claude-flow 3.5.75 → 3.5.77

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-flow",
-  "version": "3.5.75",
+  "version": "3.5.77",
   "description": "Ruflo - Enterprise AI agent orchestration for Claude Code. Deploy 60+ specialized agents in coordinated swarms with self-learning, fault-tolerant consensus, vector memory, and MCP integration",
   "main": "dist/index.js",
   "type": "module",

package/v3/@claude-flow/cli/bin/cli.js

@@ -158,8 +158,15 @@ if (isMCPMode) {
   // Run normal CLI mode
   const { CLI } = await import('../dist/src/index.js');
   const cli = new CLI();
-  cli.run().catch((error) => {
-    console.error('Fatal error:', error.message);
-    process.exit(1);
-  });
+  cli.run()
+    .then(() => {
+      // #1552: Exit cleanly after one-shot commands.
+      // Long-running commands (daemon foreground, mcp, status --watch) never resolve,
+      // so this only fires for normal CLI commands.
+      process.exit(0);
+    })
+    .catch((error) => {
+      console.error('Fatal error:', error.message);
+      process.exit(1);
+    });
 }

package/v3/@claude-flow/cli/dist/src/autopilot-state.js

@@ -7,6 +7,10 @@
  * ADR-072: Autopilot Integration
  * Security: Addresses prototype pollution, NaN bypass, input validation
  */
+import { randomUUID } from 'node:crypto';
+import { existsSync, readFileSync, writeFileSync, mkdirSync, readdirSync, renameSync } from 'node:fs';
+import { resolve, join } from 'node:path';
+import { homedir } from 'node:os';
 // ── Constants ─────────────────────────────────────────────────
 export const STATE_DIR = '.claude-flow/data';
 export const STATE_FILE = `${STATE_DIR}/autopilot-state.json`;
@@ -71,9 +75,8 @@ export function validateTaskSources(sources) {
 }
 // ── State Management ──────────────────────────────────────────
 export function getDefaultState() {
-    const crypto = require('crypto');
     return {
-        sessionId: crypto.randomUUID(),
+        sessionId: randomUUID(),
         enabled: false,
         startTime: Date.now(),
         iterations: 0,
@@ -85,13 +88,11 @@ export function getDefaultState() {
     };
 }
 export function loadState() {
-    const fs = require('fs');
-    const path = require('path');
-    const filePath = path.resolve(STATE_FILE);
+    const filePath = resolve(STATE_FILE);
     const defaults = getDefaultState();
     try {
-        if (fs.existsSync(filePath)) {
-            const raw = safeJsonParse(fs.readFileSync(filePath, 'utf-8'));
+        if (existsSync(filePath)) {
+            const raw = safeJsonParse(readFileSync(filePath, 'utf-8'));
             const merged = { ...defaults, ...raw };
             // Re-validate fields that could be tampered with
             merged.maxIterations = validateNumber(merged.maxIterations, 1, 1000, 50);
@@ -111,30 +112,26 @@ export function loadState() {
     return defaults;
 }
 export function saveState(state) {
-    const fs = require('fs');
-    const path = require('path');
-    const dir = path.resolve(STATE_DIR);
-    if (!fs.existsSync(dir))
-        fs.mkdirSync(dir, { recursive: true });
+    const dir = resolve(STATE_DIR);
+    if (!existsSync(dir))
+        mkdirSync(dir, { recursive: true });
     // Cap history before saving
     if (state.history.length > MAX_HISTORY_ENTRIES) {
         state.history = state.history.slice(-MAX_HISTORY_ENTRIES);
     }
-    const tmpFile = path.resolve(STATE_FILE) + '.tmp';
-    fs.writeFileSync(tmpFile, JSON.stringify(state, null, 2));
-    fs.renameSync(tmpFile, path.resolve(STATE_FILE));
+    const tmpFile = resolve(STATE_FILE) + '.tmp';
+    writeFileSync(tmpFile, JSON.stringify(state, null, 2));
+    renameSync(tmpFile, resolve(STATE_FILE));
 }
 export function appendLog(entry) {
-    const fs = require('fs');
-    const path = require('path');
-    const filePath = path.resolve(LOG_FILE);
-    const dir = path.resolve(STATE_DIR);
-    if (!fs.existsSync(dir))
-        fs.mkdirSync(dir, { recursive: true });
+    const filePath = resolve(LOG_FILE);
+    const dir = resolve(STATE_DIR);
+    if (!existsSync(dir))
+        mkdirSync(dir, { recursive: true });
     let log = [];
     try {
-        if (fs.existsSync(filePath)) {
-            log = safeJsonParse(fs.readFileSync(filePath, 'utf-8'));
+        if (existsSync(filePath)) {
+            log = safeJsonParse(readFileSync(filePath, 'utf-8'));
             if (!Array.isArray(log))
                 log = [];
