moflo 4.8.21 → 4.8.22

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (260) hide show
  1. package/.claude/agents/browser/browser-agent.yaml +182 -182
  2. package/.claude/agents/core/coder.md +265 -265
  3. package/.claude/agents/core/planner.md +167 -167
  4. package/.claude/agents/core/researcher.md +189 -189
  5. package/.claude/agents/core/reviewer.md +325 -325
  6. package/.claude/agents/core/tester.md +318 -318
  7. package/.claude/agents/database-specialist.yaml +21 -21
  8. package/.claude/agents/dual-mode/codex-coordinator.md +224 -224
  9. package/.claude/agents/dual-mode/codex-worker.md +211 -211
  10. package/.claude/agents/dual-mode/dual-orchestrator.md +291 -291
  11. package/.claude/agents/github/code-review-swarm.md +537 -537
  12. package/.claude/agents/github/github-modes.md +172 -172
  13. package/.claude/agents/github/issue-tracker.md +318 -318
  14. package/.claude/agents/github/multi-repo-swarm.md +552 -552
  15. package/.claude/agents/github/pr-manager.md +190 -190
  16. package/.claude/agents/github/project-board-sync.md +508 -508
  17. package/.claude/agents/github/release-manager.md +366 -366
  18. package/.claude/agents/github/release-swarm.md +582 -582
  19. package/.claude/agents/github/repo-architect.md +397 -397
  20. package/.claude/agents/github/swarm-issue.md +572 -572
  21. package/.claude/agents/github/swarm-pr.md +427 -427
  22. package/.claude/agents/github/sync-coordinator.md +451 -451
  23. package/.claude/agents/github/workflow-automation.md +634 -634
  24. package/.claude/agents/goal/code-goal-planner.md +445 -445
  25. package/.claude/agents/hive-mind/collective-intelligence-coordinator.md +129 -129
  26. package/.claude/agents/hive-mind/queen-coordinator.md +202 -202
  27. package/.claude/agents/hive-mind/scout-explorer.md +241 -241
  28. package/.claude/agents/hive-mind/swarm-memory-manager.md +192 -192
  29. package/.claude/agents/hive-mind/worker-specialist.md +216 -216
  30. package/.claude/agents/index.yaml +17 -17
  31. package/.claude/agents/neural/safla-neural.md +73 -73
  32. package/.claude/agents/project-coordinator.yaml +15 -15
  33. package/.claude/agents/python-specialist.yaml +21 -21
  34. package/.claude/agents/reasoning/goal-planner.md +72 -72
  35. package/.claude/agents/security-auditor.yaml +20 -20
  36. package/.claude/agents/swarm/adaptive-coordinator.md +395 -395
  37. package/.claude/agents/swarm/hierarchical-coordinator.md +326 -326
  38. package/.claude/agents/swarm/mesh-coordinator.md +391 -391
  39. package/.claude/agents/templates/migration-plan.md +745 -745
  40. package/.claude/agents/typescript-specialist.yaml +21 -21
  41. package/.claude/checkpoints/1767754460.json +8 -8
  42. package/.claude/commands/agents/agent-spawning.md +28 -28
  43. package/.claude/commands/github/github-modes.md +146 -146
  44. package/.claude/commands/github/github-swarm.md +121 -121
  45. package/.claude/commands/github/issue-tracker.md +291 -291
  46. package/.claude/commands/github/pr-manager.md +169 -169
  47. package/.claude/commands/github/release-manager.md +337 -337
  48. package/.claude/commands/github/repo-architect.md +366 -366
  49. package/.claude/commands/github/sync-coordinator.md +300 -300
  50. package/.claude/commands/memory/neural.md +47 -47
  51. package/.claude/commands/sparc/analyzer.md +51 -51
  52. package/.claude/commands/sparc/architect.md +53 -53
  53. package/.claude/commands/sparc/ask.md +97 -97
  54. package/.claude/commands/sparc/batch-executor.md +54 -54
  55. package/.claude/commands/sparc/code.md +89 -89
  56. package/.claude/commands/sparc/coder.md +54 -54
  57. package/.claude/commands/sparc/debug.md +83 -83
  58. package/.claude/commands/sparc/debugger.md +54 -54
  59. package/.claude/commands/sparc/designer.md +53 -53
  60. package/.claude/commands/sparc/devops.md +109 -109
  61. package/.claude/commands/sparc/docs-writer.md +80 -80
  62. package/.claude/commands/sparc/documenter.md +54 -54
  63. package/.claude/commands/sparc/innovator.md +54 -54
  64. package/.claude/commands/sparc/integration.md +83 -83
  65. package/.claude/commands/sparc/mcp.md +117 -117
  66. package/.claude/commands/sparc/memory-manager.md +54 -54
  67. package/.claude/commands/sparc/optimizer.md +54 -54
  68. package/.claude/commands/sparc/orchestrator.md +131 -131
  69. package/.claude/commands/sparc/post-deployment-monitoring-mode.md +83 -83
  70. package/.claude/commands/sparc/refinement-optimization-mode.md +83 -83
  71. package/.claude/commands/sparc/researcher.md +54 -54
  72. package/.claude/commands/sparc/reviewer.md +54 -54
  73. package/.claude/commands/sparc/security-review.md +80 -80
  74. package/.claude/commands/sparc/sparc-modes.md +174 -174
  75. package/.claude/commands/sparc/sparc.md +111 -111
  76. package/.claude/commands/sparc/spec-pseudocode.md +80 -80
  77. package/.claude/commands/sparc/supabase-admin.md +348 -348
  78. package/.claude/commands/sparc/swarm-coordinator.md +54 -54
  79. package/.claude/commands/sparc/tdd.md +54 -54
  80. package/.claude/commands/sparc/tester.md +54 -54
  81. package/.claude/commands/sparc/tutorial.md +79 -79
  82. package/.claude/commands/sparc/workflow-manager.md +54 -54
  83. package/.claude/commands/sparc.md +166 -166
