# Changelog

All notable changes to the Ruflo project (formerly Claude Flow) are documented here.

The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).

## [Unreleased]

## [3.34.0] - 2026-07-31

### Added

- **AGNTCY/Outshift runtime integration (ADR-378/379/380)** — optional, removable augmentation per ADR-150's pattern; the kernel stays fully operational with these packages absent. `ruflo transport use slim`, `ruflo agent publish`, and `ruflo swarm join <namespace>` CLI verbs; CASA (Continuous Agentic Semantic Authorization) envelope schema, deterministic compiler, and deny-by-default enforcement gate with Ed25519-signed decision receipts (`.swarm/casa-receipts.jsonl`); AGNTCY OTel span attributes (`coordination.episode`, `authorization.decision`). All verbs exit 0 with a clear message when `RUFLO_AGNTCY_SLIM_ENDPOINT` is unset — no fake success paths. Companion Rust crate `v3/crates/ruflo-agntcy` mirrors the TS enforcement logic, with a real in-process `LocalTransport` and a `SlimTransport` stub behind a non-default `slim` Cargo feature. Companion package `@metaharness/agntcy` (build-time half — identity, OASF export, Directory publish, semantic observability) ships from the sibling `metaharness` repo. (`v3/@claude-flow/cli/src/commands/agntcy/`, `plugins/ruflo-agntcy/`, `v3/crates/ruflo-agntcy/`, `v3/docs/adr/ADR-378-*.md`, `ADR-379-*.md`, `ADR-380-*.md`)
- **npm Trusted Publishing (OIDC) release workflow (ADR-378)** — `.github/workflows/stable-npm-release.yml` publishes the three-package stable train (`@claude-flow/cli`, `claude-flow`, `ruflo`) from an immutable, tag-pinned checkout with a full test/build/pack/install smoke-test gate before any registry write, verifies published-package integrity against the locally-built archive, and rolls out `latest`/`alpha`/`v3alpha` dist-tags together. Manual `workflow_dispatch` only, gated to the `ruvnet` actor.
- Configurable statusline cost segment via two environment variables (defaults unchanged):
  - `RUFLO_STATUSLINE_COST_SYMBOL` — override the leading `$` (e.g. `⚡`, `€`, `🌱`); empty string shows the number alone.
  - `RUFLO_STATUSLINE_HIDE_COST` — `1`/`true`/`yes`/`on` hides the segment. `cost.total_cost_usd` is a client-side estimate that may differ from the actual bill and is misleading on subscription plans.

### Fixed

- **`@agntcy/slim-bindings` pinned to the confirmed-working alpha** — the SLIM maintainers moved off `uniffi-bindgen-react-native` (which shipped raw, uncompiled TypeScript incompatible with plain Node `require`/`import` — filed as agntcy/slim#1916, reproduced and confirmed) onto `@ubjs/core`/`@ubjs/node` in the `2.0.0-alpha.4+` dist-tag, not yet promoted to `latest`. `v3/@claude-flow/cli/package.json` now pins the exact working alpha version (deliberate exact-pin for a pre-release channel, not a caret range) rather than the still-broken `latest`; verified live end-to-end (server bring-up, client connect, graceful shutdown, zero `ERR_UNSUPPORTED_NODE_MODULES_TYPE_STRIPPING`). `detectAgntcyRuntime()` required zero logic changes — its existing graceful-degradation design already returned `configured: true` once the upstream package resolved.
- **`security scan` failed open on unvalidated `--depth` / `--type` / `--target`** — an unrecognised `--type` matched none of the three phase guards, so no phase ran at all and the command still printed "No security issues found!" and exited 0; an unrecognised `--depth` fell through chained ternaries to the *shallowest* traversal (so `--depth full` scanned less than the default `standard`), which on a tree whose only HIGH finding sat below that budget also flipped the critical/high exit-code gate from 1 to 0; and a non-existent or non-directory `--target` read nothing, which the swallowed dir-read catches turned into a clean banner, exit 0, and a **persisted CLEAN report** that `getSecurityStatus` then surfaced as CLEAN. All three now fail closed before anything is scanned or written. Chained ternaries replaced with exhaustive `Record<ScanDepth, number>` maps behind real type predicates, and the recursion guard now positive-tests its budget so a bad value stops traversal instead of disabling the limiter. (`v3/@claude-flow/cli/src/commands/security.ts`)

