@claude-flow/cli 3.25.6 → 3.26.1

package/dist/src/services/fable-harness.js

@@ -79,6 +79,17 @@ const REFLECT_SYSTEM_PROMPT = [
     'Reply with ONLY a JSON array, one object per input id, no prose:',
     '[{"id":"...","failureClass":"<short label>","diagnosis":"<one sentence>","mutationHint":"<actionable>"}]',
 ].join('\n');
+const ADVISOR_SYSTEM_PROMPT = [
+    "You are RuFlo's co-pilot advisor: ONE short, proactive, actionable tip for",
+    'a developer, based on a single JSON object describing STRUCTURAL signals',
+    'from their current coding session (security scan status, swarm/agent',
+    'state, count of uncommitted files, context-window usage). There is no',
+    'prompt, command, or file content in the input — never assume or invent any.',
+    'If nothing in the snapshot genuinely warrants a tip, say so by returning',
+    'an empty array. Never pad with generic advice not grounded in the snapshot.',
+    'Reply with ONLY a JSON array containing zero or one object, no prose:',
+    '[] or [{"headline":"<=60 chars","detail":"<one actionable sentence>","confidence":0.0-1.0}]',
+].join('\n');
 // ── Default spawner (real CLI) ───────────────────────────────────────────────
 /**
  * Default `claude -p` spawner. Pipes the prompt via stdin (never as an argv
@@ -213,6 +224,24 @@ export class FableHarness {
         }
         return out;
     }
+    /**
+     * ADR-316 — one proactive co-pilot tip from a structural session snapshot
+     * (no raw prompt/command/file content). A single-item "batch" — same
+     * budget/cwd/parsing discipline as judgeBatch/reflectFailures, just with
+     * exactly one call instead of a loop. Returns null when disabled, over
+     * budget, or the model found nothing worth surfacing (an empty verdict
+     * array is a valid, non-error answer here, not a parse failure).
+     */
+    async adviseCoPilotTip(snapshot) {
+        if (!this.isEnabled())
+            return null;
+        if (this.spentUsd >= this.maxBudgetUsd)
+            return null;
+        const parsed = await this.runBatch(ADVISOR_SYSTEM_PROMPT, [snapshot]);
+        if (parsed.length === 0)
+            return null;
+        return normalizeCoPilotTip(parsed[0]);
+    }
     /** Build the argv for a `claude -p` call. Exposed shape for testability. */
     buildArgv(systemPrompt) {
         const perCallCap = Math.max(0, this.maxBudgetUsd - this.spentUsd);
@@ -321,6 +350,18 @@ function normalizeReflect(raw) {
         mutationHint: typeof o.mutationHint === 'string' ? o.mutationHint : '',
     };
 }
+function normalizeCoPilotTip(raw) {
+    if (!raw || typeof raw !== 'object')
+        return null;
+    const o = raw;
+    if (typeof o.headline !== 'string' || !o.headline.trim())
+        return null;
+    return {
+        headline: o.headline.slice(0, 80),
+        detail: typeof o.detail === 'string' ? o.detail.slice(0, 200) : '',
+        confidence: clamp01(typeof o.confidence === 'number' ? o.confidence : Number(o.confidence)),
+    };
+}
 function tryParseJson(s) {
     try {
         return JSON.parse(s);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@claude-flow/cli",
-  "version": "3.25.6",
+  "version": "3.26.1",
   "type": "module",
   "description": "Ruflo CLI - Enterprise AI agent orchestration with 60+ specialized agents, swarm coordination, MCP server, self-learning hooks, and vector memory for Claude Code",
   "main": "dist/src/index.js",
@@ -81,7 +81,8 @@
     "scripts/postinstall.cjs",
     ".claude",
     "plugins",
-    "README.md"
+    "README.md",
+    "catalog-manifest.json"
   ],
   "scripts": {
     "build": "tsc",
@@ -89,7 +90,7 @@
     "test:plugin-store": "npx tsx src/plugins/tests/standalone-test.ts",
     "test:pattern-store": "npx tsx src/transfer/store/tests/standalone-test.ts",
     "postinstall": "node ./scripts/postinstall.cjs",
-    "prepublishOnly": "cp ../../../README.md ./README.md && rm -rf plugins && mkdir -p plugins && cp -r ../../../plugins/ruflo-metaharness plugins/ && node scripts/sign-helpers.mjs && node scripts/verify-helpers.mjs",
+    "prepublishOnly": "cp ../../../README.md ./README.md && rm -rf plugins && mkdir -p plugins && cp -r ../../../plugins/ruflo-metaharness plugins/ && node scripts/generate-catalog-manifest.mjs && node scripts/sign-helpers.mjs && node scripts/verify-helpers.mjs",
     "release": "npm version prerelease --preid=alpha && npm run publish:all",
     "publish:all": "./scripts/publish.sh"
   },
@@ -119,6 +120,14 @@
     "tag": "latest"
   },
   "overrides": {
-    "protobufjs": ">=7.5.6"
+    "protobufjs": ">=7.5.6",
+    "js-yaml": ">=4.3.0",
+    "express": ">=4.22.2",
+    "qs": ">=6.15.2",
+    "@opentelemetry/core": ">=2.8.0",
+    "@opentelemetry/resources": ">=2.8.0",
+    "@opentelemetry/sdk-trace-base": ">=2.8.0",
+    "@opentelemetry/sdk-node": ">=0.220.0",
+    "agentdb": "$agentdb"
   }
 }

