swarmdo 1.58.23 → 1.58.24

package/README.md

@@ -2,7 +2,7 @@
 
 [![swarmdo](swarmdo/assets/brand/logo-full.svg)](https://swarmdo.com)
 
-[![npm version (swarmdo)](https://img.shields.io/badge/npx%20swarmdo-v1.58.23-cb3837?style=for-the-badge&logo=npm&logoColor=white)](https://github.com/SwarmDo/swarmdo/releases)
+[![npm version (swarmdo)](https://img.shields.io/npm/v/swarmdo?style=for-the-badge&logo=npm&logoColor=white&label=npx%20swarmdo&color=cb3837)](https://github.com/SwarmDo/swarmdo/releases)
 [![MIT License](https://img.shields.io/badge/License-MIT-yellow?style=for-the-badge)](https://github.com/SwarmDo/swarmdo/blob/main/LICENSE)
 [![Website](https://img.shields.io/badge/swarmdo.com-e2a33c?style=for-the-badge&logoColor=black)](https://swarmdo.com)
 [![Star on GitHub](https://img.shields.io/github/stars/SwarmDo/swarmdo?style=for-the-badge&logo=github&color=gold)](https://github.com/SwarmDo/swarmdo)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "swarmdo",
-  "version": "1.58.23",
+  "version": "1.58.24",
   "description": "Swarmdo - Enterprise AI agent orchestration for Claude Code. Deploy 60+ specialized agents in coordinated swarms with self-learning, fault-tolerant consensus, vector memory, and MCP integration",
   "main": "dist/index.js",
   "type": "module",

package/v3/@swarmdo/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@swarmdo/cli",
-  "version": "1.58.23",
+  "version": "1.58.24",
   "type": "module",
   "description": "Swarmdo CLI - Enterprise AI agent orchestration with 60+ specialized agents, swarm coordination, MCP server, self-learning hooks, and vector memory for Claude Code",
   "main": "dist/src/index.js",

package/v3/@swarmdo/cli-core/dist/src/index.js

@@ -103,7 +103,7 @@ Storage:
 Programmatic use:
   import { JsonMemoryBackend, runMemoryCommand } from '@swarmdo/cli-core';
 
-Track progress: https://github.com/ruvnet/swarmdo/issues/1760`);
+Track progress: the upstream project (see NOTICE)`);
         process.exit(0);
     }
     console.error(`@swarmdo/cli-core: command "${args[0]}" not yet wired into cli-core.

package/v3/@swarmdo/hooks/dist/statusline/index.d.ts

@@ -5,7 +5,7 @@
  * Provides real-time progress, metrics, and status information.
  *
  * Format matches the working .claude/statusline.sh output:
- * ▊ Swarmdo V3 ● ruvnet  │  ⎇ v3  │  Opus 4.5
+ * ▊ Swarmdo V3 ● upstream  │  ⎇ v3  │  Opus 4.5
  * ─────────────────────────────────────────────────────
  * 🏗️  DDD Domains    [●●●●●]  5/5    ⚡ 1.0x → 2.49x-7.47x
  * 🤖 Swarm  ◉ [58/15]  👥 0    🟢 CVE 3/3    💾 22282MB    📂  47%    🧠  10%
@@ -76,7 +76,7 @@ export declare class StatuslineGenerator {
      * This avoids the multi-line collision bug where Claude Code's internal status
      * (written at absolute terminal coordinates ~cols 15-25) bleeds into conversation
      *
-     * @see https://github.com/ruvnet/claude-flow/issues/985
+     * @see the upstream project (see NOTICE)
      */
     generateSingleLine(): string;
     /**
@@ -84,7 +84,7 @@ export declare class StatuslineGenerator {
      * The collision zone is columns 15-25 on the SECOND-TO-LAST line
      * We restructure output so that line has minimal/no content in that zone
      *
-     * @see https://github.com/ruvnet/claude-flow/issues/985
+     * @see the upstream project (see NOTICE)
      */
     generateSafeStatusline(): string;
     /**

