@claude-flow/cli 3.32.3 → 3.32.4

package/dist/src/mcp-tools/security-tools.js

@@ -0,0 +1,556 @@
+/**
+ * Security MCP Tools - AIDefence Integration
+ *
+ * Provides MCP tools for AI manipulation defense:
+ * - aidefence_scan: Scan input for threats
+ * - aidefence_analyze: Deep analysis of threats
+ * - aidefence_stats: Get detection statistics
+ * - aidefence_learn: Learn from detection feedback
+ *
+ * Created with ❤️ by ruv.io
+ */
+import { validateText, validateIdentifier } from './validate-input.js';
+import { autoInstallPackage } from './auto-install.js';
+import { createRequire } from 'module';
+// Create require for resolving module paths
+const require = createRequire(import.meta.url);
+// Lazy-loaded AIDefence instance
+let aidefenceInstance = null;
+// Track if we've attempted install this session
+let installAttempted = false;
+// ADR-093 follow-up: wrapper-level counters for the lightweight aidefence
+// tools (has_pii, is_safe, scan-quick) that bypass the package's own
+// stats tracking. The audit flagged that aidefence_stats stayed at zero
+// regardless of detections from these paths. Stats now combine the
+// underlying defender.getStats() with our wrapper counters so the user
+// sees a true reflection of how often each tool category fired.
+const wrapperStats = {
+    hasPiiCalls: 0,
+    hasPiiHits: 0,
+    isSafeCalls: 0,
+    isSafeUnsafeVerdicts: 0,
+    quickScanCalls: 0,
+    quickScanThreats: 0,
+};
+/**
+ * Get or create AIDefence instance (throws if unavailable)
+ */
+async function getAIDefence() {
+    if (aidefenceInstance) {
+        return aidefenceInstance;
+    }
+    const packageName = '@claude-flow/aidefence';
+    // First attempt - try to load via dynamic import (ESM)
+    try {
+        const aidefence = await import(packageName);
+        const instance = aidefence.createAIDefence({ enableLearning: true });
+        if (!instance) {
+            throw new Error('createAIDefence returned null');
+        }
+        aidefenceInstance = instance;
+        return instance;
+    }
+    catch (e) {
+        // Package not found or failed to load
+        const error = e;
+        if (!error.message?.includes('Cannot find package') && !error.message?.includes('ERR_MODULE_NOT_FOUND')) {
+            // Different error - might be a real issue
+            throw new Error(`AIDefence failed to load: ${error.message}`);
+        }
+    }
+    // Don't attempt install more than once per session
+    if (installAttempted) {
+        throw new Error('AIDefence package not available. Install with: npm install @claude-flow/aidefence');
+    }
+    installAttempted = true;
+    // Second attempt - auto-install and retry
+    console.error(`[claude-flow] ${packageName} not found, attempting auto-install...`);
+    const installed = await autoInstallPackage(packageName);
+    if (!installed) {
+        throw new Error('AIDefence package not available. Install with: npm install @claude-flow/aidefence');
+    }
+    // #1807 — auto-install lands the package somewhere Node's standard
+    // resolver couldn't find on the FIRST attempt (npm-global installs are
+    // a common offender). Try Node's resolver again first (it may have
+    // picked up the new node_modules directory), then fall back to the
+    // file:// + cache-bust import dance, then surface a clearly actionable
+    // error if everything still fails.
+    // Plain re-import (covers project-local installs that landed where Node
+    // looks). This often succeeds where the first attempt failed because
+    // the module cache is stable across the await boundary.
+    try {
+        const aidefence = await import(packageName);
+        const instance = aidefence.createAIDefence({ enableLearning: true });
+        if (instance) {
+            aidefenceInstance = instance;
+            console.error(`[claude-flow] ${packageName} loaded after install (resolver path)`);
+            return instance;
+        }
+    }
+    catch { /* fall through to file:// attempt */ }
+    // file:// + cache-bust attempt (covers globally-installed packages whose
+    // path the standard resolver missed but require.resolve can locate).