package/dist/src/ruvector/lattice-wasm.d.ts

@@ -1,14 +0,0 @@
-/** Default package name (ruvnet WASM convention); override with RUFLO_LATTICE_WASM_PKG. */
-export declare const LATTICE_WASM_PKG: string;
-export type LatticeModel = 'minilm' | 'bge' | 'paraphrase-minilm' | 'qwen3-0.6b' | string;
-export declare const DEFAULT_LATTICE_MODEL: LatticeModel;
-/** Is the Lattice WASM embedder installed + initializable? Cached; never throws. */
-export declare function latticeAvailable(): Promise<boolean>;
-/** The models Lattice reports (empty until availability is probed). */
-export declare function latticeModels(): LatticeModel[];
-/**
- * Embed `text` with `model` via Lattice WASM. Returns null on any failure so the
- * caller can fall through to the next tier. Never throws.
- */
-export declare function latticeEmbed(text: string, model?: LatticeModel): Promise<number[] | null>;
-//# sourceMappingURL=lattice-wasm.d.ts.map

package/dist/src/ruvector/lattice-wasm.js

@@ -1,144 +0,0 @@
-/**
- * Lattice WASM embedder adapter — the primary embedding tier (ADR: embedding
- * substrate upgrade). Replaces hash placeholders with real semantic embeddings
- * and adds multiple models (miniLM, bge, multi-paraphrase-miniLM, GPU qwen3-0.6B).
- *
- * Built on the proven `@ruvector/ruvllm-wasm` optional-dependency convention:
- *   - dynamically imported (never a hard dependency),
- *   - WASM initialized from bundled bytes,
- *   - fully FAIL-CLOSED: if the package is absent, the WASM fails to init, or the
- *     embed API differs, `latticeAvailable()` returns false and callers fall
- *     through to the existing ruvector-ONNX → hash tiers with ZERO regression.
- *
- * The package specifier is configurable (`RUFLO_LATTICE_WASM_PKG`) so the exact
- * published name can be set without a code change; the API is probed tolerantly.
- * Opt-in for the GPU model: qwen3 is only selected when explicitly requested.
- */
-import { createRequire } from 'module';
-import { readFileSync } from 'fs';
-const require_ = createRequire(import.meta.url);
-/** Default package name (ruvnet WASM convention); override with RUFLO_LATTICE_WASM_PKG. */
-export const LATTICE_WASM_PKG = process.env.RUFLO_LATTICE_WASM_PKG || '@ruvector/lattice-wasm';
-export const DEFAULT_LATTICE_MODEL = process.env.RUFLO_EMBED_MODEL || 'minilm';
-/* eslint-disable @typescript-eslint/no-explicit-any */
-let _mod = null;
-let _ready = false;
-let _probed = false;
-let _available = false;
-let _models = [];
-async function loadModule() {
-    if (_mod)
-        return _mod;
-    const spec = LATTICE_WASM_PKG;
-    _mod = await import(spec).catch(() => null); // optional — absent ⇒ null ⇒ unavailable
-    return _mod;
-}
-async function ensureInit() {
-    if (_ready)
-        return true;
-    const mod = await loadModule();
-    if (!mod)
-        return false;
-    try {
-        // ruvnet WASM convention: initSync({ module: <wasm bytes> }); tolerate variants.
-        if (!_ready && typeof mod.initSync === 'function') {
-            let wasmBytes;
-            for (const cand of ['lattice_wasm_bg.wasm', 'lattice_bg.wasm', 'index_bg.wasm']) {
-                try {
-                    wasmBytes = readFileSync(require_.resolve(`${LATTICE_WASM_PKG}/${cand}`));
-                    break;
-                }
-                catch { /* try next */ }
-            }
-            mod.initSync(wasmBytes ? { module: wasmBytes } : undefined);
-        }
-        else if (typeof mod.default === 'function') {
-            await mod.default(); // some wasm-bindgen builds export an async default init
-        }
-        _ready = true;
-        return true;
-    }
-    catch {
-        return false; // init failed ⇒ fail closed
-    }
-}
-/** Extract a plain number[] from whatever shape the module's embed returns. */
-function toVec(r) {
-    const v = (r && typeof r === 'object' && 'embedding' in r) ? r.embedding : r;
-    if (!v)
-        return null;
-    if (Array.isArray(v))
-        return v;
-    if (v.length !== undefined)
-        return Array.from(v);
-    return null;
-}
-/** Is the Lattice WASM embedder installed + initializable? Cached; never throws. */
-export async function latticeAvailable() {
-    if (_probed)
-        return _available;
-    _probed = true;
-    try {
-        if (!(await ensureInit())) {
-            _available = false;
-            return false;
-        }
-        const mod = _mod;
-        // discover models (tolerant): listModels() / models / MODELS
-        try {
-            const list = typeof mod.listModels === 'function' ? mod.listModels() : (mod.models ?? mod.MODELS);
-            if (Array.isArray(list) && list.length)
-                _models = list;
-        }
-        catch { /* leave default */ }
-        if (!_models.length)
-            _models = [DEFAULT_LATTICE_MODEL];
-        // verify an actual embed succeeds (the ADR-086 "loads but runtime-fails" trap).
-        const probe = await latticeEmbedRaw('probe', DEFAULT_LATTICE_MODEL);
-        _available = !!probe && probe.length > 0;
-        return _available;
-    }
-    catch {
-        _available = false;
-        return false;
-    }
-}
-/** The models Lattice reports (empty until availability is probed). */
-export function latticeModels() { return [..._models]; }
-async function latticeEmbedRaw(text, model) {
-    const mod = _mod;
-    if (!mod)
-        return null;
-    // tolerant API probing across plausible wasm-bindgen surfaces.
-    const attempts = [
-        () => typeof mod.embed === 'function' ? mod.embed(text, model) : undefined,
-        () => typeof mod.embed === 'function' ? mod.embed(text) : undefined,
-        () => typeof mod.embedText === 'function' ? mod.embedText(text, model) : undefined,
-        () => typeof mod.Embedder === 'function' ? new mod.Embedder(model).embed(text) : undefined,
-    ];
-    for (const a of attempts) {
-        try {
-            const r = await a();
-            const v = toVec(r);
-            if (v)
-                return v;
-        }
-        catch { /* try next surface */ }
-    }
-    return null;
-}
-/**
- * Embed `text` with `model` via Lattice WASM. Returns null on any failure so the
- * caller can fall through to the next tier. Never throws.
- */
-export async function latticeEmbed(text, model = DEFAULT_LATTICE_MODEL) {
-    try {
-        if (!(await latticeAvailable()))
-            return null;
-        return await latticeEmbedRaw(text, model);
-    }
-    catch {
-        return null;
-    }
-}
-//# sourceMappingURL=lattice-wasm.js.map

