@claude-flow/cli 3.32.41 → 3.34.0

package/.claude/helpers/.helpers-version

@@ -1 +1 @@
-3.32.40
+3.32.29

package/.claude/helpers/helpers.manifest.json

@@ -1,6 +1,6 @@
 {
   "manifest": {
-    "version": "3.32.41",
+    "version": "3.34.0",
     "files": {
       "auto-memory-hook.mjs": "68be7e9a9eba7bf9c4e8a230db7bf61a243b965639f8504842799d6c6ca28762",
       "hook-handler.cjs": "dae295fb9ae2626b89899c19a20cc911541af82b52d2eeb9b214d618b96e9a86",
@@ -8,6 +8,6 @@
       "statusline.cjs": "0457fe53f8cd2c56458ff178392536a5868efd1a573665fa43bc01d2d95ca677"
     }
   },
-  "signature": "E9neB/wxzCHAXPsX8ICLwt7X02M0joPEtF9kqHMH6qBp6y0C5OblOxerCq/AOE+8UrtsA/utlCpnmdQL6iHqDw==",
+  "signature": "GyTvYvhL7vIta/4yyz1rIyl+DWJ+x4dJVfmcrKZJXlh4E/TcQK2bszRznlaG1o7LWSZTudaYj50w+/7dlv6lDg==",
   "algorithm": "ed25519"
 }

package/README.md

@@ -1,8 +1,6 @@
 <div align="center">
 
 [![Ruflo Banner](ruflo/assets/ruflo-small.jpeg)](https://cognitum.one/agentic-engineering)
-[![Agentics Foundation Banner](docs/assets/sv-summit.png)](https://agentics.org/siliconvalley/?UTM=GH-RuFlo-SV)
-
 
 <!-- Try Ruflo — the 4 badges first-time visitors actually act on -->
 [![Try the UI Beta — flo.ruv.io](https://img.shields.io/badge/_Try_the_UI_Beta-flo.ruv.io-6366f1?style=for-the-badge&logoColor=white&logo=svelte)](https://flo.ruv.io/)

package/catalog-manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 1,
   "generation": 4,
-  "generatedAt": "2026-07-30T16:29:15.655Z",
-  "gitSha": "48d532b4",
+  "generatedAt": "2026-07-31T15:55:49.000Z",
+  "gitSha": "4ac1ab9f",
   "catalog": {
     "agents": 164,
     "tools": 397,

package/dist/src/commands/agent.js

@@ -6,6 +6,7 @@ import { output } from '../output.js';
 import { select, confirm, input } from '../prompt.js';
 import { callMCPTool, MCPClientError } from '../mcp-client.js';
 import { wasmSubcommands } from './agent-wasm.js';
+import { agentPublishCommand } from './agntcy/publish.js';
 import * as fs from 'fs';
 import * as path from 'path';
 /**
@@ -906,7 +907,7 @@ function formatLogLevel(level) {
 export const agentCommand = {
     name: 'agent',
     description: 'Agent management commands',
-    subcommands: [spawnCommand, listCommand, statusCommand, stopCommand, metricsCommand, poolCommand, healthCommand, logsCommand, ...wasmSubcommands],
+    subcommands: [spawnCommand, listCommand, statusCommand, stopCommand, metricsCommand, poolCommand, healthCommand, logsCommand, ...wasmSubcommands, agentPublishCommand],
     options: [],
     examples: [
         { command: 'claude-flow agent spawn -t coder', description: 'Spawn a coder agent' },

package/dist/src/commands/agntcy/index.d.ts

@@ -0,0 +1,64 @@
+/**
+ * V3 CLI AGNTCY/Outshift Runtime Integration — ADR-380 §2.
+ *
+ * Scaffolds the three new `ruflo` CLI verbs ADR-380 §2 specifies:
+ *
+ *   ruflo transport use slim
+ *   ruflo agent publish
+ *   ruflo swarm join <namespace>
+ *
+ * ============================================================================
+ * INTEGRATION STATUS: NOT WIRED IN. This module is intentionally
+ * self-contained and is NOT imported by, or registered with, the CLI's
+ * central command registry/index. A later, separate pass must:
+ *
+ *   1. Add `transportCommand` as a new top-level command (alongside
+ *      `agent`, `swarm`, etc. in whatever file enumerates top-level
+ *      commands today).
+ *   2. Merge `agentPublishCommand` into the existing `agentCommand`'s
+ *      `subcommands` array in `../agent.ts`.
+ *   3. Merge `swarmJoinCommand` into the existing `swarmCommand`'s
+ *      `subcommands` array in `../swarm.ts`.
+ *   4. Decide (per ADR-380's own "Open Questions") whether `transport use`
+ *      is a per-swarm or global-session setting before wiring state
+ *      persistence for the selected transport.
+ *
+ * No file outside `v3/@claude-flow/cli/src/commands/agntcy/` is touched by
+ * this scaffold.
+ * ============================================================================
+ *
+ * ARCHITECTURAL CONSTRAINT (mirrors ADR-150 §"architectural constraint",
+ * which ADR-380 §1 explicitly follows):
+ *   - No `@claude-flow/agntcy` (or any other AGNTCY/SLIM/Outshift) package
+ *     exists on npm or crates.io yet — verified 404 on every plausible
+ *     name. Nothing in this directory statically imports one.
+ *   - Every runtime touchpoint goes through `detectAgntcyRuntime()` in
+ *     `runtime.ts`, which only ever does a guarded dynamic `import()`
+ *     wrapped in try/catch, and only after an explicit
+ *     `RUFLO_AGNTCY_SLIM_ENDPOINT` env var opt-in.
+ *   - Every command in this directory exits 0 (not an error) when AGNTCY/
+ *     SLIM is not configured — this is optional, removable augmentation,
+ *     not a required dependency. The CLI, and these commands' own local
+ *     fallback behavior, work identically whether or not this directory
+ *     exists at all.
+ *
+ * Created with care by ruv.io
+ */
+import type { Command } from '../../types.js';
+export { transportCommand, useCommand } from './transport.js';
+export { agentPublishCommand } from './publish.js';
+export { swarmJoinCommand } from './swarm-join.js';
+export { detectAgntcyRuntime, AGNTCY_ENDPOINT_ENV, AGNTCY_PACKAGE_NAME, AGNTCY_ADR_PATH, AGNTCY_NOT_CONFIGURED_MESSAGE, } from './runtime.js';
+export type { AgntcyRuntimeStatus } from './runtime.js';
+export { validateOasfRecordShape, } from './publish.js';
+export type { OasfAgentRecordShape, OasfValidationResult } from './publish.js';
+export { validateNamespace } from './swarm-join.js';
+/**
+ * Convenience bundle for the later integration pass — NOT a registered
+ * command tree itself (there is no top-level `agntcy` verb per ADR-380;
+ * each of these attaches to an existing or new top-level command per the
+ * mapping documented above).
+ */
+export declare const agntcyCommands: readonly Command[];
+export default agntcyCommands;
+//# sourceMappingURL=index.d.ts.map

package/dist/src/commands/agntcy/index.js

@@ -0,0 +1,64 @@
+/**
+ * V3 CLI AGNTCY/Outshift Runtime Integration — ADR-380 §2.
+ *
+ * Scaffolds the three new `ruflo` CLI verbs ADR-380 §2 specifies:
+ *
+ *   ruflo transport use slim
+ *   ruflo agent publish
+ *   ruflo swarm join <namespace>
+ *
+ * ============================================================================
+ * INTEGRATION STATUS: NOT WIRED IN. This module is intentionally
+ * self-contained and is NOT imported by, or registered with, the CLI's
+ * central command registry/index. A later, separate pass must:
+ *
+ *   1. Add `transportCommand` as a new top-level command (alongside
+ *      `agent`, `swarm`, etc. in whatever file enumerates top-level
+ *      commands today).
+ *   2. Merge `agentPublishCommand` into the existing `agentCommand`'s
+ *      `subcommands` array in `../agent.ts`.
+ *   3. Merge `swarmJoinCommand` into the existing `swarmCommand`'s
+ *      `subcommands` array in `../swarm.ts`.
+ *   4. Decide (per ADR-380's own "Open Questions") whether `transport use`
+ *      is a per-swarm or global-session setting before wiring state
+ *      persistence for the selected transport.
+ *
+ * No file outside `v3/@claude-flow/cli/src/commands/agntcy/` is touched by
+ * this scaffold.
+ * ============================================================================
+ *
+ * ARCHITECTURAL CONSTRAINT (mirrors ADR-150 §"architectural constraint",
+ * which ADR-380 §1 explicitly follows):
+ *   - No `@claude-flow/agntcy` (or any other AGNTCY/SLIM/Outshift) package
+ *     exists on npm or crates.io yet — verified 404 on every plausible
+ *     name. Nothing in this directory statically imports one.
+ *   - Every runtime touchpoint goes through `detectAgntcyRuntime()` in
+ *     `runtime.ts`, which only ever does a guarded dynamic `import()`
+ *     wrapped in try/catch, and only after an explicit
+ *     `RUFLO_AGNTCY_SLIM_ENDPOINT` env var opt-in.
+ *   - Every command in this directory exits 0 (not an error) when AGNTCY/
+ *     SLIM is not configured — this is optional, removable augmentation,
+ *     not a required dependency. The CLI, and these commands' own local
+ *     fallback behavior, work identically whether or not this directory
+ *     exists at all.
+ *
+ * Created with care by ruv.io
+ */
+export { transportCommand, useCommand } from './transport.js';
+export { agentPublishCommand } from './publish.js';
+export { swarmJoinCommand } from './swarm-join.js';
+export { detectAgntcyRuntime, AGNTCY_ENDPOINT_ENV, AGNTCY_PACKAGE_NAME, AGNTCY_ADR_PATH, AGNTCY_NOT_CONFIGURED_MESSAGE, } from './runtime.js';
+export { validateOasfRecordShape, } from './publish.js';
+export { validateNamespace } from './swarm-join.js';
+import { transportCommand } from './transport.js';
+import { agentPublishCommand } from './publish.js';
+import { swarmJoinCommand } from './swarm-join.js';
+/**
+ * Convenience bundle for the later integration pass — NOT a registered
+ * command tree itself (there is no top-level `agntcy` verb per ADR-380;
+ * each of these attaches to an existing or new top-level command per the
+ * mapping documented above).
+ */
+export const agntcyCommands = [transportCommand, agentPublishCommand, swarmJoinCommand];
+export default agntcyCommands;
+//# sourceMappingURL=index.js.map

