# ruvnet/ruflo

🌊 The leading agent meta-harness for Claude. Deploy intelligent multi-agent swarms, coordinate autonomous workflows, and build conversational AI systems. Features adaptive memory, self-learning swarm intelligence, RAG integration, and native Claude Code / Codex Integration

- **Type:** Collection
- **Trust:** 60/100 (B), scored on the package rubric
- **Verification:** community-indexed — nobody has claimed this listing
- **Version:** 3.10.46
- **Author:** ruvnet
- **License:** MIT
- **npm:** claude-flow
- **Source:** https://github.com/ruvnet/ruflo

## Trust

60/100 (B), scored on the package rubric
- Publisher verified: no
- Install scripts: nothing suspicious found
- Prompt-injection scan: not run
- Obfuscation scan: not run
- Evidence age: 34 days

## Security scan

- **Status:** clean
- **Scanned:** 2026-08-28T18:37:35.068Z
- **Version scanned:** 3.38.20
- **CVEs:** none found by OSV at scan time

## Tools

40 declared. Statically extracted from the shipped source — a floor on the surface, not a census.
- `enable` — Opt into the co-pilot advisor tip (ADR-316)
- `yes` — Skip the confirmation prompt
- `disable` — Revoke advisor-tip consent and stop generating new tips
- `status` — Show advisor-tip consent state and the current cached tip
- `advisor` — Fable co-pilot advisor tip in the statusline insight ticker (ADR-316)
- `agent_spawn` — Spawn a Ruflo-tracked agent with cost attribution + memory persistence + swarm coordination. Use when native Task tool is wrong because you need (a) cost tracki
- `agent_execute`
- `agent_terminate` — Remove a Ruflo-tracked agent from the registry and free its swarm slot. Use when you need to (a) clean up a spawned agent so its cost-tracking row finalizes, (b
- `agent_status` — Read the lifecycle state of a single tracked agent: idle/running/stopped, current taskCount, lastResult, model, health score. Use when native Task tool is wrong
- `agent_list` — List every Ruflo-tracked agent in the registry with its type, model, status, and taskCount. Use when native Task tool is wrong because you need to see the swarm
- `agent_pool` — Manage a fixed-size warm pool of pre-spawned agents to skip cold-start cost on bursty workloads. Use when native Task is wrong because (a) you have a queue of s
- `agent_health` — Compute an agent's rolling health score (0-1) from recent task success ratio + response-latency p50/p95 + error rate. Use when native Task tool is wrong because
- `agent_update` — Mutate a tracked agent's config (model, instructions, status, health) without re-spawning. Use when native Task tool is wrong because the agent already has accu
- `agent_logs`
- `wasm-status` — Check rvagent-wasm availability, version, and capabilities
- `wasm-create` — Create a WASM-sandboxed agent
- `max-turns` — Maximum conversation turns (default: 50)
- `wasm-prompt` — Send a prompt to a WASM agent
- `wasm-gallery` — List available WASM agent gallery templates
- `spawn` — Spawn a new agent
- `task` — Initial task for the agent
- `timeout` — Agent timeout in seconds
- `auto-tools` — Enable automatic tool usage
- `metrics` — Show agent performance metrics
- `pool` — Manage agent pool for scaling
- `min` — Minimum pool size
- `max` — Maximum pool size
- `health` — Show agent health and metrics
- `logs` — Show agent activity logs
- `since` — Show logs since (e.g., "1h", "30m")
- `agent` — Agent management commands
- `federation_bbs_register`
- `federation_bbs_publish`
- `federation_bbs_watch`
- `federation_bbs_human_join`
- `agentdb_health` — Get AgentDB v3 controller health status including cache stats and attestation count Use when generic memory_* tools are wrong because you need AgentDB-specific 
- `agentdb_controllers` — List all AgentDB v3 controllers and their initialization status Use when generic memory_* tools are wrong because you need AgentDB-specific controllers (HNSW ve
- `agentdb_pattern-store` — Store a pattern directly via ReasoningBank controller Use when generic memory_* tools are wrong because you need AgentDB-specific controllers (HNSW vector searc
- `agentdb_pattern-search` — Search patterns via ReasoningBank controller with BM25+semantic hybrid Use when generic memory_* tools are wrong because you need AgentDB-specific controllers (
- `agentdb_feedback` — Record task feedback for learning via LearningSystem + ReasoningBank controllers Use when generic memory_* tools are wrong because you need AgentDB-specific con

## Install

This is a collection — a bundle whose contents each install separately and are not individually verified. Resolve the unit you want and plan that install instead.

## Blast radius

Extensive to critical — no credential declaration found, from the publisher, the upstream registry, or the README. Known so far: runs commands; installs 460 bundled units.
- Floor 59, ceiling 87 (tier: unknown)
- `unknown` means the floor and ceiling land in different bands — not measured enough to name one. It does not mean low.
- This is impact, not likelihood. A high radius is not a defect: a filesystem server is supposed to write files. It is never part of the trust score.

## Machine-readable views of this entry

- Signed JSON: https://forgeregistry.com/api/v1/packages/ruvnet%2Fruflo
- Install plan: https://forgeregistry.com/api/v1/packages/ruvnet%2Fruflo/install-plan
- Alternatives: https://forgeregistry.com/api/v1/alternatives/ruvnet%2Fruflo
- HTML page: https://forgeregistry.com/registry/ruvnet%2Fruflo
- MCP: POST https://forgeregistry.com/api/mcp → `forge_get_package` / `forge_install_plan`

## About this document

Generated by Forge (https://forgeregistry.com) — a compact rendering of the same record served, signed, at the JSON URL above. Trust and scan facts are the registry's own measurements; anything Forge did not measure is named as unmeasured rather than omitted.