@claude-flow/cli 3.27.4 → 3.29.0

package/dist/src/services/workspace-lease.js

@@ -0,0 +1,191 @@
+/**
+ * #2661 root-fix — worktree leases.
+ *
+ * Registers which worktrees of a repository are currently "alive" (have a
+ * running daemon actively heartbeating), independent of whether that
+ * worktree's daemon is the elected repository supervisor (see
+ * repo-supervisor.ts). A lease expires after 15 minutes without a heartbeat
+ * — a removed worktree, or a daemon that crashed without a graceful
+ * shutdown, becomes ineligible within one expiry window instead of lingering
+ * forever in the registry.
+ *
+ * The registry lives under the user's home directory (not the workspace) so
+ * it is visible to every worktree's daemon, keyed by repositoryId:
+ *
+ *   ~/.claude-flow/leases/<repositoryId>.json
+ *
+ * This is deliberately a thin, single-purpose registry — repo-supervisor.ts
+ * is the piece that actually elects one process to own the recurring AI
+ * worker schedule; leases only answer "which worktrees are currently live"
+ * for status reporting and future supervisor-dispatched work.
+ */
+import * as fs from 'fs';
+import { join } from 'path';
+import { homedir } from 'os';
+import { createHash } from 'crypto';
+export const LEASE_TTL_MS = 15 * 60 * 1000; // 15 minutes — issue #2661 spec
+const LOCK_STALE_MS = 10_000;
+function delay(ms) {
+    return new Promise((r) => setTimeout(r, ms));
+}
+function isProcessAlive(pid) {
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/** Invariant 9 (#2661): registry files must never be symlinks. */
+function assertNotSymlink(path) {
+    try {
+        const st = fs.lstatSync(path);
+        if (st.isSymbolicLink()) {
+            throw new Error(`Workspace lease file is a symlink (refusing): ${path}`);
+        }
+    }
+    catch (e) {
+        if (e.code === 'ENOENT')
+            return;
+        throw e;
+    }
+}
+function leaseKey(worktreeRoot) {
+    return createHash('sha256').update(worktreeRoot).digest('hex').slice(0, 16);
+}
+export class WorkspaceLeaseRegistry {
+    dir;
+    constructor(options) {
+        this.dir = options?.baseDir
+            ?? process.env.RUFLO_AI_BUDGET_DIR // shares the same override as global-ai-budget for test isolation
+            ?? join(homedir(), '.claude-flow');
+    }
+    fileFor(repositoryId) {
+        return join(this.dir, 'leases', `${repositoryId}.json`);
+    }
+    ensureDir(repositoryId) {
+        const dir = join(this.dir, 'leases');
+        if (!fs.existsSync(dir))
+            fs.mkdirSync(dir, { recursive: true, mode: 0o700 });
+        void repositoryId;
+    }
+    async withLock(repositoryId, fn) {
+        this.ensureDir(repositoryId);
+        const lockFile = `${this.fileFor(repositoryId)}.lock`;
+        const deadline = Date.now() + 2000;
+        for (;;) {
+            try {
+                const fd = fs.openSync(lockFile, fs.constants.O_CREAT | fs.constants.O_EXCL | fs.constants.O_WRONLY, 0o600);
+                fs.writeSync(fd, String(process.pid));
+                fs.closeSync(fd);
+                try {
+                    return fn();
+                }
+                finally {
+                    try {
+                        fs.unlinkSync(lockFile);
+                    }
+                    catch { /* already gone */ }
+                }
+            }
+            catch (e) {
+                if (e.code !== 'EEXIST')
+                    throw e;
+                try {
+                    const st = fs.lstatSync(lockFile);
+                    if (Date.now() - st.mtimeMs > LOCK_STALE_MS) {
+                        fs.unlinkSync(lockFile);
+                        continue;
+                    }
+                }
+                catch { /* raced — retry */ }
+                if (Date.now() > deadline)
+                    throw new Error('timed out acquiring workspace-lease lock');
+                await delay(25);
+            }
+        }
+    }
+    readFile(repositoryId) {
+        const file = this.fileFor(repositoryId);
+        assertNotSymlink(file);
+        let parsed = { version: 1, leases: {} };
+        if (fs.existsSync(file)) {
+            try {
