23f7624596
ADR-166 MCP Bridge Security Lock / Static-source security lock (push) Failing after 0s
ADR-166 MCP Bridge Security Lock / Compose default binds loopback + Mongo has auth (push) Failing after 2s
CodeQL Advanced / Analyze (rust) (push) Failing after 0s
ADR-166 MCP Bridge Security Lock / plugin-agent-federation bindHost default (push) Failing after 1s
ADR-166 MCP Bridge Security Lock / Runtime behavior — 401 + terminal gate + fail-closed (push) Failing after 4s
business-pods-smoke / smoke (push) Failing after 1s
all-plugins-smoke / smoke-all (push) Failing after 2s
CI/CD Pipeline / Security & Code Quality (push) Failing after 1s
CI/CD Pipeline / Test Suite (ubuntu-latest) (push) Failing after 1s
CI/CD Pipeline / Build & Package (macos-latest) (push) Has been skipped
CI/CD Pipeline / Build & Package (ubuntu-latest) (push) Has been skipped
CI/CD Pipeline / Build & Package (windows-latest) (push) Has been skipped
CI/CD Pipeline / Documentation & Examples (push) Failing after 1s
Clone Tracker (14-day rolling) / Snapshot clones for ruflo ecosystem (push) Failing after 1s
CodeQL Advanced / Analyze (actions) (push) Failing after 1s
CodeQL Advanced / Analyze (javascript-typescript) (push) Failing after 1s
federation-peer-rust / stable-noop (push) Failing after 1s
metaharness-ci / score (push) Failing after 1s
metaharness-ci / router-compat (push) Failing after 0s
metaharness-ci / similarity-tests (push) Failing after 0s
no-agentbbs-smoke / smoke-without-agentbbs (push) Failing after 1s
V3 CI/CD Pipeline / Build V3 (windows-latest) (push) Has been skipped
codex-integration-audit / Codex integration audit (push) Failing after 1s
helpers-manifest-guard / guard (push) Failing after 1s
🔗 Cross-Agent Integration Tests / 🤝 Agent Coordination Tests (push) Has been skipped
🔗 Cross-Agent Integration Tests / 🧠 Memory Sharing Integration (push) Has been skipped
🔗 Cross-Agent Integration Tests / 🛡️ Fault Tolerance Tests (push) Has been skipped
🔗 Cross-Agent Integration Tests / ⚡ Performance Integration Tests (push) Has been skipped
metaharness-ci / mcp-scan (push) Failing after 1s
metaharness-ci / eject-dryrun (push) Failing after 1s
metaharness-ci / metaharness-real-data (push) Failing after 0s
no-cli-optdep-bloat-2561 / guard (push) Failing after 1s
no-metaharness-smoke / smoke-without-metaharness (push) Failing after 1s
no-phantom-agentic-flow-subpath / guard (push) Failing after 1s
🔄 Automated Rollback Manager / 🚨 Failure Detection (push) Failing after 1s
V3 CI/CD Pipeline / Plugin hooks smoke / ubuntu-latest / Node 22 (push) Failing after 1s
V3 CI/CD Pipeline / ruflo-graph-intelligence build + test smoke (#2044, ADR-123) (push) Failing after 1s
CVE Audit Gate / Audit root (critical-blocking) (push) Failing after 2s
cost-tracker-smoke / smoke (push) Failing after 3s
oia-audit-weekly / audit (push) Failing after 2s
ruflo-agent-smoke / ruflo-agent structural smoke (push) Failing after 1s
📊 Status Badges Update / 📊 Update Status Badges (push) Failing after 1s
V3 CI/CD Pipeline / Static regression guards (#2267 YAML + (push) Failing after 1s
V3 CI/CD Pipeline / Test V3 Packages (push) Failing after 0s
V3 CI/CD Pipeline / agent_execute provider routing smoke (#2042) (push) Failing after 0s
CVE Audit Gate / Audit v3 (critical-blocking) (push) Failing after 1s
federation-peer-rust / stable-native (push) Failing after 2s
🔗 Cross-Agent Integration Tests / 🚀 Integration Test Setup (push) Failing after 2s
neural-trader-smoke / runtime-smoke (push) Failing after 1s
V3 CI/CD Pipeline / Build V3 (macos-latest) (push) Has been skipped
