@claude-flow/cli 3.32.2 → 3.32.4

package/dist/src/proxy/verify.js

@@ -0,0 +1,68 @@
+/**
+ * meta-proxy release verification (ADR-307) — mirrors src/init/helper-signing.ts's
+ * raw-EdDSA `crypto.verify(null, ...)` pattern almost exactly, and matches the
+ * exact scheme confirmed live 2026-07-16 against a real v0.1.0 release: ONE
+ * combined `SHA256SUMS.sig` (raw Ed25519 over the `SHA256SUMS` file's bytes,
+ * base64-encoded — not a per-binary signature), then a per-asset SHA-256
+ * check against the matching `SHA256SUMS` line. Refuse-all-or-nothing on any
+ * mismatch, same discipline as `writeCriticalHelpers()`.
+ *
+ * @module proxy/verify
+ */
+import { createHash, createPublicKey, verify as cryptoVerify } from 'node:crypto';
+/**
+ * meta-proxy's committed release-signing public key (SPKI PEM), confirmed
+ * live 2026-07-16 by verifying a real `SHA256SUMS.sig` from the v0.1.0
+ * release against it (crypto.verify -> true).
+ */
+export const PROXY_RELEASE_PUBKEY_PEM = `-----BEGIN PUBLIC KEY-----
+MCowBQYDK2VwAyEAjhLDomjIGdcltYC7j+aiESQFD4LWoHaULietG1PuDjw=
+-----END PUBLIC KEY-----`;
+export class ReleaseVerificationError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'ReleaseVerificationError';
+    }
+}
+/** Raw EdDSA verify of `SHA256SUMS.sig` (base64) over `SHA256SUMS`'s exact bytes. */
+export function verifySha256SumsSignature(sumsBytes, sigBase64, pubkeyPem = PROXY_RELEASE_PUBKEY_PEM) {
+    const pubkey = createPublicKey(pubkeyPem);
+    const sig = Buffer.from(sigBase64.trim(), 'base64');
+    return cryptoVerify(null, sumsBytes, pubkey, sig);
+}
+/** Parses `<sha256>  <filename>` lines (sha256sum's own output format). */
+export function parseSha256Sums(sumsText) {
+    const result = {};
+    for (const line of sumsText.split(/\r?\n/)) {
+        const match = line.match(/^([0-9a-f]{64})\s+(.+)$/i);
+        if (!match)
+            continue;
+        result[match[2]] = match[1].toLowerCase();
+    }
+    return result;
+}
+export function sha256Hex(bytes) {
+    return createHash('sha256').update(bytes).digest('hex');
+}
+/**
+ * Full verification: signature over SHA256SUMS, then the asset's own hash
+ * against the matching line. Throws `ReleaseVerificationError` on ANY
+ * failure — there is no partial-trust outcome, matching ADR-307's "refuses
+ * on any mismatch" requirement.
+ */
+export function verifyRelease(input) {
+    if (!verifySha256SumsSignature(input.sumsBytes, input.sigBase64, input.pubkeyPem)) {
+        throw new ReleaseVerificationError('SHA256SUMS.sig failed Ed25519 verification — refusing to install');
+    }
+    const sums = parseSha256Sums(input.sumsBytes.toString('utf-8'));
+    const expected = sums[input.assetFilename];
+    if (!expected) {
+        throw new ReleaseVerificationError(`SHA256SUMS has no entry for ${input.assetFilename}`);
+    }
+    const actual = sha256Hex(input.assetBytes);
+    if (actual !== expected) {
+        throw new ReleaseVerificationError(`sha256 mismatch for ${input.assetFilename}: expected ${expected.slice(0, 12)}…, got ${actual.slice(0, 12)}…`);
+    }
+    return { sha256: actual };
+}
+//# sourceMappingURL=verify.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@claude-flow/cli",
-  "version": "3.32.2",
+  "version": "3.32.4",
   "type": "module",
   "description": "Ruflo CLI - Enterprise AI agent orchestration with 60+ specialized agents, swarm coordination, MCP server, self-learning hooks, and vector memory for Claude Code",
   "main": "dist/src/index.js",
@@ -111,7 +111,7 @@
     "yaml": "^2.8.0"
   },
   "optionalDependencies": {
-    "@claude-flow/memory": "^3.0.0-alpha.21",
+    "@claude-flow/memory": "^3.0.0-alpha.21",
     "@claude-flow/security": "^3.0.0-alpha.10",
     "agentdb": "^3.0.0-alpha.17",
     "agentic-flow": "^3.0.0-alpha.1",

