claude-flow 3.63.1 → 3.63.3

package/v3/@claude-flow/cli/dist/src/services/headless-worker-executor.js

@@ -94,7 +94,7 @@ Provide a JSON report with:
             sandbox: 'strict',
             model: 'haiku',
             outputFormat: 'json',
-            contextPatterns: ['**/*.ts', '**/*.js', '**/.env*', '**/package.json'],
+            contextPatterns: ['**/*.ts', '**/*.js', '**/package.json'],
             timeoutMs: 5 * 60 * 1000,
         },
     },

package/v3/@claude-flow/cli/dist/src/services/worker-daemon.d.ts

@@ -71,9 +71,6 @@ export interface DaemonConfig {
 }
 /** Parse only worker types the daemon can actually schedule. */
 export declare function parseEnabledWorkers(value: string): WorkerType[];
-/**
- * Worker Daemon - Manages background workers with Node.js
- */
 export declare class WorkerDaemon extends EventEmitter {
     private config;
     private workers;

package/v3/@claude-flow/cli/dist/src/services/worker-daemon.js

@@ -13,7 +13,7 @@
 import { ConfigFileManager } from './config-file-manager.js';
 import { EventEmitter } from 'events';
 import { existsSync, mkdirSync, writeFileSync, readFileSync, appendFileSync, unlinkSync } from 'fs';
-import { cpus } from 'os';
+import { cpus, homedir } from 'os';
 import { join } from 'path';
 import { createRequire } from 'node:module';
 import { writeFileAtomic } from '../fs-secure.js';
@@ -108,6 +108,19 @@ function readEnvSecsAsMs(name, defaultMs) {
 /**
  * Worker Daemon - Manages background workers with Node.js
  */
+/** `daemon.aiWorkers.enabled` from the USER-level config only (never the project's). */
+function readUserAiWorkersOptIn() {
+    try {
+        const raw = JSON.parse(readFileSync(join(homedir(), '.claude-flow', 'config.json'), 'utf-8'));
+        const nested = raw?.daemon?.aiWorkers?.enabled;
+        const dotted = raw?.['daemon.aiWorkers.enabled'];
+        const v = nested ?? dotted;
+        return typeof v === 'boolean' ? v : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
 export class WorkerDaemon extends EventEmitter {
     config;
     workers = new Map();
@@ -203,9 +216,15 @@ export class WorkerDaemon extends EventEmitter {
             // #2661 — AI workers are opt-in: flag > config.json > env > OFF.
             // Deliberately NOT restored from daemon-state.json (initializeWorkerStates
             // whitelist) so a stale state file can never resurrect consent.
+            // SECURITY: the project's own config file is repo content and may come
+            // from a clone, so it can never switch AI workers on. Only the flag, the
+            // env var, or the user-level ~/.claude-flow/config.json can.
+            // A project file may still say `false` (it can only make this safer).
             aiWorkersEnabled: config?.aiWorkersEnabled
-                ?? fileConfig.aiWorkersEnabled
-                ?? (process.env.RUFLO_DAEMON_AI_WORKERS === '1'),
+                ?? (fileConfig.aiWorkersEnabled === false ? false : undefined)
+                ?? (process.env.RUFLO_DAEMON_AI_WORKERS === '1' ? true : undefined)
+                ?? readUserAiWorkersOptIn()
+                ?? false,
             workers: (config?.workers ?? DEFAULT_WORKERS).map(worker => ({ ...worker })),
             enabledWorkers: config?.enabledWorkers,
         };
@@ -250,7 +269,7 @@ export class WorkerDaemon extends EventEmitter {
         // every worker runs its $0 local path, and a default install produces
         // zero autonomous Claude launches regardless of worktree count.
         if (!this.config.aiWorkersEnabled) {
-            this.log('info', 'AI workers disabled (default) - all workers run local-only. Enable with `daemon start --headless`, daemon.aiWorkers.enabled=true, or RUFLO_DAEMON_AI_WORKERS=1 (#2661)');
+            this.log('info', 'AI workers disabled (default) - all workers run local-only. Enable with `daemon start --headless`, daemon.aiWorkers.enabled=true in ~/.claude-flow/config.json (a project config cannot enable it), or RUFLO_DAEMON_AI_WORKERS=1 (#2661)');
             return;
         }
         try {

