23f7624596
🔄 Automated Rollback Manager / 🔄 Execute Rollback (push) Blocked by required conditions
🔄 Automated Rollback Manager / ✅ Post-Rollback Verification (push) Blocked by required conditions
🔄 Automated Rollback Manager / 📊 Rollback Monitoring (push) Blocked by required conditions
🔄 Automated Rollback Manager / ⏳ Manual Rollback Approval (push) Blocked by required conditions
V3 CI/CD Pipeline / MCP protocol smoke / macos-latest (push) Waiting to run
V3 CI/CD Pipeline / Memory import smoke / macos-latest (push) Waiting to run
V3 CI/CD Pipeline / Windows hook shim smoke (#2132) / macos-latest (push) Waiting to run
V3 CI/CD Pipeline / Windows hook shim smoke (#2132) / windows-latest (push) Waiting to run
V3 CI/CD Pipeline / Windows init hooks smoke (#2132) / macos-latest (push) Waiting to run
V3 CI/CD Pipeline / Windows init hooks smoke (#2132) / windows-latest (push) Waiting to run
V3 CI/CD Pipeline / Windows hook execution smoke (#2132) / macos-latest (push) Waiting to run
V3 CI/CD Pipeline / Windows hook execution smoke (#2132) / windows-latest (push) Waiting to run
V3 CI/CD Pipeline / Witness verify (signed manifest) / macos-latest (push) Blocked by required conditions
V3 CI/CD Pipeline / Witness verify (signed manifest) / ubuntu-latest (push) Blocked by required conditions
V3 CI/CD Pipeline / Witness verify (signed manifest) / windows-latest (push) Blocked by required conditions
V3 CI/CD Pipeline / Publish to npm (alpha) (push) Blocked by required conditions
V3 CI/CD Pipeline / Smoke (no better-sqlite3) / macos-latest / Node 22 (push) Waiting to run
V3 CI/CD Pipeline / Plugin hooks smoke / macos-latest / Node 22 (push) Waiting to run
ADR-166 MCP Bridge Security Lock / Static-source security lock (push) Failing after 0s
ADR-166 MCP Bridge Security Lock / Compose default binds loopback + Mongo has auth (push) Failing after 2s
CodeQL Advanced / Analyze (rust) (push) Failing after 0s
ADR-166 MCP Bridge Security Lock / plugin-agent-federation bindHost default (push) Failing after 1s
ADR-166 MCP Bridge Security Lock / Runtime behavior — 401 + terminal gate + fail-closed (push) Failing after 4s
business-pods-smoke / smoke (push) Failing after 1s
all-plugins-smoke / smoke-all (push) Failing after 2s
CI/CD Pipeline / Security & Code Quality (push) Failing after 1s
CI/CD Pipeline / Test Suite (ubuntu-latest) (push) Failing after 1s
CI/CD Pipeline / Build & Package (macos-latest) (push) Has been skipped
CI/CD Pipeline / Build & Package (ubuntu-latest) (push) Has been skipped
CI/CD Pipeline / Build & Package (windows-latest) (push) Has been skipped
CI/CD Pipeline / Deploy & Release (push) Waiting to run
CI/CD Pipeline / CI Status (push) Waiting to run
CI/CD Pipeline / Documentation & Examples (push) Failing after 1s
Clone Tracker (14-day rolling) / Snapshot clones for ruflo ecosystem (push) Failing after 1s
CodeQL Advanced / Analyze (actions) (push) Failing after 1s
CodeQL Advanced / Analyze (javascript-typescript) (push) Failing after 1s
federation-peer-rust / stable-noop (push) Failing after 1s
metaharness-ci / score (push) Failing after 1s
metaharness-ci / router-compat (push) Failing after 0s