package/plugins/ruflo-metaharness/.claude-flow/daemon-state.json

@@ -1,178 +0,0 @@
-{
-  "running": true,
-  "startedAt": "2026-07-09T13:44:14.858Z",
-  "workers": {
-    "map": {
-      "runCount": 3,
-      "successCount": 3,
-      "failureCount": 0,
-      "averageDurationMs": 2,
-      "isRunning": false,
-      "nextRun": "2026-07-09T14:29:14.860Z",
-      "lastStartedAt": "2026-07-09T14:14:14.854Z",
-      "lastRun": "2026-07-09T14:14:14.858Z"
-    },
-    "audit": {
-      "runCount": 3,
-      "successCount": 3,
-      "failureCount": 0,
-      "averageDurationMs": 181799,
-      "isRunning": false,
-      "nextRun": "2026-07-09T14:12:48.865Z",
-      "lastStartedAt": "2026-07-09T14:12:48.864Z",
-      "lastRun": "2026-07-09T14:15:20.256Z"
-    },
-    "optimize": {
-      "runCount": 2,
-      "successCount": 2,
-      "failureCount": 0,
-      "averageDurationMs": 243440.5,
-      "isRunning": false,
-      "nextRun": "2026-07-09T14:26:21.738Z",
-      "lastStartedAt": "2026-07-09T14:05:34.528Z",
-      "lastRun": "2026-07-09T14:11:21.737Z"
-    },
-    "consolidate": {
-      "runCount": 1,
-      "successCount": 1,
-      "failureCount": 0,
-      "averageDurationMs": 0,
-      "isRunning": false,
-      "nextRun": "2026-07-09T14:20:14.861Z",
-      "lastStartedAt": "2026-07-09T13:50:14.860Z",
-      "lastRun": "2026-07-09T13:50:14.860Z"
-    },
-    "testgaps": {
-      "runCount": 1,
-      "successCount": 1,
-      "failureCount": 0,
-      "averageDurationMs": 181886,
-      "isRunning": true,
-      "nextRun": "2026-07-09T14:15:16.745Z",
-      "lastStartedAt": "2026-07-09T14:15:16.740Z",
-      "lastRun": "2026-07-09T13:55:16.744Z"
-    },
-    "backup": {
-      "runCount": 1,
-      "successCount": 1,
-      "failureCount": 0,
-      "averageDurationMs": 4,
-      "isRunning": false,
-      "nextRun": "2026-07-10T13:54:14.862Z",
-      "lastStartedAt": "2026-07-09T13:54:14.856Z",
-      "lastRun": "2026-07-09T13:54:14.860Z"
-    },
-    "harness": {
-      "runCount": 1,
-      "successCount": 1,
-      "failureCount": 0,
-      "averageDurationMs": 7,
-      "isRunning": false,
-      "nextRun": "2026-07-09T19:56:14.864Z",
-      "lastStartedAt": "2026-07-09T13:56:14.856Z",
-      "lastRun": "2026-07-09T13:56:14.863Z"
-    },
-    "predict": {
-      "runCount": 0,
-      "successCount": 0,
-      "failureCount": 0,
-      "averageDurationMs": 0,
-      "isRunning": false
-    },
-    "document": {
-      "runCount": 0,
-      "successCount": 0,
-      "failureCount": 0,
-      "averageDurationMs": 0,
-      "isRunning": false
-    }
-  },
-  "config": {
-    "autoStart": false,
-    "logDir": "/Users/cohen/Projects/ruflo/plugins/ruflo-metaharness/.claude-flow/logs",
-    "stateFile": "/Users/cohen/Projects/ruflo/plugins/ruflo-metaharness/.claude-flow/daemon-state.json",
-    "maxConcurrent": 2,
-    "workerTimeoutMs": 960000,
-    "resourceThresholds": {
-      "maxCpuLoad": 9.600000000000001,
