claude-flow 3.63.8 → 3.64.0

package/.claude-plugin/marketplace.json

@@ -57,10 +57,10 @@
         "source": "git-subdir",
         "url": "https://github.com/proffesor-for-testing/agentic-qe.git",
         "path": "plugins/agentic-qe-fleet",
-        "ref": "v3.15.16",
-        "sha": "4edfa469d8f957b45bc0ea25424eb831b134f129"
+        "ref": "v3.15.17",
+        "sha": "b177b2315521376b83f2eed40e4994fd7581d067"
       },
-      "description": "Agentic QE (external: maintained in proffesor-for-testing/agentic-qe, pinned to v3.15.16): a quality-engineering fleet with 11 QE agents, 9 skills, 9 commands, the agentic-qe MCP server pinned to the plugin version, and the aqe-mod guard that refuses destructive operations on AQE learning data"
+      "description": "Agentic QE (external: maintained in proffesor-for-testing/agentic-qe, pinned to v3.15.17): a quality-engineering fleet with 11 QE agents, 9 skills, 9 commands, the agentic-qe MCP server pinned to the plugin version, and the aqe-mod guard that refuses destructive operations on AQE learning data"
     },
     {
       "name": "ruflo-docs",

package/README.md

@@ -244,7 +244,7 @@ This adds slash commands and agent definitions. `ruflo-core` (installed above) d
 | [**ruflo-browser**](plugins/ruflo-browser/README.md) | Automate browser testing with Playwright |
 | [**ruflo-jujutsu**](plugins/ruflo-jujutsu/README.md) | Analyze git diffs, score risk, suggest reviewers |
 | [**ruflo-docs**](plugins/ruflo-docs/README.md) | Generate and maintain documentation automatically |
-| [**agentic-qe-fleet**](https://github.com/proffesor-for-testing/agentic-qe/tree/v3.15.16/plugins/agentic-qe-fleet) | External, maintained by [Agentic QE](https://github.com/proffesor-for-testing/agentic-qe): 11 QE agents, test generation, coverage, chaos and TDD skills, the `agentic-qe` MCP server, and a guard for AQE learning data (`/plugin install agentic-qe-fleet@ruflo`). Install it from one marketplace only, `agentic-qe` or `ruflo`: enabled from both, its mod and commands load twice |
+| [**agentic-qe-fleet**](https://github.com/proffesor-for-testing/agentic-qe/tree/v3.15.17/plugins/agentic-qe-fleet) | External, maintained by [Agentic QE](https://github.com/proffesor-for-testing/agentic-qe): 11 QE agents, test generation, coverage, chaos and TDD skills, the `agentic-qe` MCP server, and a guard for AQE learning data (`/plugin install agentic-qe-fleet@ruflo`). Install it from one marketplace only, `agentic-qe` or `ruflo`: enabled from both, its mod and commands load twice |
 
 #### Security & Compliance
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-flow",
-  "version": "3.63.8",
+  "version": "3.64.0",
   "workspaces": [
     "v3/@claude-flow/codex",
     "v3/@claude-flow/mcp",

package/v3/@claude-flow/cli/README.md

@@ -244,7 +244,7 @@ This adds slash commands and agent definitions. `ruflo-core` (installed above) d
 | [**ruflo-browser**](plugins/ruflo-browser/README.md) | Automate browser testing with Playwright |
 | [**ruflo-jujutsu**](plugins/ruflo-jujutsu/README.md) | Analyze git diffs, score risk, suggest reviewers |
 | [**ruflo-docs**](plugins/ruflo-docs/README.md) | Generate and maintain documentation automatically |
-| [**agentic-qe-fleet**](https://github.com/proffesor-for-testing/agentic-qe/tree/v3.15.16/plugins/agentic-qe-fleet) | External, maintained by [Agentic QE](https://github.com/proffesor-for-testing/agentic-qe): 11 QE agents, test generation, coverage, chaos and TDD skills, the `agentic-qe` MCP server, and a guard for AQE learning data (`/plugin install agentic-qe-fleet@ruflo`). Install it from one marketplace only, `agentic-qe` or `ruflo`: enabled from both, its mod and commands load twice |
+| [**agentic-qe-fleet**](https://github.com/proffesor-for-testing/agentic-qe/tree/v3.15.17/plugins/agentic-qe-fleet) | External, maintained by [Agentic QE](https://github.com/proffesor-for-testing/agentic-qe): 11 QE agents, test generation, coverage, chaos and TDD skills, the `agentic-qe` MCP server, and a guard for AQE learning data (`/plugin install agentic-qe-fleet@ruflo`). Install it from one marketplace only, `agentic-qe` or `ruflo`: enabled from both, its mod and commands load twice |
 
 #### Security & Compliance
 

package/v3/@claude-flow/cli/catalog-manifest.json

@@ -1,11 +1,11 @@
 {
   "schemaVersion": 1,
   "generation": 7,
-  "generatedAt": "2026-10-28T19:25:21.649Z",
-  "gitSha": "1ec84301",
+  "generatedAt": "2026-10-29T20:56:47.419Z",
+  "gitSha": "00c0f743",
   "catalog": {
     "agents": 177,
-    "tools": 444,
+    "tools": 445,
     "skills": 34
   },
   "benchmark": null

