claude-flow 3.0.0-alpha.24 → 3.0.0-alpha.38

package/v3/@claude-flow/shared/dist/resilience/retry.js

@@ -0,0 +1,159 @@
+/**
+ * Retry with Exponential Backoff
+ *
+ * Production-ready retry logic with jitter, max retries, and error filtering.
+ *
+ * @module v3/shared/resilience/retry
+ */
+/**
+ * Retry error with attempt history
+ */
+export class RetryError extends Error {
+    attempts;
+    errors;
+    totalTime;
+    constructor(message, attempts, errors, totalTime) {
+        super(message);
+        this.attempts = attempts;
+        this.errors = errors;
+        this.totalTime = totalTime;
+        this.name = 'RetryError';
+    }
+}
+/**
+ * Default retry options
+ */
+const DEFAULT_OPTIONS = {
+    maxAttempts: 3,
+    initialDelay: 100,
+    maxDelay: 10000,
+    backoffMultiplier: 2,
+    jitter: 0.1,
+    timeout: 30000,
+};
+/**
+ * Retry a function with exponential backoff
+ *
+ * @param fn Function to retry
+ * @param options Retry configuration
+ * @returns Result with success/failure and metadata
+ *
+ * @example
+ * const result = await retry(
+ *   () => fetchData(),
+ *   { maxAttempts: 5, initialDelay: 200 }
+ * );
+ *
+ * if (result.success) {
+ *   console.log('Data:', result.result);
+ * } else {
+ *   console.log('Failed after', result.attempts, 'attempts');
+ * }
+ */
+export async function retry(fn, options = {}) {
+    const opts = { ...DEFAULT_OPTIONS, ...options };
+    const errors = [];
+    const startTime = Date.now();
+    for (let attempt = 1; attempt <= opts.maxAttempts; attempt++) {
+        try {
+            // Execute with timeout
+            const result = await withTimeout(fn(), opts.timeout, attempt);
+            return {
+                success: true,
+                result,
+                attempts: attempt,
+                totalTime: Date.now() - startTime,
+                errors,
+            };
+        }
+        catch (error) {
+            const err = error instanceof Error ? error : new Error(String(error));
+            errors.push(err);
+            // Check if error is retryable
+            if (opts.retryableErrors && !opts.retryableErrors(err)) {
+                return {
+                    success: false,
+                    attempts: attempt,
+                    totalTime: Date.now() - startTime,
+                    errors,
+                };
+            }
+            // If this was the last attempt, don't delay
+            if (attempt >= opts.maxAttempts) {
+                break;
+            }
+            // Calculate delay with exponential backoff and jitter
+            const baseDelay = opts.initialDelay * Math.pow(opts.backoffMultiplier, attempt - 1);
+            const jitter = baseDelay * opts.jitter * (Math.random() * 2 - 1);
+            const delay = Math.min(baseDelay + jitter, opts.maxDelay);
+            // Callback before retry
+            if (opts.onRetry) {
+                opts.onRetry(err, attempt, delay);
+            }
+            // Wait before next attempt
+            await sleep(delay);
+        }
+    }
+    return {
+        success: false,
+        attempts: opts.maxAttempts,
+        totalTime: Date.now() - startTime,
+        errors,
+    };
+}
+/**
+ * Wrap a function with retry behavior
+ *
+ * @param fn Function to wrap
+ * @param options Retry configuration
+ * @returns Wrapped function that retries on failure
+ */
+export function withRetry(fn, options = {}) {
+    return async (...args) => {
+        return retry(() => fn(...args), options);
+    };
+}
+/**
+ * Execute with timeout
+ */
+async function withTimeout(promise, timeout, attempt) {
+    const timeoutPromise = new Promise((_, reject) => {
+        setTimeout(() => {
+            reject(new Error(`Attempt ${attempt} timed out after ${timeout}ms`));
+        }, timeout);
+    });
+    return Promise.race([promise, timeoutPromise]);
+}
+/**
+ * Sleep for specified milliseconds
+ */
+function sleep(ms) {
+    return new Promise((resolve) => setTimeout(resolve, ms));
+}
+/**
+ * Common retryable error predicates
+ */
+export const RetryableErrors = {
+    /** Network errors (ECONNRESET, ETIMEDOUT, etc.) */
+    network: (error) => {
+        const networkCodes = ['ECONNRESET', 'ETIMEDOUT', 'ECONNREFUSED', 'ENOTFOUND', 'EAI_AGAIN'];
+        return networkCodes.some((code) => error.message.includes(code));
+    },
+    /** Rate limit errors (429) */
+    rateLimit: (error) => {
+        return error.message.includes('429') || error.message.toLowerCase().includes('rate limit');
+    },
+    /** Server errors (5xx) */
+    serverError: (error) => {
+        return /5\d\d/.test(error.message) || error.message.includes('Internal Server Error');
+    },
+    /** Transient errors (network + rate limit + 5xx) */
+    transient: (error) => {
+        return (RetryableErrors.network(error) ||
+            RetryableErrors.rateLimit(error) ||
+            RetryableErrors.serverError(error));
+    },
+    /** All errors are retryable */
+    all: () => true,
+};
+//# sourceMappingURL=retry.js.map

