@claude-flow/cli 3.65.1 → 3.66.0

package/.claude/helpers/learning-loop.cjs

@@ -0,0 +1,594 @@
+// GENERATED by plugins/ruflo-mods/scripts/build-learning-loop-helper.mjs from the ruflo-mods learning loop (ADR-512). Do not edit.
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// plugins/ruflo-mods/scripts/learning-loop-helper.ts
+var learning_loop_helper_exports = {};
+__export(learning_loop_helper_exports, {
+  MAX_READ: () => MAX_READ,
+  enabled: () => enabled,
+  ingestDue: () => ingestDue,
+  lessonsForPrompt: () => lessonsForPrompt,
+  recordTurns: () => recordTurns
+});
+module.exports = __toCommonJS(learning_loop_helper_exports);
+var import_node_fs = require("node:fs");
+var import_node_path = require("node:path");
+
+// plugins/ruflo-mods/hooks/guidance/screen.ts
+var SECRETS = [
+  ["private key", /-----BEGIN [A-Z ]*PRIVATE KEY(?: BLOCK)?-----/],
+  ["aws access key", /\b(?:AKIA|ASIA)[0-9A-Z]{16}\b/],
+  ["github token", /\b(?:gh[pousr]_[A-Za-z0-9]{30,}|github_pat_[A-Za-z0-9_]{40,})\b/],
+  ["slack token", /\b(?:xox[abeprs]-|xapp-\d-)[A-Za-z0-9-]{10,}/],
+  ["google api key", /\bAIza[0-9A-Za-z_-]{35}(?:\b|(?![0-9A-Za-z_-]))/],
+  ["anthropic or openai key", /\bsk-(?:ant-|proj-)?[A-Za-z0-9_-]{24,}/],
+  // One start per token run (linear on '-eyJ' repeats), at the first eyJ after a '-' or the run start.
+  ["jwt", /(?<![A-Za-z0-9_-])(?=((?:[A-Za-z0-9_]*-)*?eyJ))\1[A-Za-z0-9_-]{8,}\.eyJ[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}/],
+  ["bearer token", /\bBearer\s+[A-Za-z0-9._~+/=-]{24,}/],
+  // The keyword ends an _ or - separated name (GITHUB_TOKEN=, "client_secret":), optionally then _key / _access_key
+  // (aws_secret_access_key =). Names that only start with it (TOKEN_URL=, MAX_TOKENS=) and all-digit values do not
+  // match, and nothing after the keyword can backtrack against it (linear on 'token_token_...').
+  // A value that only names where the secret lives is not one: process.env.X / os.environ / import.meta.env.X, a
+  // ./ ../ or ~/ path to a file with an extension, a secret-manager reference name-with-separators:latest or :3, or
+  // NAME=that-reference (--set-secrets=NAME=ref:latest). A literal value is never excluded by its shape alone.
+  ["key assignment", /(?<![A-Za-z0-9_-])[_-]*(?:[A-Za-z0-9]+[_-]+)*(?:api[_-]?key|secret|token|passw(?:or)?d|credential)s?(?:[_-](?:access[_-]?)?key)?["']?\s*[:=]\s*["']?(?!process\.env\.|os\.environ\b|import\.meta\.env\.|(?:\.{1,2}|~)\/[A-Za-z0-9_./-]*\.[A-Za-z0-9]{1,8}(?![A-Za-z0-9/+=_.-])|[A-Za-z][A-Za-z0-9]*(?:[_-][A-Za-z0-9]+)+:(?:latest|\d{1,4})\b|[A-Za-z][A-Za-z0-9]*(?:[_-][A-Za-z0-9]+)*=[A-Za-z][A-Za-z0-9]*(?:[_-][A-Za-z0-9]+)+:(?:latest|\d{1,4})\b)(?=[A-Za-z0-9/+=_.-]*[A-Za-z])[A-Za-z0-9/+=_.-]{16,}/i]
+];
+var INJECTION = [
+  ["override instructions", /\b(?:ignore|disregard|forget|override)\b[^.\n]{0,40}\b(?:previous|prior|above|earlier|all|any|system)\b[^.\n]{0,30}\b(?:instructions?|rules?|prompts?|guidelines?)\b/i],
+  ["role reassignment", /\byou are (?:now|no longer)\b|\bact as (?:an? )?(?:unrestricted|jailbroken)\b/i],
+  ["new instructions", /\b(?:new|updated|real) (?:system )?instructions?\s*:/i],
+  ["fake role tags", /<\/?\s*(?:system|assistant|developer|instructions?)\s*>|^\s*(?:system|assistant)\s*:/im],
+  ["concealment", /\bdo not (?:tell|inform|mention|reveal)[^.\n]{0,30}\b(?:user|human|operator)\b/i],
+  // `.env` has no word start before its dot, so it is matched on its own ("upload the .env file", "send ./config.env",
+  // ".envrc"); a dot inside a word does not end the phrase. A model's token counts are not credentials: --max-tokens,
+  // /oauth/token and "token usage/count/limit/budget/window" are left out (a file named token, /run/token, is not).
