ruflo

ruvnetMIT活跃维护

多智能体编排框架,支持部署多人协作的智能体集群、协调自主工作流,并内置自适应记忆、向量 RAG 与 Claude Code 等编码代理的原生集成。

🌊 The original agent harness. Deploy intelligent multi-player swarms, coordinate autonomous workflows, and build conversational AI systems. Features adaptive memory, self-learning intelligence, federation, vector RAG integration, and native Claude Code / Codex / Hermes and many more Integrated

v3.74.1发布于 2026-11-09 06:55 UTC81,396star +297 / 7 天9,581fork同步于 2026-11-10 11:18 UTC

怎么上手

由 README 提炼,执行前请确认
npx ruflo@latest init
硬件要求按 README 说明

README 未说明

下载:源码 zip·GitHub Releases(安装包)本站不镜像安装包

项目说明

由 README 自动翻译提炼

给 Claude Code 和 Codex 加一层 agent 执行框架,让多个 agent 组队协作、跨会话记忆并自我学习

多智能体编排框架,支持部署多人协作的智能体集群、协调自主工作流,并内置自适应记忆、向量 RAG 与 Claude Code 等编码代理的原生集成。

核心能力

  • 一条 npx ruflo init 注入 agents、hooks、memory 与 MCP server
  • 把多个 agent 组织成 swarm 协同完成复杂任务
  • 跨会话持久记忆,并从历史任务结果中学习
  • 支持多机 federation,agent 之间安全通信
  • 提供 48 个插件,覆盖 RAG 记忆、知识图谱、自治循环等

容易踩的坑

init 会向项目写入 .claude/、.claude-flow/、CLAUDE.md 等文件,不想改动工作区就改用插件路径;插件路径需要 Claude Code 2.1.287 或更高版本,且只有 ruflo-core 自带 MCP server;Codex 等 MCP 客户端需手动配置命令 npx、参数 [-y, ruflo@latest, mcp, start]

内容由模型根据 README 生成,可能不完整或不准确,以官方文档为准。看原文 README

最近发版

5 个版本v3.74.1
  1. v3.74.1v3.74.1 — @metaharness/darwin in-process (ADR-526), zod 4 security, PageRank最新正式版2026-11-09 · 2026-11-09 06:55 UTC

    Use 3.74.1, not 3.74.0. The @claude-flow/[email protected] tarball shipped stale .claude/helpers files (3.63.4 content), and [email protected] depends on that exact version. 3.74.1 ships the helpers from main. The publish script now refuses to publish if the helpers differ from the commit (#4900).

    @metaharness/darwin is built in (ADR-526, #4898)

    • @metaharness/darwin is now a regular dependency of @claude-flow/cli. Before, it was optional. ADR-526 amends ADR-150 rule 2 for darwin only.
    • In-process calls: metaharness_bench --op verify and all four metaharness_gepa ops (genome, validate, render, analyze) now run inside the MCP server on a cached darwin module. Before, each call spawned a script, and bench spawned a second process for the darwin CLI. If darwin can't be loaded, the tools fall back to the scripts.
    • ruflo-metaharness 0.5.0: bench.mjs verify imports darwin directly and never installs anything when a tool runs.

    Measured, Node 22, median of 20 runs:

    OperationSubprocessIn-process, first callIn-process, later calls
    gepa validate21.4 ms2.9 ms0.03 ms
    gepa render21.9 ms0.3 ms0.02 ms
    bench verify59.7 ms40.0 ms0.05 ms

    The first call pays the one-time darwin import. The gain comes from no longer spawning a process, not from faster darwin code.

    Also in this release

    • Security (#4895): @claude-flow/security 3.0.7 migrates input validation to zod ^4.6.7 (GHSA-mrhx-c7xc-m3w5). cli-core 3.7.6 accepts zod 4's invalid_value error for custom agent types.
    • PageRank (#4899): @claude-flow/memory 3.2.6 and @claude-flow/plugins 3.0.3 use the new PageRank implementation for memory-graph and GNN ranking.
    • Release safety (#4900): prepare-publish.mjs compares .claude/helpers with HEAD before signing and again at the end.
  2. v3.73.0v3.73.0 — init ends with your project, opt-in activation telemetry, Node 20 keeps ruvector2026-11-09 · 2026-11-09 01:30 UTC
    查看更新说明

    Faster first five minutes

    • init ends with your project, not a list of commands (#4871, #4875). It prints a quick local snapshot: tracked files, top languages, the most-changed file in the last 90 days, and your test command. Then it gives one prompt to paste into Claude Code about that file. The snapshot uses git only, with no network calls and a 2-second cap, and it never fails init.
    • README: one recommended install path at the top (npx ruflo@latest init), plus a 30-second console tour (#4869). There's also a Chinese quick start and a sourced comparison page with CrewAI, LangGraph, AutoGen and Claude Code subagents (#4873, https://ruvnet.github.io/ruflo/compare.html).