package/v3/@claude-flow/shared/dist/resilience/retry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"retry.js","sourceRoot":"","sources":["../../src/resilience/retry.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AA0CH;;GAEG;AACH,MAAM,OAAO,UAAW,SAAQ,KAAK;IAGjB;IACA;IACA;IAJlB,YACE,OAAe,EACC,QAAgB,EAChB,MAAe,EACf,SAAiB;QAEjC,KAAK,CAAC,OAAO,CAAC,CAAC;QAJC,aAAQ,GAAR,QAAQ,CAAQ;QAChB,WAAM,GAAN,MAAM,CAAS;QACf,cAAS,GAAT,SAAS,CAAQ;QAGjC,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC;IAC3B,CAAC;CACF;AAED;;GAEG;AACH,MAAM,eAAe,GAAiB;IACpC,WAAW,EAAE,CAAC;IACd,YAAY,EAAE,GAAG;IACjB,QAAQ,EAAE,KAAK;IACf,iBAAiB,EAAE,CAAC;IACpB,MAAM,EAAE,GAAG;IACX,OAAO,EAAE,KAAK;CACf,CAAC;AAEF;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,KAAK,UAAU,KAAK,CACzB,EAAoB,EACpB,UAAiC,EAAE;IAEnC,MAAM,IAAI,GAAG,EAAE,GAAG,eAAe,EAAE,GAAG,OAAO,EAAE,CAAC;IAChD,MAAM,MAAM,GAAY,EAAE,CAAC;IAC3B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAE7B,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,EAAE,CAAC;QAC7D,IAAI,CAAC;YACH,uBAAuB;YACvB,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAE9D,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,MAAM;gBACN,QAAQ,EAAE,OAAO;gBACjB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;gBACjC,MAAM;aACP,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,GAAG,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YACtE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAEjB,8BAA8B;YAC9B,IAAI,IAAI,CAAC,eAAe,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC;gBACvD,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,QAAQ,EAAE,OAAO;oBACjB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;oBACjC,MAAM;iBACP,CAAC;YACJ,CAAC;YAED,4CAA4C;YAC5C,IAAI,OAAO,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;gBAChC,MAAM;YACR,CAAC;YAED,sDAAsD;YACtD,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC;YACpF,MAAM,MAAM,GAAG,SAAS,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;YACjE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,GAAG,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;YAE1D,wBAAwB;YACxB,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBACjB,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;YACpC,CAAC;YAED,2BAA2B;YAC3B,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IAED,OAAO;QACL,OAAO,EAAE,KAAK;QACd,QAAQ,EAAE,IAAI,CAAC,WAAW;QAC1B,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;QACjC,MAAM;KACP,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,SAAS,CACvB,EAAK,EACL,UAAiC,EAAE;IAEnC,OAAO,KAAK,EAAE,GAAG,IAAmB,EAAE,EAAE;QACtC,OAAO,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,GAAG,IAAI,CAAoC,EAAE,OAAO,CAAC,CAAC;IAC9E,CAAC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,WAAW,CAAI,OAAmB,EAAE,OAAe,EAAE,OAAe;IACjF,MAAM,cAAc,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;QACtD,UAAU,CAAC,GAAG,EAAE;YACd,MAAM,CAAC,IAAI,KAAK,CAAC,WAAW,OAAO,oBAAoB,OAAO,IAAI,CAAC,CAAC,CAAC;QACvE,CAAC,EAAE,OAAO,CAAC,CAAC;IACd,CAAC,CAAC,CAAC;IAEH,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC;AACjD,CAAC;AAED;;GAEG;AACH,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,mDAAmD;IACnD,OAAO,EAAE,CAAC,KAAY,EAAW,EAAE;QACjC,MAAM,YAAY,GAAG,CAAC,YAAY,EAAE,WAAW,EAAE,cAAc,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;QAC3F,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IACnE,CAAC;IAED,8BAA8B;IAC9B,SAAS,EAAE,CAAC,KAAY,EAAW,EAAE;QACnC,OAAO,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;IAC7F,CAAC;IAED,0BAA0B;IAC1B,WAAW,EAAE,CAAC,KAAY,EAAW,EAAE;QACrC,OAAO,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAC,CAAC;IACxF,CAAC;IAED,oDAAoD;IACpD,SAAS,EAAE,CAAC,KAAY,EAAW,EAAE;QACnC,OAAO,CACL,eAAe,CAAC,OAAO,CAAC,KAAK,CAAC;YAC9B,eAAe,CAAC,SAAS,CAAC,KAAK,CAAC;YAChC,eAAe,CAAC,WAAW,CAAC,KAAK,CAAC,CACnC,CAAC;IACJ,CAAC;IAED,+BAA+B;IAC/B,GAAG,EAAE,GAAY,EAAE,CAAC,IAAI;CACzB,CAAC"}

