auto-init ruvllm WASM in loadRuvllmWasm + CI regression guard

2026-05-21 12:36:22 -04:00

smoke-shared-fresh-consumer.mjs

chore(shared): 3.0.4 (RVF tail recovery + runtime dependencies), CLI/root pins, fresh-consumer smoke

2026-10-12 11:21:58 -04:00

smoke-statusline-generator-delegation.mjs

fix(helpers): never interpolate a shell-active install-root path; run the delegation smoke from a helper root

2026-10-10 10:54:15 -04:00

smoke-tool-output-guardrail.mjs

fix(plugins/ruflo-core/hooks): #2155 — wrap 3 unwrapped .sh hooks in /bin/bash -c (#2161)

2026-05-27 09:00:35 -04:00

smoke-trajectory-graph-edges.mjs

fix(ci): warm up the AgentDB registry before ADR-130 P3's timed assertions

2026-09-27 15:52:07 -04:00

smoke-wasm-gallery-crud.mjs

feat(rvagent): #ADR-129 — full rvagent integration (4 phases) (#2123)

2026-05-24 14:32:43 -04:00

smoke-wasm-plugin-bridge.mjs

feat(rvagent): #ADR-129 — full rvagent integration (4 phases) (#2123)

2026-05-24 14:32:43 -04:00

smoke-wasm-provider-bridge.mjs

feat(rvagent): #ADR-129 — full rvagent integration (4 phases) (#2123)

2026-05-24 14:32:43 -04:00

smoke-wasm-rvf-compose.mjs

feat(rvagent): #ADR-129 — full rvagent integration (4 phases) (#2123)

2026-05-24 14:32:43 -04:00

smoke-windows-hook-execution.mjs

fix(ci): bump cold-cache timeouts (iter 131)

2026-06-17 14:10:27 -04:00

smoke-windows-init-hooks.mjs

fix(ci): bump cold-cache timeouts (iter 131)

2026-06-17 14:10:27 -04:00

smoke-witness-marker-drift.mjs

fix(witness): #2021 — refresh stale markers, regen signed manifest, add fast drift CI guard

2026-05-16 19:20:26 -04:00

smoke-witness-verify-precondition.mjs

test(ci): isolate witness fixture and search mocks

2026-09-27 10:30:47 -04:00

smoke-workflows-yaml.mjs

fix(ci): 5 CI failures — Build V3, Static guards, ADR-112, witness verify, supply-chain audit

2026-06-25 18:18:19 -04:00

stage-internal-runtime-bundles.mjs

ci(guard): fail when a non-bundled @claude-flow/* leaf changes without a publish

2026-09-21 16:49:17 -04:00

status-forwarding.allow.json

test(mods): tripwire against forwarding a mod status file into model context (ADR-450 T7)

2026-10-05 05:37:46 -04:00

sync-mod-screen.mjs

feat(mods): vendor the flag option parser from one origin with the screen sync and drift check (review #2)

2026-10-04 23:46:06 -04:00

sync-toast-policy.mjs

feat(mods): shared toast policy and its call sites (ADR-477), work in progress

2026-10-07 12:40:10 -04:00

track-clones.mjs

fix(security): patch CVEs, shell injection, SSRF in ruflo (#2114)

2026-05-23 04:52:41 -04:00

train-bundled-fastgrnn.mjs

v3.11.0 — router ADR-148/149 + cost-tracker observability + fleet audits (#2398)

2026-06-16 12:10:35 -04:00

train-bundled-krr.mjs

v3.11.0 — router ADR-148/149 + cost-tracker observability + fleet audits (#2398)

2026-06-16 12:10:35 -04:00

train-calibrator.mjs

v3.11.0 — router ADR-148/149 + cost-tracker observability + fleet audits (#2398)

2026-06-16 12:10:35 -04:00

train-from-trajectories.mjs

v3.11.0 — router ADR-148/149 + cost-tracker observability + fleet audits (#2398)

2026-06-16 12:10:35 -04:00

tune-cost-ceiling.mjs

v3.11.0 — router ADR-148/149 + cost-tracker observability + fleet audits (#2398)

2026-06-16 12:10:35 -04:00

tune-ensemble-threshold.mjs

v3.11.0 — router ADR-148/149 + cost-tracker observability + fleet audits (#2398)

2026-06-16 12:10:35 -04:00

tune-quality-bar.mjs

v3.11.0 — router ADR-148/149 + cost-tracker observability + fleet audits (#2398)

2026-06-16 12:10:35 -04:00

verify-appliance.sh

feat(ADR-058): self-contained ruflo.rvf appliance with ruvLLM + verification suite

2026-02-28 03:30:04 +00:00

verify-federation-plugin.sh

verify(federation): unblock Checks 2/3 by pinning cookies@0.9.0 (#1949) (#1965)

2026-05-13 11:11:25 -04:00