ruvandRuFlo b4e1776675 fix(github): #2089 — complete Phase 3 (5 init-template agents missed) + strengthen smoke + alpha.75 ...

Post-publish validation of alpha.74 found 5 init-template agents still
shipping `actions/checkout@v3`:

  v3/@claude-flow/cli/.claude/agents/github/release-manager.md
  v3/@claude-flow/cli/.claude/agents/github/swarm-pr.md
  v3/@claude-flow/cli/.claude/agents/github/release-swarm.md
  v3/@claude-flow/cli/.claude/agents/github/repo-architect.md
  v3/@claude-flow/cli/.claude/agents/github/workflow-automation.md

The Phase 3 sed in PR #2094 only scanned `.claude/agents/github/`
(dogfood) and `v3/@claude-flow/cli/.claude/commands/github/` (init
commands). It missed the *init-template agents* subtree at
`v3/@claude-flow/cli/.claude/agents/github/` and the *dogfood commands*
at `.claude/commands/github/`.

`smoke-deprecated-actions.mjs` had the same scan-tree gap, which is
why CI didn't catch this. Smoke now scans all 5 trees:

  .claude/agents/github/
  .claude/skills/
  .claude/commands/github/                                  (added)
  v3/@claude-flow/cli/.claude/agents/github/                (added)
  v3/@claude-flow/cli/.claude/commands/github/

Verified: `npm pack @claude-flow/cli@3.7.0-alpha.74 && grep ... @v3`
showed the 5 missed files in the published tarball.

Versions bumped to 3.7.0-alpha.75 across cli + claude-flow umbrella + ruflo wrapper.

Co-Authored-By: RuFlo <ruflo-bot@users.noreply.github.com>

2026-05-21 14:37:43 -04:00

..

__tests__

ci: #2046 supply-chain hardening — five-layer audit + dependency review + CODEOWNERS

2026-05-19 08:23:30 -04:00

audit-cli-mcp-tools.mjs

fix(#1916): register agent_logs + hive worker resolution + all 20 dangling CLI↔MCP tools — published 3.7.0-alpha.26 (#1924)

2026-05-12 00:40:47 -04:00

audit-codex-integration.mjs

feat(codex): finish Codex ↔ Ruflo integration — real codex exec, dual run --worker, tests, CI guard (#1909) (#1911)

2026-05-11 11:50:56 -04:00

audit-fix-invariants.mjs

fix(plugin-agent-federation): #1949 — agentic-flow → optional peer dep (drops cookies@0.9.1 blocker) (#2013)

2026-05-15 07:47:29 -04:00

audit-hook-commands.mjs

fix(#1921): plugin hooks use a resilient shim, not bare npx @alpha per fire (#1923)

2026-05-12 00:51:18 -04:00

audit-hook-handler-prompt.mjs

fix(hooks): pre-bash TypeError + global-install MODULE_NOT_FOUND (#1944, #1943) (#1957)

2026-05-13 09:02:51 -04:00

audit-neural-trader-safety.mjs

fix(neural-trader): mitigate upstream fork-bomb on install + CI guard (#1974) (#1976)

2026-05-14 08:03:31 -04:00

audit-package-dep-overlap.mjs

fix(embeddings): #2018 — drop @huggingface/transformers from optionalDependencies (npx Invalid Version)

2026-05-15 21:44:39 -04:00

audit-plugin-packages.mjs

fix(plugins): #1902/#1903/#1904 install-safety + plugin-package CI guard (#1925)

2026-05-12 00:44:57 -04:00

audit-supply-chain.mjs

ci: #2046 supply-chain hardening — five-layer audit + dependency review + CODEOWNERS

2026-05-19 08:23:30 -04:00

audit-tool-descriptions.mjs

feat(mcp): ADR-112 — 285/285 tool descriptions have 'Use when …' guidance + CI guard + #1892 statusline (#1897)

2026-05-11 00:29:58 -04:00

audit-vector-dim.mjs

fix(memory): schema vector_indexes dim 768→384 + CI guard (#1947, #1942, #1952) (#1956)

2026-05-13 09:02:02 -04:00

bulk-fix-tool-descriptions.mjs

feat(mcp): ADR-112 — 285/285 tool descriptions have 'Use when …' guidance + CI guard + #1892 statusline (#1897)

2026-05-11 00:29:58 -04:00

cleanup-v3.sh

checkpoint: File edit:

