@claude-flow/cli 3.32.26 → 3.32.30

package/node_modules/@claude-flow/security/dist/input-validator.js

@@ -0,0 +1,393 @@
+/**
+ * Input Validator - Comprehensive Input Validation
+ *
+ * Provides Zod-based validation schemas for all security-critical inputs.
+ *
+ * Security Properties:
+ * - Type-safe validation
+ * - Custom error messages
+ * - Sanitization transforms
+ * - Reusable schemas
+ *
+ * @module v3/security/input-validator
+ */
+import { z } from 'zod';
+/**
+ * Custom error map for security-focused messages
+ */
+const securityErrorMap = (issue, ctx) => {
+    switch (issue.code) {
+        case z.ZodIssueCode.too_big:
+            return { message: `Input exceeds maximum allowed size` };
+        case z.ZodIssueCode.too_small:
+            return { message: `Input below minimum required size` };
+        case z.ZodIssueCode.invalid_string:
+            if (issue.validation === 'email') {
+                return { message: 'Invalid email format' };
+            }
+            if (issue.validation === 'url') {
+                return { message: 'Invalid URL format' };
+            }
+            if (issue.validation === 'uuid') {
+                return { message: 'Invalid UUID format' };
+            }
+            return { message: 'Invalid string format' };
+        default:
+            return { message: ctx.defaultError };
+    }
+};
+// Apply custom error map globally for this module
+z.setErrorMap(securityErrorMap);
+/**
+ * Common validation patterns as reusable regex
+ */
+const PATTERNS = {
+    // Safe identifier: alphanumeric with underscore/hyphen
+    SAFE_IDENTIFIER: /^[a-zA-Z][a-zA-Z0-9_-]*$/,
+    // Safe filename: alphanumeric with dot, underscore, hyphen
+    SAFE_FILENAME: /^[a-zA-Z0-9][a-zA-Z0-9._-]*$/,
+    // Safe path segment: no traversal
+    SAFE_PATH_SEGMENT: /^[^<>:"|?*\x00-\x1f]+$/,
+    // No shell metacharacters
+    NO_SHELL_CHARS: /^[^;&|`$(){}><\n\r\0]+$/,
+    // Semantic version
+    SEMVER: /^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$/,
+};
+/**
+ * Validation limits
+ */
+const LIMITS = {
+    MIN_PASSWORD_LENGTH: 8,
+    MAX_PASSWORD_LENGTH: 128,
+    MAX_EMAIL_LENGTH: 254,
+    MAX_IDENTIFIER_LENGTH: 64,
+    MAX_PATH_LENGTH: 4096,
+    MAX_CONTENT_LENGTH: 1024 * 1024, // 1MB
+    MAX_ARRAY_LENGTH: 1000,
+    MAX_OBJECT_KEYS: 100,
+};
+// ============================================================================
+// Base Validation Schemas
+// ============================================================================
+/**
+ * Safe string that cannot contain shell metacharacters
+ */
+export const SafeStringSchema = z.string()
+    .min(1, 'String cannot be empty')
+    .max(LIMITS.MAX_CONTENT_LENGTH, 'String too long')
+    .regex(PATTERNS.NO_SHELL_CHARS, 'String contains invalid characters');
+/**
+ * Safe identifier for IDs, names, etc.
+ */
+export const IdentifierSchema = z.string()
+    .min(1, 'Identifier cannot be empty')
+    .max(LIMITS.MAX_IDENTIFIER_LENGTH, 'Identifier too long')
+    .regex(PATTERNS.SAFE_IDENTIFIER, 'Invalid identifier format');
+/**
+ * Safe filename
+ */
+export const FilenameSchema = z.string()
+    .min(1, 'Filename cannot be empty')
+    .max(255, 'Filename too long')
+    .regex(PATTERNS.SAFE_FILENAME, 'Invalid filename format');
+/**
+ * Email schema with length limit
+ */
+export const EmailSchema = z.string()
+    .email('Invalid email format')
+    .max(LIMITS.MAX_EMAIL_LENGTH, 'Email too long')
+    .toLowerCase();
+/**
+ * Password schema with complexity requirements
+ */
+export const PasswordSchema = z.string()
+    .min(LIMITS.MIN_PASSWORD_LENGTH, `Password must be at least ${LIMITS.MIN_PASSWORD_LENGTH} characters`)
+    .max(LIMITS.MAX_PASSWORD_LENGTH, `Password must not exceed ${LIMITS.MAX_PASSWORD_LENGTH} characters`)
+    .refine((val) => /[A-Z]/.test(val), 'Password must contain uppercase letter')
+    .refine((val) => /[a-z]/.test(val), 'Password must contain lowercase letter')
+    .refine((val) => /\d/.test(val), 'Password must contain digit');
+/**
+ * UUID schema
+ */
+export const UUIDSchema = z.string().uuid('Invalid UUID format');
+/**
+ * URL schema with HTTPS enforcement
+ */
+export const HttpsUrlSchema = z.string()
+    .url('Invalid URL format')
+    .refine((val) => val.startsWith('https://'), 'URL must use HTTPS');
+/**
+ * URL schema (allows HTTP for development)
+ */
+export const UrlSchema = z.string()
+    .url('Invalid URL format');
+/**
+ * Semantic version schema
+ */