package/v3/@claude-flow/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@claude-flow/cli",
-  "version": "3.63.1",
+  "version": "3.63.3",
   "type": "module",
   "description": "Ruflo CLI - Enterprise AI agent orchestration with 60+ specialized agents, swarm coordination, MCP server, self-learning hooks, and vector memory for Claude Code",
   "main": "dist/src/index.js",
@@ -102,9 +102,9 @@
     "@electron/asar": "^4.3.1",
     "@claude-flow/cli-core": "3.7.5",
     "@claude-flow/codex": "3.0.5",
-    "@claude-flow/mcp": "3.1.2",
+    "@claude-flow/mcp": "3.1.3",
     "@claude-flow/neural": "3.0.0",
-    "@claude-flow/plugin-agent-federation": "1.0.1",
+    "@claude-flow/plugin-agent-federation": "1.0.2",
     "@claude-flow/security": "3.0.5",
     "@claude-flow/shared": "3.0.5",
     "@iarna/toml": "^2.2.5",

package/.claude/helpers/.helpers-version

@@ -1 +0,0 @@
-0.0.0

package/.claude/helpers/helpers.manifest.json

@@ -1,13 +0,0 @@
-{
-  "manifest": {
-    "version": "3.32.24",
-    "files": {
-      "auto-memory-hook.mjs": "68be7e9a9eba7bf9c4e8a230db7bf61a243b965639f8504842799d6c6ca28762",
-      "hook-handler.cjs": "50ea92a72651bdc95634f7588d56a5870963168eef5226f66ed14af3b47c8d9a",
-      "intelligence.cjs": "bd1f8e4b034944aee1df0391dc47ac2e8cc4b3aa542c65407a59d49620bbf76b",
-      "statusline.cjs": "d2a0eac56d1267d8dbed2d70b09feb592299469196ec4b215909f2b052144882"
-    }
-  },
-  "signature": "Vi6dza9CfZgo25+eTMJ81fUjsNtQQfUZUZS61MxpBTlilSBTo88cNCCy4ZNC7OfH2r2JOYS7HqqYotf0/AJ9DA==",
-  "algorithm": "ed25519"
-}

package/.claude/settings.local.json

@@ -1,8 +0,0 @@
-{
-  "disabledMcpjsonServers": [
-    "ruvultra",
-    "claude-flow",
-    "mcp-brain",
-    "metallm-dev-bridge"
-  ]
-}

package/v3/@claude-flow/cli/dist/src/ruvector/diskann-backend.d.ts

@@ -1,78 +0,0 @@
-/**
- * DiskANN Vector Search Backend
- *
- * SSD-friendly approximate nearest neighbor search using Vamana graph.
- * Falls back gracefully to HNSW (@ruvector/router VectorDb) or
- * pure-JS cosine similarity when DiskANN is unavailable.
- *
- * @module v3/cli/ruvector/diskann-backend
- */
-export interface DiskAnnConfig {
-    dim: number;
-    maxDegree?: number;
-    buildBeam?: number;
-    searchBeam?: number;
-    alpha?: number;
-    pqSubspaces?: number;
-    storagePath?: string;
-}
-export interface SearchResult {
-    id: string;
-    distance: number;
-    score: number;
-}
-export type VectorBackend = 'diskann' | 'hnsw' | 'cosine-js';
-/**
- * Check if @ruvector/diskann is available
- */
-export declare function isDiskAnnAvailable(): Promise<boolean>;
-/**
- * Create or get a DiskANN index instance
- */
-export declare function getDiskAnnIndex(config: DiskAnnConfig): Promise<{
-    index: any;
-    backend: VectorBackend;
-}>;
-/**
- * Get the active backend name
- */
-export declare function getActiveBackend(): VectorBackend;
-/**
- * Reset the index (for testing)
- */
-export declare function resetIndex(): void;
-/**
- * Insert a vector into the active backend
- */
-export declare function insertVector(id: string, vector: Float32Array, config?: DiskAnnConfig): Promise<{
-    backend: VectorBackend;
-}>;
-/**
- * Build the index (required for DiskANN before search)
- */
-export declare function buildIndex(config?: DiskAnnConfig): Promise<void>;
-/**
- * Search for k nearest neighbors
- */
-export declare function searchVectors(query: Float32Array, k: number, config?: DiskAnnConfig): Promise<SearchResult[]>;
-export interface BenchmarkResult {
-    backend: VectorBackend;
-    dim: number;
-    vectorCount: number;
-    insertTimeMs: number;
-    buildTimeMs: number;
-    searchTimeMs: number;
-    searchesPerSecond: number;
-    recall: number;
-    memoryMB: number;
-}
-/**
- * Run a benchmark comparing available backends
- */
-export declare function benchmark(opts?: {
-    dim?: number;
-    vectorCount?: number;
-    k?: number;
-    queries?: number;
-}): Promise<BenchmarkResult[]>;
-//# sourceMappingURL=diskann-backend.d.ts.map