### Changed

- **`security scan --depth full` is deprecated, not removed** — `full` was never a supported depth, but the CLI itself emitted it (statusline insight, announcement, the CLAUDE.md `init` generates, two shipped agent definitions). It is now normalised to `deep` with a warning rather than rejected, and those emitters have been updated to `--depth deep`. (`v3/@claude-flow/cli/src/funnel/insights.ts`, `funnel/messages.ts`, `commands/announcements.ts`, `init/claudemd-generator.ts`, `.claude/agents/v3/security-architect*.md`)

### Removed

- **`security scan --type container` is rejected instead of silently reporting clean** — it had been advertised in `--type`'s help since the command was written, but no phase ever implemented it, so it scanned nothing and printed a clean bill of health. It now exits 1 with an explicit "not implemented" message, and the help text no longer offers it. **Breaking** for any pipeline passing `--type container`, which previously exited 0. (`v3/@claude-flow/cli/src/commands/security.ts`)

## [3.32.10] - 2026-07-26

Bug-fix release closing the tracker-fire sweep from 2026-07-24 → 2026-07-26. All fixes are surgical and additive; no API surface change, no schema change, patch semver.

### Fixed

- **Statusline promo row blank on new installs** — restored the cold-start local seed pool that ADR-311 had emptied. The remote Cognitum-served pool (`funnel.ruv.io/v1/messages`) remains authoritative via `eligibleMessagesFromPools` (remote wins by `id`); the seed only renders during the ≤ 60s cold-start window before the first successful remote fetch lands. Nine seed messages ship: one disclosure, seven educational tips (all pointing at `cognitum.one` docs), one promotional. (`v3/@claude-flow/cli/src/funnel/messages.ts`)
- **#2777** — `ruflo init` no longer imports the entire ruvnet/ruflo repo (97 MB, 384 `SKILL.md`) into `.agents/skills/ruflo/`. Materialization now writes only the single platform `SKILL.md`, and the idempotency gate detects a "bloated" prior install (Cargo.toml/crates/ present or size > 1 MB) and wipes+re-materializes. (`v3/@claude-flow/cli/src/commands/init.ts`)
- **#2781** — `ruflo-adr adr-index` no longer silently drops ADR data: status regex accepts the `- **Status**: proposed` form `adr-create` emits, single-line and wrapped relation lines parse fully, and `CLI_CORE=1` no longer forks writes into an alternate store the default reader can't see (warns and unifies on `@claude-flow/cli@latest`). Dry-run over the repo's 531 ADRs now captures 608 edges cleanly. (`plugins/ruflo-adr/scripts/lib/parse-adrs.mjs`, `import.mjs`, `reindex.mjs`)
- **#2770** — Windows: `browser-session` MCP tools and two init-flow `execFileSync('npx', …)` sites now set `shell: process.platform === 'win32'` so cmd.exe can resolve `npx.cmd`. POSIX behavior unchanged. Each site carries a shell-injection note for future editors. (`v3/@claude-flow/cli/src/mcp-tools/browser-tools.ts`, `v3/@claude-flow/cli/src/commands/init.ts`)
- **#2782** — `WorkerDaemon.saveState()`, `autopilot-state.saveState()`, and `autopilot-state.appendLog()` no longer race on a shared `.tmp` filename under in-process concurrent workers. All three sites now call the existing `writeFileAtomic` helper (pid + timestamp + random-suffixed temp) so concurrent callers cannot collide; each write is wrapped in try/catch so a losing racer can't crash the daemon. (`v3/@claude-flow/cli/src/services/worker-daemon.ts`, `v3/@claude-flow/cli/src/autopilot-state.ts`)
- **#2785** — `ruflo hooks post-task` now accepts `--task` (short `-t`) and `--store-results` flags, matching the CLAUDE.md-documented usage. Routing outcomes finally persist to the namespace `hooks_metrics` reads, so the "Pattern Learning" / "Agent Routing" numbers become non-zero. (`v3/@claude-flow/cli/src/commands/hooks.ts`)
- **#2786** — AgentDB no longer silently fails to initialize when `CLAUDE_FLOW_ENCRYPT_AT_REST=1` is set. Added `getAgentDbPath()` which returns the same directory as `getDbPath()` but with basename `agentdb-memory.db`, so the ControllerRegistry (native better-sqlite3) opens a distinct file from the sql.js CRUD writer's `memory.db` (which stays encrypted). `learningSystem`/`reasoningBank` populate correctly with encryption enabled. (`v3/@claude-flow/cli/src/memory/memory-bridge.ts`)
- **#2776** — Statusline security segment: `STALE` and `IN_PROGRESS` states are now reachable via a local overlay (`getLocalSecurity`) that recomputes freshness on every render from `.claude/security-scans/scan-*.json`. Configurable via `RUFLO_SCAN_STALE_HOURS` (default 24) and `RUFLO_SCAN_PENDING_CAP_MIN` (default 30); STALE renders dim gray so it stops shouting for attention once escalated. (`.claude/helpers/statusline.cjs`)
- **#2775** — Memory store to an existing key no longer dead-ends: `bridgeStoreEntry` uses `INSERT ... ON CONFLICT` with tombstone auto-resurrect; UNIQUE returns a typed error instead of `null` (no more misleading demotion into the #2735 guard); `bridgeDeleteEntry` runs `wal_checkpoint(PASSIVE)`; CLI `memory store --upsert` default now applies at the parser layer (root cause: `parser.ts:applyDefaults` only walked `globalOptions`); the `memory_store` MCP tool schema defaults `upsert: true` for CLI parity. (`v3/@claude-flow/cli/src/memory/memory-bridge.ts`, `commands/memory.ts`, `parser.ts`, `mcp-tools/memory-tools.ts`)