  84. package/.claude/commands/swarm/analysis.md +95 -95
  85. package/.claude/commands/swarm/development.md +96 -96
  86. package/.claude/commands/swarm/examples.md +168 -168
  87. package/.claude/commands/swarm/maintenance.md +102 -102
  88. package/.claude/commands/swarm/optimization.md +117 -117
  89. package/.claude/commands/swarm/research.md +136 -136
  90. package/.claude/commands/swarm/testing.md +131 -131
  91. package/.claude/commands/workflows/development.md +77 -77
  92. package/.claude/commands/workflows/research.md +62 -62
  93. package/.claude/guidance/moflo-bootstrap.md +126 -126
  94. package/.claude/guidance/shipped/agent-bootstrap.md +126 -126
  95. package/.claude/guidance/shipped/guidance-memory-strategy.md +262 -262
  96. package/.claude/guidance/shipped/memory-strategy.md +204 -204
  97. package/.claude/guidance/shipped/moflo.md +668 -653
  98. package/.claude/guidance/shipped/task-swarm-integration.md +441 -441
  99. package/.claude/helpers/intelligence.cjs +207 -207
  100. package/.claude/helpers/statusline.cjs +851 -851
  101. package/.claude/settings.local.json +18 -0
  102. package/.claude/skills/fl/SKILL.md +583 -583
  103. package/.claude/skills/flo/SKILL.md +583 -583
  104. package/.claude/skills/github-code-review/SKILL.md +1140 -1140
  105. package/.claude/skills/github-multi-repo/SKILL.md +874 -874
  106. package/.claude/skills/github-project-management/SKILL.md +1277 -1277
  107. package/.claude/skills/github-release-management/SKILL.md +1081 -1081
  108. package/.claude/skills/github-workflow-automation/SKILL.md +1065 -1065
  109. package/.claude/skills/hive-mind-advanced/SKILL.md +712 -712
  110. package/.claude/skills/hooks-automation/SKILL.md +1201 -1201
  111. package/.claude/skills/performance-analysis/SKILL.md +563 -563
  112. package/.claude/skills/sparc-methodology/SKILL.md +1115 -1115
  113. package/.claude/skills/swarm-advanced/SKILL.md +973 -973
  114. package/.claude/workflow-state.json +4 -4
  115. package/LICENSE +21 -21
  116. package/README.md +685 -685
  117. package/bin/cli.js +0 -0
  118. package/bin/gate-hook.mjs +50 -50
  119. package/bin/gate.cjs +138 -138
  120. package/bin/generate-code-map.mjs +775 -775
  121. package/bin/hook-handler.cjs +83 -83
  122. package/bin/hooks.mjs +656 -656
  123. package/bin/index-guidance.mjs +892 -892
  124. package/bin/index-tests.mjs +709 -709
  125. package/bin/lib/process-manager.mjs +243 -243
  126. package/bin/lib/registry-cleanup.cjs +41 -41
  127. package/bin/prompt-hook.mjs +72 -72
  128. package/bin/semantic-search.mjs +472 -472
  129. package/bin/session-start-launcher.mjs +238 -238
  130. package/bin/setup-project.mjs +250 -250
  131. package/package.json +123 -123
  132. package/src/@claude-flow/cli/README.md +452 -452
  133. package/src/@claude-flow/cli/bin/cli.js +180 -180
  134. package/src/@claude-flow/cli/bin/preinstall.cjs +2 -2
  135. package/src/@claude-flow/cli/dist/src/commands/completions.js +409 -409
  136. package/src/@claude-flow/cli/dist/src/commands/doctor.js +5 -1
  137. package/src/@claude-flow/cli/dist/src/commands/embeddings.js +25 -25
  138. package/src/@claude-flow/cli/dist/src/commands/github.js +61 -61
  139. package/src/@claude-flow/cli/dist/src/commands/hive-mind.js +90 -90
  140. package/src/@claude-flow/cli/dist/src/commands/hooks.js +9 -9
  141. package/src/@claude-flow/cli/dist/src/commands/ruvector/import.js +14 -14
  142. package/src/@claude-flow/cli/dist/src/commands/ruvector/setup.js +624 -624
  143. package/src/@claude-flow/cli/dist/src/config/moflo-config.d.ts +3 -0
  144. package/src/@claude-flow/cli/dist/src/config/moflo-config.js +101 -91
  145. package/src/@claude-flow/cli/dist/src/index.d.ts +5 -0
  146. package/src/@claude-flow/cli/dist/src/index.js +44 -0
  147. package/src/@claude-flow/cli/dist/src/init/claudemd-generator.d.ts +29 -29
  148. package/src/@claude-flow/cli/dist/src/init/claudemd-generator.js +43 -43
  149. package/src/@claude-flow/cli/dist/src/init/executor.js +453 -453
  150. package/src/@claude-flow/cli/dist/src/init/helpers-generator.js +482 -482
  151. package/src/@claude-flow/cli/dist/src/init/moflo-init.d.ts +30 -30
  152. package/src/@claude-flow/cli/dist/src/init/moflo-init.js +140 -140
  153. package/src/@claude-flow/cli/dist/src/init/statusline-generator.js +876 -876
  154. package/src/@claude-flow/cli/dist/src/memory/memory-initializer.js +371 -371
  155. package/src/@claude-flow/cli/dist/src/runtime/headless.js +28 -28
  156. package/src/@claude-flow/cli/dist/src/services/container-worker-pool.d.ts +197 -0
  157. package/src/@claude-flow/cli/dist/src/services/container-worker-pool.js +584 -0
  158. package/src/@claude-flow/cli/dist/src/services/daemon-lock.d.ts +14 -0
  159. package/src/@claude-flow/cli/dist/src/services/daemon-lock.js +1 -1
  160. package/src/@claude-flow/cli/dist/src/services/headless-worker-executor.js +84 -84
  161. package/src/@claude-flow/cli/package.json +1 -1
  162. package/src/@claude-flow/guidance/README.md +1195 -1195
  163. package/src/@claude-flow/guidance/package.json +198 -198
  164. package/src/@claude-flow/memory/README.md +587 -587
  165. package/src/@claude-flow/memory/dist/agent-memory-scope.test.js +4 -7
  166. package/src/@claude-flow/memory/dist/agentdb-backend.d.ts +2 -0
