mirror of
https://github.com/ruvnet/ruflo.git
synced 2026-09-14 14:01:28 +08:00
402b701a9d
* fix(security): ADR-165 Phase 1 — close all critical CVEs, refresh registry, add CI gate Closes ADR-165 Phase 1. Both workspaces pass `npm audit --audit-level=critical`. ## Before (2026-06-29) | Workspace | Critical | High | Moderate | Total | |-----------|----------|------|----------|-------| | Root | **1** | 6 | 31 | 38 | | v3 | **4** | 33 | 57 | 97 | ## After | Workspace | Critical | High | Moderate | Total | |-----------|----------|------|----------|-------| | Root | **0** | 0 | 31 | 31 | | v3 | **0** | 27 | 58 | 88 | All 5 critical advisories closed (vitest GHSA-5xrq, handlebars prototype-pollution, protobufjs constructor-pollution, plus 2 more in v3). 12 of 39 high advisories closed via overrides; the remaining 27 v3 highs are deeper transitive chains that would require breaking-change major bumps — flagged for ADR-165 Phase 2. ## Changes ### Root workspace overrides (package.json) - `vitest`: `^1.0.0` → `^3.2.6` (closes critical GHSA-5xrq CVSS 9.8) - `hono`: `>=4.11.4` → `>=4.12.25` (closes 6 hono advisories) - `undici`: `>=7.18.0` → `>=8.5.0` (closes 7 undici advisories — bumps the stale pin that ADR-165 flagged as still-in-vulnerable-range) - `vite`: `>=6.4.6` → `>=8.0.16` (closes 2 vite advisories) - NEW `@grpc/grpc-js`: `>=1.14.4` - NEW `form-data`: `>=4.0.6` - NEW `http-proxy-middleware`: `>=3.0.7` - `@hono/node-server`: `>=1.19.10` → `>=1.19.14` ### v3 workspace overrides (v3/package.json + pnpm.overrides) - `vitest`: `^4.0.16` → `^4.1.0` (and `@vitest/coverage-v8` matched) - Top-level + pnpm overrides: `handlebars: >=4.7.9`, `protobufjs: >=8.6.0` - 27 sub-package `package.json` updated to `vitest ^4.1.0` ### CVE registry refresh (v3/@claude-flow/security/src/CVE-REMEDIATION.ts) Rewritten from 5 stale Jan-2026 entries to 16 total: 15 fixed, 1 open (ADR165-OPEN-01 — PII pipeline wiring per ADR-164 §6.1 not yet on dispatch-layer). `SECURITY_SUMMARY` is now computed dynamically from the registry; `validateRemediation()` correctly returns `allFixed: false` with 1 issue. ADR-165 §5 flagged this as THE Phase 2 priority — now closed. ### New CI gate `.github/workflows/cve-audit.yml`: - `audit-root` — `npm audit --audit-level=critical` in root, blocking - `audit-v3` — same in v3, blocking - `audit-high-report` — warn-only summary on high-severity drift - Triggers: PR, push to main, daily cron ### ADR-165 §9 evidence ledger addendum Captures AFTER-remediation `npm audit --json` metadata for both workspaces. The diff between BEFORE (already in §9) and AFTER makes Phase 1 verifiable. Also CORRECTED one prior surprise in §9: the `validate-input.ts` in `mcp-tools/` is NOT a 9-line shim. It's 269 lines of real implementation. (That was an inaccurate findings note from the initial audit.) ### §7.3 research items resolved - `protobufjs` v3 chain confirmed gone after override pins - `handlebars` v3 chain confirmed not user-reachable on the workflow path (toolchain-only; override sufficient) - `validate-input.ts` confirmed real implementation, not a shim (registry entry corrected) - CORS surface check: no `cors()` / `app.use(cors` call sites — the hono CORS-wildcard advisory is not exploitable on the current server - ADR-164 §6.1 PII pipeline NOT wired in current agentbbs dispatch — recorded as ADR165-OPEN-01 (Phase 3 work) ## Gates (all PASS) - `npm audit --audit-level=critical` root: exit 0 (was non-zero) - `npm audit --audit-level=critical` v3: exit 0 (was non-zero) - vitest suites: 105/109 pass (4 skip-conditional — same as before) - ADR-112 audit: 352/352 tools with guidance - business-pods smoke: 11/11 PASS - agentbbs smoke: 8/8 