swarmdo 1.4.8 → 1.6.0

package/v3/@swarmdo/cli/dist/src/transcript/search.d.ts

@@ -0,0 +1,39 @@
+/**
+ * search.ts — full-text search across Claude Code session transcripts.
+ *
+ * "Which session did I discuss X in?" — answered locally. Matches only what
+ * the humans and the model actually said (user/assistant messages; tool spam
+ * and system reminders are not part of the conversation record we search).
+ * All matching/snippeting/ranking is pure; the command layer streams files.
+ */
+import { type RawTranscriptLine } from './export.js';
+export interface SearchHit {
+    role: 'user' | 'assistant';
+    snippet: string;
+}
+export interface SessionMatch {
+    sessionId: string;
+    project: string;
+    mtimeMs: number;
+    hits: number;
+    snippets: SearchHit[];
+}
+/** Lowercased, deduped, non-empty terms. Throws on an effectively-empty query. */
+export declare function parseQuery(raw: string): string[];
+/** Case-insensitive AND across terms. */
+export declare function matchesQuery(text: string, terms: string[]): boolean;
+/** Window the text around the first term occurrence; single-line ellipsized. */
+export declare function makeSnippet(text: string, terms: string[], width?: number): string;
+/** Extract the searchable conversational text of one transcript line, or null. */
+export declare function searchableText(line: RawTranscriptLine): {
+    role: 'user' | 'assistant';
+    text: string;
+} | null;
+/** Search parsed lines of one session; returns hit count + top snippets. */
+export declare function searchLines(lines: RawTranscriptLine[], terms: string[], maxSnippets?: number): {
+    hits: number;
+    snippets: SearchHit[];
+};
+/** Rank: most hits first, then most recent. */
+export declare function rankMatches(matches: SessionMatch[]): SessionMatch[];
+//# sourceMappingURL=search.d.ts.map

package/v3/@swarmdo/cli/dist/src/transcript/search.js

@@ -0,0 +1,67 @@
+/**
+ * search.ts — full-text search across Claude Code session transcripts.
+ *
+ * "Which session did I discuss X in?" — answered locally. Matches only what
+ * the humans and the model actually said (user/assistant messages; tool spam
+ * and system reminders are not part of the conversation record we search).
+ * All matching/snippeting/ranking is pure; the command layer streams files.
+ */
+import { contentToText, cleanUserText } from './export.js';
+/** Lowercased, deduped, non-empty terms. Throws on an effectively-empty query. */
+export function parseQuery(raw) {
+    const terms = [...new Set(String(raw).toLowerCase().split(/\s+/).filter(Boolean))];
+    if (terms.length === 0)
+        throw new Error('empty search query');
+    return terms;
+}
+/** Case-insensitive AND across terms. */
+export function matchesQuery(text, terms) {
+    const lower = text.toLowerCase();
+    return terms.every((t) => lower.includes(t));
+}
+/** Window the text around the first term occurrence; single-line ellipsized. */
+export function makeSnippet(text, terms, width = 160) {
+    const flat = text.replace(/\s+/g, ' ').trim();
+    const lower = flat.toLowerCase();
+    let at = -1;
+    for (const t of terms) {
+        const i = lower.indexOf(t);
+        if (i !== -1 && (at === -1 || i < at))
+            at = i;
+    }
+    if (at === -1)
+        at = 0;
+    const start = Math.max(0, at - Math.floor(width / 3));
+    const end = Math.min(flat.length, start + width);
+    return `${start > 0 ? '…' : ''}${flat.slice(start, end)}${end < flat.length ? '…' : ''}`;
+}
+/** Extract the searchable conversational text of one transcript line, or null. */
+export function searchableText(line) {
+    const role = line.message?.role;
+    if (role !== 'user' && role !== 'assistant')
+        return null;
+    const text = contentToText(line.message?.content);
+    const cleaned = role === 'user' ? cleanUserText(text) : text;
+    if (!cleaned || !cleaned.trim())
+        return null;
+    return { role, text: cleaned };
+}
+/** Search parsed lines of one session; returns hit count + top snippets. */
+export function searchLines(lines, terms, maxSnippets = 3) {
+    let hits = 0;
+    const snippets = [];
+    for (const line of lines) {
+        const s = searchableText(line);
+        if (!s || !matchesQuery(s.text, terms))
+            continue;
+        hits++;
+        if (snippets.length < maxSnippets)
+            snippets.push({ role: s.role, snippet: makeSnippet(s.text, terms) });
+    }
+    return { hits, snippets };
+}
+/** Rank: most hits first, then most recent. */
+export function rankMatches(matches) {
+    return [...matches].sort((a, b) => b.hits - a.hits || b.mtimeMs - a.mtimeMs);
+}
+//# sourceMappingURL=search.js.map

