@claude-flow/cli 3.56.9 → 3.57.0

package/plugins/ruflo-metaharness/hooks/screen.ts

@@ -109,7 +109,9 @@ const QUOTED = /(["'\x60])((?:(?!\1)[^\n]){1,256})\1/y
 const BARE_VALUE = /[^\s"'\x60,;]{1,256}/y
 const QUERY_VALUE = /[^\s"'\x60,;&]{1,256}/y
 
-/** A secret-named key assigned a literal value: env style, JSON, YAML, code. Values that are calls, references or placeholders do not count. */
+/** A secret-named key assigned a literal value: env style, JSON, YAML, code. Values that are calls, references or placeholders do not count.
+ * A key that is itself a multi-word hyphenated name is an entry's name, not a credential field (an agentdb write is `{ key: name, value: note }`),
+ * so the value is not judged by its key; the secret shapes above still screen the text as a whole (#4202). */
 function assignmentSecret(text: string): boolean {
   let valueEnd = 0
   for (const m of text.matchAll(KEY_NAME)) {
@@ -117,6 +119,10 @@ function assignmentSecret(text: string): boolean {
     const at = m.index + m[0].length
     let back = m.index
     while (back > 0 && m.index - back < 64 && /[A-Za-z0-9_.-]/.test(text.charAt(back - 1))) back--
+    if (hyphenName((text.slice(back, m.index) + m[0]).replace(/["']?\s*[:=]\s*$/, ''))) {
+      valueEnd = at
+      continue
+    }
     const re = /["'\x60]/.test(text.charAt(at)) ? QUOTED : /[?&]/.test(text.charAt(back - 1)) ? QUERY_VALUE : BARE_VALUE
     re.lastIndex = at
     const hit = re.exec(text)

package/plugins/ruflo-metaharness/scripts/_darwin.mjs

@@ -2,7 +2,7 @@
 //
 // Mirrors `_harness.mjs` for the umbrella `metaharness` / `harness` binaries,
 // but targets the separate darwin binary (`metaharness-darwin`) which is
-// published as its own npm package (`@metaharness/darwin@~0.10.2`).
+// published as its own npm package (`@metaharness/darwin@~0.12.0`).
 //
 // Shared plumbing (degraded classification, --json injection, trailing-JSON
 // parse, degraded emitter) lives in `_invoke.mjs`. What stays here is the
@@ -61,14 +61,14 @@ const DEFAULT_TIMEOUT_MS = 60_000;
 
 // Pinned semver range. The `~` allows patch upgrades without re-pinning.
 // Must cover the `@metaharness/darwin` optionalDependency range in
-// v3/@claude-flow/cli/package.json (`~0.10.2`). It sat at ~0.8.0 while that
-// range moved to ~0.9.0 (#2958) and ~0.10.2 (#3262), because the pin-drift
+// v3/@claude-flow/cli/package.json (`~0.12.0`). It sat at ~0.8.0 while that
+// range moved to ~0.9.0 (#2958), ~0.10.2 (#3262) and ~0.12.0 (#3219), because the pin-drift
 // guard only compared MH_DARWIN_PIN (distill-oracle.ts). This range picks
 // the darwin version the evolve / bench / security-bench tools run and the
 // gepa cache fallback installs; scripts/check-metaharness-pins.mjs now fails
 // when it no longer covers the declared range.
 const DARWIN_PKG = '@metaharness/darwin';
-const DARWIN_PIN_VERSION = '~0.10.2';
+const DARWIN_PIN_VERSION = '~0.12.0';
 const DARWIN_PIN = `${DARWIN_PKG}@${DARWIN_PIN_VERSION}`;
 
 const REASON_PREFIX = 'metaharness-darwin';