claude-flow 3.14.4 → 3.16.0

package/v3/@claude-flow/cli/dist/src/business-pods/pod-schema.d.ts

@@ -0,0 +1,96 @@
+/**
+ * Pod template schema validator (ADR-164 §3.3 + ADR-164.1 §3.2).
+ *
+ * Defines the `PodTemplate` type that every business-pod JSON file under
+ * `plugins/ruflo-business-pods/templates/` MUST conform to, and a hand-rolled
+ * validator that throws structured errors on invalid templates. No external
+ * deps (no AJV, no zod) — the schema is small enough to validate by hand and
+ * doing so keeps the cli's optional-dep surface unchanged.
+ *
+ * @module @claude-flow/cli/business-pods/pod-schema
+ */
+export type PiiPolicy = 'soc2' | 'gdpr' | 'hipaa' | 'permissive';
+export interface PodAgent {
+    /** Role label inside the pod, e.g. "lead-gen-agent". */
+    role: string;
+    /** Must resolve to a known ruflo agent type (researcher / coder / ...). */
+    agentType: string;
+    /** Human-readable description of what the agent does in this pod. */
+    description: string;
+    /** Routing hint — true = prefer local stdio execution. */
+    preferLocal: boolean;
+}
+export interface PodBench {
+    /** Bench identifier, e.g. "sales-pipeline-bench". */
+    name: string;
+    /** What the bench measures. */
+    description: string;
+    /** Acceptance criteria — non-empty list of human-readable bullets. */
+    successCriteria: string[];
+    /** Cadence between bench evaluations (hours, ≥1). */
+    scheduleHours: number;
+}
+export interface PodAuditReadView {
+    /** Event types surfaced to the business-owner read view. */
+    includedEventTypes: string[];
+    /** Retention window for the read view (days, ≥1). */
+    retentionDays: number;
+}
+export interface PodTemplate {
+    /** Canonical pod name (matches BBS roomId). */
+    name: string;
+    /** Display name for the cockpit. */
+    displayName: string;
+    /** BBS room this pod serves, e.g. "sales". */
+    roomId: string;
+    /** Ordered list of pod agent compositions. */
+    agents: PodAgent[];
+    /** Allow-list of MCP tools the pod's agents may invoke. */
+    allowedMcpTools: string[];
+    /** Bench definition for periodic Darwin /loop scoring. */
+    bench: PodBench;
+    /** PII compliance mode applied to every envelope in/out of this room. */
+    piiPolicy: PiiPolicy;
+    /** Monthly USD hard cap (0 = unlimited; not recommended). */
+    budgetUsdMonthly: number;
+    /** Estimated USD per pod tick — drives reservation amount. */
+    budgetUsdPerRun: number;
+    /** If true, @metaharness/router routes to local first. */
+    preferLocalExecution: boolean;
+    /** POSIX cron expression for the perpetual /loop scheduler. */
+    cronSchedule: string;
+    /** Compliance audit-log projection. */
+    auditReadView: PodAuditReadView;
+    /**
+     * Reservation expiry for the atomic budget tracker — ADR-164.1 §3.2.
+     * Bounded to [5000, 300000] ms (5 s – 5 min). Default 60_000 if omitted.
+     */
+    reservationExpiryMs?: number;
+}
+/**
+ * Structured validation error — carries the JSON pointer that caused it so
+ * callers can render a precise message.
+ */
+export declare class PodTemplateValidationError extends Error {
+    path: string;
+    constructor(message: string, path: string);
+}
+/**
+ * Validate `json` and return a typed `PodTemplate`. Throws
+ * `PodTemplateValidationError` with a JSON-pointer-style path on failure.
+ *
+ * Used by:
+ *   - `business_pod_validate` MCP tool — returns the error verbatim
+ *   - `pod-tick.mjs` — pre-flight check before any pod execution
+ *   - any external schema-loader that wants typed templates
+ */
+export declare function validatePodTemplate(json: unknown): PodTemplate;
+/**
+ * Known ruflo agent types — kept in sync with src/commands/agent.ts AGENT_TYPES.
