@claude-flow/cli 3.65.1 → 3.66.1

package/dist/src/mods/command-registry/schema.d.ts

@@ -388,6 +388,7 @@ export declare const catalogEntrySchema: z.ZodObject<{
     }>, "many">;
     notes: z.ZodArray<z.ZodString, "many">;
 }, "strict", z.ZodTypeAny, {
+    status: "documentation" | "shipped" | "source-only";
     sources: {
         digest: string;
         sourcePath: string;
@@ -398,7 +399,6 @@ export declare const catalogEntrySchema: z.ZodObject<{
         shippedIn: string[];
         initCategory?: string | undefined;
     }[];
-    status: "documentation" | "shipped" | "source-only";
     divergent: boolean;
     definition: {
         id: string;
@@ -429,6 +429,7 @@ export declare const catalogEntrySchema: z.ZodObject<{
     };
     notes: string[];
 }, {
+    status: "documentation" | "shipped" | "source-only";
     sources: {
         digest: string;
         sourcePath: string;
@@ -439,7 +440,6 @@ export declare const catalogEntrySchema: z.ZodObject<{
         shippedIn: string[];
         initCategory?: string | undefined;
     }[];
-    status: "documentation" | "shipped" | "source-only";
     divergent: boolean;
     definition: {
         id: string;
@@ -654,6 +654,7 @@ export declare const commandCatalogSchema: z.ZodObject<{
         }>, "many">;
         notes: z.ZodArray<z.ZodString, "many">;
     }, "strict", z.ZodTypeAny, {
+        status: "documentation" | "shipped" | "source-only";
         sources: {
             digest: string;
             sourcePath: string;
@@ -664,7 +665,6 @@ export declare const commandCatalogSchema: z.ZodObject<{
             shippedIn: string[];
             initCategory?: string | undefined;
         }[];
-        status: "documentation" | "shipped" | "source-only";
         divergent: boolean;
         definition: {
             id: string;
@@ -695,6 +695,7 @@ export declare const commandCatalogSchema: z.ZodObject<{
         };
         notes: string[];
     }, {
+        status: "documentation" | "shipped" | "source-only";
         sources: {
             digest: string;
             sourcePath: string;
@@ -705,7 +706,6 @@ export declare const commandCatalogSchema: z.ZodObject<{
             shippedIn: string[];
             initCategory?: string | undefined;
         }[];
-        status: "documentation" | "shipped" | "source-only";
         divergent: boolean;
         definition: {
             id: string;
@@ -738,6 +738,7 @@ export declare const commandCatalogSchema: z.ZodObject<{
     }>, "many">;
 }, "strict", z.ZodTypeAny, {
     entries: {
+        status: "documentation" | "shipped" | "source-only";
         sources: {
             digest: string;
             sourcePath: string;
@@ -748,7 +749,6 @@ export declare const commandCatalogSchema: z.ZodObject<{
             shippedIn: string[];
             initCategory?: string | undefined;
         }[];
-        status: "documentation" | "shipped" | "source-only";
         divergent: boolean;
         definition: {
             id: string;
@@ -784,6 +784,7 @@ export declare const commandCatalogSchema: z.ZodObject<{
     sourceDigest: string;
 }, {
     entries: {
+        status: "documentation" | "shipped" | "source-only";
         sources: {
             digest: string;
             sourcePath: string;
@@ -794,7 +795,6 @@ export declare const commandCatalogSchema: z.ZodObject<{
             shippedIn: string[];
             initCategory?: string | undefined;
         }[];
-        status: "documentation" | "shipped" | "source-only";
         divergent: boolean;
         definition: {
             id: string;

package/dist/src/update/rate-limiter.d.ts

@@ -10,6 +10,12 @@ export interface RateLimitState {
 }
 export declare function loadState(): RateLimitState;
 export declare function saveState(state: RateLimitState): void;
+/**
+ * Whether this is a CI run. CI systems set `CI` to `true`, `1` or other values, so any value
+ * except empty, `0` or `false` counts (GitHub Actions sets CI=true). Matching only `true` let CI=1 runs check for updates and
+ * install one (`npm install @claude-flow/cli@<latest>`) into the working directory mid-run.
+ */
+export declare function isCI(env?: NodeJS.ProcessEnv): boolean;
 export declare function shouldCheckForUpdates(intervalHours?: number): {
     allowed: boolean;
     reason?: string;

package/dist/src/update/rate-limiter.js

@@ -45,9 +45,20 @@ export function saveState(state) {
     ensureDir();
     fs.writeFileSync(STATE_FILE, JSON.stringify(state, null, 2));
 }
+/**
+ * Whether this is a CI run. CI systems set `CI` to `true`, `1` or other values, so any value
+ * except empty, `0` or `false` counts (GitHub Actions sets CI=true). Matching only `true` let CI=1 runs check for updates and
+ * install one (`npm install @claude-flow/cli@<latest>`) into the working directory mid-run.
+ */
+export function isCI(env = process.env) {
+    return ['CI', 'CONTINUOUS_INTEGRATION'].some((name) => {
+        const value = env[name];
+        return value !== undefined && value.trim() !== '' && !/^(0|false)$/i.test(value.trim());
+    });
+}
 export function shouldCheckForUpdates(intervalHours = DEFAULT_INTERVAL_HOURS) {
     // Skip in CI environments
-    if (process.env.CI === 'true' || process.env.CONTINUOUS_INTEGRATION === 'true') {
+    if (isCI()) {
         return { allowed: false, reason: 'CI environment detected' };
     }
     // Skip if explicitly disabled

