@claude-flow/cli 3.32.1 → 3.32.3

package/dist/src/mcp-tools/http-fetch-tools.d.ts

@@ -1,55 +0,0 @@
-/**
- * http_fetch MCP tool — ADR-164 §5.1.8.
- *
- * The Operations business pod (templates/ops.json) references `http_fetch` as
- * an allowed MCP tool for the synthetic-endpoint availability bench (probe
- * 200/500 from a configured URL, escalate to #ops on 500-rate spikes).
- * Phase 3 left this as a TODO; Phase 4 ships the tool with secure-by-default
- * gating per the §5.1.8 contract: URL allowlist (no file://, ftp://, no
- * RFC-1918 / loopback unless explicitly enabled), header sanitization (no
- * auth pass-through unless explicitly enabled), hard timeout via
- * AbortController, response truncation, default User-Agent.
- *
- * Architectural constraints (load-bearing):
- *   - DEFAULT-REFUSES private addresses + loopback (CLAUDE_FLOW_HTTP_FETCH_ALLOW_PRIVATE=1 opt-in)
- *   - DEFAULT-REFUSES Authorization / Cookie / X-Auth-* (CLAUDE_FLOW_HTTP_FETCH_ALLOW_AUTH=1 opt-in)
- *   - hard timeout 30s default, 60s ceiling
- *   - response truncated to 256KB default, 1MB ceiling
- *   - no redirects auto-followed beyond fetch's default; status reported as-is
- *
- * @module @claude-flow/cli/mcp-tools/http-fetch
- */
-import type { MCPTool } from './types.js';
-export declare class HttpFetchValidationError extends Error {
-    readonly code: string;
-    constructor(message: string, code: string);
-}
-/**
- * Decide whether the URL is permitted under the default secure-by-default
- * allowlist. Block file://, ftp://, RFC-1918 private addresses, loopback,
- * link-local — unless CLAUDE_FLOW_HTTP_FETCH_ALLOW_PRIVATE=1 is set.
- */
-export declare function validateUrl(rawUrl: string): URL;
-export declare function validateHeaders(headers: Record<string, string>): Record<string, string>;
-export interface HttpFetchResult {
-    success: boolean;
-    status: number;
-    statusText: string;
-    headers: Record<string, string>;
-    body: string;
-    bodyTruncated: boolean;
-    bytesRead: number;
-    durationMs: number;
-    url: string;
-    method: string;
-    error?: string;
-    errorCode?: string;
-}
-/**
- * Pure execution path so tests can call it without going through the MCP
- * dispatcher. Returns a result object (does not throw on validation failure
- * — it returns success: false with an errorCode).
- */
-export declare function httpFetchExecute(input: Record<string, unknown>): Promise<HttpFetchResult>;
-export declare const httpFetchTools: MCPTool[];
-//# sourceMappingURL=http-fetch-tools.d.ts.map