package/v3/@claude-flow/shared/dist/security/index.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Security Module
+ *
+ * Shared security utilities for V3 Claude Flow.
+ *
+ * @module v3/shared/security
+ */
+export { generateSecureId, generateUUID, generateSecureToken, generateShortId, generateSessionId, generateAgentId, generateTaskId, generateMemoryId, generateEventId, generateSwarmId, generatePatternId, generateTrajectoryId, secureRandomInt, secureRandomChoice, secureShuffleArray, } from './secure-random.js';
+export { validateInput, sanitizeString, validatePath, validateCommand, validateTags, isValidIdentifier, escapeForSql, type ValidationResult, type ValidationOptions, } from './input-validation.js';
+//# sourceMappingURL=index.d.ts.map

package/v3/@claude-flow/shared/dist/security/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/security/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EACL,gBAAgB,EAChB,YAAY,EACZ,mBAAmB,EACnB,eAAe,EACf,iBAAiB,EACjB,eAAe,EACf,cAAc,EACd,gBAAgB,EAChB,eAAe,EACf,eAAe,EACf,iBAAiB,EACjB,oBAAoB,EACpB,eAAe,EACf,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EACL,aAAa,EACb,cAAc,EACd,YAAY,EACZ,eAAe,EACf,YAAY,EACZ,iBAAiB,EACjB,YAAY,EACZ,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,GACvB,MAAM,uBAAuB,CAAC"}

package/v3/@claude-flow/shared/dist/security/index.js

@@ -0,0 +1,12 @@
+/**
+ * Security Module
+ *
+ * Shared security utilities for V3 Claude Flow.
+ *
+ * @module v3/shared/security
+ */
+// Secure random generation
+export { generateSecureId, generateUUID, generateSecureToken, generateShortId, generateSessionId, generateAgentId, generateTaskId, generateMemoryId, generateEventId, generateSwarmId, generatePatternId, generateTrajectoryId, secureRandomInt, secureRandomChoice, secureShuffleArray, } from './secure-random.js';
+// Input validation
+export { validateInput, sanitizeString, validatePath, validateCommand, validateTags, isValidIdentifier, escapeForSql, } from './input-validation.js';
+//# sourceMappingURL=index.js.map