package/node_modules/@claude-flow/plugin-agent-federation/dist/application/policy-engine.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"policy-engine.d.ts","sourceRoot":"","sources":["../../src/application/policy-engine.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAsB,MAAM,mCAAmC,CAAC;AACnF,OAAO,EAAE,KAAK,SAAS,EAAgB,KAAK,YAAY,EAAE,KAAK,eAAe,EAAE,MAAM,4CAA4C,CAAC;AACnI,OAAO,EAAE,KAAK,qBAAqB,EAAE,MAAM,2CAA2C,CAAC;AAEvF,MAAM,MAAM,mBAAmB,GAC3B,qBAAqB,GACrB,oBAAoB,GACpB,iBAAiB,GACjB,kBAAkB,GAClB,kBAAkB,GAClB,mBAAmB,GACnB,kBAAkB,CAAC;AAEvB,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,mBAAmB,EAAE,SAAS,qBAAqB,EAAE,CAAC;IAC/D,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC,QAAQ,CAAC,oBAAoB,EAAE,OAAO,CAAC;IACvC,QAAQ,CAAC,qBAAqB,EAAE,UAAU,CAAC;IAC3C,QAAQ,CAAC,sBAAsB,EAAE,UAAU,CAAC;IAC5C,QAAQ,CAAC,qBAAqB,EAAE,UAAU,CAAC;CAC5C;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,cAAc,EAAE,SAAS,mBAAmB,EAAE,CAAC;IACxD,QAAQ,CAAC,oBAAoB,EAAE,OAAO,CAAC;IACvC,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC;CAChC;AA4CD,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,CAAC,KAAK,EAAE,mBAAmB,KAAK,OAAO,CAAC;CACrD;AAED,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAmB;IACxC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAiB;IAChD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAkB;IAC5C,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAsD;gBAGtF,IAAI,EAAE,gBAAgB,EACtB,cAAc,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,EACxC,SAAS,CAAC,EAAE,eAAe;IAc7B,eAAe,CACb,WAAW,EAAE,qBAAqB,EAClC,UAAU,EAAE,UAAU,EACtB,gBAAgB,EAAE,MAAM,EACxB,YAAY,EAAE,MAAM,GACnB,sBAAsB;IAyDzB,oBAAoB,CAAC,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,GAAG,SAAS;IAWhF,mBAAmB,CACjB,YAAY,EAAE,UAAU,EACxB,aAAa,EAAE,UAAU,GACxB;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,qBAAqB,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE;IAgCvE,OAAO,CAAC,cAAc;IAatB,OAAO,CAAC,0BAA0B;CAyBnC"}
+{"version":3,"file":"policy-engine.d.ts","sourceRoot":"","sources":["../../src/application/policy-engine.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAsB,MAAM,mCAAmC,CAAC;AACnF,OAAO,EAAE,KAAK,SAAS,EAAgB,KAAK,YAAY,EAAE,KAAK,eAAe,EAAE,MAAM,4CAA4C,CAAC;AACnI,OAAO,EAAE,KAAK,qBAAqB,EAAE,MAAM,2CAA2C,CAAC;AAEvF,MAAM,MAAM,mBAAmB,GAC3B,qBAAqB,GACrB,oBAAoB,GACpB,iBAAiB,GACjB,kBAAkB,GAClB,kBAAkB,GAClB,mBAAmB,GACnB,kBAAkB,CAAC;AAEvB,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,mBAAmB,EAAE,SAAS,qBAAqB,EAAE,CAAC;IAC/D,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC,QAAQ,CAAC,oBAAoB,EAAE,OAAO,CAAC;IACvC,QAAQ,CAAC,qBAAqB,EAAE,UAAU,CAAC;IAC3C,QAAQ,CAAC,sBAAsB,EAAE,UAAU,CAAC;IAC5C,QAAQ,CAAC,qBAAqB,EAAE,UAAU,CAAC;CAC5C;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,cAAc,EAAE,SAAS,mBAAmB,EAAE,CAAC;IACxD,QAAQ,CAAC,oBAAoB,EAAE,OAAO,CAAC;IACvC,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC;CAChC;AAuED,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,CAAC,KAAK,EAAE,mBAAmB,KAAK,OAAO,CAAC;CACrD;AAED,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAmB;IACxC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAiB;IAChD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAkB;IAC5C,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAsD;gBAGtF,IAAI,EAAE,gBAAgB,EACtB,cAAc,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,EACxC,SAAS,CAAC,EAAE,eAAe;IAc7B,eAAe,CACb,WAAW,EAAE,qBAAqB,EAClC,UAAU,EAAE,UAAU,EACtB,gBAAgB,EAAE,MAAM,EACxB,YAAY,EAAE,MAAM,GACnB,sBAAsB;IAsEzB,oBAAoB,CAAC,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,GAAG,SAAS;IAWhF,mBAAmB,CACjB,YAAY,EAAE,UAAU,EACxB,aAAa,EAAE,UAAU,GACxB;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,qBAAqB,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE;IAgCvE,OAAO,CAAC,cAAc;IAatB,OAAO,CAAC,0BAA0B;CAyBnC"}

package/node_modules/@claude-flow/plugin-agent-federation/dist/application/policy-engine.js

@@ -13,6 +13,25 @@ const DEFAULT_SECURITY_POLICY = {
     minTrustLevelForMemory: TrustLevel.TRUSTED,
     minTrustLevelForSpawn: TrustLevel.PRIVILEGED,
 };
+const POLICY_CATEGORY_FOR_MESSAGE_TYPE = {
+    'task-assignment': 'write',
+    'context-share': 'write',
+    'claim-event': 'write',
+    'memory-query': 'memory',
+    'memory-response': 'memory',
+    'agent-spawn': 'spawn',
+    'agent-handoff': 'spawn',
+};
+function policyThresholdForCategory(policy, category) {
+    switch (category) {
+        case 'write':
+            return policy.minTrustLevelForWrite;
+        case 'memory':
+            return policy.minTrustLevelForMemory;
+        case 'spawn':
+            return policy.minTrustLevelForSpawn;
+    }
+}
 const CLAIMS_FOR_MESSAGE_TYPE = {
     'task-assignment': ['federation:write'],
     'memory-query': ['federation:read', 'federation:memory'],
@@ -100,6 +119,18 @@ export class PolicyEngine {
                 trustLevelSufficient: false,
             };
         }
+        const policyCategory = POLICY_CATEGORY_FOR_MESSAGE_TYPE[messageType];
+        if (policyCategory) {
+            const requiredLevel = policyThresholdForCategory(this.securityPolicy, policyCategory);
+            if (trustLevel < requiredLevel) {
+                return {
+                    allowed: false,
+                    reason: `Trust level ${trustLevel} below configured minimum ${requiredLevel} for ${policyCategory} operations`,
+                    requiredClaims,
+                    trustLevelSufficient: false,
+                };
+            }
+        }
         return {
             allowed: true,
             reason: 'Policy check passed',

package/node_modules/@claude-flow/plugin-agent-federation/dist/application/policy-engine.js.map

