@claude-flow/cli 3.63.1 → 3.63.2

package/.claude/helpers/helpers.manifest.json

@@ -1,6 +1,6 @@
 {
   "manifest": {
-    "version": "3.63.1",
+    "version": "3.63.2",
     "files": {
       "auto-memory-hook.mjs": "631fac9d518835e2852a406888316bbbddddb49e7ed8e406d2e971f46833df9a",
       "hook-handler.cjs": "24502a3bcb78770971147940515c992e35b6736ae14ee2dc54e07d4cdef6a1d8",
@@ -9,6 +9,6 @@
       "router.cjs": "16648b3c0d73b6681ac2d8d13def6a68286c57f5a11004de5b19a0fa088c833d"
     }
   },
-  "signature": "xx5ziGPJmfDIIK6zGzfFYPrIIFKubOUKaPkojpTDZgqzgA7CDabpDtIOQQxJd4qEpK3EPZOprwRT6h94FeuNAA==",
+  "signature": "6+Obx8HZs73gmcPZ6JJH6sBZf3OGb1DC5p5p0K8QhMAAr1QwhKu2uNPv36NmjpsbOTJ0MpidudSRt4fP/ToVBA==",
   "algorithm": "ed25519"
 }

package/catalog-manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 1,
   "generation": 7,
-  "generatedAt": "2026-10-26T03:10:50.719Z",
-  "gitSha": "631c1557",
+  "generatedAt": "2026-10-26T14:15:30.738Z",
+  "gitSha": "a52ae16e",
   "catalog": {
     "agents": 177,
     "tools": 444,

package/dist/src/mcp-tools/http-fetch-tools.js

@@ -61,11 +61,33 @@ export function validateUrl(rawUrl) {
 function isPrivateOrLoopback(host) {
     if (host === 'localhost' || host === 'localhost.localdomain')
         return true;
-    // IPv6 loopback
-    if (host === '::1' || host === '[::1]')
-        return true;
+    // Node's URL parser keeps brackets in `.hostname` for every IPv6 literal
+    // (e.g. "[::1]", "[fc00::1]", "[::ffff:7f00:1]"). Strip them once so every
+    // check below operates on the bare address — without this, the fc00::/7
+    // and fe80::/10 checks further down never match anything (they test
+    // `startsWith('fc'/'fe80:')` against a string starting with "["), and an
+    // IPv4-mapped-IPv6 literal (`::ffff:a.b.c.d`, which Node normalizes to a
+    // canonical `::ffff:xxxx:yyyy` hex form) sails through both the IPv4 and
+    // IPv6 branches untested — a live SSRF bypass (e.g. `::ffff:127.0.0.1` or
+    // `::ffff:169.254.169.254` reaching loopback / cloud-metadata targets).
+    const bare = host.startsWith('[') && host.endsWith(']') ? host.slice(1, -1) : host;
+    if (bare === '::1')
+        return true; // IPv6 loopback
+    // IPv4-mapped IPv6 — decode back to dotted-decimal and recurse into the
+    // IPv4 check below so it inherits every existing private/loopback/
+    // link-local/CGNAT rule instead of needing its own copy.
+    const mappedHex = bare.match(/^::ffff:([0-9a-f]{1,4}):([0-9a-f]{1,4})$/);
+    if (mappedHex) {
+        const hi = parseInt(mappedHex[1], 16);
+        const lo = parseInt(mappedHex[2], 16);
+        const decoded = `${(hi >> 8) & 0xff}.${hi & 0xff}.${(lo >> 8) & 0xff}.${lo & 0xff}`;
+        return isPrivateOrLoopback(decoded);
+    }
+    const mappedDecimal = bare.match(/^::ffff:(\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3})$/);
+    if (mappedDecimal)
+        return isPrivateOrLoopback(mappedDecimal[1]);
     // IPv4 numeric checks
-    const m = host.match(/^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})$/);
+    const m = bare.match(/^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})$/);
     if (m) {
         const a = Number(m[1]);
         const b = Number(m[2]);
@@ -85,12 +107,18 @@ function isPrivateOrLoopback(host) {
             return true; // CGNAT
         return false;
     }
-    // IPv6 bracketed addresses and other special forms — be conservative and
-    // accept only public-looking literals. Reject obvious private/local forms.
-    if (host.startsWith('fc') || host.startsWith('fd'))
+    // IPv6 special forms — be conservative and accept only public-looking
+    // literals. Reject obvious private/local forms.
+    if (bare.startsWith('fc') || bare.startsWith('fd'))
         return true; // fc00::/7 ULA
-    if (host.startsWith('fe80:'))
+    if (bare.startsWith('fe80:'))
         return true; // link-local
+    // KNOWN LIMITATION (pre-existing, not introduced by the bracket-stripping /
+    // IPv4-mapped-IPv6 fix above; flagged by an independent adversarial review):
+    // `::` (IPv6 unspecified/"any", the analog of 0.0.0.0, which the IPv4 branch
+    // above does block), IPv6 multicast (ff00::/8), and NAT64 (64:ff9b::/96) are
+    // not covered. Left as a follow-up hardening item rather than scope-creeping
+    // this patch.
     return false;
 }
 export function validateHeaders(headers) {

