| Name | Modified | Size | Downloads / Week |
|---|---|---|---|
| Parent folder | |||
| README.md | 2026-07-31 | 2.8 kB | |
| v3.34.0 -- AGNTCY_Outshift runtime integration source code.tar.gz | 2026-07-31 | 31.7 MB | |
| v3.34.0 -- AGNTCY_Outshift runtime integration source code.zip | 2026-07-31 | 35.4 MB | |
| Totals: 3 Items | 67.1 MB | 0 | |
AGNTCY/Outshift runtime integration (ADR-378/379/380)
Optional, removable augmentation per ADR-150's pattern — the kernel stays fully operational with these packages absent.
- New CLI verbs:
ruflo transport use slim,ruflo agent publish,ruflo swarm join <namespace>. All exit 0 with a clear message whenRUFLO_AGNTCY_SLIM_ENDPOINTis unset — no fake success paths. - CASA (Continuous Agentic Semantic Authorization) — deterministic free-text-objective →
bounded allow/deny/budget/expiry envelope compiler, deny-by-default enforcement gate,
Ed25519-signed decision receipts (
.swarm/casa-receipts.jsonl). - AGNTCY OTel span attributes —
coordination.episode,authorization.decision. - Companion Rust crate
v3/crates/ruflo-agntcymirrors the TS enforcement logic (real in-processLocalTransport,SlimTransportstub behind a non-defaultslimCargo feature). - Companion package
@metaharness/agntcy(build-time half — identity, OASF export, Directory publish, semantic observability) published for the first time from the siblingmetaharnessrepo. - See it in action: AGNTCY showcase — a real trace and the presentation deck.
npm Trusted Publishing release workflow (ADR-378)
.github/workflows/stable-npm-release.yml publishes the three-package stable train
(@claude-flow/cli, claude-flow, ruflo) from an immutable, tag-pinned checkout with a full
test/build/pack/install smoke-test gate before any registry write, verifies published-package
integrity against the locally-built archive, and rolls out latest/alpha/v3alpha dist-tags
together. This release is the first real run of that workflow.
Fixed
@agntcy/slim-bindingspinned to the confirmed-working alpha (2.0.0-alpha.5) — the SLIM maintainers moved offuniffi-bindgen-react-native(incompatible with plain Node) onto@ubjs/core/@ubjs/node; verified live end-to-end.security scanfailed open on unvalidated--depth/--type/--target— all three now fail closed before anything is scanned or written.
Changed / Removed
security scan --depth fulldeprecated (normalises todeepwith a warning).security scan --type containernow rejected instead of silently reporting clean (breaking for pipelines passing--type container).
Full changelog: [CHANGELOG.md](https://github.com/ruvnet/ruflo/blob/main/CHANGELOG.md#3340
Install: npx ruflo@latest doctor · npx ruflo@latest agent publish --help