+  ["exfiltration", /\b(?:exfiltrate|send|post|upload|e-?mail)\b(?:[^.\n]|\.(?=\S)){0,50}(?:\b(?:secrets?|credentials?|api keys?)\b|(?:(?<!max[_-]?)\btokens\b|(?<!oauth\/)\btoken\b)(?![\s_-]*(?:usage|counts?|limits?|budgets?|window)\b)|\.env(?:rc)?\b)/i],
+  ["shell pipe", /\b(?:curl|wget)\b[^|\n]{0,200}\|\s*(?:sudo\s+)?(?:ba|z)?sh\b/i]
+];
+var INVISIBLE = /[\u0000-\u0008\u000b-\u001f\u007f-\u009f\u2028\u2029\p{Default_Ignorable_Code_Point}]/gu;
+var LEGACY_INVISIBLE = /[\u0000-\u0008\u000b-\u001f\u007f-\u009f\u200b-\u200f\u2028-\u202e\u2060-\u2064\ufeff]/g;
+var collapse = (text) => text.replace(/\s+/g, (run) => run.includes("\n") ? "\n" : " ");
+var bare = (text) => collapse(text.replace(INVISIBLE, "").normalize("NFKC").replace(INVISIBLE, ""));
+var readings = (text) => [bare(text), collapse(text.replace(LEGACY_INVISIBLE, "")), collapse(text.replace(INVISIBLE, " "))];
+var WINDOW = 2e4;
+var OVERLAP = 1024;
+function cut(clean) {
+  if (clean.length <= WINDOW) return [clean];
+  const out = [];
+  for (let start2 = 0; start2 < clean.length; start2 += WINDOW - OVERLAP) {
+    const ws = start2 === 0 ? -1 : clean.slice(start2, start2 + 256).search(/\s/);
+    const from = ws >= 0 ? start2 + ws + 1 : start2;
+    const lead = ws >= 0 && clean[from - 1] !== "\n" ? "
" : "";
+    out.push(lead + clean.slice(from, start2 + WINDOW));
+    if (start2 + WINDOW >= clean.length) break;
+  }
+  return out;
+}
+function windows(text) {
+  return readings(text).flatMap(cut);
+}
+var anyWindow = (parts2, re) => parts2.some((part) => re.test(part));
+var names = (rules, parts2) => rules.filter(([, re]) => anyWindow(parts2, re)).map(([name]) => name);
+function scanWindows(parts2) {
+  return { secrets: names(SECRETS, parts2), injection: names(INJECTION, parts2) };
+}
+var scan = (text) => scanWindows(windows(text));
+
+// plugins/ruflo-mods/hooks/compact-snapshot/snapshot.ts
+var MAX_BYTES = 2 * 1024 * 1024;
+function utf8Bytes(text) {
+  let n = 0;
+  for (let i = 0; i < text.length; i++) {
+    const c = text.charCodeAt(i);
+    if (c < 128) n += 1;
+    else if (c < 2048) n += 2;
+    else if (c >= 55296 && c <= 56319 && i + 1 < text.length) {
+      n += 4;
+      i++;
+    } else n += 3;
+  }
+  return n;
+}
+
+// plugins/ruflo-mods/hooks/loop/taint.ts
+var TEST_FILE = /(?:\.(?:test|spec)\.[A-Za-z0-9]+|^test_[^/]*\.py|_test\.(?:go|rs))$/;
+var TEST_DIRS = /* @__PURE__ */ new Set(["__tests__", "tests"]);
+var VERIFIER_CONFIG = /^(?:package\.json|vitest\.config\.[^/]+|jest\.config\.[^/]+|pytest\.ini|pyproject\.toml|setup\.cfg|tox\.ini|Cargo\.toml|go\.mod|tsconfig[^/]*\.json|\.eslintrc[^/]*|eslint\.config\.[^/]+|Makefile)$/;
+var parts = (path) => path.replace(/\\/g, "/").split("/").filter((p) => p !== "" && p !== ".");
+function relativePath(root, path) {
+  const p = path.replace(/\\/g, "/");
+  const r = root.replace(/\\/g, "/").replace(/\/+$/, "");
+  return r && p.startsWith(`${r}/`) ? p.slice(r.length + 1) : p;
+}
+function isTestPath(path) {
+  const segs = parts(path);
+  const base = segs.at(-1);
+  if (base === void 0) return false;
+  return TEST_FILE.test(base) || segs.slice(0, -1).some((d) => TEST_DIRS.has(d));
+}
+function isVerifierConfig(path) {
+  const base = parts(path).at(-1);
+  return base !== void 0 && VERIFIER_CONFIG.test(base);
+}
+var WEAKEN = /^(?:--passWithNoTests|--exclude|--testPathIgnorePatterns)(?:=|$)/;
+var SELECT = /^(?:-t|--testNamePattern|-k|--skip|-run)(?:=|$)/;
+var unquote = (token) => token.replace(/^['"]|['"]$/g, "");
+function narrows(segment, kind) {
+  const tokens = segment.split(/\s+/).map(unquote).filter(Boolean);
+  if (tokens.some((t) => WEAKEN.test(t))) return true;
+  if (kind !== "test") return false;
+  if (tokens.some((t) => SELECT.test(t))) return true;
+  return tokens.some((t) => !t.startsWith("-") && (t.includes("::") || isTestPath(t.split("::")[0])));
+}
+var WRITERS = /* @__PURE__ */ new Set(["rm", "unlink", "shred", "mv", "cp", "tee", "truncate", "patch", "dd", "ln", "install", "rsync", "touch"]);