+export const SemverSchema = z.string()
+    .regex(PATTERNS.SEMVER, 'Invalid semantic version format');
+/**
+ * Port number schema
+ */
+export const PortSchema = z.number()
+    .int('Port must be an integer')
+    .min(1, 'Port must be at least 1')
+    .max(65535, 'Port must be at most 65535');
+/**
+ * IP address schema (v4)
+ */
+export const IPv4Schema = z.string()
+    .ip({ version: 'v4', message: 'Invalid IPv4 address' });
+/**
+ * IP address schema (v4 or v6)
+ */
+export const IPSchema = z.string()
+    .ip({ message: 'Invalid IP address' });
+// ============================================================================
+// Authentication Schemas
+// ============================================================================
+/**
+ * User role schema
+ */
+export const UserRoleSchema = z.enum([
+    'admin',
+    'operator',
+    'developer',
+    'viewer',
+    'service',
+]);
+/**
+ * Permission schema
+ */
+export const PermissionSchema = z.enum([
+    'swarm.create',
+    'swarm.read',
+    'swarm.update',
+    'swarm.delete',
+    'swarm.scale',
+    'agent.spawn',
+    'agent.read',
+    'agent.terminate',
+    'task.create',
+    'task.read',
+    'task.cancel',
+    'metrics.read',
+    'system.admin',
+    'api.access',
+]);
+/**
+ * Login request schema
+ */
+export const LoginRequestSchema = z.object({
+    email: EmailSchema,
+    password: z.string().min(1, 'Password is required'),
+    mfaCode: z.string().length(6, 'MFA code must be 6 digits').optional(),
+});
+/**
+ * User creation schema
+ */
+export const CreateUserSchema = z.object({
+    email: EmailSchema,
+    password: PasswordSchema,
+    role: UserRoleSchema,
+    permissions: z.array(PermissionSchema).optional(),
+    isActive: z.boolean().optional().default(true),
+});
+/**
+ * API key creation schema
+ */
+export const CreateApiKeySchema = z.object({
+    name: IdentifierSchema,
+    permissions: z.array(PermissionSchema).optional(),
+    expiresAt: z.date().optional(),
+});
+// ============================================================================
+// Agent & Task Schemas
+// ============================================================================
+/**
+ * Agent type schema
+ */
+export const AgentTypeSchema = z.enum([
+    'coder',
+    'reviewer',
+    'tester',
+    'planner',
+    'researcher',
+    'security-architect',
+    'security-auditor',
+    'memory-specialist',
+    'swarm-specialist',
+    'integration-architect',
+    'performance-engineer',
+    'core-architect',
+    'test-architect',
+    'queen-coordinator',
+    'project-coordinator',
+]);
+/**
+ * Agent spawn request schema
+ */
+export const SpawnAgentSchema = z.object({
+    type: AgentTypeSchema,
+    id: IdentifierSchema.optional(),
+    config: z.record(z.unknown()).optional(),
+    timeout: z.number().positive().optional(),
+});
+/**
+ * Task input schema
+ */
+export const TaskInputSchema = z.object({
+    taskId: UUIDSchema,
+    content: SafeStringSchema.max(10000, 'Task content too long'),
+    agentType: AgentTypeSchema,
+    priority: z.enum(['low', 'medium', 'high', 'critical']).optional(),
+    metadata: z.record(z.unknown()).optional(),
+});
+// ============================================================================
+// Command & Path Schemas
+// ============================================================================
+/**
+ * Command argument schema
+ */
+export const CommandArgumentSchema = z.string()
+    .max(1024, 'Argument too long')
+    .refine((val) => !val.includes('\0'), 'Argument contains null byte')
+    .refine((val) => !/[;&|`$(){}><]/.test(val), 'Argument contains shell metacharacters');
+/**
+ * Path schema
+ */
+export const PathSchema = z.string()
+    .max(LIMITS.MAX_PATH_LENGTH, 'Path too long')
+    .refine((val) => !val.includes('\0'), 'Path contains null byte')
+    .refine((val) => !val.includes('..'), 'Path contains traversal pattern');
+// ============================================================================
+// Configuration Schemas
+// ============================================================================
+/**
+ * Security configuration schema
+ */
+export const SecurityConfigSchema = z.object({
+    bcryptRounds: z.number().int().min(10).max(20).default(12),
+    jwtExpiresIn: z.string().default('24h'),
+    sessionTimeout: z.number().positive().default(3600000),
+    maxLoginAttempts: z.number().int().positive().default(5),
+    lockoutDuration: z.number().positive().default(900000),