package/v3/@swarmdo/cli/dist/src/usage/diff.d.ts

@@ -0,0 +1,69 @@
+/**
+ * diff.ts — compare Claude Code spend between two periods.
+ *
+ * The usage views show single windows; this is the compare layer: this week
+ * vs last, today vs yesterday, or any two explicit date ranges — totals,
+ * deltas, and the per-model movers. Pure: everything computes over the
+ * existing per-day aggregation rows, so tests need no transcripts.
+ */
+export interface DayTotals {
+    costUsd: number;
+    inputTokens: number;
+    outputTokens: number;
+    cacheReadTokens: number;
+    cacheWriteTokens: number;
+    totalTokens: number;
+}
+export interface DayRow {
+    /** YYYY-MM-DD (local) */
+    key: string;
+    totals: DayTotals;
+}
+export interface ModelRow {
+    key: string;
+    day: string;
+    totals: DayTotals;
+}
+export interface Period {
+    /** inclusive YYYY-MM-DD bounds */
+    from: string;
+    to: string;
+    label: string;
+}
+/** Built-in period pairs. `now` is a local YYYY-MM-DD anchor (injected). */
+export declare function resolvePeriodPair(kind: string, today: string): {
+    a: Period;
+    b: Period;
+};
+/** Parse an explicit "YYYY-MM-DD:YYYY-MM-DD" range. */
+export declare function parseRange(raw: string, label?: string): Period;
+/** Sum day rows falling inside a period (inclusive bounds, string compare). */
+export declare function sumPeriod(rows: DayRow[], p: Period): DayTotals;
+export interface MetricDelta {
+    a: number;
+    b: number;
+    delta: number;
+    /** delta / b; null when b === 0 (renders as "new") */
+    pct: number | null;
+}
+export declare function metricDelta(a: number, b: number): MetricDelta;
+export interface DiffReport {
+    a: Period;
+    b: Period;
+    cost: MetricDelta;
+    totalTokens: MetricDelta;
+    inputTokens: MetricDelta;
+    outputTokens: MetricDelta;
+    cacheReadTokens: MetricDelta;
+    activeDays: MetricDelta;
+}
+export declare function diffPeriods(rows: DayRow[], a: Period, b: Period): DiffReport;
+export interface ModelMover {
+    model: string;
+    cost: MetricDelta;
+}
+/** Per-model cost deltas sorted by |delta| desc. `modelDayRows` carries one
+ * row per (model, day) — the shape aggregateUsage(events,'model-day') style
+ * callers flatten to. */
+export declare function modelMovers(modelDayRows: ModelRow[], a: Period, b: Period, limit?: number): ModelMover[];
+//# sourceMappingURL=diff.d.ts.map