package/v3/@claude-flow/cli/dist/src/commands/doctor.js

@@ -2322,6 +2322,11 @@ async function checkMods() {
         ? { name: 'ruflo mods (ADR-404)', status: 'pass', message: findings.find((f) => f.name === 'last mod start')?.message ?? 'enabled' }
         : { name: 'ruflo mods (ADR-404)', status: 'warn', message: warnings.map((f) => `${f.name}: ${f.message}`).join('; '), fix: 'ruflo mods doctor' };
 }
+// #4581 / ADR-502: ruflo-mods learning loop — is it recording, and do its verified outcomes reach SONA? Warn-only.
+async function checkLearningLoop() {
+    const { learningLoopHealth } = await import('../memory/verified-outcomes.js');
+    return { name: 'Learning loop (#4581)', ...learningLoopHealth(process.cwd()) };
+}
 // Opt-in @ruvector/typesafe task router (optional peer). `--component typesafe` only.
 async function checkTypesafeRouter() {
     const name = '@ruvector/typesafe router';
@@ -2653,6 +2658,7 @@ export const doctorCommand = {
             'auth': checkAuth, // ADR-306
             'typesafe': checkTypesafeRouter, // opt-in @ruvector/typesafe task router
             'mods': checkMods, // ADR-404 — ruflo as a Claude Code mod
+            'learning-loop': checkLearningLoop, // #4581 — verified-outcome learning loop
         };
         if (component !== undefined && !Object.hasOwn(componentMap, component)) {
             const message = `Unknown doctor component: ${JSON.stringify(component)}. Valid components: ${Object.keys(componentMap).join(', ')}`;
@@ -2765,6 +2771,7 @@ export const doctorCommand = {
             checkProxySponsoredConsent, // ADR-313 — Meta LLM Proxy sponsored-downtime health
             checkAuth, // ADR-306 — Cognitum identity (warn-only; never fails bare `ruflo doctor`)
             checkMods, // ADR-404 — Claude Code mod path (warn-only)
+            checkLearningLoop, // #4581 — verified outcomes reach SONA (warn-only)
         ];
         let checksToRun = allChecks;
         if (component !== undefined) {
@@ -2800,6 +2807,7 @@ export const doctorCommand = {
             [checkProxyBinary, 'proxy-binary'], [checkProxyProcess, 'proxy-process'],
             [checkProxyBindAddress, 'proxy-bind'], [checkAuth, 'auth'],
             [checkTypesafeRouter, 'typesafe'], [checkMods, 'mods'],
+            [checkLearningLoop, 'learning-loop'],
         ]);
         nativeAgentDbChecks.forEach((check, index) => {
             // The path distinguishes simultaneous authority files; normalize separators.

package/v3/@claude-flow/cli/dist/src/commands/hooks.js

@@ -4649,6 +4649,43 @@ const refreshAdvisorCommand = {
         }
     }
 };
+// #4581 / ADR-502: fold the ruflo-mods learning loop's verified outcomes into SONA.
+const verifiedIngestCommand = {
+    name: 'verified-ingest',
+    description: 'Train SONA from the learning loop\'s verified turns (tests/build exit status); unverified turns never train',
+    options: [
+        { name: 'dry-run', description: 'Count only: train nothing and write nothing', type: 'boolean', default: false },
+        { name: 'force', description: 'Re-read the file even if unchanged since the last ingest', type: 'boolean', default: false },
+    ],
+    examples: [
+        { command: 'ruflo hooks verified-ingest', description: 'Ingest new verified outcomes and refresh learned-lessons.json' },
+        { command: 'ruflo hooks verified-ingest --dry-run', description: 'Show what would be trained' },
+    ],
+    action: async (ctx) => {
+        try {
+            const result = await callMCPTool('hooks_intelligence_verified-ingest', { dryRun: ctx.flags['dry-run'] === true || ctx.flags.dryRun === true, force: ctx.flags.force === true });
+            if (ctx.flags.format === 'json') {
+                output.printJson(result);
+                return { success: true, data: result };
+            }
+            if (result.skipped === 'no-file') {
+                output.printInfo('No recorded turns yet (.claude-flow/data/verified-trajectories.jsonl). Turn on the ruflo-mods learningLoop option.');
+                return { success: true, data: result };
+            }
+            if (!result.sonaAvailable)
+                output.printWarning('SONA unavailable: verified outcomes wait for the next ingest');
+            const i = result.ingested;
+            output.printSuccess(`Ingested ${i.verifiedSuccess} verified success, ${i.verifiedFailure} verified failure; ${i.unknown} unverified (not trained), ${i.rejected} malformed${result.skipped === 'unchanged' ? ' (file unchanged)' : ''}`);
+            output.writeln(`Lessons at or above the 0.6 gate: ${result.lessons}; cautions: ${result.cautions}; verified patterns below the gate: ${result.belowGate}`);
+            output.writeln(output.dim(`All time: ${result.totals.verifiedSuccess} success / ${result.totals.verifiedFailure} failure trained, ${result.totals.unknown} unverified`));
+            return { success: true, data: result };
+        }
+        catch (error) {
+            output.printError(`verified-ingest failed: ${error instanceof Error ? error.message : String(error)}`);
+            return { success: false, exitCode: 1 };
+        }
+    },
+};
 // Main hooks command
 export const hooksCommand = {
     name: 'hooks',
@@ -4696,6 +4733,8 @@ export const hooksCommand = {
         refreshFunnelCommand,
         // Advisor co-pilot tip background refresh — ADR-316
         refreshAdvisorCommand,
+        // Verified-outcome learning loop — #4581
+        verifiedIngestCommand,
     ],
     options: [],
     examples: [