  167. package/src/@claude-flow/memory/dist/agentdb-backend.js +28 -26
  168. package/src/@claude-flow/memory/dist/auto-memory-bridge.test.js +36 -39
  169. package/src/@claude-flow/memory/dist/benchmark.test.js +1 -1
  170. package/src/@claude-flow/memory/dist/controller-registry.test.js +43 -0
  171. package/src/@claude-flow/memory/dist/database-provider.d.ts +2 -2
  172. package/src/@claude-flow/memory/dist/database-provider.js +6 -3
  173. package/src/@claude-flow/memory/dist/database-provider.test.js +1 -3
  174. package/src/@claude-flow/memory/dist/hybrid-backend.d.ts +245 -0
  175. package/src/@claude-flow/memory/dist/hybrid-backend.js +569 -0
  176. package/src/@claude-flow/memory/dist/hybrid-backend.test.d.ts +8 -0
  177. package/src/@claude-flow/memory/dist/hybrid-backend.test.js +320 -0
  178. package/src/@claude-flow/memory/dist/index.d.ts +3 -0
  179. package/src/@claude-flow/memory/dist/index.js +3 -0
  180. package/src/@claude-flow/memory/dist/sqlite-backend.d.ts +121 -0
  181. package/src/@claude-flow/memory/dist/sqlite-backend.js +572 -0
  182. package/src/@claude-flow/memory/dist/sqljs-backend.d.ts +4 -3
  183. package/src/@claude-flow/memory/dist/sqljs-backend.js +31 -30
  184. package/src/@claude-flow/memory/package.json +44 -44
  185. package/src/@claude-flow/shared/README.md +323 -323
  186. package/src/@claude-flow/shared/dist/core/config/defaults.js +1 -1
  187. package/src/@claude-flow/shared/dist/core/config/loader.js +1 -1
  188. package/src/@claude-flow/shared/dist/core/config/schema.js +1 -1
  189. package/src/@claude-flow/shared/dist/events/event-store.js +34 -50
  190. package/src/@claude-flow/shared/dist/events/event-store.test.js +4 -8
  191. package/src/@claude-flow/shared/dist/hooks/executor.js +4 -7
  192. package/src/@claude-flow/shared/dist/hooks/safety/file-organization.js +1 -1
  193. package/src/@claude-flow/shared/dist/hooks/safety/git-commit.js +3 -3
  194. package/src/@claude-flow/shared/dist/hooks/verify-exports.test.js +6 -6
  195. package/src/@claude-flow/shared/dist/utils/secure-logger.js +1 -1
  196. package/src/README.md +493 -493
  197. package/src/@claude-flow/guidance/dist/adversarial.d.ts +0 -284
  198. package/src/@claude-flow/guidance/dist/adversarial.js +0 -572
  199. package/src/@claude-flow/guidance/dist/analyzer.d.ts +0 -530
  200. package/src/@claude-flow/guidance/dist/analyzer.js +0 -2518
  201. package/src/@claude-flow/guidance/dist/artifacts.d.ts +0 -283
  202. package/src/@claude-flow/guidance/dist/artifacts.js +0 -356
  203. package/src/@claude-flow/guidance/dist/authority.d.ts +0 -290
  204. package/src/@claude-flow/guidance/dist/authority.js +0 -558
  205. package/src/@claude-flow/guidance/dist/capabilities.d.ts +0 -209
  206. package/src/@claude-flow/guidance/dist/capabilities.js +0 -485
  207. package/src/@claude-flow/guidance/dist/coherence.d.ts +0 -233
  208. package/src/@claude-flow/guidance/dist/coherence.js +0 -372
  209. package/src/@claude-flow/guidance/dist/compiler.d.ts +0 -87
  210. package/src/@claude-flow/guidance/dist/compiler.js +0 -419
  211. package/src/@claude-flow/guidance/dist/conformance-kit.d.ts +0 -225
  212. package/src/@claude-flow/guidance/dist/conformance-kit.js +0 -629
  213. package/src/@claude-flow/guidance/dist/continue-gate.d.ts +0 -214
  214. package/src/@claude-flow/guidance/dist/continue-gate.js +0 -353
  215. package/src/@claude-flow/guidance/dist/crypto-utils.d.ts +0 -17
  216. package/src/@claude-flow/guidance/dist/crypto-utils.js +0 -24
  217. package/src/@claude-flow/guidance/dist/evolution.d.ts +0 -282
  218. package/src/@claude-flow/guidance/dist/evolution.js +0 -500
  219. package/src/@claude-flow/guidance/dist/gates.d.ts +0 -79
  220. package/src/@claude-flow/guidance/dist/gates.js +0 -302
  221. package/src/@claude-flow/guidance/dist/gateway.d.ts +0 -206
  222. package/src/@claude-flow/guidance/dist/gateway.js +0 -452
  223. package/src/@claude-flow/guidance/dist/generators.d.ts +0 -153
  224. package/src/@claude-flow/guidance/dist/generators.js +0 -682
  225. package/src/@claude-flow/guidance/dist/headless.d.ts +0 -177
  226. package/src/@claude-flow/guidance/dist/headless.js +0 -342
  227. package/src/@claude-flow/guidance/dist/hooks.d.ts +0 -109
  228. package/src/@claude-flow/guidance/dist/hooks.js +0 -347
  229. package/src/@claude-flow/guidance/dist/index.d.ts +0 -205
  230. package/src/@claude-flow/guidance/dist/index.js +0 -321
  231. package/src/@claude-flow/guidance/dist/ledger.d.ts +0 -162
  232. package/src/@claude-flow/guidance/dist/ledger.js +0 -375
  233. package/src/@claude-flow/guidance/dist/manifest-validator.d.ts +0 -289
  234. package/src/@claude-flow/guidance/dist/manifest-validator.js +0 -838
  235. package/src/@claude-flow/guidance/dist/memory-gate.d.ts +0 -222
  236. package/src/@claude-flow/guidance/dist/memory-gate.js +0 -382
  237. package/src/@claude-flow/guidance/dist/meta-governance.d.ts +0 -265
  238. package/src/@claude-flow/guidance/dist/meta-governance.js +0 -348
  239. package/src/@claude-flow/guidance/dist/optimizer.d.ts +0 -104
  240. package/src/@claude-flow/guidance/dist/optimizer.js +0 -329
  241. package/src/@claude-flow/guidance/dist/persistence.d.ts +0 -189
  242. package/src/@claude-flow/guidance/dist/persistence.js +0 -464