package/v3/@swarmdo/cli/dist/src/usage/diff.js

@@ -0,0 +1,112 @@
+/**
+ * diff.ts — compare Claude Code spend between two periods.
+ *
+ * The usage views show single windows; this is the compare layer: this week
+ * vs last, today vs yesterday, or any two explicit date ranges — totals,
+ * deltas, and the per-model movers. Pure: everything computes over the
+ * existing per-day aggregation rows, so tests need no transcripts.
+ */
+const DATE = /^\d{4}-\d{2}-\d{2}$/;
+function fmtLocal(d) {
+    const y = d.getFullYear();
+    const m = String(d.getMonth() + 1).padStart(2, '0');
+    const dd = String(d.getDate()).padStart(2, '0');
+    return `${y}-${m}-${dd}`;
+}
+function shiftDays(iso, days) {
+    const [y, m, d] = iso.split('-').map(Number);
+    const dt = new Date(y, m - 1, d + days);
+    return fmtLocal(dt);
+}
+/** Built-in period pairs. `now` is a local YYYY-MM-DD anchor (injected). */
+export function resolvePeriodPair(kind, today) {
+    if (!DATE.test(today))
+        throw new Error(`bad anchor date: ${today}`);
+    switch (kind) {
+        case 'day':
+            return {
+                a: { from: today, to: today, label: 'today' },
+                b: { from: shiftDays(today, -1), to: shiftDays(today, -1), label: 'yesterday' },
+            };
+        case 'week':
+            return {
+                a: { from: shiftDays(today, -6), to: today, label: 'last 7 days' },
+                b: { from: shiftDays(today, -13), to: shiftDays(today, -7), label: 'prior 7 days' },
+            };
+        case 'month': {
+            const [y, m] = today.split('-').map(Number);
+            const thisFrom = `${today.slice(0, 7)}-01`;
+            const prev = new Date(y, m - 2, 1);
+            const prevFrom = fmtLocal(prev);
+            const prevTo = fmtLocal(new Date(y, m - 1, 0)); // last day of previous month
+            return {
+                a: { from: thisFrom, to: today, label: today.slice(0, 7) },
+                b: { from: prevFrom, to: prevTo, label: prevFrom.slice(0, 7) },
+            };
+        }
+        default:
+            throw new Error(`unknown period kind "${kind}" (expected day|week|month)`);
+    }
+}
+/** Parse an explicit "YYYY-MM-DD:YYYY-MM-DD" range. */
+export function parseRange(raw, label) {
+    const [from, to] = String(raw).split(':');
+    if (!DATE.test(from ?? '') || !DATE.test(to ?? '')) {
+        throw new Error(`bad range "${raw}" (expected YYYY-MM-DD:YYYY-MM-DD)`);
+    }
+    if (from > to)
+        throw new Error(`range "${raw}" is reversed (from > to)`);
+    return { from, to, label: label ?? `${from}..${to}` };
+}
+const ZERO = { costUsd: 0, inputTokens: 0, outputTokens: 0, cacheReadTokens: 0, cacheWriteTokens: 0, totalTokens: 0 };
+function addTotals(a, b) {
+    return {
+        costUsd: a.costUsd + b.costUsd,
+        inputTokens: a.inputTokens + b.inputTokens,
+        outputTokens: a.outputTokens + b.outputTokens,
+        cacheReadTokens: a.cacheReadTokens + b.cacheReadTokens,
+        cacheWriteTokens: a.cacheWriteTokens + b.cacheWriteTokens,
+        totalTokens: a.totalTokens + b.totalTokens,
+    };
+}
+/** Sum day rows falling inside a period (inclusive bounds, string compare). */
+export function sumPeriod(rows, p) {
+    return rows.filter((r) => r.key >= p.from && r.key <= p.to).reduce((acc, r) => addTotals(acc, r.totals), { ...ZERO });
+}
+export function metricDelta(a, b) {
+    return { a, b, delta: a - b, pct: b === 0 ? (a === 0 ? 0 : null) : (a - b) / b };
+}
+export function diffPeriods(rows, a, b) {
+    const ta = sumPeriod(rows, a);
+    const tb = sumPeriod(rows, b);
+    const daysIn = (p) => rows.filter((r) => r.key >= p.from && r.key <= p.to && r.totals.totalTokens > 0).length;
+    return {
+        a, b,
+        cost: metricDelta(ta.costUsd, tb.costUsd),
+        totalTokens: metricDelta(ta.totalTokens, tb.totalTokens),
+        inputTokens: metricDelta(ta.inputTokens, tb.inputTokens),
+        outputTokens: metricDelta(ta.outputTokens, tb.outputTokens),
+        cacheReadTokens: metricDelta(ta.cacheReadTokens, tb.cacheReadTokens),
+        activeDays: metricDelta(daysIn(a), daysIn(b)),
+    };
+}
+/** Per-model cost deltas sorted by |delta| desc. `modelDayRows` carries one
+ * row per (model, day) — the shape aggregateUsage(events,'model-day') style
+ * callers flatten to. */
+export function modelMovers(modelDayRows, a, b, limit = 8) {
+    const per = new Map();
+    for (const r of modelDayRows) {
+        const slot = per.get(r.key) ?? { a: 0, b: 0 };
+        if (r.day >= a.from && r.day <= a.to)
+            slot.a += r.totals.costUsd;
+        if (r.day >= b.from && r.day <= b.to)
+            slot.b += r.totals.costUsd;
+        per.set(r.key, slot);
+    }
+    return [...per.entries()]
+        .map(([model, v]) => ({ model, cost: metricDelta(v.a, v.b) }))
+        .filter((m) => m.cost.a !== 0 || m.cost.b !== 0)
+        .sort((x, y) => Math.abs(y.cost.delta) - Math.abs(x.cost.delta))
+        .slice(0, limit);
+}
+//# sourceMappingURL=diff.js.map