    Telemetry: opt-outs honored, opt-in activation events

    • Opt-outs now stop the message fetch. ruflo funnel disable and every other opt-out now stop the background messages fetch, not only the promo row (#4860). The fetch's User-Agent carries only the release and OS family. See docs/privacy/funnel-legitimate-interest-assessment.md.
    • Opt-in activation events (#4870): init_completed, first_agent_run and session_active are sent only with an explicit ruflo funnel telemetry on consent. init asks once, defaulting to No. Skip the question with --no-telemetry-prompt.
    • Plugin-only users can be counted (#4872). When the ruflo-core plugin starts the MCP server, the existing 6-hourly fetch is tagged surface/plugin, with the same opt-outs.

    Fixes and hardening

    • transfer: Ed25519 signatures for pattern-store publish and download.
    • healthcare-clinical: audit entries store a SHA-256 query fingerprint.
    • browser: the postinstall step installs the pinned agent-browser range.
    • deps: open ranges capped in plugins and performance; marketplace agentic-flow 3.4.0; federation midstreamer ^0.3.2; aidefence agentdb ^3.6.0 (#4858, #4868).
    • ruflo/server.json and mcpName prepare the io.github.ruvnet/ruflo MCP registry listing (#4874).

    Upstream

    • @ruvector/[email protected] (engines >=20) fixes npm 10 / Node 20 dropping the ruvector subtree from fresh installs.
    • Node 20 keeps ruvector. agentic-flow is now a regular dependency of @claude-flow/cli. On npm 10 / Node 20, an optional pipenet (engines >=22, reached via agentic-flow → fastmcp → mcp-proxy) made npm drop ruvector, agentic-flow, @ruvector/attention and transformers from fresh installs. This affected 3.72.2 as well. Verified with fresh npm install [email protected] on node:20 and node:22.
    • Bundled plugin-agent-federation 1.0.7 excludes agentic-flow ≤2.0.13 (GHSA-vcv2-r9jh-99m5) from its peer range (#4890).
    • init keeps the ADR-150 metaharness score tip under the project snapshot.

    Install: npx ruflo@latest init. latest is 3.73.0 for ruflo, claude-flow and @claude-flow/cli.

  3. v3.72.2v3.72.2 — @ruvector/attention security fix (ruvector 0.3.13), neural 3.0.3 / sona 0.1.112026-11-06 · 2026-11-06 14:13 UTC
    查看更新说明

    Security dependency fix

    • @ruvector/attention 2.2.3.

      • claude-flow 3.72.1 declared @ruvector/attention ^0.1.3, and ruvector 0.3.12 also depended on ^0.1.3. Both resolved to 0.1.32, which lacks the upstream fix (RuVector #1365): input-length validation, and catching Rust panics at the NAPI boundary so they don't abort Node.
      • 3.72.2 moves to ruvector ^0.3.13, which depends on attention ^2.2.3, in the CLI, claude-flow and ruflo. claude-flow also declares attention ^2.2.3 directly.
      • Every attention call ruflo makes (Flash, MoE, Hyperbolic, AdamW, InfoNCE, Curriculum, compute) was checked on 0.1.32 and 2.2.3. The results match.
    • @ruvector/sona 0.1.11. @claude-flow/neural 3.0.3 (published standalone) pins @ruvector/sona 0.1.11, up from 0.1.5. On 0.1.5:

      • a wrong-length input to applyMicroLora panicked in Rust and aborted Node (exit 134);
      • findPatterns returned 0 patterns after training.

      On 0.1.11 the bad input throws a catchable error, and learning returns patterns.

    Fixes

    • neural benchmark: the attention benchmark now runs. It never had:

      • import() of the CommonJS package put its classes on default;
      • it called computeRaw(), which no release has, instead of compute().
    • Plugins (#4842), shipped through the marketplace:

      • ruflo-ruvector 0.4.0, ruflo-browser 0.3.8, ruflo-console 0.49.12 and ruflo-agentdb 0.4.12 move to ruvector 0.3.12.
      • The browser recording recipes used trajectory-* flags that no ruvector release accepts. They are fixed.
      • The CLI's browser-session npx fallback pins [email protected].
    • claude-flow now lists @ruvector/attention as a regular dependency. On npm 10 / Node 20, @ruvector/ruvllm-gpu-loop (requires node >=22) fails as an optional install, and npm then drops ruvllm, ruvector and every package reached only through optional edges. The patched attention is now always installed.