PASS - agenticow smoke: 8/8 PASS - cli build: clean (tsc) ## Phase 2+ deferred The 27 v3 high-severity advisories that remain are transitive chains with no patched-in-range version. ADR-165 §6 Phase 2 picks these up after the `cve-watch.yml` automation in §6 lands (NEW PR — not in scope here). Co-Authored-By: RuFlo <ruv@ruv.net> Claude-Session: https://claude.ai/code/session_01WbBa4nccx5aGhXphoHxcni * chore(lock): regen v3/pnpm-lock.yaml after override updates (PR #2508 CI fix) PR #2508 added handlebars + protobufjs to v3 overrides + bumped vitest pin, but v3/pnpm-lock.yaml wasn't regenerated. CI surfaced ERR_PNPM_LOCKFILE_CONFIG_MISMATCH on every install step. Same pattern as the previous lockfile-drift fixes on PR #2500 and #2503. * fix(ci): cve-audit.yml jq-only + regen witness manifests for #1609 marker drift Two PR #2508 CI failures fixed: 1. Static-regression-guard tripped on cve-audit.yml line 52: the static YAML strict-parser sees `if high > 0:` inside the `run: |` block as a YAML block-mapping key indicator. Refactored all 3 inline-python blocks to use jq (preinstalled on ubuntu-latest) — no embedded `if x > 0:` lines, so the YAML guard passes. 2. Witness marker drift smoke flagged fix-marker #1609 — the Phase 1 vitest bump (4.0.16 → 4.1.0) drifted the cited marker string in v3/@claude-flow/aidefence/package.json. Updated `marker` field in all 3 platform manifests + `desc` to reference ADR-165 Phase 1, then re-signed via plugins/ruflo-core/scripts/witness/regen.mjs. Co-Authored-By: RuFlo <ruv@ruv.net>
@claude-flow/plugins
Unified Plugin SDK for Claude Flow V3
A comprehensive plugin development framework providing workers, hooks, providers, and security utilities for building Claude Flow extensions.
Installation
npm install @claude-flow/plugins
Quick Start
Create a Plugin with the Builder
import { PluginBuilder, HookEvent, HookPriority } from '@claude-flow/plugins';
const myPlugin = new PluginBuilder('my-awesome-plugin', '1.0.0')
.withDescription('My awesome plugin for Claude Flow')
.withAuthor('Your Name')
.withMCPTools([
{
name: 'greet',
description: 'Greet a user',
inputSchema: {
type: 'object',
properties: {
name: { type: 'string', description: 'Name to greet' }
},
required: ['name']
},
handler: async (input) => ({
content: [{ type: 'text', text: `Hello, ${input.name}!` }]
})
}
])
.withHooks([
{
event: HookEvent.PostTaskComplete,
priority: HookPriority.Normal,
handler: async (ctx) => {
console.log('Task completed:', ctx.data);
return { success: true };
}
}
])
.build();
// Register with the default registry
import { getDefaultRegistry } from '@claude-flow/plugins';
await getDefaultRegistry().register(myPlugin);
Quick Plugin Creators
import { createToolPlugin, createHooksPlugin, createWorkerPlugin } from '@claude-flow/plugins';
// Tool-only plugin
const toolPlugin = createToolPlugin('my-tools', '1.0.0', [
{ name: 'tool1', description: '...', inputSchema: {...}, handler: async () => {...} }
]);
// Hooks-only plugin
const hooksPlugin = createHooksPlugin('my-hooks', '1.0.0', [
{ event: HookEvent.PreTaskExecute, handler: async (ctx) => ({ success: true }) }
]);
// Worker plugin
const workerPlugin = createWorkerPlugin('my-workers', '1.0.0', [
{ type: 'coder', name: 'main-coder', capabilities: ['code-generation'] }
]);
Features
🔧 MCP Tool Builder
import { MCPToolBuilder } from '@claude-flow/plugins';
const tool = new MCPToolBuilder('calculate')
.withDescription('Perform calculations')
.addStringParam('expression', 'Math expression', { required: true })
.addBooleanParam('verbose', 'Show steps', { default: false })
.withHandler(async (input) => {
const result = eval(input.expression); // Use a safe evaluator in production!
