* fix(release): #2151 — three-way version lockstep + CI guard
Verification run found `npx ruflo@latest --version` printing v3.10.1 while
the ruflo wrapper itself is at 3.10.2. Root cause: when v3.10.2 shipped,
@claude-flow/cli and the claude-flow umbrella stayed at 3.10.1, so the
wrapper pulled the older CLI which then printed its own (older) version.
Fix:
- Bump @claude-flow/cli, claude-flow umbrella, ruflo to 3.10.3
- Pin ruflo's "@claude-flow/cli" dep to "^3.10.3"
Guard:
- New scripts/audit-umbrella-version-lockstep.mjs asserts the three
package.json versions are identical, and that ruflo's dep range
covers the cli's actual version
- Wired into v3-ci.yml `wrapper-dep-ranges-audit` job
CLAUDE.md "Publishing Rules" already required lockstep — this audit
enforces it so drift can't reach another release.
Closes#2151 (mismatch part). Cold-cache timeout (primary observation
in #2151) remains tracked under #1760 / ADR-100 cli-core split.
Co-Authored-By: RuFlo <ruv@ruv.net>
* chore(ci): retrigger CI for #2151 lockstep PR
Co-Authored-By: RuFlo <ruv@ruv.net>
rUv