package/dist/src/mcp-tools/http-fetch-tools.js

@@ -1,329 +0,0 @@
-/**
- * http_fetch MCP tool — ADR-164 §5.1.8.
- *
- * The Operations business pod (templates/ops.json) references `http_fetch` as
- * an allowed MCP tool for the synthetic-endpoint availability bench (probe
- * 200/500 from a configured URL, escalate to #ops on 500-rate spikes).
- * Phase 3 left this as a TODO; Phase 4 ships the tool with secure-by-default
- * gating per the §5.1.8 contract: URL allowlist (no file://, ftp://, no
- * RFC-1918 / loopback unless explicitly enabled), header sanitization (no
- * auth pass-through unless explicitly enabled), hard timeout via
- * AbortController, response truncation, default User-Agent.
- *
- * Architectural constraints (load-bearing):
- *   - DEFAULT-REFUSES private addresses + loopback (CLAUDE_FLOW_HTTP_FETCH_ALLOW_PRIVATE=1 opt-in)
- *   - DEFAULT-REFUSES Authorization / Cookie / X-Auth-* (CLAUDE_FLOW_HTTP_FETCH_ALLOW_AUTH=1 opt-in)
- *   - hard timeout 30s default, 60s ceiling
- *   - response truncated to 256KB default, 1MB ceiling
- *   - no redirects auto-followed beyond fetch's default; status reported as-is
- *
- * @module @claude-flow/cli/mcp-tools/http-fetch
- */
-const DEFAULT_TIMEOUT_MS = 30_000;
-const MAX_TIMEOUT_MS = 60_000;
-const DEFAULT_MAX_RESPONSE_BYTES = 256 * 1024; // 256 KB
-const MAX_RESPONSE_BYTES = 1024 * 1024; // 1 MB
-const DEFAULT_USER_AGENT = 'ruflo-http-fetch/1.0';
-const FORBIDDEN_HEADER_PREFIXES = ['x-auth-', 'x-api-key'];
-const FORBIDDEN_HEADERS_EXACT = ['authorization', 'cookie', 'set-cookie', 'proxy-authorization'];
-export class HttpFetchValidationError extends Error {
-    code;
-    constructor(message, code) {
-        super(message);
-        this.code = code;
-        this.name = 'HttpFetchValidationError';
-    }
-}
-/**
- * Decide whether the URL is permitted under the default secure-by-default
- * allowlist. Block file://, ftp://, RFC-1918 private addresses, loopback,
- * link-local — unless CLAUDE_FLOW_HTTP_FETCH_ALLOW_PRIVATE=1 is set.
- */
-export function validateUrl(rawUrl) {
-    let parsed;
-    try {
-        parsed = new URL(rawUrl);
-    }
-    catch {
-        throw new HttpFetchValidationError(`invalid URL: ${rawUrl}`, 'INVALID_URL');
-    }
-    const proto = parsed.protocol.toLowerCase();
-    if (proto !== 'http:' && proto !== 'https:') {
-        throw new HttpFetchValidationError(`protocol ${parsed.protocol} not allowed (only http: and https:)`, 'FORBIDDEN_PROTOCOL');
-    }
-    const host = parsed.hostname.toLowerCase();
-    const allowPrivate = process.env.CLAUDE_FLOW_HTTP_FETCH_ALLOW_PRIVATE === '1';
-    if (!allowPrivate && isPrivateOrLoopback(host)) {
-        throw new HttpFetchValidationError(`host ${host} is loopback/private/link-local; set CLAUDE_FLOW_HTTP_FETCH_ALLOW_PRIVATE=1 to override`, 'PRIVATE_ADDRESS');
-    }
-    return parsed;
-}
-function isPrivateOrLoopback(host) {
-    if (host === 'localhost' || host === 'localhost.localdomain')
-        return true;
-    // IPv6 loopback
-    if (host === '::1' || host === '[::1]')
-        return true;
-    // IPv4 numeric checks
-    const m = host.match(/^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})$/);
-    if (m) {
-        const a = Number(m[1]);
-        const b = Number(m[2]);
-        if (a === 0)
-            return true; // 0.0.0.0/8
-        if (a === 127)
-            return true; // loopback
-        if (a === 10)
-            return true; // RFC1918
-        if (a === 172 && b >= 16 && b <= 31)
-            return true; // RFC1918
-        if (a === 192 && b === 168)
-            return true; // RFC1918
-        if (a === 169 && b === 254)
-            return true; // link-local
-        if (a === 100 && b >= 64 && b <= 127)
-            return true; // CGNAT
-        return false;
-    }
-    // IPv6 bracketed addresses and other special forms — be conservative and
-    // accept only public-looking literals. Reject obvious private/local forms.
-    if (host.startsWith('fc') || host.startsWith('fd'))
-        return true; // fc00::/7 ULA
-    if (host.startsWith('fe80:'))
-        return true; // link-local
-    return false;
-}
-export function validateHeaders(headers) {
-    const allowAuth = process.env.CLAUDE_FLOW_HTTP_FETCH_ALLOW_AUTH === '1';
-    const out = {};
-    for (const [key, value] of Object.entries(headers)) {
-        const lower = key.toLowerCase();
-        if (!allowAuth) {
-            if (FORBIDDEN_HEADERS_EXACT.includes(lower)) {
-                throw new HttpFetchValidationError(`header "${key}" is not allowed without CLAUDE_FLOW_HTTP_FETCH_ALLOW_AUTH=1`, 'FORBIDDEN_HEADER');
-            }
-            if (FORBIDDEN_HEADER_PREFIXES.some((p) => lower.startsWith(p))) {
-                throw new HttpFetchValidationError(`header "${key}" is not allowed without CLAUDE_FLOW_HTTP_FETCH_ALLOW_AUTH=1`, 'FORBIDDEN_HEADER');
-            }
-        }
-        if (typeof value !== 'string') {
-            throw new HttpFetchValidationError(`header "${key}" must be a string`, 'INVALID_HEADER_VALUE');
-        }
-        out[key] = value;
-    }
-    return out;
-}
-function clampNumber(raw, defaultValue, max) {
-    if (raw === undefined || raw === null)
-        return defaultValue;
-    const n = Number(raw);
-    if (!Number.isFinite(n) || n <= 0)
-        return defaultValue;
-    return Math.min(Math.floor(n), max);
-}
-/**
- * Pure execution path so tests can call it without going through the MCP
- * dispatcher. Returns a result object (does not throw on validation failure
- * — it returns success: false with an errorCode).
- */
-export async function httpFetchExecute(input) {
-    const startedAt = Date.now();
-    const url = String(input.url ?? '');
-    const method = String(input.method ?? 'GET').toUpperCase();
-    if (!['GET', 'POST', 'HEAD'].includes(method)) {
-        return {
-            success: false,
-            status: 0,
-            statusText: '',
-            headers: {},
-            body: '',
-            bodyTruncated: false,
-            bytesRead: 0,
-            durationMs: Date.now() - startedAt,
-            url,
-            method,
-            error: `method ${method} not allowed (GET, POST, HEAD only)`,
-            errorCode: 'INVALID_METHOD',
-        };
-    }
-    let parsed;
-    try {
-        parsed = validateUrl(url);
-    }
-    catch (e) {
-        const err = e;
-        return {
-            success: false,
-            status: 0,
-            statusText: '',
-            headers: {},
-            body: '',
-            bodyTruncated: false,
-            bytesRead: 0,
-            durationMs: Date.now() - startedAt,
-            url,
-            method,
-            error: err.message,
-            errorCode: err.code ?? 'VALIDATION_ERROR',
-        };
-    }
-    let headers;
-    try {
-        const raw = (input.headers ?? {});