    Verification

    A fresh npm install [email protected] from the registry resolves:

    • @claude-flow/cli 3.72.2 and @claude-flow/neural 3.0.3
    • ruvector 0.3.13
    • @ruvector/attention 2.3.0 for every copy, with no 0.1.x
    • @ruvector/graph-node 2.1.2 and @ruvector/sona 0.1.11

    Known, not fixed here: zod GHSA-mrhx-c7xc-m3w5 needs zod 4, which is a major migration. glob and minimatch have moderate advisories. On Node 20, ruvector-backed features are missing because of the gpu-loop engine floor.

    Packages

    @claude-flow/cli, claude-flow and ruflo 3.72.2 are on latest, as is @claude-flow/neural 3.0.3. alpha and v3alpha are unchanged (ADR-513).

  4. v3.72.0v3.72.0 — MCP 2026-07-28 support + 39 contributor fixes2026-11-06 · 2026-11-06 01:11 UTC
    查看更新说明

    3.72.0 brings ruflo's MCP server up to the MCP 2026-07-28 revision (ADR-524, #4837). It also merges 39 contributor fixes and tests from the #4775 tracker and the daily security scan through #4825. Thanks to every contributor.

    MCP 2026-07-28

    ruflo mcp start now serves 2026-07-28 clients and older ones from the same process.

    • No more pinned version. initialize used to answer 2024-11-05 whatever the client asked for. It now echoes a supported version (2025-11-25, 2025-06-18 or 2024-11-05) and reports the real ruflo version.
    • server/discover is answered, so a 2026-07-28 client's stdio probe finds ruflo.
    • Stateless requests. A request that carries its version in _meta gets resultType and serverInfo on the result. An unsupported version is refused with -32022 and the list of versions ruflo supports.
    • Stable tool list. tools/list is sorted by name and carries cache hints, so the catalogue is identical on every call and client prompt caches keep hitting.
    • Tracing. A W3C traceparent from the client is passed through to the tool call.

    The Tasks extension and the HTTP server's move to 2026-07-28 are planned next (ADR-524, Phase 2).

    Security

    • pre-bash blocks a command it cannot check. Before, late, unparsable or malformed hook input let the command through (#4743, #4826). The input window for pre-bash is now 3 s, so a slow host still gets its commands checked.
    • Browser tools accept only http(s) and about:blank URLs. Screenshots are written inside the project. A project's Ollama baseUrl no longer receives your OLLAMA_API_KEY (#4812).
    • Statusline runs sqlite3 without a shell and strips control characters from directory and git names (#4745, #4818).
    • Imports and federation: memory_import and session_import are capped at 16 MiB, and a gzip bomb is refused. x_federation_join restricts keyFile and relayWs (#4754, #4821).
    • Denial of service: exclusion patterns are matched without regex backtracking (ReDoS), and performance_benchmark iterations are capped (#4753, #4820).
    • AIDefence: the new RUFLO_AIDEFENCE_PACKS (true, false or a comma list of packs) selects the pattern packs for the MCP server (#4785).

    Data integrity

    • A corrupt workflow, hive-mind or swarm store is backed up and reported instead of being reset and saved over (#4737, #4779).
    • patterns.json is merged under the writer lock, so the daemon no longer erases patterns written by hooks (#4735, #4819).
    • daemon.log rotates, and worker metric files are written atomically (#4740, #4816).

    Fixes

    • Cost tracker 0.31.2: cost-health installs an npx CLI once before running its four checks in parallel, so a cold npm cache no longer breaks the install. A failed memory list is reported as an error instead of "no budget set" (#4711, #4827).
    • Hive-mind: maxAgents is enforced; join requires a registered agent and a valid role (#4727, #4813).
    • Swarm: swarm_shutdown terminates members, and an unknown id is an error (#4726, #4815).
    • Tasks:
      • task_assign refuses finished tasks and unknown agents (#4725, #4778).
      • task_retry honours resetState (#4723, #4807).
    • Agents and terminals:
      • The agent_list status filter accepts all, aliases and any case (#4732, #4777).
      • terminal_execute refuses closed sessions (#4730, #4789).
      • A heartbeat for an unknown node is an error (#4731, #4786).
    • Embeddings and hooks:
      • embeddings_generate honours normalize:false (#4724, #4780).
      • A confidence of 0 is kept instead of being replaced by the default (#4728, #4790).
      • hooks_model-route honours preferCost/preferSpeed (#4722, #4817).
    • CLI flags that the parser camelCase
  5. v3.71.4v3.71.4 — security patch2026-11-05 · 2026-11-05 03:36 UTC
    查看更新说明

    Security patch release: @claude-flow/cli, claude-flow, ruflo 3.71.4. Upgrade is recommended for everyone who runs the ruflo MCP server.