  243. package/src/@claude-flow/guidance/dist/proof.d.ts +0 -185
  244. package/src/@claude-flow/guidance/dist/proof.js +0 -238
  245. package/src/@claude-flow/guidance/dist/retriever.d.ts +0 -116
  246. package/src/@claude-flow/guidance/dist/retriever.js +0 -394
  247. package/src/@claude-flow/guidance/dist/ruvbot-integration.d.ts +0 -370
  248. package/src/@claude-flow/guidance/dist/ruvbot-integration.js +0 -738
  249. package/src/@claude-flow/guidance/dist/temporal.d.ts +0 -426
  250. package/src/@claude-flow/guidance/dist/temporal.js +0 -658
  251. package/src/@claude-flow/guidance/dist/trust.d.ts +0 -283
  252. package/src/@claude-flow/guidance/dist/trust.js +0 -473
  253. package/src/@claude-flow/guidance/dist/truth-anchors.d.ts +0 -276
  254. package/src/@claude-flow/guidance/dist/truth-anchors.js +0 -488
  255. package/src/@claude-flow/guidance/dist/types.d.ts +0 -378
  256. package/src/@claude-flow/guidance/dist/types.js +0 -10
  257. package/src/@claude-flow/guidance/dist/uncertainty.d.ts +0 -372
  258. package/src/@claude-flow/guidance/dist/uncertainty.js +0 -619
  259. package/src/@claude-flow/guidance/dist/wasm-kernel.d.ts +0 -48
  260. package/src/@claude-flow/guidance/dist/wasm-kernel.js +0 -158
@@ -1,738 +0,0 @@
1
- /**
2
- * RuvBot Integration Bridge
3
- *
4
- * Bridges ruvbot (npm: ruvbot@0.1.8) with the @claude-flow/guidance control
5
- * plane. Wires ruvbot events to guidance hooks, wraps AIDefence as an
6
- * enforcement gate, governs memory operations, and feeds trust accumulation.
7
- *
8
- * ruvbot is an optional peer dependency. All types and classes are exported
9
- * regardless of whether ruvbot is installed. Runtime calls that require the
10
- * ruvbot package will throw a clear error if the package is missing.
11
- *
12
- * Components:
13
- * 1. RuvBotGuidanceBridge - Event wiring, gate delegation, trust tracking
14
- * 2. AIDefenceGate - Prompt injection, jailbreak, PII detection gate
15
- * 3. RuvBotMemoryAdapter - Governed memory read/write with proof logging
16
- *
17
- * @module @claude-flow/guidance/ruvbot-integration
18
- */
19
- // ============================================================================
20
- // Severity Mapping
21
- // ============================================================================
22
- /** Maps blockThreshold to a minimum severity that triggers a block. */
23
- const BLOCK_SEVERITY_THRESHOLDS = {
24
- low: new Set(['low', 'medium', 'high', 'critical']),
25
- medium: new Set(['medium', 'high', 'critical']),
26
- high: new Set(['high', 'critical']),
27
- };
28
- /** Maps ruvbot threat type strings to our typed threat type. */
29
- const THREAT_TYPE_MAP = {
30
- 'prompt-injection': 'prompt-injection',
31
- 'prompt_injection': 'prompt-injection',
32
- 'promptInjection': 'prompt-injection',
33
- 'jailbreak': 'jailbreak',
34
- 'pii': 'pii',
35
- 'control-chars': 'control-chars',
36
- 'control_chars': 'control-chars',
37
- 'controlChars': 'control-chars',
38
- 'homoglyph': 'homoglyph',
39
- };
40
- /** Maps ruvbot severity strings to our typed severity. */
41
- const SEVERITY_MAP = {
42
- low: 'low',
43
- medium: 'medium',
44
- high: 'high',
45
- critical: 'critical',
46
- };
47
- // ============================================================================
48
- // Dynamic Import Helper
49
- // ============================================================================
50
- /** Resolved ruvbot module cache (null = not attempted, undefined = failed). */
51
- let ruvbotModuleCache = null;
52
- /**
53
- * Module specifiers kept in variables so TypeScript does not attempt
54
- * compile-time resolution of this optional peer dependency.
55
- */
56
- const RUVBOT_MODULE = 'ruvbot';
57
- const RUVBOT_CORE_MODULE = 'ruvbot/core';
58
- /**
59
- * Attempt to dynamically import the ruvbot package.
60
- * Throws a descriptive error if the package is not installed.
61
- */
62
- async function requireRuvBot() {
63
- if (ruvbotModuleCache)
64
- return ruvbotModuleCache;
65
- try {
66
- const mod = await import(RUVBOT_MODULE);
67
- ruvbotModuleCache = mod;
68
- return mod;
69
- }
70
- catch {
71
- throw new Error('ruvbot is not installed. Install it with: npm install ruvbot@0.1.8\n' +
72
- 'ruvbot is an optional peer dependency of @claude-flow/guidance.');
73
- }
74
- }
75
- /**
76
- * Attempt to dynamically import ruvbot/core sub-export.
77
- */
78
- async function requireRuvBotCore() {
79
- try {
80
- return await import(RUVBOT_CORE_MODULE);
81
- }
82
- catch {
83
- // Fall back to the main export
84
- return requireRuvBot();
85
- }
86
- }
87
- // ============================================================================
88
- // AIDefenceGate
89
- // ============================================================================
90
- /**
91
- * Wraps ruvbot's 6-layer AIDefence as an enforcement gate compatible with the
92
- * guidance control plane's GateResult / GateDecision interface.
93
- *
94
- * Supports:
95
- * - Prompt injection detection
96
- * - Jailbreak detection
97
- * - PII detection
98
- * - Control character and homoglyph detection (via ruvbot internals)
99
- * - Configurable sensitivity / block threshold
100
- *
101
- * Evaluates both input (pre-processing) and output (post-processing) text.