package/v3/@claude-flow/cli/dist/src/commands/migrate.js

@@ -207,7 +207,7 @@ const runCommand = {
     ],
     action: async (ctx) => {
         const cwd = ctx.cwd || process.cwd();
-        const dryRun = ctx.flags['dry-run'] === true;
+        const dryRun = ctx.flags.dryRun === true || ctx.flags['dry-run'] === true;
         const skipBackup = ctx.flags.backup === false;
         const timestamp = new Date().toISOString().replace(/[:.]/g, '-');
         const v3Dir = path.join(cwd, '.claude-flow');
@@ -747,7 +747,7 @@ const fixCommand = {
             output.printSuccess('No removed-agent gaps to fix — every agent is present or covered by an installed plugin.');
             return { success: true, data: { results: [] } };
         }
-        const dryRun = Boolean(ctx.flags['dry-run']);
+        const dryRun = ctx.flags.dryRun === true || ctx.flags['dry-run'] === true;
         const results = await restoreRemovedAgents(cwd, gaps, { dryRun });
         if (ctx.flags.format === 'json') {
             output.printJson({ dryRun, results });

package/v3/@claude-flow/cli/dist/src/mcp-tools/github-tools.d.ts

@@ -5,5 +5,11 @@
  * Falls back to local state management when CLI tools are unavailable.
  */
 import { type MCPTool } from './types.js';
+/**
+ * Drop userinfo from a URL-form remote (`https://user:token@host/o/r`) so a
+ * credential embedded in the origin URL never reaches tool output. scp-form
+ * remotes (`git@host:o/r`) carry no secret and are returned unchanged.
+ */
+export declare function redactRemoteUrl(url: string): string;
 export declare const githubTools: MCPTool[];
 //# sourceMappingURL=github-tools.d.ts.map

package/v3/@claude-flow/cli/dist/src/mcp-tools/github-tools.js

@@ -114,6 +114,14 @@ function sanitizeLabels(value) {
     }
     return out;
 }
+/**
+ * Drop userinfo from a URL-form remote (`https://user:token@host/o/r`) so a
+ * credential embedded in the origin URL never reaches tool output. scp-form
+ * remotes (`git@host:o/r`) carry no secret and are returned unchanged.
+ */
+export function redactRemoteUrl(url) {
+    return url.replace(/^([a-z][a-z0-9+.-]*:\/\/)[^/]*@/i, '$1');
+}
 /** Check if gh CLI is available */
 function hasGhCli() {
     return run('gh --version') !== null;
@@ -161,7 +169,7 @@ export const githubTools = [
             let owner = input.owner || '';
             let repo = input.repo || '';
             if (remoteUrl && (!owner || !repo)) {
-                const m = remoteUrl.match(/[:/]([^/]+)\/([^/.]+?)(?:\.git)?$/);
+                const m = remoteUrl.match(/[:/]([^/]+)\/([^/]+?)(?:\.git)?$/);
                 if (m) {
                     owner = owner || m[1];
                     repo = repo || m[2];
@@ -200,7 +208,7 @@ export const githubTools = [
                     repository: repoKey,
                     branch: repoInfo.branch,
                     metrics: repoInfo.metrics,
-                    remoteUrl: remoteUrl || null,
+                    remoteUrl: remoteUrl ? redactRemoteUrl(remoteUrl) : null,
                     lastAnalyzed: repoInfo.lastAnalyzed,
                 };
             }

package/v3/@claude-flow/cli/dist/src/mcp-tools/hooks-tools.d.ts

@@ -105,6 +105,7 @@ export declare const hooksTaskCompleted: MCPTool;
  * names its store and a `consistency` block flags relationships that drift.
  */
 export declare const hooksIntelligenceUnifiedStats: MCPTool;
+export declare const hooksVerifiedIngest: MCPTool;
 export declare const hooksTools: MCPTool[];
 export default hooksTools;
 //# sourceMappingURL=hooks-tools.d.ts.map

