mirror of
https://github.com/ruvnet/ruflo.git
synced 2026-11-09 22:13:39 +09:00
* fix(ci): neural status ReasoningBank row shows Empty despite persisted patterns (#2575) Derive the Status cell from the same count Details displays so the label matches the number (7798 patterns → Active) instead of the stale in-memory handle. Co-Authored-By: RuFlo <ruv@ruv.net> * fix(ci): default memory store --upsert=true to fix store→delete→store UNIQUE violation (#2594) memory_entries has UNIQUE(namespace, key) that does not exclude soft-deleted rows, so a store→delete→store cycle reliably hits UNIQUE constraint failed when --upsert defaults to false. storeEntry() already honors upsert via INSERT OR REPLACE; flipping the CLI default closes the footgun without touching schema or plumbing. Co-Authored-By: RuFlo <ruv@ruv.net> * fix(ci): remove reverse-substring collision in GAIA isAnswerCorrect (#2566) The reverse check normExpected.includes(normModel) scored fragmentary model answers as correct whenever they normalized to any substring of the expected answer (e.g. "a" vs "Paris, France" → true), inflating GAIA scores via normalization collision. ADR-169 R1 forbids this vector. Forward-substring and numeric-tolerance paths remain. Co-Authored-By: RuFlo <ruv@ruv.net> * fix(ci): skip onnxruntime-node postinstall to unblock v3 memory smoke (#2590) onnxruntime-node's postinstall fetches a GPU nupkg from nuget.org which ETIMEDOUTs from GitHub runners, taking pnpm install down. Skip it via neverBuiltDependencies (CPU prebuilds ship in the npm tarball, so runtime is unaffected) and pass --ignore-scripts in the memory smoke workflow as a belt-and-braces safety net. Co-Authored-By: RuFlo <ruv@ruv.net> * fix(ci): drop verifyMemoryInit writeback that races better-sqlite3 handle on Windows (#2596) sql.js verification holds an in-memory DB copy; writing it back via atomic rename fights the open better-sqlite3 WAL handle owned by ControllerRegistry / repairVectorIndexes, producing EPERM on Windows. Verification is read-only — close and discard the copy instead. Co-Authored-By: RuFlo <ruv@ruv.net> * fix(ci): auto-heal doctor Learning Bridge sidecar on plain run (#2599) Co-Authored-By: RuFlo <ruv@ruv.net> * fix(ci): prune CLI optionalDependencies to fix cold npx timeout (#2561) Cold `npx -y @claude-flow/cli@alpha --version` (and the ruflo wrapper) timed out because npm had to resolve and place ~30 optional deps before Node ever ran the in-process --version fast-path in bin/cli.js. Trim optionalDependencies to the 5 actually used by the default CLI path (agentdb, ruvector, agentic-flow, @claude-flow/memory, @claude-flow/security); everything else is already gated behind try/require or the plugins-store lazy-install path. Mirror the pruning in the ruflo wrapper. Add a pre-warm npm install step in verification-pipeline.yml as defense-in-depth. Co-Authored-By: RuFlo <ruv@ruv.net> * fix(ci): align ruflo-hook.cjs npx fallback with .sh dist-tag (#2600) The three shipped .cjs Windows shims hardcoded ruflo@latest while the bash shim used ruflo@alpha, breaking the "mirrors ruflo-hook.sh" contract from #2132. Point all three .cjs shims at ruflo@alpha and extend the smoke test with a static parity assertion so future drift fails CI. Co-Authored-By: RuFlo <ruv@ruv.net> * fix(ci): replace phantom agentic-flow/transport/loader marker in ADR-104 witness (#2578) Co-Authored-By: RuFlo <ruv@ruv.net> * fix(ci): re-sign + verify helpers manifest in prepublishOnly (#2593) Manifest drift (intelligence.cjs was bumped in 3.24/3.25 but the manifest still carried the 3.23.0 hash) triggered writeCriticalHelpers' fail-closed tamper warning on every CLI run in stamped projects. Root cause: sign-helpers.mjs existed but was never wired into publish. This wires sign+verify into prepublishOnly so drift fails the release, not every user. Co-Authored-By: RuFlo <ruv@ruv.net> * test(2590): guard against