102
- */
103
- export class AIDefenceGate {
104
- config;
105
- guard = null;
106
- guardInitPromise = null;
107
- constructor(config = {}) {
108
- this.config = {
109
- detectPromptInjection: config.detectPromptInjection ?? true,
110
- detectJailbreak: config.detectJailbreak ?? true,
111
- detectPII: config.detectPII ?? true,
112
- blockThreshold: config.blockThreshold ?? 'medium',
113
- };
114
- }
115
- /**
116
- * Lazily initialize the underlying ruvbot AIDefence guard.
117
- * Safe to call multiple times; only the first call creates the guard.
118
- */
119
- async ensureGuard() {
120
- if (this.guard)
121
- return this.guard;
122
- if (!this.guardInitPromise) {
123
- this.guardInitPromise = (async () => {
124
- const mod = await requireRuvBot();
125
- const createGuard = mod['createAIDefenceGuard'];
126
- if (typeof createGuard !== 'function') {
127
- throw new Error('ruvbot does not export createAIDefenceGuard. ' +
128
- 'Ensure ruvbot@0.1.8 or later is installed.');
129
- }
130
- this.guard = createGuard({
131
- detectPromptInjection: this.config.detectPromptInjection,
132
- detectJailbreak: this.config.detectJailbreak,
133
- detectPII: this.config.detectPII,
134
- });
135
- })();
136
- }
137
- await this.guardInitPromise;
138
- return this.guard;
139
- }
140
- /**
141
- * Evaluate input text for threats (pre-processing gate).
142
- *
143
- * Checks for prompt injection, jailbreak attempts, and PII based
144
- * on the configured sensitivity.
145
- */
146
- async evaluateInput(input) {
147
- const start = performance.now();
148
- const guard = await this.ensureGuard();
149
- const raw = await guard.check(input);
150
- const latencyMs = performance.now() - start;
151
- const threats = this.normalizeThreats(raw.threats);
152
- return {
153
- safe: raw.safe,
154
- threats,
155
- sanitizedInput: raw.sanitizedInput,
156
- latencyMs,
157
- };
158
- }
159
- /**
160
- * Evaluate output text for threats (post-processing gate).
161
- *
162
- * Primarily checks for PII leakage and secret exposure in responses.
163
- */
164
- async evaluateOutput(output) {
165
- const start = performance.now();
166
- const guard = await this.ensureGuard();
167
- const raw = await guard.check(output);
168
- const latencyMs = performance.now() - start;
169
- // For output evaluation, focus on PII / data leakage threats
170
- const threats = this.normalizeThreats(raw.threats).filter(t => t.type === 'pii' || t.type === 'control-chars');
171
- return {
172
- safe: threats.length === 0,
173
- threats,
174
- sanitizedInput: raw.sanitizedInput,
175
- latencyMs,
176
- };
177
- }
178
- /**
179
- * Convert an AIDefenceResult into a GateResult compatible with the
180
- * guidance enforcement pipeline.
181
- *
182
- * Decision logic:
183
- * - If no threats: 'allow'
184
- * - If threats above block threshold: 'block'
185
- * - Otherwise: 'warn'
186
- */
187
- toGateResult(result, context) {
188
- if (result.safe && result.threats.length === 0) {
189
- return {
190
- decision: 'allow',
191
- gateName: 'ai-defence',
192
- reason: 'AIDefence check passed with no threats detected.',
193
- triggeredRules: [],
194
- metadata: { latencyMs: result.latencyMs },
195
- };
196
- }
197
- const blockingSeverities = BLOCK_SEVERITY_THRESHOLDS[this.config.blockThreshold];
198
- const blockingThreats = result.threats.filter(t => blockingSeverities.has(t.severity));
199
- const decision = blockingThreats.length > 0 ? 'block' : 'warn';
200
- const threatSummary = result.threats
201
- .map(t => `${t.type} (${t.severity}): ${t.detail}`)
202
- .join('; ');
203
- return {
204
- decision,
205
- gateName: 'ai-defence',
206
- reason: `AIDefence detected ${result.threats.length} threat(s): ${threatSummary}`,
207
- triggeredRules: [],
208
- remediation: this.buildRemediation(result.threats),
209
- metadata: {
210
- threats: result.threats,
211
- blockThreshold: this.config.blockThreshold,
212
- latencyMs: result.latencyMs,
213
- context,
214
- },
215
- };
216
- }
217
- /**
218
- * Get the current configuration.
219
- */
220
- getConfig() {
221
- return { ...this.config };
222
- }
223
- /**
224
- * Update configuration. Resets the guard so the next evaluation
225
- * re-initializes with the new settings.
226
- */
227
- updateConfig(config) {
228
- this.config = { ...this.config, ...config };
229
- this.guard = null;
230
- this.guardInitPromise = null;
231
- }
232
- // ===== Private Helpers =====
233
- normalizeThreats(raw) {
234
- return raw.map(t => ({
235
- type: THREAT_TYPE_MAP[t.type] ?? 'prompt-injection',
236
- severity: SEVERITY_MAP[t.severity] ?? 'medium',
237
- detail: t.detail,
238
- }));
239
- }
240
- buildRemediation(threats) {
241
- const parts = [];
242
- const hasInjection = threats.some(t => t.type === 'prompt-injection');
243
- const hasJailbreak = threats.some(t => t.type === 'jailbreak');
244
- const hasPII = threats.some(t => t.type === 'pii');
245
- if (hasInjection) {
246
- parts.push('1. Review input for prompt injection patterns and remove adversarial content.');
247
- }
248
- if (hasJailbreak) {
249
- parts.push('2. Input contains jailbreak attempt. Reject and log the attempt.');
250
- }
251
- if (hasPII) {
252
- parts.push('3. Redact or mask personally identifiable information before processing.');
253
- }
254
- if (parts.length === 0) {
255
- parts.push('Review flagged content and apply appropriate sanitization.');
256
- }
257
- return parts.join('\n');
258
- }
259
- }
260
- // ============================================================================
261
- // RuvBotMemoryAdapter
262
- // ============================================================================
263
- /**
264
- * Wraps ruvbot's memory read/write operations with guidance control plane
265
- * governance. Every write passes through the MemoryWriteGate for authority
266
- * and coherence checks. All operations are logged to a proof chain.