package/v3/@swarmdo/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@swarmdo/cli",
-  "version": "1.4.8",
+  "version": "1.6.0",
   "type": "module",
   "description": "Swarmdo CLI - Enterprise AI agent orchestration with 60+ specialized agents, swarm coordination, MCP server, self-learning hooks, and vector memory for Claude Code",
   "main": "dist/src/index.js",
@@ -83,7 +83,7 @@
     "test:pattern-store": "npx tsx src/transfer/store/tests/standalone-test.ts",
     "postinstall": "node ./scripts/postinstall.cjs",
     "build:standalone": "node scripts/build-standalone.mjs",
-    "prepublishOnly": "node -e \"console.error('\\n@swarmdo/cli must be published from the self-contained staging dir (file:../ siblings do not ship from here):\\n\\n  npm run build && npm run build:standalone && npm publish dist-standalone/\\n'); process.exit(1)\""
+    "prepublishOnly": "node -e \"if (process.env.npm_command === 'publish') { console.error('\\n@swarmdo/cli must be published from the self-contained staging dir (file:../ siblings do not ship from here):\\n\\n  npm run build && npm run build:standalone && npm publish dist-standalone/\\n'); process.exit(1); } // pnpm runs prepublishOnly when packing local directory deps during install \u2014 that path must not fail\""
   },
   "devDependencies": {
     "@types/better-sqlite3": "^7.6.0",
@@ -117,8 +117,8 @@
     "@swarmvector/swarmllm": "file:../../@swarmvector/swarmllm",
     "@swarmvector/sona": "file:../../@swarmvector/sona",
     "@swarmvector/tiny-dancer": "file:../../@swarmvector/tiny-dancer",
-    "agentdb": "^3.0.0-alpha.17",
-    "agentic-flow": "^2.0.0",
+    "agentdb": "file:../../vendor/agentdb",
+    "agentic-flow": "file:../../vendor/agentic-flow",
     "better-sqlite3": "^12.9.0",
     "metaharness": "~0.2.6",
     "swarmvector": "file:../../vendor/swarmvector",

package/v3/@swarmdo/cli-core/dist/src/index.js

@@ -103,7 +103,7 @@ Storage:
 Programmatic use:
   import { JsonMemoryBackend, runMemoryCommand } from '@swarmdo/cli-core';
 
-Track progress: https://github.com/ruvnet/swarmdo/issues/1760`);
+Track progress: the upstream project (see NOTICE)`);
         process.exit(0);
     }
     console.error(`@swarmdo/cli-core: command "${args[0]}" not yet wired into cli-core.

package/v3/@swarmdo/hooks/dist/statusline/index.d.ts

@@ -5,7 +5,7 @@
  * Provides real-time progress, metrics, and status information.
  *
  * Format matches the working .claude/statusline.sh output:
- * ▊ Swarmdo V3 ● ruvnet  │  ⎇ v3  │  Opus 4.5
+ * ▊ Swarmdo V3 ● upstream  │  ⎇ v3  │  Opus 4.5
  * ─────────────────────────────────────────────────────
  * 🏗️  DDD Domains    [●●●●●]  5/5    ⚡ 1.0x → 2.49x-7.47x
  * 🤖 Swarm  ◉ [58/15]  👥 0    🟢 CVE 3/3    💾 22282MB    📂  47%    🧠  10%
@@ -76,7 +76,7 @@ export declare class StatuslineGenerator {
      * This avoids the multi-line collision bug where Claude Code's internal status
      * (written at absolute terminal coordinates ~cols 15-25) bleeds into conversation
      *
-     * @see https://github.com/ruvnet/claude-flow/issues/985
+     * @see the upstream project (see NOTICE)
      */
     generateSingleLine(): string;
     /**
@@ -84,7 +84,7 @@ export declare class StatuslineGenerator {
      * The collision zone is columns 15-25 on the SECOND-TO-LAST line
      * We restructure output so that line has minimal/no content in that zone
      *
-     * @see https://github.com/ruvnet/claude-flow/issues/985
+     * @see the upstream project (see NOTICE)
      */
     generateSafeStatusline(): string;
     /**

