@claude-flow/cli 3.32.30 → 3.32.32

package/.claude/helpers/helpers.manifest.json

@@ -1,6 +1,6 @@
 {
   "manifest": {
-    "version": "3.32.30",
+    "version": "3.32.32",
     "files": {
       "auto-memory-hook.mjs": "68be7e9a9eba7bf9c4e8a230db7bf61a243b965639f8504842799d6c6ca28762",
       "hook-handler.cjs": "50ea92a72651bdc95634f7588d56a5870963168eef5226f66ed14af3b47c8d9a",
@@ -8,6 +8,6 @@
       "statusline.cjs": "d2a0eac56d1267d8dbed2d70b09feb592299469196ec4b215909f2b052144882"
     }
   },
-  "signature": "6wQg/DXPVzG1hEnZzI0RcEi/6wfUnXyFYZ09Ho7jVHz84sbuX1flCWZA3qq5c8BvUtZ9/oCs9GOpEnMykGk4CA==",
+  "signature": "04DvDI9kCGvy1HIskgegJsTnGUTgnDBMGTb/c+ef/hy3XgM4WvpHb6xePaWraB6YQ4F41+4BZRi4ZeBWBrVbBA==",
   "algorithm": "ed25519"
 }

package/catalog-manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 1,
   "generation": 3,
-  "generatedAt": "2026-07-29T05:35:40.000Z",
-  "gitSha": "1385e21b",
+  "generatedAt": "2026-07-29T12:41:44.000Z",
+  "gitSha": "388849b3",
   "catalog": {
     "agents": 164,
     "tools": 395,

package/dist/src/autopilot-state.d.ts

@@ -61,6 +61,16 @@ export declare function validateNumber(value: unknown, min: number, max: number,
  * Returns only valid sources; falls back to defaults if none are valid.
  */
 export declare function validateTaskSources(sources: unknown): string[];
+export type TaskSourceValidation = {
+    valid: true;
+    sources: string[];
+} | {
+    valid: false;
+    invalidSources: string[];
+    reason: string;
+};
+/** Strictly validate user-supplied task sources without enabling defaults. */
+export declare function validateConfiguredTaskSources(sources: unknown): TaskSourceValidation;
 export declare function getDefaultState(): AutopilotState;
 export declare function loadState(): AutopilotState;
 export declare function saveState(state: AutopilotState): void;

package/dist/src/autopilot-state.js

@@ -74,6 +74,22 @@ export function validateTaskSources(sources) {
         .filter(s => VALID_TASK_SOURCES.has(s));
     return valid.length > 0 ? valid : defaults;
 }
+/** Strictly validate user-supplied task sources without enabling defaults. */
+export function validateConfiguredTaskSources(sources) {
+    if (!Array.isArray(sources) || sources.length === 0) {
+        return { valid: false, invalidSources: [], reason: 'At least one task source is required' };
+    }
+    const normalized = sources.map(source => typeof source === 'string' ? source.trim() : String(source));
+    const invalidSources = normalized.filter(source => !VALID_TASK_SOURCES.has(source));
+    if (invalidSources.length > 0) {
+        return {
+            valid: false,
+            invalidSources,
+            reason: `Unsupported task source(s): ${invalidSources.join(', ')}`,
+        };
+    }
+    return { valid: true, sources: [...new Set(normalized)] };
+}
 // ── State Management ──────────────────────────────────────────
 export function getDefaultState() {
     return {

package/dist/src/commands/autopilot.js

@@ -5,7 +5,7 @@
  * ADR-072: Autopilot Integration
  */
 import { output } from '../output.js';
-import { loadState, saveState, appendLog, loadLog, discoverTasks, getProgress, calculateReward, tryLoadLearning, validateNumber, validateTaskSources, LOG_FILE, } from '../autopilot-state.js';
+import { loadState, saveState, appendLog, loadLog, discoverTasks, getProgress, calculateReward, tryLoadLearning, validateNumber, validateConfiguredTaskSources, VALID_TASK_SOURCES, LOG_FILE, } from '../autopilot-state.js';
 import { getCheckpointGate, CheckpointGate } from '../services/checkpoint-gate.js';
 /**
  * Opt-in checkpoint/rollback gate for the autopilot tick (agenticow step 3).
@@ -183,7 +183,7 @@ const configCommand = {
     options: [
         { name: 'max-iterations', type: 'string', description: 'Max re-engagement iterations (1-1000)' },
         { name: 'timeout', type: 'string', description: 'Timeout in minutes (1-1440)' },
-        { name: 'task-sources', type: 'string', description: 'Comma-separated task sources' },
+        { name: 'task-sources', type: 'string', description: `Comma-separated task sources: ${[...VALID_TASK_SOURCES].join(', ')}` },
     ],
     action: async (ctx) => {
         const state = loadState();
@@ -194,8 +194,14 @@ const configCommand = {
             state.maxIterations = validateNumber(maxIter, 1, 1000, state.maxIterations);
         if (timeout)
             state.timeoutMinutes = validateNumber(timeout, 1, 1440, state.timeoutMinutes);
-        if (sources)
-            state.taskSources = validateTaskSources(sources.split(',').map(s => s.trim()).filter(Boolean));
+        if (sources !== undefined) {
+            const validation = validateConfiguredTaskSources(sources.split(',').map(s => s.trim()).filter(Boolean));
+            if (!validation.valid) {
+                output.printError(`${validation.reason}. Valid sources: ${[...VALID_TASK_SOURCES].join(', ')}`);
+                return { success: false, exitCode: 1 };
+            }
+            state.taskSources = validation.sources;
+        }
         saveState(state);
         appendLog({ ts: Date.now(), event: 'config-updated', maxIterations: state.maxIterations, timeoutMinutes: state.timeoutMinutes, taskSources: state.taskSources });
         output.writeln(`Config updated: maxIterations=${state.maxIterations}, timeout=${state.timeoutMinutes}min, sources=${state.taskSources.join(',')}`);