+    try {
+        const modulePath = require.resolve(packageName);
+        const cacheBust = `?t=${Date.now()}`;
+        const aidefence = await import(`file://${modulePath}${cacheBust}`);
+        const instance = aidefence.createAIDefence({ enableLearning: true });
+        if (!instance) {
+            throw new Error('createAIDefence returned null after install');
+        }
+        aidefenceInstance = instance;
+        console.error(`[claude-flow] ${packageName} loaded after install (file:// path)`);
+        return instance;
+    }
+    catch (retryError) {
+        throw new Error(`AIDefence installed but failed to load: ${retryError}.\n` +
+            `This usually means npm installed the package somewhere Node's module resolver doesn't search ` +
+            `(common with global installs of \`claude-flow\`). Recovery options:\n` +
+            `  1. Run \`npm install --save @claude-flow/aidefence\` in your project's working directory.\n` +
+            `  2. Or run \`npx ruflo@latest mcp start\` from a directory whose node_modules contains the package.\n` +
+            `  3. Or restart the MCP server after the install completes.`);
+    }
+}
+/**
+ * Scan input for AI manipulation threats
+ */
+const aidefenceScanTool = {
+    name: 'aidefence_scan',
+    description: 'Scan input text for AI manipulation threats (prompt injection, jailbreaks, PII). Returns threat assessment with <10ms latency. Use when nothing native exists — Claude Code does not have a PII / prompt-injection / adversarial-text scanner. Pair with any tool that ingests untrusted input (browser scrape, federation envelope, memory_import_claude).',
+    inputSchema: {
+        type: 'object',
+        properties: {
+            input: {
+                type: 'string',
+                description: 'Text to scan for threats',
+            },
+            quick: {
+                type: 'boolean',
+                description: 'Quick scan mode (faster, less detailed)',
+                default: false,
+            },
+        },
+        required: ['input'],
+    },
+    handler: async (args) => {
+        {
+            const v = validateText(args.input, 'input');
+            if (!v.valid)
+                return { content: [{ type: 'text', text: JSON.stringify({ error: v.error }) }], isError: true };
+        }
+        const input = args.input;
+        const quick = args.quick;
+        try {
+            const defender = await getAIDefence();
+            if (quick) {
+                const result = defender.quickScan(input);
+                // Audit-flagged: quickScan focuses on prompt-injection/jailbreak
+                // patterns and missed obvious PII (email + API key). Layer a fast
+                // PII check so quick mode catches both threat classes.
+                let piiPresent = false;
+                try {
+                    piiPresent = !!defender.hasPII(input);
+                }
+                catch { /* hasPII unavailable */ }
+                const threatDetected = result.threat || piiPresent;
+                wrapperStats.quickScanCalls++;
+                if (threatDetected)
+                    wrapperStats.quickScanThreats++;
+                return {
+                    content: [{
+                            type: 'text',
+                            text: JSON.stringify({
+                                safe: !threatDetected,
+                                threatDetected,
+                                confidence: result.confidence,
+                                piiDetected: piiPresent,
+                                promptInjectionDetected: result.threat,
+                                mode: 'quick',
+                            }, null, 2),
+                        }],
+                };
+            }
+            const result = await defender.detect(input);
+            return {
+                content: [{
+                        type: 'text',
+                        text: JSON.stringify({
+                            safe: result.safe,
+                            threats: result.threats.map(t => ({
+                                type: t.type,
+                                severity: t.severity,
+                                confidence: t.confidence,
+                                description: t.description,
+                            })),
+                            piiFound: result.piiFound,
+                            detectionTimeMs: result.detectionTimeMs,
+                        }, null, 2),
+                    }],
+            };
+        }
+        catch (error) {
+            return {
+                content: [{
+                        type: 'text',
+                        text: JSON.stringify({ error: String(error) }),
+                    }],
+                isError: true,
+            };
+        }