package/v3/@claude-flow/shared/dist/security/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/security/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,2BAA2B;AAC3B,OAAO,EACL,gBAAgB,EAChB,YAAY,EACZ,mBAAmB,EACnB,eAAe,EACf,iBAAiB,EACjB,eAAe,EACf,cAAc,EACd,gBAAgB,EAChB,eAAe,EACf,eAAe,EACf,iBAAiB,EACjB,oBAAoB,EACpB,eAAe,EACf,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,oBAAoB,CAAC;AAE5B,mBAAmB;AACnB,OAAO,EACL,aAAa,EACb,cAAc,EACd,YAAY,EACZ,eAAe,EACf,YAAY,EACZ,iBAAiB,EACjB,YAAY,GAGb,MAAM,uBAAuB,CAAC"}

package/v3/@claude-flow/shared/dist/security/input-validation.d.ts

@@ -0,0 +1,73 @@
+/**
+ * Input Validation Utilities
+ *
+ * Secure input validation and sanitization.
+ *
+ * @module v3/shared/security/input-validation
+ */
+/**
+ * Validation result
+ */
+export interface ValidationResult {
+    valid: boolean;
+    error?: string;
+    sanitized?: unknown;
+}
+/**
+ * Validation options
+ */
+export interface ValidationOptions {
+    maxLength?: number;
+    minLength?: number;
+    pattern?: RegExp;
+    allowedChars?: RegExp;
+    required?: boolean;
+    trim?: boolean;
+}
+/**
+ * Validate and sanitize string input
+ * @param input Input string
+ * @param options Validation options
+ * @returns Validation result
+ */
+export declare function validateInput(input: unknown, options?: ValidationOptions): ValidationResult;
+/**
+ * Sanitize string by removing dangerous characters
+ * @param input Input string
+ * @returns Sanitized string
+ */
+export declare function sanitizeString(input: string): string;
+/**
+ * Validate file path (prevent path traversal)
+ * @param path File path
+ * @param allowedBase Allowed base directory
+ * @returns Validation result
+ */
+export declare function validatePath(path: string, allowedBase?: string): ValidationResult;
+/**
+ * Validate command (prevent command injection)
+ * @param command Command string
+ * @param allowedCommands Optional whitelist of allowed commands
+ * @returns Validation result
+ */
+export declare function validateCommand(command: string, allowedCommands?: string[]): ValidationResult;
+/**
+ * Validate tags for safe SQL usage
+ * @param tags Array of tag strings
+ * @returns Validation result with sanitized tags
+ */
+export declare function validateTags(tags: unknown): ValidationResult;
+/**
+ * Check if string is a valid identifier
+ * @param id Identifier string
+ * @returns True if valid
+ */
+export declare function isValidIdentifier(id: string): boolean;
+/**
+ * Escape string for safe SQL usage (use parameterized queries instead when possible)
+ * This is a LAST RESORT - always prefer parameterized queries
+ * @param value String to escape
+ * @returns Escaped string
+ */
+export declare function escapeForSql(value: string): string;
+//# sourceMappingURL=input-validation.d.ts.map

package/v3/@claude-flow/shared/dist/security/input-validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"input-validation.d.ts","sourceRoot":"","sources":["../../src/security/input-validation.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAYD;;;;;GAKG;AACH,wBAAgB,aAAa,CAC3B,KAAK,EAAE,OAAO,EACd,OAAO,GAAE,iBAAsB,GAC9B,gBAAgB,CAiDlB;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAMpD;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAC1B,IAAI,EAAE,MAAM,EACZ,WAAW,CAAC,EAAE,MAAM,GACnB,gBAAgB,CAiClB;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE,MAAM,EACf,eAAe,CAAC,EAAE,MAAM,EAAE,GACzB,gBAAgB,CAiClB;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,OAAO,GAAG,gBAAgB,CAkC5D;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAErD;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAQlD"}