metaharness-ci / similarity-tests (push) Failing after 0s
no-agentbbs-smoke / smoke-without-agentbbs (push) Failing after 1s
V3 CI/CD Pipeline / Build V3 (windows-latest) (push) Has been skipped
codex-integration-audit / Codex integration audit (push) Failing after 1s
helpers-manifest-guard / guard (push) Failing after 1s
🔗 Cross-Agent Integration Tests / 🤝 Agent Coordination Tests (push) Has been skipped
🔗 Cross-Agent Integration Tests / 🧠 Memory Sharing Integration (push) Has been skipped
🔗 Cross-Agent Integration Tests / 🛡️ Fault Tolerance Tests (push) Has been skipped
🔗 Cross-Agent Integration Tests / ⚡ Performance Integration Tests (push) Has been skipped
🔗 Cross-Agent Integration Tests / 📊 Integration Test Report (push) Waiting to run
metaharness-ci / mcp-scan (push) Failing after 1s
metaharness-ci / eject-dryrun (push) Failing after 1s
metaharness-ci / metaharness-real-data (push) Failing after 0s
no-cli-optdep-bloat-2561 / guard (push) Failing after 1s
no-metaharness-smoke / smoke-without-metaharness (push) Failing after 1s
no-phantom-agentic-flow-subpath / guard (push) Failing after 1s
🔄 Automated Rollback Manager / 🚨 Failure Detection (push) Failing after 1s
V3 CI/CD Pipeline / Plugin hooks smoke / ubuntu-latest / Node 22 (push) Failing after 1s
V3 CI/CD Pipeline / ruflo-graph-intelligence build + test smoke (#2044, ADR-123) (push) Failing after 1s
CVE Audit Gate / Audit root (critical-blocking) (push) Failing after 2s
cost-tracker-smoke / smoke (push) Failing after 3s
oia-audit-weekly / audit (push) Failing after 2s
ruflo-agent-smoke / ruflo-agent structural smoke (push) Failing after 1s
📊 Status Badges Update / 📊 Update Status Badges (push) Failing after 1s
V3 CI/CD Pipeline / Static regression guards (#2267 YAML + (push) Failing after 1s
V3 CI/CD Pipeline / Test V3 Packages (push) Failing after 0s
V3 CI/CD Pipeline / agent_execute provider routing smoke (#2042) (push) Failing after 0s
CVE Audit Gate / Audit v3 (critical-blocking) (push) Failing after 1s
federation-peer-rust / stable-native (push) Failing after 2s
🔗 Cross-Agent Integration Tests / 🚀 Integration Test Setup (push) Failing after 2s
neural-trader-smoke / runtime-smoke (push) Failing after 1s
🔄 Automated Rollback Manager / 🔍 Pre-Rollback Validation (push) Waiting to run
V3 CI/CD Pipeline / Build V3 (macos-latest) (push) Has been skipped
V3 CI/CD Pipeline / Build V3 (ubuntu-latest) (push) Has been skipped
V3 CI/CD Pipeline / Type Check V3 (push) Failing after 1s
V3 CI/CD Pipeline / Smoke (no better-sqlite3) / ubuntu-latest / Node 24 (push) Failing after 1s
V3 CI/CD Pipeline / Smoke (no better-sqlite3) / ubuntu-latest / Node 22 (push) Failing after 2s
V3 CI/CD Pipeline / browser rvf create flag smoke (#2015) (push) Failing after 0s
V3 CI/CD Pipeline / Dependency review (#2046) (push) Has been skipped
V3 CI/CD Pipeline / Supply-chain audit (#2046) (push) Failing after 0s
V3 CI/CD Pipeline / witness marker drift smoke (#2021) (push) Failing after 1s
V3 CI/CD Pipeline / neural-trader portfolio CG smoke (#2068, ADR-126 Phase 3) (push) Failing after 1s
V3 CI/CD Pipeline / neural-trader backtest signing smoke (#2068, ADR-126 Phase 4) (push) Failing after 1s