package/v3/@swarmdo/hooks/dist/statusline/index.js

@@ -5,7 +5,7 @@
  * Provides real-time progress, metrics, and status information.
  *
  * Format matches the working .claude/statusline.sh output:
- * ▊ Swarmdo V3 ● ruvnet  │  ⎇ v3  │  Opus 4.5
+ * ▊ Swarmdo V3 ● upstream  │  ⎇ v3  │  Opus 4.5
  * ─────────────────────────────────────────────────────
  * 🏗️  DDD Domains    [●●●●●]  5/5    ⚡ 1.0x → 2.49x-7.47x
  * 🤖 Swarm  ◉ [58/15]  👥 0    🟢 CVE 3/3    💾 22282MB    📂  47%    🧠  10%
@@ -189,7 +189,7 @@ export class StatuslineGenerator {
      * This avoids the multi-line collision bug where Claude Code's internal status
      * (written at absolute terminal coordinates ~cols 15-25) bleeds into conversation
      *
-     * @see https://github.com/ruvnet/claude-flow/issues/985
+     * @see the upstream project (see NOTICE)
      */
     generateSingleLine() {
         if (!this.config.enabled) {
@@ -212,7 +212,7 @@ export class StatuslineGenerator {
      * The collision zone is columns 15-25 on the SECOND-TO-LAST line
      * We restructure output so that line has minimal/no content in that zone
      *
-     * @see https://github.com/ruvnet/claude-flow/issues/985
+     * @see the upstream project (see NOTICE)
      */
     generateSafeStatusline() {
         if (!this.config.enabled) {

package/v3/@swarmdo/integration/dist/__tests__/agentic-flow-agent.test.js

@@ -55,7 +55,10 @@ describe('AgenticFlowAgent', () => {
             });
             expect(result.success).toBe(true);
             expect(result.taskId).toBe('task-1');
-            expect(result.duration).toBeGreaterThan(0);
+            // ≥0, not >0: a mocked task can complete inside one Date.now() tick on
+            // fast runners — the intent is "duration was measured", not "took time"
+            expect(result.duration).toBeGreaterThanOrEqual(0);
+            expect(typeof result.duration).toBe('number');
             expect(agent.metrics?.tasksCompleted).toBe(1);
         });
         it('should update status during task execution', async () => {

package/v3/@swarmdo/neural/dist/flash-attention.d.ts

@@ -12,7 +12,7 @@
  *
  * Target: 2-5x speedup on CPU vs naive attention
  *
- * Created with love by ruv.io
+ * Created with love by swarmdo.com
  */
 export interface FlashAttentionConfig {
     /** Block size for tiling (32-64 optimal for CPU L1 cache) */

package/v3/@swarmdo/neural/dist/flash-attention.js

@@ -12,7 +12,7 @@
  *
  * Target: 2-5x speedup on CPU vs naive attention
  *
- * Created with love by ruv.io
+ * Created with love by swarmdo.com
  */
 // ============================================================================
 // Flash Attention Implementation

package/v3/@swarmdo/plugin-agent-federation/dist/plugin.js

@@ -20,7 +20,7 @@ import { PolicyEngine } from './application/policy-engine.js';
 import { getTrustLevelLabel } from './domain/entities/trust-level.js';
 // ADR-104: real wire transport via agentic-flow loader pattern.
 // ADR-120: midstream-aware loader wraps the agentic-flow loader so
-// when `midstreamer` (ruvnet/midstream) ships its production QUIC
+// when `midstreamer` (upstream/midstream) ships its production QUIC
 // build (Step 1 of ADR-120) and operators opt in with
 // MIDSTREAMER_QUIC_NATIVE=1, the federation transport auto-upgrades.
 // Until then, the wrapper transparently defers to the agentic-flow

package/v3/@swarmdo/plugin-agent-federation/dist/transport/midstream-aware-loader.js