+ * The list is duplicated here intentionally so pod-tick.mjs can run without
+ * importing the entire commands module.
+ *
+ * If a new agent type is added to AGENT_TYPES, mirror it here.
+ */
+export declare const KNOWN_AGENT_TYPES: readonly ["coder", "researcher", "tester", "reviewer", "architect", "system-architect", "coordinator", "analyst", "optimizer", "security-architect", "security-auditor", "memory-specialist", "swarm-specialist", "performance-engineer", "core-architect", "test-architect", "planner", "task-orchestrator", "perf-analyzer", "backend-dev", "api-docs", "cicd-engineer", "code-analyzer", "database-specialist", "base-template-generator"];
+//# sourceMappingURL=pod-schema.d.ts.map

package/v3/@claude-flow/cli/dist/src/business-pods/pod-schema.js

@@ -0,0 +1,225 @@
+/**
+ * Pod template schema validator (ADR-164 §3.3 + ADR-164.1 §3.2).
+ *
+ * Defines the `PodTemplate` type that every business-pod JSON file under
+ * `plugins/ruflo-business-pods/templates/` MUST conform to, and a hand-rolled
+ * validator that throws structured errors on invalid templates. No external
+ * deps (no AJV, no zod) — the schema is small enough to validate by hand and
+ * doing so keeps the cli's optional-dep surface unchanged.
+ *
+ * @module @claude-flow/cli/business-pods/pod-schema
+ */
+/**
+ * Structured validation error — carries the JSON pointer that caused it so
+ * callers can render a precise message.
+ */
+export class PodTemplateValidationError extends Error {
+    path;
+    constructor(message, path) {
+        super(`pod-template at ${path}: ${message}`);
+        this.path = path;
+        this.name = 'PodTemplateValidationError';
+    }
+}
+const PII_POLICIES = ['soc2', 'gdpr', 'hipaa', 'permissive'];
+function isObject(v) {
+    return typeof v === 'object' && v !== null && !Array.isArray(v);
+}
+function requireString(parent, key, path) {
+    const v = parent[key];
+    if (typeof v !== 'string' || v.length === 0) {
+        throw new PodTemplateValidationError(`field "${key}" must be a non-empty string`, path);
+    }
+    return v;
+}
+function requireNumber(parent, key, path) {
+    const v = parent[key];
+    if (typeof v !== 'number' || !Number.isFinite(v)) {
+        throw new PodTemplateValidationError(`field "${key}" must be a finite number`, path);
+    }
+    return v;
+}
+function requireBoolean(parent, key, path) {
+    const v = parent[key];
+    if (typeof v !== 'boolean') {
+        throw new PodTemplateValidationError(`field "${key}" must be a boolean`, path);
+    }
+    return v;
+}
+function requireArray(parent, key, path, itemValidator) {
+    const v = parent[key];
+    if (!Array.isArray(v)) {
+        throw new PodTemplateValidationError(`field "${key}" must be an array`, path);
+    }
+    return v.map((item, idx) => itemValidator(item, `${path}/${key}[${idx}]`));
+}
+function validatePodAgent(item, path) {
+    if (!isObject(item))
+        throw new PodTemplateValidationError('agent must be an object', path);
+    return {
+        role: requireString(item, 'role', path),
+        agentType: requireString(item, 'agentType', path),
+        description: requireString(item, 'description', path),
+        preferLocal: requireBoolean(item, 'preferLocal', path),
+    };
+}
+function validatePodBench(item, path) {
+    if (!isObject(item))
+        throw new PodTemplateValidationError('bench must be an object', path);
+    const name = requireString(item, 'name', path);
+    const description = requireString(item, 'description', path);