267
- */
268
- export class RuvBotMemoryAdapter {
269
- memoryGate;
270
- coherenceScheduler;
271
- proofChain = null;
272
- ruvbotMemory = null;
273
- operationLog = [];
274
- constructor(memoryGate, coherenceScheduler) {
275
- this.memoryGate = memoryGate;
276
- this.coherenceScheduler = coherenceScheduler;
277
- }
278
- /**
279
- * Attach a ruvbot memory instance for proxied operations.
280
- */
281
- attachMemory(memory) {
282
- this.ruvbotMemory = memory;
283
- }
284
- /**
285
- * Attach a proof chain for operation logging.
286
- */
287
- attachProofChain(proofChain) {
288
- this.proofChain = proofChain;
289
- }
290
- /**
291
- * Governed read: reads through ruvbot memory, logs to proof chain.
292
- */
293
- async read(key, namespace = 'default') {
294
- this.ensureMemoryAttached();
295
- const value = await this.ruvbotMemory.read(key, namespace);
296
- this.operationLog.push({
297
- operation: 'read',
298
- key,
299
- namespace,
300
- timestamp: Date.now(),
301
- });
302
- return value;
303
- }
304
- /**
305
- * Governed write: runs through MemoryWriteGate, checks coherence,
306
- * logs to proof chain, then delegates to ruvbot memory.
307
- *
308
- * Returns the WriteDecision. If denied, the write is not performed.
309
- */
310
- async write(key, namespace, value, authority, existingEntries) {
311
- this.ensureMemoryAttached();
312
- // Step 1: Evaluate through MemoryWriteGate
313
- const decision = this.memoryGate.evaluateWrite(authority, key, namespace, value, existingEntries);
314
- // Step 2: Log the operation
315
- this.operationLog.push({
316
- operation: 'write',
317
- key,
318
- namespace,
319
- timestamp: Date.now(),
320
- decision,
321
- });
322
- // Step 3: If denied, do not write
323
- if (!decision.allowed) {
324
- return decision;
325
- }
326
- // Step 4: Perform the write through ruvbot
327
- await this.ruvbotMemory.write(key, value, namespace);
328
- return decision;
329
- }
330
- /**
331
- * Governed delete: checks authority, logs, then delegates.
332
- */
333
- async delete(key, namespace, authority) {
334
- this.ensureMemoryAttached();
335
- // Authority must have delete permission
336
- if (!authority.canDelete) {
337
- const result = {
338
- allowed: false,
339
- reason: `Agent "${authority.agentId}" does not have delete permission.`,
340
- };
341
- this.operationLog.push({
342
- operation: 'delete',
343
- key,
344
- namespace,
345
- timestamp: Date.now(),
346
- });
347
- return result;
348
- }
349
- // Perform the delete if the underlying memory supports it
350
- if (typeof this.ruvbotMemory.delete === 'function') {
351
- await this.ruvbotMemory.delete(key, namespace);
352
- }
353
- this.operationLog.push({
354
- operation: 'delete',
355
- key,
356
- namespace,
357
- timestamp: Date.now(),
358
- });
359
- return { allowed: true, reason: 'Delete permitted and executed.' };
360
- }
361
- /**
362
- * Get the operation log for audit/proof purposes.
363
- */
364
- getOperationLog() {
365
- return this.operationLog;
366
- }
367
- /**
368
- * Get the count of governed operations.
369
- */
370
- get operationCount() {
371
- return this.operationLog.length;
372
- }
373
- /**
374
- * Clear the operation log.
375
- */
376
- clearLog() {
377
- this.operationLog = [];
378
- }
379
- // ===== Private Helpers =====
380
- ensureMemoryAttached() {
381
- if (!this.ruvbotMemory) {
382
- throw new Error('No ruvbot memory instance attached. Call attachMemory() before ' +
383
- 'performing memory operations.');
384
- }
385
- }
386
- }
387
- // ============================================================================
388
- // RuvBotGuidanceBridge
389
- // ============================================================================
390
- /**
391
- * Bridges a ruvbot instance with the @claude-flow/guidance control plane.
392
- *
393
- * Wires ruvbot event hooks to guidance enforcement and trust systems:
394
- *
395
- * - `message` -> EnforcementGates (secrets, destructive ops) + AIDefence
396
- * - `agent:spawn` -> ManifestValidator
397
- * - `session:create` -> ProofChain initialization
398
- * - `session:end` -> ProofChain finalization and ledger persistence
399
- * - `ready` -> Trust accumulator initialization
400
- * - `error` -> Trust 'deny' outcome recording
401
- *
402
- * All gate outcomes are fed into the TrustAccumulator so that ruvbot agents
403
- * build (or lose) trust over time.
404
- */
405
- export class RuvBotGuidanceBridge {
406
- config;
407
- ruvbot = null;
408
- // Guidance components (injected)
409
- gates = null;
410
- manifestValidator = null;
411
- trustSystem = null;
412
- aiDefenceGate = null;
413
- memoryAdapter = null;
414
- // Session proof chains keyed by sessionId
415
- sessionChains = new Map();
416
- // Bound event handlers for cleanup
417
- boundHandlers = new Map();
418
- // Event log for diagnostics
419
- eventLog = [];
420
- static MAX_EVENT_LOG = 1000;
421
- constructor(config = {}) {
422
- this.config = {
423
- enableAIDefence: config.enableAIDefence ?? true,
424
- enableMemoryGovernance: config.enableMemoryGovernance ?? true,
425
- enableTrustTracking: config.enableTrustTracking ?? true,
426
- enableProofChain: config.enableProofChain ?? true,
427
- };
428
- }
429
- /**
430
- * Attach guidance control plane components.
431
- *
432
- * Accepts either a full GuidanceControlPlane instance (from which
433
- * sub-components are extracted) or individual components.
434
- */
435
- attachGuidance(components) {
436
- if (components.gates)
437
- this.gates = components.gates;
438
- if (components.manifestValidator)
439
- this.manifestValidator = components.manifestValidator;
440
- if (components.trustSystem)
441
- this.trustSystem = components.trustSystem;
442
- if (components.aiDefenceGate)
443
- this.aiDefenceGate = components.aiDefenceGate;
444
- if (components.memoryAdapter)
445
- this.memoryAdapter = components.memoryAdapter;
446
- }
447
- /**
448
- * Connect to a ruvbot instance and wire all event handlers.