-      "minFreeMemoryPercent": 5
-    },
-    "ttlMs": 43200000,
-    "idleShutdownMs": 0,
-    "workers": [
-      {
-        "type": "map",
-        "intervalMs": 900000,
-        "offsetMs": 0,
-        "priority": "normal",
-        "description": "Codebase mapping",
-        "enabled": true
-      },
-      {
-        "type": "audit",
-        "intervalMs": 600000,
-        "offsetMs": 120000,
-        "priority": "critical",
-        "description": "Security analysis",
-        "enabled": true
-      },
-      {
-        "type": "optimize",
-        "intervalMs": 900000,
-        "offsetMs": 240000,
-        "priority": "high",
-        "description": "Performance optimization",
-        "enabled": true
-      },
-      {
-        "type": "consolidate",
-        "intervalMs": 1800000,
-        "offsetMs": 360000,
-        "priority": "low",
-        "description": "Memory distillation (ADR-174)",
-        "enabled": true
-      },
-      {
-        "type": "testgaps",
-        "intervalMs": 1200000,
-        "offsetMs": 480000,
-        "priority": "normal",
-        "description": "Test coverage analysis",
-        "enabled": true
-      },
-      {
-        "type": "backup",
-        "intervalMs": 86400000,
-        "offsetMs": 600000,
-        "priority": "low",
-        "description": "Nightly memory DB backup (WAL-safe, rotated)",
-        "enabled": true
-      },
-      {
-        "type": "harness",
-        "intervalMs": 21600000,
-        "offsetMs": 720000,
-        "priority": "low",
-        "description": "Self-optimizing harness loop (opt-in RUFLO_HARNESS_LOOP, $0-default)",
-        "enabled": true
-      },
-      {
-        "type": "predict",
-        "intervalMs": 600000,
-        "offsetMs": 0,
-        "priority": "low",
-        "description": "Predictive preloading",
-        "enabled": false
-      },
-      {
-        "type": "document",
-        "intervalMs": 3600000,
-        "offsetMs": 0,
-        "priority": "low",
-        "description": "Auto-documentation",
-        "enabled": false
-      }
-    ]
-  },
-  "savedAt": "2026-07-09T14:15:20.256Z"
-}

package/plugins/ruflo-metaharness/.claude-flow/daemon.pid

@@ -1 +0,0 @@
-22169

package/plugins/ruflo-metaharness/.claude-flow/data/pending-insights.jsonl

@@ -1,5 +0,0 @@
-{"type":"edit","file":"/Users/cohen/Projects/ruflo/plugins/ruflo-metaharness/scripts/test-mcp-tools.mjs","timestamp":1781649922735}
-{"type":"edit","file":"/Users/cohen/Projects/ruflo/plugins/ruflo-metaharness/scripts/smoke.sh","timestamp":1782427183074}
-{"type":"edit","file":"/Users/cohen/Projects/ruflo/plugins/ruflo-metaharness/scripts/smoke.sh","timestamp":1782427195692}
-{"type":"edit","file":"/Users/cohen/Projects/ruflo/plugins/ruflo-metaharness/scripts/smoke.sh","timestamp":1782427207802}
-{"type":"edit","file":"/Users/cohen/Projects/ruflo/plugins/ruflo-metaharness/scripts/test-mcp-tools.mjs","timestamp":1782427272241}