V3 CI/CD Pipeline / kg-extract type-import classification smoke (#2049) (push) Failing after 0s
V3 CI/CD Pipeline / witness verify precondition smoke (#1880) (push) Failing after 2s
V3 CI/CD Pipeline / neural-trader pipeline risk-gate smoke (#2068, ADR-126 Phase 5) (push) Failing after 0s
V3 CI/CD Pipeline / neural-trader feature attribution smoke (#2068, ADR-126 Phase 6) (push) Failing after 0s
V3 CI/CD Pipeline / plugin-registry signature verification smoke (#1922, CWE-347) (push) Failing after 4s
V3 CI/CD Pipeline / memory stats legacy-DB smoke (#2120) (push) Failing after 4s
V3 CI/CD Pipeline / github deprecated actions smoke (#2089, ADR-127 Phase 3) (push) Failing after 1s
V3 CI/CD Pipeline / graph query + pathfinder smoke (ADR-130 P2+P5) (push) Has been skipped
V3 CI/CD Pipeline / graph trajectory hooks smoke (ADR-130 P3) (push) Has been skipped
V3 CI/CD Pipeline / graph plugin adapter smoke (ADR-130 P4) (push) Has been skipped
V3 CI/CD Pipeline / graph benchmark (ADR-130 P6) (push) Has been skipped
V3 CI/CD Pipeline / statusline generator delegation smoke (#2195) (push) Failing after 1s
V3 CI/CD Pipeline / wizard init regression guard (#2206 (push) Failing after 1s
V3 CI/CD Pipeline / memory no-stray-db smoke (ADR-125 P7) (push) Failing after 1s
V3 CI/CD Pipeline / github-safe injection smoke (#2089, ADR-127 Phase 1) (push) Failing after 1s
V3 CI/CD Pipeline / github actions pin smoke (#2089, ADR-127 Phase 1) (push) Failing after 1s
V3 CI/CD Pipeline / github attribution opt-in smoke (#2089, ADR-127 Phase 4) (push) Failing after 1s
V3 CI/CD Pipeline / pre-bash hook safety smoke (#2017) (push) Failing after 1s
V3 CI/CD Pipeline / Memory import smoke / ubuntu-latest (push) Failing after 0s
V3 CI/CD Pipeline / MCP protocol smoke / ubuntu-latest (push) Failing after 2s
V3 CI/CD Pipeline / ruvllm WASM auto-init smoke (#2086) (push) Failing after 4s
V3 CI/CD Pipeline / MCP paired-tool round-trip smoke (#1889) (push) Failing after 1s
V3 CI/CD Pipeline / Plugin package install-safety (#1902/#1903/#1904) (push) Failing after 1s
V3 CI/CD Pipeline / Tool description discoverability (ADR-112) (push) Failing after 3s
V3 CI/CD Pipeline / CLI npx-install smoke (#1147 / (22) (push) Failing after 1s
V3 CI/CD Pipeline / CLI npx-install smoke (#1147 / (24) (push) Failing after 1s
V3 CI/CD Pipeline / Windows hook shim smoke (#2132) / ubuntu-latest (push) Failing after 2s
V3 CI/CD Pipeline / Windows hook execution smoke (#2132) / ubuntu-latest (push) Failing after 1s
V3 CI/CD Pipeline / Windows init hooks smoke (#2132) / ubuntu-latest (push) Failing after 1s
V3 CI/CD Pipeline / Vector-index dimension audit (#1947) (push) Failing after 0s
V3 CI/CD Pipeline / Hook-command install safety (#1921) (push) Failing after 1s
V3 CI/CD Pipeline / ToolOutputGuardrail smoke (ADR-131, (push) Failing after 1s
V3 CI/CD Pipeline / init-bundle invariants smoke (#2095, ADR-128 Phase 5) (push) Failing after 1s
V3 CI/CD Pipeline / wasm provider bridge smoke (ADR-129 P1) (push) Failing after 2s
V3 CI/CD Pipeline / wasm gallery CRUD smoke (ADR-129 P3) (push) Failing after 1s