return { content: [{ type: 'text', text: `Result: ${result}` }] };
})
.build();
🎣 Hook System
import { HookBuilder, HookFactory, HookRegistry, HookEvent, HookPriority } from '@claude-flow/plugins';
// Create a custom hook with conditions
const hook = new HookBuilder(HookEvent.PreAgentSpawn)
.withName('validate-agent')
.withPriority(HookPriority.High)
.when((ctx) => ctx.data?.type === 'coder')
.transform((data) => ({ ...data, validated: true }))
.handle(async (ctx) => {
// Validation logic
return { success: true, data: ctx.data, modified: true };
})
.build();
// Pre-built hook factories
const logger = HookFactory.createLogger(HookEvent.PostTaskComplete, console);
const rateLimiter = HookFactory.createRateLimiter(HookEvent.PreToolCall, { maxPerMinute: 100 });
const validator = HookFactory.createValidator(HookEvent.PreAgentSpawn, (data) => data.type !== undefined);
👷 Worker Pool
import { WorkerPool, WorkerFactory } from '@claude-flow/plugins';
// Create a worker pool
const pool = new WorkerPool({
minWorkers: 2,
maxWorkers: 10,
taskQueueSize: 100
});
// Spawn workers using factory
const coder = await pool.spawn(WorkerFactory.createCoder('main-coder'));
const reviewer = await pool.spawn(WorkerFactory.createReviewer('code-reviewer'));
const tester = await pool.spawn(WorkerFactory.createTester('test-runner'));
// Submit tasks
const result = await pool.submit({
id: 'task-1',
type: 'code-generation',
input: { prompt: 'Write a function...' }
});
// Shutdown
await pool.shutdown();
🤖 LLM Provider Integration
import { ProviderRegistry, ProviderFactory, BaseLLMProvider } from '@claude-flow/plugins';
const registry = new ProviderRegistry({
fallbackChain: ['anthropic', 'openai'],
costOptimization: true
});
// Register built-in providers
class ClaudeProvider extends BaseLLMProvider {
constructor() {
super(ProviderFactory.createClaude());
}
async complete(request) {
// Implementation
}
}
registry.register(new ClaudeProvider());
// Execute with automatic fallback
const response = await registry.execute({
model: 'claude-sonnet-4-6',
messages: [{ role: 'user', content: 'Hello!' }]
});
🔗 Agentic Flow Integration
import { AgenticFlowBridge, AgentDBBridge } from '@claude-flow/plugins';
// Swarm coordination
const agentic = new AgenticFlowBridge({ maxConcurrentAgents: 15 });
await agentic.initializeSwarm({ type: 'hierarchical', maxAgents: 15 });
const agent = await agentic.spawnAgent({
type: 'coder',
capabilities: ['typescript', 'react']
});
const result = await agentic.orchestrateTask({
taskType: 'code-generation',
input: { prompt: '...' },
agentId: agent.id
});
// Vector storage with AgentDB
const agentdb = new AgentDBBridge({ dimensions: 1536, indexType: 'hnsw' });
await agentdb.initialize();
await agentdb.store('doc-1', embeddings, { type: 'document' });
const similar = await agentdb.search(queryVector, { limit: 10 });
🔒 Security Utilities
import { Security, createRateLimiter, createResourceLimiter } from '@claude-flow/plugins';
// Input validation
const name = Security.validateString(input, { minLength: 1, maxLength: 100 });
const count = Security.validateNumber(input, { min: 0, max: 1000, integer: true });
const path = Security.validatePath(input, { allowedExtensions: ['.ts', '.js'] });
// Safe path creation (prevents traversal attacks)
const safePath = Security.safePath('/project', 'src', userInput);
// Safe JSON parsing (prevents prototype pollution)
const data = Security.safeJsonParse<Config>(jsonString);
// Command validation
const cmd = Security.validateCommand('npm install', { allowedCommands: new Set(['npm', 'npx']) });
// Rate limiting
const limiter = createRateLimiter({ maxTokens: 100, refillRate: 10, refillInterval: 1000 });
if (limiter.tryAcquire()) {
// Proceed
}
// Resource limiting
const resourceLimiter = createResourceLimiter({ maxMemoryMB: 512, maxExecutionTime: 30000 });