package/plugins/ruflo-metaharness/.claude-flow/logs/daemon.log

@@ -1,43 +0,0 @@
-[2026-07-09T13:44:14.859Z] [INFO] Scheduled map (interval: 900s, first run in 0s)
-[2026-07-09T13:44:14.859Z] [INFO] Scheduled audit (interval: 600s, first run in 120s)
-[2026-07-09T13:44:14.859Z] [INFO] Scheduled optimize (interval: 900s, first run in 240s)
-[2026-07-09T13:44:14.859Z] [INFO] Scheduled consolidate (interval: 1800s, first run in 360s)
-[2026-07-09T13:44:14.859Z] [INFO] Scheduled testgaps (interval: 1200s, first run in 480s)
-[2026-07-09T13:44:14.859Z] [INFO] Scheduled backup (interval: 86400s, first run in 600s)
-[2026-07-09T13:44:14.859Z] [INFO] Scheduled harness (interval: 21600s, first run in 720s)
-[2026-07-09T13:44:14.859Z] [INFO] Lifecycle monitor active (ttl=43200s)
-[2026-07-09T13:44:14.860Z] [INFO] Daemon started (PID: 22169, CPUs: 12, workers: 7, maxCpuLoad: 9.600000000000001, minFreeMemoryPercent: 5%)
-[2026-07-09T13:44:14.860Z] [INFO] Claude Code headless mode available - AI workers enabled
-[2026-07-09T13:44:14.860Z] [INFO] Starting worker: map (1/2 concurrent)
-[2026-07-09T13:44:14.861Z] [INFO] Worker map completed in 1ms
-[2026-07-09T13:46:14.862Z] [INFO] Starting worker: audit (1/2 concurrent)
-[2026-07-09T13:46:14.863Z] [INFO] Running audit in headless mode (Claude Code AI)
-[2026-07-09T13:48:14.860Z] [INFO] Starting worker: optimize (2/2 concurrent)
-[2026-07-09T13:48:14.860Z] [INFO] Running optimize in headless mode (Claude Code AI)
-[2026-07-09T13:48:33.588Z] [INFO] Worker audit completed in 138728ms
-[2026-07-09T13:50:14.860Z] [INFO] Starting worker: consolidate (2/2 concurrent)
-[2026-07-09T13:50:14.860Z] [INFO] Consolidate worker: distillation skipped (no-db)
-[2026-07-09T13:50:14.860Z] [INFO] Worker consolidate completed in 0ms
-[2026-07-09T13:50:34.530Z] [INFO] Worker optimize completed in 139672ms
-[2026-07-09T13:52:14.860Z] [INFO] Starting worker: testgaps (1/2 concurrent)
-[2026-07-09T13:52:14.860Z] [INFO] Running testgaps in headless mode (Claude Code AI)
-[2026-07-09T13:54:14.858Z] [INFO] Starting worker: backup (2/2 concurrent)
-[2026-07-09T13:54:14.860Z] [INFO] Worker backup completed in 4ms
-[2026-07-09T13:55:16.744Z] [INFO] Worker testgaps completed in 181886ms
-[2026-07-09T13:56:14.857Z] [INFO] Starting worker: harness (1/2 concurrent)
-[2026-07-09T13:56:14.863Z] [INFO] Worker harness completed in 7ms
-[2026-07-09T13:58:33.587Z] [INFO] Starting worker: audit (1/2 concurrent)
-[2026-07-09T13:58:33.587Z] [INFO] Running audit in headless mode (Claude Code AI)
-[2026-07-09T13:59:14.859Z] [INFO] Starting worker: map (2/2 concurrent)
-[2026-07-09T13:59:14.859Z] [INFO] Worker map completed in 1ms
-[2026-07-09T14:02:48.864Z] [INFO] Worker audit completed in 255277ms
-[2026-07-09T14:05:34.531Z] [INFO] Starting worker: optimize (1/2 concurrent)
-[2026-07-09T14:05:34.531Z] [INFO] Running optimize in headless mode (Claude Code AI)
-[2026-07-09T14:11:21.737Z] [INFO] Worker optimize completed in 347209ms
-[2026-07-09T14:12:48.866Z] [INFO] Starting worker: audit (1/2 concurrent)
-[2026-07-09T14:12:48.867Z] [INFO] Running audit in headless mode (Claude Code AI)
-[2026-07-09T14:14:14.857Z] [INFO] Starting worker: map (2/2 concurrent)
-[2026-07-09T14:14:14.858Z] [INFO] Worker map completed in 4ms
-[2026-07-09T14:15:16.742Z] [INFO] Starting worker: testgaps (2/2 concurrent)
-[2026-07-09T14:15:16.743Z] [INFO] Running testgaps in headless mode (Claude Code AI)
-[2026-07-09T14:15:20.256Z] [INFO] Worker audit completed in 151392ms

package/plugins/ruflo-metaharness/.claude-flow/logs/headless/audit_1783604774864_ozbujc_prompt.log

@@ -1,19 +0,0 @@
-[2026-07-09T13:46:14.882Z] PROMPT
-============================================================
-Analyze this codebase for security vulnerabilities:
-- Check for hardcoded secrets (API keys, passwords)
-- Identify SQL injection risks
-- Find XSS vulnerabilities
-- Check for insecure dependencies
-- Identify authentication/authorization issues
-
-Provide a JSON report with:
-{
-  "vulnerabilities": [{ "severity": "high|medium|low", "file": "...", "line": N, "description": "..." }],
-  "riskScore": 0-100,
-  "recommendations": ["..."]
-}
-
-## Instructions
-
-Analyze the codebase and provide your response following the format specified in the task.