V3 CI/CD Pipeline / Build V3 (ubuntu-latest) (push) Has been skipped
V3 CI/CD Pipeline / Type Check V3 (push) Failing after 1s
V3 CI/CD Pipeline / Smoke (no better-sqlite3) / ubuntu-latest / Node 24 (push) Failing after 1s
V3 CI/CD Pipeline / Smoke (no better-sqlite3) / ubuntu-latest / Node 22 (push) Failing after 2s
V3 CI/CD Pipeline / browser rvf create flag smoke (#2015) (push) Failing after 0s
V3 CI/CD Pipeline / Dependency review (#2046) (push) Has been skipped
V3 CI/CD Pipeline / Supply-chain audit (#2046) (push) Failing after 0s
V3 CI/CD Pipeline / witness marker drift smoke (#2021) (push) Failing after 1s
V3 CI/CD Pipeline / neural-trader portfolio CG smoke (#2068, ADR-126 Phase 3) (push) Failing after 1s
V3 CI/CD Pipeline / neural-trader backtest signing smoke (#2068, ADR-126 Phase 4) (push) Failing after 1s
V3 CI/CD Pipeline / kg-extract type-import classification smoke (#2049) (push) Failing after 0s
V3 CI/CD Pipeline / witness verify precondition smoke (#1880) (push) Failing after 2s
V3 CI/CD Pipeline / neural-trader pipeline risk-gate smoke (#2068, ADR-126 Phase 5) (push) Failing after 0s
V3 CI/CD Pipeline / neural-trader feature attribution smoke (#2068, ADR-126 Phase 6) (push) Failing after 0s
V3 CI/CD Pipeline / plugin-registry signature verification smoke (#1922, CWE-347) (push) Failing after 4s
V3 CI/CD Pipeline / memory stats legacy-DB smoke (#2120) (push) Failing after 4s
V3 CI/CD Pipeline / github deprecated actions smoke (#2089, ADR-127 Phase 3) (push) Failing after 1s
V3 CI/CD Pipeline / graph query + pathfinder smoke (ADR-130 P2+P5) (push) Has been skipped
V3 CI/CD Pipeline / graph trajectory hooks smoke (ADR-130 P3) (push) Has been skipped
V3 CI/CD Pipeline / graph plugin adapter smoke (ADR-130 P4) (push) Has been skipped
V3 CI/CD Pipeline / graph benchmark (ADR-130 P6) (push) Has been skipped
V3 CI/CD Pipeline / statusline generator delegation smoke (#2195) (push) Failing after 1s
V3 CI/CD Pipeline / wizard init regression guard (#2206 (push) Failing after 1s
V3 CI/CD Pipeline / memory no-stray-db smoke (ADR-125 P7) (push) Failing after 1s
V3 CI/CD Pipeline / github-safe injection smoke (#2089, ADR-127 Phase 1) (push) Failing after 1s
V3 CI/CD Pipeline / github actions pin smoke (#2089, ADR-127 Phase 1) (push) Failing after 1s
V3 CI/CD Pipeline / github attribution opt-in smoke (#2089, ADR-127 Phase 4) (push) Failing after 1s
V3 CI/CD Pipeline / pre-bash hook safety smoke (#2017) (push) Failing after 1s
V3 CI/CD Pipeline / Memory import smoke / ubuntu-latest (push) Failing after 0s
V3 CI/CD Pipeline / MCP protocol smoke / ubuntu-latest (push) Failing after 2s
V3 CI/CD Pipeline / ruvllm WASM auto-init smoke (#2086) (push) Failing after 4s
V3 CI/CD Pipeline / MCP paired-tool round-trip smoke (#1889) (push) Failing after 1s
V3 CI/CD Pipeline / Plugin package install-safety (#1902/#1903/#1904) (push) Failing after 1s
V3 CI/CD Pipeline / Tool description discoverability (ADR-112) (push) Failing after 3s
V3 CI/CD Pipeline / CLI npx-install smoke (#1147 / (22) (push) Failing after 1s
V3 CI/CD Pipeline / CLI npx-install smoke (#1147 / (24) (push) Failing after 1s
V3 CI/CD Pipeline / Windows hook shim smoke (#2132) / ubuntu-latest (push) Failing after 2s
V3 CI/CD Pipeline / Windows hook execution smoke (#2132) / ubuntu-latest (push) Failing after 1s
V3 CI/CD Pipeline / Windows init hooks smoke (#2132) / ubuntu-latest (push) Failing after 1s
V3 CI/CD Pipeline / Vector-index dimension audit (#1947) (push) Failing after 0s
V3 CI/CD Pipeline / Hook-command install safety (#1921) (push) Failing after 1s