@@ -1 +1 @@
-{"version":3,"file":"policy-engine.js","sourceRoot":"","sources":["../../src/application/policy-engine.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AAgCnF,MAAM,uBAAuB,GAAmB;IAC9C,mBAAmB,EAAE,SAAS;IAC9B,oBAAoB,EAAE,GAAG;IACzB,mBAAmB,EAAE;QACnB,iBAAiB,EAAE,cAAc,EAAE,iBAAiB;QACpD,eAAe,EAAE,kBAAkB,EAAE,WAAW;QAChD,cAAc,EAAE,iBAAiB,EAAE,aAAa;KACjD;IACD,cAAc,EAAE,IAAI;IACpB,oBAAoB,EAAE,IAAI;IAC1B,qBAAqB,EAAE,UAAU,CAAC,QAAQ;IAC1C,sBAAsB,EAAE,UAAU,CAAC,OAAO;IAC1C,qBAAqB,EAAE,UAAU,CAAC,UAAU;CAC7C,CAAC;AAEF,MAAM,uBAAuB,GAAyD;IACpF,iBAAiB,EAAE,CAAC,kBAAkB,CAAC;IACvC,cAAc,EAAE,CAAC,iBAAiB,EAAE,mBAAmB,CAAC;IACxD,iBAAiB,EAAE,CAAC,iBAAiB,EAAE,mBAAmB,CAAC;IAC3D,eAAe,EAAE,CAAC,kBAAkB,CAAC;IACrC,kBAAkB,EAAE,CAAC,iBAAiB,CAAC;IACvC,cAAc,EAAE,CAAC,kBAAkB,CAAC;IACpC,iBAAiB,EAAE,CAAC,kBAAkB,CAAC;IACvC,aAAa,EAAE,CAAC,kBAAkB,CAAC;IACnC,WAAW,EAAE,CAAC,oBAAoB,CAAC;IACnC,WAAW,EAAE,CAAC,oBAAoB,CAAC;IACnC,oBAAoB,EAAE,CAAC,oBAAoB,CAAC;IAC5C,gBAAgB,EAAE,CAAC,oBAAoB,CAAC;IACxC,kBAAkB,EAAE,CAAC,oBAAoB,CAAC;IAC1C,kBAAkB,EAAE,CAAC,oBAAoB,CAAC;IAC1C,mBAAmB,EAAE,CAAC,oBAAoB,CAAC;IAC3C,qDAAqD;IACrD,4EAA4E;IAC5E,+CAA+C;IAC/C,aAAa,EAAE,CAAC,kBAAkB,CAAC;IACnC,uEAAuE;IACvE,2EAA2E;IAC3E,sEAAsE;IACtE,2DAA2D;IAC3D,eAAe,EAAE,CAAC,kBAAkB,EAAE,kBAAkB,CAAC;CAC1D,CAAC;AAMF,MAAM,OAAO,YAAY;IACN,IAAI,CAAmB;IACvB,cAAc,CAAiB;IAC/B,SAAS,CAAkB;IAC3B,iBAAiB,CAAsD;IAExF,YACE,IAAsB,EACtB,cAAwC,EACxC,SAA2B;QAE3B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,cAAc,GAAG,EAAE,GAAG,uBAAuB,EAAE,GAAG,cAAc,EAAE,CAAC;QACxE,IAAI,CAAC,SAAS,GAAG,SAAS,IAAI;YAC5B,aAAa,EAAE,QAAQ;YACvB,SAAS,EAAE,EAAE;YACb,aAAa,EAAE,QAAQ;YACvB,QAAQ,EAAE,EAAE;YACZ,oBAAoB,EAAE,mBAAmB;SAC1C,CAAC;QACF,IAAI,CAAC,iBAAiB,GAAG,IAAI,GAAG,EAAE,CAAC;IACrC,CAAC;IAED,eAAe,CACb,WAAkC,EAClC,UAAsB,EACtB,gBAAwB,EACxB,YAAoB;QAEpB,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,mBAAmB,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YACnE,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,iBAAiB,WAAW,qCAAqC;gBACzE,cAAc,EAAE,EAAE;gBAClB,oBAAoB,EAAE,KAAK;aAC5B,CAAC;QACJ,CAAC;QAED,IAAI,gBAAgB,GAAG,IAAI,CAAC,cAAc,CAAC,mBAAmB,EAAE,CAAC;YAC/D,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,gBAAgB,gBAAgB,oBAAoB,IAAI,CAAC,cAAc,CAAC,mBAAmB,EAAE;gBACrG,cAAc,EAAE,EAAE;gBAClB,oBAAoB,EAAE,IAAI;aAC3B,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,YAAY,CAAC,EAAE,CAAC;YACvC,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,gCAAgC,YAAY,EAAE;gBACtD,cAAc,EAAE,EAAE;gBAClB,oBAAoB,EAAE,IAAI;aAC3B,CAAC;QACJ,CAAC;QAED,MAAM,cAAc,GAAG,uBAAuB,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;QAClE,MAAM,aAAa,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3E,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,4BAA4B,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBAC9D,cAAc;gBACd,oBAAoB,EAAE,IAAI;aAC3B,CAAC;QACJ,CAAC;QAED,MAAM,gBAAgB,GAAG,IAAI,CAAC,0BAA0B,CAAC,WAAW,CAAC,CAAC;QACtE,IAAI,CAAC,kBAAkB,CAAC,UAAU,EAAE,gBAAgB,CAAC,EAAE,CAAC;YACtD,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,eAAe,UAAU,gCAAgC,gBAAgB,GAAG;gBACpF,cAAc;gBACd,oBAAoB,EAAE,KAAK;aAC5B,CAAC;QACJ,CAAC;QAED,OAAO;YACL,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,qBAAqB;YAC7B,cAAc;YACd,oBAAoB,EAAE,IAAI;SAC3B,CAAC;IACJ,CAAC;IAED,oBAAoB,CAAC,SAAuB,EAAE,UAAsB;QAClE,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC1D,IAAI,QAAQ,EAAE,kBAAkB,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC;YAC/C,OAAO,QAAQ,CAAC,kBAAkB,CAAC,UAAU,CAAE,CAAC;QAClD,CAAC;QACD,IAAI,QAAQ,EAAE,MAAM,EAAE,CAAC;YACrB,OAAO,QAAQ,CAAC,MAAM,CAAC;QACzB,CAAC;QACD,OAAO,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC;IACtC,CAAC;IAED,mBAAmB,CACjB,YAAwB,EACxB,aAAyB;QAEzB,IAAI,aAAa,GAAG,YAAY,IAAI,aAAa,KAAK,UAAU,CAAC,UAAU,EAAE,CAAC;YAC5E,