@@ -83,7 +83,7 @@ async function probeMidstreamerTransport(config) {
     try {
         // Lazy + indirect so bundlers don't try to resolve at compile time.
         // Prefer the `midstreamer/quic` sub-path (added in midstreamer@0.3.1
-        // per upstream ruvnet/midstream#81) which exposes
+        // per upstream upstream/midstream#81) which exposes
         // `loadQuicTransport` directly without WASM init. Fall back to the
         // root `midstreamer` package for older versions that put the QUIC
         // surface on the default export.
@@ -112,7 +112,7 @@ async function probeMidstreamerTransport(config) {
     // QuicMultistream as a counter-tracking stub with no real UDP, TLS,
     // or protocol — using it would silently downgrade the federation
     // path. midstreamer@0.3.1+ ships a real QUIC transport via
-    // `midstreamer/quic` (ADR-120, Step 1 — upstream PR ruvnet/midstream#81)
+    // `midstreamer/quic` (ADR-120, Step 1 — upstream PR upstream/midstream#81)
     // and reports `isNative() === true`. Older versions either expose
     // `isStub()` returning true or omit both probes.
     if (typeof surface.isStub === 'function' && surface.isStub()) {

package/v3/@swarmdo/providers/dist/swarmvector-provider.d.ts

@@ -34,7 +34,7 @@ export declare class SwarmVectorProvider extends BaseProvider {
     protected doHealthCheck(): Promise<HealthCheckResult>;
     /**
      * Build swarmLLM native API query format
-     * See: https://github.com/ruvnet/swarmvector/tree/main/examples/swarmLLM
+     * See: the upstream project (see NOTICE)
      */
     private buildSwarmvectorQuery;
     private buildRequest;

package/v3/@swarmdo/providers/dist/swarmvector-provider.js

@@ -410,7 +410,7 @@ export class SwarmVectorProvider extends BaseProvider {
     }
     /**
      * Build swarmLLM native API query format
-     * See: https://github.com/ruvnet/swarmvector/tree/main/examples/swarmLLM
+     * See: the upstream project (see NOTICE)
      */
     buildSwarmvectorQuery(request) {
         // swarmLLM uses simple query format, not OpenAI-compatible