+    requireMFA: z.boolean().default(false),
+});
+/**
+ * Executor configuration schema
+ */
+export const ExecutorConfigSchema = z.object({
+    allowedCommands: z.array(IdentifierSchema).min(1),
+    blockedPatterns: z.array(z.string()).optional(),
+    timeout: z.number().positive().default(30000),
+    maxBuffer: z.number().positive().default(10 * 1024 * 1024),
+    cwd: PathSchema.optional(),
+    allowSudo: z.boolean().default(false),
+});
+// ============================================================================
+// Sanitization Functions
+// ============================================================================
+/**
+ * Sanitizes a string by removing dangerous characters
+ */
+export function sanitizeString(input) {
+    return input
+        .replace(/\0/g, '') // Remove null bytes
+        .replace(/[<>]/g, '') // Remove HTML brackets
+        .replace(/javascript:/gi, '') // Remove javascript: protocol
+        .replace(/data:/gi, '') // Remove data: protocol
+        .trim();
+}
+/**
+ * Sanitizes HTML entities
+ */
+export function sanitizeHtml(input) {
+    return input
+        .replace(/&/g, '&amp;')
+        .replace(/</g, '&lt;')
+        .replace(/>/g, '&gt;')
+        .replace(/"/g, '&quot;')
+        .replace(/'/g, '&#x27;');
+}
+/**
+ * Sanitizes a path by removing traversal patterns
+ */
+export function sanitizePath(input) {
+    return input
+        .replace(/\0/g, '') // Remove null bytes
+        .replace(/\.\./g, '') // Remove traversal patterns
+        .replace(/\/+/g, '/') // Normalize slashes
+        .replace(/^\//, '') // Remove leading slash
+        .trim();
+}
+// ============================================================================
+// Validation Helper Class
+// ============================================================================
+export class InputValidator {
+    /**
+     * Validates input against a schema
+     */
+    static validate(schema, input) {
+        return schema.parse(input);
+    }
+    /**
+     * Safely validates input, returning result
+     */
+    static safeParse(schema, input) {
+        return schema.safeParse(input);
+    }
+    /**
+     * Validates email
+     */
+    static validateEmail(email) {
+        return EmailSchema.parse(email);
+    }
+    /**
+     * Validates password
+     */
+    static validatePassword(password) {
+        return PasswordSchema.parse(password);
+    }
+    /**
+     * Validates identifier
+     */
+    static validateIdentifier(id) {
+        return IdentifierSchema.parse(id);
+    }
+    /**
+     * Validates path
+     */
+    static validatePath(path) {
+        return PathSchema.parse(path);
+    }
+    /**
+     * Validates command argument
+     */
+    static validateCommandArg(arg) {
+        return CommandArgumentSchema.parse(arg);
+    }
+    /**
+     * Validates login request
+     */
+    static validateLoginRequest(data) {
+        return LoginRequestSchema.parse(data);
+    }
+    /**
+     * Validates user creation request
+     */
+    static validateCreateUser(data) {
+        return CreateUserSchema.parse(data);
+    }
+    /**
+     * Validates task input
+     */
+    static validateTaskInput(data) {
+        return TaskInputSchema.parse(data);
+    }
+}
+// ============================================================================
+// Export all schemas for direct use
+// ============================================================================
+export { z, PATTERNS, LIMITS, };
+//# sourceMappingURL=input-validator.js.map

package/node_modules/@claude-flow/security/dist/input-validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"input-validator.js","sourceRoot":"","sources":["../src/input-validator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;GAEG;AACH,MAAM,gBAAgB,GAAkB,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;IACrD,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,CAAC,CAAC,YAAY,CAAC,OAAO;YACzB,OAAO,EAAE,OAAO,EAAE,oCAAoC,EAAE,CAAC;QAC3D,KAAK,CAAC,CAAC,YAAY,CAAC,SAAS;YAC3B,OAAO,EAAE,OAAO,EAAE,mCAAmC,EAAE,CAAC;QAC1D,KAAK,CAAC,CAAC,YAAY,CAAC,cAAc;YAChC,IAAI,KAAK,CAAC,UAAU,KAAK,OAAO,EAAE,CAAC;gBACjC,OAAO,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC;YAC7C,CAAC;YACD,IAAI,KAAK,CAAC,UAAU,KAAK,KAAK,EAAE,CAAC;gBAC/B,OAAO,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC;YAC3C,CAAC;YACD,IAAI,KAAK,CAAC,UAAU,KAAK,MAAM,EAAE,CAAC;gBAChC,OAAO,EAAE,OAAO,EAAE,qBAAqB,EAAE,CAAC;YAC5C,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