* fix(security): ADR-165 Phase 1 — close all critical CVEs, refresh registry, add CI gate Closes ADR-165 Phase 1. Both workspaces pass `npm audit --audit-level=critical`. ## Before (2026-06-29) | Workspace | Critical | High | Moderate | Total | |-----------|----------|------|----------|-------| | Root | **1** | 6 | 31 | 38 | | v3 | **4** | 33 | 57 | 97 | ## After | Workspace | Critical | High | Moderate | Total | |-----------|----------|------|----------|-------| | Root | **0** | 0 | 31 | 31 | | v3 | **0** | 27 | 58 | 88 | All 5 critical advisories closed (vitest GHSA-5xrq, handlebars prototype-pollution, protobufjs constructor-pollution, plus 2 more in v3). 12 of 39 high advisories closed via overrides; the remaining 27 v3 highs are deeper transitive chains that would require breaking-change major bumps — flagged for ADR-165 Phase 2. ## Changes ### Root workspace overrides (package.json) - `vitest`: `^1.0.0` → `^3.2.6` (closes critical GHSA-5xrq CVSS 9.8) - `hono`: `>=4.11.4` → `>=4.12.25` (closes 6 hono advisories) - `undici`: `>=7.18.0` → `>=8.5.0` (closes 7 undici advisories — bumps the stale pin that ADR-165 flagged as still-in-vulnerable-range) - `vite`: `>=6.4.6` → `>=8.0.16` (closes 2 vite advisories) - NEW `@grpc/grpc-js`: `>=1.14.4` - NEW `form-data`: `>=4.0.6` - NEW `http-proxy-middleware`: `>=3.0.7` - `@hono/node-server`: `>=1.19.10` → `>=1.19.14` ### v3 workspace overrides (v3/package.json + pnpm.overrides) - `vitest`: `^4.0.16` → `^4.1.0` (and `@vitest/coverage-v8` matched) - Top-level + pnpm overrides: `handlebars: >=4.7.9`, `protobufjs: >=8.6.0` - 27 sub-package `package.json` updated to `vitest ^4.1.0` ### CVE registry refresh (v3/@claude-flow/security/src/CVE-REMEDIATION.ts) Rewritten from 5 stale Jan-2026 entries to 16 total: 15 fixed, 1 open (ADR165-OPEN-01 — PII pipeline wiring per ADR-164 §6.1 not yet on dispatch-layer). `SECURITY_SUMMARY` is now computed dynamically from the registry; `validateRemediation()` correctly returns `allFixed: false` with 1 issue. ADR-165 §5 flagged this as THE Phase 2 priority — now closed. ### New CI gate `.github/workflows/cve-audit.yml`: - `audit-root` — `npm audit --audit-level=critical` in root, blocking - `audit-v3` — same in v3, blocking - `audit-high-report` — warn-only summary on high-severity drift - Triggers: PR, push to main, daily cron ### ADR-165 §9 evidence ledger addendum Captures AFTER-remediation `npm audit --json` metadata for both workspaces. The diff between BEFORE (already in §9) and AFTER makes Phase 1 verifiable. Also CORRECTED one prior surprise in §9: the `validate-input.ts` in `mcp-tools/` is NOT a 9-line shim. It's 269 lines of real implementation. (That was an inaccurate findings note from the initial audit.) ### §7.3 research items resolved - `protobufjs` v3 chain confirmed gone after override pins - `handlebars` v3 chain confirmed not user-reachable on the workflow path (toolchain-only; override sufficient) - `validate-input.ts` confirmed real implementation, not a shim (registry entry corrected) - CORS surface check: no `cors()` / `app.use(cors` call sites — the hono CORS-wildcard advisory is not exploitable on the current server - ADR-164 §6.1 PII pipeline NOT wired in current agentbbs dispatch — recorded as ADR165-OPEN-01 (Phase 3 work) ## Gates (all PASS) - `npm audit --audit-level=critical` root: exit 0 (was non-zero) - `npm audit --audit-level=critical` v3: exit 0 (was non-zero) - vitest suites: 105/109 pass (4 skip-conditional — same as before) - ADR-112 audit: 352/352 tools with guidance - business-pods smoke: 11/11 PASS - agentbbs smoke: 8/8 PASS - agenticow smoke: 8/8 PASS - cli build: clean (tsc) ## Phase 2+ deferred The 27 v3 high-severity advisories that remain are transitive chains with no patched-in-range version. ADR-165 §6 Phase 2 picks these up after the `cve-watch.yml` automation in §6 lands (NEW PR — not in scope here). Co-Authored-By: RuFlo <ruv@ruv.net> Claude-Session: https://claude.ai/code/session_01WbBa4nccx5aGhXphoHxcni * chore(lock): regen v3/pnpm-lock.yaml after override updates (PR #2508 CI fix) PR #2508 added handlebars + protobufjs to v3 overrides + bumped vitest pin, but v3/pnpm-lock.yaml wasn't regenerated. CI surfaced ERR_PNPM_LOCKFILE_CONFIG_MISMATCH on every install step. Same pattern as the previous lockfile-drift fixes on PR #2500 and #2503. * fix(ci): cve-audit.yml jq-only + regen witness manifests for #1609 marker drift Two PR #2508 CI failures fixed: 1. Static-regression-guard tripped on cve-audit.yml line 52: the static YAML strict-parser sees `if high > 0:` inside the `run: |` block as a YAML block-mapping key indicator. Refactored all 3 inline-python blocks to use jq (preinstalled on ubuntu-latest) — no embedded `if x > 0:` lines, so the YAML guard passes. 2. Witness marker drift smoke flagged fix-marker #1609 — the Phase 1 vitest bump (4.0.16 → 4.1.0) drifted the cited marker string in v3/@claude-flow/aidefence/package.json. Updated `marker` field in all 3 platform manifests + `desc` to reference ADR-165 Phase 1, then re-signed via plugins/ruflo-core/scripts/witness/regen.mjs. Co-Authored-By: RuFlo <ruv@ruv.net>
@claude-flow/plugin-iot-cognitum
IoT Cognitum Seed device-agent bridge — treat every Seed as a Ruflo agent with hardware capabilities.