+var GIT_WRITERS = /* @__PURE__ */ new Set(["rm", "mv", "checkout", "restore", "apply", "am", "reset", "stash", "clean"]);
+var WRAPPERS = /* @__PURE__ */ new Set(["sudo", "env", "command", "xargs", "time", "nice", "nohup"]);
+var IN_PLACE = /^(?:-[A-Za-z]*i|--in-place)/;
+var REDIRECT = /(?:^|[^<>&])\d*>>?(?!&)/;
+function writes(tokens) {
+  if (tokens.some((t) => REDIRECT.test(t))) return true;
+  let i = 0;
+  while (i < tokens.length && (/^[A-Za-z_][A-Za-z0-9_]*=/.test(tokens[i]) || WRAPPERS.has(tokens[i]))) i++;
+  const prog = tokens[i]?.split("/").at(-1);
+  if (prog === void 0) return false;
+  if (WRITERS.has(prog)) return true;
+  if (prog === "sed" || prog === "perl") return tokens.slice(i + 1).some((t) => IN_PLACE.test(t));
+  if (prog === "git") return tokens.slice(i + 1).some((t) => GIT_WRITERS.has(t));
+  return false;
+}
+var namesTests = (token) => isTestPath(token) || parts(token).some((d) => TEST_DIRS.has(d));
+function shellTouches(command) {
+  const out = { tests: false, config: false };
+  if (typeof command !== "string" || command.length > 16384) return out;
+  for (const segment of command.split(/&&|\|\||[;|\n]/)) {
+    const tokens = segment.split(/\s+/).map(unquote).filter(Boolean);
+    if (tokens.length === 0 || !writes(tokens)) continue;
+    for (const raw of tokens) {
+      const token = raw.replace(/^\d*>>?/, "");
+      if (!token || token.startsWith("-")) continue;
+      if (namesTests(token)) out.tests = true;
+      if (isVerifierConfig(token)) out.config = true;
+    }
+  }
+  return out;
+}
+
+// plugins/ruflo-mods/hooks/loop/record.ts
+var VERIFIED_PATH = ".claude-flow/data/verified-trajectories.jsonl";
+var LESSONS_PATH = ".claude-flow/data/learned-lessons.json";
+var MAX_LINES = 500;
+var MAX_STEPS = 64;
+var MAX_TASK = 300;
+var EDIT_TOOLS = /* @__PURE__ */ new Set(["Write", "Edit", "MultiEdit", "NotebookEdit"]);
+var TOOL = /^[A-Za-z0-9_.:-]{1,80}$/;
+function taskText(prompt) {
+  const flat = prompt.replace(/[\u0000-\u001f\u007f-\u009f]/g, " ").replace(/[A-Za-z0-9._%+-]{1,64}@[A-Za-z0-9.-]{1,253}\.[A-Za-z]{2,24}/g, "[email]").replace(/\s+/g, " ").trim().slice(0, MAX_TASK);
+  return scan(flat).secrets.length > 0 ? "[redacted]" : flat;
+}
+var SESSION = /^[A-Za-z0-9_-]{1,40}$/;
+function start(id, prompt, agent, now, session = "") {
+  return {
+    id,
+    task: taskText(prompt),
+    agent: /^[a-z][a-z0-9-]{0,40}$/.test(agent) ? agent : "coder",
+    startedAt: now,
+    session: SESSION.test(session) ? session : "",
+    steps: [],
+    lastEdit: 0,
+    edits: 0,
+    runs: [],
+    seq: 0,
+    editedTests: false,
+    editedConfig: false,
+    files: []
+  };
+}
+var MAX_FILES = 5;
+var FILE = /^[A-Za-z0-9_][A-Za-z0-9_./-]{0,119}$/;
+var SENSITIVE = /(?:^|[._-])(?:env|secrets?|credentials?|passwords?|tokens?|private|id_rsa|id_ed25519)(?:[._-]|$)|\.(?:pem|key|p12|pfx|crt|keystore)$|^(?:npmrc|netrc|pypirc)$/i;
+function lessonFile(path) {
+  if (!FILE.test(path)) return false;
+  const segs = path.split("/");
+  if (segs.some((s) => s === "" || s === ".." || s.startsWith("."))) return false;
+  if (SENSITIVE.test(segs.at(-1))) return false;
+  return !isTestPath(path) && !isVerifierConfig(path);
+}
+function step(t, tool, ok, verifier, passed, path, command) {
+  t.seq++;
+  if (t.steps.length < MAX_STEPS && TOOL.test(tool)) t.steps.push({ tool, ok });
+  if (tool === "Bash") {
+    const touched = shellTouches(command);
+    if (touched.tests) t.editedTests = true;
+    if (touched.config) t.editedConfig = true;
+  }
+  if (EDIT_TOOLS.has(tool) && ok) {
+    t.lastEdit = t.seq;
+    t.edits++;
+    if (typeof path === "string" && path.length > 0 && path.length <= 4096) {
+      if (isTestPath(path)) t.editedTests = true;
+      if (isVerifierConfig(path)) t.editedConfig = true;
+      if (t.files.length < MAX_FILES && !t.files.includes(path) && lessonFile(path)) t.files.push(path);
+    }
+  }
+  if (verifier && passed !== null) t.runs.push({ kind: verifier.kind, command: verifier.command, passed, seq: t.seq, narrowed: verifier.narrowed === true });
+}
+function decide(t, aborted) {