V3 CI/CD Pipeline / ToolOutputGuardrail smoke (ADR-131, (push) Failing after 1s
V3 CI/CD Pipeline / init-bundle invariants smoke (#2095, ADR-128 Phase 5) (push) Failing after 1s
V3 CI/CD Pipeline / wasm provider bridge smoke (ADR-129 P1) (push) Failing after 2s
V3 CI/CD Pipeline / wasm gallery CRUD smoke (ADR-129 P3) (push) Failing after 1s
V3 CI/CD Pipeline / wasm plugin bridge smoke (ADR-129 P4) (push) Failing after 0s
V3 CI/CD Pipeline / wasm compose smoke (ADR-129 P2) (push) Failing after 4s
V3 CI/CD Pipeline / graph schema smoke (ADR-130 P1) (push) Failing after 0s
Validate Marketplace / validate (push) Failing after 1s
🔍 Verification Pipeline / 🚀 Setup Verification (push) Failing after 1s
🔍 Verification Pipeline / 🛡️ Security Verification (push) Has been skipped
🔍 Verification Pipeline / 📝 Code Quality (push) Has been skipped
🔍 Verification Pipeline / 🧪 Test Verification (${{ matrix.os }}, Node ${{ matrix.node }}) (push) Has been skipped
🔍 Verification Pipeline / 🏗️ Build Verification (push) Has been skipped
🔍 Verification Pipeline / 📚 Documentation Verification (push) Has been skipped
CVE Audit Gate / High-severity report (warn only) (push) Has been cancelled
🔄 Automated Rollback Manager / 🔄 Execute Rollback (push) Has been cancelled
🔄 Automated Rollback Manager / ✅ Post-Rollback Verification (push) Has been cancelled
🔄 Automated Rollback Manager / 📊 Rollback Monitoring (push) Has been cancelled
V3 CI/CD Pipeline / Windows init hooks smoke (#2132) / windows-latest (push) Has been cancelled
V3 CI/CD Pipeline / Windows hook execution smoke (#2132) / macos-latest (push) Has been cancelled
V3 CI/CD Pipeline / Windows hook execution smoke (#2132) / windows-latest (push) Has been cancelled
🔄 Automated Rollback Manager / ⏳ Manual Rollback Approval (push) Has been cancelled
V3 CI/CD Pipeline / MCP protocol smoke / macos-latest (push) Has been cancelled
V3 CI/CD Pipeline / Memory import smoke / macos-latest (push) Has been cancelled
V3 CI/CD Pipeline / Windows hook shim smoke (#2132) / macos-latest (push) Has been cancelled
V3 CI/CD Pipeline / Windows hook shim smoke (#2132) / windows-latest (push) Has been cancelled
V3 CI/CD Pipeline / Windows init hooks smoke (#2132) / macos-latest (push) Has been cancelled
V3 CI/CD Pipeline / Witness verify (signed manifest) / macos-latest (push) Has been cancelled
V3 CI/CD Pipeline / Witness verify (signed manifest) / ubuntu-latest (push) Has been cancelled
V3 CI/CD Pipeline / Witness verify (signed manifest) / windows-latest (push) Has been cancelled
V3 CI/CD Pipeline / Publish to npm (alpha) (push) Has been cancelled
V3 CI/CD Pipeline / Smoke (no better-sqlite3) / macos-latest / Node 22 (push) Has been cancelled
V3 CI/CD Pipeline / Plugin hooks smoke / macos-latest / Node 22 (push) Has been cancelled
CI/CD Pipeline / Deploy & Release (push) Has been cancelled
CI/CD Pipeline / CI Status (push) Has been cancelled
🔗 Cross-Agent Integration Tests / 📊 Integration Test Report (push) Has been cancelled
🔄 Automated Rollback Manager / 🔍 Pre-Rollback Validation (push) Has been cancelled
🔍 Verification Pipeline / ⚡ Performance Verification (push) Has been cancelled
🔍 Verification Pipeline / 📊 Verification Report (push) Has been cancelled
251 lines
8.7 KiB
JavaScript
Executable File
251 lines
8.7 KiB
JavaScript
Executable File
#!/usr/bin/env node
|
||
/**
|
||
* Clone tracker — fetches 14-day GitHub clone numbers for the ruflo
|
||
* ecosystem repos and appends a snapshot to `data/clone-data.rvf`
|
||
* (a RuVector RVF vector store).