,uBAAuB,EAAE,CAAC;QAC9C;YACE,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,YAAY,EAAE,CAAC;IACzC,CAAC;AACH,CAAC,CAAC;AAEF,kDAAkD;AAClD,CAAC,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC;AAEhC;;GAEG;AACH,MAAM,QAAQ,GAAG;IACf,uDAAuD;IACvD,eAAe,EAAE,0BAA0B;IAE3C,2DAA2D;IAC3D,aAAa,EAAE,8BAA8B;IAE7C,kCAAkC;IAClC,iBAAiB,EAAE,wBAAwB;IAE3C,0BAA0B;IAC1B,cAAc,EAAE,yBAAyB;IAEzC,mBAAmB;IACnB,MAAM,EAAE,qLAAqL;CAC9L,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,GAAG;IACb,mBAAmB,EAAE,CAAC;IACtB,mBAAmB,EAAE,GAAG;IACxB,gBAAgB,EAAE,GAAG;IACrB,qBAAqB,EAAE,EAAE;IACzB,eAAe,EAAE,IAAI;IACrB,kBAAkB,EAAE,IAAI,GAAG,IAAI,EAAE,MAAM;IACvC,gBAAgB,EAAE,IAAI;IACtB,eAAe,EAAE,GAAG;CACrB,CAAC;AAEF,+EAA+E;AAC/E,0BAA0B;AAC1B,+EAA+E;AAE/E;;GAEG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,EAAE;KACvC,GAAG,CAAC,CAAC,EAAE,wBAAwB,CAAC;KAChC,GAAG,CAAC,MAAM,CAAC,kBAAkB,EAAE,iBAAiB,CAAC;KACjD,KAAK,CAAC,QAAQ,CAAC,cAAc,EAAE,oCAAoC,CAAC,CAAC;AAExE;;GAEG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,EAAE;KACvC,GAAG,CAAC,CAAC,EAAE,4BAA4B,CAAC;KACpC,GAAG,CAAC,MAAM,CAAC,qBAAqB,EAAE,qBAAqB,CAAC;KACxD,KAAK,CAAC,QAAQ,CAAC,eAAe,EAAE,2BAA2B,CAAC,CAAC;AAEhE;;GAEG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,EAAE;KACrC,GAAG,CAAC,CAAC,EAAE,0BAA0B,CAAC;KAClC,GAAG,CAAC,GAAG,EAAE,mBAAmB,CAAC;KAC7B,KAAK,CAAC,QAAQ,CAAC,aAAa,EAAE,yBAAyB,CAAC,CAAC;AAE5D;;GAEG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,EAAE;KAClC,KAAK,CAAC,sBAAsB,CAAC;KAC7B,GAAG,CAAC,MAAM,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;KAC9C,WAAW,EAAE,CAAC;AAEjB;;GAEG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,EAAE;KACrC,GAAG,CAAC,MAAM,CAAC,mBAAmB,EAAE,6BAA6B,MAAM,CAAC,mBAAmB,aAAa,CAAC;KACrG,GAAG,CAAC,MAAM,CAAC,mBAAmB,EAAE,4BAA4B,MAAM,CAAC,mBAAmB,aAAa,CAAC;KACpG,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,wCAAwC,CAAC;KAC5E,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,wCAAwC,CAAC;KAC5E,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,6BAA6B,CAAC,CAAC;AAElE;;GAEG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;AAEjE;;GAEG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,EAAE;KACrC,GAAG,CAAC,oBAAoB,CAAC;KACzB,MAAM,CACL,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,EACnC,oBAAoB,CACrB,CAAC;AAEJ;;GAEG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,EAAE;KAChC,GAAG,CAAC,oBAAoB,CAAC,CAAC;AAE7B;;GAEG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,EAAE;KACnC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,iCAAiC,CAAC,CAAC;AAE7D;;GAEG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,EAAE;KACjC,GAAG,CAAC,yBAAyB,CAAC;KAC9B,GAAG,CAAC,CAAC,EAAE,yBAAyB,CAAC;KACjC,GAAG,CAAC,KAAK,EAAE,4BAA4B,CAAC,CAAC;AAE5C;;GAEG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,EAAE;KACjC,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC,CAAC;AAE1D;;GAEG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,EAAE;KAC/B,EAAE,CAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC,CAAC;AAEzC,+EAA+E;AAC/E,yBAAyB;AACzB,+EAA+E;AAE/E;;GAEG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,IAAI,CAAC;IACnC,OAAO;IACP,UAAU;IACV,WAAW;IACX,QAAQ;IACR,SAAS;CACV,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,IAAI,CAAC;IACrC,cAAc;IACd,YAAY;IACZ,cAAc;IACd,cAAc;IACd,aAAa;IACb,aAAa;IACb,YAAY;IACZ,iBAAiB;IACjB,aAAa;IACb,WAAW;IACX,aAAa;IACb,cAAc;IACd,cAAc;IACd,YAAY;CACb,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,KAAK,EAAE,WAAW;IAClB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,sBAAsB,CAAC;IACnD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,2BAA2B,CAAC,CAAC,QAAQ,EAAE;CACtE,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,KAAK,EAAE,WAAW;IAClB,QAAQ,EAAE,cAAc;IACxB,IAAI,EAAE,cAAc;IACpB,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,QAAQ,EAAE;IACjD,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;CAC/C,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,IAAI,EAAE,gBAAgB;IACtB,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,QAAQ,EAAE;IACjD,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;CAC/B,CAAC,CAAC;AAEH,+EAA+E;AAC/E,uBAAuB;AACvB,+EAA+E;AAE/E;;GAEG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,IAAI,CAAC;IACpC,OAAO;IACP,UAAU;IACV,QAAQ;IACR,SAAS;IACT,YAAY;IACZ,oBAAoB;IACpB,kBAAkB;IAClB,mBAAmB;IACnB,kBAAkB;IAClB,uBAAuB;IACvB,sBAAsB;IACtB,gBAAgB;IAChB,gBAAgB;IAChB,mBAAmB;IACnB,qBAAqB;CACtB,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,IAAI,EAAE,eAAe;IACrB,EAAE,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IAC/B,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