ruvector-v0.2.32

weaviate/Verbaruvector-v0.2.32Jun 17, 2026by ruvnet

AI Summary

This release implements agent harness concepts by borrowing existing RuVector primitives, avoiding new runtime dependencies. It introduces a unified status command for the routing surface and implements a default-deny policy for MCP tools to enhance security and least-privilege access.

Key Highlights

Implements ADR-256: Agent harness concepts via primitives.
New `ruvector harness status` command for unified routing/agent view.
Default-deny MCP tool policy with allowlist, denylist, and profile support.
Stable memory namespace configuration via `RUVECTOR_MEMORY_NAMESPACE`.

New Features

Unified harness status CLI command
Default-deny MCP policy (allowlist/denylist/profile)
Stable memory namespace environment variable

Full Release Notes

Published to npm: **`ruvector@0.2.32`** (`npm i ruvector` / `npx ruvector@0.2.32`).

Implements [ADR-256](https://github.com/ruvnet/RuVector/blob/main/docs/adr/ADR-256-metaharness-sdk-evaluation.md): borrow the "agent harness" concepts using primitives ruvector already ships — **no new runtime dependency.**

### ✨ New
- **`ruvector harness status [--json]`** — one unified view of the routing/agent surface: Tiny Dancer cost router, semantic router, hooks routing, MCP server, witness chain, and SONA memory, with graceful degradation when optional deps are absent.
- **Default-deny MCP tool policy** — least-privilege control over which MCP tools are exposed/callable:
  - `RUVECTOR_MCP_ALLOW="hooks_route,hooks_recall"` — allowlist
  - `RUVECTOR_MCP_DENY="hooks_force_learn"` — denylist (wins over allow)
  - `RUVECTOR_MCP_PROFILE=readonly` — curated safe subset
  - Precedence: **DENY > ALLOW/PROFILE > allow-all** (no policy = backward-compatible)
- **Stable memory namespace** — `RUVECTOR_MEMORY_NAMESPACE` (default `ruvector`), surfaced as `memory.namespace`.

### 🔒 / 🛠 Fixes
- **Startup-budget CI guard** — fails CI if a borrowed feature regresses cold start (the new `harness` command adds ~0–3ms).
- **Cross-platform build script** — ONNX asset copy now uses `fs.cpSync`, so `npm publish` works off-Linux (was silently Windows-broken).

### ✅ Verification
`npm test` green — CLI 73/0, MCP-policy 8/0, startup-budget 2/0. Published artifact smoke-tested: `npx ruvector@0.2.32 harness status --json`.

🤖 Generated with [claude-flow](https://github.com/ruvnet/claude-flow)