|
||
*
|
||
* Scheduled by `.github/workflows/clone-tracker.yml` every ~13 days,
|
||
* which is just inside GitHub's 14-day clone-data retention window.
|
||
*
|
||
* Each snapshot is a 10-dimensional vector:
|
||
* [ruflo_clones, ruflo_uniques,
|
||
* agentdb_clones, agentdb_uniques,
|
||
* agentic_clones, agentic_uniques,
|
||
* ruvector_clones, ruvector_uniques,
|
||
* ruv-FANN_clones, ruv-FANN_uniques]
|
||
*
|
||
* Vector ID: `<ISO-date>-<run-id>`.
|
||
* Metadata: full per-repo breakdown JSON + npm download totals at the
|
||
* time of the snapshot.
|
||
*
|
||
* Why a vector store and not just JSON? The RVF lets us answer
|
||
* "find the days in history whose traffic pattern most resembles
|
||
* today" via `query()`, which is the more useful question than
|
||
* "what was the count on date X" for understanding cyclic / event-
|
||
* driven growth. A parallel `data/clone-data.ledger.json` is also
|
||
* written so the raw chronology is human-readable in PR reviews.
|
||
*/
|
||
|
||
import { execFileSync } from 'node:child_process';
|
||
import { createHash } from 'node:crypto';
|
||
import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
|
||
import { resolve as path_resolve, dirname as path_dirname } from 'node:path';
|
||
import { fileURLToPath } from 'node:url';
|
||
|
||
const __dirname = path_dirname(fileURLToPath(import.meta.url));
|
||
const REPO_ROOT = path_resolve(__dirname, '..');
|
||
const DATA_DIR = path_resolve(REPO_ROOT, 'data');
|
||
const RVF_PATH = path_resolve(DATA_DIR, 'clone-data.rvf');
|
||
const LEDGER_PATH = path_resolve(DATA_DIR, 'clone-data.ledger.json');
|
||
const PROOF_PATH = path_resolve(DATA_DIR, 'clone-data.proof.json');
|
||
|
||
const REPOS = [
|
||
'ruvnet/ruflo',
|
||
'ruvnet/agentdb',
|
||
'ruvnet/agentic-flow',
|
||
'ruvnet/ruvector',
|
||
'ruvnet/ruv-FANN',
|
||
];
|
||
|
||
const NPM_PKGS_HEADLINE = [
|
||
'claude-flow',
|
||
'ruflo',
|
||
'@claude-flow/cli',
|
||
'@claude-flow/memory',
|
||
'agentdb',
|
||
'agentic-flow',
|
||
];
|
||
|
||
// ============================================================
|
||
// Collection
|
||
// ============================================================
|
||
|
||
function fetchClones(repo) {
|
||
try {
|
||
// Use execFileSync with array args — repo name is program-controlled but
|
||
// array form prevents accidental shell metacharacter expansion (CWE-78).
