mirror of
https://github.com/ruvnet/ruflo.git
synced 2026-11-02 18:17:51 +09:00
rUv
a3d45e64b9
* feat(core): add bounded context delegation with source-bound benchmark proof * feat(core): add governed Messages adapter and durable resumable live pilot * fix(benchmarks): isolate pilot fixtures and record bounded live timeout proof * fix(context-delegation): review fixes — pilot env allowlist, hash-before-import, real policy root; ADR-521 - subscription-pilot: the spawned claude gets an allowlisted environment (PATH, HOME, locale, XDG, CLAUDE_CONFIG_DIR, plus names in RUFLO_PILOT_CHILD_ENV_PASS) instead of the whole shell; a GH_TOKEN canary test proves it. Policy is evaluated for process.cwd(), not a hardcoded /home/ruv. - provider-pilot: the --runtime entry and policy runtime are contained and hashed before they are imported. - ADR renumbered 520 -> 521 (520 is agentdb episode CRUD on main). - Evidence regenerated for the new snapshot (9301fbfd…, Node 24): 300/300 quotes, coordinator bytes -97.56%, total boundary +3.83%; verify.mjs ok. Co-Authored-By: RuFlo <ruv@ruv.net> * fix(context-delegation): honour --worker-available through the CLI parser; scope evidence hashes to owned files - context-plan read only f['worker-available'], but the parser camelCases flags, so the documented command always planned 'worker-unavailable'. Accept both spellings; new test drives the real CommandParser (fails without the fix). - results.json no longer hashes hooks.ts, index.ts and global-ai-budget.ts. Those files change in unrelated PRs, which would have failed verify.mjs on the next one. Evidence regenerated (20491e6e…, 14 hashes), 163/163 tests, verify ok. Co-Authored-By: RuFlo <ruv@ruv.net> * chore(release): 3.70.0 Co-Authored-By: RuFlo <ruv@ruv.net>