+    const successCriteria = requireArray(item, 'successCriteria', path, (s, sp) => {
+        if (typeof s !== 'string' || s.length === 0) {
+            throw new PodTemplateValidationError('successCriteria entries must be non-empty strings', sp);
+        }
+        return s;
+    });
+    if (successCriteria.length === 0) {
+        throw new PodTemplateValidationError('bench.successCriteria must have ≥1 entry', path);
+    }
+    const scheduleHours = requireNumber(item, 'scheduleHours', path);
+    if (scheduleHours < 1) {
+        throw new PodTemplateValidationError('bench.scheduleHours must be ≥1', path);
+    }
+    return { name, description, successCriteria, scheduleHours };
+}
+function validateAuditReadView(item, path) {
+    if (!isObject(item)) {
+        throw new PodTemplateValidationError('auditReadView must be an object', path);
+    }
+    const includedEventTypes = requireArray(item, 'includedEventTypes', path, (s, sp) => {
+        if (typeof s !== 'string' || s.length === 0) {
+            throw new PodTemplateValidationError('includedEventTypes entries must be non-empty strings', sp);
+        }
+        return s;
+    });
+    const retentionDays = requireNumber(item, 'retentionDays', path);
+    if (retentionDays < 1) {
+        throw new PodTemplateValidationError('auditReadView.retentionDays must be ≥1', path);
+    }
+    return { includedEventTypes, retentionDays };
+}
+// POSIX cron — five or six space-separated fields. Permissive on field
+// contents (digits, *, -, /, ,) — actual cron evaluation happens at schedule
+// time. We only catch obviously malformed values here.
+const CRON_RE = /^([\d*/,\-]+\s+){4,5}[\d*/,\-]+$/;
+/**
+ * Validate `json` and return a typed `PodTemplate`. Throws
+ * `PodTemplateValidationError` with a JSON-pointer-style path on failure.
+ *
+ * Used by:
+ *   - `business_pod_validate` MCP tool — returns the error verbatim
+ *   - `pod-tick.mjs` — pre-flight check before any pod execution
+ *   - any external schema-loader that wants typed templates
+ */
+export function validatePodTemplate(json) {
+    if (!isObject(json)) {
+        throw new PodTemplateValidationError('pod-template must be a JSON object', '/');
+    }
+    const name = requireString(json, 'name', '/');
+    if (!/^[a-z][a-z0-9-]*$/.test(name)) {
+        throw new PodTemplateValidationError('name must be lowercase-kebab (e.g. "sales")', '/');
+    }
+    const displayName = requireString(json, 'displayName', '/');
+    const roomId = requireString(json, 'roomId', '/');
+    if (!/^[A-Za-z0-9_.\-:/@#]+$/.test(roomId)) {
+        throw new PodTemplateValidationError('roomId may only contain [A-Za-z0-9_.\\-:/@#]', '/');
+    }
+    const agents = requireArray(json, 'agents', '/', validatePodAgent);
+    if (agents.length === 0) {
+        throw new PodTemplateValidationError('agents must have ≥1 entry', '/');
+    }
+    const allowedMcpTools = requireArray(json, 'allowedMcpTools', '/', (t, tp) => {
+        if (typeof t !== 'string' || t.length === 0) {
+            throw new PodTemplateValidationError('allowedMcpTools entries must be non-empty strings', tp);
+        }
+        return t;
+    });
+    if (allowedMcpTools.length === 0) {
+        throw new PodTemplateValidationError('allowedMcpTools must have ≥1 entry', '/');
+    }
+    const bench = validatePodBench(json.bench, '/bench');
+    const piiPolicy = requireString(json, 'piiPolicy', '/');
+    if (!PII_POLICIES.includes(piiPolicy)) {
+        throw new PodTemplateValidationError(`piiPolicy must be one of: ${PII_POLICIES.join(', ')}`, '/');
