drawio-desktop is an Electron-based desktop application that wraps the core draw.io diagramming editor (included as a git submodule). It provides a fully offline diagramming experience with a security-first design: Content Security Policy prevents remote script execution, IPC is gated through contextBridge with sender validation, and file operations enforce path authorisation against symlink attacks. The application supports CLI-based batch export (PNG, PDF, SVG, HTML, XML) with a hand-rolled argument parser, per-window file watching, auto-update via electron-updater, and platform-specific builds for Windows (x64/arm64, MSI, NSIS, APPX), macOS (dmg, zip, Quick Look preview), and Linux (AppImage, deb, rpm, snap). The architecture is a monolithic Electron main process (src/main/electron.js) communicating with the renderer (drawio submodule) through a secure IPC bridge. The codebase demonstrates high craftsmanship in security-sensitive areas such as backup file writes using exclusive temp files and rename, CLI export symlink handling, and per-window file watch registry. It is actively maintained with recent commits and comprehensive CI/CD pipelines.
Ruflo is a large, modular AI agent orchestration platform that extends Claude Code with a plugin ecosystem, swarm coordination, memory systems, neural learning, security enforcement, and federation. The core is a CLI tool (`npx ruflo`) that provides 26+ commands and 215+ MCP tools for managing agents, memory, security, hooks, and deployments. It includes a console UI inside Claude Code, a Svelte-based chat UI (ruvocal), and a React-based goal UI. The architecture is ADR-driven with clean separation into domain, application, and infrastructure layers across 35+ plugins and 20+ core packages. The system implements advanced patterns: CQRS for memory and swarm, circuit breakers for resilience, capability envelopes for security, Ed25519 signing for release integrity, and a harness loop for automated champion selection. It supports multi-model routing, hybrid vector search (HNSW + SQLite), watermarking (WASM-based Gumbel scheme), and neural learning (PPO, DQN, Decision Transformer). Federation enables cross-installation agent collaboration with zero-trust, HMAC-signed envelopes, and PII-gated data flow. While the codebase is well-structured and actively maintained, it has some maintenance risks: duplicate helper scripts across multiple directories, hardcoded version numbers in smoke tests, experimental alpha plugins, and a large regression test suite that requires ongoing upkeep. The plugin ecosystem is extensive but some plugins may be aspirational rather than production-ready.