+                const raw = JSON.parse(fs.readFileSync(file, 'utf-8'));
+                if (raw && typeof raw === 'object' && raw.leases && typeof raw.leases === 'object') {
+                    parsed = { version: 1, leases: raw.leases };
+                }
+            }
+            catch { /* corrupt — start fresh */ }
+        }
+        return parsed;
+    }
+    writeFile(repositoryId, data) {
+        const file = this.fileFor(repositoryId);
+        assertNotSymlink(file);
+        const tmp = `${file}.tmp.${process.pid}`;
+        fs.writeFileSync(tmp, JSON.stringify(data), { mode: 0o600 });
+        fs.renameSync(tmp, file);
+    }
+    /** Register or renew this process's lease on a worktree. Best-effort. */
+    async heartbeat(repositoryId, worktreeRoot) {
+        try {
+            await this.withLock(repositoryId, () => {
+                const data = this.readFile(repositoryId);
+                const now = Date.now();
+                const key = leaseKey(worktreeRoot);
+                const existing = data.leases[key];
+                data.leases[key] = {
+                    worktreeRoot,
+                    pid: process.pid,
+                    registeredAt: existing?.registeredAt ?? now,
+                    lastHeartbeat: now,
+                };
+                this.writeFile(repositoryId, data);
+            });
+        }
+        catch { /* best-effort — a missed heartbeat just expires the lease early */ }
+    }
+    /** Release this worktree's lease on graceful shutdown. Best-effort. */
+    async release(repositoryId, worktreeRoot) {
+        try {
+            await this.withLock(repositoryId, () => {
+                const data = this.readFile(repositoryId);
+                delete data.leases[leaseKey(worktreeRoot)];
+                this.writeFile(repositoryId, data);
+            });
+        }
+        catch { /* best-effort */ }
+    }
+    /**
+     * Active leases for a repository — expired (>15 min stale) or dead-PID
+     * entries are excluded, not just filtered at read time, so callers never
+     * see a worktree that's actually gone.
+     */
+    listActive(repositoryId) {
+        try {
+            const data = this.readFile(repositoryId);
+            const now = Date.now();
+            return Object.values(data.leases).filter((l) => now - l.lastHeartbeat < LEASE_TTL_MS && isProcessAlive(l.pid));
+        }
+        catch {
+            return [];
+        }
+    }
+    /** True when the given worktree currently holds a live (non-expired) lease. */
+    isLeaseActive(repositoryId, worktreeRoot) {
+        return this.listActive(repositoryId).some((l) => l.worktreeRoot === worktreeRoot);
+    }
+}
+let registryInstance = null;
+export function getWorkspaceLeaseRegistry() {
+    if (!registryInstance)
+        registryInstance = new WorkspaceLeaseRegistry();
+    return registryInstance;
+}
+/** Test hook: reset the singleton (e.g. after changing RUFLO_AI_BUDGET_DIR). */
+export function resetWorkspaceLeaseRegistryForTests() {
+    registryInstance = null;
+}
+//# sourceMappingURL=workspace-lease.js.map

package/dist/src/transfer/deploy-seraphine.js

@@ -71,29 +71,29 @@ function parseArgs() {
  * Print help message
  */
 function printHelp() {
-    console.log(`
-Seraphine Genesis Deployer
-==========================
-
-Deploy the foundational Claude Flow pattern model.
-
-Usage:
-  npx ts-node deploy-seraphine.ts [options]
-
-Options:
-  --output, -o <path>     Output file path
-  --to-ipfs, --ipfs       Upload to IPFS
-  --anonymize, -a <level> Anonymization level (minimal|standard|strict|paranoid)
-  --gateway, -g <url>     IPFS gateway URL
-  --no-pin                Don't pin to pinning service
-  --no-validate           Skip validation
-  --verbose, -v           Verbose output
-  --help, -h              Show this help
-
-Examples:
-  npx ts-node deploy-seraphine.ts --output ./seraphine-genesis.cfp.json
-  npx ts-node deploy-seraphine.ts --to-ipfs --anonymize strict
-  npx ts-node deploy-seraphine.ts --to-ipfs --gateway https://dweb.link
+    console.log(`
+Seraphine Genesis Deployer
+==========================
+
+Deploy the foundational Claude Flow pattern model.