+    }
+    const budgetUsdMonthly = requireNumber(json, 'budgetUsdMonthly', '/');
+    if (budgetUsdMonthly < 0) {
+        throw new PodTemplateValidationError('budgetUsdMonthly must be ≥0', '/');
+    }
+    const budgetUsdPerRun = requireNumber(json, 'budgetUsdPerRun', '/');
+    if (budgetUsdPerRun < 0) {
+        throw new PodTemplateValidationError('budgetUsdPerRun must be ≥0', '/');
+    }
+    if (budgetUsdMonthly > 0 && budgetUsdPerRun > budgetUsdMonthly) {
+        throw new PodTemplateValidationError('budgetUsdPerRun must not exceed budgetUsdMonthly', '/');
+    }
+    const preferLocalExecution = requireBoolean(json, 'preferLocalExecution', '/');
+    const cronSchedule = requireString(json, 'cronSchedule', '/');
+    if (!CRON_RE.test(cronSchedule)) {
+        throw new PodTemplateValidationError('cronSchedule must be a POSIX cron expression (5 or 6 fields)', '/');
+    }
+    const auditReadView = validateAuditReadView(json.auditReadView, '/auditReadView');
+    let reservationExpiryMs;
+    if (json.reservationExpiryMs !== undefined) {
+        const v = requireNumber(json, 'reservationExpiryMs', '/');
+        // ADR-164.1 §3.2 — bounded to [5_000, 300_000] ms.
+        if (v < 5_000 || v > 300_000) {
+            throw new PodTemplateValidationError('reservationExpiryMs must be within [5000, 300000] ms (ADR-164.1 §3.2)', '/');
+        }
+        reservationExpiryMs = v;
+    }
+    return {
+        name,
+        displayName,
+        roomId,
+        agents,
+        allowedMcpTools,
+        bench,
+        piiPolicy: piiPolicy,
+        budgetUsdMonthly,
+        budgetUsdPerRun,
+        preferLocalExecution,
+        cronSchedule,
+        auditReadView,
+        reservationExpiryMs,
+    };
+}
+/**
+ * Known ruflo agent types — kept in sync with src/commands/agent.ts AGENT_TYPES.
+ * The list is duplicated here intentionally so pod-tick.mjs can run without
+ * importing the entire commands module.
+ *
+ * If a new agent type is added to AGENT_TYPES, mirror it here.
+ */
+export const KNOWN_AGENT_TYPES = [
+    'coder',
+    'researcher',
+    'tester',
+    'reviewer',
+    'architect',
+    'system-architect',
+    'coordinator',
+    'analyst',
+    'optimizer',
+    'security-architect',
+    'security-auditor',
+    'memory-specialist',
+    'swarm-specialist',
+    'performance-engineer',
+    'core-architect',
+    'test-architect',
+    'planner',
+    'task-orchestrator',
+    'perf-analyzer',
+    'backend-dev',
+    'api-docs',
+    'cicd-engineer',
+    'code-analyzer',
+    'database-specialist',
+    // ADR-164 Phase 3 — added for the marketing/hr pods (content drafting +
+    // onboarding-template generation). Mirror this addition in the JS copy
+    // inside plugins/ruflo-business-pods/scripts/pod-tick.mjs.
+    'base-template-generator',
+];
+//# sourceMappingURL=pod-schema.js.map

package/v3/@claude-flow/cli/dist/src/commands/metaharness.js

@@ -56,6 +56,9 @@ const SUBCOMMANDS = {
     // iter 53 — one-command drift detection (compose audit-list + oia-audit + audit-trend)
     'drift-from-history': 'drift-from-history.mjs',
     mint: 'mint.mjs',
+    // @metaharness/redblue@~0.1.1 — adversarial red/blue LLM testing
+    // (init|run|patch|attack|report sub-subcommands handled by redblue.mjs)
+    redblue: 'redblue.mjs',
 };
 /**
  * Walk up from the current dirname to find the ruflo repo root that
@@ -63,8 +66,16 @@ const SUBCOMMANDS = {
  *   1. ruflo dev tree   (cwd / ../plugins/...)