         }
@@ -146,16 +143,14 @@ export function appendLog(entry) {
     if (log.length > MAX_LOG_ENTRIES)
         log = log.slice(-MAX_LOG_ENTRIES);
     const tmpFile = filePath + '.tmp';
-    fs.writeFileSync(tmpFile, JSON.stringify(log, null, 2));
-    fs.renameSync(tmpFile, filePath);
+    writeFileSync(tmpFile, JSON.stringify(log, null, 2));
+    renameSync(tmpFile, filePath);
 }
 export function loadLog() {
-    const fs = require('fs');
-    const path = require('path');
-    const filePath = path.resolve(LOG_FILE);
+    const filePath = resolve(LOG_FILE);
     try {
-        if (fs.existsSync(filePath)) {
-            const result = safeJsonParse(fs.readFileSync(filePath, 'utf-8'));
+        if (existsSync(filePath)) {
+            const result = safeJsonParse(readFileSync(filePath, 'utf-8'));
             return Array.isArray(result) ? result : [];
         }
     }
@@ -166,26 +161,23 @@ export function loadLog() {
 }
 // ── Task Discovery ────────────────────────────────────────────
 export function discoverTasks(sources) {
-    const fs = require('fs');
-    const path = require('path');
-    const os = require('os');
     const tasks = [];
     // Only process valid sources
     const validSources = sources.filter(s => VALID_TASK_SOURCES.has(s));
     for (const source of validSources) {
         if (source === 'team-tasks') {
-            const tasksDir = path.join(os.homedir(), '.claude', 'tasks');
+            const tasksDir = join(homedir(), '.claude', 'tasks');
             try {
-                if (fs.existsSync(tasksDir)) {
-                    const teams = fs.readdirSync(tasksDir, { withFileTypes: true });
+                if (existsSync(tasksDir)) {
+                    const teams = readdirSync(tasksDir, { withFileTypes: true });
                     for (const team of teams) {
                         if (!team.isDirectory())
                             continue;
-                        const teamDir = path.join(tasksDir, team.name);
-                        const files = fs.readdirSync(teamDir).filter((f) => f.endsWith('.json'));
+                        const teamDir = join(tasksDir, team.name);
+                        const files = readdirSync(teamDir).filter((f) => f.endsWith('.json'));
                         for (const file of files) {
                             try {
-                                const data = safeJsonParse(fs.readFileSync(path.join(teamDir, file), 'utf-8'));
+                                const data = safeJsonParse(readFileSync(join(teamDir, file), 'utf-8'));
                                 tasks.push({
                                     id: String(data.id || file.replace('.json', '')),
                                     subject: String(data.subject || data.title || file),
@@ -201,10 +193,10 @@ export function discoverTasks(sources) {
             catch { /* skip source */ }
         }
         if (source === 'swarm-tasks') {
-            const swarmFile = path.resolve('.claude-flow/swarm-tasks.json');
+            const swarmFile = resolve('.claude-flow/swarm-tasks.json');
             try {
-                if (fs.existsSync(swarmFile)) {
-                    const data = safeJsonParse(fs.readFileSync(swarmFile, 'utf-8'));
+                if (existsSync(swarmFile)) {
+                    const data = safeJsonParse(readFileSync(swarmFile, 'utf-8'));
                     const swarmTasks = Array.isArray(data) ? data : (data.tasks || []);
                     for (const t of swarmTasks) {
                         if (t && typeof t === 'object') {
@@ -222,10 +214,10 @@ export function discoverTasks(sources) {
             catch { /* skip source */ }
         }
         if (source === 'file-checklist') {
-            const checklistFile = path.resolve('.claude-flow/data/checklist.json');
+            const checklistFile = resolve('.claude-flow/data/checklist.json');
             try {
-                if (fs.existsSync(checklistFile)) {
-                    const data = safeJsonParse(fs.readFileSync(checklistFile, 'utf-8'));
+                if (existsSync(checklistFile)) {
+                    const data = safeJsonParse(readFileSync(checklistFile, 'utf-8'));
                     const items = Array.isArray(data) ? data : (data.items || []);
                     for (const item of items) {
                         if (item && typeof item === 'object') {