+    },
+};
+/**
+ * Deep analysis of specific threat
+ */
+const aidefenceAnalyzeTool = {
+    name: 'aidefence_analyze',
+    description: 'Deep analysis of input for specific threat types with similar pattern search and mitigation recommendations. Use when nothing native exists — Claude Code does not have a PII / prompt-injection / adversarial-text scanner. Pair with any tool that ingests untrusted input (browser scrape, federation envelope, memory_import_claude).',
+    inputSchema: {
+        type: 'object',
+        properties: {
+            input: {
+                type: 'string',
+                description: 'Text to analyze',
+            },
+            searchSimilar: {
+                type: 'boolean',
+                description: 'Search for similar known threats',
+                default: true,
+            },
+            k: {
+                type: 'number',
+                description: 'Number of similar patterns to retrieve',
+                default: 5,
+            },
+        },
+        required: ['input'],
+    },
+    handler: async (args) => {
+        {
+            const v = validateText(args.input, 'input');
+            if (!v.valid)
+                return { content: [{ type: 'text', text: JSON.stringify({ error: v.error }) }], isError: true };
+        }
+        const input = args.input;
+        const searchSimilar = args.searchSimilar !== false;
+        const k = args.k || 5;
+        try {
+            const defender = await getAIDefence();
+            const result = await defender.detect(input);
+            const analysis = {
+                detection: {
+                    safe: result.safe,
+                    threats: result.threats,
+                    piiFound: result.piiFound,
+                },
+                mitigations: [],
+                similarPatterns: [],
+            };
+            // Get mitigations for detected threats
+            for (const threat of result.threats) {
+                const mitigation = await defender.getBestMitigation(threat.type);
+                if (mitigation) {
+                    analysis.mitigations.push({
+                        threatType: threat.type,
+                        strategy: mitigation.strategy,
+                        effectiveness: mitigation.effectiveness,
+                    });
+                }
+            }
+            // Search similar patterns
+            if (searchSimilar) {
+                const similar = await defender.searchSimilarThreats(input, { k });
+                analysis.similarPatterns = similar.map(p => ({
+                    pattern: p.pattern,
+                    type: p.type,
+                    effectiveness: p.effectiveness,
+                }));
+            }
+            return {
+                content: [{
+                        type: 'text',
+                        text: JSON.stringify(analysis, null, 2),
+                    }],
+            };
+        }
+        catch (error) {
+            return {
+                content: [{
+                        type: 'text',
+                        text: JSON.stringify({ error: String(error) }),
+                    }],
+                isError: true,
+            };
+        }
+    },
+};
+/**
+ * Get detection statistics
+ */
+const aidefenceStatsTool = {
+    name: 'aidefence_stats',
+    description: 'Get AIDefence detection and learning statistics. Use when nothing native exists — Claude Code does not have a PII / prompt-injection / adversarial-text scanner. Pair with any tool that ingests untrusted input (browser scrape, federation envelope, memory_import_claude).',
+    inputSchema: {
+        type: 'object',
+        properties: {},
+    },
+    handler: async () => {
+        try {
+            const defender = await getAIDefence();
+            const stats = await defender.getStats();
+            return {
+                content: [{
+                        type: 'text',
+                        text: JSON.stringify({
+                            // Underlying defender stats (from full detect() calls via aidefence_scan/aidefence_analyze)
+                            detectionCount: stats.detectionCount,
+                            avgDetectionTimeMs: stats.avgDetectionTimeMs,
+                            learnedPatterns: stats.learnedPatterns,
+                            mitigationStrategies: stats.mitigationStrategies,
+                            avgMitigationEffectiveness: stats.avgMitigationEffectiveness,
+                            // ADR-093 follow-up: wrapper-level stats for the lightweight
+                            // tools that bypass the defender's own counters. Audit found
+                            // these stayed at 0 even after has_pii/is_safe/scan-quick
+                            // calls — these counters surface real activity.