regression of #2590 Adds a CI guard step to the memory-smoke job that fails fast if either part of the #2590 fix regresses: 1) v3/package.json drops "onnxruntime-node" from pnpm.neverBuiltDependencies 2) the memory-smoke pnpm install loses --ignore-scripts Either regression would let onnxruntime-node's postinstall fetch a GPU nupkg from nuget.org and ETIMEDOUT on GitHub runners, taking pnpm install down as it did on main. Co-Authored-By: RuFlo <ruv@ruv.net> * test(2594): guard against regression of #2594 Co-Authored-By: RuFlo <ruv@ruv.net> * test(2561): guard against regression of #2561 Co-Authored-By: RuFlo <ruv@ruv.net> * test(2593): guard against regression of #2593 Co-Authored-By: RuFlo <ruv@ruv.net> * test(2596): guard against regression of #2596 Adds a vitest regression test asserting verifyMemoryInit() does not modify the on-disk DB file — snapshots bytes+mtime before, calls verify, asserts unchanged after. Fails if the sql.js writeback is re-added (bytes change from re-serialization, mtime bumps), passes on the fix. Co-Authored-By: RuFlo <ruv@ruv.net> * test(2566): guard against regression of #2566 Locks in the removal of the reverse-substring branch in isAnswerCorrect() (v3/@claude-flow/cli/src/benchmarks/gaia-agent.ts). The reverse rule `normExpected.includes(normModel)` scored fragmentary model answers (e.g. "a") as correct against any longer expected answer that contained them ("Paris, France"), inflating GAIA scores via normalization-collision — the vector ADR-167/169 R1 forbid. Verified: FAILS if the reverse-substring branch is reintroduced, PASSES on the current fix. Co-Authored-By: RuFlo <ruv@ruv.net> * test(2578): guard against regression of #2578 Co-Authored-By: RuFlo <ruv@ruv.net> * test(2599): guard against regression of #2599 Co-Authored-By: RuFlo <ruv@ruv.net> * chore(release): 3.25.3 — 10 fixes + CI guards Bumps @claude-flow/cli, claude-flow (umbrella), ruflo (wrapper) to 3.25.3. Regens v3 pnpm-lock.yaml after optionalDependencies pruning (#2561) and neverBuiltDependencies additions (#2590). Fixes included: - #2561 npx cold-install timeout — pruned CLI optionalDependencies - #2566 GAIA isAnswerCorrect reverse-substring collision - #2575 neural status ReasoningBank Empty vs 7798 patterns display - #2578 ADR-104 phantom agentic-flow/transport/loader witness marker - #2590 CI Node24/ubuntu memory smoke — onnxruntime-node postinstall block - #2593 helpers.manifest.json auto-refresh — verify + sign in prepublishOnly - #2594 memory store UNIQUE violation — flip --upsert default to true - #2596 memory init Windows EPERM — drop sql.js writeback race - #2599 doctor Learning Bridge — self-heal via recordMemoryPackagePath - #2600 Windows shim dist-tag parity — align @alpha across all shims CI guards added per fix. Co-Authored-By: RuFlo <ruv@ruv.net>
167 lines
5.1 KiB
JavaScript
167 lines
5.1 KiB
JavaScript
#!/usr/bin/env node
|
|
/**
|
|
* ruflo-hook.cjs — cross-platform Node.js port of ruflo-hook.sh (#2132)
|
|
*
|
|
* The bash shim (ruflo-hook.sh) works on Mac/Linux but fails on native
|
|
* Windows (exit 126 — "cannot execute binary file"). This .cjs shim
|
|
* provides identical behaviour via Node.js child_process so Windows users
|
|
* get working hooks without WSL or Git Bash.
|
|
*
|
|
* Mac/Linux continue to use ruflo-hook.sh via the plugin hooks.json files
|
|
* (unchanged). On Windows, ruflo init writes a .claude/settings.json that
|
|
* overrides those entries with node-based equivalents pointing here.
|
|
*
|
|
* Behaviour mirrors ruflo-hook.sh:
|
|
* 1. Reads hook JSON payload from stdin.
|
|
* 2. Prefers a locally installed `ruflo` or `claude-flow` binary.
|
|
* 3. Falls back to `npx --prefer-offline ruflo@alpha`.
|
|
* 4. Always exits 0 — hook subcommands are best-effort telemetry.
|
|
* 5. Swallows all stderr — nothing should surface to Claude Code.
|
|
*
|
|
* Usage: node ruflo-hook.cjs <hook-subcommand> [args...]