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,qBAAqB,EAAE,IAAI;gBAC3B,MAAM,EAAE,+EAA+E;aACxF,CAAC;QACJ,CAAC;QAED,IAAI,aAAa,GAAG,YAAY,EAAE,CAAC;YACjC,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,qBAAqB,EAAE,KAAK;gBAC5B,MAAM,EAAE,sBAAsB,YAAY,OAAO,aAAa,UAAU;aACzE,CAAC;QACJ,CAAC;QAED,IAAI,aAAa,GAAG,YAAY,EAAE,CAAC;YACjC,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,qBAAqB,EAAE,KAAK;gBAC5B,MAAM,EAAE,wBAAwB,YAAY,OAAO,aAAa,UAAU;aAC3E,CAAC;QACJ,CAAC;QAED,OAAO;YACL,OAAO,EAAE,KAAK;YACd,qBAAqB,EAAE,KAAK;YAC5B,MAAM,EAAE,uBAAuB;SAChC,CAAC;IACJ,CAAC;IAEO,cAAc,CAAC,MAAc;QACnC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAEnD,IAAI,CAAC,OAAO,IAAI,GAAG,GAAG,OAAO,CAAC,WAAW,GAAG,MAAM,EAAE,CAAC;YACnD,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC;YACnE,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,CAAC,KAAK,EAAE,CAAC;QAChB,OAAO,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,cAAc,CAAC,oBAAoB,CAAC;IACnE,CAAC;IAEO,0BAA0B,CAAC,WAAkC;QACnE,QAAQ,WAAW,EAAE,CAAC;YACpB,KAAK,cAAc,CAAC;YACpB,KAAK,iBAAiB;gBACpB,OAAO,gBAAgB,CAAC;YAC1B,KAAK,eAAe;gBAClB,OAAO,eAAe,CAAC;YACzB,KAAK,iBAAiB;gBACpB,OAAO,MAAM,CAAC;YAChB,KAAK,aAAa;gBAChB,OAAO,cAAc,CAAC;YACxB,KAAK,kBAAkB;gBACrB,OAAO,QAAQ,CAAC;YAClB,KAAK,WAAW,CAAC;YACjB,KAAK,WAAW,CAAC;YACjB,KAAK,oBAAoB,CAAC;YAC1B,KAAK,gBAAgB,CAAC;YACtB,KAAK,kBAAkB,CAAC;YACxB,KAAK,kBAAkB,CAAC;YACxB,KAAK,mBAAmB;gBACtB,OAAO,MAAM,CAAC;YAChB;gBACE,OAAO,MAAM,CAAC;QAClB,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"policy-engine.js","sourceRoot":"","sources":["../../src/application/policy-engine.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AAgCnF,MAAM,uBAAuB,GAAmB;IAC9C,mBAAmB,EAAE,SAAS;IAC9B,oBAAoB,EAAE,GAAG;IACzB,mBAAmB,EAAE;QACnB,iBAAiB,EAAE,cAAc,EAAE,iBAAiB;QACpD,eAAe,EAAE,kBAAkB,EAAE,WAAW;QAChD,cAAc,EAAE,iBAAiB,EAAE,aAAa;KACjD;IACD,cAAc,EAAE,IAAI;IACpB,oBAAoB,EAAE,IAAI;IAC1B,qBAAqB,EAAE,UAAU,CAAC,QAAQ;IAC1C,sBAAsB,EAAE,UAAU,CAAC,OAAO;IAC1C,qBAAqB,EAAE,UAAU,CAAC,UAAU;CAC7C,CAAC;AAQF,MAAM,gCAAgC,GAAgE;IACpG,iBAAiB,EAAE,OAAO;IAC1B,eAAe,EAAE,OAAO;IACxB,aAAa,EAAE,OAAO;IACtB,cAAc,EAAE,QAAQ;IACxB,iBAAiB,EAAE,QAAQ;IAC3B,aAAa,EAAE,OAAO;IACtB,eAAe,EAAE,OAAO;CACzB,CAAC;AAEF,SAAS,0BAA0B,CAAC,MAAsB,EAAE,QAA6B;IACvF,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,OAAO;YACV,OAAO,MAAM,CAAC,qBAAqB,CAAC;QACtC,KAAK,QAAQ;YACX,OAAO,MAAM,CAAC,sBAAsB,CAAC;QACvC,KAAK,OAAO;YACV,OAAO,MAAM,CAAC,qBAAqB,CAAC;IACxC,CAAC;AACH,CAAC;AAED,MAAM,uBAAuB,GAAyD;IACpF,iBAAiB,EAAE,CAAC,kBAAkB,CAAC;IACvC,cAAc,EAAE,CAAC,iBAAiB,EAAE,mBAAmB,CAAC;IACxD,iBAAiB,EAAE,CAAC,iBAAiB,EAAE,mBAAmB,CAAC;IAC3D,eAAe,EAAE,CAAC,kBAAkB,CAAC;IACrC,kBAAkB,EAAE,CAAC,iBAAiB,CAAC;IACvC,cAAc,EAAE,CAAC,kBAAkB,CAAC;IACpC,iBAAiB,EAAE,CAAC,kBAAkB,CAAC;IACvC,aAAa,EAAE,CAAC,kBAAkB,CAAC;IACnC,WAAW,EAAE,CAAC,oBAAoB,CAAC;IACnC,WAAW,EAAE,CAAC,oBAAoB,CAAC;IACnC,oBAAoB,EAAE,CAAC,oBAAoB,CAAC;IAC5C,gBAAgB,EAAE,CAAC,oBAAoB,CAAC;IACxC,kBAAkB,EAAE,CAAC,oBAAoB,CAAC;IAC1C,kBAAkB,EAAE,CAAC,oBAAoB,CAAC;IAC1C,mBAAmB,EAAE,CAAC,oBAAoB,CAAC;IAC3C,qDAAqD;IACrD,4EAA4E;IAC5E,+CAA+C;IAC/C,aAAa,EAAE,CAAC,kBAAkB,CAAC;IACnC,uEAAuE;IACvE,2EAA2E;IAC3E,sEAAsE;IACtE,2DAA2D;IAC3D,eAAe,EAAE,CAAC,kBAAkB,EAAE,kBAAkB,CAAC;CAC1D,CAAC;AAMF,MAAM,OAAO,YAAY;IACN,IAAI,CAAmB;IACvB,cAAc,CAAiB;IAC/B,SAAS,CAAkB;IAC3B,iBAAiB,CAAsD;IAExF,YACE,IAAsB,EACtB,cAAwC,EACxC,SAA2B;QAE3B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,cAAc,GAAG,EAAE,GAAG,uBAAuB,EAAE,GAAG,cAAc,EAAE,CAAC;QACxE,IAAI,CAAC,SAAS,GAAG,SAAS,IAAI;YAC5B,aAAa,EAAE,QAAQ;YACvB,SAAS,EAAE,EAAE;YACb,aAAa,EAAE,QAAQ;YACvB,QAAQ,EAAE,EAAE;YACZ,oBAAoB,EAAE,mBAAmB;SAC1C,CAAC;QACF,IAAI,CAAC,iBAAiB,GAAG,IAAI,GAAG,EAAE,CAAC;IACrC,CAAC;IAED,eAAe,CACb,WAAkC,EAClC,UAAsB,EACtB,gBAAwB,EACxB,YAAoB;QAEpB,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