|
||
const out = execFileSync('gh', ['api', `repos/${repo}/traffic/clones`], {
|
||
encoding: 'utf8',
|
||
stdio: ['ignore', 'pipe', 'ignore'],
|
||
});
|
||
const j = JSON.parse(out);
|
||
return { count: j.count ?? 0, uniques: j.uniques ?? 0, days: j.clones ?? [] };
|
||
} catch (err) {
|
||
console.error(` [warn] failed to fetch clones for ${repo}: ${err.message?.slice(0, 80)}`);
|
||
return { count: 0, uniques: 0, days: [], error: 'fetch-failed' };
|
||
}
|
||
}
|
||
|
||
async function fetchNpmDownloads(pkg) {
|
||
try {
|
||
const r = await fetch(`https://api.npmjs.org/downloads/range/last-year/${encodeURIComponent(pkg)}`);
|
||
if (!r.ok) return 0;
|
||
const j = await r.json();
|
||
return (j.downloads || []).reduce((a, b) => a + b.downloads, 0);
|
||
} catch {
|
||
return 0;
|
||
}
|
||
}
|
||
|
||
// ============================================================
|
||
// RVF + Ledger I/O
|
||
// ============================================================
|
||
|
||
async function loadOrCreateRvf() {
|
||
const rvfModule = await import('@ruvector/rvf').catch((err) => {
|
||
console.error(` [warn] @ruvector/rvf import failed: ${err.message?.slice(0, 80)}`);
|
||
console.error(' [warn] Falling back to JSON ledger only; RVF write skipped.');
|
||
return null;
|
||
});
|
||
if (!rvfModule) return null;
|
||
|
||
const { RvfDatabase } = rvfModule;
|
||
const dimensions = 10; // 5 repos × {count, uniques}
|
||
|
||
if (existsSync(RVF_PATH)) {
|
||
return RvfDatabase.open(RVF_PATH).catch(async (err) => {
|
||
console.error(` [warn] could not open existing RVF (${err.message?.slice(0, 60)}); recreating`);
|
||
return RvfDatabase.create(RVF_PATH, { dimensions });
|
||
});
|
||
}
|
||
return RvfDatabase.create(RVF_PATH, { dimensions });
|
||
}
|
||
|
||
function readLedger() {
|
||
if (!existsSync(LEDGER_PATH)) {
|
||
return {
|
||
schema: 'ruflo-clone-tracker-ledger/v1',
|
||
created_at: new Date().toISOString(),
|
||
repos: REPOS,
|
||
vector_layout: [
|
||
'ruflo_clones', 'ruflo_uniques',
|
||
'agentdb_clones', 'agentdb_uniques',
|
||
'agentic_flow_clones', 'agentic_flow_uniques',
|
||
'ruvector_clones', 'ruvector_uniques',
|
||
'ruv_FANN_clones', 'ruv_FANN_uniques',
|
||
],
|
||
snapshots: [],
|
||
};
|
||
}
|
||
return JSON.parse(readFileSync(LEDGER_PATH, 'utf8'));
|
||
}
|
||
|
||
function writeLedger(ledger) {
|
||
mkdirSync(DATA_DIR, { recursive: true });
|
||
writeFileSync(LEDGER_PATH, JSON.stringify(ledger, null, 2) + '\n');
|
||
}
|
||
|
||
// ============================================================
|
||
// Main
|
||
// ============================================================
|
||
|
||
async function main() {
|
||
mkdirSync(DATA_DIR, { recursive: true });
|
||
|
||
console.error('--- fetching GitHub clones (last 14 days) ---');
|
||
const clones = {};
|
||
const vector = [];
|
||
for (const repo of REPOS) {
|
||
const c = fetchClones(repo);
|
||
clones[repo] = c;
|
||
vector.push(c.count, c.uniques);
|
||
console.error(` ${repo.padEnd(24)} count=${String(c.count).padStart(8)} uniques=${String(c.uniques).padStart(6)}`);
|
||
}
|
||
|
||
console.error('--- fetching npm download totals (last year, headline pkgs) ---');
|
||
const npm = {};
|
||
for (const pkg of NPM_PKGS_HEADLINE) {
|
||
npm[pkg] = await fetchNpmDownloads(pkg);
|
||
console.error(` ${pkg.padEnd(22)} ${npm[pkg].toLocaleString().padStart(12)}`);
