ruvector-v0.2.32

alpic-ai/skybridgeruvector-v0.2.32Jun 17, 2026by ruvnet

AI Summary

This release implements ADR-256 to borrow 'agent harness' concepts using existing primitives without adding new runtime dependencies. It introduces a unified status command for the routing/agent surface and enforces a default-deny policy for MCP tools to enhance security.

Key Highlights

Unified `ruvector harness status` command for monitoring routing and agent components
Default-deny MCP tool policy with allowlist, denylist, and readonly profiles
Stable memory namespace support via `RUVECTOR_MEMORY_NAMESPACE`
Startup-budget CI guard to prevent regressions in cold start performance
Cross-platform build script fix using `fs.cpSync` for non-Linux systems

New Features

Command-line interface for harness status monitoring
MCP tool policy enforcement (allowlist/denylist/profiles)
Stable memory namespace configuration

Full Release Notes

Published to npm: **`ruvector@0.2.32`** (`npm i ruvector` / `npx ruvector@0.2.32`).

Implements [ADR-256](https://github.com/ruvnet/RuVector/blob/main/docs/adr/ADR-256-metaharness-sdk-evaluation.md): borrow the "agent harness" concepts using primitives ruvector already ships — **no new runtime dependency.**

### ✨ New
- **`ruvector harness status [--json]`** — one unified view of the routing/agent surface: Tiny Dancer cost router, semantic router, hooks routing, MCP server, witness chain, and SONA memory, with graceful degradation when optional deps are absent.
- **Default-deny MCP tool policy** — least-privilege control over which MCP tools are exposed/callable:
  - `RUVECTOR_MCP_ALLOW="hooks_route,hooks_recall"` — allowlist
  - `RUVECTOR_MCP_DENY="hooks_force_learn"` — denylist (wins over allow)
  - `RUVECTOR_MCP_PROFILE=readonly` — curated safe subset
  - Precedence: **DENY > ALLOW/PROFILE > allow-all** (no policy = backward-compatible)
- **Stable memory namespace** — `RUVECTOR_MEMORY_NAMESPACE` (default `ruvector`), surfaced as `memory.namespace`.

### 🔒 / 🛠 Fixes
- **Startup-budget CI guard** — fails CI if a borrowed feature regresses cold start (the new `harness` command adds ~0–3ms).
- **Cross-platform build script** — ONNX asset copy now uses `fs.cpSync`, so `npm publish` works off-Linux (was silently Windows-broken).

### ✅ Verification
`npm test` green — CLI 73/0, MCP-policy 8/0, startup-budget 2/0. Published artifact smoke-tested: `npx ruvector@0.2.32 harness status --json`.

🤖 Generated with [claude-flow](https://github.com/ruvnet/claude-flow)