Plugin peer deps reject alpha versions (semver pre-release mismatch)

[ronmikailov]

Bug Report

Description

Plugin packages on npm declare peer dependencies with >=3.0.0 ranges, but only 3.0.0-alpha.x versions are published. npm semver treats pre-release versions as less than the release version, so 3.0.0-alpha.1 does not satisfy >=3.0.0.

Steps to Reproduce

npx @claude-flow/cli@latest plugins install --name @claude-flow/plugin-code-intelligence

Error

npm error code ETARGET
npm error notarget No matching version found for @claude-flow/embeddings@>=3.0.0.

Root Cause

@claude-flow/plugin-agentic-qe@3.0.0-alpha.4 declares:

"peerDependencies": {
  "@claude-flow/embeddings": ">=3.0.0",
  "@claude-flow/plugins": ">=3.0.0"
}

But only @claude-flow/embeddings@3.0.0-alpha.1 exists on npm. Per npm semver rules, 3.0.0-alpha.1 < 3.0.0, so the range >=3.0.0 rejects it.

Affected Plugins

• @claude-flow/plugin-code-intelligence
• @claude-flow/plugin-test-intelligence
• @claude-flow/security
• Any plugin depending on @claude-flow/embeddings@>=3.0.0

Fix

Change peer dep ranges to include pre-releases:

"@claude-flow/embeddings": ">=3.0.0-0"

The -0 suffix matches all pre-release versions of 3.0.0+.

Environment

• @claude-flow/cli@latest (3.0.0-alpha.2)
• Node 20.19.6, npm 10.x
• Ubuntu (WSL2)

[ruvnet]

Correct diagnosis and correct fix. npm semver treats 3.0.0-alpha.1 < 3.0.0, so >=3.0.0 rejects all alpha releases.

The fix: change peer dep ranges from >=3.0.0 to >=3.0.0-0 (the -0 suffix matches all pre-release versions).

Affected packages to update:

• @claude-flow/plugin-agentic-qe
• @claude-flow/plugin-code-intelligence
• @claude-flow/plugin-test-intelligence
• @claude-flow/security
• Any other plugin declaring >=3.0.0 peer deps on @claude-flow/* packages

Will fix and republish the affected plugin packages.

[ruvnet]

Fixed

Changed peer dep ranges from `>=3.0.0` to `>=3.0.0-0` in:

• agentic-qe/package.json — 4 peer deps: `@claude-flow/plugins`, `@claude-flow/memory`, `@claude-flow/security`, `@claude-flow/embeddings`
• prime-radiant/package.json — 3 peer deps: `@claude-flow/memory`, `@claude-flow/security`, `@claude-flow/coordination`

The `-0` suffix allows npm semver to match pre-release versions like `3.0.0-alpha.x`. The hyperbolic-reasoning and quantum-optimizer plugins also had `>=3.0.0` ranges, but their only entry was `@claude-flow/ruvector-upstream` which was entirely removed as part of #1506.