-        if (typeof raw !== 'object' || raw === null || Array.isArray(raw)) {
-            throw new HttpFetchValidationError('headers must be an object', 'INVALID_HEADERS');
-        }
-        headers = validateHeaders(raw);
-    }
-    catch (e) {
-        const err = e;
-        return {
-            success: false,
-            status: 0,
-            statusText: '',
-            headers: {},
-            body: '',
-            bodyTruncated: false,
-            bytesRead: 0,
-            durationMs: Date.now() - startedAt,
-            url,
-            method,
-            error: err.message,
-            errorCode: err.code ?? 'VALIDATION_ERROR',
-        };
-    }
-    // Default UA if not set
-    const hasUA = Object.keys(headers).some((k) => k.toLowerCase() === 'user-agent');
-    if (!hasUA)
-        headers['User-Agent'] = DEFAULT_USER_AGENT;
-    const timeoutMs = clampNumber(input.timeoutMs, DEFAULT_TIMEOUT_MS, MAX_TIMEOUT_MS);
-    const maxResponseBytes = clampNumber(input.maxResponseBytes, DEFAULT_MAX_RESPONSE_BYTES, MAX_RESPONSE_BYTES);
-    const body = input.body !== undefined ? String(input.body) : undefined;
-    const controller = new AbortController();
-    const timer = setTimeout(() => controller.abort(), timeoutMs);
-    try {
-        const response = await fetch(parsed.toString(), {
-            method,
-            headers,
-            body: method === 'GET' || method === 'HEAD' ? undefined : body,
-            signal: controller.signal,
-            // Keep redirect default ('follow') — caller sees final status/url.
-        });
-        // Drain the body with byte budget. Use array-buffer first to bound size
-        // deterministically before decoding to UTF-8.
-        const reader = response.body?.getReader();
-        let bytesRead = 0;
-        let bodyTruncated = false;
-        const chunks = [];
-        if (reader) {
-            // eslint-disable-next-line no-constant-condition
-            while (true) {
-                const { value, done } = await reader.read();
-                if (done)
-                    break;
-                if (value) {
-                    if (bytesRead + value.byteLength > maxResponseBytes) {
-                        const remaining = Math.max(0, maxResponseBytes - bytesRead);
-                        if (remaining > 0)
-                            chunks.push(value.slice(0, remaining));
-                        bytesRead += remaining;
-                        bodyTruncated = true;
-                        try {
-                            await reader.cancel('body-truncated');
-                        }
-                        catch { /* ignore */ }
-                        break;
-                    }
-                    chunks.push(value);
-                    bytesRead += value.byteLength;
-                }
-            }
-        }
-        const combined = new Uint8Array(bytesRead);
-        let offset = 0;
-        for (const c of chunks) {
-            combined.set(c, offset);
-            offset += c.byteLength;
-        }
-        const decoder = new TextDecoder('utf-8', { fatal: false });
-        const bodyText = decoder.decode(combined);
-        const outHeaders = {};
-        response.headers.forEach((v, k) => { outHeaders[k] = v; });
-        return {
-            success: true,
-            status: response.status,
-            statusText: response.statusText,
-            headers: outHeaders,
-            body: bodyText,
-            bodyTruncated,
-            bytesRead,
-            durationMs: Date.now() - startedAt,
-            url: parsed.toString(),
-            method,
-        };
-    }
-    catch (e) {
-        const msg = e instanceof Error ? e.message : String(e);
-        const aborted = msg.includes('aborted') || e?.name === 'AbortError';
-        return {
-            success: false,
-            status: 0,
-            statusText: '',
-            headers: {},
-            body: '',
-            bodyTruncated: false,
-            bytesRead: 0,
-            durationMs: Date.now() - startedAt,
-            url: parsed.toString(),
-            method,
-            error: aborted ? `request aborted after ${timeoutMs}ms timeout` : msg,
-            errorCode: aborted ? 'TIMEOUT' : 'FETCH_ERROR',
-        };
-    }
-    finally {
-        clearTimeout(timer);
-    }
-}
-export const httpFetchTools = [
-    {
-        name: 'http_fetch',
-        description: 'ADR-164 §5.1.8 — HTTP probe primitive for business-pod ops benches (synthetic 200/500 endpoint checks, third-party status pages). Default-secure: blocks file://, ftp://, RFC-1918 / loopback / link-local hosts unless CLAUDE_FLOW_HTTP_FETCH_ALLOW_PRIVATE=1, and rejects Authorization / Cookie / X-Auth-* headers unless CLAUDE_FLOW_HTTP_FETCH_ALLOW_AUTH=1. Hard 30s timeout (60s ceiling), response truncated to 256 KB (1 MB ceiling), default User-Agent ruflo-http-fetch/1.0. Use when a pod or smoke contract needs a guarded HTTP probe — calling Node fetch() directly is wrong because it skips the URL allowlist and header sanitization that ADR-164 mandates for autopilot mode. Pair with the ops-pod bench in plugins/ruflo-business-pods/templates/ops.json (the §4.4 synthetic-endpoint test).',
-        category: 'business-pods',
-        tags: ['business-pods', 'http', 'fetch', 'adr-164', 'security', 'ops-pod'],
-        inputSchema: {
-            type: 'object',
-            properties: {
-                url: {
-                    type: 'string',
-                    description: 'Absolute http:// or https:// URL. file://, ftp://, RFC-1918 / loopback / link-local blocked by default.',
-                },
-                method: {
-                    type: 'string',
-                    enum: ['GET', 'POST', 'HEAD'],
-                    description: 'HTTP method. Defaults to GET.',
-                },
-                timeoutMs: {
-                    type: 'number',
-                    description: 'Hard timeout in milliseconds. Default 30000, max 60000.',
-                },
-                maxResponseBytes: {
-                    type: 'number',
-                    description: 'Max body bytes to read before truncation. Default 262144 (256 KB), max 1048576 (1 MB).',
-                },
-                headers: {
-                    type: 'object',
-                    description: 'Extra request headers. Authorization / Cookie / X-Auth-* blocked unless CLAUDE_FLOW_HTTP_FETCH_ALLOW_AUTH=1.',
-                },
-                body: {
-                    type: 'string',
-                    description: 'Request body for POST. Ignored for GET / HEAD.',
-                },
-            },
-            required: ['url'],
-        },
-        handler: async (input) => {
-            return await httpFetchExecute(input);
-        },
-    },
-];
-//# sourceMappingURL=http-fetch-tools.js.map