+  if (aborted || t.edits === 0) return { outcome: "unknown", run: null };
+  const after = t.runs.filter((r) => r.seq > t.lastEdit);
+  if (after.length === 0) return { outcome: "unknown", run: null };
+  const failed = after.find((r) => !r.passed);
+  return failed ? { outcome: "verified-failure", run: failed } : { outcome: "verified-success", run: after[after.length - 1] };
+}
+function taints(t, outcome, run) {
+  if (outcome !== "verified-success") return [];
+  const out = [];
+  if (t.editedTests) out.push("edited-tests");
+  if (t.editedConfig) out.push("edited-verifier-config");
+  if (run?.narrowed) out.push("narrowed-verifier");
+  return out;
+}
+function line(t, aborted, now) {
+  const { outcome, run } = decide(t, aborted);
+  return JSON.stringify({
+    v: 1,
+    id: t.id,
+    task: t.task,
+    agent: t.agent,
+    outcome,
+    verifier: run ? { kind: run.kind, command: run.command, passed: run.passed } : null,
+    steps: t.steps,
+    edits: t.edits,
+    taint: taints(t, outcome, run),
+    // ADR-511: a verified turn says which files it edited (the CLI names only a success's in a lesson).
+    ...outcome !== "unknown" && t.files.length > 0 ? { files: t.files } : {},
+    ...t.session ? { session: t.session } : {},
+    startedAt: t.startedAt,
+    endedAt: now
+  });
+}
+function appendLines(existing, lines) {
+  const all = [...existing.split("\n").filter((l) => l.trim()), ...lines];
+  return `${all.slice(-MAX_LINES).join("\n")}
+`;
+}
+
+// plugins/ruflo-mods/hooks/loop/lessons.ts
+var GATE = 0.6;
+var MAX_PER_PROMPT = 3;
+var MAX_LESSONS = 50;
+var MAX_FILES_SHOWN = 3;
+var WORD = /^[a-z0-9][a-z0-9 _./-]{0,40}$/;
+var AGENT = /^[a-z][a-z0-9-]{0,40}$/;
+var ID = /^L-[a-f0-9]{10}$/;
+var EVIDENCE = /^[A-Za-z0-9 ._:/=@+-]{1,80}$/;
+var count = (v) => typeof v === "number" && Number.isFinite(v) && v >= 0 ? Math.min(Math.floor(v), 1e6) : 0;
+function parseLessons(text) {
+  const raw = JSON.parse(text);
+  if (!raw || typeof raw !== "object" || raw.version !== 1) throw new Error("learned-lessons.json: not version 1");
+  const gate = typeof raw.gate === "number" && raw.gate >= GATE && raw.gate < 1 ? raw.gate : GATE;
+  const lessons = [];
+  for (const item of Array.isArray(raw.lessons) ? raw.lessons.slice(0, MAX_LESSONS) : []) {
+    if (!item || typeof item !== "object") continue;
+    const l = item;
+    const confidence = typeof l.confidence === "number" && l.confidence >= 0 && l.confidence <= 1 ? l.confidence : -1;
+    const keywords = Array.isArray(l.keywords) ? l.keywords.filter((k) => typeof k === "string" && WORD.test(k)).slice(0, 10) : [];
+    if (typeof l.id !== "string" || !ID.test(l.id) || typeof l.agent !== "string" || !AGENT.test(l.agent) || keywords.length === 0 || confidence < 0) continue;
+    if (l.kind !== "lesson" && l.kind !== "caution") continue;
+    if (l.kind === "lesson" && confidence < gate) continue;
+    const evidence = typeof l.evidence === "string" && EVIDENCE.test(l.evidence) ? l.evidence : "";
+    const files = l.kind === "lesson" && Array.isArray(l.files) ? l.files.filter((f) => typeof f === "string" && lessonFile(f)).slice(0, MAX_FILES_SHOWN) : [];
+    lessons.push({ id: l.id, kind: l.kind, agent: l.agent, keywords, confidence, successes: count(l.successes), failures: count(l.failures), evidence, files });
+  }
+  return { gate, lessons, belowGate: count(raw.belowGate) };
+}
+var words = (text) => new Set(text.toLowerCase().split(/[\s\-_.,;:!?'"()\[\]{}]+/).filter(Boolean));
+var says = (said, lower, keyword) => said.has(keyword) || /[ /]/.test(keyword) && lower.includes(keyword);
+var MIN_SHARE_OF_BEST = 0.5;
+function pick(file, prompt) {
+  const said = words(prompt);
+  const lower = prompt.toLowerCase();
+  const df = /* @__PURE__ */ new Map();
+  for (const l of file.lessons) for (const k of new Set(l.keywords)) df.set(k, (df.get(k) ?? 0) + 1);
+  const weight = (k) => Math.log((file.lessons.length + 1) / (df.get(k) ?? 1));
+  const sum = (ks) => ks.reduce((a, k) => a + weight(k), 0);
+  const scored = file.lessons.map((l) => {