,mBAAmB,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YACnE,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,iBAAiB,WAAW,qCAAqC;gBACzE,cAAc,EAAE,EAAE;gBAClB,oBAAoB,EAAE,KAAK;aAC5B,CAAC;QACJ,CAAC;QAED,IAAI,gBAAgB,GAAG,IAAI,CAAC,cAAc,CAAC,mBAAmB,EAAE,CAAC;YAC/D,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,gBAAgB,gBAAgB,oBAAoB,IAAI,CAAC,cAAc,CAAC,mBAAmB,EAAE;gBACrG,cAAc,EAAE,EAAE;gBAClB,oBAAoB,EAAE,IAAI;aAC3B,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,YAAY,CAAC,EAAE,CAAC;YACvC,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,gCAAgC,YAAY,EAAE;gBACtD,cAAc,EAAE,EAAE;gBAClB,oBAAoB,EAAE,IAAI;aAC3B,CAAC;QACJ,CAAC;QAED,MAAM,cAAc,GAAG,uBAAuB,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;QAClE,MAAM,aAAa,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3E,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,4BAA4B,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBAC9D,cAAc;gBACd,oBAAoB,EAAE,IAAI;aAC3B,CAAC;QACJ,CAAC;QAED,MAAM,gBAAgB,GAAG,IAAI,CAAC,0BAA0B,CAAC,WAAW,CAAC,CAAC;QACtE,IAAI,CAAC,kBAAkB,CAAC,UAAU,EAAE,gBAAgB,CAAC,EAAE,CAAC;YACtD,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,eAAe,UAAU,gCAAgC,gBAAgB,GAAG;gBACpF,cAAc;gBACd,oBAAoB,EAAE,KAAK;aAC5B,CAAC;QACJ,CAAC;QAED,MAAM,cAAc,GAAG,gCAAgC,CAAC,WAAW,CAAC,CAAC;QACrE,IAAI,cAAc,EAAE,CAAC;YACnB,MAAM,aAAa,GAAG,0BAA0B,CAAC,IAAI,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC;YACtF,IAAI,UAAU,GAAG,aAAa,EAAE,CAAC;gBAC/B,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,eAAe,UAAU,6BAA6B,aAAa,QAAQ,cAAc,aAAa;oBAC9G,cAAc;oBACd,oBAAoB,EAAE,KAAK;iBAC5B,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO;YACL,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,qBAAqB;YAC7B,cAAc;YACd,oBAAoB,EAAE,IAAI;SAC3B,CAAC;IACJ,CAAC;IAED,oBAAoB,CAAC,SAAuB,EAAE,UAAsB;QAClE,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC1D,IAAI,QAAQ,EAAE,kBAAkB,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC;YAC/C,OAAO,QAAQ,CAAC,kBAAkB,CAAC,UAAU,CAAE,CAAC;QAClD,CAAC;QACD,IAAI,QAAQ,EAAE,MAAM,EAAE,CAAC;YACrB,OAAO,QAAQ,CAAC,MAAM,CAAC;QACzB,CAAC;QACD,OAAO,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC;IACtC,CAAC;IAED,mBAAmB,CACjB,YAAwB,EACxB,aAAyB;QAEzB,IAAI,aAAa,GAAG,YAAY,IAAI,aAAa,KAAK,UAAU,CAAC,UAAU,EAAE,CAAC;YAC5E,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,qBAAqB,EAAE,IAAI;gBAC3B,MAAM,EAAE,+EAA+E;aACxF,CAAC;QACJ,CAAC;QAED,IAAI,aAAa,GAAG,YAAY,EAAE,CAAC;YACjC,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,qBAAqB,EAAE,KAAK;gBAC5B,MAAM,EAAE,sBAAsB,YAAY,OAAO,aAAa,UAAU;aACzE,CAAC;QACJ,CAAC;QAED,IAAI,aAAa,GAAG,YAAY,EAAE,CAAC;YACjC,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,qBAAqB,EAAE,KAAK;gBAC5B,MAAM,EAAE,wBAAwB,YAAY,OAAO,aAAa,UAAU;aAC3E,CAAC;QACJ,CAAC;QAED,OAAO;YACL,OAAO,EAAE,KAAK;YACd,qBAAqB,EAAE,KAAK;YAC5B,MAAM,EAAE,uBAAuB;SAChC,CAAC;IACJ,CAAC;IAEO,cAAc,CAAC,MAAc;QACnC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAEnD,IAAI,CAAC,OAAO,IAAI,GAAG,GAAG,OAAO,CAAC,WAAW,GAAG,MAAM,EAAE,CAAC;YACnD,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC;YACnE,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,CAAC,KAAK,EAAE,CAAC;QAChB,OAAO,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,cAAc,CAAC,oBAAoB,CAAC;IACnE,CAAC;IAEO,0BAA0B,CAAC,WAAkC;QACnE,QAAQ,WAAW,EAAE,CAAC;YACpB,KAAK,cAAc,CAAC;YACpB,KAAK,iBAAiB;gBACpB,OAAO,gBAAgB,CAAC;YAC1B,KAAK,eAAe;gBAClB,OAAO,eAAe,CAAC;YACzB,KAAK,iBAAiB;gBACpB,OAAO,MAAM,CAAC;YAChB,KAAK,aAAa;gBAChB,OAAO,cAAc,CAAC;YACxB,KAAK,kBAAkB;gBACrB,OAAO,QAAQ,CAAC;YAClB,KAAK,WAAW,CAAC;YACjB,KAAK,WAAW,CAAC;YACjB,KAAK,oBAAoB,CAAC;YAC1B,KAAK,gBAAgB,CAAC;YACtB,KAAK,kBAAkB,CAAC;YACxB,KAAK,kBAAkB,CAAC;YACxB,KAAK,mBAAmB;gBACtB,OAAO,MAAM,CAAC;YAChB;gBACE,OAAO,MAAM,CAAC;QAClB,CAAC;IACH,CAAC;CACF"}