package/v3/@swarmdo/security/dist/input-validator.d.ts

@@ -159,14 +159,14 @@ export declare const SpawnAgentSchema: z.ZodObject<{
     timeout: z.ZodOptional<z.ZodNumber>;
 }, "strip", z.ZodTypeAny, {
     type: "coder" | "reviewer" | "tester" | "planner" | "researcher" | "security-architect" | "security-auditor" | "memory-specialist" | "swarm-specialist" | "integration-architect" | "performance-engineer" | "core-architect" | "test-architect" | "queen-coordinator" | "project-coordinator";
-    id?: string | undefined;
     config?: Record<string, unknown> | undefined;
     timeout?: number | undefined;
+    id?: string | undefined;
 }, {
     type: "coder" | "reviewer" | "tester" | "planner" | "researcher" | "security-architect" | "security-auditor" | "memory-specialist" | "swarm-specialist" | "integration-architect" | "performance-engineer" | "core-architect" | "test-architect" | "queen-coordinator" | "project-coordinator";
-    id?: string | undefined;
     config?: Record<string, unknown> | undefined;
     timeout?: number | undefined;
+    id?: string | undefined;
 }>;
 /**
  * Task input schema
@@ -181,13 +181,13 @@ export declare const TaskInputSchema: z.ZodObject<{
     taskId: string;
     content: string;
     agentType: "coder" | "reviewer" | "tester" | "planner" | "researcher" | "security-architect" | "security-auditor" | "memory-specialist" | "swarm-specialist" | "integration-architect" | "performance-engineer" | "core-architect" | "test-architect" | "queen-coordinator" | "project-coordinator";
-    priority?: "low" | "medium" | "high" | "critical" | undefined;
+    priority?: "critical" | "high" | "medium" | "low" | undefined;
     metadata?: Record<string, unknown> | undefined;
 }, {
     taskId: string;
     content: string;
     agentType: "coder" | "reviewer" | "tester" | "planner" | "researcher" | "security-architect" | "security-auditor" | "memory-specialist" | "swarm-specialist" | "integration-architect" | "performance-engineer" | "core-architect" | "test-architect" | "queen-coordinator" | "project-coordinator";
-    priority?: "low" | "medium" | "high" | "critical" | undefined;
+    priority?: "critical" | "high" | "medium" | "low" | undefined;
     metadata?: Record<string, unknown> | undefined;
 }>;
 /**
@@ -234,16 +234,16 @@ export declare const ExecutorConfigSchema: z.ZodObject<{
     cwd: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>>;
     allowSudo: z.ZodDefault<z.ZodBoolean>;
 }, "strip", z.ZodTypeAny, {
-    timeout: number;
     allowedCommands: string[];
+    timeout: number;
     maxBuffer: number;
     allowSudo: boolean;
     blockedPatterns?: string[] | undefined;
     cwd?: string | undefined;
 }, {
     allowedCommands: string[];
-    timeout?: number | undefined;
     blockedPatterns?: string[] | undefined;
+    timeout?: number | undefined;
     maxBuffer?: number | undefined;
     cwd?: string | undefined;
     allowSudo?: boolean | undefined;

package/v3/@swarmdo/shared/dist/hooks/safety/git-commit.js

@@ -135,7 +135,7 @@ export class GitCommitHook {
         const result = await this.processCommitMessage(message, branchName);
         // Modify the command with the new message
         if (result.success && result.modifiedMessage !== message) {
-            const modifiedCommand = command.replace(/-m\s+["'][^"']+["']/, `-m "${result.modifiedMessage.replace(/"/g, '\\"')}"`);
+            const modifiedCommand = command.replace(/-m\s+["'][^"']+["']/, `-m "${result.modifiedMessage.replace(/\\/g, '\\\\').replace(/"/g, '\\"')}"`);
             return {
                 ...result,
                 data: {

package/v3/@swarmdo/shared/dist/mcp/transport/http.js

@@ -161,7 +161,14 @@ export class HttpTransport extends EventEmitter {
     setupMiddleware() {
         // Security headers
         this.app.use(helmet({
-            contentSecurityPolicy: false, // Allow for flexibility
+            // JSON-RPC API serves no HTML, so a strict CSP is inert for responses but
+            // satisfies js/insecure-helmet-configuration (disabling CSP is flagged).
+            contentSecurityPolicy: {
+                directives: {
+                    defaultSrc: ["'none'"],
+                    frameAncestors: ["'none'"],
+                },
+            },
         }));
         // CORS - Secure defaults (no wildcard in production)
         if (this.config.corsEnabled !== false) {

package/.claude/settings.local.json

@@ -1,7 +0,0 @@
-{
-  "permissions": {
-    "allow": [
-      "Bash(gh run *)"
-    ]
-  }
-}

package/v3/@swarmdo/plugin-iot-cognitum/dist/application/index.d.ts

@@ -1,2 +0,0 @@
-export { IoTCoordinator, type IoTCoordinatorConfig, type IoTCoordinatorCallbacks, } from './iot-coordinator.js';
-//# sourceMappingURL=index.d.ts.map

package/v3/@swarmdo/plugin-iot-cognitum/dist/application/index.js

@@ -1,2 +0,0 @@
-export { IoTCoordinator, } from './iot-coordinator.js';
-//# sourceMappingURL=index.js.map

