@claude-flow/cli 3.71.4 → 3.72.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@claude-flow/cli",
-  "version": "3.71.4",
+  "version": "3.72.1",
   "type": "module",
   "description": "Ruflo CLI - Enterprise AI agent orchestration with 60+ specialized agents, swarm coordination, MCP server, self-learning hooks, and vector memory for Claude Code",
   "main": "dist/src/index.js",
@@ -102,7 +102,7 @@
   "dependencies": {
     "@electron/asar": "^4.3.1",
     "@claude-flow/cli-core": "3.7.5",
-    "@claude-flow/codex": "3.0.5",
+    "@claude-flow/codex": "3.0.6",
     "@claude-flow/mcp": "3.1.6",
     "@claude-flow/neural": "3.0.2",
     "@claude-flow/plugin-agent-federation": "1.0.5",
@@ -110,7 +110,7 @@
     "@claude-flow/shared": "3.0.7",
     "@iarna/toml": "^2.2.5",
     "@noble/ed25519": "2.3.0",
-    "@ruvector/rabitq-wasm": "0.1.0",
+    "@ruvector/rabitq-wasm": "0.1.2",
     "ajv": "^8.20.0",
     "bcryptjs": "^3.0.3",
     "chalk": "^5.3.0",
@@ -128,13 +128,13 @@
     "ws": "^8.21.0",
     "yaml": "^2.8.0",
     "zod": "^3.22.0",
-    "@claude-flow/memory": "3.2.2"
+    "@claude-flow/memory": "3.2.3"
   },
   "optionalDependencies": {
     "@agntcy/slim-bindings": "2.1.1",
     "@claude-flow/aidefence": "3.1.0",
-    "@claude-flow/memory": "3.2.2",
-    "@metaharness/darwin": "~0.12.0",
+    "@claude-flow/memory": "3.2.3",
+    "@metaharness/darwin": "~0.13.0",
     "@metaharness/flywheel": "~0.1.10",
     "@metaharness/radio": "~0.1.0",
     "@metaharness/turn-credit": "~0.1.0",
@@ -142,13 +142,15 @@
     "agentdb": "^3.3.0",
     "agentic-flow": "^3.0.0",
     "better-sqlite3": "^12.9.0",
-    "ruvector": "^0.2.27",
-    "nostr-tools": "^2.7.0"
+    "ruvector": "^0.3.11",
+    "nostr-tools": "^2.7.0",
+    "@ruvector/learning-wasm": "0.1.29",
+    "agent-booster": "^0.2.2"
   },
   "peerDependencies": {
     "@metaharness/router": "^0.4.0",
     "@ruvector/typesafe": "^0.1.0",
-    "metaharness": "^0.4.1"
+    "metaharness": "^0.4.20"
   },
   "peerDependenciesMeta": {
     "@metaharness/router": {

package/plugins/ruflo-metaharness/.claude-plugin/plugin.json

@@ -1,7 +1,8 @@
 {
   "name": "ruflo-metaharness",
   "description": "MetaHarness integration for ruflo — surfaces score/genome/mint/mcp-scan/threat-model via skills; pairs with @metaharness/router (ADR-148/149) for cost-optimal model routing; honors ADR-150's architectural constraint that MetaHarness remains an optional augmentation, never a required runtime dependency. As a mod (ADR-445): confirms flywheel promotion, keeps secrets out of inputs, /metaharness-mod, and a status file the console shows",
-  "version": "0.4.0",
+  "version": "0.4.1",
+  "repository": "https://github.com/ruvnet/ruflo",
   "author": {
     "name": "ruvnet",
     "url": "https://github.com/ruvnet"

package/plugins/ruflo-metaharness/scripts/_darwin.mjs

@@ -2,7 +2,7 @@
 //
 // Mirrors `_harness.mjs` for the umbrella `metaharness` / `harness` binaries,
 // but targets the separate darwin binary (`metaharness-darwin`) which is
-// published as its own npm package (`@metaharness/darwin@~0.12.0`).
+// published as its own npm package (`@metaharness/darwin@~0.13.0`).
 //
 // Shared plumbing (degraded classification, --json injection, trailing-JSON
 // parse, degraded emitter) lives in `_invoke.mjs`. What stays here is the
@@ -61,14 +61,14 @@ const DEFAULT_TIMEOUT_MS = 60_000;
 
 // Pinned semver range. The `~` allows patch upgrades without re-pinning.
 // Must cover the `@metaharness/darwin` optionalDependency range in
-// v3/@claude-flow/cli/package.json (`~0.12.0`). It sat at ~0.8.0 while that
-// range moved to ~0.9.0 (#2958), ~0.10.2 (#3262) and ~0.12.0 (#3219), because the pin-drift
+// v3/@claude-flow/cli/package.json (`~0.13.0`). It sat at ~0.8.0 while that
+// range moved to ~0.9.0 (#2958), ~0.10.2 (#3262), ~0.12.0 (#3219) and ~0.13.0 (GHSA-mjwg-5fm3-fx2p), because the pin-drift
 // guard only compared MH_DARWIN_PIN (distill-oracle.ts). This range picks
 // the darwin version the evolve / bench / security-bench tools run and the
 // gepa cache fallback installs; scripts/check-metaharness-pins.mjs now fails
 // when it no longer covers the declared range.
 const DARWIN_PKG = '@metaharness/darwin';
-const DARWIN_PIN_VERSION = '~0.12.0';
+const DARWIN_PIN_VERSION = '~0.13.0';
 const DARWIN_PIN = `${DARWIN_PKG}@${DARWIN_PIN_VERSION}`;
 
 const REASON_PREFIX = 'metaharness-darwin';

package/plugins/ruflo-metaharness/scripts/_harness.mjs

@@ -62,7 +62,7 @@ const DEFAULT_TIMEOUT_MS = 60_000;
 // moved to ^0.4.1 (b8ec03f34) because nothing compared the two;
 // scripts/check-metaharness-pins.mjs now fails when they diverge.
 const METAHARNESS_PKG = 'metaharness';
-const METAHARNESS_PIN_VERSION = '~0.4.1';
+const METAHARNESS_PIN_VERSION = '~0.4.20';
 
 const REASON_NOT_AVAILABLE = 'metaharness-not-available';
 

package/plugins/ruflo-metaharness/scripts/smoke.sh

@@ -1,5 +1,5 @@
 #!/usr/bin/env bash
-# Structural smoke test for ruflo-metaharness v0.4.0 (ADR-150 Phase 1).
+# Structural smoke test for ruflo-metaharness v0.4.1 (ADR-150 Phase 1).
 set -u
 ROOT="$(cd "$(dirname "$0")/.." && pwd)"
 PASS=0
@@ -32,10 +32,10 @@ else
   bad "extraction-regex-rot: EXPECTED_TOOLS=$EXPECTED_TOOLS EXPECTED_SUBS=$EXPECTED_SUBS"
 fi
 
-step "1. plugin.json declares 0.4.0 with adr-150 keywords"
+step "1. plugin.json declares 0.4.1 with adr-150 keywords"
 v=$(grep -E '"version"' "$ROOT/.claude-plugin/plugin.json" | grep -oE '[0-9]+\.[0-9]+\.[0-9]+' | head -1)
-if [[ "$v" != "0.4.0" ]]; then
-  bad "expected 0.4.0, got '$v'"
+if [[ "$v" != "0.4.1" ]]; then
+  bad "expected 0.4.1, got '$v'"
 else
   miss=""
   for k in ruflo metaharness harness scorecard genome mcp-scan threat-model router adr-150 adr-148 adr-149 optional-dependency graceful-degradation subprocess phase-1-mvp; do