package/v3/@claude-flow/cli/dist/src/ruvector/diskann-backend.js

@@ -1,310 +0,0 @@
-/**
- * DiskANN Vector Search Backend
- *
- * SSD-friendly approximate nearest neighbor search using Vamana graph.
- * Falls back gracefully to HNSW (@ruvector/router VectorDb) or
- * pure-JS cosine similarity when DiskANN is unavailable.
- *
- * @module v3/cli/ruvector/diskann-backend
- */
-// ===== Lazy loading =====
-let diskannInstance = null;
-let diskannAvailable = null;
-let activeBackend = 'cosine-js';
-/**
- * Check if @ruvector/diskann is available
- */
-export async function isDiskAnnAvailable() {
-    if (diskannAvailable !== null)
-        return diskannAvailable;
-    try {
-        const { createRequire } = await import('module');
-        const require2 = createRequire(import.meta.url);
-        const mod = require2('@ruvector/diskann');
-        diskannAvailable = typeof mod.DiskAnn === 'function';
-        return diskannAvailable;
-    }
-    catch {
-        diskannAvailable = false;
-        return false;
-    }
-}
-/**
- * Create or get a DiskANN index instance
- */
-export async function getDiskAnnIndex(config) {
-    if (diskannInstance)
-        return { index: diskannInstance, backend: activeBackend };
-    // Try DiskANN first
-    if (await isDiskAnnAvailable()) {
-        try {
-            const { createRequire } = await import('module');
-            const require2 = createRequire(import.meta.url);
-            const { DiskAnn } = require2('@ruvector/diskann');
-            const index = new DiskAnn({
-                dim: config.dim,
-                maxDegree: config.maxDegree ?? 64,
-                buildBeam: config.buildBeam ?? 128,
-                searchBeam: config.searchBeam ?? 64,
-                alpha: config.alpha ?? 1.2,
-                pqSubspaces: config.pqSubspaces ?? 0,
-                storagePath: config.storagePath,
-            });
-            diskannInstance = index;
-            activeBackend = 'diskann';
-            return { index, backend: 'diskann' };
-        }
-        catch {
-            // Fall through
-        }
-    }
-    // Try HNSW (@ruvector/router VectorDb) as fallback
-    try {
-        const { createRequire } = await import('module');
-        const require2 = createRequire(import.meta.url);
-        const router = require2('@ruvector/router');
-        if (router.VectorDb && router.DistanceMetric) {
-            const index = new router.VectorDb({
-                dimensions: config.dim,
-                distanceMetric: router.DistanceMetric.Cosine,
-                hnswM: 16,
-                hnswEfConstruction: 200,
-                hnswEfSearch: 100,
-            });
-            diskannInstance = index;
-            activeBackend = 'hnsw';
-            return { index, backend: 'hnsw' };
-        }
-    }
-    catch {
-        // Fall through
-    }
-    // Pure JS fallback
-    const jsIndex = createJsFallbackIndex(config.dim);
-    diskannInstance = jsIndex;
-    activeBackend = 'cosine-js';
-    return { index: jsIndex, backend: 'cosine-js' };
-}
-/**
- * Get the active backend name
- */
-export function getActiveBackend() {
-    return activeBackend;
-}
-/**
- * Reset the index (for testing)
- */
-export function resetIndex() {
-    diskannInstance = null;
-    diskannAvailable = null;
-    activeBackend = 'cosine-js';
-}
-// ===== Unified search interface =====
-/**
- * Insert a vector into the active backend
- */
-export async function insertVector(id, vector, config = { dim: 384 }) {
-    const { index, backend } = await getDiskAnnIndex(config);
-    if (backend === 'diskann') {
-        index.insert(id, vector);
-    }
-    else if (backend === 'hnsw') {
-        index.insert(id, vector);
-    }
-    else {
-        index.insert(id, vector);