package/v3/@claude-flow/cli/dist/src/commands/autopilot.js

@@ -182,10 +182,10 @@ const logCommand = {
     ],
     action: async (ctx) => {
         if (ctx.flags?.clear) {
-            const fs = require('fs');
-            const path = require('path');
+            const { writeFileSync } = await import('node:fs');
+            const { resolve } = await import('node:path');
             try {
-                fs.writeFileSync(path.resolve(LOG_FILE), '[]');
+                writeFileSync(resolve(LOG_FILE), '[]');
             }
             catch { /* ignore */ }
             output.writeln('Autopilot log cleared');

package/v3/@claude-flow/cli/dist/src/commands/claims.js

@@ -4,27 +4,25 @@
  *
  * Created with ❤️ by ruv.io
  */
+import { existsSync, readFileSync, writeFileSync, mkdirSync, renameSync } from 'node:fs';
+import { resolve, dirname } from 'node:path';
 import { output } from '../output.js';
 const CLAIMS_CONFIG_PATHS = [
     '.claude-flow/claims.json',
     'claude-flow.claims.json',
 ];
 function getClaimsConfigPaths() {
-    // Lazy import to keep top-level synchronous
-    // eslint-disable-next-line @typescript-eslint/no-var-requires
-    const path = require('path');
     return [
-        path.resolve(CLAIMS_CONFIG_PATHS[0]),
-        path.resolve(CLAIMS_CONFIG_PATHS[1]),
-        path.resolve(process.env.HOME || '~', '.config/claude-flow/claims.json'),
+        resolve(CLAIMS_CONFIG_PATHS[0]),
+        resolve(CLAIMS_CONFIG_PATHS[1]),
+        resolve(process.env.HOME || '~', '.config/claude-flow/claims.json'),
     ];
 }
 function loadClaimsConfig() {
-    const fs = require('fs');
     const configPaths = getClaimsConfigPaths();
     for (const configPath of configPaths) {
-        if (fs.existsSync(configPath)) {
-            const content = fs.readFileSync(configPath, 'utf-8');
+        if (existsSync(configPath)) {
+            const content = readFileSync(configPath, 'utf-8');
             return { config: JSON.parse(content), path: configPath };
         }
     }
@@ -41,15 +39,13 @@ function loadClaimsConfig() {
     return { config: defaultConfig, path: configPaths[0] };
 }
 function saveClaimsConfig(config, configPath) {
-    const fs = require('fs');
-    const path = require('path');
-    const dir = path.dirname(configPath);
-    if (!fs.existsSync(dir)) {
-        fs.mkdirSync(dir, { recursive: true });
+    const dir = dirname(configPath);
+    if (!existsSync(dir)) {
+        mkdirSync(dir, { recursive: true });
     }
     const tmpPath = configPath + '.tmp';
-    fs.writeFileSync(tmpPath, JSON.stringify(config, null, 2) + '\n', 'utf-8');
-    fs.renameSync(tmpPath, configPath);
+    writeFileSync(tmpPath, JSON.stringify(config, null, 2) + '\n', 'utf-8');
+    renameSync(tmpPath, configPath);
 }
 // List subcommand
 const listCommand = {