    Security fixes

    • browser tools (#4783): browser_open accepts only a fixed list of plain Chromium switches. No caller value may add an agent-browser option.
    • memory export / import (#4783):
      • For MCP callers, memory_export and memory_import paths must be inside the project. Symlinks, .git, executables, and servers started from a home or filesystem root are refused.
      • Import errors no longer quote the file.
      • An explicit dbPath must be a SQLite database file, plaintext or encrypted at rest.
      • The ruflo memory export/import/stats commands still accept any path the operator gives.
    • record ids (#4783): __proto__, constructor and prototype are refused as ids. The agent, task, terminal, swarm and neural stores load without a prototype, completing #4671.
    • federation BBS (#4783): a merged envelope's origin must be the syncing peer or another pinned peer, and it must verify against that origin's key. The sync cursor advances only past verified envelopes.
    • ruvocal (#4788):
      • With no MCP_AUTH_TOKEN, the ruvocal mcp-bridge refuses a non-loopback Host and foreign browser origins. This is the #4226 guard, now on both bridges.
      • MCP server URLs from requests must be public HTTPS, and the connection is checked against public addresses when it is made. Local addresses stay available for operator-configured MCP_SERVERS.
    • learning hooks (#4791):
      • .claude-flow/data files committed to a repository are no longer used as this machine's learned patterns, are not synced into Claude Code memory, and are never rewritten.
      • Surfaced notes are one flat line, labelled as project data.
    • x.ruv.io gateway 0.9.2 (#4784): per-IP limits use the trusted forwarding address instead of the caller-supplied X-Forwarded-For value. This is a service fix; it is not part of the npm packages.

    Also

    • ruflo-mods 0.16.2: the ranked-memory block carries the same project-data label.

    Advisories with full details are published alongside this release.

用户点评

登录用户的真实使用记录,可按版本和硬件筛选
共 0 条

    还没有人点评。第一个说出真实体验的人最有价值。

    README 原文

    未翻译

    An agent meta-harness for Claude Code and Codex.

    npm version (ruflo) MIT License Star on GitHub Follow @rUv on X

    Get started in one command

    Run this in your project folder:

    npx ruflo@latest init
    

    Then open Claude Code in the same folder and give it a real task, for example:

    Use a ruflo swarm to review this repo: find the riskiest module, write tests for it, and summarise what you changed.
    

    init adds ruflo's agents, hooks, memory and MCP server to the project, and Claude Code picks them up on its next start. Codex and other MCP clients work too: point them at npx -y ruflo@latest mcp start.

    First useful task, step by step · User guide · Compare install paths

    Claude Code plugins only. This route installs core tools, the visual console and runtime mods, with no files added to your project. It needs Claude Code 2.1.287 or later. Run inside Claude Code:

    /plugin marketplace add ruvnet/ruflo
    /plugin install ruflo-core@ruflo
    /plugin install ruflo-console@ruflo
    /plugin install ruflo-mods@ruflo
    /reload-plugins
    /ruflo
    

    From a terminal, on Claude Code 2.1.292 or later: claude plugin install ruflo-core@ruflo --marketplace ruvnet/ruflo. Mods run with your account's permissions, so review their code before installing.

    Codex or another MCP client, without project setup. Configure the command npx with the arguments ["-y", "ruflo@latest", "mcp", "start"]. To set up a project interactively, run npx ruflo@latest init wizard.

    Plain terminal. The console also runs on its own, without Claude Code: npx ruflo tui. Add --plain to print one frame for scripts. See the terminal UI guide.

    Optional: ruOS Desktop

    Connect ruOS to ChatGPT or Claude via MCP:

    https://ruos.cognitum.one/mcp
    

    npx ruvector
    

    Ruflo

    English · 简体中文

    RuFlo Explained — build an AI team that plans, remembers, tests, and improves

    📖 RuFlo Explained — Build an AI Team That Plans, Remembers, Tests, and Improves A 14-chapter guide: from the basic idea to a first useful task, then memory, agent teams, plugins, cost and verification.

    Agent = Model + Harness. The model writes; the harness gives it tools, memory, loops, sandboxes, and controls so it can actually work. Ruflo is the harness — the execution layer around Claude Code and Codex that adds 100+ specialized agents, coordinated swarms, self-learning memory, federated comms across machines, and enterprise security guardrails. So agents don't just run, they collaborate.

    One npx ruflo init gives Claude Code a nervous system: agents self-organize into swarms, learn from every task, remember across sessions, and — with federation — securely talk to agents on other machines without leaking data. You keep writing code. Ruflo handles the coordination.

    Conceptual learning loop. Local vector retrieval and contrastive updates can run without an LLM; embeddings and configured learning modules are still required. See the RuVector training integration and trajectory contrastive learning.

    User → Ruflo (CLI/MCP) → Router → Swarm → Agents → Memory → LLM providers. Memory feeds useful experience back into routing. This is a conceptual flow, not a live execution trace.

    New to Ruflo? You don't need to learn 406 MCP tools or 61 CLI commands. After init, just use Claude Code normally — the hooks system automatically routes tasks, learns from successful patterns, and coordinates agents in the background.