package/v3/@claude-flow/cli/dist/src/mcp-tools/hooks-tools.js

@@ -1181,6 +1181,9 @@ export const hooksRoute = {
             // Q-learning and keyword suggestions retain their existing routing paths.
             try {
                 const sonaStart = performance.now();
+                // #4581: fold in any verified outcomes the ruflo-mods learning loop
+                // recorded since the last call (one stat when nothing changed).
+                await ingestVerifiedQuietly();
                 const sona = await getSONAOptimizer();
                 const suggestion = await sona?.getRoutingSuggestion(task);
                 const { isSupportedSonaAgent } = await import('../memory/sona-optimizer.js');
@@ -2639,9 +2642,11 @@ export const hooksSessionEnd = {
                 }
             }
         }
+        const verifiedOutcomes = await ingestVerifiedQuietly();
         return {
             sessionId,
             duration,
+            verifiedOutcomes,
             statePath: saveState ? `.claude/sessions/${sessionId}.json` : undefined,
             daemon: { stopped: daemonStopped },
             sessionPersistence: sessionPersistence || { controller: 'none', persisted: false },
@@ -4879,6 +4884,12 @@ export const hooksWorkerDetect = {
                         progress: 0,
                         phase: 'initializing',
                         startedAt: new Date(),
+                        // hooks_worker-detect has no executor. Unlike its sibling
+                        // hooks_worker-dispatch, it used to silently fabricate a
+                        // completed worker after 1.5s. Mark the record and response so
+                        // callers cannot treat it as real analysis (#4549 automation scan).
+                        synthetic: true,
+                        note: 'No executor ran: hooks_worker-detect only records a synthetic worker. Use hooks_worker-dispatch with the daemon for real work.',
                     });
                     dispatched.push(workerId);
                     // Mark worker completion after processing
@@ -4886,13 +4897,15 @@ export const hooksWorkerDetect = {
                         const w = activeWorkers.get(workerId);
                         if (w) {
                             w.progress = 100;
-                            w.phase = 'completed';
+                            w.phase = 'synthetic-completed';
                             w.status = 'completed';
                             w.completedAt = new Date();
                         }
                     }, 1500);
                 }
                 result.autoDispatched = true;
+                result.autoDispatchStatus = 'synthetic-completed';
+                result.note = 'No executor ran: these worker records are synthetic placeholders. Use hooks_worker-dispatch with the daemon for real work.';
                 result.workerIds = dispatched;
             }
         }
@@ -5442,6 +5455,37 @@ export const hooksIntelligenceUnifiedStats = {
         return intel.getUnifiedLearningStats();
     },
 };
+/**
+ * #4581 / ADR-502: ingest the ruflo-mods learning loop's verified outcomes.
+ * Never throws; null when the module or SONA is unavailable.
+ */
+async function ingestVerifiedQuietly(force = false) {
+    try {
+        const { ingestVerifiedOutcomes } = await import('../memory/verified-outcomes.js');
+        const sona = await getSONAOptimizer();
+        return await ingestVerifiedOutcomes({ force, sona: sona });
+    }
+    catch {
+        return null;
+    }
+}
+export const hooksVerifiedIngest = {
+    name: 'hooks_intelligence_verified-ingest',
+    description: 'Ingest the ruflo-mods learning loop\'s recorded turns (.claude-flow/data/verified-trajectories.jsonl, #4581): turns a test, build or typecheck process verified train SONA; unverified turns are counted and never train. Writes .claude-flow/data/learned-lessons.json (patterns at or above the 0.6 routing gate, plus repeated verified failures as cautions). hooks_route and hooks_session-end already ingest automatically; call this to see the counts or to force a re-read. Use when native Bash hooks (via Claude Code\'s settings.json) are wrong because the outcome must reach Ruflo-side state — SONA pattern persistence and routing — and must be gated on a verifier\'s exit status rather than recorded unconditionally.',
+    inputSchema: {
+        type: 'object',
+        properties: {
+            dryRun: { type: 'boolean', description: 'Count only: train nothing and write nothing' },
+            force: { type: 'boolean', description: 'Re-read the file even if it has not changed since the last ingest' },
+        },
+    },
+    handler: async (params) => {
+        const { ingestVerifiedOutcomes } = await import('../memory/verified-outcomes.js');
+        const sona = await getSONAOptimizer();
+        const result = await ingestVerifiedOutcomes({ dryRun: params.dryRun === true, force: params.force === true || params.dryRun === true, sona: sona });
+        return { success: true, ...result };
+    },
+};
 // Export all hooks tools
 export const hooksTools = [
     hooksIntelligenceUnifiedStats,
@@ -5471,6 +5515,7 @@ export const hooksTools = [
     hooksTrajectoryStart,
     hooksTrajectoryStep,
     hooksTrajectoryEnd,
+    hooksVerifiedIngest,
     hooksPatternStore,
     hooksPatternSearch,
     hooksIntelligenceStats,