package/plugins/ruflo-metaharness/scripts/smoke.sh

@@ -799,8 +799,8 @@ TOOLS=$(grep -oE "name: 'metaharness_[a-z_]+'" "$WRAPPER" 2>/dev/null \
 COUNT=0
 for t in $TOOLS; do
   COUNT=$((COUNT + 1))
-  # audit-allow: standalone-mcp-prefix — this checks the repository CLAUDE.md, not a plugin skill.
-  grep -q "mcp__claude-flow__${t}" "$CMD" 2>/dev/null \
+  # audit-allow: standalone-mcp-prefix — this checks the repository CLAUDE.md, not a plugin skill.
+  grep -q "mcp__claude-flow__${t}" "$CMD" 2>/dev/null \
     || miss="$miss ${t}-not-in-claude-md"
 done
 # Count derived from the wrapper source (mint deliberately excluded — see
@@ -1520,9 +1520,9 @@ grep -q "name: 'metaharness_drift_from_history'" "$WRAPPER" 2>/dev/null || miss=
 grep -q "drift-from-history.mjs" "$WRAPPER" 2>/dev/null || miss="$miss no-script-dispatch"
 grep -q "baselineSince" "$WRAPPER" 2>/dev/null || miss="$miss no-baseline-since-input"
 # CLAUDE.md mentions both surfaces
-CMD="$ROOT/../../CLAUDE.md"
-# audit-allow: standalone-mcp-prefix — this checks the repository CLAUDE.md, not a plugin skill.
-grep -q "mcp__claude-flow__metaharness_drift_from_history" "$CMD" 2>/dev/null || miss="$miss claude-md-no-mcp"
+CMD="$ROOT/../../CLAUDE.md"
+# audit-allow: standalone-mcp-prefix — this checks the repository CLAUDE.md, not a plugin skill.
+grep -q "mcp__claude-flow__metaharness_drift_from_history" "$CMD" 2>/dev/null || miss="$miss claude-md-no-mcp"
 grep -q "ruflo metaharness drift-from-history" "$CMD" 2>/dev/null || miss="$miss claude-md-no-subcommand"
 # Phase 4 includes the new positive-case assertions
 T="$ROOT/scripts/test-mcp-tools.mjs"
@@ -1806,9 +1806,9 @@ grep -q "audit-trend structural-distance integration" "$F" 2>/dev/null || miss="
 grep -q "Graceful fallback when fingerprint missing" "$F" 2>/dev/null || miss="$miss no-fallback-step"
 grep -q "Distance alert gate exits 1" "$F" 2>/dev/null || miss="$miss no-alert-step"
 # CLAUDE.md documents the new MCP tool + subcommand
-CMD="$ROOT/../../CLAUDE.md"
-# audit-allow: standalone-mcp-prefix — this checks the repository CLAUDE.md, not a plugin skill.
-grep -q "mcp__claude-flow__metaharness_similarity" "$CMD" 2>/dev/null || miss="$miss claude-md-no-mcp-tool"
+CMD="$ROOT/../../CLAUDE.md"
+# audit-allow: standalone-mcp-prefix — this checks the repository CLAUDE.md, not a plugin skill.
+grep -q "mcp__claude-flow__metaharness_similarity" "$CMD" 2>/dev/null || miss="$miss claude-md-no-mcp-tool"
 grep -q "ruflo metaharness similarity" "$CMD" 2>/dev/null || miss="$miss claude-md-no-subcommand"
 grep -q -- "--alert-on-distance-below" "$CMD" 2>/dev/null || miss="$miss claude-md-no-distance-flag"
 [[ -z "$miss" ]] && ok || bad "$miss"
@@ -2124,9 +2124,9 @@ grep -q "Ruflo remains operational if every MetaHarness package is removed" "$F"
 # All 4 rules documented
 grep -q "no-metaharness-smoke.yml" "$F" || miss="$miss no-ci-gate-ref"
 # Command surface + tool surface enumerated
-grep -q "npx ruflo metaharness score" "$F" || miss="$miss no-cli-example"
-# audit-allow: standalone-mcp-prefix — this checks the repository CLAUDE.md, not a plugin skill.
-grep -q "mcp__claude-flow__metaharness_" "$F" || miss="$miss no-mcp-tool-list"
+grep -q "npx ruflo metaharness score" "$F" || miss="$miss no-cli-example"
+# audit-allow: standalone-mcp-prefix — this checks the repository CLAUDE.md, not a plugin skill.
+grep -q "mcp__claude-flow__metaharness_" "$F" || miss="$miss no-mcp-tool-list"
 # Routing + parallel-log integration both mentioned
 grep -q "CLAUDE_FLOW_ROUTER_NEURAL\|CLAUDE_FLOW_ROUTER_PARALLEL_LOG" "$F" || miss="$miss no-routing-flags"
 # 3-criteria gate