package/dist/src/commands/agntcy/publish.d.ts

@@ -0,0 +1,43 @@
+/**
+ * V3 CLI `ruflo agent publish` — ADR-380 §2.
+ *
+ * Emits the AGNTCY-identified, OASF-described agent record (produced
+ * build-time by the companion metaharness ADR-240 §2.1/2.2) to the
+ * configured AGNTCY Directory (https://github.com/agntcy/dir).
+ *
+ * This scaffold does NOT implement the Directory publish protocol — no
+ * SLIM/Directory SDK is installable yet (verified 404 on every plausible
+ * npm/crates.io name). It implements the one thing that IS real without
+ * an external SDK: reading a local OASF-shaped manifest off disk (the
+ * artifact metaharness ADR-240 is responsible for producing) and
+ * validating its shape before attempting a publish, so the eventual
+ * network call has a real payload to send rather than being invented at
+ * publish time.
+ *
+ * NOT WIRED INTO THE MAIN CLI ROUTER YET. This file is exported for a
+ * later integration pass to attach as a new subcommand of the existing
+ * `agent` command (`v3/@claude-flow/cli/src/commands/agent.ts`).
+ */
+import type { Command } from '../../types.js';
+/** Minimal shape check for the OASF agent record metaharness ADR-240 §2.1/2.2 produces. */
+export interface OasfAgentRecordShape {
+    name: unknown;
+    version: unknown;
+    identity?: unknown;
+    capabilities?: unknown;
+    [key: string]: unknown;
+}
+export interface OasfValidationResult {
+    valid: boolean;
+    errors: string[];
+}
+/**
+ * Validate that a parsed JSON value looks like an OASF agent record —
+ * deterministic shape check, no network, no LLM. Kept exported so the
+ * test file can exercise it directly without spawning the whole command.
+ */
+export declare function validateOasfRecordShape(record: unknown): OasfValidationResult;
+declare const publishCommand: Command;
+export { publishCommand as agentPublishCommand };
+export default publishCommand;
+//# sourceMappingURL=publish.d.ts.map

package/dist/src/commands/agntcy/publish.js

@@ -0,0 +1,121 @@
+/**
+ * V3 CLI `ruflo agent publish` — ADR-380 §2.
+ *
+ * Emits the AGNTCY-identified, OASF-described agent record (produced
+ * build-time by the companion metaharness ADR-240 §2.1/2.2) to the
+ * configured AGNTCY Directory (https://github.com/agntcy/dir).
+ *
+ * This scaffold does NOT implement the Directory publish protocol — no
+ * SLIM/Directory SDK is installable yet (verified 404 on every plausible
+ * npm/crates.io name). It implements the one thing that IS real without
+ * an external SDK: reading a local OASF-shaped manifest off disk (the
+ * artifact metaharness ADR-240 is responsible for producing) and
+ * validating its shape before attempting a publish, so the eventual
+ * network call has a real payload to send rather than being invented at
+ * publish time.
+ *
+ * NOT WIRED INTO THE MAIN CLI ROUTER YET. This file is exported for a
+ * later integration pass to attach as a new subcommand of the existing
+ * `agent` command (`v3/@claude-flow/cli/src/commands/agent.ts`).
+ */
+import { output } from '../../output.js';
+import { readFile } from 'fs/promises';
+import { AGNTCY_NOT_CONFIGURED_MESSAGE, AGNTCY_PACKAGE_NAME, detectAgntcyRuntime, } from './runtime.js';
+/**
+ * Validate that a parsed JSON value looks like an OASF agent record —
+ * deterministic shape check, no network, no LLM. Kept exported so the
+ * test file can exercise it directly without spawning the whole command.
+ */
+export function validateOasfRecordShape(record) {
+    const errors = [];
+    if (typeof record !== 'object' || record === null || Array.isArray(record)) {
+        return { valid: false, errors: ['record is not a JSON object'] };
+    }
+    const rec = record;
+    if (typeof rec.name !== 'string' || rec.name.trim().length === 0) {
+        errors.push('missing or empty required field "name"');
+    }
+    if (typeof rec.version !== 'string' || rec.version.trim().length === 0) {
+        errors.push('missing or empty required field "version"');
+    }
+    return { valid: errors.length === 0, errors };
+}
+const DEFAULT_MANIFEST_PATH = '.agntcy/agent.oasf.json';
+const publishCommand = {
+    name: 'publish',
+    description: 'Publish the AGNTCY-identified, OASF-described agent record to the configured Directory (ADR-380 §2)',
+    options: [
+        {
+            name: 'manifest',
+            short: 'm',
+            description: 'Path to the OASF agent record produced by metaharness (ADR-240)',
+            type: 'string',
+            default: DEFAULT_MANIFEST_PATH,
+        },
+    ],
+    examples: [
+        { command: 'ruflo agent publish', description: 'Publish the local OASF agent record to the AGNTCY Directory' },
+        { command: 'ruflo agent publish --manifest ./out/agent.oasf.json', description: 'Publish a specific manifest' },
+    ],
+    action: async (ctx) => {
+        const manifestPath = ctx.flags.manifest || DEFAULT_MANIFEST_PATH;
+        // Step 1 (real, no SDK needed): locate + shape-validate the manifest.
+        let raw;
+        try {
+            raw = await readFile(manifestPath, 'utf-8');
+        }
+        catch {
+            output.printError(`No OASF agent record found at "${manifestPath}". Run the metaharness ADR-240 build step first, ` +
+                'or pass --manifest <path>.');
+            return { success: false, exitCode: 1 };
+        }
+        let parsed;
+        try {
+            parsed = JSON.parse(raw);
+        }
+        catch (error) {
+            output.printError(`"${manifestPath}" is not valid JSON: ${error instanceof Error ? error.message : String(error)}`);
+            return { success: false, exitCode: 1 };
+        }
+        const validation = validateOasfRecordShape(parsed);
+        if (!validation.valid) {
+            output.printError(`"${manifestPath}" is not a valid OASF agent record:`);
+            for (const err of validation.errors) {
+                output.writeln(`  - ${err}`);
+            }
+            return { success: false, exitCode: 1 };
+        }
+        // Step 2 (stub, requires the not-yet-published runtime): the actual
+        // Directory publish call.
+        const status = await detectAgntcyRuntime();
+        if (!status.configured) {
+            output.printInfo(AGNTCY_NOT_CONFIGURED_MESSAGE);
+            output.printInfo(`Validated OASF record at "${manifestPath}" locally (name=${parsed.name}, ` +
+                `version=${parsed.version}); publish to the Directory was skipped.`);
+            return {
+                success: true,
+                data: { published: false, manifestPath, configured: false, reason: status.reason },
+            };
+        }
+        try {
+            const mod = (await import(AGNTCY_PACKAGE_NAME));
+            if (typeof mod.publishAgentRecord !== 'function') {
+                throw new Error(`"${AGNTCY_PACKAGE_NAME}" is installed but does not export publishAgentRecord()`);
+            }
+            const result = await mod.publishAgentRecord({
+                endpoint: status.endpoint,
+                record: parsed,
+            });
+            output.printSuccess(`Published agent record${result?.uri ? ` to ${result.uri}` : ''}.`);
+            return { success: true, data: { published: true, manifestPath, uri: result?.uri } };
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : String(error);
+            output.printError(`Directory publish failed: ${message}`);
+            return { success: true, data: { published: false, manifestPath, error: message } };
+        }
+    },
+};
+export { publishCommand as agentPublishCommand };
+export default publishCommand;
+//# sourceMappingURL=publish.js.map