  *   2. ruflo wrapper    (ruflo/node_modules/@claude-flow/cli/...)
  *   3. npx              (npm-cache/__npx/... — fall back to cwd-scan)
+ *
+ * `requiredScript`, if provided, narrows the match: the returned dir must
+ * contain BOTH `_harness.mjs` (proves it's a plugin-scripts dir) AND the
+ * named script. This guards against the publish-artifact mirror at
+ * `v3/@claude-flow/cli/plugins/ruflo-metaharness/scripts/` getting picked
+ * over the source `plugins/ruflo-metaharness/scripts/` when the mirror
+ * lags the source (the mirror is regenerated only at publish time by
+ * `prepublishOnly`).
  */
-function locatePluginScripts() {
+function locatePluginScripts(requiredScript) {
     const candidates = [];
     // Up from the cli dist dir
     let p = resolve(__dirname);
@@ -80,8 +91,11 @@ function locatePluginScripts() {
     candidates.push(join(cwd, 'plugins', 'ruflo-metaharness', 'scripts'));
     candidates.push(join(cwd, 'node_modules', '@claude-flow', 'cli', 'plugins', 'ruflo-metaharness', 'scripts'));
     for (const c of candidates) {
-        if (existsSync(join(c, '_harness.mjs')))
-            return c;
+        if (!existsSync(join(c, '_harness.mjs')))
+            continue;
+        if (requiredScript && !existsSync(join(c, requiredScript)))
+            continue;
+        return c;
     }
     return null;
 }
@@ -107,7 +121,7 @@ export const metaharnessCommand = {
             // iter 73 — list reflects all 10 dispatchable subcommands (was
             // stale at the iter-3 list of 5). Keep this synced with the
             // SUBCOMMANDS map above.
-            description: 'One of: score | genome | mcp-scan | threat-model | oia-audit | audit-list | audit-trend | similarity | drift-from-history | mint',
+            description: 'One of: score | genome | mcp-scan | threat-model | oia-audit | audit-list | audit-trend | similarity | drift-from-history | mint | redblue',
             type: 'string',
         },
     ],
@@ -169,6 +183,7 @@ export const metaharnessCommand = {
             output.writeln('  similarity    ADR-152 — weighted similarity between two harness fingerprints');
             output.writeln('  drift-from-history  iter 53 — diff current state against most recent audit (1-command drift)');
             output.writeln('  mint          scaffold a custom harness (dry-run by default)');
+            output.writeln('  redblue       adversarial red/blue LLM testing (init|run|patch|attack|report)');
             output.writeln('');
             output.writeln('Each subcommand accepts --format json|table and --help.');
             output.writeln('');
@@ -180,7 +195,7 @@ export const metaharnessCommand = {
             output.writeln(`Valid: ${Object.keys(SUBCOMMANDS).join(', ')}`);
             return { success: false, exitCode: 2, data: { subcommand } };
         }
-        const scriptDir = locatePluginScripts();
+        const scriptDir = locatePluginScripts(SUBCOMMANDS[subcommand]);
         if (!scriptDir) {
             output.writeln(output.warning('metaharness: plugins/ruflo-metaharness/scripts/ not found. Install ruflo with `npm i ruflo` or run from the ruflo repo.'));
             output.writeln(output.dim('(ADR-150 graceful degradation: this command is a thin delegator over the plugin; the plugin must be present.)'));

package/v3/@claude-flow/cli/dist/src/mcp-client.js

@@ -47,6 +47,18 @@ import { guidanceTools } from './mcp-tools/guidance-tools.js';
 import { autopilotTools } from './mcp-tools/autopilot-tools.js';
 // ADR-150 — MetaHarness MCP tools (score / genome / mcp-scan / threat-model / oia-audit)
 import { metaharnessTools } from './mcp-tools/metaharness-tools.js';
+// agenticow@~0.2.3 — Copy-On-Write memory branching tools (162-byte branches);
+// optional runtime dep, every handler returns `{degraded: true}` when missing.