package/v3/@claude-flow/shared/dist/security/input-validation.js

@@ -0,0 +1,201 @@
+/**
+ * Input Validation Utilities
+ *
+ * Secure input validation and sanitization.
+ *
+ * @module v3/shared/security/input-validation
+ */
+/**
+ * Default validation options
+ */
+const DEFAULT_OPTIONS = {
+    maxLength: 10000,
+    minLength: 0,
+    required: false,
+    trim: true,
+};
+/**
+ * Validate and sanitize string input
+ * @param input Input string
+ * @param options Validation options
+ * @returns Validation result
+ */
+export function validateInput(input, options = {}) {
+    const opts = { ...DEFAULT_OPTIONS, ...options };
+    // Check if input exists
+    if (input === null || input === undefined) {
+        if (opts.required) {
+            return { valid: false, error: 'Input is required' };
+        }
+        return { valid: true, sanitized: null };
+    }
+    // Convert to string
+    if (typeof input !== 'string') {
+        return { valid: false, error: 'Input must be a string' };
+    }
+    let sanitized = input;
+    // Trim whitespace
+    if (opts.trim) {
+        sanitized = sanitized.trim();
+    }
+    // Check length
+    if (opts.minLength && sanitized.length < opts.minLength) {
+        return {
+            valid: false,
+            error: `Input must be at least ${opts.minLength} characters`,
+        };
+    }
+    if (opts.maxLength && sanitized.length > opts.maxLength) {
+        return {
+            valid: false,
+            error: `Input must be at most ${opts.maxLength} characters`,
+        };
+    }
+    // Check pattern
+    if (opts.pattern && !opts.pattern.test(sanitized)) {
+        return { valid: false, error: 'Input does not match required pattern' };
+    }
+    // Check allowed characters
+    if (opts.allowedChars && !opts.allowedChars.test(sanitized)) {
+        return { valid: false, error: 'Input contains invalid characters' };
+    }
+    return { valid: true, sanitized };
+}
+/**
+ * Sanitize string by removing dangerous characters
+ * @param input Input string
+ * @returns Sanitized string
+ */
+export function sanitizeString(input) {
+    return input
+        .replace(/[<>]/g, '') // Remove HTML tags
+        .replace(/[\x00-\x1f\x7f]/g, '') // Remove control characters
+        .replace(/[\u2028\u2029]/g, '') // Remove line/paragraph separators
+        .trim();
+}
+/**
+ * Validate file path (prevent path traversal)
+ * @param path File path
+ * @param allowedBase Allowed base directory
+ * @returns Validation result
+ */
+export function validatePath(path, allowedBase) {
+    // Normalize and check for path traversal
+    const normalized = path
+        .replace(/\\/g, '/') // Normalize Windows paths
+        .replace(/\/+/g, '/'); // Remove duplicate slashes
+    // Check for dangerous patterns
+    if (normalized.includes('..') || normalized.includes('~')) {
+        return {
+            valid: false,
+            error: 'Path contains directory traversal characters',
+        };
+    }
+    // Check for absolute paths outside allowed base
+    if (allowedBase && !normalized.startsWith(allowedBase)) {
+        const isAbsolute = normalized.startsWith('/') || /^[a-zA-Z]:/.test(normalized);
+        if (isAbsolute) {
+            return { valid: false, error: 'Path is outside allowed directory' };
+        }
+    }
+    // Check for null bytes
+    if (normalized.includes('\0')) {
+        return { valid: false, error: 'Path contains null bytes' };
+    }