IACxC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAC1C,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,MAAM,EAAE,UAAU;IAClB,OAAO,EAAE,gBAAgB,CAAC,GAAG,CAAC,KAAK,EAAE,uBAAuB,CAAC;IAC7D,SAAS,EAAE,eAAe;IAC1B,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE;IAClE,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC3C,CAAC,CAAC;AAEH,+EAA+E;AAC/E,yBAAyB;AACzB,+EAA+E;AAE/E;;GAEG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,EAAE;KAC5C,GAAG,CAAC,IAAI,EAAE,mBAAmB,CAAC;KAC9B,MAAM,CACL,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAC5B,6BAA6B,CAC9B;KACA,MAAM,CACL,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,EACnC,wCAAwC,CACzC,CAAC;AAEJ;;GAEG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,EAAE;KACjC,GAAG,CAAC,MAAM,CAAC,eAAe,EAAE,eAAe,CAAC;KAC5C,MAAM,CACL,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAC5B,yBAAyB,CAC1B;KACA,MAAM,CACL,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAC5B,iCAAiC,CAClC,CAAC;AAEJ,+EAA+E;AAC/E,wBAAwB;AACxB,+EAA+E;AAE/E;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC1D,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACvC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC;IACtD,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IACxD,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;IACtD,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CACvC,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACjD,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC/C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAC7C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;IAC1D,GAAG,EAAE,UAAU,CAAC,QAAQ,EAAE;IAC1B,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CACtC,CAAC,CAAC;AAEH,+EAA+E;AAC/E,yBAAyB;AACzB,+EAA+E;AAE/E;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,OAAO,KAAK;SACT,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAW,oBAAoB;SACjD,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAU,uBAAuB;SACrD,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAE,8BAA8B;SAC5D,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAQ,wBAAwB;SACtD,IAAI,EAAE,CAAC;AACZ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,KAAa;IACxC,OAAO,KAAK;SACT,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;SACvB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AAC7B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,KAAa;IACxC,OAAO,KAAK;SACT,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAW,oBAAoB;SACjD,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAS,4BAA4B;SACzD,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAS,oBAAoB;SACjD,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAW,uBAAuB;SACpD,IAAI,EAAE,CAAC;AACZ,CAAC;AAED,+EAA+E;AAC/E,0BAA0B;AAC1B,+EAA+E;AAE/E,MAAM,OAAO,cAAc;IACzB;;OAEG;IACH,MAAM,CAAC,QAAQ,CAAI,MAAsB,EAAE,KAAc;QACvD,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,SAAS,CAAI,MAAsB,EAAE,KAAc;QACxD,OAAO,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,aAAa,CAAC,KAAa;QAChC,OAAO,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,gBAAgB,CAAC,QAAgB;QACtC,OAAO,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACxC,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,kBAAkB,CAAC,EAAU;QAClC,OAAO,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACpC,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,YAAY,CAAC,IAAY;QAC9B,OAAO,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,kBAAkB,CAAC,GAAW;QACnC,OAAO,qBAAqB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC1C,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,oBAAoB,CAAC,IAAa;QACvC,OAAO,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,kBAAkB,CAAC,IAAa;QACrC,OAAO,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,iBAAiB,CAAC,IAAa;QACpC,OAAO,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACrC,CAAC;CACF;AAED,+EAA+E;AAC/E,oCAAoC;AACpC,+EAA+E;AAE/E,OAAO,EACL,CAAC,EACD,QAAQ,EACR,MAAM,GACP,CAAC"}

package/node_modules/@claude-flow/security/dist/keychain-adapter.d.ts

@@ -0,0 +1,48 @@
+/**
+ * Cross-platform OS keychain adapter (ADR-306) — macOS Keychain, Windows
+ * Credential Manager (DPAPI), Linux Secret Service (libsecret), backed by
+ * `@napi-rs/keyring` (prebuilt N-API binaries per platform, wraps the Rust
+ * `keyring-rs` crate — no node-gyp compile step, same "optional native
+ * binding" shape this monorepo already tolerates for `ruvector`).
+ *
+ * `keytar` was considered and rejected: archived by the Electron team,
+ * compiles from source via node-gyp at install time.