    An origin you can inspect

    Claude Flow to Ruflo: founding idea on June 2, 2025, orchestration source on June 10, and the continuing Ruflo lineage.

    Built by Reuven Cohen (rUv), originally as Claude Flow. The first commit, June 2, 2025, describes a code orchestration layer for recursive agent cycles: Claude writes, edits, tests and improves. The June 10 source snapshot adds orchestration, task scheduling, memory and terminal modules.

    A harness is the workbench around the model: it organizes tasks, carries context between steps and helps check results. This establishes Ruflo's lineage, not a universal first across every Claude Code tool. See the illustrated explainer, exact commits and earlier ecosystem context.

    Grok Build: npx ruflo init --grok writes the project host surface (.grok/, the team bus, and the operator guide) and nothing outside the project; add --dry-run to preview. Setup, the spawn_subagent contract, the optional status row, and what to re-check when Grok updates: the Grok operator guide.

    Claude Flow is now Ruflo — named by rUv, who loves Rust, flow states, and building things that feel inevitable. The "Ru" is the rUv. The "flo" is working until 3am. Underneath, powered by Cognitum.One agentic architecture, running a supercharged Rust-based AI engine, embeddings, memory, and plugin system.


    Open animated demo · Theme Studio guide · Workflow demo

    Your agent cockpit. Track workflows, agents, models, tokens and cost beside Claude Code. The 38 second animation shows Orbital and Theme Studio through actual renderer frames, including boot checks, six palettes, customization, saved themes, JSON import and resizing. This compact 3.84 MB SVG retains all 456 frames. Native host and AI provider execution are not demonstrated.

    Inspect any run. Open agent logs and results, search, triage failures, replay and compare. Start with npx ruflo init, restart Claude Code, then /ruflo. Full console tour.

    Let Claude drive. You set the limits. Enable Settings → Claude control to navigate and run console actions. Choose read, write, manage or full, with ask or auto approval. The current default is read + ask; raising the level is your choice. Actions above your permission level are refused, and network, spending and destructive actions require confirmation even in auto. Review the live action log or press Take back control to stop Claude control. Details.

    One task: create a mission with Claude

    Watch the recorded console session below. Claude creates a mission, opens the Learning and Security pages, and reports its actions in Overview.

    1. Set the boundary. Install the console using the commands below, open /ruflo, then choose Settings → Claude control → write + ask.
    2. Give a concrete request. Try: “Create a mission to add a dark mode toggle. Show me the mission and its status.”
    3. Approve creation. Claude opens Missions and sets the goal. Confirm the pending create action in the console.
    4. Verify the result. Check that Missions contains the goal and Overview records the action. Creating a mission does not mean the feature has been implemented.
    5. Keep control. Take back control pauses Claude's console tools. A later call should be refused until you restore control.

    What the recording demonstrates: a real Claude Haiku session with write + auto, mission creation, page navigation, a refused swarm stop, and control being taken back. The steps above use ask so you approve creation yourself. The linked workflow animation uses sample data, while the theme demo replays renderer frames. Neither is evidence of completed swarm work or memory recall.

    Implementation and recorded test findings · Reproduction script

    Install the mods from the ruflo marketplace (Claude Code 2.1.287 or later; mods run with your account's permissions and are not sandboxed, so read the code first):

    /plugin marketplace add ruvnet/ruflo
    /plugin install ruflo-console@ruflo
    /plugin install ruflo-mods@ruflo
    /reload-plugins
    

    ruflo-console is the cockpit above, ruflo-mods routes prompts and enforces policy in-process, ruflo-swarm shows the swarm in a pane, and ruflo-ruos adds the ruOS status segment. Open /plugin to confirm they appear in the active mods line. Inside the console, /ruflo market is the Plugin Catalog: every ruflo plugin, mod and skill with what it ships, and buttons to install, enable, disable and update (each asks first).

    Quick Start

    There are two different install paths with very different surface areas. Pick based on what you need (#1744):

    Claude Code PluginCLI install (npx ruflo init)
    What it gives youSlash commands + a few skills + agent definitions per-pluginFull Ruflo loop — 98 agents, 60+ commands, 30 skills, MCP server, hooks, daemon
    Files in your workspaceZero.claude/, .claude-flow/, CLAUDE.md, helpers, settings
    MCP server registeredOnly if ruflo-core is installed (it ships its own .mcp.json) — most other plugins don'tYes
    Hooks installedNoYes
    Best forTry a single plugin's commands without committing to the full installProduction use — everything works as documented

    Path A — Claude Code Plugins (lite, slash commands only)

    # Add the marketplace
    /plugin marketplace add ruvnet/ruflo
    
    # Install core + any plugins you need
    /plugin install ruflo-core@ruflo
    /plugin install ruflo-swarm@ruflo
    /plugin install ruflo-rag-memory@ruflo
    /plugin install ruflo-neural-trader@ruflo
    

    This adds slash commands and agent definitions. ruflo-core (installed above) does register its own MCP server on install — its tools are callable as mcp__plugin_ruflo-core_ruflo__* (e.g. mcp__plugin_ruflo-core_ruflo__memory_store), not the bare memory_store/swarm_init/agent_spawn names the CLI-track scaffold uses. Other plugins generally don't ship their own MCP server. For the full loop with the CLI-track tool names, use Path B below.