449
- *
450
- * This is the primary entry point. Once called, the bridge will
451
- * intercept ruvbot events and route them through guidance gates.
452
- */
453
- connect(ruvbot) {
454
- if (this.ruvbot) {
455
- this.disconnect();
456
- }
457
- this.ruvbot = ruvbot;
458
- // Wire event handlers
459
- this.wireEvent('message', this.handleMessage.bind(this));
460
- this.wireEvent('agent:spawn', this.handleAgentSpawn.bind(this));
461
- this.wireEvent('session:create', this.handleSessionCreate.bind(this));
462
- this.wireEvent('session:end', this.handleSessionEnd.bind(this));
463
- this.wireEvent('ready', this.handleReady.bind(this));
464
- this.wireEvent('shutdown', this.handleShutdown.bind(this));
465
- this.wireEvent('error', this.handleError.bind(this));
466
- this.wireEvent('agent:stop', this.handleAgentStop.bind(this));
467
- }
468
- /**
469
- * Disconnect from the ruvbot instance, removing all event handlers.
470
- */
471
- disconnect() {
472
- if (!this.ruvbot)
473
- return;
474
- for (const [event, handler] of this.boundHandlers) {
475
- this.ruvbot.off(event, handler);
476
- }
477
- this.boundHandlers.clear();
478
- this.ruvbot = null;
479
- }
480
- /**
481
- * Evaluate a ruvbot AIDefence result and return a GateResult-compatible
482
- * decision. Can be called independently of event wiring.
483
- */
484
- async evaluateAIDefence(input) {
485
- if (!this.aiDefenceGate) {
486
- throw new Error('AIDefenceGate not attached. Call attachGuidance({ aiDefenceGate }) first.');
487
- }
488
- const result = await this.aiDefenceGate.evaluateInput(input);
489
- return this.aiDefenceGate.toGateResult(result, 'manual-evaluation');
490
- }
491
- /**
492
- * Get the proof chain for a specific session.
493
- */
494
- getSessionProofChain(sessionId) {
495
- return this.sessionChains.get(sessionId);
496
- }
497
- /**
498
- * Get all active session IDs.
499
- */
500
- getActiveSessionIds() {
501
- return [...this.sessionChains.keys()];
502
- }
503
- /**
504
- * Get the event log for diagnostics.
505
- */
506
- getEventLog() {
507
- return this.eventLog;
508
- }
509
- /**
510
- * Get the current bridge configuration.
511
- */
512
- getConfig() {
513
- return { ...this.config };
514
- }
515
- /**
516
- * Whether the bridge is currently connected to a ruvbot instance.
517
- */
518
- get connected() {
519
- return this.ruvbot !== null;
520
- }
521
- // ===== Event Handlers =====
522
- /**
523
- * Handle `message` events: run content through enforcement gates
524
- * and optionally through AIDefence.
525
- */
526
- async handleMessage(...args) {
527
- const data = (args[0] ?? {});
528
- const content = String(data['content'] ?? data['text'] ?? '');
529
- const sessionId = String(data['sessionId'] ?? 'unknown');
530
- const agentId = String(data['agentId'] ?? 'unknown');
531
- this.logEvent('message', { sessionId, agentId, contentLength: content.length });
532
- const gateResults = [];
533
- // Step 1: Run through EnforcementGates (secrets, destructive ops)
534
- if (this.gates) {
535
- const commandResults = this.gates.evaluateCommand(content);
536
- gateResults.push(...commandResults);
537
- }
538
- // Step 2: Run through AIDefence gate
539
- if (this.config.enableAIDefence && this.aiDefenceGate) {
540
- try {
541
- const defenceResult = await this.aiDefenceGate.evaluateInput(content);
542
- const gateResult = this.aiDefenceGate.toGateResult(defenceResult, `message:${sessionId}`);
543
- if (gateResult.decision !== 'allow') {
544
- gateResults.push(gateResult);
545
- }
546
- }
547
- catch {
548
- // AIDefence unavailable; log but do not block
549
- }
550
- }
551
- // Step 3: Feed outcomes into trust accumulator
552
- if (this.config.enableTrustTracking && this.trustSystem) {
553
- if (gateResults.length === 0) {
554
- this.trustSystem.recordOutcome(agentId, 'allow', `Message passed all gates (session: ${sessionId})`);
555
- }
556
- else {
557
- for (const result of gateResults) {
558
- const outcome = gateDecisionToTrustOutcome(result.decision);
559
- this.trustSystem.recordOutcome(agentId, outcome, `Gate "${result.gateName}" ${result.decision}: ${result.reason}`);
560
- }
561
- }
562
- }
563
- }
564
- /**
565
- * Handle `agent:spawn` events: validate agent manifest.
566
- */
567
- async handleAgentSpawn(...args) {
568
- const data = (args[0] ?? {});
569
- const agentId = String(data['agentId'] ?? data['id'] ?? 'unknown');
570
- const manifest = data['manifest'];
571
- this.logEvent('agent:spawn', { agentId, hasManifest: !!manifest });
572
- if (this.manifestValidator && manifest) {
573
- const validation = this.manifestValidator.validate(manifest);
574
- if (this.config.enableTrustTracking && this.trustSystem) {
575
- if (validation.admissionDecision === 'admit') {
576
- this.trustSystem.recordOutcome(agentId, 'allow', `Agent manifest validated: admission=${validation.admissionDecision}, risk=${validation.riskScore}`);
577
- }
578
- else {
579
- const outcome = validation.admissionDecision === 'reject' ? 'deny' : 'warn';
580
- this.trustSystem.recordOutcome(agentId, outcome, `Agent manifest ${validation.admissionDecision}: risk=${validation.riskScore}, errors=${validation.errors.length}`);
581
- }
582
- }
583
- }
584
- }
585
- /**
586
- * Handle `session:create` events: initialize a proof chain for the session.