package/v3/@claude-flow/cli/dist/src/commands/cleanup.js

@@ -5,13 +5,21 @@
  * Created with ruv.io
  */
 import { output } from '../output.js';
-import { existsSync, statSync, rmSync, readdirSync } from 'fs';
+import { existsSync, statSync, rmSync, readdirSync, readFileSync, writeFileSync } from 'fs';
 import { join } from 'path';
+/**
+ * Ruflo-owned subdirectories within .claude/ that are safe to delete.
+ * Everything else in .claude/ (agents, skills, commands, settings.local.json,
+ * memory.db, worktrees, launch.json) belongs to Claude Code and must be preserved.
+ * See: https://github.com/ruvnet/ruflo/issues/1557
+ */
+const CLAUDE_OWNED_SUBDIRS = [
+    { path: join('.claude', 'helpers'), description: 'Ruflo hook scripts' },
+];
 /**
  * Artifact directories and files that claude-flow/ruflo may create
  */
 const ARTIFACT_DIRS = [
-    { path: '.claude', description: 'Claude settings, helpers, agents' },
     { path: '.claude-flow', description: 'Capabilities and configuration' },
     { path: 'data', description: 'Memory databases' },
     { path: '.swarm', description: 'Swarm state' },
@@ -119,7 +127,21 @@ export const cleanupCommand = {
         output.writeln();
         const found = [];
         let totalSize = 0;
-        // Scan directories
+        // Scan ruflo-owned subdirs within .claude/ (surgical — preserves Claude Code files)
+        for (const artifact of CLAUDE_OWNED_SUBDIRS) {
+            const fullPath = join(cwd, artifact.path);
+            if (existsSync(fullPath)) {
+                const size = getSize(fullPath);
+                found.push({ path: artifact.path, description: artifact.description, size, type: 'dir' });
+                totalSize += size;
+            }
+        }
+        // Check if .claude/settings.json has ruflo hooks/claudeFlow blocks to clean
+        const settingsPath = join(cwd, '.claude', 'settings.json');
+        if (existsSync(settingsPath)) {
+            found.push({ path: join('.claude', 'settings.json'), description: 'Remove ruflo hooks/claudeFlow blocks (preserves rest)', size: 0, type: 'file' });
+        }
+        // Scan standalone artifact directories
         for (const artifact of ARTIFACT_DIRS) {
             const fullPath = join(cwd, artifact.path);
             if (existsSync(fullPath)) {
@@ -170,7 +192,17 @@ export const cleanupCommand = {
                 // Actually delete
                 try {
                     const fullPath = join(cwd, item.path);
-                    if (item.type === 'dir') {
+                    // Special handling: surgically clean settings.json instead of deleting
+                    if (item.path === join('.claude', 'settings.json')) {
+                        try {
+                            const raw = JSON.parse(readFileSync(fullPath, 'utf-8'));
+                            delete raw.hooks;
+                            delete raw.claudeFlow;
+                            writeFileSync(fullPath, JSON.stringify(raw, null, 2) + '\n', 'utf-8');
+                        }
+                        catch { /* settings.json parse failed, skip */ }
+                    }
+                    else if (item.type === 'dir') {
                         rmSync(fullPath, { recursive: true, force: true });
                     }
                     else {