package/dist/src/commands/agntcy/runtime.d.ts

@@ -0,0 +1,90 @@
+/**
+ * V3 CLI AGNTCY/SLIM Runtime Presence Check — ADR-380 §1.
+ *
+ * ADR-380 introduces three new `ruflo` CLI verbs (`transport use slim`,
+ * `agent publish`, `swarm join <namespace>`) that talk to Cisco Outshift's
+ * AGNTCY ecosystem (SLIM transport, Directory publish, group membership).
+ *
+ * CORRECTED (2026-07-31): the original scaffold guessed at a package name
+ * (`@claude-flow/agntcy`) and concluded no real SLIM SDK existed anywhere.
+ * That check only tried guessed names — the real package is
+ * `@agntcy/slim-bindings` (npm, real, published, documented for plain
+ * Node.js use).
+ *
+ * `@agntcy/slim-bindings@1.4.1` (npm `latest`) fails to load in plain Node —
+ * a transitive dependency (`uniffi-bindgen-react-native`) ships raw,
+ * uncompiled TypeScript as its package.json `main`, which only works inside
+ * a bundler (Metro, for its React Native use case). Filed upstream:
+ * agntcy/slim#1916 and jhugman/uniffi-bindgen-react-native#422 (root cause).
+ *
+ * UPDATE (2026-07-31, later): the SLIM maintainers confirmed they've moved
+ * off `uniffi-bindgen-react-native` onto `@ubjs/core`/`@ubjs/node` (compiled
+ * output, not raw TS) in the `alpha` dist-tag (`2.0.0-alpha.4+`), not yet
+ * promoted to `latest`. Verified live: a real server-bring-up + client-
+ * connect + graceful-shutdown smoke test against `@agntcy/slim-bindings@
+ * 2.0.0-alpha.5` succeeds under plain Node with zero errors. `package.json`
+ * now pins that exact alpha version (not a caret range — this is a
+ * pre-release channel, pin deliberately rather than floating) until the fix
+ * is promoted to `latest`, tracked by the same issue.
+ *
+ * This module's existing graceful-degradation design already handled this
+ * correctly without any change to its logic: `detectAgntcyRuntime()`'s
+ * catch-all branch (anything other than MODULE_NOT_FOUND) reports the real
+ * underlying error and falls back to local transport when the import fails.
+ * Now that the pinned version actually loads, the happy path
+ * (`configured: true`) is real and verified, not aspirational — no change
+ * to this function was needed either way.
+ *
+ * Per ADR-150's precedent (which ADR-380 §1 explicitly follows, not
+ * ADR-321's hard-dependency exception):
+ *   - removable:            deleting this whole directory changes nothing
+ *                            about the rest of the CLI working.
+ *   - optional-only:        `@agntcy/slim-bindings` MUST live in
+ *                            optionalDependencies, never `dependencies`.
+ *   - graceful degradation: every caller of `detectAgntcyRuntime()` falls
+ *                            back to the local transport / existing
+ *                            authorization model on `configured: false`.
+ *   - CI-gated:              a "works without AGNTCY installed" smoke test
+ *                            is exercised by __tests__/agntcy-commands.test.ts.
+ */
+/** Env var an operator sets to point ruflo at a SLIM endpoint. */
+export declare const AGNTCY_ENDPOINT_ENV = "RUFLO_AGNTCY_SLIM_ENDPOINT";
+/**
+ * The real SLIM Node.js bindings package (npm, published, real). Kept as a
+ * named constant (not a string literal scattered through the module) so a
+ * single edit repoints every dynamic-import call site if that ever changes.
+ * Currently fails to load due to an upstream packaging bug — see this
+ * file's header comment — which `detectAgntcyRuntime()`'s catch-all branch
+ * already handles gracefully.
+ */
+export declare const AGNTCY_PACKAGE_NAME = "@agntcy/slim-bindings";
+/** Pointer to the ADR every "not configured" message should send users to. */
+export declare const AGNTCY_ADR_PATH = "v3/docs/adr/ADR-380-agntcy-outshift-runtime-integration.md";
+export declare const AGNTCY_NOT_CONFIGURED_MESSAGE: string;
+export interface AgntcyRuntimeStatus {
+    /** True only when an endpoint is set AND the optional runtime package resolves. */
+    configured: boolean;
+    /** Human-readable reason for the current status — always safe to print. */
+    reason: string;
+    /** The configured endpoint, if any (present even when configured is false, e.g. package missing). */
+    endpoint?: string;
+}
+/**
+ * Detect whether the optional AGNTCY/SLIM runtime is available.
+ *
+ * This function never throws and never makes a network call. It performs,
+ * in order:
+ *   1. An env var presence check for {@link AGNTCY_ENDPOINT_ENV}. Absent →
+ *      not configured, no further work.
+ *   2. A dynamic `import()` of {@link AGNTCY_PACKAGE_NAME} (or `packageName`
+ *      if overridden), wrapped in try/catch. Verified live: the pinned
+ *      `2.0.0-alpha.5` resolves cleanly — `configured: true` is a real,
+ *      exercised path today, not just a theoretical one.
+ *
+ * @param env Injectable for tests; defaults to `process.env`.
+ * @param packageName Injectable for tests (to simulate "package not
+ *   installed" without needing to actually uninstall the real optional
+ *   dependency); defaults to {@link AGNTCY_PACKAGE_NAME}.
+ */
+export declare function detectAgntcyRuntime(env?: NodeJS.ProcessEnv, packageName?: string): Promise<AgntcyRuntimeStatus>;
+//# sourceMappingURL=runtime.d.ts.map

package/dist/src/commands/agntcy/runtime.js

@@ -0,0 +1,115 @@
+/**
+ * V3 CLI AGNTCY/SLIM Runtime Presence Check — ADR-380 §1.
+ *
+ * ADR-380 introduces three new `ruflo` CLI verbs (`transport use slim`,
+ * `agent publish`, `swarm join <namespace>`) that talk to Cisco Outshift's
+ * AGNTCY ecosystem (SLIM transport, Directory publish, group membership).
+ *
+ * CORRECTED (2026-07-31): the original scaffold guessed at a package name
+ * (`@claude-flow/agntcy`) and concluded no real SLIM SDK existed anywhere.
+ * That check only tried guessed names — the real package is
+ * `@agntcy/slim-bindings` (npm, real, published, documented for plain
+ * Node.js use).
+ *
+ * `@agntcy/slim-bindings@1.4.1` (npm `latest`) fails to load in plain Node —
+ * a transitive dependency (`uniffi-bindgen-react-native`) ships raw,
+ * uncompiled TypeScript as its package.json `main`, which only works inside
+ * a bundler (Metro, for its React Native use case). Filed upstream:
+ * agntcy/slim#1916 and jhugman/uniffi-bindgen-react-native#422 (root cause).
+ *
+ * UPDATE (2026-07-31, later): the SLIM maintainers confirmed they've moved
+ * off `uniffi-bindgen-react-native` onto `@ubjs/core`/`@ubjs/node` (compiled
+ * output, not raw TS) in the `alpha` dist-tag (`2.0.0-alpha.4+`), not yet
+ * promoted to `latest`. Verified live: a real server-bring-up + client-
+ * connect + graceful-shutdown smoke test against `@agntcy/slim-bindings@
+ * 2.0.0-alpha.5` succeeds under plain Node with zero errors. `package.json`
+ * now pins that exact alpha version (not a caret range — this is a
+ * pre-release channel, pin deliberately rather than floating) until the fix
+ * is promoted to `latest`, tracked by the same issue.
+ *
+ * This module's existing graceful-degradation design already handled this
+ * correctly without any change to its logic: `detectAgntcyRuntime()`'s
+ * catch-all branch (anything other than MODULE_NOT_FOUND) reports the real
+ * underlying error and falls back to local transport when the import fails.
+ * Now that the pinned version actually loads, the happy path
+ * (`configured: true`) is real and verified, not aspirational — no change
+ * to this function was needed either way.
+ *
+ * Per ADR-150's precedent (which ADR-380 §1 explicitly follows, not
+ * ADR-321's hard-dependency exception):
+ *   - removable:            deleting this whole directory changes nothing
+ *                            about the rest of the CLI working.
+ *   - optional-only:        `@agntcy/slim-bindings` MUST live in
+ *                            optionalDependencies, never `dependencies`.
+ *   - graceful degradation: every caller of `detectAgntcyRuntime()` falls
+ *                            back to the local transport / existing
+ *                            authorization model on `configured: false`.
+ *   - CI-gated:              a "works without AGNTCY installed" smoke test
+ *                            is exercised by __tests__/agntcy-commands.test.ts.
+ */
+/** Env var an operator sets to point ruflo at a SLIM endpoint. */
+export const AGNTCY_ENDPOINT_ENV = 'RUFLO_AGNTCY_SLIM_ENDPOINT';
+/**
+ * The real SLIM Node.js bindings package (npm, published, real). Kept as a
+ * named constant (not a string literal scattered through the module) so a
+ * single edit repoints every dynamic-import call site if that ever changes.
+ * Currently fails to load due to an upstream packaging bug — see this
+ * file's header comment — which `detectAgntcyRuntime()`'s catch-all branch
+ * already handles gracefully.
+ */
+export const AGNTCY_PACKAGE_NAME = '@agntcy/slim-bindings';
+/** Pointer to the ADR every "not configured" message should send users to. */
+export const AGNTCY_ADR_PATH = 'v3/docs/adr/ADR-380-agntcy-outshift-runtime-integration.md';
+export const AGNTCY_NOT_CONFIGURED_MESSAGE = `AGNTCY/SLIM transport is not configured — see ADR-380 (${AGNTCY_ADR_PATH}) for setup. ` +
+    'Falling back to local transport.';
+/**
+ * Detect whether the optional AGNTCY/SLIM runtime is available.
+ *
+ * This function never throws and never makes a network call. It performs,
+ * in order:
+ *   1. An env var presence check for {@link AGNTCY_ENDPOINT_ENV}. Absent →
+ *      not configured, no further work.
+ *   2. A dynamic `import()` of {@link AGNTCY_PACKAGE_NAME} (or `packageName`
+ *      if overridden), wrapped in try/catch. Verified live: the pinned
+ *      `2.0.0-alpha.5` resolves cleanly — `configured: true` is a real,
+ *      exercised path today, not just a theoretical one.
+ *
+ * @param env Injectable for tests; defaults to `process.env`.
+ * @param packageName Injectable for tests (to simulate "package not
+ *   installed" without needing to actually uninstall the real optional
+ *   dependency); defaults to {@link AGNTCY_PACKAGE_NAME}.
+ */
+export async function detectAgntcyRuntime(env = process.env, packageName = AGNTCY_PACKAGE_NAME) {
+    const endpoint = env[AGNTCY_ENDPOINT_ENV];
+    if (!endpoint) {
+        return { configured: false, reason: `${AGNTCY_ENDPOINT_ENV} is not set` };
+    }
+    try {
+        // Dynamic import of an optional dependency, exactly the pattern this
+        // repo already uses for other optional runtimes (see status.ts's
+        // `await import('pg')`). Never a static `import` — a static import
+        // would make @claude-flow/cli fail to build/run when the package is
+        // absent, which is the one thing ADR-150/ADR-380 forbid.
+        await import(packageName);
+        return { configured: true, reason: `${packageName} resolved`, endpoint };
+    }
+    catch (error) {
+        const code = error?.code;
+        if (code === 'ERR_MODULE_NOT_FOUND' || code === 'MODULE_NOT_FOUND') {
+            return {
+                configured: false,
+                reason: `${AGNTCY_ENDPOINT_ENV} is set but the optional "${packageName}" runtime package is not installed`,
+                endpoint,
+            };
+        }
+        // Any other error importing the module (syntax error in a real
+        // install, permission issue, etc.) — still degrade gracefully rather
+        // than propagate, but keep the real reason for diagnostics.
+        return {
+            configured: false,
+            reason: `error probing "${packageName}": ${error instanceof Error ? error.message : String(error)}`,
+            endpoint,
+        };
+    }
+}
+//# sourceMappingURL=runtime.js.map

package/dist/src/commands/agntcy/swarm-join.d.ts

@@ -0,0 +1,28 @@
+/**
+ * V3 CLI `ruflo swarm join <namespace>` — ADR-380 §2.
+ *
+ * Joins a SLIM group-membership channel scoped to a Cognitum tenant/project
+ * namespace (e.g. `cognitum/research/security`). This is an AGNTCY/SLIM
+ * concept layered on top of — never a replacement for — this repo's own
+ * `swarm_init`/`hive-mind_*` MCP-tool coordination, which remains the
+ * default for single-host swarms per ADR-380 §2.
+ *
+ * NOT WIRED INTO THE MAIN CLI ROUTER YET. This file is exported for a
+ * later integration pass to attach as a new subcommand of the existing
+ * `swarm` command (`v3/@claude-flow/cli/src/commands/swarm.ts`).
+ */
+import type { Command } from '../../types.js';
+/**
+ * SLIM group-membership namespaces are slash-delimited (e.g.
+ * `cognitum/research/security`), matching the ADR-380 §2 example. Validate
+ * the shape locally — deterministic, no SDK required — before ever
+ * attempting a network join.
+ */
+export declare function validateNamespace(namespace: string): {
+    valid: boolean;
+    error?: string;
+};
+declare const joinCommand: Command;
+export { joinCommand as swarmJoinCommand };
+export default joinCommand;
+//# sourceMappingURL=swarm-join.d.ts.map