+
+Usage:
+  npx ts-node deploy-seraphine.ts [options]
+
+Options:
+  --output, -o <path>     Output file path
+  --to-ipfs, --ipfs       Upload to IPFS
+  --anonymize, -a <level> Anonymization level (minimal|standard|strict|paranoid)
+  --gateway, -g <url>     IPFS gateway URL
+  --no-pin                Don't pin to pinning service
+  --no-validate           Skip validation
+  --verbose, -v           Verbose output
+  --help, -h              Show this help
+
+Examples:
+  npx ts-node deploy-seraphine.ts --output ./seraphine-genesis.cfp.json
+  npx ts-node deploy-seraphine.ts --to-ipfs --anonymize strict
+  npx ts-node deploy-seraphine.ts --to-ipfs --gateway https://dweb.link
 `);
 }
 /**

package/package.json

@@ -1,133 +1,134 @@
-{
-  "name": "@claude-flow/cli",
-  "version": "3.27.4",
-  "type": "module",
-  "description": "Ruflo CLI - Enterprise AI agent orchestration with 60+ specialized agents, swarm coordination, MCP server, self-learning hooks, and vector memory for Claude Code",
-  "main": "dist/src/index.js",
-  "types": "dist/src/index.d.ts",
-  "sideEffects": false,
-  "bin": {
-    "cli": "./bin/cli.js",
-    "claude-flow": "./bin/cli.js",
-    "claude-flow-mcp": "./bin/mcp-server.js"
-  },
-  "homepage": "https://github.com/ruvnet/claude-flow#readme",
-  "bugs": {
-    "url": "https://github.com/ruvnet/claude-flow/issues"
-  },
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/ruvnet/claude-flow.git",
-    "directory": "v3/@claude-flow/cli"
-  },
-  "keywords": [
-    "claude",
-    "claude-code",
-    "anthropic",
-    "ai-agents",
-    "multi-agent",
-    "swarm",
-    "mcp",
-    "model-context-protocol",
-    "llm",
-    "cli",
-    "orchestration",
-    "automation",
-    "developer-tools",
-    "coding-assistant",
-    "vector-database",
-    "embeddings",
-    "self-learning",
-    "enterprise"
-  ],
-  "author": {
-    "name": "RuvNet",
-    "email": "ruv@ruv.io",
-    "url": "https://ruv.io"
-  },
-  "license": "MIT",
-  "exports": {
-    ".": {
-      "types": "./dist/src/index.d.ts",
-      "import": "./dist/src/index.js"
-    },
-    "./dist/*": "./dist/*",
-    "./ruvector": {
-      "types": "./dist/src/ruvector/index.d.ts",
-      "import": "./dist/src/ruvector/index.js"
-    },
-    "./ruvector/*": {
-      "types": "./dist/src/ruvector/*.d.ts",
-      "import": "./dist/src/ruvector/*.js"
-    },
-    "./mcp-tools": {
-      "types": "./dist/src/mcp-tools/index.d.ts",
-      "import": "./dist/src/mcp-tools/index.js"
-    },
-    "./memory": {
-      "types": "./dist/src/memory/memory-initializer.d.ts",
-      "import": "./dist/src/memory/memory-initializer.js"
-    },
-    "./intelligence": {
-      "types": "./dist/src/memory/intelligence.d.ts",
-      "import": "./dist/src/memory/intelligence.js"
-    }
-  },
-  "files": [
-    "dist",
-    "!dist/**/*.map",
-    "!dist/**/*.tsbuildinfo",
-    "bin",
-    "scripts/postinstall.cjs",
-    ".claude",
-    "plugins",
-    "README.md",
-    "catalog-manifest.json"
-  ],
-  "scripts": {
-    "build": "tsc",
-    "test": "vitest run",
-    "test:plugin-store": "npx tsx src/plugins/tests/standalone-test.ts",
-    "test:pattern-store": "npx tsx src/transfer/store/tests/standalone-test.ts",
-    "postinstall": "node ./scripts/postinstall.cjs",
-    "prepublishOnly": "cp ../../../README.md ./README.md && rm -rf plugins && mkdir -p plugins && cp -r ../../../plugins/ruflo-metaharness plugins/ && node scripts/generate-catalog-manifest.mjs && node scripts/sign-helpers.mjs && node scripts/verify-helpers.mjs",