### Investigated

- **#2774** — Reporter's diagnosis "Codex MCP generator registers management CLI instead of stdio server" appears incorrect: `ruflo mcp start` IS a working stdio server per `v3/@claude-flow/cli/src/commands/mcp.ts` (`MCP Server started on stdio`), and upstream `d20f1323b fix(codex): ship stable Windows-safe Ruflo integration` cleanly centralized the Codex MCP config in `mcp-config.ts` using the same command shape. A proposed swap to `claude-flow-mcp` was reverted during rebase. Recommend closing the issue unless the reporter can produce a fresh repro against 3.32.9+.

## [3.5.0] - 2026-02-27

### Ruflo v3.5 — First Major Stable Release

This release marks the official rebranding from **Claude Flow** to **Ruflo** and represents the first major stable release after 5,800+ commits, 55 alpha iterations, and 10 months of development.

### Highlights

- **Rebranding**: Claude Flow → Ruflo across all packages (`@claude-flow/cli`, `claude-flow`, `ruflo`)
- **agentic-flow v3.0.0-alpha.1 Integration**: Full deep integration with 10 subpath exports (ReasoningBank, Router, Orchestration, Agent Booster, SDK, Security, QUIC transport)
- **AgentDB v3.0.0-alpha.9**: 8 new controllers (HierarchicalMemory, MemoryConsolidation, SemanticRouter, GNNService, RVFOptimizer, MutationGuard, AttestationLog, GuardedVectorBackend) + 6 MCP tools
- **215 MCP Tools**: Full Model Context Protocol server with vector memory, neural training, swarm coordination
- **Security Hardening**: Command injection fix, TOCTOU race fix, eliminated hardcoded HMAC keys, timing attack fixes
- **Doctor Health Check**: New `agentic-flow` diagnostic (filesystem-based, ESM-compatible)
- **0 Production Vulnerabilities**: Clean `npm audit` across all packages

### Added

- `agentic-flow-bridge.ts` — Unified lazy-loading bridge for all agentic-flow v3 modules
- Tiered embedding resolution: ReasoningBank WASM (Tier 1) → @claude-flow/embeddings (Tier 2) → mock fallback (Tier 3)
- Agent Booster local import with npx fallback
- `checkAgenticFlow()` doctor health check
- 7 TypeScript module declarations for agentic-flow subpath exports
- ADR-056: agentic-flow v3 Integration Architecture