package/v3/@claude-flow/cli/dist/src/memory/verified-outcomes.d.ts

@@ -0,0 +1,163 @@
+/**
+ * Verified-outcome learning loop, CLI half (#4581, ADR-502).
+ *
+ * The ruflo-mods `learningLoop` option records one trajectory per main-loop
+ * turn in `.claude-flow/data/verified-trajectories.jsonl`. A mod may not run
+ * processes or call MCP tools, so it can only observe: a turn is
+ * `verified-success` or `verified-failure` when a recognised test, build or
+ * typecheck command ran after the turn's last edit and its process exit
+ * status said so; anything else is `unknown`.
+ *
+ * This module is the only place those records reach SONA:
+ *  - `verified-*` records train SONA (`processTrajectoryOutcome`);
+ *  - `unknown` records are counted and never train;
+ *  - each record is ingested once (an id ledger, never a rewrite of the
+ *    mod's file, which the mod appends to concurrently);
+ *  - task text is PII-redacted before it reaches SONA's keyword store.
+ *
+ * It then writes `.claude-flow/data/learned-lessons.json`: patterns that
+ * verified outcomes produced, those at or above the SONA routing gate as
+ * lessons, and repeated verified failures as cautions. The mod reads that
+ * file and adds at most three cited lessons to a prompt.
+ */
+export declare const VERIFIED_PATH: string;
+export declare const LEDGER_PATH: string;
+export declare const LESSONS_PATH: string;
+/** The SONA routing gate (sona-optimizer.ts `SONA_ROUTING_GATE`); a lesson below it never influences routing. */
+export declare const LESSON_GATE = 0.6;
+/** Ingested ids remembered; the mod keeps at most 500 lines, so this always covers the whole file. */
+export declare const MAX_LEDGER_IDS = 2000;
+/** A file past this many bytes is not read (the mod caps its own at far less). */
+export declare const MAX_FILE_BYTES: number;
+export declare const MAX_LESSONS = 20;
+/** Verified failures (and more failures than successes) before a pattern becomes a caution. */
+export declare const CAUTION_MIN_FAILURES = 2;
+export type Outcome = 'verified-success' | 'verified-failure' | 'unknown';
+export type VerifierKind = 'test' | 'build' | 'typecheck' | 'lint';
+export interface VerifiedRecord {
+    readonly id: string;
+    readonly task: string;
+    readonly agent: string;
+    readonly outcome: Outcome;
+    readonly verifier: {
+        readonly kind: VerifierKind;
+        readonly command: string;
+        readonly passed: boolean;
+    } | null;
+    readonly steps: ReadonlyArray<{
+        readonly tool: string;
+        readonly ok: boolean;
+    }>;
+    readonly edits: number;
+    readonly startedAt: number;
+    readonly endedAt: number;
+}
+export interface IngestLedger {
+    version: 1;
+    ids: string[];
+    /** mtime of the jsonl at the last ingest, so a caller can skip an unchanged file cheaply. */
+    lastMtimeMs: number;
+    totals: {
+        verifiedSuccess: number;
+        verifiedFailure: number;
+        unknown: number;
+        rejected: number;
+    };
+    /** Pattern keys verified outcomes trained, with the last verifier command that decided them (the lesson's evidence). */
+    patterns: Record<string, {
+        evidence: string;
+        at: number;
+    }>;
+}
+export interface Lesson {
+    readonly id: string;
+    readonly kind: 'lesson' | 'caution';
+    readonly agent: string;
+    readonly keywords: string[];
+    readonly confidence: number;
+    readonly successes: number;
+    readonly failures: number;
+    readonly evidence: string;
+}
+export interface LessonsFile {
+    version: 1;
+    gate: number;
+    generatedAt: number;
+    lessons: Lesson[];
+    /** Verified patterns still below the gate, for the cold-start progress line. */
+    belowGate: number;
+}
+export interface IngestResult {
+    ingested: {
+        verifiedSuccess: number;
+        verifiedFailure: number;
+        unknown: number;
+        rejected: number;
+    };
+    trained: number;
+    skipped: 'no-file' | 'unchanged' | 'too-large' | null;
+    lessons: number;
+    cautions: number;
+    belowGate: number;
+    totals: IngestLedger['totals'];
+    sonaAvailable: boolean;
+}
+/** The SONA surface ingest needs; injectable so tests never touch `.swarm/`. */
+export interface SonaLike {
+    processTrajectoryOutcome(outcome: {
+        trajectoryId: string;
+        task: string;
+        agent: string;
+        success: boolean;
+        steps?: Array<{
+            action: string;
+            result: string;
+            quality: number;
+            timestamp: string;
+        }>;
+        duration?: number;
+        feedback?: string;
+    }): {
+        learned: boolean;
+        patternKey: string;
+        confidence: number;
+    };
+    exportPatterns(): Record<string, {
+        keywords: string[];
+        agent: string;
+        confidence: number;
+        successCount: number;
+        failureCount: number;
+    }>;
+}
+/** One line of the mod's file, validated; anything malformed is null. Unknown fields never survive. */
+export declare function parseRecord(line: string): VerifiedRecord | null;
+export declare function emptyLedger(): IngestLedger;
+/** A ledger file read back; a corrupt or hostile one starts over (re-ingest is bounded by the mod's 500-line cap). */
+export declare function readLedger(raw: string | null): IngestLedger;
+/** A lesson's citation: a short hash of the SONA pattern key, so the key's own text never reaches a prompt. */
+export declare const lessonId: (patternKey: string) => string;
+/** Builds the lessons file from SONA's patterns, keeping only the ones verified outcomes trained. */
+export declare function buildLessons(patterns: ReturnType<SonaLike['exportPatterns']>, verified: IngestLedger['patterns'], now: number): LessonsFile;
+export interface IngestOptions {
+    /** Project root; defaults to process.cwd(), where SONA keeps `.swarm/`. */
+    root?: string;
+    /** Ingest even when the file's mtime matches the last ingest. */
+    force?: boolean;
+    /** Count only: train nothing and write nothing. */
+    dryRun?: boolean;
+    /** SONA to train; defaults to the process's optimizer. Null means unavailable. */
+    sona?: SonaLike | null;
+    now?: number;
+}
+export declare function ingestVerifiedOutcomes(options?: IngestOptions): Promise<IngestResult>;
+/**
+ * The doctor's view: whether the loop is recording and whether its records
+ * reach SONA. Read-only.
+ */
+export declare function learningLoopHealth(root?: string): {
+    status: 'pass' | 'warn';
+    message: string;
+    fix?: string;
+};
+//# sourceMappingURL=verified-outcomes.d.ts.map