V3 CI/CD Pipeline / wasm plugin bridge smoke (ADR-129 P4) (push) Failing after 0s
V3 CI/CD Pipeline / wasm compose smoke (ADR-129 P2) (push) Failing after 4s
V3 CI/CD Pipeline / graph schema smoke (ADR-130 P1) (push) Failing after 0s
Validate Marketplace / validate (push) Failing after 1s
🔍 Verification Pipeline / 🚀 Setup Verification (push) Failing after 1s
🔍 Verification Pipeline / 🛡️ Security Verification (push) Has been skipped
🔍 Verification Pipeline / 📝 Code Quality (push) Has been skipped
🔍 Verification Pipeline / 🧪 Test Verification (${{ matrix.os }}, Node ${{ matrix.node }}) (push) Has been skipped
🔍 Verification Pipeline / 🏗️ Build Verification (push) Has been skipped
🔍 Verification Pipeline / 📚 Documentation Verification (push) Has been skipped
🔍 Verification Pipeline / ⚡ Performance Verification (push) Waiting to run
🔍 Verification Pipeline / 📊 Verification Report (push) Waiting to run
CVE Audit Gate / High-severity report (warn only) (push) Has been cancelled
11 KiB
11 KiB
@claude-flow/plugins
Unified Plugin SDK for Claude Flow V3
A comprehensive plugin development framework providing workers, hooks, providers, and security utilities for building Claude Flow extensions.
Installation
npm install @claude-flow/plugins
Quick Start
Create a Plugin with the Builder
import { PluginBuilder, HookEvent, HookPriority } from '@claude-flow/plugins';
const myPlugin = new PluginBuilder('my-awesome-plugin', '1.0.0')
.withDescription('My awesome plugin for Claude Flow')
.withAuthor('Your Name')
.withMCPTools([
{
name: 'greet',
description: 'Greet a user',
inputSchema: {
type: 'object',
properties: {
name: { type: 'string', description: 'Name to greet' }
},
required: ['name']
},
handler: async (input) => ({
content: [{ type: 'text', text: `Hello, ${input.name}!` }]
})
}
])
.withHooks([
{
event: HookEvent.PostTaskComplete,
priority: HookPriority.Normal,
handler: async (ctx) => {
console.log('Task completed:', ctx.data);
return { success: true };
}
}
])
.build();
// Register with the default registry
import { getDefaultRegistry } from '@claude-flow/plugins';
await getDefaultRegistry().register(myPlugin);
Quick Plugin Creators
import { createToolPlugin, createHooksPlugin, createWorkerPlugin } from '@claude-flow/plugins';
// Tool-only plugin
const toolPlugin = createToolPlugin('my-tools', '1.0.0', [
{ name: 'tool1', description: '...', inputSchema: {...}, handler: async () => {...} }
]);
// Hooks-only plugin
const hooksPlugin = createHooksPlugin('my-hooks', '1.0.0', [
{ event: HookEvent.PreTaskExecute, handler: async (ctx) => ({ success: true }) }
]);
// Worker plugin
const workerPlugin = createWorkerPlugin('my-workers', '1.0.0', [
{ type: 'coder', name: 'main-coder', capabilities: ['code-generation'] }
]);
Features
🔧 MCP Tool Builder
import { MCPToolBuilder } from '@claude-flow/plugins';
const tool = new MCPToolBuilder('calculate')
.withDescription('Perform calculations')
.addStringParam('expression', 'Math expression', { required: true })
.addBooleanParam('verbose', 'Show steps', { default: false })
.withHandler(async (input) => {
const result = eval(input.expression); // Use a safe evaluator in production!
