claude-flow 3.6.16 → 3.6.18

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-flow",
-  "version": "3.6.16",
+  "version": "3.6.18",
   "description": "Ruflo - Enterprise AI agent orchestration for Claude Code. Deploy 60+ specialized agents in coordinated swarms with self-learning, fault-tolerant consensus, vector memory, and MCP integration",
   "main": "dist/index.js",
   "type": "module",
@@ -73,7 +73,7 @@
     "@ruvector/rvf-wasm": "0.1.5",
     "@hono/node-server": ">=1.19.10",
     "flatted": ">=3.4.0",
-    "tar": ">=7.5.0",
+    "tar": ">=7.5.11",
     "picomatch": ">=4.0.3",
     "path-to-regexp": ">=8.2.1",
     "undici": ">=7.18.0",
@@ -81,7 +81,9 @@
     "@isaacs/brace-expansion": ">=5.0.1",
     "cacache": ">=20.0.0",
     "make-fetch-happen": ">=15.0.0",
-    "express-rate-limit": ">=8.4.1"
+    "express-rate-limit": ">=8.4.1",
+    "protobufjs": ">=7.5.5",
+    "uuid": ">=14.0.0"
   },
   "devDependencies": {
     "@openai/codex": "^0.98.0",

package/v3/@claude-flow/cli/dist/src/index.js

@@ -4,6 +4,33 @@
  *
  * Created with ❤️ by ruv.io
  */
+// MUST run before any agentic-flow / agentdb imports — this file is
+// imported by every entry point (bin/cli.js, ruflo/bin/ruflo.js via
+// dist/src/index.js, and tests). Patching the console here ensures the
+// suppression applies regardless of how the CLI was invoked. Previously
+// the suppression lived only in bin/cli.js, so the ruflo wrapper (which
+// imports dist/src/index.js directly) leaked the cosmetic warning.
+//
+// Tight match: requires BOTH "[AgentDB Patch]" AND "Controller index not
+// found" so other [AgentDB Patch] messages (real issues) still flow.
+{
+    const _isCosmeticAgentdbPatchNoise = (msg) => {
+        const s = String(msg ?? '');
+        return s.includes('[AgentDB Patch]') && s.includes('Controller index not found');
+    };
+    const _origWarn = console.warn.bind(console);
+    const _origLog = console.log.bind(console);
+    console.warn = (...args) => {
+        if (_isCosmeticAgentdbPatchNoise(args[0]))
+            return;
+        _origWarn(...args);
+    };
+    console.log = (...args) => {
+        if (_isCosmeticAgentdbPatchNoise(args[0]))
+            return;
+        _origLog(...args);
+    };
+}
 import { readFileSync } from 'fs';
 import { fileURLToPath } from 'url';
 import { dirname, join } from 'path';