    Core & Orchestration
    PluginWhat it does
    ruflo-coreFoundation — server, health checks, plugin discovery
    ruflo-swarmCoordinate multiple agents as a team
    ruflo-autopilotLet agents run autonomously in a loop
    ruflo-loop-workersSchedule background tasks on a timer
    ruflo-workflowsReusable multi-step task templates
    ruflo-federationAgents on different machines collaborate securely
    ruflo-consoleCockpit inside Claude Code, and the /ruflo command for ruflo mods
    ruflo-modsIn-process Claude Code mod — routing, learning signals, and policy checks
    ruflo-ai-teamTenant-isolated team that divides work and returns evidence
    ruflo-agntcyAGNTCY/Outshift transport and intent-scoped tool authorization
    ruflo-bbs-federationAgentBBS rooms so agents on different hosts can coordinate
    ruflo-chatgpt-federationChatGPT federation publisher with its own signing keys
    ruflo-x-gatewaySigned federation messages, channels, and work claims
    ruflo-business-podsBusiness-domain pod templates and a dry-run tick runner
    Memory & Knowledge
    PluginWhat it does
    ruflo-agentdbFast vector database for agent memory
    ruflo-rag-memorySmart retrieval — hybrid search, graph hops, diversity ranking
    ruflo-rvfSave and restore agent memory across sessions
    ruflo-ruvectorruvector — GPU-accelerated search, Graph RAG, 103 tools
    ruflo-knowledge-graphBuild and traverse entity relationship maps
    Intelligence & Learning
    PluginWhat it does
    ruflo-intelligenceAgents learn from past successes and get smarter
    ruflo-graph-intelligenceSublinear graph reasoning — PageRank, delta updates, complexity-aware execution (ADR-123)
    ruflo-daaDynamic agent behavior and cognitive patterns
    ruflo-ruvllmRun local LLMs (Ollama, etc.) with smart routing
    ruflo-goalsBreak big goals into plans and track progress
    ruflo-deepseek-harnessAgents, commands, and skills for DeepSeek-backed workflows
    Code Quality & Testing
    PluginWhat it does
    ruflo-testgenFind missing tests and generate them automatically
    ruflo-browserAutomate browser testing with Playwright
    ruflo-jujutsuAnalyze git diffs, score risk, suggest reviewers
    ruflo-rureStatic analysis of a local JS/Electron app you are authorized to study, with file and line evidence
    ruflo-docsGenerate and maintain documentation automatically
    agentic-qe-fleetExternal, maintained by Agentic QE: 11 QE agents, test generation, coverage, chaos and TDD skills, the agentic-qe MCP server, and a guard for AQE learning data (/plugin install agentic-qe-fleet@ruflo). Install it from one marketplace only, agentic-qe or ruflo: enabled from both, its mod and commands load twice
    agentdbExternal, maintained in ruvnet/agentdb: agentdb's own MCP server (pinned [email protected]: hybrid keyword + vector search, opt-in cross-encoder rerank), a memory-specialist agent, vector-memory / learning / diagnostics skills, /agentdb-status, and a guard that keeps secrets out of memory and refuses delete/reset unless allowed (/plugin install agentdb@ruflo). Use ruflo-agentdb instead if you want AgentDB through ruflo's server; the two can coexist. Install it from one marketplace only, agentdb or ruflo
    agentic-flowExternal, maintained in ruvnet/agentic-flow: the agentic-flow MCP server (pinned [email protected], readonly profile by default, nothing pre-approved), ReasoningBank and model-router agents, routing / learning / autopilot skills, /agentic-flow-status, and a guard on agentic_flow_agent (/plugin install agentic-flow@ruflo). Install it from one marketplace only, agentic-flow or ruflo
    Security & Compliance
    PluginWhat it does
    ruflo-security-auditScan for vulnerabilities and CVEs
    ruflo-aidefenceBlock prompt injection, detect PII, safety scanning
    ruflo-protectorOptional watchdog for unattended agents — learn, notify, or enforce
    Architecture & Methodology
    PluginWhat it does
    ruflo-adrTrack architecture decisions with a living record
    ruflo-dddScaffold domain-driven design — contexts, aggregates, events
    ruflo-sparcGuided 5-phase development methodology with quality gates
    ruflo-metaharnessGrade your agent setup, scan tool configs for security risks, and track changes over time (guide)
    ruflo-arenaCompetitive ruliology — pit agent strategies against each other in tournaments, hill-climb and co-evolve the winners (ADR-147/148)
    DevOps & Observability
    PluginWhat it does
    ruflo-migrationsManage database schema changes safely
    ruflo-observabilityStructured logs, traces, and metrics in one place
    ruflo-cost-trackerTrack token usage, set budgets, get cost alerts
    ruflo-ruosRun swarm agents on your own ruOS cloud desktops
    Extensibility
    PluginWhat it does
    ruflo-agentRun agents — local WASM sandbox (rvagent) + Anthropic Claude Managed Agents (cloud), with opt-in bounded dynamic workflows, gated session controls and verified advisory learning
    ruflo-plugin-creatorScaffold, validate, and publish your own plugins
    Domain-Specific
    PluginWhat it does
    ruflo-iot-cognitumIoT device management — trust scoring, anomaly detection, fleets
    ruflo-neural-traderneural-trader — AI trading with 4 agents, backtesting, 112+ tools
    ruflo-market-dataIngest market data, vectorize OHLCV, detect patterns
    ruflo-musicCompose and generate music through a Cognitum Music account