package/dist/src/commands/agntcy/swarm-join.js

@@ -0,0 +1,85 @@
+/**
+ * V3 CLI `ruflo swarm join <namespace>` — ADR-380 §2.
+ *
+ * Joins a SLIM group-membership channel scoped to a Cognitum tenant/project
+ * namespace (e.g. `cognitum/research/security`). This is an AGNTCY/SLIM
+ * concept layered on top of — never a replacement for — this repo's own
+ * `swarm_init`/`hive-mind_*` MCP-tool coordination, which remains the
+ * default for single-host swarms per ADR-380 §2.
+ *
+ * NOT WIRED INTO THE MAIN CLI ROUTER YET. This file is exported for a
+ * later integration pass to attach as a new subcommand of the existing
+ * `swarm` command (`v3/@claude-flow/cli/src/commands/swarm.ts`).
+ */
+import { output } from '../../output.js';
+import { AGNTCY_NOT_CONFIGURED_MESSAGE, AGNTCY_PACKAGE_NAME, detectAgntcyRuntime, } from './runtime.js';
+/**
+ * SLIM group-membership namespaces are slash-delimited (e.g.
+ * `cognitum/research/security`), matching the ADR-380 §2 example. Validate
+ * the shape locally — deterministic, no SDK required — before ever
+ * attempting a network join.
+ */
+export function validateNamespace(namespace) {
+    if (!namespace || namespace.trim().length === 0) {
+        return { valid: false, error: 'namespace must be a non-empty string' };
+    }
+    // Deliberately NOT filtering empty segments — a leading/trailing/double
+    // slash (e.g. "cognitum//security") is a malformed namespace, not a
+    // cosmetic one, and should be rejected rather than silently repaired.
+    const segments = namespace.split('/');
+    if (segments.length === 0) {
+        return { valid: false, error: 'namespace must contain at least one segment' };
+    }
+    const validSegment = /^[a-zA-Z0-9_-]+$/;
+    const bad = segments.find((s) => !validSegment.test(s));
+    if (bad !== undefined) {
+        return { valid: false, error: `invalid namespace segment "${bad}" — only [a-zA-Z0-9_-] allowed per segment` };
+    }
+    return { valid: true };
+}
+const joinCommand = {
+    name: 'join',
+    description: 'Join a SLIM group-membership channel scoped to a namespace (ADR-380 §2)',
+    examples: [
+        { command: 'ruflo swarm join cognitum/research/security', description: 'Join the SLIM group-membership channel for a tenant namespace' },
+    ],
+    action: async (ctx) => {
+        const namespace = (ctx.args[0] || ctx.flags.namespace || '').trim();
+        if (!namespace) {
+            output.printError('Namespace is required. Usage: ruflo swarm join <namespace> (e.g. cognitum/research/security)');
+            return { success: false, exitCode: 1 };
+        }
+        const nsCheck = validateNamespace(namespace);
+        if (!nsCheck.valid) {
+            output.printError(`Invalid namespace "${namespace}": ${nsCheck.error}`);
+            return { success: false, exitCode: 1 };
+        }
+        const status = await detectAgntcyRuntime();
+        if (!status.configured) {
+            output.printInfo(AGNTCY_NOT_CONFIGURED_MESSAGE);
+            output.printInfo(`Namespace "${namespace}" was not joined via SLIM. Local swarm/hive-mind coordination ` +
+                '(swarm_init / hive-mind_* MCP tools) remains available and unaffected.');
+            return {
+                success: true,
+                data: { joined: false, namespace, configured: false, reason: status.reason },
+            };
+        }
+        try {
+            const mod = (await import(AGNTCY_PACKAGE_NAME));
+            if (typeof mod.joinGroup !== 'function') {
+                throw new Error(`"${AGNTCY_PACKAGE_NAME}" is installed but does not export joinGroup()`);
+            }
+            const result = await mod.joinGroup({ endpoint: status.endpoint, namespace });
+            output.printSuccess(`Joined SLIM group "${namespace}"${typeof result?.members === 'number' ? ` (${result.members} members)` : ''}.`);
+            return { success: true, data: { joined: true, namespace, members: result?.members } };
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : String(error);
+            output.printError(`SLIM group join failed: ${message}`);
+            return { success: true, data: { joined: false, namespace, error: message } };
+        }
+    },
+};
+export { joinCommand as swarmJoinCommand };
+export default joinCommand;
+//# sourceMappingURL=swarm-join.js.map

package/dist/src/commands/agntcy/transport.d.ts

@@ -0,0 +1,24 @@
+/**
+ * V3 CLI `ruflo transport use slim` — ADR-380 §2.
+ *
+ * Switches the active swarm/hive-mind coordination transport from today's
+ * in-process/local-hooks routing to SLIM (secure messaging for MCP/A2A,
+ * hierarchical routing, group membership, MLS encryption) for agents
+ * coordinating across hosts or across a tenant boundary.
+ *
+ * Local transport stays the default. This command is a NO-OP on the local
+ * path unless an operator has both set {@link AGNTCY_ENDPOINT_ENV} AND
+ * installed the (not-yet-published) optional runtime package — see
+ * runtime.ts for the full graceful-degradation contract.
+ *
+ * NOT WIRED INTO THE MAIN CLI ROUTER YET. This file is exported for a
+ * later integration pass to attach as a new top-level `transport` command
+ * (or a subcommand of one, per the open question in ADR-380 §"Open
+ * Questions" about per-swarm vs. global scope).
+ */
+import type { Command } from '../../types.js';
+declare const useCommand: Command;
+export declare const transportCommand: Command;
+export { useCommand };
+export default transportCommand;
+//# sourceMappingURL=transport.d.ts.map

package/dist/src/commands/agntcy/transport.js

@@ -0,0 +1,95 @@
+/**
+ * V3 CLI `ruflo transport use slim` — ADR-380 §2.
+ *
+ * Switches the active swarm/hive-mind coordination transport from today's
+ * in-process/local-hooks routing to SLIM (secure messaging for MCP/A2A,
+ * hierarchical routing, group membership, MLS encryption) for agents
+ * coordinating across hosts or across a tenant boundary.
+ *
+ * Local transport stays the default. This command is a NO-OP on the local
+ * path unless an operator has both set {@link AGNTCY_ENDPOINT_ENV} AND
+ * installed the (not-yet-published) optional runtime package — see
+ * runtime.ts for the full graceful-degradation contract.
+ *
+ * NOT WIRED INTO THE MAIN CLI ROUTER YET. This file is exported for a
+ * later integration pass to attach as a new top-level `transport` command
+ * (or a subcommand of one, per the open question in ADR-380 §"Open
+ * Questions" about per-swarm vs. global scope).
+ */
+import { output } from '../../output.js';
+import { AGNTCY_NOT_CONFIGURED_MESSAGE, AGNTCY_PACKAGE_NAME, detectAgntcyRuntime, } from './runtime.js';
+/** Transport names this command currently recognizes. Only 'slim' per ADR-380 §2. */
+const SUPPORTED_TRANSPORTS = new Set(['slim']);
+const useCommand = {
+    name: 'use',
+    description: 'Switch the active swarm/hive-mind transport (e.g. slim) — ADR-380 §2',
+    examples: [
+        { command: 'ruflo transport use slim', description: 'Switch coordination transport to SLIM (opt-in, degrades to local)' },
+    ],
+    action: async (ctx) => {
+        const requested = (ctx.args[0] || ctx.flags.transport || '').trim().toLowerCase();
+        if (!requested) {
+            output.printError('Transport name required. Usage: ruflo transport use <name> (e.g. slim)');
+            return { success: false, exitCode: 1 };
+        }
+        if (!SUPPORTED_TRANSPORTS.has(requested)) {
+            output.printError(`Unknown transport "${requested}". Supported: ${Array.from(SUPPORTED_TRANSPORTS).join(', ')}.`);
+            output.printInfo('Local transport remains the default and needs no explicit "use".');
+            return { success: false, exitCode: 1 };
+        }
+        const status = await detectAgntcyRuntime();
+        if (!status.configured) {
+            output.printInfo(AGNTCY_NOT_CONFIGURED_MESSAGE);
+            output.printInfo('Active transport remains: local (in-process hooks routing).');
+            return {
+                success: true,
+                data: { transport: 'local', requested, configured: false, reason: status.reason },
+            };
+        }
+        // Reachable only once the optional package is actually installed AND
+        // an endpoint is configured — not possible today (package unpublished).
+        try {
+            const mod = (await import(AGNTCY_PACKAGE_NAME));
+            if (typeof mod.createSlimTransport !== 'function') {
+                throw new Error(`"${AGNTCY_PACKAGE_NAME}" is installed but does not export createSlimTransport()`);
+            }
+            await mod.createSlimTransport({ endpoint: status.endpoint });
+            output.printSuccess(`Active transport switched to: slim (${status.endpoint})`);
+            return { success: true, data: { transport: 'slim', endpoint: status.endpoint, configured: true } };
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : String(error);
+            output.printError(`Failed to activate SLIM transport: ${message}`);
+            output.printInfo('Falling back to local transport.');
+            return { success: true, data: { transport: 'local', requested, configured: false, error: message } };
+        }
+    },
+};
+export const transportCommand = {
+    name: 'transport',
+    description: 'Manage the active swarm/hive-mind coordination transport (ADR-380 §2)',
+    subcommands: [useCommand],
+    examples: [
+        { command: 'ruflo transport use slim', description: 'Switch coordination transport to SLIM' },
+    ],
+    action: async () => {
+        output.writeln();
+        output.writeln(output.bold('AGNTCY/SLIM Transport'));
+        output.writeln(output.dim('='.repeat(60)));
+        output.writeln();
+        output.printBox([
+            'Local transport (in-process hooks routing) is the default.',
+            '',
+            'Subcommands:',
+            '',
+            '  use <name>   Switch the active transport (currently: slim)',
+            '',
+            `See ADR-380 for setup: v3/docs/adr/ADR-380-agntcy-outshift-runtime-integration.md`,
+        ].join('\n'), 'AGNTCY/SLIM Transport');
+        output.writeln();
+        return { success: true };
+    },
+};
+export { useCommand };
+export default transportCommand;
+//# sourceMappingURL=transport.js.map