2026-01-04 19:30:59 +00:00

install.sh

fix: 5 critical bugs — cwd, intelligence hang, memory init, ruvector v3.5.52

2026-04-06 11:47:30 -04:00

inventory-capabilities.mjs

chore(verification): regenerate inventory + fix CRLF bug in extractor

2026-05-05 22:18:18 -04:00

regen-witness.mjs

feat: per-OS verification cognitive containers + tutorial README

2026-05-09 10:47:43 -04:00

regenerate-witness.mjs

chore(release): bump to 3.6.25 + regen witness manifest

2026-05-03 21:40:25 -04:00

sign-witness-from-inventory.mjs

feat(verification): per-source-file MCP witnesses (task #25, iteration #51)

2026-05-03 21:47:15 -04:00

smoke-attribution-opt-in.mjs

feat(init): #2089 ADR-127 Phase 4 — attribution opt-in across 19 github command files + last-updated stamps

2026-05-21 14:19:35 -04:00

smoke-browser-rvf-create-flags.mjs

ci: #2041 ADR-122 — make browser rvf smoke tolerant of missing dist

2026-05-18 20:55:31 -04:00

smoke-cli-npx-install.mjs

fix(embeddings): #2018 — drop @huggingface/transformers from optionalDependencies (npx Invalid Version)

2026-05-15 21:44:39 -04:00

smoke-deprecated-actions.mjs

fix(github): #2089 — complete Phase 3 (5 init-template agents missed) + strengthen smoke + alpha.75

2026-05-21 14:37:43 -04:00

smoke-github-actions-pins.mjs

feat(ci): #2089 ADR-127 Phase 1 — github-safe injection smoke + uses: pin smoke + supply-chain allowed-deps actions block

2026-05-21 14:03:29 -04:00

smoke-github-safe-injection.mjs

fix(smoke): #2089 — accept E2BIG as valid rejection in github-safe injection smoke

2026-05-21 14:23:31 -04:00

smoke-kg-extract-type-imports.mjs

fix(kg-extract): #2049 — separate import type from value imports + drop disabled semantic-route + CI guard

2026-05-19 12:19:16 -04:00

smoke-memory-no-stray-db.mjs

chore(memory): #2061 ADR-125 Phase 7 — RuVector boundary cleanup + no-stray-db CI smoke

2026-05-19 17:29:51 -04:00

smoke-neural-trader-backtest-signing.mjs

feat(neural-trader): #2068 ADR-126 Phase 4 — Ed25519-signed backtest artifacts

2026-05-19 22:39:21 -04:00

smoke-neural-trader-feature-attribution.mjs

feat(neural-trader): #2068 ADR-126 Phase 6 — feature attribution via single-entry PR

2026-05-19 23:04:14 -04:00

smoke-neural-trader-pipeline.mjs

feat(neural-trader): #2068 ADR-126 Phase 5 — SendMessage risk-gate pipeline

2026-05-19 22:44:34 -04:00

smoke-neural-trader-portfolio-cg.mjs

feat(neural-trader): #55 — wire native sublinear CG dispatch (40-60× when available)

2026-05-20 16:28:51 -04:00

smoke-plugin-registry-signature.mjs

fix(security): #1922 — verify plugin-registry Ed25519 signature properly (CWE-347)

2026-05-19 16:39:54 -04:00

smoke-pre-bash-hook.mjs

fix(hooks): #2017 — defensive pre-bash + new CI gate against silent-swallow shape

2026-05-15 22:29:21 -04:00

smoke-ruvllm-wasm-auto-init.mjs

fix(mcp): #2086 — auto-init ruvllm WASM in loadRuvllmWasm + CI regression guard

2026-05-21 12:36:22 -04:00

smoke-witness-marker-drift.mjs

fix(witness): #2021 — refresh stale markers, regen signed manifest, add fast drift CI guard

2026-05-16 19:20:26 -04:00

smoke-witness-verify-precondition.mjs

fix(verify+memory+browser): #1880, #2019, #2015 — three precondition/contract fixes + CI guards

2026-05-16 08:44:51 -04:00

track-clones.mjs

feat(data): clone tracker with 13-day cron + RVF + proof, bump downloads badge to 22.2M+

2026-05-19 19:18:39 -04:00

verify-appliance.sh

feat(ADR-058): self-contained ruflo.rvf appliance with ruvLLM + verification suite

2026-02-28 03:30:04 +00:00

verify-federation-plugin.sh

verify(federation): unblock Checks 2/3 by pinning cookies@0.9.0 (#1949) (#1965)

2026-05-13 11:11:25 -04:00