### Fixed

- Command injection vulnerability in enhanced-model-router.ts (SAFE_LANGUAGES whitelist)
- TOCTOU race condition in bridge singleton initialization (Promise-based caching)
- 22 agent/skill files updated from stale v1.5.11/v2.0.0-alpha to v3.0.0-alpha.1
- ESM compatibility for doctor checks (filesystem-based instead of `require.resolve`)
- @ruvector/gnn pinned to 0.1.25 to fix fatal process crash (issue #216)

### Changed

- All 3 packages bumped from `3.1.0-alpha.55` to `3.5.0`
- Publish tags changed from `alpha`/`v3alpha` to `latest`
- agentic-flow minimum version: `0.1.0` → `3.0.0-alpha.1`
- agentdb minimum version: `2.0.0-alpha.3.4` → `3.0.0-alpha.10`

---

## [3.1.0-alpha.55] - 2026-02-27

### AgentDB 3.0.0-alpha.9 Integration (ADR-053/ADR-055)

- Activated 8 AgentDB v3 controllers with MutationGuard proof engine
- Added 6 new MCP tools: `agentdb_hierarchical_*`, `agentdb_consolidation_*`, `agentdb_semantic_*`
- Fixed controller registry activation bugs (ADR-055)
- Statusline fixes for real-time controller status
- Pinned @ruvector/gnn@0.1.25 to fix fatal process crash

## [3.1.0-alpha.43] - 2026-02-15

### Ruflo Branding Fix

- Fixed CLI branding: show 'ruflo' instead of 'claude-flow' when run via `npx ruflo`
- Fixed Windows ESM import crash with `pathToFileURL`
- Fixed init hook prompt overflow and description field

## [3.1.0-alpha.36] - 2026-02-10

### Stability & Compatibility

- Fixed hooks backward compatibility: `--success` and `--file` made optional
- Fixed Windows npm install crash (404 optional dependencies)
- Bumped agentdb to 2.0.0-alpha.3.6
- Fixed V3 build errors (missing helmet, VERSION type, vitest spy)

## [3.1.0-alpha.29] - 2026-02-01

### Security & Agent Teams

- Security fixes, backward compatibility, and Agent Teams hooks
- Added `--settings` flag to upgrade command for Agent Teams
- Fixed npm 11 install crash by pinning agentdb

---

## v3.0.0-alpha Series (2025-10 to 2026-02)

### v3.0.0-alpha.184 — CLI Help & Categorization (2025-12)

- Fixed CLI help categorization across 26 commands
- Published install optimizations
- curl-style installer script
- SEO-optimized npm packages for discovery

### v3.0.0-alpha.170 — Plugins & Marketplace (2025-12)

- **Plugin Marketplace**: 8 official plugins + IPFS registry via Pinata
- **Gas Town Bridge Plugin**: WASM-accelerated orchestrator integration
- **10 RuVector WASM Plugins**: 50 MCP tools for neural computation
- **@claude-flow/teammate-plugin**: MCP tools for Agent Teams coordination

### v3.0.0-alpha.150 — SONA & SemanticRouter (2025-11)

- **SemanticRouter**: SONA WASM integration with verified benchmarks
- Fixed phantom Claude popups on Windows
- Fixed statusline safe multi-line output for Claude Desktop
- Fixed MCP tool naming (`/` → `_`) for Claude Desktop compatibility
- Memory namespace support in delete command

### v3.0.0-alpha.100 — @claude-flow/guidance (2025-11)

- **@claude-flow/guidance Control Plane**: Governance, compliance, and policy enforcement
- Wave 1: Proof, gateway, memory-gate, coherence, hooks, persistence primitives
- Wave 2: Conformance kit, capability algebra, evolution pipeline, artifact ledger
- Wave 3: Civilization-grade primitives (trust, truth, uncertainty, time, authority)
- **Rust WASM Policy Kernel**: SIMD128-accelerated policy evaluation
- **ContinueGate**: Safety gate for agent continuation decisions
- 22-benchmark suite with before/after performance reporting
- CLAUDE.md generators, analyzer, and auto-optimizer
- Content-aware executor with statistical validation (Spearman ρ, Cohen's d)