package/dist/src/commands/index.d.ts

@@ -45,6 +45,7 @@ export declare function getGuidanceCommand(): Promise<Command | undefined>;
 export declare function getApplianceCommand(): Promise<Command | undefined>;
 export declare function getCleanupCommand(): Promise<Command | undefined>;
 export declare function getAutopilotCommand(): Promise<Command | undefined>;
+export declare function getTransportCommand(): Promise<Command | undefined>;
 /**
  * Core commands loaded synchronously (available immediately)
  * Advanced commands loaded on-demand for faster startup

package/dist/src/commands/index.js

@@ -90,6 +90,10 @@ const commandLoaders = {
     spinner: () => import('./spinner.js'),
     // Ruflo entries in Claude Code's companyAnnouncements startup rotation (ADR-319)
     announcements: () => import('./announcements.js'),
+    // AGNTCY/Outshift runtime transport selection (ADR-324 §2) — optional,
+    // removable augmentation; no-ops to local transport when AGNTCY/SLIM is
+    // not configured (RUFLO_AGNTCY_SLIM_ENDPOINT unset).
+    transport: () => import('./agntcy/transport.js'),
 };
 // Cache for loaded commands
 const loadedCommands = new Map();
@@ -188,6 +192,7 @@ export async function getGuidanceCommand() { return loadCommand('guidance'); }
 export async function getApplianceCommand() { return loadCommand('appliance'); }
 export async function getCleanupCommand() { return loadCommand('cleanup'); }
 export async function getAutopilotCommand() { return loadCommand('autopilot'); }
+export async function getTransportCommand() { return loadCommand('transport'); }
 /**
  * Core commands loaded synchronously (available immediately)
  * Advanced commands loaded on-demand for faster startup

package/dist/src/commands/swarm.js

@@ -5,6 +5,7 @@
 import { output } from '../output.js';
 import { select, confirm } from '../prompt.js';
 import { callMCPTool, MCPClientError } from '../mcp-client.js';
+import { swarmJoinCommand } from './agntcy/swarm-join.js';
 import * as fs from 'fs';
 import * as path from 'path';
 // Get dynamic swarm status from memory/session files
@@ -1009,7 +1010,7 @@ const pheromoneCommand = {
 export const swarmCommand = {
     name: 'swarm',
     description: 'Swarm coordination commands',
-    subcommands: [initCommand, startCommand, statusCommand, stopCommand, scaleCommand, coordinateCommand, compressMessageCommand, pheromoneCommand],
+    subcommands: [initCommand, startCommand, statusCommand, stopCommand, scaleCommand, coordinateCommand, compressMessageCommand, pheromoneCommand, swarmJoinCommand],
     options: [],
     examples: [
         { command: 'claude-flow swarm init --v3-mode', description: 'Initialize V3 swarm' },

package/node_modules/@claude-flow/security/dist/index.d.ts

@@ -21,6 +21,7 @@ export { InputValidator, sanitizeString, sanitizeHtml, sanitizePath, SafeStringS
 export { TokenGenerator, TokenGeneratorError, createTokenGenerator, getDefaultGenerator, quickGenerate, type TokenConfig, type Token, type SignedToken, type VerificationCode, } from './token-generator.js';
 export { ToolOutputGuardrail, createToolOutputGuardrail, isToolOutputSafe, type GuardrailConfig, type GuardrailResult, type GuardrailAction, type InjectionFinding, type InjectionSeverity, type InjectionCategory, } from './tool-output-guardrail.js';
 export { AgentAuthorizationPropagator, AuthorizationPropagationError, makeLegacyPermissiveScope, type AuthScope, type SendMessageEnvelope, type ToolCallDecision, } from './authorization/propagator.js';
+export { generateCallerIdentityKey, loadCallerIdentityKey, issueInvocationToken, verifyInvocationToken, isMcpCallerAuthEnabled, type CallerIdentityKey, type InvocationToken, type TokenVerificationResult, } from './mcp-caller-identity.js';
 export * from './policy/index.js';
 export { CLIENT_ID as OAUTH_CLIENT_ID, SCOPE as OAUTH_SCOPE, OOB_REDIRECT_URI, OAuthError, authorizeUrl, exchangeCode, refreshToken, exchangeManualCode, type TokenResponse as OAuthTokenResponse, } from './oauth/client.js';
 export { generate as generatePkce, challengeFromVerifier, type PkceRequest } from './oauth/pkce.js';

package/node_modules/@claude-flow/security/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAGH,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,oBAAoB,EACpB,KAAK,oBAAoB,EACzB,KAAK,wBAAwB,GAC9B,MAAM,sBAAsB,CAAC;AAG9B,OAAO,EACL,mBAAmB,EACnB,wBAAwB,EACxB,yBAAyB,EACzB,mBAAmB,EACnB,KAAK,gBAAgB,EACrB,KAAK,oBAAoB,EACzB,KAAK,gBAAgB,GACtB,MAAM,2BAA2B,CAAC;AAGnC,OAAO,EACL,YAAY,EACZ,iBAAiB,EACjB,yBAAyB,EACzB,sBAAsB,EACtB,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,iBAAiB,GACvB,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,0BAA0B,EAC1B,8BAA8B,EAC9B,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,GAC1B,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EACL,cAAc,EACd,cAAc,EACd,YAAY,EACZ,YAAY,EAEZ,gBAAgB,EAChB,gBAAgB,EAChB,cAAc,EACd,WAAW,EACX,cAAc,EACd,UAAU,EACV,cAAc,EACd,SAAS,EACT,YAAY,EACZ,UAAU,EACV,UAAU,EACV,QAAQ,EAER,cAAc,EACd,gBAAgB,EAChB,kBAAkB,EAClB,gBAAgB,EAChB,kBAAkB,EAElB,eAAe,EACf,gBAAgB,EAChB,eAAe,EAEf,qBAAqB,EACrB,UAAU,EAEV,oBAAoB,EACpB,oBAAoB,EAEpB,QAAQ,EACR,MAAM,EACN,CAAC,GACF,MAAM,sBAAsB,CAAC;AAG9B,OAAO,EACL,cAAc,EACd,mBAAmB,EACnB,oBAAoB,EACpB,mBAAmB,EACnB,aAAa,EACb,KAAK,WAAW,EAChB,KAAK,KAAK,EACV,KAAK,WAAW,EAChB,KAAK,gBAAgB,GACtB,MAAM,sBAAsB,CAAC;AAG9B,OAAO,EACL,mBAAmB,EACnB,yBAAyB,EACzB,gBAAgB,EAChB,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,iBAAiB,GACvB,MAAM,4BAA4B,CAAC;AAKpC,OAAO,EACL,4BAA4B,EAC5B,6BAA6B,EAC7B,yBAAyB,EACzB,KAAK,SAAS,EACd,KAAK,mBAAmB,EACxB,KAAK,gBAAgB,GACtB,MAAM,+BAA+B,CAAC;AAMvC,cAAc,mBAAmB,CAAC;AAMlC,OAAO,EACL,SAAS,IAAI,eAAe,EAC5B,KAAK,IAAI,WAAW,EACpB,gBAAgB,EAChB,UAAU,EACV,YAAY,EACZ,YAAY,EACZ,YAAY,EACZ,kBAAkB,EAClB,KAAK,aAAa,IAAI,kBAAkB,GACzC,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,QAAQ,IAAI,YAAY,EAAE,qBAAqB,EAAE,KAAK,WAAW,EAAE,MAAM,iBAAiB,CAAC;AACpG,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,KAAK,cAAc,EAAE,MAAM,4BAA4B,CAAC;AACvG,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAGjD,OAAO,EACL,qBAAqB,EACrB,0BAA0B,EAC1B,KAAK,eAAe,GACrB,MAAM,uBAAuB,CAAC;AAK/B,OAAO,EACL,uBAAuB,EACvB,YAAY,EACZ,YAAY,EACZ,WAAW,EACX,UAAU,EACV,KAAK,cAAc,EACnB,KAAK,oBAAoB,EACzB,KAAK,WAAW,EAChB,KAAK,YAAY,EACjB,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,KAAK,cAAc,GACpB,MAAM,iCAAiC,CAAC;AAOzC,OAAO,EACL,sBAAsB,EACtB,uBAAuB,EACvB,yBAAyB,EACzB,OAAO,EACP,SAAS,EACT,iBAAiB,EACjB,KAAK,iBAAiB,EACtB,KAAK,2BAA2B,EAChC,KAAK,kBAAkB,EACvB,KAAK,0BAA0B,EAC/B,KAAK,2BAA2B,EAChC,KAAK,sBAAsB,GAC5B,MAAM,gCAAgC,CAAC;AAMxC,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAEtD;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC;;OAEG;IACH,WAAW,EAAE,MAAM,CAAC;IAEpB;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IAEnB;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB;;;OAGG;IACH,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;CAC5B;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,cAAc,EAAE,cAAc,CAAC;IAC/B,mBAAmB,EAAE,mBAAmB,CAAC;IACzC,YAAY,EAAE,YAAY,CAAC;IAC3B,aAAa,EAAE,aAAa,CAAC;IAC7B,cAAc,EAAE,cAAc,CAAC;CAChC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,oBAAoB,GAAG,cAAc,CAiBjF;AAMD;;GAEG;AACH,eAAO,MAAM,iBAAiB,KAAK,CAAC;AAEpC;;GAEG;AACH,eAAO,MAAM,iBAAiB,KAAK,CAAC;AAEpC;;GAEG;AACH,eAAO,MAAM,mBAAmB,IAAI,CAAC;AAErC;;GAEG;AACH,eAAO,MAAM,mBAAmB,KAAK,CAAC;AAEtC;;GAEG;AACH,eAAO,MAAM,wBAAwB,OAAO,CAAC;AAE7C;;GAEG;AACH,eAAO,MAAM,0BAA0B,QAAQ,CAAC;AAMhD;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,OAAO,CAAC,oBAAoB,CAAC,GAAG,MAAM,EAAE,CAoBnF;AAED;;GAEG;AACH,eAAO,MAAM,uBAAuB,kBAAkB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAGH,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,oBAAoB,EACpB,KAAK,oBAAoB,EACzB,KAAK,wBAAwB,GAC9B,MAAM,sBAAsB,CAAC;AAG9B,OAAO,EACL,mBAAmB,EACnB,wBAAwB,EACxB,yBAAyB,EACzB,mBAAmB,EACnB,KAAK,gBAAgB,EACrB,KAAK,oBAAoB,EACzB,KAAK,gBAAgB,GACtB,MAAM,2BAA2B,CAAC;AAGnC,OAAO,EACL,YAAY,EACZ,iBAAiB,EACjB,yBAAyB,EACzB,sBAAsB,EACtB,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,iBAAiB,GACvB,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,0BAA0B,EAC1B,8BAA8B,EAC9B,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,GAC1B,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EACL,cAAc,EACd,cAAc,EACd,YAAY,EACZ,YAAY,EAEZ,gBAAgB,EAChB,gBAAgB,EAChB,cAAc,EACd,WAAW,EACX,cAAc,EACd,UAAU,EACV,cAAc,EACd,SAAS,EACT,YAAY,EACZ,UAAU,EACV,UAAU,EACV,QAAQ,EAER,cAAc,EACd,gBAAgB,EAChB,kBAAkB,EAClB,gBAAgB,EAChB,kBAAkB,EAElB,eAAe,EACf,gBAAgB,EAChB,eAAe,EAEf,qBAAqB,EACrB,UAAU,EAEV,oBAAoB,EACpB,oBAAoB,EAEpB,QAAQ,EACR,MAAM,EACN,CAAC,GACF,MAAM,sBAAsB,CAAC;AAG9B,OAAO,EACL,cAAc,EACd,mBAAmB,EACnB,oBAAoB,EACpB,mBAAmB,EACnB,aAAa,EACb,KAAK,WAAW,EAChB,KAAK,KAAK,EACV,KAAK,WAAW,EAChB,KAAK,gBAAgB,GACtB,MAAM,sBAAsB,CAAC;AAG9B,OAAO,EACL,mBAAmB,EACnB,yBAAyB,EACzB,gBAAgB,EAChB,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,iBAAiB,GACvB,MAAM,4BAA4B,CAAC;AAKpC,OAAO,EACL,4BAA4B,EAC5B,6BAA6B,EAC7B,yBAAyB,EACzB,KAAK,SAAS,EACd,KAAK,mBAAmB,EACxB,KAAK,gBAAgB,GACtB,MAAM,+BAA+B,CAAC;AAMvC,OAAO,EACL,yBAAyB,EACzB,qBAAqB,EACrB,oBAAoB,EACpB,qBAAqB,EACrB,sBAAsB,EACtB,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACpB,KAAK,uBAAuB,GAC7B,MAAM,0BAA0B,CAAC;AAMlC,cAAc,mBAAmB,CAAC;AAMlC,OAAO,EACL,SAAS,IAAI,eAAe,EAC5B,KAAK,IAAI,WAAW,EACpB,gBAAgB,EAChB,UAAU,EACV,YAAY,EACZ,YAAY,EACZ,YAAY,EACZ,kBAAkB,EAClB,KAAK,aAAa,IAAI,kBAAkB,GACzC,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,QAAQ,IAAI,YAAY,EAAE,qBAAqB,EAAE,KAAK,WAAW,EAAE,MAAM,iBAAiB,CAAC;AACpG,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,KAAK,cAAc,EAAE,MAAM,4BAA4B,CAAC;AACvG,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAGjD,OAAO,EACL,qBAAqB,EACrB,0BAA0B,EAC1B,KAAK,eAAe,GACrB,MAAM,uBAAuB,CAAC;AAK/B,OAAO,EACL,uBAAuB,EACvB,YAAY,EACZ,YAAY,EACZ,WAAW,EACX,UAAU,EACV,KAAK,cAAc,EACnB,KAAK,oBAAoB,EACzB,KAAK,WAAW,EAChB,KAAK,YAAY,EACjB,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,KAAK,cAAc,GACpB,MAAM,iCAAiC,CAAC;AAOzC,OAAO,EACL,sBAAsB,EACtB,uBAAuB,EACvB,yBAAyB,EACzB,OAAO,EACP,SAAS,EACT,iBAAiB,EACjB,KAAK,iBAAiB,EACtB,KAAK,2BAA2B,EAChC,KAAK,kBAAkB,EACvB,KAAK,0BAA0B,EAC/B,KAAK,2BAA2B,EAChC,KAAK,sBAAsB,GAC5B,MAAM,gCAAgC,CAAC;AAMxC,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAEtD;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC;;OAEG;IACH,WAAW,EAAE,MAAM,CAAC;IAEpB;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IAEnB;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB;;;OAGG;IACH,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;CAC5B;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,cAAc,EAAE,cAAc,CAAC;IAC/B,mBAAmB,EAAE,mBAAmB,CAAC;IACzC,YAAY,EAAE,YAAY,CAAC;IAC3B,aAAa,EAAE,aAAa,CAAC;IAC7B,cAAc,EAAE,cAAc,CAAC;CAChC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,oBAAoB,GAAG,cAAc,CAiBjF;AAMD;;GAEG;AACH,eAAO,MAAM,iBAAiB,KAAK,CAAC;AAEpC;;GAEG;AACH,eAAO,MAAM,iBAAiB,KAAK,CAAC;AAEpC;;GAEG;AACH,eAAO,MAAM,mBAAmB,IAAI,CAAC;AAErC;;GAEG;AACH,eAAO,MAAM,mBAAmB,KAAK,CAAC;AAEtC;;GAEG;AACH,eAAO,MAAM,wBAAwB,OAAO,CAAC;AAE7C;;GAEG;AACH,eAAO,MAAM,0BAA0B,QAAQ,CAAC;AAMhD;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,OAAO,CAAC,oBAAoB,CAAC,GAAG,MAAM,EAAE,CAoBnF;AAED;;GAEG;AACH,eAAO,MAAM,uBAAuB,kBAAkB,CAAC"}

