mirror of
https://github.com/ruvnet/ruflo.git
synced 2026-09-28 06:22:58 +08:00
- plugins/ruflo-adr smoke step 20: #3432 correctly split the memory-db cwd into a more precise DB_ROOT (nearest .git/.swarm ancestor of ROOT), but the smoke check still only recognized the literal `cwd: ROOT` string. Accept `cwd: DB_ROOT` too. - plugins/ruflo-core smoke step 6: #3428 replaced the old "pinned to v3.6" CLI compatibility line with an accurate description of the new resolve-installed-before-npx-fallback contract. Updated the smoke check to verify that contract's env vars are documented instead of a version pin that no longer exists. - session-tools.ts: CodeQL flagged Math.random()-derived session IDs as insecure randomness in a security context, newly reachable through #3486's activate path. Switched both session ID generators to randomUUID(), matching the convention already used in mcp-server.ts and autopilot-state.ts.