+ *
+ * ADR-306's refresh-token storage rule: OS keychain only, never plain-text
+ * config. When no keychain backend is reachable (typical headless Linux —
+ * the binding can be present but no D-Bus Secret Service running), the CLI
+ * falls back to session-only tokens (never persisted) rather than writing
+ * the secret to disk unencrypted — a deliberate usability cost, not a bug.
+ * `SessionOnlyKeychainAdapter` is that fallback, made explicit rather than
+ * silently degrading.
+ *
+ * @module v3/security/keychain-adapter
+ */
+export interface KeychainAdapter {
+    /**
+     * A real write+read+delete canary probe against a throwaway entry — not
+     * just "did the native module load". A headless box can have the binding
+     * present but no reachable Secret Service, which only a real round-trip
+     * reveals.
+     */
+    isAvailable(): Promise<boolean>;
+    setSecret(service: string, account: string, secret: string): Promise<void>;
+    getSecret(service: string, account: string): Promise<string | null>;
+    deleteSecret(service: string, account: string): Promise<void>;
+}
+/** In-memory-only fallback — the ADR-306-mandated degrade path, not an error state. */
+export declare class SessionOnlyKeychainAdapter implements KeychainAdapter {
+    private readonly store;
+    private key;
+    isAvailable(): Promise<boolean>;
+    setSecret(service: string, account: string, secret: string): Promise<void>;
+    getSecret(service: string, account: string): Promise<string | null>;
+    deleteSecret(service: string, account: string): Promise<void>;
+}
+/**
+ * Selects a real OS keychain when reachable, falling back to
+ * `SessionOnlyKeychainAdapter` otherwise. Always resolves — never throws —
+ * so callers can treat "no keychain" as a normal, expected outcome.
+ */
+export declare function createKeychainAdapter(): Promise<KeychainAdapter>;
+//# sourceMappingURL=keychain-adapter.d.ts.map

package/node_modules/@claude-flow/security/dist/keychain-adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keychain-adapter.d.ts","sourceRoot":"","sources":["../src/keychain-adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,MAAM,WAAW,eAAe;IAC9B;;;;;OAKG;IACH,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IAChC,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3E,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACpE,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC/D;AAKD,uFAAuF;AACvF,qBAAa,0BAA2B,YAAW,eAAe;IAChE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA6B;IAEnD,OAAO,CAAC,GAAG;IAIL,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC;IAI/B,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI1E,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAInE,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAGpE;AAiED;;;;GAIG;AACH,wBAAsB,qBAAqB,IAAI,OAAO,CAAC,eAAe,CAAC,CAItE"}

package/node_modules/@claude-flow/security/dist/keychain-adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keychain-adapter.js","sourceRoot":"","sources":["../src/keychain-adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAeH,MAAM,cAAc,GAAG,uBAAuB,CAAC;AAC/C,MAAM,cAAc,GAAG,OAAO,CAAC;AAE/B,uFAAuF;AACvF,MAAM,OAAO,0BAA0B;IACpB,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IAE3C,GAAG,CAAC,OAAe,EAAE,OAAe;QAC1C,OAAO,GAAG,OAAO,IAAI,OAAO,EAAE,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,WAAW;QACf,OAAO,IAAI,CAAC,CAAC,yDAAyD;IACxE,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,OAAe,EAAE,OAAe,EAAE,MAAc;QAC9D,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;IACrD,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,OAAe,EAAE,OAAe;QAC9C,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,IAAI,IAAI,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,OAAe,EAAE,OAAe;QACjD,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IAChD,CAAC;CACF;AAUD,MAAM,qBAAqB;IACjB,SAAS,CAAsC,CAAC,+BAA+B;IAE/E,KAAK,CAAC,gBAAgB;QAC5B,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,SAAS,CAAC;QACxD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAA2C,CAAC;YACzF,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC,8DAA8D;QACvF,CAAC;QACD,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,WAAW;QACf,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC5C,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC;YACxD,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;YAC5B,MAAM,QAAQ,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;YACrC,KAAK,CAAC,cAAc,EAAE,CAAC;YACvB,OAAO,QAAQ,KAAK,QAAQ,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC,CAAC,2EAA2E;QAC3F,CAAC;IACH,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,OAAe,EAAE,OAAe,EAAE,MAAc;QAC9D,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC5C,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACnE,IAAI,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAClD,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,OAAe,EAAE,OAAe;QAC9C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC5C,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QACxB,IAAI,CAAC;YACH,OAAO,IAAI,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;QACnD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC,CAAC,4CAA4C;QAC3D,CAAC;IACH,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,OAAe,EAAE,OAAe;QACjD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC5C,IAAI,CAAC,KAAK;YAAE,OAAO;QACnB,IAAI,CAAC;YACH,IAAI,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,cAAc,EAAE,CAAC;QAC/C,CAAC;QAAC,MAAM,CAAC;YACP,2EAA2E;QAC7E,CAAC;IACH,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB;IACzC,MAAM,MAAM,GAAG,IAAI,qBAAqB,EAAE,CAAC;IAC3C,IAAI,MAAM,MAAM,CAAC,WAAW,EAAE;QAAE,OAAO,MAAM,CAAC;IAC9C,OAAO,IAAI,0BAA0B,EAAE,CAAC;AAC1C,CAAC"}

package/node_modules/@claude-flow/security/dist/mcp-composition-inspector.d.ts

@@ -0,0 +1,133 @@
+/**
+ * MCP Tool Composition Inspector — ADR-320 (this ADR; ruvnet/ruflo dream-cycle
+ * proposal, arXiv:2606.27027 "ShareLock").