package/node_modules/@claude-flow/security/dist/index.js

@@ -43,6 +43,11 @@ export { ToolOutputGuardrail, createToolOutputGuardrail, isToolOutputSafe, } fro
 // Action-layer: SendMessage envelope + per-action scope check + MCP server
 // identity probe. Wraps the comms layer in P2; wraps the dispatcher in P3.
 export { AgentAuthorizationPropagator, AuthorizationPropagationError, makeLegacyPermissiveScope, } from './authorization/propagator.js';
+// MCP Caller-Identity Binding (ADR-377 Phase 3 — ruvnet/ruflo#2516, #2873)
+// Per-invocation Ed25519-signed capability tokens. Off by default
+// (CLAUDE_FLOW_MCP_CALLER_AUTH) pending a follow-on ADR for key
+// distribution; see mcp-caller-identity.ts's file header for scope notes.
+export { generateCallerIdentityKey, loadCallerIdentityKey, issueInvocationToken, verifyInvocationToken, isMcpCallerAuthEnabled, } from './mcp-caller-identity.js';
 // Agentic Policy Engine (ADR-324)
 // Deterministic policy evaluation, monotonic capability envelopes, approvals,
 // budgets, and tamper-evident decision receipts. Legacy mode preserves the

package/node_modules/@claude-flow/security/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,+BAA+B;AAC/B,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,oBAAoB,GAGrB,MAAM,sBAAsB,CAAC;AAE9B,oCAAoC;AACpC,OAAO,EACL,mBAAmB,EACnB,wBAAwB,EACxB,yBAAyB,EACzB,mBAAmB,GAIpB,MAAM,2BAA2B,CAAC;AAEnC,sCAAsC;AACtC,OAAO,EACL,YAAY,EACZ,iBAAiB,EACjB,yBAAyB,EACzB,sBAAsB,GAIvB,MAAM,oBAAoB,CAAC;AAE5B,+BAA+B;AAC/B,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,0BAA0B,EAC1B,8BAA8B,GAG/B,MAAM,qBAAqB,CAAC;AAE7B,mBAAmB;AACnB,OAAO,EACL,cAAc,EACd,cAAc,EACd,YAAY,EACZ,YAAY;AACZ,eAAe;AACf,gBAAgB,EAChB,gBAAgB,EAChB,cAAc,EACd,WAAW,EACX,cAAc,EACd,UAAU,EACV,cAAc,EACd,SAAS,EACT,YAAY,EACZ,UAAU,EACV,UAAU,EACV,QAAQ;AACR,eAAe;AACf,cAAc,EACd,gBAAgB,EAChB,kBAAkB,EAClB,gBAAgB,EAChB,kBAAkB;AAClB,uBAAuB;AACvB,eAAe,EACf,gBAAgB,EAChB,eAAe;AACf,yBAAyB;AACzB,qBAAqB,EACrB,UAAU;AACV,iBAAiB;AACjB,oBAAoB,EACpB,oBAAoB;AACpB,YAAY;AACZ,QAAQ,EACR,MAAM,EACN,CAAC,GACF,MAAM,sBAAsB,CAAC;AAE9B,mBAAmB;AACnB,OAAO,EACL,cAAc,EACd,mBAAmB,EACnB,oBAAoB,EACpB,mBAAmB,EACnB,aAAa,GAKd,MAAM,sBAAsB,CAAC;AAE9B,8EAA8E;AAC9E,OAAO,EACL,mBAAmB,EACnB,yBAAyB,EACzB,gBAAgB,GAOjB,MAAM,4BAA4B,CAAC;AAEpC,mEAAmE;AACnE,2EAA2E;AAC3E,2EAA2E;AAC3E,OAAO,EACL,4BAA4B,EAC5B,6BAA6B,EAC7B,yBAAyB,GAI1B,MAAM,+BAA+B,CAAC;AAEvC,kCAAkC;AAClC,8EAA8E;AAC9E,2EAA2E;AAC3E,iFAAiF;AACjF,cAAc,mBAAmB,CAAC;AAElC,2CAA2C;AAC3C,uEAAuE;AACvE,yEAAyE;AACzE,yEAAyE;AACzE,OAAO,EACL,SAAS,IAAI,eAAe,EAC5B,KAAK,IAAI,WAAW,EACpB,gBAAgB,EAChB,UAAU,EACV,YAAY,EACZ,YAAY,EACZ,YAAY,EACZ,kBAAkB,GAEnB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,QAAQ,IAAI,YAAY,EAAE,qBAAqB,EAAoB,MAAM,iBAAiB,CAAC;AACpG,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAuB,MAAM,4BAA4B,CAAC;AACvG,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEjD,gCAAgC;AAChC,OAAO,EACL,qBAAqB,EACrB,0BAA0B,GAE3B,MAAM,uBAAuB,CAAC;AAE/B,6DAA6D;AAC7D,0EAA0E;AAC1E,0DAA0D;AAC1D,OAAO,EACL,uBAAuB,EACvB,YAAY,EACZ,YAAY,EACZ,WAAW,EACX,UAAU,GAQX,MAAM,iCAAiC,CAAC;AAEzC,sEAAsE;AACtE,sEAAsE;AACtE,6DAA6D;AAC7D,sEAAsE;AACtE,uEAAuE;AACvE,OAAO,EACL,sBAAsB,EACtB,uBAAuB,EACvB,yBAAyB,EACzB,OAAO,EACP,SAAS,EACT,iBAAiB,GAOlB,MAAM,gCAAgC,CAAC;AAExC,+EAA+E;AAC/E,gCAAgC;AAChC,+EAA+E;AAE/E,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAwCtD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAA4B;IAC/D,OAAO;QACL,cAAc,EAAE,IAAI,cAAc,CAAC;YACjC,MAAM,EAAE,MAAM,CAAC,YAAY,IAAI,EAAE;SAClC,CAAC;QACF,mBAAmB,EAAE,IAAI,mBAAmB,EAAE;QAC9C,YAAY,EAAE,IAAI,YAAY,CAAC;YAC7B,eAAe,EAAE,MAAM,CAAC,eAAe,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC;SAClE,CAAC;QACF,aAAa,EAAE,IAAI,aAAa,CAAC;YAC/B,eAAe,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC;YACrC,WAAW,EAAE,IAAI;SAClB,CAAC;QACF,cAAc,EAAE,IAAI,cAAc,CAAC;YACjC,UAAU,EAAE,MAAM,CAAC,UAAU;SAC9B,CAAC;KACH,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,qBAAqB;AACrB,+EAA+E;AAE/E;;GAEG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAEpC;;GAEG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAEpC;;GAEG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAErC;;GAEG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAEtC;;GAEG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,IAAI,CAAC;AAE7C;;GAEG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,KAAK,CAAC;AAEhD,+EAA+E;AAC/E,wBAAwB;AACxB,+EAA+E;AAE/E;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAqC;IACvE,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,IAAI,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,YAAY,GAAG,iBAAiB,EAAE,CAAC;QACnE,QAAQ,CAAC,IAAI,CAAC,iBAAiB,MAAM,CAAC,YAAY,gCAAgC,iBAAiB,GAAG,CAAC,CAAC;IAC1G,CAAC;IAED,IAAI,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QACvD,QAAQ,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;IAC/D,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QACxB,QAAQ,CAAC,IAAI,CAAC,8DAA8D,CAAC,CAAC;IAChF,CAAC;IAED,IAAI,MAAM,CAAC,eAAe,IAAI,MAAM,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClE,QAAQ,CAAC,IAAI,CAAC,yDAAyD,CAAC,CAAC;IAC3E,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,eAAe,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,+BAA+B;AAC/B,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,oBAAoB,GAGrB,MAAM,sBAAsB,CAAC;AAE9B,oCAAoC;AACpC,OAAO,EACL,mBAAmB,EACnB,wBAAwB,EACxB,yBAAyB,EACzB,mBAAmB,GAIpB,MAAM,2BAA2B,CAAC;AAEnC,sCAAsC;AACtC,OAAO,EACL,YAAY,EACZ,iBAAiB,EACjB,yBAAyB,EACzB,sBAAsB,GAIvB,MAAM,oBAAoB,CAAC;AAE5B,+BAA+B;AAC/B,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,0BAA0B,EAC1B,8BAA8B,GAG/B,MAAM,qBAAqB,CAAC;AAE7B,mBAAmB;AACnB,OAAO,EACL,cAAc,EACd,cAAc,EACd,YAAY,EACZ,YAAY;AACZ,eAAe;AACf,gBAAgB,EAChB,gBAAgB,EAChB,cAAc,EACd,WAAW,EACX,cAAc,EACd,UAAU,EACV,cAAc,EACd,SAAS,EACT,YAAY,EACZ,UAAU,EACV,UAAU,EACV,QAAQ;AACR,eAAe;AACf,cAAc,EACd,gBAAgB,EAChB,kBAAkB,EAClB,gBAAgB,EAChB,kBAAkB;AAClB,uBAAuB;AACvB,eAAe,EACf,gBAAgB,EAChB,eAAe;AACf,yBAAyB;AACzB,qBAAqB,EACrB,UAAU;AACV,iBAAiB;AACjB,oBAAoB,EACpB,oBAAoB;AACpB,YAAY;AACZ,QAAQ,EACR,MAAM,EACN,CAAC,GACF,MAAM,sBAAsB,CAAC;AAE9B,mBAAmB;AACnB,OAAO,EACL,cAAc,EACd,mBAAmB,EACnB,oBAAoB,EACpB,mBAAmB,EACnB,aAAa,GAKd,MAAM,sBAAsB,CAAC;AAE9B,8EAA8E;AAC9E,OAAO,EACL,mBAAmB,EACnB,yBAAyB,EACzB,gBAAgB,GAOjB,MAAM,4BAA4B,CAAC;AAEpC,mEAAmE;AACnE,2EAA2E;AAC3E,2EAA2E;AAC3E,OAAO,EACL,4BAA4B,EAC5B,6BAA6B,EAC7B,yBAAyB,GAI1B,MAAM,+BAA+B,CAAC;AAEvC,2EAA2E;AAC3E,kEAAkE;AAClE,gEAAgE;AAChE,0EAA0E;AAC1E,OAAO,EACL,yBAAyB,EACzB,qBAAqB,EACrB,oBAAoB,EACpB,qBAAqB,EACrB,sBAAsB,GAIvB,MAAM,0BAA0B,CAAC;AAElC,kCAAkC;AAClC,8EAA8E;AAC9E,2EAA2E;AAC3E,iFAAiF;AACjF,cAAc,mBAAmB,CAAC;AAElC,2CAA2C;AAC3C,uEAAuE;AACvE,yEAAyE;AACzE,yEAAyE;AACzE,OAAO,EACL,SAAS,IAAI,eAAe,EAC5B,KAAK,IAAI,WAAW,EACpB,gBAAgB,EAChB,UAAU,EACV,YAAY,EACZ,YAAY,EACZ,YAAY,EACZ,kBAAkB,GAEnB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,QAAQ,IAAI,YAAY,EAAE,qBAAqB,EAAoB,MAAM,iBAAiB,CAAC;AACpG,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAuB,MAAM,4BAA4B,CAAC;AACvG,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEjD,gCAAgC;AAChC,OAAO,EACL,qBAAqB,EACrB,0BAA0B,GAE3B,MAAM,uBAAuB,CAAC;AAE/B,6DAA6D;AAC7D,0EAA0E;AAC1E,0DAA0D;AAC1D,OAAO,EACL,uBAAuB,EACvB,YAAY,EACZ,YAAY,EACZ,WAAW,EACX,UAAU,GAQX,MAAM,iCAAiC,CAAC;AAEzC,sEAAsE;AACtE,sEAAsE;AACtE,6DAA6D;AAC7D,sEAAsE;AACtE,uEAAuE;AACvE,OAAO,EACL,sBAAsB,EACtB,uBAAuB,EACvB,yBAAyB,EACzB,OAAO,EACP,SAAS,EACT,iBAAiB,GAOlB,MAAM,gCAAgC,CAAC;AAExC,+EAA+E;AAC/E,gCAAgC;AAChC,+EAA+E;AAE/E,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAwCtD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAA4B;IAC/D,OAAO;QACL,cAAc,EAAE,IAAI,cAAc,CAAC;YACjC,MAAM,EAAE,MAAM,CAAC,YAAY,IAAI,EAAE;SAClC,CAAC;QACF,mBAAmB,EAAE,IAAI,mBAAmB,EAAE;QAC9C,YAAY,EAAE,IAAI,YAAY,CAAC;YAC7B,eAAe,EAAE,MAAM,CAAC,eAAe,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC;SAClE,CAAC;QACF,aAAa,EAAE,IAAI,aAAa,CAAC;YAC/B,eAAe,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC;YACrC,WAAW,EAAE,IAAI;SAClB,CAAC;QACF,cAAc,EAAE,IAAI,cAAc,CAAC;YACjC,UAAU,EAAE,MAAM,CAAC,UAAU;SAC9B,CAAC;KACH,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,qBAAqB;AACrB,+EAA+E;AAE/E;;GAEG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAEpC;;GAEG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAEpC;;GAEG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAErC;;GAEG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAEtC;;GAEG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,IAAI,CAAC;AAE7C;;GAEG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,KAAK,CAAC;AAEhD,+EAA+E;AAC/E,wBAAwB;AACxB,+EAA+E;AAE/E;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAqC;IACvE,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,IAAI,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,YAAY,GAAG,iBAAiB,EAAE,CAAC;QACnE,QAAQ,CAAC,IAAI,CAAC,iBAAiB,MAAM,CAAC,YAAY,gCAAgC,iBAAiB,GAAG,CAAC,CAAC;IAC1G,CAAC;IAED,IAAI,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QACvD,QAAQ,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;IAC/D,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QACxB,QAAQ,CAAC,IAAI,CAAC,8DAA8D,CAAC,CAAC;IAChF,CAAC;IAED,IAAI,MAAM,CAAC,eAAe,IAAI,MAAM,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClE,QAAQ,CAAC,IAAI,CAAC,yDAAyD,CAAC,CAAC;IAC3E,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,eAAe,CAAC"}

