Skip to content

claude-flow

v3.12.0 Breaking

This release includes breaking changes for platform teams planning a safe upgrade.

✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

agentic-ai agentic-framework agentic-workflow agents ai-agents ai-assistant
+14 more
ai-coding ai-skills autonomous-agents claude-code codex harness mcp-server multi-agent multi-agent-systems npm skills swarm swarm-intelligence typescript

Summary

AI summary

Updates Bundled fixes, Quality, and Routing integration across a mixed release.

Full changelog

Highlights

ADR-150 deep integration of the metaharness ecosystem as a sibling agent-harness scaffolding system, with 4 architectural constraints (removable / optional / graceful / CI-gate) that keep ruflo fully operational when every @metaharness/* package is removed.

New surfaces

| Surface | Count | What |
|---|---|---|
| CLI subcommands | 10 | npx ruflo metaharness {score,genome,mcp-scan,threat-model,oia-audit,audit-list,audit-trend,similarity,drift-from-history,mint} |
| Dedicated CLI | 1 | npx ruflo eject — lift a ruflo project into a renamed standalone harness |
| MCP tools | 9 | metaharness_score, metaharness_genome, metaharness_mcp_scan, metaharness_threat_model, metaharness_oia_audit, metaharness_audit_list, metaharness_audit_trend, metaharness_similarity, metaharness_drift_from_history |
| Plugins | 1 | plugins/ruflo-metaharness/ |
| CI workflows | 3 | metaharness-ci, no-metaharness-smoke, oia-audit-weekly |

ADR-152 §3.1 Genome Similarity Search

  • Pure-TS, zero @metaharness/* dep
  • Weighted blend: cosine over 9 numerics + categorical over 4 enums + jaccard over agent_topology
  • Returns overall ∈ [0,1] plus per-component breakdown
  • 3-tier drift fastpath: slow / --baseline-key ~14× / --baseline-file ~19×

Bundled fixes

  • #2400pnpm-lock.yaml regenerated to match @claude-flow/cli specifiers; unblocks main CI
  • #2390--version fast-path verified working in 3.11.0+
  • #1902/#1903/#1904 — Windows shim ruflo-hook.cjs for cost-tracker
  • ADR-125/130 — router env vars registered as known escape hatches
  • ADR-112 — Use when… guidance added to all 9 new MCP tool descriptions

Routing integration (ADR-148/149)

  • @metaharness/router@~0.3.2 wired behind the CLAUDE_FLOW_ROUTER_NEURAL=1 triple-gate
  • SelfEvolvingRouter parallel-logging via CLAUDE_FLOW_ROUTER_PARALLEL_LOG=1
  • 3-criteria AND-gate (quality > 2% AND cost < 1% AND latency < 5%) for promotion

Install

npx [email protected]          # wrapper (recommended)
npm i -g ruflo            # global install

Quality

  • 130+ iters of validation hardening (lockfile drift, env-var precedence, Windows CI timeouts, pnpm workspace install, topological build, sharp postinstall, fetch-retry on ECONNRESET, eject CLI flag-routing, mcp-scan finding shape normalization, audit-trend chain timeouts, oia-audit graceful degradation, etc.)
  • 117-step smoke suite in plugins/ruflo-metaharness/scripts/smoke.sh
  • 120 MCP runtime assertions in test-mcp-tools.mjs
  • 94 similarity unit assertions in test-similarity.mjs
  • 19 cross-reference integrity surfaces anchoring source↔target consistency

Compatibility

🤖 Generated with RuFlo

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track claude-flow

Get notified when new releases ship.

Sign up free

About claude-flow

Deploy multi-agent swarms with coordinated workflows.

All releases →

Related context

Beta — feedback welcome: [email protected]