package/v3/@swarmdo/plugin-iot-cognitum/dist/application/iot-coordinator.d.ts

@@ -1,138 +0,0 @@
-import type { WitnessChain, CustodyEpoch } from '@cognitum-one/sdk/seed';
-import type { StoreQueryResult, IngestResult, StoreHealthStatus } from '../domain/services/telemetry-service.js';
-import type { MeshTopology } from '../domain/services/mesh-service.js';
-import type { TelemetryBaseline, AnomalyDetectionConfig } from '../domain/services/anomaly-detection-service.js';
-import type { CreateFleetOptions, FleetSummary } from '../domain/services/fleet-topology-service.js';
-import type { FirmwareRollout } from '../domain/services/firmware-orchestration-service.js';
-import type { WitnessVerificationResult } from '../domain/services/witness-verification-service.js';
-import type { SONAClient } from '../domain/services/sona-integration-service.js';
-import type { TelemetryRepository } from '../domain/repositories/telemetry-repository.js';
-import type { DeviceAgent, DeviceTrustLevel, TelemetryReading, AnomalyDetection, DeviceFleet, FleetTopology, FirmwarePolicy } from '../domain/entities/index.js';
-import type { DeviceRepository, TrustHistoryRepository, FleetRepository } from '../domain/repositories/index.js';
-export interface IoTCoordinatorConfig {
-    /** Fleet ID assigned to newly registered devices. */
-    defaultFleetId: string;
-    /** IEC 62443 security zone assigned to newly registered devices. */
-    defaultZoneId: string;
-    /** TLS defaults forwarded to the underlying SeedClientFactory. */
-    defaultTls?: {
-        insecure?: boolean;
-        ca?: string;
-    };
-    /** Active health-probe interval (ms) for each SeedClient. */
-    healthInterval?: number;
-    /** Optional device persistence repository. */
-    deviceRepository?: DeviceRepository;
-    /** Optional trust history repository. */
-    trustHistoryRepository?: TrustHistoryRepository;
-    /** Anomaly detection configuration. */
-    anomalyDetection?: Partial<AnomalyDetectionConfig>;
-    /** Optional fleet persistence repository. */
-    fleetRepository?: FleetRepository;
-    /** Optional SONA neural learning client. */
-    sonaClient?: SONAClient;
-    /** Optional HNSW-indexed telemetry repository. */
-    telemetryRepository?: TelemetryRepository;
-}
-export interface IoTCoordinatorCallbacks {
-    onDeviceRegistered?: (device: DeviceAgent) => void;
-    onTrustChange?: (deviceId: string, oldLevel: DeviceTrustLevel, newLevel: DeviceTrustLevel) => void;
-}
-/**
- * Application-layer coordinator that wires domain services to the
- * Cognitum Seed SDK transport. Every public method resolves a
- * {@link SeedClient} from the internal registry and delegates to the
- * appropriate domain service.
- */
-export declare class IoTCoordinator {
-    private readonly factory;
-    private readonly devices;
-    private readonly lifecycle;
-    private readonly telemetry;
-    private readonly mesh;
-    private readonly anomalyDetection;
-    private readonly ingestion;
-    private readonly fleet;
-    private readonly firmware;
-    private readonly witnessVerification;
-    private readonly sona;
-    private readonly telemetryRepo?;
-    private readonly config;
-    private readonly deviceRepo?;
-    private readonly trustRepo?;
-    constructor(config: IoTCoordinatorConfig, callbacks?: IoTCoordinatorCallbacks);
-    /**
-     * Register a Seed device by its HTTP endpoint. Creates a
-     * {@link SeedClient}, fetches status and identity from the real
-     * hardware, and returns a fully populated {@link DeviceAgent}.
-     */
-    registerDevice(endpoint: string, pairingToken?: string): Promise<DeviceAgent>;
-    /**