package/v3/@swarmdo/hooks/dist/statusline/index.js

@@ -5,7 +5,7 @@
  * Provides real-time progress, metrics, and status information.
  *
  * Format matches the working .claude/statusline.sh output:
- * ▊ Swarmdo V3 ● ruvnet  │  ⎇ v3  │  Opus 4.5
+ * ▊ Swarmdo V3 ● upstream  │  ⎇ v3  │  Opus 4.5
  * ─────────────────────────────────────────────────────
  * 🏗️  DDD Domains    [●●●●●]  5/5    ⚡ 1.0x → 2.49x-7.47x
  * 🤖 Swarm  ◉ [58/15]  👥 0    🟢 CVE 3/3    💾 22282MB    📂  47%    🧠  10%
@@ -189,7 +189,7 @@ export class StatuslineGenerator {
      * This avoids the multi-line collision bug where Claude Code's internal status
      * (written at absolute terminal coordinates ~cols 15-25) bleeds into conversation
      *
-     * @see https://github.com/ruvnet/claude-flow/issues/985
+     * @see the upstream project (see NOTICE)
      */
     generateSingleLine() {
         if (!this.config.enabled) {
@@ -212,7 +212,7 @@ export class StatuslineGenerator {
      * The collision zone is columns 15-25 on the SECOND-TO-LAST line
      * We restructure output so that line has minimal/no content in that zone
      *
-     * @see https://github.com/ruvnet/claude-flow/issues/985
+     * @see the upstream project (see NOTICE)
      */
     generateSafeStatusline() {
         if (!this.config.enabled) {

package/v3/@swarmdo/integration/dist/__tests__/agentic-flow-agent.test.js

@@ -55,7 +55,10 @@ describe('AgenticFlowAgent', () => {
             });
             expect(result.success).toBe(true);
             expect(result.taskId).toBe('task-1');
-            expect(result.duration).toBeGreaterThan(0);
+            // ≥0, not >0: a mocked task can complete inside one Date.now() tick on
+            // fast runners — the intent is "duration was measured", not "took time"
+            expect(result.duration).toBeGreaterThanOrEqual(0);
+            expect(typeof result.duration).toBe('number');
             expect(agent.metrics?.tasksCompleted).toBe(1);
         });
         it('should update status during task execution', async () => {

package/v3/@swarmdo/neural/dist/flash-attention.d.ts

@@ -12,7 +12,7 @@
  *
  * Target: 2-5x speedup on CPU vs naive attention
  *
- * Created with love by ruv.io
+ * Created with love by swarmdo.com
  */
 export interface FlashAttentionConfig {
     /** Block size for tiling (32-64 optimal for CPU L1 cache) */

package/v3/@swarmdo/neural/dist/flash-attention.js

@@ -12,7 +12,7 @@
  *
  * Target: 2-5x speedup on CPU vs naive attention
  *
- * Created with love by ruv.io
+ * Created with love by swarmdo.com
  */
 // ============================================================================
 // Flash Attention Implementation

package/v3/@swarmdo/plugin-agent-federation/dist/plugin.js

@@ -20,7 +20,7 @@ import { PolicyEngine } from './application/policy-engine.js';
 import { getTrustLevelLabel } from './domain/entities/trust-level.js';
 // ADR-104: real wire transport via agentic-flow loader pattern.
 // ADR-120: midstream-aware loader wraps the agentic-flow loader so
-// when `midstreamer` (ruvnet/midstream) ships its production QUIC
+// when `midstreamer` (upstream/midstream) ships its production QUIC
 // build (Step 1 of ADR-120) and operators opt in with
 // MIDSTREAMER_QUIC_NATIVE=1, the federation transport auto-upgrades.
 // Until then, the wrapper transparently defers to the agentic-flow

package/v3/@swarmdo/plugin-agent-federation/dist/transport/midstream-aware-loader.js