const result = await resourceLimiter.enforce(async () => {
// Heavy computation
});
API Reference
Core Exports
| Export | Description |
|---|---|
PluginBuilder |
Fluent builder for creating plugins |
BasePlugin |
Abstract base class for plugins |
PluginRegistry |
Plugin lifecycle management |
getDefaultRegistry() |
Get the default plugin registry |
SDK Builders
| Export | Description |
|---|---|
MCPToolBuilder |
Build MCP tools with parameters |
HookBuilder |
Build hooks with conditions and transformers |
WorkerBuilder |
Build worker definitions |
Quick Creators
| Export | Description |
|---|---|
createToolPlugin() |
Create a tool-only plugin |
createHooksPlugin() |
Create a hooks-only plugin |
createWorkerPlugin() |
Create a worker plugin |
createProviderPlugin() |
Create a provider plugin |
Hook System
| Export | Description |
|---|---|
HookRegistry |
Central hook management |
HookExecutor |
Execute hooks with patterns |
HookFactory |
Pre-built hook creators |
HookEvent |
All hook event types |
HookPriority |
Hook priority levels |
Workers
| Export | Description |
|---|---|
WorkerPool |
Managed worker pool |
WorkerInstance |
Individual worker |
WorkerFactory |
Worker definition factory |
Providers
| Export | Description |
|---|---|
ProviderRegistry |
LLM provider management |
BaseLLMProvider |
Base provider implementation |
ProviderFactory |
Provider definition factory |
Integrations
| Export | Description |
|---|---|
AgenticFlowBridge |
agentic-flow@alpha integration |
AgentDBBridge |
AgentDB vector storage |
Security
| Export | Description |
|---|---|
Security |
All security utilities |
validateString/Number/Boolean/Array/Enum |
Input validators |
safePath/safePathAsync |
Path security |
safeJsonParse/safeJsonStringify |
JSON security |
createRateLimiter |
Rate limiting |
createResourceLimiter |
Resource limiting |
Hook Events
enum HookEvent {
// Session lifecycle
SessionStart = 'session:start',
SessionEnd = 'session:end',
// Agent lifecycle
PreAgentSpawn = 'agent:pre-spawn',
PostAgentSpawn = 'agent:post-spawn',
PreAgentTerminate = 'agent:pre-terminate',
PostAgentTerminate = 'agent:post-terminate',
// Task lifecycle
PreTaskExecute = 'task:pre-execute',
PostTaskComplete = 'task:post-complete',
TaskError = 'task:error',
// Tool lifecycle
PreToolCall = 'tool:pre-call',
PostToolCall = 'tool:post-call',
// Memory operations
PreMemoryStore = 'memory:pre-store',
PostMemoryStore = 'memory:post-store',
PreMemoryRetrieve = 'memory:pre-retrieve',
PostMemoryRetrieve = 'memory:post-retrieve',
// Swarm coordination
SwarmInitialized = 'swarm:initialized',
SwarmShutdown = 'swarm:shutdown',
ConsensusReached = 'swarm:consensus-reached',
// File operations
PreFileRead = 'file:pre-read',
PostFileRead = 'file:post-read',
PreFileWrite = 'file:pre-write',
PostFileWrite = 'file:post-write',
// Commands
PreCommand = 'command:pre-execute',
PostCommand = 'command:post-execute',
// Learning
PatternLearned = 'learning:pattern-learned',
PatternApplied = 'learning:pattern-applied',
}
Hook Priorities
enum HookPriority {
Critical = 1000, // Run first, can abort
High = 750, // Important hooks
Normal = 500, // Default priority
Low = 250, // Less important
Deferred = 0, // Run last
}
Worker Types
coder- Code implementationreviewer- Code reviewtester- Test generation/executionresearcher- Information gatheringplanner- Task planningcoordinator- Multi-agent coordinationsecurity- Security analysisperformance- Performance optimizationspecialized- Custom capabilitieslong-running- Background tasks
Performance
| Metric | Target | Actual |
|---|---|---|
| Plugin load time | < 50ms | ~20ms |
| Hook execution | < 1ms | ~0.5ms |
| Worker spawn | < 100ms | ~50ms |
| Vector search (10K) | < 10ms | ~5ms |
Testing
npm test # Run all tests
npm run test:watch # Watch mode
License
MIT