return { content: [{ type: 'text', text: `Result: ${result}` }] };
})
.build();
🎣 Hook System
import { HookBuilder, HookFactory, HookRegistry, HookEvent, HookPriority } from '@claude-flow/plugins';
// Create a custom hook with conditions
const hook = new HookBuilder(HookEvent.PreAgentSpawn)
.withName('validate-agent')
.withPriority(HookPriority.High)
.when((ctx) => ctx.data?.type === 'coder')
.transform((data) => ({ ...data, validated: true }))
.handle(async (ctx) => {
// Validation logic
return { success: true, data: ctx.data, modified: true };
})
.build();
// Pre-built hook factories
const logger = HookFactory.createLogger(HookEvent.PostTaskComplete, console);
const rateLimiter = HookFactory.createRateLimiter(HookEvent.PreToolCall, { maxPerMinute: 100 });
const validator = HookFactory.createValidator(HookEvent.PreAgentSpawn, (data) => data.type !== undefined);
👷 Worker Pool
import { WorkerPool, WorkerFactory } from '@claude-flow/plugins';
// Create a worker pool
const pool = new WorkerPool({
minWorkers: 2,
maxWorkers: 10,
taskQueueSize: 100
});
// Spawn workers using factory
const coder = await pool.spawn(WorkerFactory.createCoder('main-coder'));
const reviewer = await pool.spawn(WorkerFactory.createReviewer('code-reviewer'));
const tester = await pool.spawn(WorkerFactory.createTester('test-runner'));
// Submit tasks
const result = await pool.submit({
id: 'task-1',
type: 'code-generation',
input: { prompt: 'Write a function...' }
});
// Shutdown
await pool.shutdown();
🤖 LLM Provider Integration
import { ProviderRegistry, ProviderFactory, BaseLLMProvider } from '@claude-flow/plugins';
const registry = new ProviderRegistry({
fallbackChain: ['anthropic', 'openai'],
costOptimization: true
});
// Register built-in providers
class ClaudeProvider extends BaseLLMProvider {
constructor() {
super(ProviderFactory.createClaude());
}
async complete(request) {
// Implementation
}
}
registry.register(new ClaudeProvider());
// Execute with automatic fallback
const response = await registry.execute({
model: 'claude-sonnet-4-6',
messages: [{ role: 'user', content: 'Hello!' }]
});
🔗 Agentic Flow Integration
import { AgenticFlowBridge, AgentDBBridge } from '@claude-flow/plugins';
// Swarm coordination
const agentic = new AgenticFlowBridge({ maxConcurrentAgents: 15 });
await agentic.initializeSwarm({ type: 'hierarchical', maxAgents: 15 });
const agent = await agentic.spawnAgent({
type: 'coder',
capabilities: ['typescript', 'react']
});
const result = await agentic.orchestrateTask({
taskType: 'code-generation',
input: { prompt: '...' },
agentId: agent.id
});
// Vector storage with AgentDB
const agentdb = new AgentDBBridge({ dimensions: 1536, indexType: 'hnsw' });
await agentdb.initialize();
await agentdb.store('doc-1', embeddings, { type: 'document' });
const similar = await agentdb.search(queryVector, { limit: 10 });
🔒 Security Utilities
import { Security, createRateLimiter, createResourceLimiter } from '@claude-flow/plugins';
// Input validation
const name = Security.validateString(input, { minLength: 1, maxLength: 100 });
const count = Security.validateNumber(input, { min: 0, max: 1000, integer: true });
const path = Security.validatePath(input, { allowedExtensions: ['.ts', '.js'] });
// Safe path creation (prevents traversal attacks)
const safePath = Security.safePath('/project', 'src', userInput);
// Safe JSON parsing (prevents prototype pollution)
const data = Security.safeJsonParse<Config>(jsonString);
// Command validation
const cmd = Security.validateCommand('npm install', { allowedCommands: new Set(['npm', 'npx']) });
// Rate limiting
const limiter = createRateLimiter({ maxTokens: 100, refillRate: 10, refillInterval: 1000 });
if (limiter.tryAcquire()) {
// Proceed
}
// Resource limiting
const resourceLimiter = createResourceLimiter({ maxMemoryMB: 512, maxExecutionTime: 30000 });
