swarmdo 1.58.12 → 1.58.15

package/.claude/commands/sDo/security.md

@@ -0,0 +1,44 @@
+---
+description: Scan this project's security and refresh the statusline Security segment
+argument-hint: "[scan|full|cve|audit|report] (default: scan)"
+allowed-tools: Bash(npx swarmdo security:*), Bash(node v3/@swarmdo/cli/bin/cli.js security:*)
+---
+
+# /security — scan security posture + refresh the statusline
+
+Run the swarmdo security scanner and refresh the `Security` element of the
+statusline. The statusline reads the cached result from
+`.swarmdo/security/last-scan.json`; a scan rewrites it with a fresh `scannedAt`
+plus current counts, so the `Security ●…` indicator stops showing `STALE` and
+reflects reality (`●CLEAN` when clean, `●VULN` when critical/high are present).
+
+Resolve the swarmdo CLI as `npx swarmdo` if installed, else
+`node v3/@swarmdo/cli/bin/cli.js` (this repo). Call it `$CLI` below.
+
+## Input
+
+`$ARGUMENTS`
+
+## Behavior
+
+Pick the mode from the first argument (default `scan` when empty):
+
+- `scan` (default) — run `$CLI security scan` (standard depth).
+- `full` — run `$CLI security scan --depth full` for the complete finding list.
+- `cve` — run `$CLI security cve` (dependency-CVE audit only).
+- `audit` — run `$CLI security audit`.
+- `report` — run `$CLI security report` (summarize the last scan, no re-scan).
+
+Then:
+
+1. Report the summary counts — critical / high / medium / total — from the
+   scanner output.
+2. Confirm the statusline `Security` element refreshed: it now shows `●CLEAN`
+   (no critical/high) or `●VULN` (critical/high present) and no longer `●STALE`.
+   The change lands on the next statusline render — no regeneration needed.
+3. If any critical or high findings exist, list the top few (severity, package,
+   short description) and point at `$CLI security scan --depth full` for the rest.
+
+`.swarmdo/security/last-scan.json` is per-project, so run this in each project
+whose statusline you want current. This command only scans and reports — it does
+not modify code or dependencies.

package/README.md

@@ -2,7 +2,7 @@
 
 [![swarmdo](swarmdo/assets/brand/logo-full.svg)](https://swarmdo.com)
 
-[![npm version (swarmdo)](https://img.shields.io/badge/npx%20swarmdo-v1.58.12-cb3837?style=for-the-badge&logo=npm&logoColor=white)](https://github.com/SwarmDo/swarmdo/releases)
+[![npm version (swarmdo)](https://img.shields.io/badge/npx%20swarmdo-v1.58.15-cb3837?style=for-the-badge&logo=npm&logoColor=white)](https://github.com/SwarmDo/swarmdo/releases)
 [![MIT License](https://img.shields.io/badge/License-MIT-yellow?style=for-the-badge)](https://github.com/SwarmDo/swarmdo/blob/main/LICENSE)
 [![Website](https://img.shields.io/badge/swarmdo.com-e2a33c?style=for-the-badge&logoColor=black)](https://swarmdo.com)
 [![Star on GitHub](https://img.shields.io/github/stars/SwarmDo/swarmdo?style=for-the-badge&logo=github&color=gold)](https://github.com/SwarmDo/swarmdo)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "swarmdo",
-  "version": "1.58.12",
+  "version": "1.58.15",
   "description": "Swarmdo - Enterprise AI agent orchestration for Claude Code. Deploy 60+ specialized agents in coordinated swarms with self-learning, fault-tolerant consensus, vector memory, and MCP integration",
   "main": "dist/index.js",
   "type": "module",

package/v3/@swarmdo/cli/.claude/commands/sDo/security.md

@@ -0,0 +1,44 @@
+---
+description: Scan this project's security and refresh the statusline Security segment
+argument-hint: "[scan|full|cve|audit|report] (default: scan)"
+allowed-tools: Bash(npx swarmdo security:*), Bash(node v3/@swarmdo/cli/bin/cli.js security:*)
+---
+
+# /security — scan security posture + refresh the statusline
+
+Run the swarmdo security scanner and refresh the `Security` element of the
+statusline. The statusline reads the cached result from
+`.swarmdo/security/last-scan.json`; a scan rewrites it with a fresh `scannedAt`
+plus current counts, so the `Security ●…` indicator stops showing `STALE` and
+reflects reality (`●CLEAN` when clean, `●VULN` when critical/high are present).
+
+Resolve the swarmdo CLI as `npx swarmdo` if installed, else
+`node v3/@swarmdo/cli/bin/cli.js` (this repo). Call it `$CLI` below.
+
+## Input
+
+`$ARGUMENTS`
+
+## Behavior
+
+Pick the mode from the first argument (default `scan` when empty):
+
+- `scan` (default) — run `$CLI security scan` (standard depth).
+- `full` — run `$CLI security scan --depth full` for the complete finding list.
+- `cve` — run `$CLI security cve` (dependency-CVE audit only).
+- `audit` — run `$CLI security audit`.
+- `report` — run `$CLI security report` (summarize the last scan, no re-scan).
+
+Then:
+
+1. Report the summary counts — critical / high / medium / total — from the
+   scanner output.
+2. Confirm the statusline `Security` element refreshed: it now shows `●CLEAN`
+   (no critical/high) or `●VULN` (critical/high present) and no longer `●STALE`.
+   The change lands on the next statusline render — no regeneration needed.
+3. If any critical or high findings exist, list the top few (severity, package,
+   short description) and point at `$CLI security scan --depth full` for the rest.
+
+`.swarmdo/security/last-scan.json` is per-project, so run this in each project
+whose statusline you want current. This command only scans and reports — it does
+not modify code or dependencies.

package/v3/@swarmdo/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@swarmdo/cli",
-  "version": "1.58.12",
+  "version": "1.58.15",
   "type": "module",
   "description": "Swarmdo CLI - Enterprise AI agent orchestration with 60+ specialized agents, swarm coordination, MCP server, self-learning hooks, and vector memory for Claude Code",
   "main": "dist/src/index.js",