+    // Check length
+    if (normalized.length > 4096) {
+        return { valid: false, error: 'Path is too long' };
+    }
+    return { valid: true, sanitized: normalized };
+}
+/**
+ * Validate command (prevent command injection)
+ * @param command Command string
+ * @param allowedCommands Optional whitelist of allowed commands
+ * @returns Validation result
+ */
+export function validateCommand(command, allowedCommands) {
+    // Extract base command
+    const parts = command.trim().split(/\s+/);
+    const baseCommand = parts[0]?.toLowerCase();
+    if (!baseCommand) {
+        return { valid: false, error: 'Empty command' };
+    }
+    // Check whitelist if provided
+    if (allowedCommands && !allowedCommands.includes(baseCommand)) {
+        return { valid: false, error: `Command '${baseCommand}' is not allowed` };
+    }
+    // Check for dangerous shell characters
+    const dangerousPatterns = [
+        /[;&|`$]/, // Shell operators
+        /\$\(/, // Command substitution
+        /`.*`/, // Backtick substitution
+        /\|\|/, // OR operator
+        /&&/, // AND operator
+        />\s*>/, // Append redirection
+        /<\s*</, // Here document
+        /\r|\n/, // Newlines (command chaining)
+    ];
+    for (const pattern of dangerousPatterns) {
+        if (pattern.test(command)) {
+            return { valid: false, error: 'Command contains dangerous characters' };
+        }
+    }
+    return { valid: true, sanitized: command };
+}
+/**
+ * Validate tags for safe SQL usage
+ * @param tags Array of tag strings
+ * @returns Validation result with sanitized tags
+ */
+export function validateTags(tags) {
+    if (!Array.isArray(tags)) {
+        return { valid: false, error: 'Tags must be an array' };
+    }
+    const sanitized = [];
+    const tagPattern = /^[a-zA-Z0-9_\-.:]+$/;
+    for (const tag of tags) {
+        if (typeof tag !== 'string') {
+            return { valid: false, error: 'Each tag must be a string' };
+        }
+        const trimmed = tag.trim();
+        if (trimmed.length === 0) {
+            continue; // Skip empty tags
+        }
+        if (trimmed.length > 100) {
+            return { valid: false, error: 'Tag is too long (max 100 characters)' };
+        }
+        if (!tagPattern.test(trimmed)) {
+            return {
+                valid: false,
+                error: `Invalid tag: '${trimmed}'. Tags can only contain alphanumeric characters, underscores, hyphens, dots, and colons`,
+            };
+        }
+        sanitized.push(trimmed);
+    }
+    return { valid: true, sanitized };
+}
+/**
+ * Check if string is a valid identifier
+ * @param id Identifier string
+ * @returns True if valid
+ */
+export function isValidIdentifier(id) {
+    return /^[a-zA-Z_][a-zA-Z0-9_\-]*$/.test(id) && id.length <= 256;
+}
+/**
+ * Escape string for safe SQL usage (use parameterized queries instead when possible)
+ * This is a LAST RESORT - always prefer parameterized queries
+ * @param value String to escape
+ * @returns Escaped string
+ */
+export function escapeForSql(value) {
+    return value
+        .replace(/'/g, "''") // Escape single quotes
+        .replace(/\\/g, '\\\\') // Escape backslashes
+        .replace(/\x00/g, '') // Remove null bytes
+        .replace(/\n/g, '\\n') // Escape newlines
+        .replace(/\r/g, '\\r') // Escape carriage returns
+        .replace(/\x1a/g, '\\Z'); // Escape ctrl+Z (EOF in Windows)
+}
+//# sourceMappingURL=input-validation.js.map