const result = await resourceLimiter.enforce(async () => {
// Heavy computation
});
API Reference
Core Exports
| Export | Description |
|---|---|
PluginBuilder |
Fluent builder for creating plugins |
BasePlugin |
Abstract base class for plugins |
PluginRegistry |
Plugin lifecycle management |
getDefaultRegistry() |
Get the default plugin registry |
SDK Builders
| Export | Description |
|---|---|
MCPToolBuilder |
Build MCP tools with parameters |
HookBuilder |
Build hooks with conditions and transformers |
WorkerBuilder |
Build worker definitions |
Quick Creators
| Export | Description |
|---|---|
createToolPlugin() |
Create a tool-only plugin |
createHooksPlugin() |
Create a hooks-only plugin |
createWorkerPlugin() |
Create a worker plugin |
createProviderPlugin() |
Create a provider plugin |
Hook System
| Export | Description |
|---|---|
HookRegistry |
Central hook management |
HookExecutor |
Execute hooks with patterns |
HookFactory |
Pre-built hook creators |
HookEvent |
All hook event types |
HookPriority |
Hook priority levels |
Workers
| Export | Description |
|---|---|
WorkerPool |
Managed worker pool |
WorkerInstance |
Individual worker |
WorkerFactory |
Worker definition factory |
Providers
| Export | Description |
|---|---|
ProviderRegistry |
LLM provider management |
BaseLLMProvider |
Base provider implementation |
ProviderFactory |
Provider definition factory |
Integrations
| Export | Description |
|---|---|
AgenticFlowBridge |
agentic-flow@alpha integration |
AgentDBBridge |
AgentDB vector storage |
Security
| Export | Description |
|---|---|
Security |
All security utilities |
validateString/Number/Boolean/Array/Enum |
Input validators |
safePath/safePathAsync |
Path security |
safeJsonParse/safeJsonStringify |
JSON security |
createRateLimiter |
Rate limiting |
createResourceLimiter |
Resource limiting |
Hook Events
enum HookEvent {
// Session lifecycle
SessionStart = 'session:start',
SessionEnd = 'session:end',
// Agent lifecycle
PreAgentSpawn = 'agent:pre-spawn',
PostAgentSpawn = 'agent:post-spawn',
PreAgentTerminate = 'agent:pre-terminate',
PostAgentTerminate = 'agent:post-terminate',
// Task lifecycle
PreTaskExecute = 'task:pre-execute',
PostTaskComplete = 'task:post-complete',
TaskError = 'task:error',
// Tool lifecycle
PreToolCall = 'tool:pre-call',
PostToolCall = 'tool:post-call',
// Memory operations
PreMemoryStore = 'memory:pre-store',
PostMemoryStore = 'memory:post-store',
PreMemoryRetrieve = 'memory:pre-retrieve',
PostMemoryRetrieve = 'memory:post-retrieve',
// Swarm coordination
SwarmInitialized = 'swarm:initialized',
SwarmShutdown = 'swarm:shutdown',
ConsensusReached = 'swarm:consensus-reached',
// File operations
PreFileRead = 'file:pre-read',
PostFileRead = 'file:post-read',
PreFileWrite = 'file:pre-write',
PostFileWrite = 'file:post-write',
// Commands
PreCommand = 'command:pre-execute',
PostCommand = 'command:post-execute',
// Learning
PatternLearned = 'learning:pattern-learned',
PatternApplied = 'learning:pattern-applied',
}
Hook Priorities
enum HookPriority {
Critical = 1000, // Run first, can abort
High = 750, // Important hooks
Normal = 500, // Default priority
Low = 250, // Less important
Deferred = 0, // Run last
}
Worker Types
coder- Code implementationreviewer- Code reviewtester- Test generation/executionresearcher- Information gatheringplanner- Task planningcoordinator- Multi-agent coordinationsecurity- Security analysisperformance- Performance optimizationspecialized- Custom capabilitieslong-running- Background tasks
Performance
| Metric | Target | Actual |
|---|---|---|
| Plugin load time | < 50ms | ~20ms |
| Hook execution | < 1ms | ~0.5ms |
| Worker spawn | < 100ms | ~50ms |
| Vector search (10K) | < 10ms | ~5ms |
Testing
npm test # Run all tests
npm run test:watch # Watch mode
License
MIT