ruv 8f4b47af16 fix(security): migration-safe hive-mind gating by caller transport (ADR-476, #3338) ...

Gate hive-mind init/join/leave/spawn/propose/vote/broadcast/shutdown/
memory set+delete/optimize-memory for remote (HTTP/WebSocket) callers only;
local stdio, ruflo mcp exec, the CLI and in-process callers keep working
with no extra step. hive-mind_init never returns hiveToken. Operator secret
from RUFLO_HIVE_BOOTSTRAP_SECRET or a 0600 bootstrap.secret created by the
first local init. state.json is written 0600 atomically (dir 0700).
Constant-time compare. RUFLO_HIVE_REQUIRE_AUTH=1 for bridged stdio.

Co-Authored-By: RuFlo <ruv@ruv.net>

2026-10-07 10:18:44 -04:00

..

cli.js

fix(security): migration-safe hive-mind gating by caller transport (ADR-476, #3338)

2026-10-07 10:18:44 -04:00

mcp-server.js

fix(security): migration-safe hive-mind gating by caller transport (ADR-476, #3338)

2026-10-07 10:18:44 -04:00

preinstall.cjs

feat: Ruflo v3.5.0 — first major stable release with full agentic-flow integration

2026-02-27 22:37:14 +00:00