|
||
await new Promise((r) => setTimeout(r, 350));
|
||
}
|
||
const npmHeadlineTotal = Object.values(npm).reduce((a, b) => a + b, 0);
|
||
|
||
const now = new Date().toISOString();
|
||
const runId = createHash('sha256').update(now).digest('hex').slice(0, 8);
|
||
const snapshotId = `${now}-${runId}`;
|
||
|
||
const totalClones = REPOS.reduce((a, r) => a + clones[r].count, 0);
|
||
const totalUniques = REPOS.reduce((a, r) => a + clones[r].uniques, 0);
|
||
|
||
console.error('');
|
||
console.error('=== snapshot summary ===');
|
||
console.error(` snapshot_id: ${snapshotId}`);
|
||
console.error(` total_clones: ${totalClones.toLocaleString()}`);
|
||
console.error(` total_uniques: ${totalUniques.toLocaleString()}`);
|
||
console.error(` npm_headline: ${npmHeadlineTotal.toLocaleString()}`);
|
||
|
||
// ---- Append to ledger (JSON, append-only chronology) ----
|
||
const ledger = readLedger();
|
||
ledger.snapshots.push({
|
||
id: snapshotId,
|
||
captured_at: now,
|
||
vector,
|
||
totals: { clones: totalClones, uniques: totalUniques },
|
||
repos: clones,
|
||
npm_headline_total: npmHeadlineTotal,
|
||
npm: npm,
|
||
});
|
||
ledger.updated_at = now;
|
||
ledger.snapshot_count = ledger.snapshots.length;
|
||
writeLedger(ledger);
|
||
console.error(` ledger: ${LEDGER_PATH} (snapshot #${ledger.snapshot_count})`);
|
||
|
||
// ---- Append to RVF (RuVector vector store) ----
|
||
const db = await loadOrCreateRvf();
|
||
if (db) {
|
||
try {
|
||
const result = await db.ingestBatch([
|
||
{
|
||
id: snapshotId,
|
||
vector: new Float32Array(vector),
|
||
metadata: {
|
||
captured_at: now,
|
||
total_clones: totalClones,
|
||
total_uniques: totalUniques,
|
||
npm_headline_total: npmHeadlineTotal,
|
||
repos_json: JSON.stringify(clones),
|
||
npm_json: JSON.stringify(npm),
|
||
},
|
||
},
|
||
]);
|
||
const status = await db.status();
|
||
console.error(` rvf: ${RVF_PATH} (vectors=${status.vectorCount ?? '?'}, accepted=${result.accepted ?? '?'})`);
|
||
await db.close();
|
||
} catch (err) {
|
||
console.error(` [warn] RVF ingest failed: ${err.message?.slice(0, 120)}`);
|
||
}
|
||
}
|
||
|
||
// ---- Write proof (SHA-256 over ledger) ----
|
||
const ledgerBytes = readFileSync(LEDGER_PATH);
|
||
const ledgerSha = createHash('sha256').update(ledgerBytes).digest('hex');
|
||
const proof = {
|
||
schema: 'ruflo-ecosystem-proof/v2',
|
||
generated_at: now,
|
||
sources: {
|
||
github_clones: 'https://api.github.com/repos/{owner}/{repo}/traffic/clones (14-day rolling window)',
|
||
npm_downloads: 'https://api.npmjs.org/downloads/range/last-year/{pkg}',
|
||
},
|
||
latest_snapshot: {
|
||
id: snapshotId,
|
||
captured_at: now,
|
||
clones_14d: totalClones,
|
||
unique_cloners_14d: totalUniques,
|
||
npm_downloads_12mo_headline: npmHeadlineTotal,
|
||
headline: `${(npmHeadlineTotal / 1e6).toFixed(1)}M npm downloads · ${Math.round(totalClones / 1000)}k git clones (14d)`,
|
||
},
|
||
ledger_snapshot_count: ledger.snapshot_count,
|
||
ledger_sha256: ledgerSha,
|
||
ledger_path: 'data/clone-data.ledger.json',
|
||
rvf_path: 'data/clone-data.rvf',
|
||
};
|
||
writeFileSync(PROOF_PATH, JSON.stringify(proof, null, 2) + '\n');
|
||
console.error(` proof: ${PROOF_PATH} (ledger sha256: ${ledgerSha.slice(0, 16)}…)`);
|
||
}
|
||
|
||
main().catch((err) => {
|
||
console.error('FATAL:', err);
|
||
process.exit(1);
|
||
});
|