+    const matched = l.keywords.filter((k) => says(said, lower, k));
+    return { l, overlap: matched.length, score: sum(matched) / sum(l.keywords) * l.confidence };
+  }).filter((x) => x.overlap > 0).sort((a, b) => b.score - a.score);
+  const best = scored[0]?.score ?? 0;
+  return scored.filter((x) => x.score >= best * MIN_SHARE_OF_BEST).slice(0, MAX_PER_PROMPT).map((x) => x.l);
+}
+function lessonBlock(chosen) {
+  if (chosen.length === 0) return null;
+  const lines = chosen.map((l) => {
+    const tag = `[${l.kind} ${l.id} conf ${l.confidence.toFixed(2)}, ${l.successes} passed / ${l.failures} failed]`;
+    const check = l.evidence ? ` \`${l.evidence}\`` : " verification";
+    if (l.kind === "caution") return `- ${tag} tasks about ${l.keywords.join(", ")} failed${check} ${l.failures} times: check that first`;
+    if (l.files.length) return `- ${tag} verified fixes for tasks like this (${l.keywords.join(", ")}) edited ${l.files.map((f) => `\`${f}\``).join(", ")}: look there first. They passed${check}.`;
+    return `- ${tag} tasks about ${l.keywords.join(", ")} went to ${l.agent} and passed${check}`;
+  });
+  const block = ["[RUFLO_LESSONS] From this project's own test/build exit status (never a model's claim of success). Advisory only:", ...lines].join("\n");
+  const found = scan(block);
+  return found.secrets.length || found.injection.length ? null : block;
+}
+
+// plugins/ruflo-mods/hooks/loop/verifier.ts
+var MAX_EVIDENCE = 80;
+var RUNNERS = "(?:npm|pnpm|yarn|bun)";
+var SCRIPT_KIND = {
+  test: "test",
+  "test:unit": "test",
+  "test:integration": "test",
+  "test:e2e": "test",
+  "test:ci": "test",
+  build: "build",
+  typecheck: "typecheck",
+  "type-check": "typecheck",
+  tsc: "typecheck",
+  lint: "lint",
+  check: "typecheck"
+};
+var RULES = [
+  // npm test / pnpm test / yarn test / bun test (with or without run, workspace flags before the script)
+  [new RegExp(`^${RUNNERS}(?:\\s+(?:-r|--recursive|-w|--workspaces|--filter\\s+\\S+|--silent|-s))*\\s+(?:run\\s+)?([a-z][a-z:-]*)\\b`), (m) => SCRIPT_KIND[m[1]] ?? null],
+  [/^(?:npx\s+|pnpm\s+exec\s+|pnpm\s+dlx\s+|yarn\s+|bunx\s+)?(?:vitest|jest|mocha|ava|playwright\s+test)\b/, "test"],
+  [/^(?:npx\s+|pnpm\s+exec\s+|yarn\s+|bunx\s+)?tsc\b/, "typecheck"],
+  [/^(?:npx\s+|pnpm\s+exec\s+|yarn\s+|bunx\s+)?eslint\b/, "lint"],
+  [/^node\s+--test\b/, "test"],
+  [/^cargo\s+(?:\+\S+\s+)?(test|nextest|build|check|clippy)\b/, (m) => m[1] === "build" ? "build" : m[1] === "check" ? "typecheck" : m[1] === "clippy" ? "lint" : "test"],
+  [/^go\s+(test|build|vet)\b/, (m) => m[1] === "test" ? "test" : m[1] === "build" ? "build" : "lint"],
+  [/^(?:python3?\s+-m\s+)?pytest\b/, "test"],
+  [/^(?:uv\s+run\s+|poetry\s+run\s+)pytest\b/, "test"],
+  [/^(?:\.\/)?(?:mvnw?|gradlew?)\s+(?:\S+\s+)*?(test|verify|build|check)\b/, (m) => m[1] === "build" ? "build" : "test"],
+  [/^dotnet\s+(test|build)\b/, (m) => m[1] === "test" ? "test" : "build"],
+  [/^make\s+(test|check|build)\b/, (m) => m[1] === "build" ? "build" : "test"],
+  [/^(?:mypy|pyright)\b/, "typecheck"]
+];
+var SETUP = /^(?:cd\s+\S+|export\s+[A-Za-z_][A-Za-z0-9_]*=\S*)$/;
+var ENV_PREFIX = /^(?:[A-Za-z_][A-Za-z0-9_]*=\S*\s+)+/;
+var REDIRECTS = /\s*(?:\d?>&\d|&>>?\s*\S+|\d?>>?\s*\S+|<\s*\S+)/g;
+function classify(command) {
+  if (typeof command !== "string" || command.length === 0 || command.length > 2e3) return null;
+  const flat = command.replace(/\\\n/g, " ").trim();
+  if (/[\n\r`]|\$\(|\|\||;|\|/.test(flat)) return null;
+  const segments = flat.split("&&").map((s) => s.replace(REDIRECTS, "").trim());
+  if (segments.some((s) => s.length === 0 || s.includes("&"))) return null;
+  let found = null;
+  for (const segment of segments) {
+    if (SETUP.test(segment)) continue;
+    const bare2 = segment.replace(ENV_PREFIX, "");
+    const kind = kindOf(bare2);
+    if (kind === null) return null;
+    found = { kind: rank(found?.kind, kind), command: bare2.replace(/\s+/g, " ").slice(0, MAX_EVIDENCE), narrowed: found?.narrowed === true || narrows(bare2, kind) };
+  }
+  return found;