|
|
* e.g. node ruflo-hook.cjs post-edit --file "x.ts" --train-patterns
|
|
*/
|
|
|
|
'use strict';
|
|
|
|
const { spawnSync, execSync } = require('child_process');
|
|
const fs = require('fs');
|
|
const path = require('path');
|
|
|
|
/** Exit 0 unconditionally — hooks must never block a turn */
|
|
function done() {
|
|
process.exit(0);
|
|
}
|
|
|
|
/** Resolve stdin to a JSON object, or null if not parseable */
|
|
function readStdinJson() {
|
|
try {
|
|
let buf = '';
|
|
// Read synchronously — hooks fire synchronously in Claude Code
|
|
const fd = fs.openSync('/dev/stdin', 'r');
|
|
const chunk = Buffer.alloc(64 * 1024);
|
|
let bytesRead;
|
|
while ((bytesRead = fs.readSync(fd, chunk, 0, chunk.length, null)) > 0) {
|
|
buf += chunk.slice(0, bytesRead).toString('utf8');
|
|
}
|
|
fs.closeSync(fd);
|
|
return buf.trim() ? JSON.parse(buf) : null;
|
|
} catch {
|
|
return null;
|
|
}
|
|
}
|
|
|
|
/** Read stdin via process.stdin in sync mode (Windows-safe alternative) */
|
|
function readStdinSync() {
|
|
try {
|
|
// On Windows /dev/stdin doesn't exist; use fd 0 directly
|
|
const chunk = Buffer.alloc(64 * 1024);
|
|
let buf = '';
|
|
let bytesRead;
|
|
while (true) {
|
|
try {
|
|
bytesRead = fs.readSync(0 /* STDIN_FILENO */, chunk, 0, chunk.length, null);
|
|
if (bytesRead === 0) break;
|
|
buf += chunk.slice(0, bytesRead).toString('utf8');
|
|
} catch {
|
|
break;
|
|
}
|
|
}
|
|
return buf.trim() ? JSON.parse(buf) : null;
|
|
} catch {
|
|
return null;
|
|
}
|
|
}
|
|
|
|
/** Check if a binary is available on PATH */
|
|
function commandExists(cmd) {
|
|
try {
|
|
const result = execSync(
|
|
process.platform === 'win32' ? `where ${cmd}` : `command -v ${cmd}`,
|
|
{ encoding: 'utf8', stdio: ['ignore', 'pipe', 'ignore'] }
|
|
);
|
|
return result.trim().length > 0;
|
|
} catch {
|
|
return false;
|
|
}
|
|
}
|
|
|
|
/** Build the argv for the ruflo/claude-flow/npx invocation */
|
|
function buildArgs(subcommand, extraArgs) {
|
|
// The `hooks` word is prepended here, matching ruflo-hook.sh convention.
|
|
return ['hooks', subcommand, ...extraArgs];
|
|
}
|
|
|
|
/**
|
|
* Spawn the CLI with the hook subcommand.
|
|
* Passes the raw stdin payload as the child's stdin so the CLI can read
|
|
* the hook event JSON if needed (same as the bash pipe).
|
|
*
|
|
* Returns true on success (exit 0), false otherwise.
|
|
*/
|
|
function invokeHook(bin, binArgs, hookArgs, stdinData) {
|
|
const args = [...binArgs, ...hookArgs];
|
|
|
|
// On Windows, shell: true is needed to resolve .cmd shims in node_modules
|
|
const useShell = process.platform === 'win32';
|
|
|
|
const result = spawnSync(bin, args, {
|
|
shell: useShell,
|
|
input: stdinData || '',
|
|
encoding: 'utf8',
|
|
stdio: ['pipe', 'ignore', 'ignore'], // swallow all output
|
|
timeout: 30_000,
|
|
});
|
|
|
|
return result.status === 0;
|
|
}
|
|
|
|
function main() {
|
|
const args = process.argv.slice(2);
|
|
if (args.length === 0) {
|
|
// No subcommand — no-op, same as bash version
|
|
done();
|
|
}
|
|
|
|
const [subcommand, ...rest] = args;
|
|
|
|
// Read stdin (the hook event payload) — best effort
|
|
let stdinData = '';
|
|
try {
|
|
stdinData = fs.readFileSync(0 /* fd 0 = stdin */, 'utf8');
|
|
} catch {
|
|
// stdin may not be available when invoked directly for testing
|
|
stdinData = '';
|
|
}
|
|
|
|
const hookArgs = buildArgs(subcommand, rest);
|
|
|
|
// Priority 1: locally installed ruflo binary
|
|
if (commandExists('ruflo')) {
|
|
invokeHook('ruflo', [], hookArgs, stdinData);
|
|
done();
|
|
}
|
|
|
|
// Priority 2: locally installed claude-flow binary
|
|
if (commandExists('claude-flow')) {
|
|
invokeHook('claude-flow', [], hookArgs, stdinData);
|
|
done();
|
|
}
|
|
|
|
// Priority 3: npx --prefer-offline fallback (avoids cold registry resolve).
|
|
//
|
|
// SKIP this when RUFLO_HOOK_SKIP_NPX=1 — used by CI smokes that test
|
|
// the shim's *control flow* without exercising npm install network paths.
|
|
// Without the skip, npx can take 30+s on a cold runner (no warm cache,
|
|
// no offline tarball), exceeding the smoke's 15s timeout and producing
|
|
// a spurious failure even though the shim itself works correctly.
|
|
// The bash version doesn't hit this because it backgrounded the work.
|
|
if (process.env.RUFLO_HOOK_SKIP_NPX !== '1') {
|
|
invokeHook('npx', ['--prefer-offline', '--yes', 'ruflo@alpha'], hookArgs, stdinData);
|
|
}
|
|
|
|
done();
|
|
}
|
|
|
|
main();
|