-    "release": "npm version prerelease --preid=alpha && npm run publish:all",
-    "publish:all": "./scripts/publish.sh"
-  },
-  "devDependencies": {
-    "typescript": "^5.3.0",
-    "vitest": "^4.1.0"
-  },
-  "dependencies": {
-    "@claude-flow/cli-core": "3.7.0-alpha.5",
-    "@claude-flow/mcp": "3.0.0-alpha.8",
-    "@claude-flow/neural": "3.0.0-alpha.9",
-    "@claude-flow/shared": "3.0.0-alpha.7",
-    "@noble/ed25519": "2.3.0",
-    "@ruvector/rabitq-wasm": "0.1.0",
-    "semver": "7.7.3",
-    "yaml": "^2.8.0"
-  },
-  "optionalDependencies": {
-    "@claude-flow/memory": "^3.0.0-alpha.21",
-    "@claude-flow/security": "^3.0.0-alpha.10",
-    "agentdb": "^3.0.0-alpha.17",
-    "agentic-flow": "^3.0.0-alpha.1",
-    "ruvector": "^0.2.27"
-  },
-  "publishConfig": {
-    "access": "public",
-    "tag": "latest"
-  },
-  "overrides": {
-    "protobufjs": ">=7.5.6",
-    "js-yaml": ">=4.3.0",
-    "express": ">=4.22.2",
-    "qs": ">=6.15.2",
-    "@opentelemetry/core": ">=2.8.0",
-    "@opentelemetry/resources": ">=2.8.0",
-    "@opentelemetry/sdk-trace-base": ">=2.8.0",
-    "@opentelemetry/sdk-node": ">=0.220.0",
-    "agentdb": "$agentdb"
-  }
-}
+{
+  "name": "@claude-flow/cli",
+  "version": "3.29.0",
+  "type": "module",
+  "description": "Ruflo CLI - Enterprise AI agent orchestration with 60+ specialized agents, swarm coordination, MCP server, self-learning hooks, and vector memory for Claude Code",
+  "main": "dist/src/index.js",
+  "types": "dist/src/index.d.ts",
+  "sideEffects": false,
+  "bin": {
+    "cli": "./bin/cli.js",
+    "claude-flow": "./bin/cli.js",
+    "claude-flow-mcp": "./bin/mcp-server.js"
+  },
+  "homepage": "https://github.com/ruvnet/claude-flow#readme",
+  "bugs": {
+    "url": "https://github.com/ruvnet/claude-flow/issues"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/ruvnet/claude-flow.git",
+    "directory": "v3/@claude-flow/cli"
+  },
+  "keywords": [
+    "claude",
+    "claude-code",
+    "anthropic",
+    "ai-agents",
+    "multi-agent",
+    "swarm",
+    "mcp",
+    "model-context-protocol",
+    "llm",
+    "cli",
+    "orchestration",
+    "automation",
+    "developer-tools",
+    "coding-assistant",
+    "vector-database",
+    "embeddings",
+    "self-learning",
+    "enterprise"
+  ],
+  "author": {
+    "name": "RuvNet",
+    "email": "ruv@ruv.io",
+    "url": "https://ruv.io"
+  },
+  "license": "MIT",
+  "exports": {
+    ".": {
+      "types": "./dist/src/index.d.ts",
+      "import": "./dist/src/index.js"
+    },
+    "./dist/*": "./dist/*",
+    "./ruvector": {
+      "types": "./dist/src/ruvector/index.d.ts",
+      "import": "./dist/src/ruvector/index.js"
+    },
+    "./ruvector/*": {
+      "types": "./dist/src/ruvector/*.d.ts",
+      "import": "./dist/src/ruvector/*.js"
+    },
+    "./mcp-tools": {
+      "types": "./dist/src/mcp-tools/index.d.ts",
+      "import": "./dist/src/mcp-tools/index.js"
+    },
+    "./memory": {
+      "types": "./dist/src/memory/memory-initializer.d.ts",
+      "import": "./dist/src/memory/memory-initializer.js"
+    },
+    "./intelligence": {
+      "types": "./dist/src/memory/intelligence.d.ts",
+      "import": "./dist/src/memory/intelligence.js"
+    }
+  },
+  "files": [
+    "dist",
+    "!dist/**/*.map",
+    "!dist/**/*.tsbuildinfo",
+    "bin",
+    "scripts/postinstall.cjs",
+    ".claude",
+    "plugins",
+    "README.md",
+    "catalog-manifest.json"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "test": "vitest run",
+    "test:plugin-store": "npx tsx src/plugins/tests/standalone-test.ts",