+}
+function kindOf(segment) {
+  for (const [re, kind] of RULES) {
+    const m = segment.match(re);
+    if (m) return typeof kind === "function" ? kind(m) : kind;
+  }
+  return null;
+}
+var ORDER = ["lint", "typecheck", "build", "test"];
+var rank = (a, b) => a !== void 0 && ORDER.indexOf(a) > ORDER.indexOf(b) ? a : b;
+function verdict(result) {
+  if (!result || typeof result !== "object") return null;
+  const r = result;
+  if (r.deny !== void 0) return null;
+  const out = r.result ?? {};
+  if (out.interrupted === true || typeof out.backgroundTaskId === "string" || typeof out.timedOutAfterMs === "number") return null;
+  return r.isError !== true;
+}
+
+// plugins/ruflo-mods/hooks/loop/transcript.ts
+var INTERRUPTED = "[Request interrupted by user";
+var blocks = (e) => Array.isArray(e.message?.content) ? e.message.content : [];
+function promptOf(e) {
+  if (e.type !== "user" || e.isSidechain === true || e.isMeta === true || e.isCompactSummary === true) return null;
+  const content = e.message?.content;
+  const text = typeof content === "string" ? content : Array.isArray(content) && !content.some((b) => b.type === "tool_result") ? content.filter((b) => b.type === "text" && typeof b.text === "string").map((b) => b.text).join("\n") : null;
+  if (text === null) return null;
+  const trimmed = text.trimStart();
+  if (trimmed === "" || trimmed.startsWith("/") || trimmed.startsWith("<") || trimmed.startsWith(INTERRUPTED)) return null;
+  return text;
+}
+var time = (e, fallback) => {
+  const t = typeof e.timestamp === "string" ? Date.parse(e.timestamp) : NaN;
+  return Number.isFinite(t) ? t : fallback;
+};
+function resultOf(block, extra) {
+  return { isError: block.is_error === true, result: extra && typeof extra === "object" ? extra : {} };
+}
+function replay(text, opts) {
+  const lines = [];
+  let open = null;
+  const calls = /* @__PURE__ */ new Map();
+  const close = () => {
+    if (open && open.t.steps.length > 0) lines.push(line(open.t, open.aborted, open.last));
+    open = null;
+    calls.clear();
+  };
+  const raws = text.split("\n");
+  raws.pop();
+  let pos = 0;
+  for (const raw of raws) {
+    const at = pos;
+    pos += utf8Bytes(raw) + 1;
+    if (!raw.trim()) continue;
+    let e;
+    try {
+      e = JSON.parse(raw);
+    } catch {
+      continue;
+    }
+    if (!e || typeof e !== "object" || e.isSidechain === true) continue;
+    const prompt = promptOf(e);
+    if (prompt !== null) {
+      close();
+      const when = time(e, opts.now);
+      const id = `vt-c${opts.session.replace(/[^A-Za-z0-9]/g, "").slice(0, 16)}-${(opts.base + at).toString(36)}`;
+      open = { t: start(id, prompt, opts.agentFor(prompt), when, opts.session), aborted: false, last: when, at };
+      continue;
+    }
+    const turn = open;
+    if (!turn) continue;
+    turn.last = time(e, turn.last);
+    for (const b of blocks(e)) {
+      if (e.type === "assistant" && b.type === "tool_use" && typeof b.id === "string" && typeof b.name === "string") {
+        calls.set(b.id, { tool: b.name, input: b.input && typeof b.input === "object" ? b.input : {} });
+      } else if (e.type === "user" && b.type === "tool_result" && typeof b.tool_use_id === "string") {
+        const call = calls.get(b.tool_use_id);
+        if (!call) continue;
+        calls.delete(b.tool_use_id);
+        const command = call.tool === "Bash" ? call.input.command : void 0;
+        const verifier = call.tool === "Bash" ? classify(command) : null;
+        const target = typeof call.input.file_path === "string" ? call.input.file_path : typeof call.input.notebook_path === "string" ? call.input.notebook_path : void 0;
+        const status = verifier && call.input.run_in_background !== true ? verdict(resultOf(b, e.toolUseResult)) : null;
+        step(turn.t, call.tool, b.is_error !== true, verifier, status, target === void 0 ? void 0 : relativePath(opts.root, target), command);
+      } else if (e.type === "user" && b.type === "text" && typeof b.text === "string" && b.text.startsWith(INTERRUPTED)) {