package/v3/@claude-flow/shared/dist/security/input-validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"input-validation.js","sourceRoot":"","sources":["../../src/security/input-validation.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAuBH;;GAEG;AACH,MAAM,eAAe,GAAsB;IACzC,SAAS,EAAE,KAAK;IAChB,SAAS,EAAE,CAAC;IACZ,QAAQ,EAAE,KAAK;IACf,IAAI,EAAE,IAAI;CACX,CAAC;AAEF;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAC3B,KAAc,EACd,UAA6B,EAAE;IAE/B,MAAM,IAAI,GAAG,EAAE,GAAG,eAAe,EAAE,GAAG,OAAO,EAAE,CAAC;IAEhD,wBAAwB;IACxB,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAC1C,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC;QACtD,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAC1C,CAAC;IAED,oBAAoB;IACpB,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC;IAC3D,CAAC;IAED,IAAI,SAAS,GAAG,KAAK,CAAC;IAEtB,kBAAkB;IAClB,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,SAAS,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC;IAC/B,CAAC;IAED,eAAe;IACf,IAAI,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QACxD,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,0BAA0B,IAAI,CAAC,SAAS,aAAa;SAC7D,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QACxD,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,yBAAyB,IAAI,CAAC,SAAS,aAAa;SAC5D,CAAC;IACJ,CAAC;IAED,gBAAgB;IAChB,IAAI,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAClD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,uCAAuC,EAAE,CAAC;IAC1E,CAAC;IAED,2BAA2B;IAC3B,IAAI,IAAI,CAAC,YAAY,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAC5D,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC;IACtE,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;AACpC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,OAAO,KAAK;SACT,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,mBAAmB;SACxC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC,4BAA4B;SAC5D,OAAO,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC,mCAAmC;SAClE,IAAI,EAAE,CAAC;AACZ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAC1B,IAAY,EACZ,WAAoB;IAEpB,yCAAyC;IACzC,MAAM,UAAU,GAAG,IAAI;SACpB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,0BAA0B;SAC9C,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,2BAA2B;IAEpD,+BAA+B;IAC/B,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1D,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,8CAA8C;SACtD,CAAC;IACJ,CAAC;IAED,gDAAgD;IAChD,IAAI,WAAW,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QACvD,MAAM,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC/E,IAAI,UAAU,EAAE,CAAC;YACf,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC;QACtE,CAAC;IACH,CAAC;IAED,uBAAuB;IACvB,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC;IAC7D,CAAC;IAED,eAAe;IACf,IAAI,UAAU,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC;QAC7B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC;IACrD,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;AAChD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAC7B,OAAe,EACf,eAA0B;IAE1B,uBAAuB;IACvB,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC1C,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;IAE5C,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC;IAClD,CAAC;IAED,8BAA8B;IAC9B,IAAI,eAAe,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QAC9D,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,WAAW,kBAAkB,EAAE,CAAC;IAC5E,CAAC;IAED,uCAAuC;IACvC,MAAM,iBAAiB,GAAG;QACxB,SAAS,EAAM,kBAAkB;QACjC,MAAM,EAAS,uBAAuB;QACtC,MAAM,EAAS,wBAAwB;QACvC,MAAM,EAAS,cAAc;QAC7B,IAAI,EAAW,eAAe;QAC9B,OAAO,EAAQ,qBAAqB;QACpC,OAAO,EAAQ,gBAAgB;QAC/B,OAAO,EAAQ,8BAA8B;KAC9C,CAAC;IAEF,KAAK,MAAM,OAAO,IAAI,iBAAiB,EAAE,CAAC;QACxC,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,uCAAuC,EAAE,CAAC;QAC1E,CAAC;IACH,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;AAC7C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,IAAa;IACxC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC;IAC1D,CAAC;IAED,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,MAAM,UAAU,GAAG,qBAAqB,CAAC;IAEzC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC5B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC;QAC9D,CAAC;QAED,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QAE3B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,SAAS,CAAC,kBAAkB;QAC9B,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YACzB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,sCAAsC,EAAE,CAAC;QACzE,CAAC;QAED,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9B,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,KAAK,EAAE,iBAAiB,OAAO,0FAA0F;aAC1H,CAAC;QACJ,CAAC;QAED,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC1B,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;AACpC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,EAAU;IAC1C,OAAO,4BAA4B,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,MAAM,IAAI,GAAG,CAAC;AACnE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,KAAa;IACxC,OAAO,KAAK;SACT,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,uBAAuB;SAC3C,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,qBAAqB;SAC5C,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,oBAAoB;SACzC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,kBAAkB;SACxC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,0BAA0B;SAChD,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,iCAAiC;AAC/D,CAAC"}