package/v3/@claude-flow/cli/dist/src/memory/verified-outcomes.js

@@ -0,0 +1,303 @@
+/**
+ * Verified-outcome learning loop, CLI half (#4581, ADR-502).
+ *
+ * The ruflo-mods `learningLoop` option records one trajectory per main-loop
+ * turn in `.claude-flow/data/verified-trajectories.jsonl`. A mod may not run
+ * processes or call MCP tools, so it can only observe: a turn is
+ * `verified-success` or `verified-failure` when a recognised test, build or
+ * typecheck command ran after the turn's last edit and its process exit
+ * status said so; anything else is `unknown`.
+ *
+ * This module is the only place those records reach SONA:
+ *  - `verified-*` records train SONA (`processTrajectoryOutcome`);
+ *  - `unknown` records are counted and never train;
+ *  - each record is ingested once (an id ledger, never a rewrite of the
+ *    mod's file, which the mod appends to concurrently);
+ *  - task text is PII-redacted before it reaches SONA's keyword store.
+ *
+ * It then writes `.claude-flow/data/learned-lessons.json`: patterns that
+ * verified outcomes produced, those at or above the SONA routing gate as
+ * lessons, and repeated verified failures as cautions. The mod reads that
+ * file and adds at most three cited lessons to a prompt.
+ */
+import { createHash } from 'node:crypto';
+import { existsSync, mkdirSync, readFileSync, renameSync, statSync, writeFileSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+export const VERIFIED_PATH = join('.claude-flow', 'data', 'verified-trajectories.jsonl');
+export const LEDGER_PATH = join('.claude-flow', 'data', 'verified-ingest.json');
+export const LESSONS_PATH = join('.claude-flow', 'data', 'learned-lessons.json');
+/** The SONA routing gate (sona-optimizer.ts `SONA_ROUTING_GATE`); a lesson below it never influences routing. */
+export const LESSON_GATE = 0.6;
+/** Ingested ids remembered; the mod keeps at most 500 lines, so this always covers the whole file. */
+export const MAX_LEDGER_IDS = 2000;
+/** A file past this many bytes is not read (the mod caps its own at far less). */
+export const MAX_FILE_BYTES = 2 * 1024 * 1024;
+export const MAX_LESSONS = 20;
+/** Verified failures (and more failures than successes) before a pattern becomes a caution. */
+export const CAUTION_MIN_FAILURES = 2;
+const OUTCOMES = ['verified-success', 'verified-failure', 'unknown'];
+const KINDS = ['test', 'build', 'typecheck', 'lint'];
+const ID = /^vt-[A-Za-z0-9_-]{1,80}$/;
+const AGENT = /^[a-z][a-z0-9-]{0,40}$/;
+const TOOL = /^[A-Za-z0-9_.:-]{1,80}$/;
+/** SONA's agent roles (sona-optimizer.ts AGENT_TYPES); a route agent outside them trains as `coder`. */
+const SONA_AGENTS = new Set(['coder', 'tester', 'reviewer', 'architect', 'researcher', 'optimizer', 'debugger', 'documenter', 'security-architect', 'performance-engineer']);
+const num = (v, max = Number.MAX_SAFE_INTEGER) => (typeof v === 'number' && Number.isFinite(v) && v >= 0 ? Math.min(Math.floor(v), max) : 0);
+const text = (v, max) => (typeof v === 'string' ? v.replace(/[\u0000-\u001f\u007f]/g, ' ').trim().slice(0, max) : '');
+/** One line of the mod's file, validated; anything malformed is null. Unknown fields never survive. */
+export function parseRecord(line) {
+    let raw;
+    try {
+        raw = JSON.parse(line);
+    }
+    catch {
+        return null;
+    }
+    if (!raw || typeof raw !== 'object' || Array.isArray(raw))
+        return null;
+    const r = raw;
+    if (r.v !== 1 || typeof r.id !== 'string' || !ID.test(r.id))
+        return null;
+    if (!OUTCOMES.includes(r.outcome))
+        return null;
+    const agent = typeof r.agent === 'string' && AGENT.test(r.agent) ? r.agent : 'coder';
+    const task = text(r.task, 300);
+    if (!task)
+        return null;
+    let verifier = null;
+    if (r.verifier && typeof r.verifier === 'object') {
+        const v = r.verifier;
+        if (KINDS.includes(v.kind) && typeof v.passed === 'boolean') {
+            verifier = { kind: v.kind, command: text(v.command, 80), passed: v.passed };
+        }
+    }
+    // A verified outcome must carry the verifier that decided it, and agree with it.
+    const outcome = r.outcome;
+    if (outcome !== 'unknown' && (!verifier || verifier.passed !== (outcome === 'verified-success')))
+        return null;
+    const steps = Array.isArray(r.steps)
+        ? r.steps
+            .slice(0, 64)
+            .filter((s) => !!s && typeof s === 'object' && typeof s.tool === 'string' && TOOL.test(s.tool))
+            .map(s => ({ tool: s.tool, ok: s.ok === true }))
+        : [];
+    return { id: r.id, task, agent, outcome, verifier, steps, edits: num(r.edits, 10_000), startedAt: num(r.startedAt), endedAt: num(r.endedAt) };
+}
+export function emptyLedger() {
+    return { version: 1, ids: [], lastMtimeMs: 0, totals: { verifiedSuccess: 0, verifiedFailure: 0, unknown: 0, rejected: 0 }, patterns: {} };
+}
+/** A ledger file read back; a corrupt or hostile one starts over (re-ingest is bounded by the mod's 500-line cap). */
+export function readLedger(raw) {
+    if (!raw)
+        return emptyLedger();
+    try {
+        const j = JSON.parse(raw);
+        if (!j || j.version !== 1 || !Array.isArray(j.ids))
+            return emptyLedger();
+        const t = (j.totals ?? {});
+        const patterns = {};
+        for (const [k, v] of Object.entries(j.patterns && typeof j.patterns === 'object' ? j.patterns : {})) {
+            if (k === '__proto__' || typeof k !== 'string' || k.length > 400 || !v || typeof v !== 'object')
+                continue;
+            patterns[k] = { evidence: text(v.evidence, 80), at: num(v.at) };
+        }
+        return {
+            version: 1,
+            ids: j.ids.filter((id) => typeof id === 'string' && ID.test(id)).slice(-MAX_LEDGER_IDS),
+            lastMtimeMs: num(j.lastMtimeMs),
+            totals: { verifiedSuccess: num(t.verifiedSuccess), verifiedFailure: num(t.verifiedFailure), unknown: num(t.unknown), rejected: num(t.rejected) },
+            patterns,
+        };
+    }
+    catch {
+        return emptyLedger();
+    }
+}
+/** Redacts PII from task text before it reaches SONA's keyword store; never throws. */
+async function redact(task) {
+    try {
+        const { detectPII, redactPII } = await import('../transfer/anonymization/index.js');
+        return detectPII(task).found ? redactPII(task) : task;
+    }
+    catch {
+        return task;
+    }
+}
+/** Keywords a lesson may show: SONA keeps any non-separator text, the prompt gets only plain words. */
+const SAFE_KEYWORD = /^[a-z0-9][a-z0-9 _./-]{0,40}$/;
+/** A lesson's citation: a short hash of the SONA pattern key, so the key's own text never reaches a prompt. */
+export const lessonId = (patternKey) => `L-${createHash('sha256').update(patternKey).digest('hex').slice(0, 10)}`;
+/** Builds the lessons file from SONA's patterns, keeping only the ones verified outcomes trained. */
+export function buildLessons(patterns, verified, now) {
+    const lessons = [];
+    let belowGate = 0;
+    for (const [id, p] of Object.entries(patterns)) {
+        const v = verified[id];
+        if (!v || !p || !Array.isArray(p.keywords))
+            continue;
+        const keywords = p.keywords.filter(k => typeof k === 'string' && SAFE_KEYWORD.test(k)).slice(0, 10);
+        if (keywords.length === 0 || !AGENT.test(p.agent))
+            continue;
+        const base = { id: lessonId(id), agent: p.agent, keywords, confidence: Math.round(p.confidence * 1000) / 1000, successes: p.successCount, failures: p.failureCount, evidence: v.evidence };