+ *
+ * The attack: an adversary registers N seemingly-benign MCP tools whose
+ * individual descriptions look fine in isolation, but whose CONCATENATION
+ * (or pairwise overlap) forms an injection payload targeting a downstream
+ * agent — a Shamir-secret-sharing-style split across tool descriptions.
+ * Per-tool inspection misses this because each fragment sits under any
+ * single-tool detection threshold.
+ *
+ * Relationship to prior art in this repo
+ * ---------------------------------------
+ * A CLI-only v1 of this idea already shipped directly to `main`
+ * (dream-cycle #2783, commits 381b7ebcc/581cd2bf3) as
+ * `v3/@claude-flow/cli/src/security/mcp-composition-inspector.ts` — an
+ * on-demand `ruflo security composition-scan` command using exact
+ * common-substring matching plus an injection-phrase catalog and
+ * typosquat check. That module's own header explicitly scopes itself as
+ * "a bounded engineering fix rather than an ADR-scope subsystem" and lists
+ * "Future v2: SimHash + LSH for scale" as deliberately deferred. THIS
+ * module is that v2: a reusable `@claude-flow/security` library primitive
+ * (not a CLI-only tool) built around a real SimHash fingerprint, so it can
+ * be called from a pre-task/pre-tool-use hook before a multi-tool chain
+ * executes, per this ADR's implementation target. It does not replace or
+ * import the CLI v1 — the two are independent, complementary detectors
+ * (exact-substring vs. hashed-shingle-overlap) that a caller may run
+ * together.
+ *
+ * Detection method (deterministic, no LLM call)
+ * -----------------------------------------------
+ * 1. Each tool description is normalized and split into overlapping
+ *    word-shingles (default: 5-word windows). Shingling — rather than
+ *    whole-description comparison — is what lets us find a SMALL embedded
+ *    fragment inside an otherwise unrelated, benign description.
+ * 2. Each tool gets a 64-bit SimHash fingerprint: every shingle is hashed
+ *    (FNV-1a, 64-bit) and the fingerprint bits are set by majority vote
+ *    across all of a tool's shingle hashes. Two tools whose descriptions
+ *    share enough content have a SMALL Hamming distance between
+ *    fingerprints — this is the O(1)-per-pair coarse filter that avoids an
+ *    LLM call and stays cheap even at hundreds of registered tools (fast
+ *    64-bit XOR + popcount per pair).
+ * 3. An inverted shingle-hash index (hash -> set of tool indices) is built
+ *    once, in O(total shingles). For each pair flagged by the SimHash
+ *    filter (or found in the index) the SAME index is used to compute the
+ *    actual overlapping shingle text — this is what makes the finding
+ *    reportable (the SimHash score alone can't tell an operator *what*
+ *    matched).
+ * 4. A fragment's "population" (how many distinct tools carry it) caps
+ *    false positives: shared shingles that appear in more than
+ *    `maxFragmentPopulation` (default 3) tools are template language
+ *    (e.g. every ruflo `memory_*` tool's boilerplate), not an attack —
+ *    Shamir-split attacks concentrate a fragment in a small conspiracy of
+ *    2-3 tools. Same population-cap idea as the CLI v1, reimplemented here
+ *    against the hash index instead of raw substrings.
+ *
+ * This is a heuristic detector, not a security boundary: it reports
+ * SUSPECTS. Default action is warn + log; blocking is opt-in via
+ * `CLAUDE_FLOW_MCP_COMPOSITION_BLOCK=1` (see {@link evaluateToolComposition}).
