akushonkamen
87d8687f3f
* fix(ruflo-agentdb): stop the secret screen treating a hyphen-named memory key as a credential field
assignmentSecret() ran the KEY_NAME key-assignment check on every match, so
any entry whose name starts with auth (auth-flow-notes) plus up to 40 name
characters looked like a config field, and keyedSecret()/plausibleSecret()
then judged the entry's value as a credential: a write of
{ key: 'auth-flow-notes', value: 'getUser-not-getSession' } was refused
(#4202). A key that is itself a multi-word hyphenated name is an entry's
name, not a field, so the keyed check now skips it; the secret shapes still
screen the whole text, and single-word credential keys (auth, api_key,
token) keep blocking keyed literals.
Synced to the 39 plugin copies with scripts/sync-mod-screen.mjs.
Fixes #4202
Assisted-by: AI (automated contributor session, disclosed on the issue)
* chore(ci): exclude plugins/ruflo-agentdb/tests/guard-keys.test.ts from the root vitest run
The new test imports claude-code/testing like its six siblings, so the root
ratchet run (scripts/ci-test-ratchet.mjs) cannot collect it outside Claude
Code; list it in scripts/ci-test-excluded.txt per the documented convention
so ci.yml stays green until 'claude plugin test plugins/ruflo-agentdb' runs
it in all-plugins-smoke.
Follow-up to #4202
Assisted-by: AI (automated contributor session, disclosed on the issue)
ruflo-loop-workers
Cache-aware /loop workers and CronCreate background automation. Substrate plugin for every recurring task in the ruflo family.
Install
/plugin marketplace add ruvnet/ruflo
/plugin install ruflo-loop-workers@ruflo
What's Included
- Loop Workers: Recurring tasks via
/loopwith ScheduleWakeup (delay <270s for prompt cache hits) - CronCreate: Session-scoped cron jobs for audit, optimization, and monitoring (they end with the session and expire after 7 days; use
/scheduleor an OS scheduler to outlive it) - 12 Background Workers: ultralearn, optimize, consolidate, predict, audit, map, preload, deepdive, document, refactor, benchmark, testgaps
- Daemon Management: Start, stop, status, trigger, and enable workers
- ADR-091 Integration: Native Claude Code capabilities preferred over daemon polling
Requires
ruflo-coreplugin (provides MCP server)
Compatibility
- CLI: pinned to
@claude-flow/cliv3.6 major+minor. - Verification:
bash plugins/ruflo-loop-workers/scripts/smoke.shis the contract.
MCP surface (5 tools)
All defined at v3/@claude-flow/cli/src/mcp-tools/hooks-tools.ts:
| Tool | Purpose |
|---|---|
hooks_worker-list |
List available workers and their triggers |
hooks_worker-dispatch |
Dispatch a worker run with --trigger <worker-name> and optional --scope |
hooks_worker-status |
Inspect a running worker |
hooks_worker-detect |
Detect which workers should fire based on context |
hooks_worker-cancel |
Cancel a running worker |
12 worker triggers → consumer plugins
| Trigger | Consumer plugin | Purpose |
|---|---|---|
ultralearn |
ruflo-intelligence |
Bootstrap learning corpus from a deep codebase scan |
optimize |
ruflo-cost-tracker, ruflo-intelligence |
Performance + cost optimization recommendations |
consolidate |
ruflo-intelligence, ruflo-agentdb |
EWC++ memory consolidation |
predict |
ruflo-intelligence |
Predictive routing for upcoming tasks |
audit |
ruflo-security-audit, ruflo-aidefence |
Security + compliance audit pass |
map |
ruflo-knowledge-graph |
Build/refresh entity-relation knowledge graph |
preload |
ruflo-core, ruflo-rag-memory |
Warm caches before high-frequency operations |
deepdive |
ruflo-goals (deep-research) |
Multi-source investigation pass |
document |
ruflo-docs |
Generate API docs + drift detection |
refactor |
ruflo-jujutsu |
Diff-aware refactor recommendations |
benchmark |
ruflo-cost-tracker, ruflo-iot-cognitum |
Perf benchmarks |
testgaps |
ruflo-testgen |
Coverage gap detection + test generation |
Invocation pattern (CLI + MCP):
# CLI
npx @claude-flow/cli@latest hooks worker dispatch --trigger document --context src/api
# MCP (trigger is required; context, priority and background are optional; there is no scope field)
npx @claude-flow/cli@latest mcp exec -t hooks_worker-dispatch -p '{"trigger": "document", "context": "src/api"}'
Cache-aware /loop integration
This plugin pairs with ruflo-autopilot ADR-0001 which owns the 270s cache-aware ScheduleWakeup heartbeat contract. Recommended fallback heartbeat is 270 seconds — under the 5-minute prompt-cache TTL so the next wake-up reads conversation context cached. Going past 300s pays a cache-miss; rounding to 5 minutes is the worst-of-both case. This only applies to sessions on the 5-minute TTL: where ScheduleWakeup documents a 1-hour TTL, idle polling at 1200–1800s is cheaper and 270s wakes buy nothing.
For event-driven loops, arm a Monitor and let the 270s wake be the safety net.
Namespace coordination
This plugin owns the worker-history AgentDB namespace (kebab-case, follows the convention from ruflo-agentdb ADR-0001 §"Namespace convention"). Reserved namespaces (pattern, claude-memories, default) MUST NOT be shadowed.
worker-history records dispatch events, durations, success/failure verdicts. Accessed via memory_* tools (namespace-routed).
Verification
bash plugins/ruflo-loop-workers/scripts/smoke.sh
# Expected: "12 passed, 0 failed"
Architecture Decisions
Related Plugins
ruflo-autopilot— owns the 270s cache-aware /loop heartbeat contractruflo-docs,ruflo-security-audit,ruflo-testgen,ruflo-knowledge-graph, etc. — worker-trigger consumers per the table aboveruflo-agentdb— namespace convention owner; backing store for worker-history
As a mod
This plugin ships a function-hook mod (ADR-445, hooks/register.ts). It makes no network call, spawns no process and makes no model call.
- Guard (tighten-only, on by default): Refuses
hooks_worker-dispatchwhose context holds a key, token or password (workers log their context), and any dispatch past the per-session cap, which catches a stuck loop that keeps dispatching. A refusal never echoes the secret. /loop-mod:status,recent,tools(which of this plugin's tools are connected) andscan <text>(would the guard refuse it). Answered locally.- Status file:
.claude-flow/loop-mod/status.json({version: 1, updatedMs, guard, calls, total, blocked, recent}, counters only, never tool input), written at session start and after every call to this plugin's tools.
Options (userConfig): guard (on), maxDispatch (100, range 1 to 1000).
Test it: claude plugin validate plugins/ruflo-loop-workers, claude plugin test plugins/ruflo-loop-workers, bash plugins/ruflo-loop-workers/scripts/smoke.sh.