Hardware
This plugin requires a Cognitum Seed device. Get one at https://cognitum.one.
The Seed is an edge appliance with on-device vector store, Ed25519 cryptographic identity, OTA firmware updates, mesh networking, and a witness chain for provenance.
Default endpoints:
http://169.254.42.1— link-local USB-C (no auth, read-only + pair window)https://169.254.42.1:8443— LAN/HTTPS with bearer token (full access including writes)
Install + run
npx -y -p @claude-flow/plugin-iot-cognitum@latest cognitum-iot --help
Authentication via .env
Create a .env file in your project root (or any parent directory):
COGNITUM_SEED_TOKEN=your-bearer-token-here
# Optional overrides:
COGNITUM_SEED_ENDPOINT=https://169.254.42.1:8443 # default when token is set
IOT_FLEET_ID=my-fleet
IOT_ZONE_ID=zone-1
IOT_TLS_INSECURE=true # accept self-signed cert (default: true)
The bin walks up from CWD looking for .env, loads it without overwriting existing process.env vars, then:
- When
COGNITUM_SEED_TOKENis present → default endpoint switches tohttps://169.254.42.1:8443(LAN/HTTPS) and the token is passed as the bearer/pairing token onregister. - When no token → default endpoint stays at
http://169.254.42.1(USB-C link-local, read-only).
Token scope on Seed varies — read endpoints work with most tokens; store/ingest and some admin operations require a write-scoped token. See https://cognitum.one for token tier documentation.
Commands
| Command | Description |
|---|---|
cognitum-iot init |
Show plugin configuration |
cognitum-iot register [endpoint] |
Register a Seed device (defaults to http://169.254.42.1) |
cognitum-iot list |
List registered devices |
cognitum-iot status <device-id> |
Show device trust score, vectors, epoch |
cognitum-iot mesh <device-id> |
Show mesh network topology |
cognitum-iot witness <device-id> |
Show witness chain |
cognitum-iot witness verify <device-id> |
Verify witness chain integrity |
cognitum-iot query --device-id <id> --vector "[..]" |
k-NN search the on-device vector store |
cognitum-iot ingest --device-id <id> --vector "[..]" |
Ingest a vector (requires bearer auth) |
cognitum-iot pair --device-id <id> |
Pair (requires open pair window on device) |
cognitum-iot unpair --device-id <id> |
Unpair (requires bearer auth) |
cognitum-iot fleet create --fleet-id <id> --name <name> |
Create a fleet |
cognitum-iot fleet list |
List fleets |
cognitum-iot fleet add --fleet-id <fid> --device-id <did> |
Add device to fleet |
cognitum-iot fleet remove --fleet-id <fid> --device-id <did> |
Remove device from fleet |
cognitum-iot fleet delete --fleet-id <id> |
Delete a fleet |
cognitum-iot firmware list |
List firmware rollouts |
cognitum-iot firmware status <rollout-id> |
Rollout status |
cognitum-iot firmware deploy <fleet-id> --version <ver> |
Start an OTA rollout |
cognitum-iot firmware advance <rollout-id> |
Advance rollout stage |
cognitum-iot firmware rollback <rollout-id> |
Force rollback |
Programmatic use
import { IoTCognitumPlugin } from '@claude-flow/plugin-iot-cognitum';
const plugin = new IoTCognitumPlugin();
await plugin.initialize({ /* PluginContext */ });
const coordinator = plugin['coordinator'];
const device = await coordinator.registerDevice('http://169.254.42.1');
console.log(`Trust: ${device.trustLevel}, vectors: ${device.vectorStoreStats.totalVectors}`);
Tests
239 unit + integration tests, plus a chained-command live-device smoke harness at __tests__/integration/full-plugin-smoke.mjs. Run:
npm test # unit + SDK integration
SEED_ENDPOINT=http://169.254.42.1 \
node __tests__/integration/full-plugin-smoke.mjs # live device smoke
License
MIT — Claude Flow Team.
Cognitum Seed hardware: see https://cognitum.one for licensing and acquisition.