package/v3/@claude-flow/cli/dist/src/commands/daemon.js

@@ -69,10 +69,12 @@ const startCommand = {
             const bgPid = getBackgroundDaemonPid(projectRoot);
             if (bgPid && isProcessRunning(bgPid)) {
                 if (!quiet) {
-                    output.printWarning(`Daemon already running in background (PID: ${bgPid})`);
+                    output.printWarning(`Daemon already running in background (PID: ${bgPid}). Stop it first with: daemon stop`);
                 }
                 return { success: true };
             }
+            // #1551: Kill any stale daemon processes that weren't tracked by PID file
+            await killStaleDaemons(projectRoot, quiet);
         }
         // Background mode (default): fork a detached process
         if (!foreground) {
@@ -302,11 +304,14 @@ const stopCommand = {
                 await stopDaemon();
                 // Also kill any background daemon by PID
                 const killed = await killBackgroundDaemon(projectRoot);
+                // #1551: Also kill stale daemon processes not tracked by PID file
+                await killStaleDaemons(projectRoot, true);
                 spinner.succeed(killed ? 'Worker daemon stopped' : 'Worker daemon was not running');
             }
             else {
                 await stopDaemon();
                 await killBackgroundDaemon(projectRoot);
+                await killStaleDaemons(projectRoot, true);
             }
             return { success: true };
         }
@@ -365,6 +370,46 @@ async function killBackgroundDaemon(projectRoot) {
         return false;
     }
 }
+/**
+ * Kill stale daemon processes not tracked by the PID file (#1551).
+ * Uses `ps` to find all daemon processes for this project and kills them.
+ */
+async function killStaleDaemons(projectRoot, quiet) {
+    try {
+        const { execFileSync } = await import('child_process');
+        const psOutput = execFileSync('ps', ['-eo', 'pid,command'], { encoding: 'utf-8', timeout: 5000 });
+        const lines = psOutput.split('\n');
+        const currentPid = process.pid;
+        const trackedPid = getBackgroundDaemonPid(projectRoot);
+        let killed = 0;
+        for (const line of lines) {
+            if (!line.includes('daemon start --foreground'))
+                continue;
+            if (!line.includes('claude-flow') && !line.includes('@claude-flow/cli'))
+                continue;
+            const pidStr = line.trim().split(/\s+/)[0];
+            const pid = parseInt(pidStr, 10);
+            if (isNaN(pid) || pid === currentPid || pid === trackedPid)
+                continue;
+            if (!isProcessRunning(pid))
+                continue;
+            try {
+                process.kill(pid, 'SIGTERM');
+                killed++;
+                if (!quiet) {
+                    output.printWarning(`Killed stale daemon process (PID: ${pid})`);
+                }
+            }
+            catch { /* ignore — may have exited between check and kill */ }
+        }
+        if (killed > 0 && !quiet) {
+            output.printInfo(`Cleaned up ${killed} stale daemon process(es)`);
+        }
+    }
+    catch {
+        // ps not available or failed — skip stale cleanup
+    }
+}
 /**
  * Get PID of background daemon from PID file
  */