+        turn.aborted = true;
+      }
+    }
+  }
+  const still = open;
+  if (opts.final || still === null) {
+    close();
+    return { lines, consumed: pos };
+  }
+  return { lines, consumed: still.at };
+}
+function lessonsFor(prompt, lessonsText) {
+  try {
+    return lessonBlock(pick(parseLessons(lessonsText), prompt)) ?? "";
+  } catch {
+    return "";
+  }
+}
+
+// plugins/ruflo-mods/scripts/learning-loop-helper.ts
+var STATE_PATH = ".claude-flow/data/classic-loop.json";
+var LEDGER_PATH = ".claude-flow/data/verified-ingest.json";
+var MAX_READ = 8 * 1024 * 1024;
+var MAX_LESSONS_FILE = 4 * 1024 * 1024;
+var MAX_SESSIONS = 50;
+var SESSION2 = /^[A-Za-z0-9_-]{1,64}$/;
+var OFF = /^(0|false|off|no)$/i;
+function enabled(root, env = process.env) {
+  if (OFF.test(env.RUFLO_LEARNING_LOOP ?? "")) return false;
+  if (!(0, import_node_fs.existsSync)((0, import_node_path.join)(root, ".claude-flow"))) return false;
+  try {
+    const config = JSON.parse((0, import_node_fs.readFileSync)((0, import_node_path.join)(root, ".claude-flow", "config.json"), "utf8"));
+    if (config?.learningLoop?.enabled === false) return false;
+  } catch {
+  }
+  return true;
+}
+function readState(root) {
+  try {
+    const raw = JSON.parse((0, import_node_fs.readFileSync)((0, import_node_path.join)(root, STATE_PATH), "utf8"));
+    if (raw && raw.v === 1 && raw.sessions && typeof raw.sessions === "object") return raw;
+  } catch {
+  }
+  return { v: 1, sessions: {} };
+}
+function writeAtomic(path, text) {
+  (0, import_node_fs.mkdirSync)((0, import_node_path.dirname)(path), { recursive: true });
+  const tmp = `${path}.${process.pid}.tmp`;
+  (0, import_node_fs.writeFileSync)(tmp, text);
+  (0, import_node_fs.renameSync)(tmp, path);
+}
+function readRange(path, from, to) {
+  const fd = (0, import_node_fs.openSync)(path, "r");
+  try {
+    const buf = Buffer.alloc(to - from);
+    let got = 0;
+    while (got < buf.length) {
+      const n = (0, import_node_fs.readSync)(fd, buf, got, buf.length - got, from + got);
+      if (n === 0) break;
+      got += n;
+    }
+    return buf.subarray(0, got).toString("utf8");
+  } finally {
+    (0, import_node_fs.closeSync)(fd);
+  }
+}
+function recordTurns(opts) {
+  try {
+    const { root } = opts;
+    if (typeof opts.transcriptPath !== "string" || typeof opts.session !== "string" || !SESSION2.test(opts.session)) return 0;
+    if (!opts.transcriptPath.endsWith(".jsonl")) return 0;
+    const size = (0, import_node_fs.statSync)(opts.transcriptPath).size;
+    const state = readState(root);
+    const known = state.sessions[opts.session];
+    let from = known && known.offset <= size ? known.offset : 0;
+    if (size - from > MAX_READ) from = size - MAX_READ;
+    if (from >= size) return 0;
+    const text = readRange(opts.transcriptPath, from, size);
+    const now = opts.now ?? Date.now();
+    const { lines, consumed } = replay(text, { base: from, session: opts.session, root, final: opts.final, agentFor: opts.agentFor, now });
+    if (lines.length > 0) {
+      const path = (0, import_node_path.join)(root, VERIFIED_PATH);
+      let existing = "";
+      try {
+        existing = (0, import_node_fs.readFileSync)(path, "utf8");
+      } catch (error) {
+        if (error.code !== "ENOENT") return 0;
+      }
+      writeAtomic(path, appendLines(existing, lines));
+    }
+    state.sessions[opts.session] = { offset: from + consumed, at: now };
+    const keep = Object.entries(state.sessions).sort((a, b) => b[1].at - a[1].at).slice(0, MAX_SESSIONS);
+    writeAtomic((0, import_node_path.join)(root, STATE_PATH), JSON.stringify({ v: 1, sessions: Object.fromEntries(keep) }));
+    return lines.length;
+  } catch {
+    return 0;
+  }
+}
+function lessonsForPrompt(root, prompt) {
+  try {
+    if (typeof prompt !== "string" || prompt.trim() === "" || prompt.trimStart().startsWith("/")) return "";
+    const path = (0, import_node_path.join)(root, LESSONS_PATH);
+    if ((0, import_node_fs.statSync)(path).size > MAX_LESSONS_FILE) return "";