### v3.0.0-alpha.50 — Core V3 Implementation (2025-10)

- Complete V3 implementation across all ADRs
- ADR-003: Coordinator consolidation + security tests
- Complete hooks system with AgentDB, HNSW, tests
- ReasoningBank guidance system with CLI
- V2→V3 migration documentation
- MCP memory tools upgraded to sql.js + HNSW backend
- Claims-based authorization (ADR-016)
- Node.js worker daemon system
- Auto-update system for @claude-flow packages (ADR-025)
- Replaced all mock implementations with real functionality

### v3.0.0-alpha.1 — Foundation (2025-10)

- Complete V3 monorepo structure (`@claude-flow/cli`, `shared`, `memory`, `hooks`, `security`)
- 26 CLI commands with 140+ subcommands
- 215 MCP tools via FastMCP 3.x
- RuVector intelligence system (SONA, MoE, HNSW, EWC++, Flash Attention)
- Hive-Mind consensus (Byzantine, Raft, Gossip, CRDT, Quorum)
- 17 hooks + 12 background workers
- 60+ specialized agent types
- Cross-platform helper system

---

## v2.7.x Series (2025-08 to 2025-10)

### v2.7.34 — PostgreSQL & Neural Persistence

- PostgreSQL Bridge with attention, GNN, hyperbolic embeddings
- Neural pattern persistence to disk
- Hive-mind `--claude` flag for spawn command
- Real statusline data, hive-mind shutdown fixes, daemon persistence
- Multi-platform builds (Linux, macOS, Windows) in CI/CD

### v2.7.0 — agentic-flow Integration

- Deep integration with agentic-flow coordination engine
- SDK architecture analysis and hooks & learning integration
- Modular installation strategy
- Optimized v3 migration plan

---

## v2.0.0-alpha Series (2025-05 to 2025-08)

### v2.0.0-alpha.128 — Maturity

- Comprehensive hive-mind optimization
- Database schema robustness (missing columns, optimization errors)
- Auto-rebuild better-sqlite3 on NODE_MODULE_VERSION mismatch
- InMemoryStore interval cleanup for clean process exit

### v2.0.0-alpha.53 — Hook Safety

- Critical hook safety system
- Hive-mind optimization command
- Safety & security features documentation
- Neural Link System with safety protocols

### v2.0.0-alpha.33 — Windows & WSL

- Windows/WSL compatibility fixes
- Module import error resolution
- README restructure for v2.0.0 features
- Comprehensive test suite

---

## v1.x Series (2025-01 to 2025-05)

### v1.0.71 — Final v1 Release

- npm publishing compatibility
- Full CLI command functionality
- SPARC integration with full prompt loading
- Cross-platform support

### v1.0.50 — Swarm & SPARC

- Parallel execution for swarm tasks
- Background task management
- Swarm command with improved error handling
- Claude Code slash commands integration

### v1.0.28 — Project Management

- CLI project management commands
- System monitoring and SPARC commands
- Orchestration templates (monitoring, optimization, security review)

### v1.0.1 — Initial Release (2025-01-01)

- Complete Claude-Flow AI Agent Orchestration System
- Configuration guide and comprehensive tests
- Initial commit

---

## Milestone Summary

| Milestone | Version | Date | Key Feature |
|-----------|---------|------|-------------|
| Initial Release | v1.0.1 | 2025-01 | AI agent orchestration system |
| SPARC Integration | v1.0.50 | 2025-03 | Swarm + SPARC methodology |
| Alpha Foundation | v2.0.0-alpha.33 | 2025-05 | V2 alpha with hook safety |
| agentic-flow | v2.7.0 | 2025-08 | agentic-flow coordination engine |
| V3 Foundation | v3.0.0-alpha.1 | 2025-10 | V3 monorepo, 215 MCP tools |
| Plugin Marketplace | v3.0.0-alpha.170 | 2025-12 | 8 plugins + IPFS registry |
| Guidance Control Plane | v3.0.0-alpha.100 | 2026-01 | WASM policy kernel, ContinueGate |
| AgentDB v3 | v3.1.0-alpha.55 | 2026-02 | 8 controllers, MutationGuard |
| **Ruflo v3.5** | **v3.5.0** | **2026-02-27** | **First stable release, rebranding** |