package/dist/src/mcp-tools/autopilot-tools.js

@@ -8,7 +8,7 @@
  * @module @claude-flow/cli/mcp-tools/autopilot
  */
 import { validateText } from './validate-input.js';
-import { loadState, saveState, appendLog, loadLog, discoverTasks, isTerminal, tryLoadLearning, validateNumber, validateTaskSources, VALID_TASK_SOURCES, } from '../autopilot-state.js';
+import { loadState, saveState, appendLog, loadLog, discoverTasks, isTerminal, tryLoadLearning, validateNumber, validateConfiguredTaskSources, VALID_TASK_SOURCES, } from '../autopilot-state.js';
 function ok(data) {
     return { content: [{ type: 'text', text: JSON.stringify(data, null, 2) }] };
 }
@@ -71,7 +71,12 @@ const autopilotConfig = {
         properties: {
             maxIterations: { type: 'number', description: 'Max re-engagement iterations (1-1000)' },
             timeoutMinutes: { type: 'number', description: 'Timeout in minutes (1-1440)' },
-            taskSources: { type: 'array', items: { type: 'string' }, description: `Task sources: ${[...VALID_TASK_SOURCES].join(', ')}` },
+            taskSources: {
+                type: 'array',
+                minItems: 1,
+                items: { type: 'string', enum: [...VALID_TASK_SOURCES] },
+                description: `Task sources: ${[...VALID_TASK_SOURCES].join(', ')}`,
+            },
         },
     },
     handler: async (params) => {
@@ -83,7 +88,17 @@ const autopilotConfig = {
             state.timeoutMinutes = validateNumber(params.timeoutMinutes, 1, 1440, state.timeoutMinutes);
         }
         if (params.taskSources !== undefined) {
-            state.taskSources = validateTaskSources(params.taskSources);
+            const validation = validateConfiguredTaskSources(params.taskSources);
+            if (!validation.valid) {
+                return {
+                    content: [{ type: 'text', text: JSON.stringify({
+                                error: validation.reason,
+                                validSources: [...VALID_TASK_SOURCES],
+                            }) }],
+                    isError: true,
+                };
+            }
+            state.taskSources = validation.sources;
         }
         saveState(state);
         return ok({ maxIterations: state.maxIterations, timeoutMinutes: state.timeoutMinutes, taskSources: state.taskSources });

package/dist/src/services/harness-flywheel-runtime.d.ts

@@ -1,6 +1,26 @@
 import { type FlywheelResult } from './harness-flywheel.js';
 import { type GenerationResult } from './harness-flywheel-generations.js';
-import { type DarwinInvoker, type ProposerMode } from './flywheel-proposer.js';
+import { type DarwinInvoker, type ProposerMode, type SafetyEnvelope } from './flywheel-proposer.js';
+/**
+ * The ADR-322 retrieval safety envelope.
+ *
+ * It MUST describe the policy surface the proposer actually emits —
+ * `RetrievalConfig`. The v1 envelope allowed `topK`/`rerank`, which are
+ * `neural_patterns` search-call arguments not representable in
+ * `RetrievalConfig`, while omitting the three weight axes that
+ * `retrievalPolicyNeighbors` does mutate. Because `validateCandidate` checks
+ * EVERY key of a candidate policy (candidates are full snapshots, not deltas),
+ * that drift made every locally-proposed candidate inadmissible and the local
+ * evaluation path unreachable — no receipt, therefore no promotion, ever.
+ *
+ * Every axis carries a finite bound: an allowed key WITHOUT bounds is an
+ * unbounded key, because `validateCandidate` applies bounds only when present.
+ * A Darwin proposer could otherwise submit arbitrary weights on the three axes.
+ *
+ * Exported so tests can bind the REAL envelope to the REAL proposer; the drift
+ * survived review precisely because no test wired those two together.
+ */
+export declare function retrievalSafetyEnvelope(ref?: string): SafetyEnvelope;
 /**
  * Run one live flywheel tick against `projectRoot`. Opt-in + $0 default: with
  * RUFLO_HARNESS_LOOP unset it is a no-op. Best-effort; never throws.

