Starstruk Logo MarkStarstruk

v3.6.10

ruvnet/ruflov3.6.10Apr 30, 2026by ruvnet

AI Summary

This is a major release of ruflo expanding from 21 to 32 native Claude Code plugins, introducing zero-trust Agent LLM Federation with mTLS/ed25519 identity verification, PII detection pipelines, and HIPAA/SOC2/GDPR compliance modes. The release adds 11 new plugins covering ADR lifecycle, DDD scaffolding, SPARC methodology, knowledge graphs, database migrations, observability, cost tracking, market data, IoT device management, and GOAP planning.

Key Highlights

  • Expanded from 21 to 32 native Claude Code plugins covering full development lifecycle
  • Agent LLM Federation (@claude-flow/plugin-agent-federation) with zero-trust mTLS+ed25519 identity, 14-type PII detection, behavioral trust scoring, and HIPAA/SOC2/GDPR compliance
  • IoT Cognitum Plugin for Seed hardware with device-agent duality, trust scoring, anomaly detection, and fleet management
  • npm package integrations: ruflo-neural-trader (neural-trader v2.7.1), ruflo-ruvector (ruvector v0.2.25), and upgraded ruflo-rag-memory with hybrid search and Graph RAG
  • All 20 packages passing with 5,370 tests across the monorepo

New Features

  • ruflo-adr: ADR lifecycle management with create, index, supersede, and compliance checking
  • ruflo-ddd: DDD scaffolding with bounded contexts, aggregates, and domain events
  • ruflo-sparc: SPARC methodology implementation with 5 phases and quality gates
  • ruflo-knowledge-graph: Entity extraction, relation mapping, and pathfinder traversal
  • ruflo-migrations: Database schema migration management
  • ruflo-observability: Structured logging, tracing, and metrics correlation
  • ruflo-cost-tracker: Token usage tracking, budget alerts, and cost optimization
  • ruflo-market-data: Market data ingestion, OHLCV vectorization, and pattern matching
  • ruflo-iot-cognitum: Cognitum Seed IoT with trust scoring, anomaly detection, and fleet management
  • ruflo-federation: Zero-trust agent federation with PII pipeline and cross-installation comms
  • ruflo-goals: GOAP planning, deep research, and long-horizon tracking

Full Release Notes

## Highlights

### 32 Native Claude Code Plugins
Expanded from 21 to **32 plugins** covering the full development lifecycle — from code intelligence and testing to IoT device management and financial trading.

### Agent LLM Federation (`@claude-flow/plugin-agent-federation`)
Zero-trust agent federation with cross-installation collaboration:
- **mTLS + ed25519** identity verification — no shared secrets
- **14-type PII detection pipeline** — BLOCK, REDACT, HASH, or PASS per trust level
- **Behavioral trust scoring** — upgrades require history, downgrades are instant
- **HIPAA/SOC2/GDPR** compliance modes with searchable audit trails
- 9 MCP tools + 10 CLI commands for full lifecycle management
- See [ADR-078](https://github.com/ruvnet/ruflo/issues/1669)

### IoT Cognitum Plugin (`@claude-flow/plugin-iot-cognitum`)
Device-agent duality for Seed hardware:
- Real device bridge with trust scoring and anomaly detection
- Fleet management across edge devices
- 24 passing tests (ADR-079)

### npm Package Integration
- **ruflo-neural-trader** now wraps [`neural-trader`](https://npmjs.com/package/neural-trader) v2.7.1 — 4 agents, 6 skills, 112+ MCP tools, Rust/NAPI backtesting
- **ruflo-ruvector** now wraps [`ruvector`](https://npmjs.com/package/ruvector) v0.2.25 — FlashAttention-3, Graph RAG, 103 MCP tools, Brain AGI
- **ruflo-rag-memory** upgraded to SOTA — hybrid search (RRF), Graph RAG multi-hop, MMR diversity, recency weighting

### New Plugins (11 added)
| Plugin | What it adds |
|--------|-------------|
| ruflo-adr | ADR lifecycle — create, index, supersede, compliance checking |
| ruflo-ddd | DDD scaffolding — bounded contexts, aggregates, domain events |
| ruflo-sparc | SPARC methodology with 5 phases and quality gates |
| ruflo-knowledge-graph | Entity extraction, relation mapping, pathfinder traversal |
| ruflo-migrations | Database schema migration management |
| ruflo-observability | Structured logging, tracing, metrics correlation |
| ruflo-cost-tracker | Token usage tracking, budget alerts, cost optimization |
| ruflo-market-data | Market data ingestion, OHLCV vectorization, pattern matching |
| ruflo-iot-cognitum | Cognitum Seed IoT — trust scoring, anomaly detection, fleet management |
| ruflo-federation | Zero-trust agent federation, PII pipeline, cross-installation comms |
| ruflo-goals | GOAP planning, deep research, long-horizon tracking |

## Bug Fixes & Improvements

- **v3.6.9**: Monorepo-wide test fixes — all 20 packages green (5,370 tests)
- **v3.6.8**: Browser args comma-join + proper ESM fs import for sysctl
- **v3.6.7**: Browser --args flag + AppArmor detect + guidance ab-test executor
- **v3.6.6**: Browser ENOENT/args/hover + RaBitQ bridge store alignment
- **v3.6.5**: RaBitQ 1-bit quantized search + HNSW/RRF bug fixes
- **v3.6.4**: ruflo-goals plugin with GOAP planning
- **v3.6.3**: transfer/plugin-search null guard on tags/keywords/categories
- **v3.6.2**: MicroLoRA auto-pad to 768-dim, system_info real version
- **v3.6.1**: 6 MCP tool validation bugs — git refs, npm names, WASM serialization
- **v3.5.82**: Tier A+B blockers — 13 issues across CLI, memory, hooks, daemon
- **v3.5.81**: CLI hang cluster + session crashes (#1653, #1641, #1634, #1629, #1628, #1626)
- Lean CLAUDE.md generator with SendMessage-first coordination
- Federation tests rewritten to use actual source (no mocks)

## Install

```bash
# Claude Code plugin (recommended)
/plugin marketplace add ruvnet/ruflo
/plugin install ruflo-core@ruflo

# CLI
npx ruflo@latest init --wizard

# MCP server
claude mcp add ruflo -- npx -y @claude-flow/cli@latest
```

## Packages

| Package | Version |
|---------|---------|
| `@claude-flow/cli` | 3.6.10 |
| `claude-flow` | 3.6.10 |
| `ruflo` | 3.6.10 |

**Full Changelog**: https://github.com/ruvnet/ruflo/compare/v3.5.80...v3.6.10