+        if (p.failureCount >= CAUTION_MIN_FAILURES && p.failureCount > p.successCount)
+            lessons.push({ ...base, kind: 'caution' });
+        else if (p.confidence >= LESSON_GATE)
+            lessons.push({ ...base, kind: 'lesson' });
+        else
+            belowGate++;
+    }
+    lessons.sort((a, b) => b.confidence - a.confidence || b.successes + b.failures - (a.successes + a.failures));
+    return { version: 1, gate: LESSON_GATE, generatedAt: now, lessons: lessons.slice(0, MAX_LESSONS), belowGate };
+}
+function writeAtomic(path, body) {
+    mkdirSync(dirname(path), { recursive: true });
+    const tmp = `${path}.${process.pid}.tmp`;
+    writeFileSync(tmp, body);
+    renameSync(tmp, path);
+}
+/**
+ * Ingests every not-yet-ingested record. Verified records train SONA; unknown
+ * ones are counted. Safe to call often: an unchanged file is one stat.
+ */
+/** Per-root mtime of the last completed ingest in this process, so a hot caller (hooks_route) skips the ledger read too. */
+const lastIngested = new Map();
+export async function ingestVerifiedOutcomes(options = {}) {
+    const root = options.root ?? process.cwd();
+    const now = options.now ?? Date.now();
+    const file = join(root, VERIFIED_PATH);
+    if (!options.force && !options.dryRun && options.sona !== null) {
+        try {
+            const memo = lastIngested.get(root);
+            if (memo && memo.mtimeMs === statSync(file).mtimeMs) {
+                return { ingested: { verifiedSuccess: 0, verifiedFailure: 0, unknown: 0, rejected: 0 }, trained: 0, skipped: 'unchanged', lessons: 0, cautions: 0, belowGate: 0, totals: { ...memo.totals }, sonaAvailable: true };
+            }
+        }
+        catch {
+            // no file: the full path below reports it
+        }
+    }
+    const ledgerPath = join(root, LEDGER_PATH);
+    const ledger = readLedger(existsSync(ledgerPath) ? readFileSync(ledgerPath, 'utf8') : null);
+    const ingested = { verifiedSuccess: 0, verifiedFailure: 0, unknown: 0, rejected: 0 };
+    const done = (skipped, sonaAvailable, lessons) => ({
+        ingested,
+        trained: ingested.verifiedSuccess + ingested.verifiedFailure,
+        skipped,
+        lessons: lessons?.lessons.filter(l => l.kind === 'lesson').length ?? 0,
+        cautions: lessons?.lessons.filter(l => l.kind === 'caution').length ?? 0,
+        belowGate: lessons?.belowGate ?? 0,
+        totals: ledger.totals,
+        sonaAvailable,
+    });
+    if (!existsSync(file))
+        return done('no-file', options.sona !== null);
+    const st = statSync(file);
+    if (st.size > MAX_FILE_BYTES)
+        return done('too-large', options.sona !== null);
+    if (!options.force && st.mtimeMs === ledger.lastMtimeMs)
+        return done('unchanged', options.sona !== null);
+    let sona = options.sona;
+    if (sona === undefined) {
+        try {
+            const { getSONAOptimizer } = await import('./sona-optimizer.js');
+            sona = (await getSONAOptimizer());
+        }
+        catch {
+            sona = null;
+        }
+    }
+    const seen = new Set(ledger.ids);
+    for (const line of readFileSync(file, 'utf8').split('\n')) {
+        if (!line.trim())
+            continue;
+        const record = parseRecord(line);
+        if (!record) {
+            ingested.rejected++;
+            continue;
+        }
+        if (seen.has(record.id))
+            continue;
+        // Without SONA nothing verified can train yet: leave it un-ingested for the next call.
+        if (record.outcome !== 'unknown' && !sona)
+            continue;
+        seen.add(record.id);
+        ledger.ids.push(record.id);
+        if (record.outcome === 'unknown') {
+            ingested.unknown++;
+            continue;
+        }
+        if (options.dryRun) {
+            if (record.outcome === 'verified-success')
+                ingested.verifiedSuccess++;
+            else
+                ingested.verifiedFailure++;
+            continue;
+        }
+        const success = record.outcome === 'verified-success';
+        const result = sona.processTrajectoryOutcome({
+            trajectoryId: record.id,
+            task: await redact(record.task),
+            agent: SONA_AGENTS.has(record.agent) ? record.agent : 'coder',
+            success,
+            steps: record.steps.map(s => ({ action: s.tool, result: s.ok ? 'ok' : 'error', quality: s.ok ? 1 : 0, timestamp: new Date(record.endedAt || now).toISOString() })),
+            duration: record.endedAt > record.startedAt ? record.endedAt - record.startedAt : 0,
+            feedback: `verified by ${record.verifier.kind}: ${record.verifier.command}`,
+        });
+        if (result.learned && result.patternKey)
+            ledger.patterns[result.patternKey] = { evidence: record.verifier.command, at: now };
+        if (success)
+            ingested.verifiedSuccess++;
+        else
+            ingested.verifiedFailure++;
+    }
+    if (options.dryRun)
+        return done(null, !!sona);
+    ledger.ids = ledger.ids.slice(-MAX_LEDGER_IDS);
+    // Without SONA, verified records stayed un-ingested: keep the mtime stale so the next call retries them.
+    if (sona) {
+        ledger.lastMtimeMs = st.mtimeMs;
+        lastIngested.set(root, { mtimeMs: st.mtimeMs, totals: { ...ledger.totals } });
+    }
+    for (const k of Object.keys(ingested))
+        ledger.totals[k] += ingested[k];
+    // Keep the verified-pattern map bounded to what SONA still holds.
+    const patterns = sona ? sona.exportPatterns() : {};
+    if (sona)
+        for (const k of Object.keys(ledger.patterns))
+            if (!patterns[k])
+                delete ledger.patterns[k];
+    writeAtomic(ledgerPath, JSON.stringify(ledger));
+    const lessons = sona ? buildLessons(patterns, ledger.patterns, now) : undefined;
+    if (lessons)
+        writeAtomic(join(root, LESSONS_PATH), JSON.stringify(lessons, null, 2));
+    return done(null, !!sona, lessons);
+}
+/**
+ * The doctor's view: whether the loop is recording and whether its records
+ * reach SONA. Read-only.
+ */
+export function learningLoopHealth(root = process.cwd()) {
+    const file = join(root, VERIFIED_PATH);
+    if (!existsSync(file))
+        return { status: 'pass', message: 'not recording (ruflo-mods learningLoop option off or no turn yet)' };
+    let lines = [];
+    try {
+        if (statSync(file).size <= MAX_FILE_BYTES)
+            lines = readFileSync(file, 'utf8').split('\n').filter(l => l.trim());
+    }
+    catch {
+        return { status: 'warn', message: 'verified-trajectories.jsonl unreadable' };
+    }
+    const ledgerPath = join(root, LEDGER_PATH);
+    const ledger = readLedger(existsSync(ledgerPath) ? readFileSync(ledgerPath, 'utf8') : null);
+    const seen = new Set(ledger.ids);
+    const records = lines.map(parseRecord).filter((r) => r !== null);
+    const waiting = records.filter(r => !seen.has(r.id) && r.outcome !== 'unknown').length;
+    const verified = records.filter(r => r.outcome !== 'unknown').length;
+    const summary = `${records.length} turn(s) recorded, ${verified} verified; trained so far ${ledger.totals.verifiedSuccess} success / ${ledger.totals.verifiedFailure} failure, ${ledger.totals.unknown} unknown (never trained)`;
+    if (waiting > 0) {
+        return { status: 'warn', message: `${summary}; ${waiting} verified outcome(s) not yet ingested`, fix: 'ruflo hooks verified-ingest (or any hooks_route / hooks_session-end call ingests them)' };
+    }
+    return { status: 'pass', message: summary };
+}
+//# sourceMappingURL=verified-outcomes.js.map