+ *
+ * @module @claude-flow/security/mcp-composition-inspector
+ */
+export interface McpToolDescriptor {
+    name: string;
+    description: string;
+}
+export interface CompositionInspectorOptions {
+    /** Words per shingle window. Default 5. */
+    shingleSize?: number;
+    /** SimHash similarity (1 - Hamming/64) at/above which a pair is a candidate. Default 0.6. */
+    simhashThreshold?: number;
+    /** Fraction of a tool's shingles shared with a peer (low-population only) at/above which a pair is flagged. Default 0.25. */
+    fragmentOverlapThreshold?: number;
+    /** Max number of distinct tools a shingle may appear in before it's treated as template language, not an attack fragment. Default 3. */
+    maxFragmentPopulation?: number;
+    /** Minimum character length for a shingle to be indexed (filters trivial/common short phrases). Default 12. */
+    minShingleChars?: number;
+    /** Max sample shared fragments recorded per finding (display only). Default 5. */
+    maxSampleFragments?: number;
+}
+export interface CompositionFinding {
+    toolA: string;
+    toolB: string;
+    /** 1 - (Hamming distance / 64) between the two tools' SimHash fingerprints. */
+    simhashSimilarity: number;
+    /** sharedLowPopulationShingles / min(shingleCount(A), shingleCount(B)). */
+    fragmentOverlapScore: number;
+    /** Sample of the actual shared shingle text driving the finding (truncated). */
+    sharedFragments: string[];
+    /** Max population (distinct tools) observed among the shared shingles that triggered this finding. */
+    fragmentPopulation: number;
+    reason: string;
+}
+export interface CompositionInspectionStats {
+    toolsScanned: number;
+    pairsCompared: number;
+    shinglesIndexed: number;
+    /** Pairs whose SimHash similarity alone crossed simhashThreshold (diagnostic — includes pairs later excluded for having no low-population shared shingle). */
+    candidatePairsFromSimhash: number;
+}
+export interface CompositionInspectionResult {
+    findings: CompositionFinding[];
+    stats: CompositionInspectionStats;
+}
+export interface CompositionGuardResult {
+    result: CompositionInspectionResult;
+    action: 'none' | 'warn' | 'block';
+    blocked: boolean;
+    message?: string;
+}
+/** FNV-1a, 64-bit. Deterministic, dependency-free, good avalanche for short strings. */
+export declare function fnv1a64(input: string): bigint;
+/**
+ * Classic SimHash: bit-vote a 64-bit fingerprint across a list of token
+ * hashes. Near-duplicate token sets (even with some fragments differing)
+ * produce fingerprints with a small Hamming distance.
+ */
+export declare function simhash64(shingles: readonly string[]): bigint;
+/** Hamming distance between two 64-bit fingerprints (0..64). */
+export declare function hammingDistance64(a: bigint, b: bigint): number;
+export declare function inspectToolComposition(tools: readonly McpToolDescriptor[], options?: CompositionInspectorOptions): CompositionInspectionResult;
+/** Reads `CLAUDE_FLOW_MCP_COMPOSITION_BLOCK` fresh on every call. '1' or 'true' (case-insensitive) enables blocking; unset/anything else keeps the default warn+log posture. */
+export declare function isCompositionBlockEnabled(): boolean;
+/**
+ * Runs {@link inspectToolComposition} and applies the ADR-320 default
+ * posture: warn + log (via `console.warn`) unless
+ * `CLAUDE_FLOW_MCP_COMPOSITION_BLOCK=1`, in which case the chain is marked
+ * `blocked: true` — the caller (the pre-task hook / MCP dispatcher) decides
+ * what "blocked" means operationally; this function does not throw or abort
+ * anything itself.
+ */
+export declare function evaluateToolComposition(tools: readonly McpToolDescriptor[], options?: CompositionInspectorOptions): CompositionGuardResult;
+//# sourceMappingURL=mcp-composition-inspector.d.ts.map

package/node_modules/@claude-flow/security/dist/mcp-composition-inspector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-composition-inspector.d.ts","sourceRoot":"","sources":["../src/mcp-composition-inspector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6DG;AAMH,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,2BAA2B;IAC1C,2CAA2C;IAC3C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,6FAA6F;IAC7F,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,6HAA6H;IAC7H,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,wIAAwI;IACxI,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,+GAA+G;IAC/G,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,kFAAkF;IAClF,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,+EAA+E;IAC/E,iBAAiB,EAAE,MAAM,CAAC;IAC1B,2EAA2E;IAC3E,oBAAoB,EAAE,MAAM,CAAC;IAC7B,gFAAgF;IAChF,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,sGAAsG;IACtG,kBAAkB,EAAE,MAAM,CAAC;IAC3B,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,0BAA0B;IACzC,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,8JAA8J;IAC9J,yBAAyB,EAAE,MAAM,CAAC;CACnC;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,EAAE,kBAAkB,EAAE,CAAC;IAC/B,KAAK,EAAE,0BAA0B,CAAC;CACnC;AAED,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,2BAA2B,CAAC;IACpC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;IAClC,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAUD,wFAAwF;AACxF,wBAAgB,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAO7C;AAED;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAe7D;AAED,gEAAgE;AAChE,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAQ9D;AAkCD,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,SAAS,iBAAiB,EAAE,EACnC,OAAO,GAAE,2BAAgC,GACxC,2BAA2B,CAyF7B;AAQD,gLAAgL;AAChL,wBAAgB,yBAAyB,IAAI,OAAO,CAGnD;AAED;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,SAAS,iBAAiB,EAAE,EACnC,OAAO,GAAE,2BAAgC,GACxC,sBAAsB,CAwBxB"}