+    return lessonsFor(prompt, (0, import_node_fs.readFileSync)(path, "utf8"));
+  } catch {
+    return "";
+  }
+}
+function ingestDue(root) {
+  try {
+    const recorded = (0, import_node_fs.statSync)((0, import_node_path.join)(root, VERIFIED_PATH)).mtimeMs;
+    try {
+      return recorded > (0, import_node_fs.statSync)((0, import_node_path.join)(root, LEDGER_PATH)).mtimeMs;
+    } catch {
+      return true;
+    }
+  } catch {
+    return false;
+  }
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  MAX_READ,
+  enabled,
+  ingestDue,
+  lessonsForPrompt,
+  recordTurns
+});

package/catalog-manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 1,
   "generation": 7,
-  "generatedAt": "2026-10-30T19:15:36.709Z",
-  "gitSha": "5ccd8011",
+  "generatedAt": "2026-10-31T05:51:35.623Z",
+  "gitSha": "0d94037e",
   "catalog": {
     "agents": 177,
     "tools": 445,

package/dist/src/commands/hooks.js

@@ -4656,6 +4656,7 @@ const verifiedIngestCommand = {
     options: [
         { name: 'dry-run', description: 'Count only: train nothing and write nothing', type: 'boolean', default: false },
         { name: 'force', description: 'Re-read the file even if unchanged since the last ingest', type: 'boolean', default: false },
+        { name: 'quiet', description: 'Suppress output (used when spawned detached from a hook)', type: 'boolean', default: false },
     ],
     examples: [
         { command: 'ruflo hooks verified-ingest', description: 'Ingest new verified outcomes and refresh learned-lessons.json' },
@@ -4664,12 +4665,14 @@ const verifiedIngestCommand = {
     action: async (ctx) => {
         try {
             const result = await callMCPTool('hooks_intelligence_verified-ingest', { dryRun: ctx.flags['dry-run'] === true || ctx.flags.dryRun === true, force: ctx.flags.force === true });
+            if (ctx.flags.quiet)
+                return { success: true, data: result };
             if (ctx.flags.format === 'json') {
                 output.printJson(result);
                 return { success: true, data: result };
             }
             if (result.skipped === 'no-file') {
-                output.printInfo('No recorded turns yet (.claude-flow/data/verified-trajectories.jsonl). Turn on the ruflo-mods learningLoop option.');
+                output.printInfo('No recorded turns yet (.claude-flow/data/verified-trajectories.jsonl). The classic hooks and the ruflo-mods learningLoop option both record them.');
                 return { success: true, data: result };
             }
             if (!result.sonaAvailable)

package/dist/src/init/executor.js

@@ -540,7 +540,7 @@ export async function executeUpgrade(targetDir, upgradeSettings = false, riskySe
         const sourceHelpersForUpgrade = findSourceHelpersDir();
         if (sourceHelpersForUpgrade) {
             // Keep in sync with helper-refresh.ts:CRITICAL_HELPERS.
-            const criticalHelpers = ['auto-memory-hook.mjs', 'hook-handler.cjs', 'intelligence.cjs', 'statusline.cjs', 'router.cjs'];
+            const criticalHelpers = ['auto-memory-hook.mjs', 'hook-handler.cjs', 'intelligence.cjs', 'statusline.cjs', 'router.cjs', 'learning-loop.cjs'];
             for (const helperName of criticalHelpers) {
                 const targetPath = path.join(targetDir, '.claude', 'helpers', helperName);
                 const sourcePath = path.join(sourceHelpersForUpgrade, helperName);

package/dist/src/init/helper-refresh.js

@@ -78,6 +78,10 @@ export const CRITICAL_HELPERS = [
     // ("latest" -> tester). ADR-389 / #3401. It is CommonJS, so it ships as
     // `.cjs`: a `.js` copy cannot load in a `"type":"module"` project (#3555).
     'router.cjs',
+    // learning-loop.cjs is the classic-hooks learning loop hook-handler.cjs loads (ADR-512),
+    // bundled from the ruflo-mods loop source; here so every install records verified turns
+    // and sees lessons on its next `ruflo` command, not only with the mod.
+    'learning-loop.cjs',
 ];
 function errorCode(error) {
     return typeof error === 'object' && error !== null && 'code' in error