package/node_modules/@claude-flow/security/dist/input-validator.d.ts

@@ -159,14 +159,14 @@ export declare const SpawnAgentSchema: z.ZodObject<{
     timeout: z.ZodOptional<z.ZodNumber>;
 }, "strip", z.ZodTypeAny, {
     type: "coder" | "reviewer" | "tester" | "planner" | "researcher" | "security-architect" | "security-auditor" | "memory-specialist" | "swarm-specialist" | "integration-architect" | "performance-engineer" | "core-architect" | "test-architect" | "queen-coordinator" | "project-coordinator";
-    id?: string | undefined;
     config?: Record<string, unknown> | undefined;
     timeout?: number | undefined;
+    id?: string | undefined;
 }, {
     type: "coder" | "reviewer" | "tester" | "planner" | "researcher" | "security-architect" | "security-auditor" | "memory-specialist" | "swarm-specialist" | "integration-architect" | "performance-engineer" | "core-architect" | "test-architect" | "queen-coordinator" | "project-coordinator";
-    id?: string | undefined;
     config?: Record<string, unknown> | undefined;
     timeout?: number | undefined;
+    id?: string | undefined;
 }>;
 /**
  * Task input schema
@@ -181,13 +181,13 @@ export declare const TaskInputSchema: z.ZodObject<{
     taskId: string;
     content: string;
     agentType: "coder" | "reviewer" | "tester" | "planner" | "researcher" | "security-architect" | "security-auditor" | "memory-specialist" | "swarm-specialist" | "integration-architect" | "performance-engineer" | "core-architect" | "test-architect" | "queen-coordinator" | "project-coordinator";
-    priority?: "low" | "medium" | "high" | "critical" | undefined;
+    priority?: "critical" | "high" | "medium" | "low" | undefined;
     metadata?: Record<string, unknown> | undefined;
 }, {
     taskId: string;
     content: string;
     agentType: "coder" | "reviewer" | "tester" | "planner" | "researcher" | "security-architect" | "security-auditor" | "memory-specialist" | "swarm-specialist" | "integration-architect" | "performance-engineer" | "core-architect" | "test-architect" | "queen-coordinator" | "project-coordinator";
-    priority?: "low" | "medium" | "high" | "critical" | undefined;
+    priority?: "critical" | "high" | "medium" | "low" | undefined;
     metadata?: Record<string, unknown> | undefined;
 }>;
 /**
@@ -234,16 +234,16 @@ export declare const ExecutorConfigSchema: z.ZodObject<{
     cwd: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>>;
     allowSudo: z.ZodDefault<z.ZodBoolean>;
 }, "strip", z.ZodTypeAny, {
-    timeout: number;
     allowedCommands: string[];
+    timeout: number;
     maxBuffer: number;
     allowSudo: boolean;
     blockedPatterns?: string[] | undefined;
     cwd?: string | undefined;
 }, {
     allowedCommands: string[];
-    timeout?: number | undefined;
     blockedPatterns?: string[] | undefined;
+    timeout?: number | undefined;
     maxBuffer?: number | undefined;
     cwd?: string | undefined;
     allowSudo?: boolean | undefined;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@claude-flow/cli",
-  "version": "3.63.1",
+  "version": "3.63.2",
   "type": "module",
   "description": "Ruflo CLI - Enterprise AI agent orchestration with 60+ specialized agents, swarm coordination, MCP server, self-learning hooks, and vector memory for Claude Code",
   "main": "dist/src/index.js",