package/node_modules/@claude-flow/plugin-agent-federation/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@claude-flow/plugin-agent-federation",
-  "version": "1.0.3",
+  "version": "1.0.4",
   "description": "Cross-installation agent federation with zero-trust security, PII-gated data flow, and compliance-grade audit trails.",
   "homepage": "https://github.com/ruvnet/ruflo",
   "type": "module",

package/node_modules/@claude-flow/security/dist/input-validator.d.ts

@@ -159,14 +159,14 @@ export declare const SpawnAgentSchema: z.ZodObject<{
     timeout: z.ZodOptional<z.ZodNumber>;
 }, "strip", z.ZodTypeAny, {
     type: "coder" | "reviewer" | "tester" | "planner" | "researcher" | "security-architect" | "security-auditor" | "memory-specialist" | "swarm-specialist" | "integration-architect" | "performance-engineer" | "core-architect" | "test-architect" | "queen-coordinator" | "project-coordinator";
+    id?: string | undefined;
     config?: Record<string, unknown> | undefined;
     timeout?: number | undefined;
-    id?: string | undefined;
 }, {
     type: "coder" | "reviewer" | "tester" | "planner" | "researcher" | "security-architect" | "security-auditor" | "memory-specialist" | "swarm-specialist" | "integration-architect" | "performance-engineer" | "core-architect" | "test-architect" | "queen-coordinator" | "project-coordinator";
+    id?: string | undefined;
     config?: Record<string, unknown> | undefined;
     timeout?: number | undefined;
-    id?: string | undefined;
 }>;
 /**
  * Task input schema
@@ -181,13 +181,13 @@ export declare const TaskInputSchema: z.ZodObject<{
     taskId: string;
     content: string;
     agentType: "coder" | "reviewer" | "tester" | "planner" | "researcher" | "security-architect" | "security-auditor" | "memory-specialist" | "swarm-specialist" | "integration-architect" | "performance-engineer" | "core-architect" | "test-architect" | "queen-coordinator" | "project-coordinator";
-    priority?: "critical" | "high" | "medium" | "low" | undefined;
+    priority?: "low" | "medium" | "high" | "critical" | undefined;
     metadata?: Record<string, unknown> | undefined;
 }, {
     taskId: string;
     content: string;
     agentType: "coder" | "reviewer" | "tester" | "planner" | "researcher" | "security-architect" | "security-auditor" | "memory-specialist" | "swarm-specialist" | "integration-architect" | "performance-engineer" | "core-architect" | "test-architect" | "queen-coordinator" | "project-coordinator";
-    priority?: "critical" | "high" | "medium" | "low" | undefined;
+    priority?: "low" | "medium" | "high" | "critical" | undefined;
     metadata?: Record<string, unknown> | undefined;
 }>;
 /**
@@ -234,16 +234,16 @@ export declare const ExecutorConfigSchema: z.ZodObject<{
     cwd: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>>;
     allowSudo: z.ZodDefault<z.ZodBoolean>;
 }, "strip", z.ZodTypeAny, {
-    allowedCommands: string[];
     timeout: number;
+    allowedCommands: string[];
     maxBuffer: number;
     allowSudo: boolean;
     blockedPatterns?: string[] | undefined;
     cwd?: string | undefined;
 }, {
     allowedCommands: string[];
-    blockedPatterns?: string[] | undefined;
     timeout?: number | undefined;
+    blockedPatterns?: string[] | undefined;
     maxBuffer?: number | undefined;
     cwd?: string | undefined;
     allowSudo?: boolean | undefined;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@claude-flow/cli",
-  "version": "3.65.1",
+  "version": "3.66.1",
   "type": "module",
   "description": "Ruflo CLI - Enterprise AI agent orchestration with 60+ specialized agents, swarm coordination, MCP server, self-learning hooks, and vector memory for Claude Code",
   "main": "dist/src/index.js",
@@ -105,7 +105,7 @@
     "@claude-flow/codex": "3.0.5",
     "@claude-flow/mcp": "3.1.4",
     "@claude-flow/neural": "3.0.1",
-    "@claude-flow/plugin-agent-federation": "1.0.3",
+    "@claude-flow/plugin-agent-federation": "1.0.4",
     "@claude-flow/security": "3.0.5",
     "@claude-flow/shared": "3.0.6",
     "@iarna/toml": "^2.2.5",
@@ -128,12 +128,12 @@
     "ws": "^8.21.0",
     "yaml": "^2.8.0",
     "zod": "^3.22.0",
-    "@claude-flow/memory": "3.1.0"
+    "@claude-flow/memory": "3.2.0"
   },
   "optionalDependencies": {
     "@agntcy/slim-bindings": "2.1.1",
     "@claude-flow/aidefence": "3.0.2",
-    "@claude-flow/memory": "3.1.0",
+    "@claude-flow/memory": "3.2.0",
     "@metaharness/darwin": "~0.12.0",
     "@metaharness/flywheel": "~0.1.10",
     "@metaharness/radio": "~0.1.0",

package/node_modules/@claude-flow/plugin-agent-federation/dist/a2a/agent-card.d.ts