-    }
-    return { backend };
-}
-/**
- * Build the index (required for DiskANN before search)
- */
-export async function buildIndex(config = { dim: 384 }) {
-    const { index, backend } = await getDiskAnnIndex(config);
-    if (backend === 'diskann' && typeof index.build === 'function') {
-        index.build();
-    }
-    // HNSW and JS fallback don't need explicit build
-}
-/**
- * Search for k nearest neighbors
- */
-export async function searchVectors(query, k, config = { dim: 384 }) {
-    const { index, backend } = await getDiskAnnIndex(config);
-    if (backend === 'diskann') {
-        const results = index.search(query, k);
-        return results.map((r) => ({
-            id: r.id,
-            distance: r.distance,
-            score: 1 / (1 + r.distance), // Convert L2 distance to similarity
-        }));
-    }
-    if (backend === 'hnsw') {
-        const results = index.search(query, k);
-        return results.map((r) => ({
-            id: r.id,
-            distance: r.score, // VectorDb returns distance as 'score'
-            score: 1 / (1 + r.score),
-        }));
-    }
-    // JS fallback
-    return index.search(query, k);
-}
-// ===== Pure JS fallback =====
-function createJsFallbackIndex(dim) {
-    const vectors = new Map();
-    return {
-        insert(id, vector) {
-            vectors.set(id, new Float32Array(vector));
-        },
-        search(query, k) {
-            const results = [];
-            for (const [id, vec] of vectors) {
-                let dot = 0, normQ = 0, normV = 0;
-                for (let i = 0; i < dim; i++) {
-                    dot += query[i] * vec[i];
-                    normQ += query[i] * query[i];
-                    normV += vec[i] * vec[i];
-                }
-                const cosine = dot / (Math.sqrt(normQ) * Math.sqrt(normV) || 1);
-                const distance = 1 - cosine;
-                results.push({ id, distance, score: cosine });
-            }
-            return results.sort((a, b) => a.distance - b.distance).slice(0, k);
-        },
-        count() { return vectors.size; },
-        delete(id) { return vectors.delete(id); },
-        build() { },
-    };
-}
-/**
- * Run a benchmark comparing available backends
- */
-export async function benchmark(opts = {}) {
-    const dim = opts.dim ?? 384;
-    const n = opts.vectorCount ?? 1000;
-    const k = opts.k ?? 10;
-    const queryCount = opts.queries ?? 100;
-    const results = [];
-    // Generate random vectors
-    const vectors = [];
-    for (let i = 0; i < n; i++) {
-        const v = new Float32Array(dim);
-        for (let j = 0; j < dim; j++)
-            v[j] = Math.random() * 2 - 1;
-        // Normalize
-        let norm = 0;
-        for (let j = 0; j < dim; j++)
-            norm += v[j] * v[j];
-        norm = Math.sqrt(norm);
-        for (let j = 0; j < dim; j++)
-            v[j] /= norm;
-        vectors.push([`vec-${i}`, v]);
-    }
-    // Generate query vectors
-    const queries = [];
-    for (let i = 0; i < queryCount; i++) {
-        const q = new Float32Array(dim);
-        for (let j = 0; j < dim; j++)
-            q[j] = Math.random() * 2 - 1;
-        let norm = 0;
-        for (let j = 0; j < dim; j++)
-            norm += q[j] * q[j];
-        norm = Math.sqrt(norm);
-        for (let j = 0; j < dim; j++)
-            q[j] /= norm;
-        queries.push(q);
-    }
-    // Brute force ground truth
-    function bruteForceSearch(query) {
-        const scores = [];
-        for (const [id, vec] of vectors) {
-            let dist = 0;
-            for (let j = 0; j < dim; j++) {
-                const d = query[j] - vec[j];
-                dist += d * d;
-            }
-            scores.push({ id, dist });
-        }