    CLI Install

    macOS / Linux / WSL / Git-Bash:

    # One-line install (POSIX shells only — see Windows note below)
    curl -fsSL https://cdn.jsdelivr.net/gh/ruvnet/ruflo@main/scripts/install.sh | bash
    

    All platforms (including native Windows PowerShell / cmd):

    # Interactive setup wizard — runs identically on every platform
    npx ruflo@latest init wizard
    
    # Quick non-interactive init
    # npx ruflo@latest init
    
    # Or install globally
    npm install -g ruflo@latest
    

    💡 Windows users: the curl ... | bash form needs a POSIX shell (Git-Bash, WSL, MSYS). The npx ruflo@latest init wizard line works natively in PowerShell and cmd. If you hit an 'bash' is not recognized error, use the npx line instead — both end up running the same init flow.

    MCP Server

    # Add Ruflo as an MCP server in Claude Code
    claude mcp add claude-flow -- npx ruflo@latest mcp start
    

    For static inspection of local applications and binaries, see the ruRE plugin guide.


    What You Get

    CapabilityDescription
    100+ AgentsSpecialized agents for coding, testing, security, docs, architecture
    Comms LayerZero-trust federation — agents across machines/orgs discover, authenticate, and exchange work securely
    Swarm CoordinationHierarchical, mesh, and adaptive topologies with consensus
    Self-LearningSONA neural patterns, ReasoningBank, trajectory learning
    Vector MemoryHNSW-indexed AgentDB — measured ~1.9x faster at N=20k, ~3.2x–4.7x at N=5k vs brute force (recall@10 ~0.99); ANN wins above the crossover, ties/loses at small N. See audit + scripts/benchmark-intelligence.mjs
    Background Workers12 auto-triggered workers (audit, optimize, testgaps, etc.)
    Plugin Marketplace48 native Claude Code plugins + 14 in-tree npm plugins
    Multi-ProviderClaude, GPT, Gemini, Cohere, Ollama with smart routing
    SecurityAIDefence, input validation, CVE remediation, path traversal prevention
    Agent FederationCross-installation agent collaboration with zero-trust security
    MetaHarnessAudit your AI agent setup before you ship. Grade readiness (1-100), scan tool configs for security issues, snapshot the whole project to catch regressions over time, and find templates that match your repo. ruflo eject turns a ruflo project into a standalone agent toolkit with its own name. Full guide.

    Learning from experience

    Useful trajectories and task feedback can inform future work. Results depend on the configured memory, learning components and quality of feedback. Learning plugin.

    Agent Federation — Slack for Agents

    Slack gave teams channels. Federation gives agents the same thing — shared workspaces across trust boundaries, where agents on different machines, orgs, or cloud regions can discover each other, prove who they are, and collaborate on tasks.

    The difference: some channels are trusted, some aren't. @claude-flow/plugin-agent-federation handles that automatically. Your agents join a federation, get verified via mTLS + ed25519, and start exchanging work — with PII stripped before anything leaves your node and every message auditable. Untrusted agents can still participate at lower privilege: they see discovery info, not your memory. As they prove reliable, trust upgrades. If they misbehave, they get downgraded instantly — no human in the loop required.

    You don't configure handshakes or manage certificates. You federation init, federation join, and your agents start talking. The protocol handles identity, the PII pipeline handles data safety, and the audit trail handles compliance.

    📘 Full user guide: docs/federation/ — setup, MCP tools, trust levels, circuit breaker, and the (opt-in) WireGuard mesh layer that ties packet-layer reachability to federation trust. ADR-111 deep-dive at docs/federation/phase7-mesh-bringup.md.