@@ -1,130 +0,0 @@
-/**
- * A2A (Agent2Agent, Linux Foundation) Agent Card adapter — cards only.
- *
- * Maps ruflo's bespoke federation identity (`FederationManifest` /
- * `FederationNode`) to and from a spec-compliant A2A Agent Card so ruflo
- * nodes are discoverable by A2A peers and A2A peers appear in federation
- * discovery. This is an ADAPTER over the existing federation schema, not a
- * rewrite — A2A Tasks/messaging are deliberately out of scope.
- *
- * Spec: A2A Protocol 1.0.0 — https://a2a-protocol.org/latest/specification/
- * (schema source of truth: specification/a2a.proto in a2aproject/A2A).
- * Required AgentCard fields per spec §4.4.1: name, description,
- * supportedInterfaces, version, capabilities, defaultInputModes,
- * defaultOutputModes, skills.
- */
-import { FederationNode } from '../domain/entities/federation-node.js';
-import type { FederationManifest } from '../domain/services/discovery-service.js';
-/** A2A protocol version this adapter targets. */
-export declare const A2A_PROTOCOL_VERSION = "1.0";
-/**
- * Well-known URI for Agent Card discovery (A2A 1.0 §8.2 + IANA registration
- * §14). NOTE: earlier drafts used `/.well-known/agent.json`; 0.3.0+ settled
- * on `agent-card.json`.
- */
-export declare const A2A_WELL_KNOWN_PATH = "/.well-known/agent-card.json";
-/**
- * Open-form protocol binding string advertising ruflo's federation wire
- * (Ed25519-signed envelopes over WebSocket/QUIC). Spec §4.4.6 explicitly
- * allows non-core bindings: "This is an open form string, to be easily
- * extended for other protocol bindings."
- */
-export declare const RUFLO_FEDERATION_BINDING = "RUFLO-FEDERATION";
-/**
- * Extension URI carrying the bespoke federation identity inside the card
- * (spec §4.6 AgentExtension). Enables lossless round-trip in fromAgentCard.
- */
-export declare const RUFLO_FEDERATION_EXTENSION_URI = "urn:ruflo:federation:manifest:v1";
-export interface A2AAgentInterface {
-    readonly url: string;
-    readonly protocolBinding: string;
-    readonly protocolVersion: string;
-    readonly tenant?: string;
-}
-export interface A2AAgentSkill {
-    readonly id: string;
-    readonly name: string;
-    readonly description: string;
-    readonly tags: readonly string[];
-    readonly examples?: readonly string[];
-    readonly inputModes?: readonly string[];
-    readonly outputModes?: readonly string[];
-}
-export interface A2AAgentExtension {
-    readonly uri: string;
-    readonly description?: string;
-    readonly required?: boolean;
-    readonly params?: Record<string, unknown>;
-}
-export interface A2AAgentCapabilities {
-    readonly streaming?: boolean;
-    readonly pushNotifications?: boolean;
-    readonly extensions?: readonly A2AAgentExtension[];
-    readonly extendedAgentCard?: boolean;
-}
-export interface A2AAgentProvider {
-    readonly url: string;
-    readonly organization: string;
-}
-export interface A2AAgentCard {
-    readonly name: string;
-    readonly description: string;
-    readonly supportedInterfaces: readonly A2AAgentInterface[];
-    readonly version: string;
-    readonly capabilities: A2AAgentCapabilities;
-    readonly defaultInputModes: readonly string[];
-    readonly defaultOutputModes: readonly string[];
-    readonly skills: readonly A2AAgentSkill[];
-    readonly provider?: A2AAgentProvider;
-    readonly documentationUrl?: string;
-    readonly iconUrl?: string;
-    readonly securitySchemes?: Record<string, unknown>;
-    readonly securityRequirements?: readonly Record<string, readonly string[]>[];
-    readonly signatures?: readonly {
-        protected: string;
-        signature: string;
-    }[];
-}
-export interface ToAgentCardOptions {
-    /** Human-readable agent name; defaults to `ruflo-federation/<nodeId>`. */
-    readonly name?: string;
-    /** Human-readable description override. */
-    readonly description?: string;
-    readonly provider?: A2AAgentProvider;
-    readonly documentationUrl?: string;
-    /**
-     * Extra spec-core interfaces to advertise ahead of the federation binding
-     * (e.g. a JSONRPC endpoint once A2A messaging lands). First entry is the
-     * preferred interface per spec.
-     */
-    readonly additionalInterfaces?: readonly A2AAgentInterface[];
-}
-/**
- * Generate a spec-compliant A2A Agent Card from a ruflo federation manifest.
- * Every agent type becomes an AgentSkill; the federation endpoint becomes a
- * `RUFLO-FEDERATION` interface; the bespoke identity (nodeId, publicKey,
- * complianceModes, manifest signature) rides in a spec §4.6 extension so
- * `fromAgentCard` can restore it.
- */
-export declare function toAgentCard(manifest: FederationManifest, options?: ToAgentCardOptions): A2AAgentCard;
-export interface AgentCardValidation {
-    readonly valid: boolean;
-    readonly errors: readonly string[];
-}
-/**
- * Structural validation against the A2A 1.0 AgentCard REQUIRED fields.
- * Intentionally strict on required shape, lenient on unknown extra fields
- * (forward compatibility with future spec minors).
- */
-export declare function validateAgentCard(value: unknown): AgentCardValidation;
-/**
- * Map a validated remote A2A Agent Card into the bespoke federation registry
- * shape (a `FederationNode`) so A2A peers appear in federation discovery.
- *
- * Trust posture: A2A cards are self-describing metadata, NOT authenticated
- * federation manifests — consumed peers always enter at
- * `TrustLevel.UNTRUSTED` regardless of embedded identity claims. Trust is
- * earned afterwards through the normal handshake + TrustEvaluator path.
- */
-export declare function fromAgentCard(card: A2AAgentCard, sourceUrl?: string): FederationNode;
-//# sourceMappingURL=agent-card.d.ts.map

package/node_modules/@claude-flow/plugin-agent-federation/dist/a2a/consume.d.ts

@@ -1,34 +0,0 @@
-/**
- * A2A Agent Card consumption — fetch + validate a remote card and map it
- * into the bespoke federation registry so A2A peers appear in federation
- * discovery. Cards only (no A2A Tasks/messaging in this iteration).
- */
-import type { DiscoveryService } from '../domain/services/discovery-service.js';
-import type { FederationNode } from '../domain/entities/federation-node.js';
-import { type A2AAgentCard } from './agent-card.js';
-export interface FetchAgentCardOptions {
-    /** Injectable fetch for tests / restricted environments. Default: globalThis.fetch. */
-    readonly fetchImpl?: typeof fetch;
-    readonly timeoutMs?: number;
-    /** Response size cap in bytes (defense against decompression floods). Default 256 KiB. */
-    readonly maxBytes?: number;
-}
-export interface FetchAgentCardResult {
-    readonly card: A2AAgentCard;
-    readonly sourceUrl: string;
-}
-/**
- * Resolve the card URL: a bare base URL (`https://host[:port]` or a path-less
- * URL) gets the A2A well-known path appended; anything already pointing at a
- * JSON document is used as-is.
- */
-export declare function resolveAgentCardUrl(baseOrCardUrl: string): string;
-/** Fetch and structurally validate a remote A2A Agent Card. */
-export declare function fetchAgentCard(baseOrCardUrl: string, options?: FetchAgentCardOptions): Promise<FetchAgentCardResult>;
-/**
- * Fetch a remote Agent Card and register the peer in federation discovery.
- * The peer enters at TrustLevel.UNTRUSTED (see fromAgentCard) — the card is
- * self-asserted metadata, and trust is earned through the normal handshake.
- */
-export declare function consumeAgentCard(discovery: DiscoveryService, baseOrCardUrl: string, options?: FetchAgentCardOptions): Promise<FederationNode>;
-//# sourceMappingURL=consume.d.ts.map

package/node_modules/@claude-flow/plugin-agent-federation/dist/a2a/planner-descriptor.d.ts