-     * Refresh a device's state from the real hardware and recalculate
-     * its trust score.
-     */
-    getDeviceStatus(deviceId: string): Promise<DeviceAgent>;
-    /** Pair a registered device, promoting its trust level. */
-    pairDevice(deviceId: string, clientName: string): Promise<DeviceAgent>;
-    /** Unpair a registered device, demoting its trust level. */
-    unpairDevice(deviceId: string): Promise<DeviceAgent>;
-    /** Run a k-NN query against a device's on-board vector store. */
-    queryDeviceVectors(deviceId: string, vector: number[], k: number): Promise<StoreQueryResult>;
-    /** Ingest raw vectors into a device's vector store. */
-    ingestDeviceTelemetry(deviceId: string, vectors: Array<{
-        values: number[];
-        metadata?: Record<string, unknown>;
-    }>): Promise<IngestResult>;
-    /** Retrieve vector store health metrics for a device. */
-    getDeviceStoreStatus(deviceId: string): Promise<StoreHealthStatus>;
-    /** Get the aggregated mesh topology snapshot for a device. */
-    getDeviceMeshTopology(deviceId: string): Promise<MeshTopology>;
-    /** Retrieve the full witness chain from a device. */
-    getDeviceWitnessChain(deviceId: string): Promise<WitnessChain>;
-    /** Retrieve the current custody epoch from a device. */
-    getDeviceCustodyEpoch(deviceId: string): Promise<CustodyEpoch>;
-    /** Verify witness chain integrity for a device. */
-    verifyWitnessChain(deviceId: string): Promise<WitnessVerificationResult>;
-    /** Detect anomalies in a batch of telemetry readings for a device. */
-    detectAnomalies(deviceId: string, readings: TelemetryReading[]): {
-        anomalies: AnomalyDetection[];
-        total: number;
-        anomalous: number;
-    };
-    /** Compute a telemetry baseline for a device from readings. */
-    computeBaseline(deviceId: string, readings: TelemetryReading[]): TelemetryBaseline;
-    /** Get the current baseline for a device, if computed. */
-    getBaseline(deviceId: string): TelemetryBaseline | undefined;
-    createFirmwareRollout(fleetId: string, firmwareVersion: string): Promise<FirmwareRollout>;
-    advanceFirmwareRollout(rolloutId: string): Promise<FirmwareRollout>;
-    rollbackFirmwareRollout(rolloutId: string): FirmwareRollout;
-    getFirmwareRollout(rolloutId: string): FirmwareRollout;
-    listFirmwareRollouts(fleetId?: string): FirmwareRollout[];
-    createFleet(options: CreateFleetOptions): Promise<DeviceFleet>;
-    getFleet(fleetId: string): Promise<DeviceFleet>;
-    listFleets(): Promise<FleetSummary[]>;
-    addDeviceToFleet(fleetId: string, deviceId: string): Promise<DeviceFleet>;
-    removeDeviceFromFleet(fleetId: string, deviceId: string): Promise<DeviceFleet>;
-    updateFleetTopology(fleetId: string, topology: FleetTopology): Promise<DeviceFleet>;
-    updateFleetFirmwarePolicy(fleetId: string, policy: Partial<FirmwarePolicy>): Promise<DeviceFleet>;
-    deleteFleet(fleetId: string): Promise<void>;
-    /** List all registered device agents. */
-    listDevices(): DeviceAgent[];
-    /** Remove a device from the coordinator and close its SDK client. */
-    removeDevice(deviceId: string): Promise<void>;
-    /** Shut down all SDK clients and clear internal state. */
-    shutdown(): Promise<void>;
-    /** Health snapshot of the coordinator. */
-    getStatus(): {
-        healthy: boolean;
-        deviceCount: number;
-        devices: DeviceAgent[];
-    };
-    /**
-     * Resolve a SeedClient by device ID (or temporary endpoint key).
-     * Throws when the device has not been registered.
-     */
-    private resolveClient;
-    private requireEntry;
-}
-//# sourceMappingURL=iot-coordinator.d.ts.map