
Security News
GitHub to Block pull_request_target Workflows by Default Starting December 2
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.
@claude-flow/integration
Advanced tools
Integration module - agentic-flow@alpha deep integration, ADR-001 compliance, TokenOptimizer
Deep agentic-flow@alpha integration module for Claude Flow V3 - ADR-001 compliance, code deduplication, SONA adapter, and Flash Attention coordinator.
npm install @claude-flow/integration
# Optional: Install agentic-flow for optimal performance
npm install agentic-flow@alpha
import { AgenticFlowBridge, createAgenticFlowBridge } from '@claude-flow/integration';
// Create and initialize bridge
const bridge = await createAgenticFlowBridge({
features: {
enableSONA: true,
enableFlashAttention: true,
enableAgentDB: true
}
});
// Check if agentic-flow is connected
if (bridge.isAgenticFlowConnected()) {
console.log('Using optimized agentic-flow implementation');
} else {
console.log('Using local fallback implementation');
}
// Get SONA adapter
const sona = await bridge.getSONAAdapter();
await sona.setMode('balanced');
// Get Attention coordinator
const attention = await bridge.getAttentionCoordinator();
const result = await attention.compute({ query, key, value });
import { AgenticFlowBridge } from '@claude-flow/integration';
const bridge = new AgenticFlowBridge({
sona: {
mode: 'balanced',
learningRate: 0.001,
similarityThreshold: 0.7
},
attention: {
mechanism: 'flash',
numHeads: 8,
flashOptLevel: 2
},
agentdb: {
dimension: 1536,
indexType: 'hnsw',
metric: 'cosine'
},
features: {
enableSONA: true,
enableFlashAttention: true,
enableAgentDB: true
},
runtimePreference: ['napi', 'wasm', 'js'],
lazyLoad: true,
debug: false
});
await bridge.initialize();
// Component access
const sona = await bridge.getSONAAdapter();
const attention = await bridge.getAttentionCoordinator();
const sdk = await bridge.getSDKBridge();
// Feature management
bridge.isFeatureEnabled('enableSONA');
await bridge.enableFeature('enableFlashAttention');
await bridge.disableFeature('enableAgentDB');
// Health & status
const status = bridge.getStatus();
const health = await bridge.healthCheck();
const flags = bridge.getFeatureFlags();
// Direct agentic-flow access (when available)
const core = bridge.getAgenticFlowCore();
if (core) {
const patterns = await core.sona.findPatterns(query);
}
// Cleanup
await bridge.shutdown();
const sona = await bridge.getSONAAdapter();
// Mode management
await sona.setMode('real-time'); // 'real-time' | 'balanced' | 'research' | 'edge' | 'batch'
// Pattern operations
const patternId = await sona.storePattern({
context: 'code-review',
strategy: 'analyze-then-comment',
embedding: vector
});
const patterns = await sona.findPatterns(queryEmbedding, {
limit: 5,
threshold: 0.7
});
// Statistics
const stats = await sona.getStats();
const attention = await bridge.getAttentionCoordinator();
// Set attention mechanism
await attention.setMechanism('flash'); // 'flash' | 'standard' | 'linear'
// Compute attention
const result = await attention.compute({
query: queryTensor,
key: keyTensor,
value: valueTensor,
mask: optionalMask
});
// Get metrics
const metrics = await attention.getMetrics();
// { avgLatencyMs, speedupRatio, memoryUsage }
const sdk = await bridge.getSDKBridge();
// Version negotiation
const version = sdk.getVersion();
const isCompatible = sdk.isCompatible('0.1.0');
// Health check
await sdk.ping();
const flags = bridge.getFeatureFlags();
{
enableSONA: true, // SONA learning integration
enableFlashAttention: true, // Flash Attention optimization
enableAgentDB: true, // AgentDB vector storage
enableTrajectoryTracking: true,// Trajectory recording
enableGNN: true, // Graph Neural Network
enableIntelligenceBridge: true,// Intelligence bridge
enableQUICTransport: false, // QUIC transport (experimental)
enableNightlyLearning: false, // Background learning
enableAutoConsolidation: true // Auto memory consolidation
}
The bridge automatically selects the best runtime:
| Runtime | Performance | Requirements |
|---|---|---|
| NAPI | Optimal | Native bindings, non-Windows or x64 |
| WASM | Good | WebAssembly support |
| JS | Fallback | Always available |
const status = bridge.getStatus();
console.log(status.runtime);
// { runtime: 'napi', platform: 'linux', arch: 'x64', performanceTier: 'optimal' }
bridge.on('initialized', ({ duration, components, agenticFlowConnected }) => {
console.log(`Initialized in ${duration}ms`);
});
bridge.on('agentic-flow:connected', ({ version, features }) => {
console.log(`Connected to agentic-flow ${version}`);
});
bridge.on('agentic-flow:fallback', ({ reason }) => {
console.log(`Using fallback: ${reason}`);
});
bridge.on('feature-enabled', ({ feature }) => {
console.log(`Enabled: ${feature}`);
});
bridge.on('health-check', ({ results }) => {
console.log(`Health: ${JSON.stringify(results)}`);
});
| Metric | Target |
|---|---|
| Flash Attention speedup | 2.49x-7.47x |
| AgentDB search | 150x-12,500x faster |
| SONA adaptation | <0.05ms |
| Memory reduction | 50-75% |
import type {
IntegrationConfig,
IntegrationStatus,
RuntimeInfo,
ComponentHealth,
FeatureFlags,
AgenticFlowCore
} from '@claude-flow/integration';
agentic-flow@^0.1.0 (optional, for optimal performance)MIT
FAQs
Integration module - agentic-flow@alpha deep integration, ADR-001 compliance, TokenOptimizer
The npm package @claude-flow/integration receives a total of 0 weekly downloads. As such, @claude-flow/integration popularity was classified as not popular.
We found that @claude-flow/integration demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.

Security News
/Application Security
A practical guide to securing GitHub Actions against supply chain attacks, covering malicious pull requests, credential theft, dependency risks, and release pipelines.

Security News
Composer 2.11 adds dependency cooldowns, joining package managers that delay new releases to reduce supply chain risks while allowing urgent security updates.