-        scores.sort((a, b) => a.dist - b.dist);
-        return scores.slice(0, k).map(s => s.id);
-    }
-    const groundTruth = queries.map(q => bruteForceSearch(q));
-    // Test each available backend
-    for (const backendName of ['diskann', 'hnsw', 'cosine-js']) {
-        resetIndex();
-        try {
-            let index;
-            const memBefore = process.memoryUsage().heapUsed;
-            if (backendName === 'diskann') {
-                if (!(await isDiskAnnAvailable()))
-                    continue;
-                const { createRequire } = await import('module');
-                const require2 = createRequire(import.meta.url);
-                const { DiskAnn } = require2('@ruvector/diskann');
-                index = new DiskAnn({ dim, maxDegree: 64, buildBeam: 128, searchBeam: 64 });
-            }
-            else if (backendName === 'hnsw') {
-                try {
-                    const { createRequire } = await import('module');
-                    const require2 = createRequire(import.meta.url);
-                    const router = require2('@ruvector/router');
-                    if (!router.VectorDb)
-                        continue;
-                    index = new router.VectorDb({ dimensions: dim, distanceMetric: router.DistanceMetric.Cosine });
-                }
-                catch {
-                    continue;
-                }
-            }
-            else {
-                index = createJsFallbackIndex(dim);
-            }
-            // Insert
-            const insertStart = performance.now();
-            for (const [id, vec] of vectors) {
-                index.insert(id, vec);
-            }
-            const insertTime = performance.now() - insertStart;
-            // Build
-            const buildStart = performance.now();
-            if (typeof index.build === 'function')
-                index.build();
-            const buildTime = performance.now() - buildStart;
-            // Search
-            const searchStart = performance.now();
-            const searchResults = [];
-            for (const q of queries) {
-                const r = index.search(q, k);
-                searchResults.push(r.map((x) => x.id));
-            }
-            const searchTime = performance.now() - searchStart;
-            // Recall vs ground truth
-            let totalRecall = 0;
-            for (let i = 0; i < queryCount; i++) {
-                const truth = new Set(groundTruth[i]);
-                const found = searchResults[i].filter(id => truth.has(id)).length;
-                totalRecall += found / k;
-            }
-            const recall = totalRecall / queryCount;
-            const memAfter = process.memoryUsage().heapUsed;
-            results.push({
-                backend: backendName,
-                dim,
-                vectorCount: n,
-                insertTimeMs: Math.round(insertTime * 100) / 100,
-                buildTimeMs: Math.round(buildTime * 100) / 100,
-                searchTimeMs: Math.round(searchTime * 100) / 100,
-                searchesPerSecond: Math.round(queryCount / (searchTime / 1000)),
-                recall: Math.round(recall * 1000) / 1000,
-                memoryMB: Math.round((memAfter - memBefore) / 1024 / 1024 * 100) / 100,
-            });
-        }
-        catch {
-            // Backend failed, skip
-        }
-    }
-    resetIndex();
-    return results;
-}
-//# sourceMappingURL=diskann-backend.js.map

package/v3/@claude-flow/shared/dist/events/event-store.test.d.ts

@@ -1,8 +0,0 @@
-/**
- * Event Store Tests
- *
- * Comprehensive tests for the event sourcing implementation.
- * Tests event storage, retrieval, filtering, snapshots, and projections.
- */
-export {};
-//# sourceMappingURL=event-store.test.d.ts.map