@@ -1,40 +0,0 @@
-import { type A2AAgentCard } from './agent-card.js';
-/**
- * Host-owned planner semantics for a registered capability identifier.
- * Remote registration metadata may select an identifier, but never supplies
- * these planner-visible strings directly.
- */
-export interface PlannerCapabilityDefinition {
-    readonly id: string;
-    readonly functionality: string;
-    readonly inputSpecification: string;
-    readonly outputSpecification: string;
-    readonly usageConstraints: readonly string[];
-}
-export interface PlannerDescriptorPolicy {
-    /** Resolve only identifiers the host has explicitly approved for planning. */
-    readonly resolveCapability: (canonicalSkillId: string) => PlannerCapabilityDefinition | undefined;
-    readonly maximumCapabilities?: number;
-}
-export interface PlannerSafeAgentDescriptor {
-    readonly schema: 'ruflo/planner-safe-agent-descriptor/v1';
-    readonly source: 'a2a-agent-card';
-    readonly capabilities: readonly PlannerCapabilityDefinition[];
-    readonly authority: 'none';
-}
-export interface PlannerDescriptorProjection {
-    readonly descriptor: PlannerSafeAgentDescriptor;
-    readonly rejectedSkillCount: number;
-    readonly duplicateSkillCount: number;
-}
-/**
- * Project a third-party A2A Agent Card into planner-visible metadata.
- *
- * Security boundary: card descriptions, skill descriptions, examples, tags,
- * provider text, documentation URLs, extension parameters, and all other
- * remote prose are deliberately absent from the return type. Only a bounded
- * canonical skill identifier may cross the registration boundary, and its
- * planner semantics come from a host-controlled resolver.
- */
-export declare function projectPlannerSafeAgentCard(card: A2AAgentCard, policy: PlannerDescriptorPolicy): PlannerDescriptorProjection;
-//# sourceMappingURL=planner-descriptor.d.ts.map

package/node_modules/@claude-flow/plugin-agent-federation/dist/a2a/well-known.d.ts

@@ -1,46 +0,0 @@
-/**
- * A2A well-known Agent Card endpoint (A2A 1.0 §8.2 discovery + §8.6 caching).
- *
- * Serves `GET /.well-known/agent-card.json` from a minimal `node:http`
- * server. Security posture follows ADR-166 (mcp-bridge unauthenticated-RCE
- * remediation): binds 127.0.0.1 by default and REFUSES a non-loopback bind
- * unless the caller passes `allowNonLoopback: true` explicitly. The endpoint
- * is read-only (GET/HEAD on one exact path), exposes only the public card,
- * and is entirely opt-in — nothing here weakens the federation transport's
- * existing bind or auth behavior.
- */
-import { type A2AAgentCard } from './agent-card.js';
-export interface AgentCardServerOptions {
-    /** Card supplier — re-invoked per request so a late-published manifest is picked up. */
-    readonly getCard: () => A2AAgentCard | null;
-    readonly port: number;
-    /** Bind host. Default 127.0.0.1 (ADR-166 posture). */
-    readonly host?: string;
-    /** Serve path. Default A2A_WELL_KNOWN_PATH. */
-    readonly path?: string;
-    /**
-     * Explicit opt-in required to bind anything other than loopback. Without
-     * it a non-loopback host is rejected at start (fail-closed).
-     */
-    readonly allowNonLoopback?: boolean;
-    /** Cache-Control max-age seconds (spec §8.6.1). Default 300. */
-    readonly cacheMaxAgeSeconds?: number;
-}
-export interface AgentCardServerHandle {
-    readonly url: string;
-    readonly host: string;
-    readonly port: number;
-    close(): Promise<void>;
-}
-export declare function isLoopbackHost(host: string): boolean;
-/**
- * Start the well-known Agent Card HTTP endpoint.
- *
- * Responses:
- *   GET/HEAD <path>  → 200 application/json (+ Cache-Control, ETag per §8.6)
- *                      or 503 when no card is available yet
- *   other method     → 405
- *   other path       → 404
- */
-export declare function startAgentCardServer(options: AgentCardServerOptions): Promise<AgentCardServerHandle>;
-//# sourceMappingURL=well-known.d.ts.map

package/node_modules/@claude-flow/plugin-agent-federation/dist/application/claim-checker.d.ts

@@ -1,27 +0,0 @@
-import type { FederationClaimType, PolicyEngineDeps } from './policy-engine.js';
-export type FederationAuthorizationMode = 'legacy' | 'observe' | 'enforce';
-export interface FederationClaimCheckerConfig {
-    mode?: FederationAuthorizationMode;
-    grantedClaims?: readonly string[];
-    onObservation?: (claim: FederationClaimType, granted: boolean) => void;
-}
-export interface FederationClaimChecker {
-    mode: FederationAuthorizationMode;
-    grantedClaims: ReadonlySet<FederationClaimType>;
-    checkClaim: PolicyEngineDeps['checkClaim'];
-}
-/**
- * Compatibility bridge for the legacy federation policy engine.
- *
- * This removes the anonymous `() => true` production stub and makes
- * compatibility behavior explicit:
- * - legacy: preserve pre-ADR-325 behavior;
- * - observe: calculate and report missing grants without blocking;
- * - enforce: default deny unless the exact claim is configured.
- *
- * ADR-324 policy adapters can supply the `grantedClaims` set after evaluating
- * the request; ownership-changing federation messages remain disabled in the
- * default message policy until the full ingress PEP is composed.
- */
-export declare function createFederationClaimChecker(config?: FederationClaimCheckerConfig): FederationClaimChecker;
-//# sourceMappingURL=claim-checker.d.ts.map