    CapabilityHow it works
    🔒Zero-trust federationRemote agents start untrusted. Identity proven via mTLS + ed25519 challenge-response. No API keys, no shared secrets.
    🛡️PII-gated data flow14-type detection pipeline scans every outbound message. Per-trust-level policies: BLOCK, REDACT, HASH, or PASS. Adaptive calibration reduces false positives.
    📊Behavioral trust scoringFormula (0.4×success + 0.2×uptime + 0.2×threat + 0.2×integrity) continuously evaluates peers. Upgrades require history; downgrades are instant.
    📋Compliance built-inHIPAA, SOC2, GDPR audit trails as compliance modes. Every federation event produces a structured record searchable via HNSW.
    🤝9 MCP tools + 10 CLI commandsFull lifecycle: federation_init, federation_send, federation_trust, federation_audit, and more.
    # Team A: initialize federation and generate keypair
    npx claude-flow@latest federation init
    
    # Team A: join Team B's federation endpoint
    npx claude-flow@latest federation join wss://team-b.example.com:8443
    
    # Team A: send a task — PII is stripped automatically before it leaves
    npx claude-flow@latest federation send --to team-b --type task-request \
      --message "Analyze transaction patterns for account anomalies"
    
    # Team A: check peer trust levels and session health
    npx claude-flow@latest federation status
    

    See issue #1669 for the complete architecture, trust model, and implementation roadmap.

    # Claude Code plugin
    /plugin install ruflo-federation@ruflo
    
    # Or via CLI
    npx claude-flow@latest plugins install @claude-flow/plugin-agent-federation
    
    CapabilityClaude Code Alone+ Ruflo
    Agent CollaborationIsolated, no shared contextSwarms with shared memory and consensus
    CoordinationManual orchestrationQueen-led hierarchy (Raft, Byzantine, Gossip)
    MemorySession-onlyHNSW vector memory with sub-ms retrieval
    LearningStatic behaviorSONA self-learning with pattern matching
    Task RoutingYou decideIntelligent routing (89% accuracy)
    Background WorkersNone12 auto-triggered workers
    LLM ProvidersAnthropic only5 providers with failover
    SecurityStandardCVE-hardened with AIDefence
    User --> Claude Code / CLI
              |
              v
        Orchestration Layer
        (MCP Server, Router, 27 Hooks)
              |
              v
        Swarm Coordination
        (Queen, Topology, Consensus)
              |
              v
        100+ Specialized Agents
        (coder, tester, reviewer, architect, security...)
              |
              v
        Memory & Learning
        (AgentDB, HNSW, SONA, ReasoningBank)
              |
              v
        LLM Providers
        (Claude, GPT, Gemini, Cohere, Ollama)
    

    Documentation

    Four docs for four audiences:

    DocWhen to read it
    StatusSee what currently works — capability counts, test baselines, recent fixes, what's next. The is-it-ready doc.
    User GuideDaily reference — every command, every config flag, every plugin. The how-do-I doc.
    Compare frameworksDeciding between Ruflo, Claude Code built-in agents, CrewAI, LangGraph, or AutoGen. The which-one-for-me doc.
    MetaHarness GuideHow to grade your agent setup, scan tool configs for security, detect changes between runs, and eject a project into a standalone agent toolkit. The audit-my-setup doc.
    Benchmarksv3.8.0 SOTA matrix vs LangGraph / AutoGen / CrewAI on darwin-arm64 + linux-x64. ruflo wins cold start, single turn, RSS by 1.3×–1953×. The is-it-fast doc.
    VerificationCryptographically prove your installed bytes match the signed witness — ruflo verify. The trust-but-verify doc.
    Team Gateway ChecklistBefore-merge gates, dual-mode handoff, memory namespace sharing, and witness manifest entry per merge. The safer-team-workflows doc.

    Benchmark internals (for reproduction): sota-workload-spec.md · SOTA-PROGRESS.md · raw matrix JSON: darwin · linux

    User Guide section index:

    SectionTopics
    Quick StartInstallation, prerequisites, install profiles
    Core FeaturesMCP tools, agents, memory, neural learning
    Intelligence & LearningHooks, workers, SONA, model routing
    Swarm & CoordinationTopologies, consensus, hive mind
    SecurityAIDefence, CVE remediation, validation
    EcosystemRuVector, agentic-flow, Flow Nexus
    ConfigurationEnvironment variables, config schema
    Plugin MarketplaceBrowse and install plugins

    Support

    ResourceLink
    DocumentationUser Guide
    Issues & BugsGitHub Issues
    Enterpriseruv.io
    CommunityAgentics Foundation Discord
    Powered byCognitum.one

    License

    MIT - RuvNet