@@ -83,7 +83,7 @@ async function probeMidstreamerTransport(config) {
     try {
         // Lazy + indirect so bundlers don't try to resolve at compile time.
         // Prefer the `midstreamer/quic` sub-path (added in midstreamer@0.3.1
-        // per upstream ruvnet/midstream#81) which exposes
+        // per upstream upstream/midstream#81) which exposes
         // `loadQuicTransport` directly without WASM init. Fall back to the
         // root `midstreamer` package for older versions that put the QUIC
         // surface on the default export.
@@ -112,7 +112,7 @@ async function probeMidstreamerTransport(config) {
     // QuicMultistream as a counter-tracking stub with no real UDP, TLS,
     // or protocol — using it would silently downgrade the federation
     // path. midstreamer@0.3.1+ ships a real QUIC transport via
-    // `midstreamer/quic` (ADR-120, Step 1 — upstream PR ruvnet/midstream#81)
+    // `midstreamer/quic` (ADR-120, Step 1 — upstream PR upstream/midstream#81)
     // and reports `isNative() === true`. Older versions either expose
     // `isStub()` returning true or omit both probes.
     if (typeof surface.isStub === 'function' && surface.isStub()) {

package/v3/@swarmdo/providers/dist/swarmvector-provider.d.ts

@@ -34,7 +34,7 @@ export declare class SwarmVectorProvider extends BaseProvider {
     protected doHealthCheck(): Promise<HealthCheckResult>;
     /**
      * Build swarmLLM native API query format
-     * See: https://github.com/ruvnet/swarmvector/tree/main/examples/swarmLLM
+     * See: the upstream project (see NOTICE)
      */
     private buildSwarmvectorQuery;
     private buildRequest;

package/v3/@swarmdo/providers/dist/swarmvector-provider.js

@@ -410,7 +410,7 @@ export class SwarmVectorProvider extends BaseProvider {
     }
     /**
      * Build swarmLLM native API query format
-     * See: https://github.com/ruvnet/swarmvector/tree/main/examples/swarmLLM
+     * See: the upstream project (see NOTICE)
      */
     buildSwarmvectorQuery(request) {
         // swarmLLM uses simple query format, not OpenAI-compatible

package/v3/@swarmdo/security/dist/input-validator.d.ts

@@ -159,14 +159,14 @@ export declare const SpawnAgentSchema: z.ZodObject<{
     timeout: z.ZodOptional<z.ZodNumber>;
 }, "strip", z.ZodTypeAny, {
     type: "coder" | "reviewer" | "tester" | "planner" | "researcher" | "security-architect" | "security-auditor" | "memory-specialist" | "swarm-specialist" | "integration-architect" | "performance-engineer" | "core-architect" | "test-architect" | "queen-coordinator" | "project-coordinator";
-    id?: string | undefined;
     config?: Record<string, unknown> | undefined;
     timeout?: number | undefined;
+    id?: string | undefined;
 }, {
     type: "coder" | "reviewer" | "tester" | "planner" | "researcher" | "security-architect" | "security-auditor" | "memory-specialist" | "swarm-specialist" | "integration-architect" | "performance-engineer" | "core-architect" | "test-architect" | "queen-coordinator" | "project-coordinator";
-    id?: string | undefined;
     config?: Record<string, unknown> | undefined;
     timeout?: number | undefined;
+    id?: string | undefined;
 }>;
 /**
  * Task input schema
@@ -181,13 +181,13 @@ export declare const TaskInputSchema: z.ZodObject<{
     taskId: string;
     content: string;
     agentType: "coder" | "reviewer" | "tester" | "planner" | "researcher" | "security-architect" | "security-auditor" | "memory-specialist" | "swarm-specialist" | "integration-architect" | "performance-engineer" | "core-architect" | "test-architect" | "queen-coordinator" | "project-coordinator";
-    priority?: "low" | "medium" | "high" | "critical" | undefined;
+    priority?: "critical" | "high" | "medium" | "low" | undefined;
     metadata?: Record<string, unknown> | undefined;
 }, {
     taskId: string;
     content: string;
     agentType: "coder" | "reviewer" | "tester" | "planner" | "researcher" | "security-architect" | "security-auditor" | "memory-specialist" | "swarm-specialist" | "integration-architect" | "performance-engineer" | "core-architect" | "test-architect" | "queen-coordinator" | "project-coordinator";
-    priority?: "low" | "medium" | "high" | "critical" | undefined;
+    priority?: "critical" | "high" | "medium" | "low" | undefined;
     metadata?: Record<string, unknown> | undefined;
 }>;
 /**
@@ -234,16 +234,16 @@ export declare const ExecutorConfigSchema: z.ZodObject<{
     cwd: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>>;
     allowSudo: z.ZodDefault<z.ZodBoolean>;
 }, "strip", z.ZodTypeAny, {
-    timeout: number;
     allowedCommands: string[];
+    timeout: number;
     maxBuffer: number;
     allowSudo: boolean;
     blockedPatterns?: string[] | undefined;
     cwd?: string | undefined;
 }, {
     allowedCommands: string[];
-    timeout?: number | undefined;
     blockedPatterns?: string[] | undefined;
+    timeout?: number | undefined;
     maxBuffer?: number | undefined;
     cwd?: string | undefined;
     allowSudo?: boolean | undefined;