+    "test:pattern-store": "npx tsx src/transfer/store/tests/standalone-test.ts",
+    "postinstall": "node ./scripts/postinstall.cjs",
+    "prepublishOnly": "cp ../../../README.md ./README.md && rm -rf plugins && mkdir -p plugins && cp -r ../../../plugins/ruflo-metaharness plugins/ && node scripts/generate-catalog-manifest.mjs && node scripts/sign-helpers.mjs && node scripts/verify-helpers.mjs",
+    "release": "npm version prerelease --preid=alpha && npm run publish:all",
+    "publish:all": "./scripts/publish.sh"
+  },
+  "devDependencies": {
+    "typescript": "^5.3.0",
+    "vitest": "^4.1.0"
+  },
+  "dependencies": {
+    "@claude-flow/cli-core": "3.7.0-alpha.5",
+    "@claude-flow/mcp": "3.0.0-alpha.8",
+    "@claude-flow/neural": "3.0.0-alpha.9",
+    "@claude-flow/shared": "3.0.0-alpha.7",
+    "@noble/ed25519": "2.3.0",
+    "@ruvector/rabitq-wasm": "0.1.0",
+    "semver": "7.7.3",
+    "sql.js": "^1.13.0",
+    "yaml": "^2.8.0"
+  },
+  "optionalDependencies": {
+    "@claude-flow/memory": "^3.0.0-alpha.21",
+    "@claude-flow/security": "^3.0.0-alpha.10",
+    "agentdb": "^3.0.0-alpha.17",
+    "agentic-flow": "^3.0.0-alpha.1",
+    "ruvector": "^0.2.27"
+  },
+  "publishConfig": {
+    "access": "public",
+    "tag": "latest"
+  },
+  "overrides": {
+    "protobufjs": ">=7.5.6",
+    "js-yaml": ">=4.3.0",
+    "express": ">=4.22.2",
+    "qs": ">=6.15.2",
+    "@opentelemetry/core": ">=2.8.0",
+    "@opentelemetry/resources": ">=2.8.0",
+    "@opentelemetry/sdk-trace-base": ">=2.8.0",
+    "@opentelemetry/sdk-node": ">=0.220.0",
+    "agentdb": "$agentdb"
+  }
+}

package/plugins/ruflo-metaharness/.claude-plugin/plugin.json

@@ -1,32 +1,32 @@
-{
-  "name": "ruflo-metaharness",
-  "description": "MetaHarness integration for ruflo — surfaces score/genome/mint/mcp-scan/threat-model via skills; pairs with @metaharness/router (ADR-148/149) for cost-optimal model routing; honors ADR-150's architectural constraint that MetaHarness remains an optional augmentation, never a required runtime dependency",
-  "version": "0.1.0",
-  "author": {
-    "name": "ruvnet",
-    "url": "https://github.com/ruvnet"
-  },
-  "homepage": "https://github.com/ruvnet/ruflo",
-  "license": "MIT",
-  "keywords": [
-    "ruflo",
-    "metaharness",
-    "harness",
-    "scaffolding",
-    "scorecard",
-    "genome",
-    "mcp-scan",
-    "threat-model",
-    "router",
-    "adr-150",
-    "adr-148",
-    "adr-149",
-    "optional-dependency",
-    "graceful-degradation",
-    "subprocess",
-    "namespace-routing",
-    "verified",
-    "ci",
-    "phase-1-mvp"
-  ]
-}
+{
+  "name": "ruflo-metaharness",
+  "description": "MetaHarness integration for ruflo — surfaces score/genome/mint/mcp-scan/threat-model via skills; pairs with @metaharness/router (ADR-148/149) for cost-optimal model routing; honors ADR-150's architectural constraint that MetaHarness remains an optional augmentation, never a required runtime dependency",
+  "version": "0.1.0",
+  "author": {
+    "name": "ruvnet",
+    "url": "https://github.com/ruvnet"
+  },
+  "homepage": "https://github.com/ruvnet/ruflo",
+  "license": "MIT",
+  "keywords": [
+    "ruflo",
+    "metaharness",
+    "harness",
+    "scaffolding",
+    "scorecard",
+    "genome",
+    "mcp-scan",
+    "threat-model",
+    "router",
+    "adr-150",
+    "adr-148",
+    "adr-149",
+    "optional-dependency",
+    "graceful-degradation",
+    "subprocess",
+    "namespace-routing",
+    "verified",
+    "ci",
+    "phase-1-mvp"
+  ]
+}