package/plugins/ruflo-metaharness/.claude-flow/logs/headless/audit_1783604774864_ozbujc_result.log

@@ -1,108 +0,0 @@
-[2026-07-09T13:48:33.587Z] RESULT
-============================================================
-{
-  "success": true,
-  "output": "## Security Audit Complete\n\nThe security auditor agent has completed a comprehensive scan. Combined with my manual analysis, here's the consolidated **Security Audit Report**:\n\n```json\n{\n  \"vulnerabilities\": [\n    {\n      \"severity\": \"high\",\n      \"file\": \"scripts/test-with-openrouter.mjs\",\n      \"line\": 64,\n      \"description\": \"Command injection vulnerability via execSync with template string interpolation. The secretName parameter is directly interpolated into a shell command without proper escaping. Although currently hardcoded as 'OPENROUTER_API_KEY', this is an unsafe code pattern that violates Node.js security best practices.\",\n      \"codeSnippet\": \"const out = execSync(\\n  `gcloud secrets versions access latest --secret=${secretName}`,\\n  { encoding: 'utf-8', stdio: ['ignore', 'pipe', 'pipe'], timeout: 15_000 },\\n);\",\n      \"recommendation\": \"Replace with spawnSync using array arguments: spawnSync('gcloud', ['secrets', 'versions', 'access', 'latest', '--secret', secretName], {...})\"\n    },\n    {\n      \"severity\": \"medium\",\n      \"file\": \"scripts/audit-trend.mjs, audit-list.mjs, similarity.mjs, oia-audit.mjs, drift-from-history.mjs\",\n      \"line\": \"22-24 (various)\",\n      \"description\": \"Uses @claude-flow/cli@latest which fetches the latest version on every invocation. This contradicts ADR-150's pinning requirement and creates supply chain risk if npm registry is compromised or package account hijacked.\",\n      \"codeSnippet\": \"const CLI_PKG = process.env.CLI_CORE === '1'\\n  ? '@claude-flow/cli-core@alpha'\\n  : '@claude-flow/cli@latest';\",\n      \"recommendation\": \"Pin to specific semver range: '@claude-flow/cli@~3.7.0' (aligns with ADR-150 architecture)\"\n    },\n    {\n      \"severity\": \"low\",\n      \"file\": \"scripts/test-with-openrouter.mjs\",\n      \"line\": 144,\n      \"description\": \"API key prefix exposure in logging. Logs first 7 characters of API key which could help attackers identify which key type and potentially which account it belongs to.\",\n      \"codeSnippet\": \"console.log(`  key length: ${apiKey.length}, prefix: ${apiKey.slice(0, 7)}…`);\",\n      \"recommendation\": \"Remove prefix logging. Use generic message: 'OPENROUTER_API_KEY loaded successfully'\"\n    },\n    {\n      \"severity\": \"low\",\n      \"file\": \"scripts/redblue.mjs\",\n      \"line\": 217,\n      \"description\": \"Path resolution doesn't canonicalize symlinks. User-provided paths are resolved but not checked for symlink attacks pointing outside intended directories.\",\n      \"codeSnippet\": \"const reportPath = resolve(ARGS.out);\\nif (existsSync(reportPath)) {\\n  try { payload = JSON.parse(readFileSync(reportPath, 'utf-8'));\",\n      \"recommendation\": \"Use fs.realpathSync() to canonicalize paths: const realPath = realpathSync(reportPath)\"\n    },\n    {\n      \"severity\": \"low\",\n      \"file\": \"scripts/router-parallel-analyze.mjs\",\n      \"line\": \"89-92\",\n      \"description\": \"JSONL parsing lacks error context. If JSON.parse fails on a line, no line number is reported, making debugging difficult.\",\n      \"codeSnippet\": \"rows = readFileSync(ARGS.input, 'utf-8')\\n  .split('\\\\n')\\n  .filter((l) => l.trim())\\n  .map((l) => JSON.parse(l));\",\n      \"recommendation\": \"Add try-catch with line number: .map((l, idx) => { try { return JSON.parse(l); } catch(e) { throw new Error(`Line ${idx+1}: ${e.message}`); } })\"\n    },\n    {\n      \"severity\": \"low\",\n      \"file\": \"scripts/test-with-openrouter.mjs\",\n      \"line\": 138,\n      \"description\": \"Weak API key validation. Checks length > 20, but modern API keys are typically 40+ characters. Weak validation could pass invalid or truncated keys.\",\n      \"codeSnippet\": \"assert(typeof apiKey === 'string' && apiKey.length > 20, 'OPENROUTER_API_KEY fetched (length OK)');\",\n      \"recommendation\": \"Use stricter validation: apiKey.length >= 40 && /^[a-zA-Z0-9_-]+$/.test(apiKey)\"\n    }\n  ],\n  \"riskScore\": 32,\n  \"summary\": \"The ruflo-metaharness plugin demonstrates strong overall security practices: all 30+ subprocess calls use shell:false with array arguments (preventing injection), no eval/Function() usage, no hardcoded secrets, and proper error handling. However, there is one high-severity command injection vulnerability (execSync with template strings) and medium-severity supply chain risks from using @latest instead of pinned versions. Four additional low-severity issues affect defense-in-depth. With these fixes, the plugin would achieve excellent security posture.