package/dist/src/services/harness-flywheel-runtime.js

@@ -24,6 +24,51 @@ const ANCHOR = [
     ['Q-learning encoder keyword block', ['q-state encoder', 'route q-state', 'keyword block', '#2239', 'q-encoder']],
     ['security hardening crypto random IDs', ['cwe-347', 'crypto.randomuuid', 'security fix', 'random id', 'crypto random']],
 ].map(([q, labels], i) => ({ id: `q${String(i).padStart(2, '0')}`, input: { id: `q${String(i).padStart(2, '0')}`, q: q }, expected: labels }));
+/**
+ * The ADR-322 retrieval safety envelope.
+ *
+ * It MUST describe the policy surface the proposer actually emits —
+ * `RetrievalConfig`. The v1 envelope allowed `topK`/`rerank`, which are
+ * `neural_patterns` search-call arguments not representable in
+ * `RetrievalConfig`, while omitting the three weight axes that
+ * `retrievalPolicyNeighbors` does mutate. Because `validateCandidate` checks
+ * EVERY key of a candidate policy (candidates are full snapshots, not deltas),
+ * that drift made every locally-proposed candidate inadmissible and the local
+ * evaluation path unreachable — no receipt, therefore no promotion, ever.
+ *
+ * Every axis carries a finite bound: an allowed key WITHOUT bounds is an
+ * unbounded key, because `validateCandidate` applies bounds only when present.
+ * A Darwin proposer could otherwise submit arbitrary weights on the three axes.
+ *
+ * Exported so tests can bind the REAL envelope to the REAL proposer; the drift
+ * survived review precisely because no test wired those two together.
+ */
+export function retrievalSafetyEnvelope(ref) {
+    const allowedPolicyKeys = ['alpha', 'subjectWeight', 'mmrLambda', 'bodyWeight', 'typePenaltyFactor'];
+    const numericBounds = {
+        alpha: { min: 0.1, max: 0.9 },
+        subjectWeight: { min: 0.1, max: 10 },
+        mmrLambda: { min: 0.3, max: 0.9 },
+        bodyWeight: { min: 0.1, max: 10 },
+        typePenaltyFactor: { min: 0.1, max: 10 },
+    };
+    return {
+        ref: ref ?? sha256Ref(JSON.stringify({
+            schema: 'ruflo.retrieval-safety-envelope/v2',
+            allowedPolicyKeys,
+            numericBounds,
+        })),
+        allowedPolicyKeys,
+        numericBounds,
+        // Retrieval evaluations are local and report zero provider spend today;
+        // finite ceilings make any future resource evidence fail closed.
+        maxP95LatencyMicros: 5_000_000,
+        maxCostMicrosPerTask: 10_000,
+        maxTokensPerTask: 100_000,
+        maxFailureRate: 0.01,
+        maxEvaluationCostMicros: 1_000_000,
+    };
+}
 /**
  * Run one live flywheel tick against `projectRoot`. Opt-in + $0 default: with
  * RUFLO_HARNESS_LOOP unset it is a no-op. Best-effort; never throws.
@@ -53,30 +98,7 @@ export async function runFlywheelWorker(projectRoot, opts = {}) {
             ...DEFAULT_CONFIG,
             ...(applier.activeChampion(projectRoot)?.params ?? {}),
         };
-        const safetyEnvelope = {
-            ref: opts.safetyEnvelopeRef ?? sha256Ref(JSON.stringify({
-                schema: 'ruflo.retrieval-safety-envelope/v1',
-                allowedPolicyKeys: ['alpha', 'topK', 'rerank', 'mmrLambda'],
-                numericBounds: {
-                    alpha: { min: 0.1, max: 0.9 },
-                    topK: { min: 5, max: 20 },
-                    mmrLambda: { min: 0.3, max: 0.9 },
-                },
-            })),
-            allowedPolicyKeys: ['alpha', 'topK', 'rerank', 'mmrLambda'],
-            numericBounds: {
-                alpha: { min: 0.1, max: 0.9 },
-                topK: { min: 5, max: 20 },
-                mmrLambda: { min: 0.3, max: 0.9 },
-            },
-            // Retrieval evaluations are local and report zero provider spend today;
-            // finite ceilings make any future resource evidence fail closed.
-            maxP95LatencyMicros: 5_000_000,
-            maxCostMicrosPerTask: 10_000,
-            maxTokensPerTask: 100_000,
-            maxFailureRate: 0.01,
-            maxEvaluationCostMicros: 1_000_000,
-        };
+        const safetyEnvelope = retrievalSafetyEnvelope(opts.safetyEnvelopeRef);
         // CLI flag opts.proposer takes precedence over RUFLO_FLYWHEEL_PROPOSER.
         const proposerMode = opts.proposer
             ?? (process.env.RUFLO_FLYWHEEL_PROPOSER ?? 'auto');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@claude-flow/cli",
-  "version": "3.32.30",
+  "version": "3.32.32",
   "type": "module",
   "description": "Ruflo CLI - Enterprise AI agent orchestration with 60+ specialized agents, swarm coordination, MCP server, self-learning hooks, and vector memory for Claude Code",
   "main": "dist/src/index.js",