v3.50.0

## ruflo 3.50.0: ruflo as a Claude Code mod

Install with `npx ruflo@latest`; `@claude-flow/cli`, `claude-flow` and `ruflo` are all at 3.50.0.

Claude Code mods let a plugin hook the engine directly, as in-process TypeScript functions instead of shell commands. This release brings ruflo onto that API. It is **opt-in**: the classic hooks stay the default and the automatic fallback, and ruflo behaves exactly as before when function hooks are off.

### What's new
- **`ruflo mods install | uninstall | status | doctor | sync-policy`** and **`ruflo init --mods`** (ADR-404, #3608). Install writes only project-scoped files (`.claude/settings.local.json`, `.claude-flow/mods/install.json`).
- **The `ruflo-mods` plugin:**
  - **Routing:** in-process prompt routing, byte-identical to the classic `route` hook. In-process it takes 0.045 ms median versus 18.2 ms for a spawned hook.
  - **`tool.check`:** fed by ruflo policy, and it only ever tightens a verdict.
  - **Also:** edit learning signals, the cost budget ladder, and a status bar.
  - **`$.ruflo` noun:** `segment`, `lastRoute` and `snapshot`, so other mods (ruOS among them) can add to ruflo's status bar instead of drawing their own.
  - **Mod trust gate:** for mods loaded mid-session, including ones Claude writes. It only observes by default; `refuse-risky` is opt-in, and the allow-list matches the install source, not a self-declared name.
- **The `ruflo-swarm` pane mod 0.3.0** (#3607): a live pane with one tile per agent, which light up as agents read and write. It also shows the topology, the task and claims board, cost and tokens, the router's pick and hive-mind votes, and has buttons that act through the ruflo CLI. Claude Code subagents appear as tiles.
- **`ruflo-ruos`** (ADR-405, #3605): run swarm agents on your own ruOS cloud desktops.
  - **Transport:** only the tenant-authenticated fleet MCP and the ruOS jobs API (ADR-105). The unauthenticated desktop executor port is never used.
  - **Live run:** a live run on a real desktop passed, and the desktop was stopped and verified afterwards.
- **`ruflo-plugin-creator` 0.3.0:** a `create-mod` skill and template for scaffolding governed mods.

### Requirements and caveats
- Requires Claude Code **2.1.287 or newer**, where mods are on by default. Versions 2.1.277–2.1.286 need `CLAUDE_CODE_ENABLE_FUNCTION_HOOKS=1`.
- Anthropic's rollout switch must also be on for your account. `ruflo mods doctor` reports its state, and it flipped during development.
- The mods API is early access and may change.

### Verified
- **Registry:** latest, alpha and v3alpha are 3.50.0 for all three packages.
- **Fresh install:** `npm i ruflo@3.50.0` gives `ruflo v3.50.0`; `mods install`, `status` and `doctor` work and write only inside the project.
- **Plugin tests:** engine-kit tests pass on 2.1.287 (ruflo-mods 16/16, ruflo-swarm 38/38, ruflo-ruos 3/3), and `claude plugin validate` passes for all three.
- **Release integrity:** the witness passes 117/117 on linux, macos and windows, and the signed helper manifest verifies.

Coordinated with the ruOS lane: `@cognitum/ruos` 0.3.0 ships the ruOS mod and the jobs API clients.

Gist: https://gist.github.com/ruvnet/aede145f8e730eb434e14decbb3f10a1