\",\n  \"recommendations\": [\n    {\n      \"priority\": \"CRITICAL\",\n      \"action\": \"Fix command injection in test-with-openrouter.mjs line 64. Replace execSync with template strings with spawnSync array-based arguments.\"\n    },\n    {\n      \"priority\": \"HIGH\",\n      \"action\": \"Pin all @claude-flow/cli@latest references to specific versions (e.g., ~3.7.0) in: audit-trend.mjs, drift-from-history.mjs, similarity.mjs, oia-audit.mjs, audit-list.mjs\"\n    },\n    {\n      \"priority\": \"MEDIUM\",\n      \"action\": \"Remove API key prefix logging from console output (line 144 of test-with-openrouter.mjs)\"\n    },\n    {\n      \"priority\": \"MEDIUM\",\n      \"action\": \"Add fs.realpathSync() path canonicalization in redblue.mjs and other file operations\"\n    },\n    {\n      \"priority\": \"LOW\",\n      \"action\": \"Improve JSONL parsing error reporting with line numbers in router-parallel-analyze.mjs\"\n    },\n    {\n      \"priority\": \"LOW\",\n      \"action\": \"Strengthen API key validation to check for minimum 40-character length and valid character patterns\"\n    },\n    {\n      \"priority\": \"INFORMATIONAL\",\n      \"action\": \"Add security.md documentation with secure coding guidelines for this plugin\"\n    }\n  ],\n  \"positives\": [\n    \"✓ All subprocess calls use shell:false with array arguments (prevents shell injection)\",\n    \"✓ Zero instances of eval, Function(), or dynamic code execution\",\n    \"✓ No hardcoded secrets, API keys, or credentials anywhere in codebase\",\n    \"✓ Proper input validation with explicit type conversions\",\n    \"✓ Safe JSON parsing with try-catch error handling\",\n    \"✓ Graceful degradation for missing optional dependencies (ADR-150 compliant)\",\n    \"✓ Correct path handling with resolve() and existsSync() checks\",\n    \"✓ Proper error handling with explicit exit codes\",\n    \"✓ Environment variables used safely with explicit defaults\",\n    \"✓ No dangerous use of template literals in subprocess/file operations\"\n  ]\n}\n```\n\n### Summary\n\n**Risk Score: 32/100** (Low-Medium Risk)\n\n**Key Issues:**\n1. **1 Critical** - Command injection pattern (execSync + template strings)\n2. **1 Medium** - Supply chain risk (@latest npm packages)\n3. **4 Low** - Defense-in-depth improvements needed\n\n**Strengths:**\n- 30+ subprocess calls properly secured with shell:false\n- No code execution vulnerabilities\n- No credential leaks\n- Strong error handling throughout\n\n**Next Steps:**\n1. Address the critical execSync vulnerability immediately\n2. Pin npm package versions per ADR-150\n3. Apply defense-in-depth improvements for path handling and validation\n\nAll issues are straightforward to fix and align with the project's own architectural guidelines.\n",
-  "parsedOutput": {
-    "vulnerabilities": [
-      {
-        "severity": "high",
-        "file": "scripts/test-with-openrouter.mjs",
-        "line": 64,
-        "description": "Command injection vulnerability via execSync with template string interpolation. The secretName parameter is directly interpolated into a shell command without proper escaping. Although currently hardcoded as 'OPENROUTER_API_KEY', this is an unsafe code pattern that violates Node.js security best practices.",
-        "codeSnippet": "const out = execSync(\n  `gcloud secrets versions access latest --secret=${secretName}`,\n  { encoding: 'utf-8', stdio: ['ignore', 'pipe', 'pipe'], timeout: 15_000 },\n);",
-        "recommendation": "Replace with spawnSync using array arguments: spawnSync('gcloud', ['secrets', 'versions', 'access', 'latest', '--secret', secretName], {...})"
-      },
-      {
-        "severity": "medium",
-        "file": "scripts/audit-trend.mjs, audit-list.mjs, similarity.mjs, oia-audit.mjs, drift-from-history.mjs",
-        "line": "22-24 (various)",
-        "description": "Uses @claude-flow/cli@latest which fetches the latest version on every invocation. This contradicts ADR-150's pinning requirement and creates supply chain risk if npm registry is compromised or package account hijacked.",
-        "codeSnippet": "const CLI_PKG = process.env.CLI_CORE === '1'\n  ? '@claude-flow/cli-core@alpha'\n  : '@claude-flow/cli@latest';",
-        "recommendation": "Pin to specific semver range: '@claude-flow/cli@~3.7.0' (aligns with ADR-150 architecture)"
-      },
-      {
-        "severity": "low",
-        "file": "scripts/test-with-openrouter.mjs",
-        "line": 144,
-        "description": "API key prefix exposure in logging. Logs first 7 characters of API key which could help attackers identify which key type and potentially which account it belongs to.",