+                            wrapper: {
+                                hasPiiCalls: wrapperStats.hasPiiCalls,
+                                hasPiiHits: wrapperStats.hasPiiHits,
+                                isSafeCalls: wrapperStats.isSafeCalls,
+                                isSafeUnsafeVerdicts: wrapperStats.isSafeUnsafeVerdicts,
+                                quickScanCalls: wrapperStats.quickScanCalls,
+                                quickScanThreats: wrapperStats.quickScanThreats,
+                            },
+                        }, null, 2),
+                    }],
+            };
+        }
+        catch (error) {
+            return {
+                content: [{
+                        type: 'text',
+                        text: JSON.stringify({ error: String(error) }),
+                    }],
+                isError: true,
+            };
+        }
+    },
+};
+/**
+ * Record detection feedback for learning
+ */
+const aidefenceLearnTool = {
+    name: 'aidefence_learn',
+    description: 'Record detection feedback for pattern learning. Improves future detection accuracy. Use when nothing native exists — Claude Code does not have a PII / prompt-injection / adversarial-text scanner. Pair with any tool that ingests untrusted input (browser scrape, federation envelope, memory_import_claude).',
+    inputSchema: {
+        type: 'object',
+        properties: {
+            input: {
+                type: 'string',
+                description: 'Original input that was scanned',
+            },
+            wasAccurate: {
+                type: 'boolean',
+                description: 'Whether the detection was accurate',
+            },
+            verdict: {
+                type: 'string',
+                description: 'User verdict or correction',
+            },
+            threatType: {
+                type: 'string',
+                description: 'Threat type for mitigation recording',
+            },
+            mitigationStrategy: {
+                type: 'string',
+                description: 'Mitigation strategy used',
+                enum: ['block', 'sanitize', 'warn', 'log', 'escalate', 'transform', 'redirect'],
+            },
+            mitigationSuccess: {
+                type: 'boolean',
+                description: 'Whether the mitigation was successful',
+            },
+        },
+        required: ['input', 'wasAccurate'],
+    },
+    handler: async (args) => {
+        {
+            const v = validateText(args.input, 'input');
+            if (!v.valid)
+                return { content: [{ type: 'text', text: JSON.stringify({ error: v.error }) }], isError: true };
+        }
+        if (args.verdict) {
+            const v = validateText(args.verdict, 'verdict');
+            if (!v.valid)
+                return { content: [{ type: 'text', text: JSON.stringify({ error: v.error }) }], isError: true };
+        }
+        if (args.threatType) {
+            const v = validateIdentifier(args.threatType, 'threatType');
+            if (!v.valid)
+                return { content: [{ type: 'text', text: JSON.stringify({ error: v.error }) }], isError: true };
+        }
+        const input = args.input;
+        const wasAccurate = args.wasAccurate;
+        const verdict = args.verdict;
+        const threatType = args.threatType;
+        const mitigationStrategy = args.mitigationStrategy;
+        const mitigationSuccess = args.mitigationSuccess;
+        try {
+            const defender = await getAIDefence();
+            // Re-detect to get result for learning
+            const result = await defender.detect(input);
+            // Learn from detection
+            await defender.learnFromDetection(input, result, {
+                wasAccurate,
+                userVerdict: verdict,
+            });
+            // Record mitigation if provided
+            if (threatType && mitigationStrategy && mitigationSuccess !== undefined) {
+                await defender.recordMitigation(threatType, mitigationStrategy, mitigationSuccess);
+            }
+            return {
+                content: [{
+                        type: 'text',
+                        text: JSON.stringify({
+                            success: true,
+                            message: 'Feedback recorded for pattern learning',
+                            learnedFrom: {
+                                input: input.slice(0, 50) + (input.length > 50 ? '...' : ''),
+                                wasAccurate,
+                                threatCount: result.threats.length,
+                            },
+                        }, null, 2),
+                    }],
+            };
+        }
+        catch (error) {
+            return {
+                content: [{
+                        type: 'text',
+                        text: JSON.stringify({ error: String(error) }),
+                    }],
+                isError: true,
+            };
+        }
+    },
+};
+/**
+ * Check if input is safe (simple boolean check)
+ */
+const aidefenceIsSafeTool = {
+    name: 'aidefence_is_safe',
+    description: 'Quick boolean check if input is safe. Fastest option for simple validation. Use when nothing native exists — Claude Code does not have a PII / prompt-injection / adversarial-text scanner. Pair with any tool that ingests untrusted input (browser scrape, federation envelope, memory_import_claude).',
+    inputSchema: {
+        type: 'object',
+        properties: {
+            input: {
+                type: 'string',
+                description: 'Text to check',
+            },
+        },
+        required: ['input'],
+    },
+    handler: async (args) => {
+        {
+            const v = validateText(args.input, 'input');
+            if (!v.valid)
+                return { content: [{ type: 'text', text: JSON.stringify({ error: v.error }) }], isError: true };
+        }
+        const input = args.input;
+        try {
+            // Route through the singleton so wrapper stats track this call,
+            // and so a single defender controls both the prompt-injection model
+            // and the PII detector.