package/v3/@claude-flow/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@claude-flow/cli",
-  "version": "3.63.8",
+  "version": "3.64.0",
   "type": "module",
   "description": "Ruflo CLI - Enterprise AI agent orchestration with 60+ specialized agents, swarm coordination, MCP server, self-learning hooks, and vector memory for Claude Code",
   "main": "dist/src/index.js",

package/.claude/.proven-config-version

@@ -1 +0,0 @@
-sha256:6141a8ea990c5063b77e090ae8f37f9c539d8aa8f58dcceb30f3a82f97e57319

package/.claude/proven-config.json

@@ -1,42 +0,0 @@
-{
-  "adoptedAt": 1793206001070,
-  "championId": "sha256:6141a8ea990c5063b77e090ae8f37f9c539d8aa8f58dcceb30f3a82f97e57319",
-  "manifest": {
-    "schema": "ruflo.proven-config/v1",
-    "policy": {
-      "ref": "sha256:6141a8ea990c5063b77e090ae8f37f9c539d8aa8f58dcceb30f3a82f97e57319",
-      "value": {
-        "alpha": 0.3,
-        "subjectWeight": 1,
-        "mmrLambda": 0.5,
-        "bodyWeight": 1.5,
-        "typePenaltyFactor": 0.5
-      }
-    },
-    "layer": "framework/node-cli",
-    "compatibility": {
-      "ruflo": ">=3.24.0"
-    },
-    "benchmark": {
-      "corpus": "ADR-081-labelled-v1",
-      "corpusHash": "sha256:2f700b5c363e20a3bd88ce2bc9b87bbbbaa61732c6177894c6ec37890f888982"
-    },
-    "receipt": {
-      "heldOutDelta": 0.07381404928570845,
-      "redblue": "PASS",
-      "drift": 0,
-      "canary": {
-        "rollbackRate": 0,
-        "latencyP95": 244.612458000076,
-        "costPerTask": 0
-      },
-      "receiptCoverage": 1
-    },
-    "platform": [
-      "linux",
-      "macOS",
-      "windows"
-    ]
-  },
-  "previous": ""
-}