package/v3/@claude-flow/cli/dist/src/commands/embeddings.js

@@ -145,62 +145,87 @@ const searchCommand = {
             const queryResult = await generateEmbedding(query);
             const queryEmbedding = queryResult.embedding;
             // Get all entries with embeddings from database
-            const entries = db.exec(`
-        SELECT id, key, namespace, content, embedding, embedding_dimensions
-        FROM memory_entries
-        WHERE status = 'active'
-          AND embedding IS NOT NULL
-          ${namespace !== 'all' ? `AND namespace = '${namespace}'` : ''}
-        LIMIT 1000
-      `);
+            // Parameterized query to prevent SQL injection (CRIT-01)
+            const embeddingSql = namespace !== 'all'
+                ? `SELECT id, key, namespace, content, embedding, embedding_dimensions
+           FROM memory_entries
+           WHERE status = 'active' AND embedding IS NOT NULL AND namespace = ?
+           LIMIT 1000`
+                : `SELECT id, key, namespace, content, embedding, embedding_dimensions
+           FROM memory_entries
+           WHERE status = 'active' AND embedding IS NOT NULL
+           LIMIT 1000`;
+            const embeddingStmt = db.prepare(embeddingSql);
+            if (namespace !== 'all') {
+                embeddingStmt.bind([namespace]);
+            }
+            const entryRows = [];
+            while (embeddingStmt.step()) {
+                entryRows.push(embeddingStmt.get());
+            }
+            embeddingStmt.free();
             const results = [];
-            if (entries[0]?.values) {
-                for (const row of entries[0].values) {
-                    const [id, key, ns, content, embeddingJson] = row;
-                    if (!embeddingJson)
-                        continue;
-                    try {
-                        const embedding = JSON.parse(embeddingJson);
-                        // Calculate cosine similarity
-                        const similarity = cosineSimilarity(queryEmbedding, embedding);
-                        if (similarity >= threshold) {
-                            results.push({
-                                score: similarity,
-                                id: id.substring(0, 10),
-                                key: key || id.substring(0, 15),
-                                content: (content || '').substring(0, 45) + ((content || '').length > 45 ? '...' : ''),
-                                namespace: ns || 'default'
-                            });
-                        }
-                    }
-                    catch {
-                        // Skip entries with invalid embeddings
+            for (const row of entryRows) {
+                const [id, key, ns, content, embeddingJson] = row;
+                if (!embeddingJson)
+                    continue;
+                try {
+                    const embedding = JSON.parse(embeddingJson);
+                    // Calculate cosine similarity
+                    const similarity = cosineSimilarity(queryEmbedding, embedding);
+                    if (similarity >= threshold) {
+                        results.push({
+                            score: similarity,
+                            id: id.substring(0, 10),
+                            key: key || id.substring(0, 15),
+                            content: (content || '').substring(0, 45) + ((content || '').length > 45 ? '...' : ''),
+                            namespace: ns || 'default'
+                        });
                     }
                 }
+                catch {
+                    // Skip entries with invalid embeddings
+                }
             }
-            // Also search entries without embeddings using keyword match
+            // Keyword search fallback with parameterized query (CRIT-01)
             if (results.length < limit) {
-                const keywordEntries = db.exec(`
-          SELECT id, key, namespace, content
-          FROM memory_entries
-          WHERE status = 'active'
-            AND (content LIKE '%${query.replace(/'/g, "''")}%' OR key LIKE '%${query.replace(/'/g, "''")}%')
-            ${namespace !== 'all' ? `AND namespace = '${namespace}'` : ''}
-          LIMIT ${limit - results.length}
-        `);
-                if (keywordEntries[0]?.values) {
-                    for (const row of keywordEntries[0].values) {
-                        const [id, key, ns, content] = row;
-                        // Avoid duplicates
-                        if (!results.some(r => r.id === id.substring(0, 10))) {
-                            results.push({
-                                score: 0.5, // Keyword match base score
-                                id: id.substring(0, 10),
-                                key: key || id.substring(0, 15),
-                                content: (content || '').substring(0, 45) + ((content || '').length > 45 ? '...' : ''),
-                                namespace: ns || 'default'
-                            });
-                        }
+                const likePattern = `%${query}%`;
+                const remainingLimit = Math.max(0, limit - results.length);
+                const keywordSql = namespace !== 'all'
+                    ? `SELECT id, key, namespace, content
+             FROM memory_entries
+             WHERE status = 'active'
+               AND (content LIKE ? OR key LIKE ?)
+               AND namespace = ?
+             LIMIT ?`
+                    : `SELECT id, key, namespace, content
+             FROM memory_entries
+             WHERE status = 'active'
+               AND (content LIKE ? OR key LIKE ?)
+             LIMIT ?`;
+                const keywordStmt = db.prepare(keywordSql);
+                if (namespace !== 'all') {
+                    keywordStmt.bind([likePattern, likePattern, namespace, remainingLimit]);
+                }
+                else {
+                    keywordStmt.bind([likePattern, likePattern, remainingLimit]);
+                }
+                const keywordRows = [];
+                while (keywordStmt.step()) {
+                    keywordRows.push(keywordStmt.get());
+                }
+                keywordStmt.free();
+                for (const row of keywordRows) {
+                    const [id, key, ns, content] = row;
+                    // Avoid duplicates
+                    if (!results.some(r => r.id === id.substring(0, 10))) {
+                        results.push({
+                            score: 0.5, // Keyword match base score
+                            id: id.substring(0, 10),
+                            key: key || id.substring(0, 15),
+                            content: (content || '').substring(0, 45) + ((content || '').length > 45 ? '...' : ''),
+                            namespace: ns || 'default'
+                        });
                     }
                 }
             }