package/dist/src/mcp-tools/index.d.ts

@@ -1,34 +0,0 @@
-/**
- * MCP Tools Index for CLI
- *
- * Re-exports all tool definitions for use within the CLI package.
- */
-export type { MCPTool, MCPToolInputSchema, MCPToolResult } from './types.js';
-export { agentTools } from './agent-tools.js';
-export { swarmTools } from './swarm-tools.js';
-export { memoryTools } from './memory-tools.js';
-export { configTools } from './config-tools.js';
-export { hooksTools } from './hooks-tools.js';
-export { taskTools } from './task-tools.js';
-export { sessionTools } from './session-tools.js';
-export { hiveMindTools } from './hive-mind-tools.js';
-export { workflowTools } from './workflow-tools.js';
-export { coverageRouterTools } from '../ruvector/coverage-tools.js';
-export { analyzeTools } from './analyze-tools.js';
-export { progressTools } from './progress-tools.js';
-export { transferTools } from './transfer-tools.js';
-export { securityTools } from './security-tools.js';
-export { embeddingsTools } from './embeddings-tools.js';
-export { claimsTools } from './claims-tools.js';
-export { wasmAgentTools } from './wasm-agent-tools.js';
-export { ruvllmWasmTools } from './ruvllm-tools.js';
-export { guidanceTools } from './guidance-tools.js';
-export { autopilotTools } from './autopilot-tools.js';
-export { metaharnessTools } from './metaharness-tools.js';
-export { testgenTools } from './testgen-tools.js';
-export { agenticowTools } from './agenticow-tools.js';
-export { agenticowSpeculateTools } from './agenticow-speculate-tools.js';
-export { agentbbsTools } from './agentbbs-tools.js';
-export { businessPodTools } from './business-pod-tools.js';
-export { httpFetchTools } from './http-fetch-tools.js';
-//# sourceMappingURL=index.d.ts.map