package/v3/@claude-flow/shared/dist/security/secure-random.d.ts

@@ -0,0 +1,92 @@
+/**
+ * Secure Random Utilities
+ *
+ * Cryptographically secure random ID and token generation.
+ * Replaces Math.random() for security-sensitive operations.
+ *
+ * @module v3/shared/security/secure-random
+ */
+/**
+ * Generate a cryptographically secure random ID
+ * @param prefix Optional prefix for the ID
+ * @param length Number of random bytes (default 12)
+ * @returns Secure random ID string
+ */
+export declare function generateSecureId(prefix?: string, length?: number): string;
+/**
+ * Generate a UUID v4 (cryptographically secure)
+ * @returns UUID string
+ */
+export declare function generateUUID(): string;
+/**
+ * Generate a secure token for authentication
+ * @param length Number of bytes (default 32)
+ * @returns Hex-encoded token string
+ */
+export declare function generateSecureToken(length?: number): string;
+/**
+ * Generate a short secure ID (for display purposes)
+ * @param prefix Optional prefix
+ * @returns Short secure ID
+ */
+export declare function generateShortId(prefix?: string): string;
+/**
+ * Generate a secure session ID
+ * @returns Session ID string
+ */
+export declare function generateSessionId(): string;
+/**
+ * Generate a secure agent ID
+ * @returns Agent ID string
+ */
+export declare function generateAgentId(): string;
+/**
+ * Generate a secure task ID
+ * @returns Task ID string
+ */
+export declare function generateTaskId(): string;
+/**
+ * Generate a secure memory ID
+ * @returns Memory ID string
+ */
+export declare function generateMemoryId(): string;
+/**
+ * Generate a secure event ID
+ * @returns Event ID string
+ */
+export declare function generateEventId(): string;
+/**
+ * Generate a secure swarm ID
+ * @returns Swarm ID string
+ */
+export declare function generateSwarmId(): string;
+/**
+ * Generate a secure pattern ID
+ * @returns Pattern ID string
+ */
+export declare function generatePatternId(): string;
+/**
+ * Generate a secure trajectory ID
+ * @returns Trajectory ID string
+ */
+export declare function generateTrajectoryId(): string;
+/**
+ * Generate a random integer in range [min, max] using crypto
+ * @param min Minimum value (inclusive)
+ * @param max Maximum value (inclusive)
+ * @returns Cryptographically random integer
+ */
+export declare function secureRandomInt(min: number, max: number): number;
+/**
+ * Secure random selection from array
+ * @param array Array to select from
+ * @returns Random element
+ */
+export declare function secureRandomChoice<T>(array: T[]): T;
+/**
+ * Secure shuffle array (Fisher-Yates with crypto)
+ * @param array Array to shuffle
+ * @returns New shuffled array
+ */
+export declare function secureShuffleArray<T>(array: T[]): T[];
+//# sourceMappingURL=secure-random.d.ts.map

package/v3/@claude-flow/shared/dist/security/secure-random.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secure-random.d.ts","sourceRoot":"","sources":["../../src/security/secure-random.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,GAAE,MAAW,GAAG,MAAM,CAI7E;AAED;;;GAGG;AACH,wBAAgB,YAAY,IAAI,MAAM,CAErC;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,GAAE,MAAW,GAAG,MAAM,CAE/D;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAGvD;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C;AAED;;;GAGG;AACH,wBAAgB,eAAe,IAAI,MAAM,CAExC;AAED;;;GAGG;AACH,wBAAgB,cAAc,IAAI,MAAM,CAEvC;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,IAAI,MAAM,CAEzC;AAED;;;GAGG;AACH,wBAAgB,eAAe,IAAI,MAAM,CAExC;AAED;;;GAGG;AACH,wBAAgB,eAAe,IAAI,MAAM,CAExC;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,IAAI,MAAM,CAE7C;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAYhE;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,CAAC,CAKnD;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,CAAC,EAAE,CAOrD"}