-        "codeSnippet": "console.log(`  key length: ${apiKey.length}, prefix: ${apiKey.slice(0, 7)}…`);",
-        "recommendation": "Remove prefix logging. Use generic message: 'OPENROUTER_API_KEY loaded successfully'"
-      },
-      {
-        "severity": "low",
-        "file": "scripts/redblue.mjs",
-        "line": 217,
-        "description": "Path resolution doesn't canonicalize symlinks. User-provided paths are resolved but not checked for symlink attacks pointing outside intended directories.",
-        "codeSnippet": "const reportPath = resolve(ARGS.out);\nif (existsSync(reportPath)) {\n  try { payload = JSON.parse(readFileSync(reportPath, 'utf-8'));",
-        "recommendation": "Use fs.realpathSync() to canonicalize paths: const realPath = realpathSync(reportPath)"
-      },
-      {
-        "severity": "low",
-        "file": "scripts/router-parallel-analyze.mjs",
-        "line": "89-92",
-        "description": "JSONL parsing lacks error context. If JSON.parse fails on a line, no line number is reported, making debugging difficult.",
-        "codeSnippet": "rows = readFileSync(ARGS.input, 'utf-8')\n  .split('\\n')\n  .filter((l) => l.trim())\n  .map((l) => JSON.parse(l));",
-        "recommendation": "Add try-catch with line number: .map((l, idx) => { try { return JSON.parse(l); } catch(e) { throw new Error(`Line ${idx+1}: ${e.message}`); } })"
-      },
-      {
-        "severity": "low",
-        "file": "scripts/test-with-openrouter.mjs",
-        "line": 138,
-        "description": "Weak API key validation. Checks length > 20, but modern API keys are typically 40+ characters. Weak validation could pass invalid or truncated keys.",
-        "codeSnippet": "assert(typeof apiKey === 'string' && apiKey.length > 20, 'OPENROUTER_API_KEY fetched (length OK)');",
-        "recommendation": "Use stricter validation: apiKey.length >= 40 && /^[a-zA-Z0-9_-]+$/.test(apiKey)"
-      }
-    ],
-    "riskScore": 32,
-    "summary": "The ruflo-metaharness plugin demonstrates strong overall security practices: all 30+ subprocess calls use shell:false with array arguments (preventing injection), no eval/Function() usage, no hardcoded secrets, and proper error handling. However, there is one high-severity command injection vulnerability (execSync with template strings) and medium-severity supply chain risks from using @latest instead of pinned versions. Four additional low-severity issues affect defense-in-depth. With these fixes, the plugin would achieve excellent security posture.",
-    "recommendations": [
-      {
-        "priority": "CRITICAL",
-        "action": "Fix command injection in test-with-openrouter.mjs line 64. Replace execSync with template strings with spawnSync array-based arguments."
-      },
-      {
-        "priority": "HIGH",
-        "action": "Pin all @claude-flow/cli@latest references to specific versions (e.g., ~3.7.0) in: audit-trend.mjs, drift-from-history.mjs, similarity.mjs, oia-audit.mjs, audit-list.mjs"
-      },
-      {
-        "priority": "MEDIUM",
-        "action": "Remove API key prefix logging from console output (line 144 of test-with-openrouter.mjs)"
-      },
-      {
-        "priority": "MEDIUM",
-        "action": "Add fs.realpathSync() path canonicalization in redblue.mjs and other file operations"
-      },
-      {
-        "priority": "LOW",
-        "action": "Improve JSONL parsing error reporting with line numbers in router-parallel-analyze.mjs"
-      },
-      {
-        "priority": "LOW",
-        "action": "Strengthen API key validation to check for minimum 40-character length and valid character patterns"
-      },
-      {
-        "priority": "INFORMATIONAL",
-        "action": "Add security.md documentation with secure coding guidelines for this plugin"
-      }
-    ],
-    "positives": [
-      "✓ All subprocess calls use shell:false with array arguments (prevents shell injection)",
-      "✓ Zero instances of eval, Function(), or dynamic code execution",
-      "✓ No hardcoded secrets, API keys, or credentials anywhere in codebase",
-      "✓ Proper input validation with explicit type conversions",
-      "✓ Safe JSON parsing with try-catch error handling",
-      "✓ Graceful degradation for missing optional dependencies (ADR-150 compliant)",
-      "✓ Correct path handling with resolve() and existsSync() checks",
-      "✓ Proper error handling with explicit exit codes",
-      "✓ Environment variables used safely with explicit defaults",
-      "✓ No dangerous use of template literals in subprocess/file operations"
-    ]
-  },
-  "durationMs": 138723,
-  "model": "haiku",
-  "sandboxMode": "strict",
-  "workerType": "audit",
-  "timestamp": "2026-07-09T13:48:33.587Z",
-  "executionId": "audit_1783604774864_ozbujc"
-}