package/v3/@claude-flow/cli/dist/src/commands/hive-mind.js

@@ -208,8 +208,10 @@ async function spawnClaudeCodeInstance(swarmId, swarmName, objective, workers, f
                 claudeArgs.push('--verbose');
                 output.printInfo('Running in non-interactive mode');
             }
-            // Add auto-permission flag unless explicitly disabled
-            const skipPermissions = flags['dangerously-skip-permissions'] !== false && !flags['no-auto-permissions'];
+            // HIGH-02: Strict boolean check (=== true) instead of loose truthiness (!== false)
+            // to prevent undefined/null from being treated as "skip permissions".
+            // Behavior change: only explicit --dangerously-skip-permissions flag triggers skip.
+            const skipPermissions = flags['dangerously-skip-permissions'] === true && !flags['no-auto-permissions'];
             if (skipPermissions) {
                 claudeArgs.push('--dangerously-skip-permissions');
                 if (!isNonInteractive) {

package/v3/@claude-flow/cli/dist/src/commands/index.d.ts

@@ -19,18 +19,6 @@ export { swarmCommand } from './swarm.js';
 export { memoryCommand } from './memory.js';
 export { mcpCommand } from './mcp.js';
 export { hooksCommand } from './hooks.js';
-export { daemonCommand } from './daemon.js';
-export { doctorCommand } from './doctor.js';
-export { embeddingsCommand } from './embeddings.js';
-export { neuralCommand } from './neural.js';
-export { performanceCommand } from './performance.js';
-export { securityCommand } from './security.js';
-export { ruvectorCommand } from './ruvector/index.js';
-export { hiveMindCommand } from './hive-mind.js';
-export { guidanceCommand } from './guidance.js';
-export { applianceCommand } from './appliance.js';
-export { cleanupCommand } from './cleanup.js';
-export { autopilotCommand } from './autopilot.js';
 export declare function getConfigCommand(): Promise<Command | undefined>;
 export declare function getMigrateCommand(): Promise<Command | undefined>;
 export declare function getWorkflowCommand(): Promise<Command | undefined>;
@@ -62,7 +50,8 @@ export declare function getAutopilotCommand(): Promise<Command | undefined>;
  */
 export declare const commands: Command[];
 /**
- * Commands organized by category for help display
+ * Commands organized by category for help display (synchronous core only).
+ * @deprecated Use getCommandsByCategory() for full categorized listing.
  */
 export declare const commandsByCategory: {
     primary: Command[];
@@ -71,6 +60,11 @@ export declare const commandsByCategory: {
     analysis: Command[];
     management: Command[];
 };
+/**
+ * Async version that loads all commands by category (PERF-03).
+ * Use this for help display and full command listings.
+ */
+export declare function getCommandsByCategory(): Promise<Record<string, Command[]>>;
 /**
  * Command registry map for quick lookup
  * Supports both sync (core commands) and async (lazy-loaded) commands