package/dist/src/mcp-tools/index.js

@@ -1,40 +0,0 @@
-/**
- * MCP Tools Index for CLI
- *
- * Re-exports all tool definitions for use within the CLI package.
- */
-export { agentTools } from './agent-tools.js';
-export { swarmTools } from './swarm-tools.js';
-export { memoryTools } from './memory-tools.js';
-export { configTools } from './config-tools.js';
-export { hooksTools } from './hooks-tools.js';
-export { taskTools } from './task-tools.js';
-export { sessionTools } from './session-tools.js';
-export { hiveMindTools } from './hive-mind-tools.js';
-export { workflowTools } from './workflow-tools.js';
-export { coverageRouterTools } from '../ruvector/coverage-tools.js';
-export { analyzeTools } from './analyze-tools.js';
-export { progressTools } from './progress-tools.js';
-export { transferTools } from './transfer-tools.js';
-export { securityTools } from './security-tools.js';
-export { embeddingsTools } from './embeddings-tools.js';
-export { claimsTools } from './claims-tools.js';
-export { wasmAgentTools } from './wasm-agent-tools.js';
-export { ruvllmWasmTools } from './ruvllm-tools.js';
-export { guidanceTools } from './guidance-tools.js';
-export { autopilotTools } from './autopilot-tools.js';
-// ADR-150 — MetaHarness MCP tools (score / genome / mcp-scan / threat-model / oia-audit)
-export { metaharnessTools } from './metaharness-tools.js';
-// ADR-175-inspired — Test-Driven Repair via headless `claude -p`
-export { testgenTools } from './testgen-tools.js';
-// agenticow@~0.2.3 — Copy-On-Write memory branching (162-byte branches)
-export { agenticowTools } from './agenticow-tools.js';
-// agenticow step 4 — speculative branch-and-promote (A/B memory exploration)
-export { agenticowSpeculateTools } from './agenticow-speculate-tools.js';
-// ADR-164 — AgentBBS federated business-domain BBS rooms (Phase 1)
-export { agentbbsTools } from './agentbbs-tools.js';
-// ADR-164 Phase 2 — Business-pod template validation
-export { businessPodTools } from './business-pod-tools.js';
-// ADR-164 Phase 4 §5.1.8 — http_fetch (secure-by-default HTTP probe)
-export { httpFetchTools } from './http-fetch-tools.js';
-//# sourceMappingURL=index.js.map

package/dist/src/mcp-tools/managed-agent-tools.d.ts

@@ -1,22 +0,0 @@
-/**
- * Managed Agent MCP tools — Anthropic Claude Managed Agents as a *cloud*
- * agent runtime alongside ruflo's local WASM-sandboxed agents (`rvagent` /
- * `wasm_agent_*`). See ADR-115.
- *
- * Wraps the Managed Agents REST API (beta, `anthropic-beta:
- * managed-agents-2026-04-01`) with plain `fetch` — no new SDK dependency.
- * Needs `ANTHROPIC_API_KEY` (or `CLAUDE_API_KEY`); every tool degrades
- * gracefully with a structured error when the key is absent so the CLI/MCP
- * server stays up.
- *
- * Lifecycle (mirrors `wasm_agent_*`):
- *   managed_agent_create   → agents.create + environments.create + sessions.create  ↔ wasm_agent_create
- *   managed_agent_prompt   → events.send(user.message) + poll events until idle      ↔ wasm_agent_prompt
- *   managed_agent_status   → GET /v1/sessions/{id}
- *   managed_agent_events   → GET /v1/sessions/{id}/events  (full transcript)          ↔ wasm_agent_files (artifacts/log)
- *   managed_agent_list     → GET /v1/sessions
- *   managed_agent_terminate→ DELETE /v1/sessions/{id} (+ optionally the env)          ↔ wasm_agent_terminate
- */
-import type { MCPTool } from './types.js';
-export declare const managedAgentTools: MCPTool[];
-//# sourceMappingURL=managed-agent-tools.d.ts.map