587
- */
588
- async handleSessionCreate(...args) {
589
- const data = (args[0] ?? {});
590
- const sessionId = String(data['sessionId'] ?? data['id'] ?? `session-${Date.now()}`);
591
- this.logEvent('session:create', { sessionId });
592
- if (this.config.enableProofChain) {
593
- if (!this.config.proofSigningKey) {
594
- throw new Error('RuvBotBridgeConfig.proofSigningKey is required when enableProofChain is true');
595
- }
596
- const { createProofChain } = await import('./proof.js');
597
- const chain = createProofChain({ signingKey: this.config.proofSigningKey });
598
- this.sessionChains.set(sessionId, chain);
599
- }
600
- }
601
- /**
602
- * Handle `session:end` events: finalize the proof chain and persist.
603
- */
604
- async handleSessionEnd(...args) {
605
- const data = (args[0] ?? {});
606
- const sessionId = String(data['sessionId'] ?? data['id'] ?? 'unknown');
607
- this.logEvent('session:end', { sessionId });
608
- if (this.config.enableProofChain) {
609
- const chain = this.sessionChains.get(sessionId);
610
- if (chain) {
611
- // Export the finalized chain for external persistence
612
- const _exported = chain.export();
613
- // The caller can retrieve this via getSessionProofChain() before
614
- // the session is cleaned up, or listen for an event.
615
- // Clean up
616
- this.sessionChains.delete(sessionId);
617
- }
618
- }
619
- }
620
- /**
621
- * Handle `ready` events: log bridge activation.
622
- */
623
- async handleReady(...args) {
624
- this.logEvent('ready', {});
625
- }
626
- /**
627
- * Handle `shutdown` events: clean up all session proof chains.
628
- */
629
- async handleShutdown(...args) {
630
- this.logEvent('shutdown', {});
631
- this.sessionChains.clear();
632
- }
633
- /**
634
- * Handle `error` events: record a deny outcome in trust tracking.
635
- */
636
- async handleError(...args) {
637
- const data = (args[0] ?? {});
638
- const agentId = String(data['agentId'] ?? 'unknown');
639
- const errorMessage = String(data['message'] ?? data['error'] ?? 'unknown error');
640
- this.logEvent('error', { agentId, error: errorMessage });
641
- if (this.config.enableTrustTracking && this.trustSystem) {
642
- this.trustSystem.recordOutcome(agentId, 'deny', `Error event: ${errorMessage}`);
643
- }
644
- }
645
- /**
646
- * Handle `agent:stop` events: record final trust snapshot.
647
- */
648
- async handleAgentStop(...args) {
649
- const data = (args[0] ?? {});
650
- const agentId = String(data['agentId'] ?? data['id'] ?? 'unknown');
651
- this.logEvent('agent:stop', { agentId });
652
- }
653
- // ===== Private Helpers =====
654
- wireEvent(event, handler) {
655
- this.boundHandlers.set(event, handler);
656
- this.ruvbot.on(event, handler);
657
- }
658
- logEvent(type, data) {
659
- const event = {
660
- type,
661
- timestamp: Date.now(),
662
- sessionId: data['sessionId'],
663
- agentId: data['agentId'],
664
- data,
665
- };
666
- this.eventLog.push(event);
667
- if (this.eventLog.length > RuvBotGuidanceBridge.MAX_EVENT_LOG) {
668
- this.eventLog = this.eventLog.slice(-RuvBotGuidanceBridge.MAX_EVENT_LOG);
669
- }
670
- }
671
- }
672
- // ============================================================================
673
- // Helper Functions
674
- // ============================================================================
675
- /**
676
- * Map a GateDecision to a GateOutcome for trust accumulation.
677
- *
678
- * - 'allow' -> 'allow'
679
- * - 'block' -> 'deny'
680
- * - 'require-confirmation' -> 'warn'
681
- * - 'warn' -> 'warn'
682
- */
683
- function gateDecisionToTrustOutcome(decision) {
684
- switch (decision) {
685
- case 'allow': return 'allow';
686
- case 'block': return 'deny';
687
- case 'warn': return 'warn';
688
- case 'require-confirmation': return 'warn';
689
- default: return 'warn';
690
- }
691
- }
692
- // ============================================================================
693
- // Factory Functions
694
- // ============================================================================
695
- /**
696
- * Create a fully wired RuvBotGuidanceBridge.
697
- *
698
- * Connects the bridge to a ruvbot instance and attaches the guidance
699
- * control plane components. The bridge immediately begins intercepting
700
- * ruvbot events.
701
- *
702
- * @param ruvbotInstance - A ruvbot instance (from createRuvBot())
703
- * @param guidancePlane - A GuidanceControlPlane or individual components
704
- * @param config - Optional bridge configuration
705
- * @returns The connected RuvBotGuidanceBridge
706
- */
707
- export function createRuvBotBridge(ruvbotInstance, guidancePlane, config) {
708
- const bridge = new RuvBotGuidanceBridge(config);
709
- bridge.attachGuidance(guidancePlane);
710
- bridge.connect(ruvbotInstance);
711
- return bridge;
712
- }
713
- /**
714
- * Create an AIDefenceGate with optional configuration.
715
- *
716
- * The gate lazily initializes the underlying ruvbot AIDefence guard
717
- * on the first evaluation call.
718
- *
719
- * @param config - Optional gate configuration
720
- * @returns A new AIDefenceGate instance
721
- */
722
- export function createAIDefenceGate(config) {
723
- return new AIDefenceGate(config);
724
- }
725
- /**
726
- * Create a RuvBotMemoryAdapter with governance components.
727
- *
728
- * The adapter wraps ruvbot memory operations with MemoryWriteGate authority
729
- * checks and CoherenceScheduler tracking.
730
- *
731
- * @param memoryGate - The MemoryWriteGate for authority/rate/contradiction checks
732
- * @param coherenceScheduler - The CoherenceScheduler for drift tracking
733
- * @returns A new RuvBotMemoryAdapter instance
734
- */
735
- export function createRuvBotMemoryAdapter(memoryGate, coherenceScheduler) {
736
- return new RuvBotMemoryAdapter(memoryGate, coherenceScheduler);
737
- }
738
- //# sourceMappingURL=ruvbot-integration.js.map