package/v3/@claude-flow/cli/dist/src/mcp-tools/security-tools.js

@@ -18,6 +18,20 @@ const require = createRequire(import.meta.url);
 let aidefenceInstance = null;
 // Track if we've attempted install this session
 let installAttempted = false;
+// ADR-093 follow-up: wrapper-level counters for the lightweight aidefence
+// tools (has_pii, is_safe, scan-quick) that bypass the package's own
+// stats tracking. The audit flagged that aidefence_stats stayed at zero
+// regardless of detections from these paths. Stats now combine the
+// underlying defender.getStats() with our wrapper counters so the user
+// sees a true reflection of how often each tool category fired.
+const wrapperStats = {
+    hasPiiCalls: 0,
+    hasPiiHits: 0,
+    isSafeCalls: 0,
+    isSafeUnsafeVerdicts: 0,
+    quickScanCalls: 0,
+    quickScanThreats: 0,
+};
 /**
  * Get or create AIDefence instance (throws if unavailable)
  */
@@ -105,13 +119,27 @@ const aidefenceScanTool = {
             const defender = await getAIDefence();
             if (quick) {
                 const result = defender.quickScan(input);
+                // Audit-flagged: quickScan focuses on prompt-injection/jailbreak
+                // patterns and missed obvious PII (email + API key). Layer a fast
+                // PII check so quick mode catches both threat classes.
+                let piiPresent = false;
+                try {
+                    piiPresent = !!defender.hasPII(input);
+                }
+                catch { /* hasPII unavailable */ }
+                const threatDetected = result.threat || piiPresent;
+                wrapperStats.quickScanCalls++;
+                if (threatDetected)
+                    wrapperStats.quickScanThreats++;
                 return {
                     content: [{
                             type: 'text',
                             text: JSON.stringify({
-                                safe: !result.threat,
-                                threatDetected: result.threat,
+                                safe: !threatDetected,
+                                threatDetected,
                                 confidence: result.confidence,
+                                piiDetected: piiPresent,
+                                promptInjectionDetected: result.threat,
                                 mode: 'quick',
                             }, null, 2),
                         }],
@@ -249,11 +277,24 @@ const aidefenceStatsTool = {
                 content: [{
                         type: 'text',
                         text: JSON.stringify({
+                            // Underlying defender stats (from full detect() calls via aidefence_scan/aidefence_analyze)
                             detectionCount: stats.detectionCount,
                             avgDetectionTimeMs: stats.avgDetectionTimeMs,
                             learnedPatterns: stats.learnedPatterns,
                             mitigationStrategies: stats.mitigationStrategies,
                             avgMitigationEffectiveness: stats.avgMitigationEffectiveness,
+                            // ADR-093 follow-up: wrapper-level stats for the lightweight
+                            // tools that bypass the defender's own counters. Audit found
+                            // these stayed at 0 even after has_pii/is_safe/scan-quick
+                            // calls — these counters surface real activity.
+                            wrapper: {
+                                hasPiiCalls: wrapperStats.hasPiiCalls,
+                                hasPiiHits: wrapperStats.hasPiiHits,
+                                isSafeCalls: wrapperStats.isSafeCalls,
+                                isSafeUnsafeVerdicts: wrapperStats.isSafeUnsafeVerdicts,
+                                quickScanCalls: wrapperStats.quickScanCalls,
+                                quickScanThreats: wrapperStats.quickScanThreats,
+                            },
                         }, null, 2),
                     }],
             };
@@ -391,12 +432,29 @@ const aidefenceIsSafeTool = {
         }
         const input = args.input;
         try {
+            // Route through the singleton so wrapper stats track this call,
+            // and so a single defender controls both the prompt-injection model
+            // and the PII detector.
+            const defender = await getAIDefence();
             const { isSafe } = await import('@claude-flow/aidefence');
-            const safe = isSafe(input);
+            const promptSafe = isSafe(input);
+            let piiPresent = false;
+            try {
+                piiPresent = !!defender.hasPII(input);
+            }
+            catch { /* hasPII unavailable */ }
+            const safe = promptSafe && !piiPresent;
+            wrapperStats.isSafeCalls++;
+            if (!safe)
+                wrapperStats.isSafeUnsafeVerdicts++;
             return {
                 content: [{
                         type: 'text',
-                        text: JSON.stringify({ safe }, null, 2),
+                        text: JSON.stringify({
+                            safe,
+                            promptSafe,
+                            piiPresent,
+                        }, null, 2),
                     }],
             };
         }
@@ -437,6 +495,9 @@ const aidefenceHasPIITool = {
         try {
             const defender = await getAIDefence();
             const hasPII = defender.hasPII(input);
+            wrapperStats.hasPiiCalls++;
+            if (hasPII)
+                wrapperStats.hasPiiHits++;
             return {
                 content: [{
                         type: 'text',

package/v3/@claude-flow/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@claude-flow/cli",
-  "version": "3.6.16",
+  "version": "3.6.18",
   "type": "module",
   "description": "Ruflo CLI - Enterprise AI agent orchestration with 60+ specialized agents, swarm coordination, MCP server, self-learning hooks, and vector memory for Claude Code",
   "main": "dist/src/index.js",
@@ -84,7 +84,7 @@
     "test": "vitest run",
     "test:plugin-store": "npx tsx src/plugins/tests/standalone-test.ts",
     "test:pattern-store": "npx tsx src/transfer/store/tests/standalone-test.ts",
-    "postinstall": "node -e \"const{existsSync,cpSync,readdirSync}=require('fs');const{join,dirname}=require('path');try{const r=require.resolve('agentdb');const base=r.includes('dist/src')?join(dirname(r),'..','..'):(r.includes('dist')?join(dirname(r),'..'):dirname(r));const s=join(base,'dist','src','controllers');const t=join(base,'dist','controllers');if(existsSync(s)&&!existsSync(t)){cpSync(s,t,{recursive:true});}}catch{}\"",
+    "postinstall": "node -e \"const{existsSync,cpSync,readdirSync,statSync}=require('fs');const{join,dirname}=require('path');try{const r=require.resolve('agentdb');const base=r.includes('dist/src')?join(dirname(r),'..','..'):(r.includes('dist')?join(dirname(r),'..'):dirname(r));const srcDist=join(base,'dist','src');if(!existsSync(srcDist))process.exit(0);for(const e of readdirSync(srcDist)){const s=join(srcDist,e);const t=join(base,'dist',e);try{if(statSync(s).isDirectory()&&!existsSync(t)){cpSync(s,t,{recursive:true});}}catch{}}}catch{}\"",
     "prepublishOnly": "cp ../../../README.md ./README.md",
     "release": "npm version prerelease --preid=alpha && npm run publish:all",
     "publish:all": "./scripts/publish.sh"