package/node_modules/@claude-flow/security/dist/mcp-caller-identity.d.ts

@@ -0,0 +1,90 @@
+/**
+ * McpCallerIdentity — ADR-377 Phase 3 (ruvnet/ruflo#2516, #2873).
+ *
+ * Per-invocation, Ed25519-signed capability tokens binding an MCP tool call
+ * to a specific caller. Closes the gap identified in arXiv:2603.07473
+ * (Caller Identity Confusion in MCP): authorization state today persists
+ * across callers with no re-verification, and `AgentAuthorizationPropagator`
+ * (ADR-144)'s `checkToolCall` validates a *scope* but not that the caller
+ * presenting it is who they claim to be for *this* call.
+ *
+ * Signing implementation follows the same pattern already used in this repo
+ * for Ed25519 signing (`@claude-flow/browser`'s `witness-signer.ts`): native
+ * `node:crypto`, zero new dependencies, sign+verify both supported (unlike
+ * `@claude-flow/security`'s own `plugins/integrity-verifier.ts`, which uses
+ * `@noble/ed25519` for verify-only). Reimplemented here rather than imported
+ * from `@claude-flow/browser` because a security-primitives module
+ * depending on the browser package would be a backwards layering
+ * dependency; the pattern is ~15 lines and not worth a cross-package import
+ * for that.
+ *
+ * Scope and honest limitations (per the ADR's own text)
+ * --------------------------------------------------------
+ * This module implements token issuance/verification only. It does NOT
+ * wire itself into any MCP tool dispatcher — this repo currently has at
+ * least two distinct `ToolRegistry` implementations
+ * (`v3/mcp/tool-registry.ts`, `v3/@claude-flow/mcp/src/tool-registry.ts`)
+ * plus a third under `@claude-flow/shared`, and it was not safe to guess
+ * which one is authoritative without risking silently wiring the wrong
+ * dispatch path. `AgentAuthorizationPropagator.checkToolCall` (ADR-144) is
+ * the natural composition point — call `verifyInvocationToken` first and
+ * only proceed to `checkToolCall` if it passes — but that composition is
+ * left to the caller rather than baked into `checkToolCall` itself, to
+ * avoid changing ADR-144's already-shipped, already-tested behavior.
+ *
+ * Key distribution (how callers obtain a private key to sign with in the
+ * first place) is explicitly out of scope — the ADR calls for "a follow-on
+ * ADR for key distribution" before this ships enabled by default, which is
+ * why `CLAUDE_FLOW_MCP_CALLER_AUTH` defaults to disabled.
+ */
+import type { KeyObject } from 'node:crypto';
+export interface CallerIdentityKey {
+    privateKey: KeyObject;
+    publicKey: KeyObject;
+    publicKeyHex: string;
+}
+export interface InvocationToken {
+    /** Agent/principal id of the caller this token was issued to. */
+    callerId: string;
+    /** Tool this token authorizes — a token issued for one tool cannot be
+     * replayed against another. */
+    toolName: string;
+    /** Unix ms the token was issued. */
+    issuedAt: number;
+    /** Unix ms after which the token is no longer valid. */
+    expiresAt: number;
+    /** Random per-token value; prevents replay of an otherwise-identical
+     * token issued in the same millisecond. */
+    nonce: string;
+    /** Hex-encoded Ed25519 signature over the canonicalized fields above. */
+    signature: string;
+}
+export interface TokenVerificationResult {
+    valid: boolean;
+    reason?: 'expired' | 'bad-signature' | 'tool-mismatch';
+}
+/** Generate a fresh Ed25519 keypair. */
+export declare function generateCallerIdentityKey(): CallerIdentityKey;
+/** Load a caller-identity key from a PEM-encoded private key string. */
+export declare function loadCallerIdentityKey(privateKeyPem: string): CallerIdentityKey;
+/**
+ * Issue a fresh, signed `InvocationToken` for `callerId` to call `toolName`.
+ * Callers must present a *new* token per invocation — tokens are
+ * single-tool-bound and short-lived (`ttlMs`, default 30s) by design; there
+ * is no renewal API on purpose.
+ */
+export declare function issueInvocationToken(callerId: string, toolName: string, key: CallerIdentityKey, opts?: {
+    ttlMs?: number;
+    now?: number;
+}): InvocationToken;
+/**
+ * Verify an `InvocationToken` against the issuing caller's public key and
+ * (if provided) the tool the caller is about to invoke. Never throws.
+ */
+export declare function verifyInvocationToken(token: InvocationToken, publicKey: KeyObject, opts?: {
+    toolName?: string;
+    now?: number;
+}): TokenVerificationResult;
+/** Off by default — see the file header re: key distribution being out of scope pending a follow-on ADR. Only the literal `'true'` enables enforcement. */
+export declare function isMcpCallerAuthEnabled(): boolean;
+//# sourceMappingURL=mcp-caller-identity.d.ts.map

package/node_modules/@claude-flow/security/dist/mcp-caller-identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-caller-identity.d.ts","sourceRoot":"","sources":["../src/mcp-caller-identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AAGH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAE7C,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,SAAS,CAAC;IACtB,SAAS,EAAE,SAAS,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,eAAe;IAC9B,iEAAiE;IACjE,QAAQ,EAAE,MAAM,CAAC;IACjB;mCAC+B;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,oCAAoC;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB,wDAAwD;IACxD,SAAS,EAAE,MAAM,CAAC;IAClB;+CAC2C;IAC3C,KAAK,EAAE,MAAM,CAAC;IACd,yEAAyE;IACzE,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,uBAAuB;IACtC,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,SAAS,GAAG,eAAe,GAAG,eAAe,CAAC;CACxD;AAeD,wCAAwC;AACxC,wBAAgB,yBAAyB,IAAI,iBAAiB,CAG7D;AAED,wEAAwE;AACxE,wBAAgB,qBAAqB,CAAC,aAAa,EAAE,MAAM,GAAG,iBAAiB,CAI9E;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,GAAG,EAAE,iBAAiB,EACtB,IAAI,GAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAO,GAC1C,eAAe,CAWjB;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,eAAe,EACtB,SAAS,EAAE,SAAS,EACpB,IAAI,GAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAO,GAC7C,uBAAuB,CAgBzB;AAQD,2JAA2J;AAC3J,wBAAgB,sBAAsB,IAAI,OAAO,CAEhD"}

package/node_modules/@claude-flow/security/dist/mcp-caller-identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-caller-identity.js","sourceRoot":"","sources":["../src/mcp-caller-identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AAEH,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,IAAI,EAAE,MAAM,EAAE,mBAAmB,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AA+BhH,MAAM,cAAc,GAAG,MAAM,CAAC;AAE9B,iGAAiG;AACjG,SAAS,cAAc,CAAC,CAAsF;IAC5G,OAAO,GAAG,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;AAC/E,CAAC;AAED,gFAAgF;AAChF,SAAS,mBAAmB,CAAC,SAAoB;IAC/C,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAC9D,OAAO,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACvD,CAAC;AAED,wCAAwC;AACxC,MAAM,UAAU,yBAAyB;IACvC,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;IACjE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,mBAAmB,CAAC,SAAS,CAAC,EAAE,CAAC;AACjF,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,qBAAqB,CAAC,aAAqB;IACzD,MAAM,UAAU,GAAG,gBAAgB,CAAC,aAAa,CAAC,CAAC;IACnD,MAAM,SAAS,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;IAC9C,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,mBAAmB,CAAC,SAAS,CAAC,EAAE,CAAC;AACjF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAClC,QAAgB,EAChB,QAAgB,EAChB,GAAsB,EACtB,OAAyC,EAAE;IAE3C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IACnC,MAAM,QAAQ,GAAG;QACf,QAAQ;QACR,QAAQ;QACR,QAAQ,EAAE,GAAG;QACb,SAAS,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,cAAc,CAAC;QAC/C,KAAK,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;KACvC,CAAC;IACF,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5G,OAAO,EAAE,GAAG,QAAQ,EAAE,SAAS,EAAE,CAAC;AACpC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CACnC,KAAsB,EACtB,SAAoB,EACpB,OAA4C,EAAE;IAE9C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IAEnC,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,IAAI,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,EAAE,CAAC;QACpE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IACnD,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,IAAI,GAAG,EAAE,CAAC;QAC3B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC7C,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CACzB,cAAc,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,EAChJ,MAAM,CACP,CAAC;IACF,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;IACjF,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;AAC1E,CAAC;AAED,+EAA+E;AAC/E,eAAe;AACf,+EAA+E;AAE/E,MAAM,eAAe,GAAG,6BAA6B,CAAC;AAEtD,2JAA2J;AAC3J,MAAM,UAAU,sBAAsB;IACpC,OAAO,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,KAAK,MAAM,CAAC;AACjD,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@claude-flow/cli",
-  "version": "3.32.41",
+  "version": "3.34.0",
   "type": "module",
   "description": "Ruflo CLI - Enterprise AI agent orchestration with 60+ specialized agents, swarm coordination, MCP server, self-learning hooks, and vector memory for Claude Code",
   "main": "dist/src/index.js",
@@ -120,6 +120,7 @@
     "zod": "^3.22.0"
   },
   "optionalDependencies": {
+    "@agntcy/slim-bindings": "2.0.0-alpha.5",
     "@napi-rs/keyring": "1.3.0",
     "@claude-flow/memory": "^3.0.0-alpha.21",
     "agentdb": "^3.0.0-alpha.17",

package/.claude/.proven-config-version

@@ -1 +0,0 @@
-sha256:6141a8ea990c5063b77e090ae8f37f9c539d8aa8f58dcceb30f3a82f97e57319

package/.claude/proven-config.json

@@ -1,42 +0,0 @@
-{
-  "adoptedAt": 1785428938153,
-  "championId": "sha256:6141a8ea990c5063b77e090ae8f37f9c539d8aa8f58dcceb30f3a82f97e57319",
-  "manifest": {
-    "schema": "ruflo.proven-config/v1",
-    "policy": {
-      "ref": "sha256:6141a8ea990c5063b77e090ae8f37f9c539d8aa8f58dcceb30f3a82f97e57319",
-      "value": {
-        "alpha": 0.3,
-        "subjectWeight": 1,
-        "mmrLambda": 0.5,
-        "bodyWeight": 1.5,
-        "typePenaltyFactor": 0.5
-      }
-    },
-    "layer": "framework/node-cli",
-    "compatibility": {
-      "ruflo": ">=3.24.0"
-    },
-    "benchmark": {
-      "corpus": "ADR-081-labelled-v1",
-      "corpusHash": "sha256:2f700b5c363e20a3bd88ce2bc9b87bbbbaa61732c6177894c6ec37890f888982"
-    },
-    "receipt": {
-      "heldOutDelta": 0.07381404928570845,
-      "redblue": "PASS",
-      "drift": 0,
-      "canary": {
-        "rollbackRate": 0,
-        "latencyP95": 244.612458000076,
-        "costPerTask": 0
-      },
-      "receiptCoverage": 1
-    },
-    "platform": [
-      "linux",
-      "macOS",
-      "windows"
-    ]
-  },
-  "previous": ""
-}