+import { agenticowTools } from './mcp-tools/agenticow-tools.js';
+// ADR-164 — AgentBBS federated business-domain BBS rooms (Phase 1).
+// Optional runtime dep, every handler returns `{degraded: true}` when missing.
+import { agentbbsTools } from './mcp-tools/agentbbs-tools.js';
+// ADR-164 Phase 2 — Business-pod template validation (pure local, no optional deps).
+import { businessPodTools } from './mcp-tools/business-pod-tools.js';
+// ADR-164 Phase 4 §5.1.8 — http_fetch MCP tool (secure-by-default HTTP probe
+// for ops-pod synthetic-endpoint benches). Default-rejects private addresses
+// + auth headers; opt-in via CLAUDE_FLOW_HTTP_FETCH_ALLOW_PRIVATE / _AUTH=1.
+import { httpFetchTools } from './mcp-tools/http-fetch-tools.js';
 // #1916: coverage-aware routing tools — defined in ruvector/coverage-tools.ts
 // but were never registered, so the `ruflo hooks coverage-*` CLI subcommands
 // failed with `Tool not found: hooks_coverage-route`.
@@ -127,6 +139,15 @@ registerTools([
     ...coverageRouterTools,
     // ADR-150 — MetaHarness static-analysis tools (5)
     ...metaharnessTools,
+    // agenticow@~0.2.3 — COW memory branching (4 tools, graceful-degraded when missing)
+    ...agenticowTools,
+    // ADR-164 — AgentBBS federated business-domain BBS rooms (4 tools, Phase 1, graceful-degraded)
+    ...agentbbsTools,
+    // ADR-164 Phase 2 + Phase 3 — business_pod_validate + business_pod_route_backend
+    // (2 tools, no optional dep — schema validator + §3.4 domain-affinity router)
+    ...businessPodTools,
+    // ADR-164 Phase 4 §5.1.8 — http_fetch (1 tool, secure-by-default HTTP probe)
+    ...httpFetchTools,
 ]);
 /**
  * MCP Client Error

package/v3/@claude-flow/cli/dist/src/mcp-tools/agentbbs-tools.d.ts

@@ -0,0 +1,28 @@
+/**
+ * AgentBBS MCP Tools — Federated business-domain BBS room surface (ADR-164 Phase 1).
+ *
+ * Exposes the `agentbbs@~0.1.0` (a sibling BBS-style federation peer by the same
+ * author as ruflo) as MCP tools so ruflo agents can register business rooms
+ * (#sales, #finance, #marketing, ...), publish/watch typed envelopes, and
+ * mint single-use human-join tokens for SSH/web cockpit access.
+ *
+ * Motivation:
+ *   ADR-164 wires the "business autopilot" cockpit on top of the existing
+ *   ruflo federation primitives (FederationEnvelope, PII pipeline, budget
+ *   circuit breaker). The 4 tools here are the ruflo-side handles into the
+ *   agentbbs Rust workspace (`crates/agentbbs-federation/` and
+ *   `crates/agentbbs-mcp/`) that already implement Ed25519-signed envelopes
+ *   and an MCP transport. Phase 1 ships the surface; Phases 2-5 wire deeper.
+ *
+ * Architectural constraint (mirrors metaharness-tools.ts / agenticow-tools.ts):
+ *   - `agentbbs` lives in `optionalDependencies` — must NOT be a hard runtime dep
+ *   - When the package is missing, every tool returns
+ *     `{success: true, degraded: true, reason: 'agentbbs-not-found'}`
+ *     so callers see one contract regardless of install state
+ *   - Phase 1: polling-based watch (streaming subscriptions are Phase 4)
+ *
+ * @module @claude-flow/cli/mcp-tools/agentbbs
+ */
+import type { MCPTool } from './types.js';
+export declare const agentbbsTools: MCPTool[];
+//# sourceMappingURL=agentbbs-tools.d.ts.map