+            const defender = await getAIDefence();
+            const { isSafe } = await import('@claude-flow/aidefence');
+            const promptSafe = isSafe(input);
+            let piiPresent = false;
+            try {
+                piiPresent = !!defender.hasPII(input);
+            }
+            catch { /* hasPII unavailable */ }
+            const safe = promptSafe && !piiPresent;
+            wrapperStats.isSafeCalls++;
+            if (!safe)
+                wrapperStats.isSafeUnsafeVerdicts++;
+            return {
+                content: [{
+                        type: 'text',
+                        text: JSON.stringify({
+                            safe,
+                            promptSafe,
+                            piiPresent,
+                        }, null, 2),
+                    }],
+            };
+        }
+        catch (error) {
+            return {
+                content: [{
+                        type: 'text',
+                        text: JSON.stringify({ error: String(error) }),
+                    }],
+                isError: true,
+            };
+        }
+    },
+};
+/**
+ * Check for PII in input
+ */
+const aidefenceHasPIITool = {
+    name: 'aidefence_has_pii',
+    description: 'Check if input contains PII (emails, SSNs, API keys, passwords, etc.). Use when nothing native exists — Claude Code does not have a PII / prompt-injection / adversarial-text scanner. Pair with any tool that ingests untrusted input (browser scrape, federation envelope, memory_import_claude).',
+    inputSchema: {
+        type: 'object',
+        properties: {
+            input: {
+                type: 'string',
+                description: 'Text to check for PII',
+            },
+        },
+        required: ['input'],
+    },
+    handler: async (args) => {
+        {
+            const v = validateText(args.input, 'input');
+            if (!v.valid)
+                return { content: [{ type: 'text', text: JSON.stringify({ error: v.error }) }], isError: true };
+        }
+        const input = args.input;
+        try {
+            const defender = await getAIDefence();
+            const hasPII = defender.hasPII(input);
+            wrapperStats.hasPiiCalls++;
+            if (hasPII)
+                wrapperStats.hasPiiHits++;
+            return {
+                content: [{
+                        type: 'text',
+                        text: JSON.stringify({ hasPII }, null, 2),
+                    }],
+            };
+        }
+        catch (error) {
+            return {
+                content: [{
+                        type: 'text',
+                        text: JSON.stringify({ error: String(error) }),
+                    }],
+                isError: true,
+            };
+        }
+    },
+};
+/**
+ * Export all security tools
+ */
+export const securityTools = [
+    aidefenceScanTool,
+    aidefenceAnalyzeTool,
+    aidefenceStatsTool,
+    aidefenceLearnTool,
+    aidefenceIsSafeTool,
+    aidefenceHasPIITool,
+];
+export default securityTools;
+//# sourceMappingURL=security-tools.js.map

package/dist/src/mcp-tools/session-tools.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Session MCP Tools for CLI
+ *
+ * Tool definitions for session management with file persistence.
+ */
+import { type MCPTool } from './types.js';
+export declare const sessionTools: MCPTool[];
+//# sourceMappingURL=session-tools.d.ts.map