package/v3/@swarmdo/shared/dist/hooks/safety/git-commit.js

@@ -135,7 +135,7 @@ export class GitCommitHook {
         const result = await this.processCommitMessage(message, branchName);
         // Modify the command with the new message
         if (result.success && result.modifiedMessage !== message) {
-            const modifiedCommand = command.replace(/-m\s+["'][^"']+["']/, `-m "${result.modifiedMessage.replace(/"/g, '\\"')}"`);
+            const modifiedCommand = command.replace(/-m\s+["'][^"']+["']/, `-m "${result.modifiedMessage.replace(/\\/g, '\\\\').replace(/"/g, '\\"')}"`);
             return {
                 ...result,
                 data: {

package/v3/@swarmdo/shared/dist/mcp/transport/http.js

@@ -161,7 +161,14 @@ export class HttpTransport extends EventEmitter {
     setupMiddleware() {
         // Security headers
         this.app.use(helmet({
-            contentSecurityPolicy: false, // Allow for flexibility
+            // JSON-RPC API serves no HTML, so a strict CSP is inert for responses but
+            // satisfies js/insecure-helmet-configuration (disabling CSP is flagged).
+            contentSecurityPolicy: {
+                directives: {
+                    defaultSrc: ["'none'"],
+                    frameAncestors: ["'none'"],
+                },
+            },
         }));
         // CORS - Secure defaults (no wildcard in production)
         if (this.config.corsEnabled !== false) {

package/v3/vendor/agentdb/package.json

@@ -60,7 +60,6 @@
     "build:napi": "bash scripts/optimize-napi.sh",
     "build:wasm": "bash scripts/optimize-wasm.sh",
     "build:optimized": "npm run build:napi && npm run build:wasm && npm run build",
-    "postinstall": "node scripts/postinstall.cjs || true",
     "dev": "tsx src/cli/agentdb-cli.ts",
     "test": "vitest",
     "test:unit": "vitest --run",

package/v3/vendor/agentic-flow/package.json

@@ -27,7 +27,6 @@
     "./transport/loader": "./dist/transport/quic-loader.js"
   },
   "scripts": {
-    "postinstall": "node scripts/postinstall.js || true",
     "start": "node --enable-source-maps dist/index.js",
     "build": "(npm run build:wasm || true) && (tsc -p config/tsconfig.json --skipLibCheck || true) && mkdir -p dist/reasoningbank && (cp -r src/reasoningbank/prompts dist/reasoningbank/ 2>/dev/null || true) && (cp -r src/reasoningbank/config dist/reasoningbank/ 2>/dev/null || true)",
     "build:wasm": "cd ../reasoningbank && wasm-pack build --target bundler --out-dir pkg/bundler crates/reasoningbank-wasm && wasm-pack build --target web --out-dir pkg/web crates/reasoningbank-wasm && mkdir -p ../agentic-flow/wasm/reasoningbank && cp -r crates/reasoningbank-wasm/pkg/bundler/* ../agentic-flow/wasm/reasoningbank/ && cp -r crates/reasoningbank-wasm/pkg/web ../agentic-flow/wasm/reasoningbank/",

package/.claude/scheduled_tasks.lock

@@ -1 +0,0 @@
-{"sessionId":"1721b33b-8a0d-478b-b149-32452e9ed21e","pid":68057,"procStart":"Sun Jul  5 14:56:32 2026","acquiredAt":1783263800767}

package/v3/@swarmdo/plugin-iot-cognitum/dist/application/index.d.ts

@@ -1,2 +0,0 @@
-export { IoTCoordinator, type IoTCoordinatorConfig, type IoTCoordinatorCallbacks, } from './iot-coordinator.js';
-//# sourceMappingURL=index.d.ts.map

package/v3/@swarmdo/plugin-iot-cognitum/dist/application/index.js

@@ -1,2 +0,0 @@
-export { IoTCoordinator, } from './iot-coordinator.js';
-//# sourceMappingURL=index.js.map