* fix(security): ADR-165 Phase 1 — close all critical CVEs, refresh registry, add CI gate Closes ADR-165 Phase 1. Both workspaces pass `npm audit --audit-level=critical`. ## Before (2026-06-29) | Workspace | Critical | High | Moderate | Total | |-----------|----------|------|----------|-------| | Root | **1** | 6 | 31 | 38 | | v3 | **4** | 33 | 57 | 97 | ## After | Workspace | Critical | High | Moderate | Total | |-----------|----------|------|----------|-------| | Root | **0** | 0 | 31 | 31 | | v3 | **0** | 27 | 58 | 88 | All 5 critical advisories closed (vitest GHSA-5xrq, handlebars prototype-pollution, protobufjs constructor-pollution, plus 2 more in v3). 12 of 39 high advisories closed via overrides; the remaining 27 v3 highs are deeper transitive chains that would require breaking-change major bumps — flagged for ADR-165 Phase 2. ## Changes ### Root workspace overrides (package.json) - `vitest`: `^1.0.0` → `^3.2.6` (closes critical GHSA-5xrq CVSS 9.8) - `hono`: `>=4.11.4` → `>=4.12.25` (closes 6 hono advisories) - `undici`: `>=7.18.0` → `>=8.5.0` (closes 7 undici advisories — bumps the stale pin that ADR-165 flagged as still-in-vulnerable-range) - `vite`: `>=6.4.6` → `>=8.0.16` (closes 2 vite advisories) - NEW `@grpc/grpc-js`: `>=1.14.4` - NEW `form-data`: `>=4.0.6` - NEW `http-proxy-middleware`: `>=3.0.7` - `@hono/node-server`: `>=1.19.10` → `>=1.19.14` ### v3 workspace overrides (v3/package.json + pnpm.overrides) - `vitest`: `^4.0.16` → `^4.1.0` (and `@vitest/coverage-v8` matched) - Top-level + pnpm overrides: `handlebars: >=4.7.9`, `protobufjs: >=8.6.0` - 27 sub-package `package.json` updated to `vitest ^4.1.0` ### CVE registry refresh (v3/@claude-flow/security/src/CVE-REMEDIATION.ts) Rewritten from 5 stale Jan-2026 entries to 16 total: 15 fixed, 1 open (ADR165-OPEN-01 — PII pipeline wiring per ADR-164 §6.1 not yet on dispatch-layer). `SECURITY_SUMMARY` is now computed dynamically from the registry; `validateRemediation()` correctly returns `allFixed: false` with 1 issue. ADR-165 §5 flagged this as THE Phase 2 priority — now closed. ### New CI gate `.github/workflows/cve-audit.yml`: - `audit-root` — `npm audit --audit-level=critical` in root, blocking - `audit-v3` — same in v3, blocking - `audit-high-report` — warn-only summary on high-severity drift - Triggers: PR, push to main, daily cron ### ADR-165 §9 evidence ledger addendum Captures AFTER-remediation `npm audit --json` metadata for both workspaces. The diff between BEFORE (already in §9) and AFTER makes Phase 1 verifiable. Also CORRECTED one prior surprise in §9: the `validate-input.ts` in `mcp-tools/` is NOT a 9-line shim. It's 269 lines of real implementation. (That was an inaccurate findings note from the initial audit.) ### §7.3 research items resolved - `protobufjs` v3 chain confirmed gone after override pins - `handlebars` v3 chain confirmed not user-reachable on the workflow path (toolchain-only; override sufficient) - `validate-input.ts` confirmed real implementation, not a shim (registry entry corrected) - CORS surface check: no `cors()` / `app.use(cors` call sites — the hono CORS-wildcard advisory is not exploitable on the current server - ADR-164 §6.1 PII pipeline NOT wired in current agentbbs dispatch — recorded as ADR165-OPEN-01 (Phase 3 work) ## Gates (all PASS) - `npm audit --audit-level=critical` root: exit 0 (was non-zero) - `npm audit --audit-level=critical` v3: exit 0 (was non-zero) - vitest suites: 105/109 pass (4 skip-conditional — same as before) - ADR-112 audit: 352/352 tools with guidance - business-pods smoke: 11/11 PASS - agentbbs smoke: 8/8 PASS - agenticow smoke: 8/8 PASS - cli build: clean (tsc) ## Phase 2+ deferred The 27 v3 high-severity advisories that remain are transitive chains with no patched-in-range version. ADR-165 §6 Phase 2 picks these up after the `cve-watch.yml` automation in §6 lands (NEW PR — not in scope here). Co-Authored-By: RuFlo <ruv@ruv.net> Claude-Session: https://claude.ai/code/session_01WbBa4nccx5aGhXphoHxcni * chore(lock): regen v3/pnpm-lock.yaml after override updates (PR #2508 CI fix) PR #2508 added handlebars + protobufjs to v3 overrides + bumped vitest pin, but v3/pnpm-lock.yaml wasn't regenerated. CI surfaced ERR_PNPM_LOCKFILE_CONFIG_MISMATCH on every install step. Same pattern as the previous lockfile-drift fixes on PR #2500 and #2503. * fix(ci): cve-audit.yml jq-only + regen witness manifests for #1609 marker drift Two PR #2508 CI failures fixed: 1. Static-regression-guard tripped on cve-audit.yml line 52: the static YAML strict-parser sees `if high > 0:` inside the `run: |` block as a YAML block-mapping key indicator. Refactored all 3 inline-python blocks to use jq (preinstalled on ubuntu-latest) — no embedded `if x > 0:` lines, so the YAML guard passes. 2. Witness marker drift smoke flagged fix-marker #1609 — the Phase 1 vitest bump (4.0.16 → 4.1.0) drifted the cited marker string in v3/@claude-flow/aidefence/package.json. Updated `marker` field in all 3 platform manifests + `desc` to reference ADR-165 Phase 1, then re-signed via plugins/ruflo-core/scripts/witness/regen.mjs. Co-Authored-By: RuFlo <ruv@ruv.net>
@claude-flow/plugin-cognitive-kernel
A cutting-edge cognitive augmentation plugin combining the Cognitum Gate Kernel with SONA self-optimizing architecture to provide LLMs with enhanced cognitive capabilities. The plugin enables dynamic working memory, attention control mechanisms, meta-cognitive self-monitoring, and cognitive scaffolding while maintaining low latency through WASM acceleration.
Installation
npm
npm install @claude-flow/plugin-cognitive-kernel
CLI
npx claude-flow plugins install --name @claude-flow/plugin-cognitive-kernel
Quick Start
import { CognitiveKernelPlugin } from '@claude-flow/plugin-cognitive-kernel';
// Initialize the plugin
const plugin = new CognitiveKernelPlugin();
await plugin.initialize();
// Allocate working memory for a complex reasoning task
const memorySlot = await plugin.workingMemory({
action: 'allocate',
slot: {
id: 'current-problem',
content: { problem: 'Design authentication system', context: {...} },
priority: 0.9,
decay: 0.05
},
capacity: 7 // Miller's number
});
// Control attention for focused analysis
await plugin.attentionControl({
mode: 'focus',
targets: [
{ entity: 'security-requirements', weight: 0.8, duration: 300 },
{ entity: 'user-experience', weight: 0.6, duration: 300 }
],
filters: {
includePatterns: ['auth*', 'security*', 'token*'],
noveltyBias: 0.3
}
});
console.log('Cognitive context established');
Available MCP Tools
1. cognition/working-memory
Manage dynamic working memory slots for complex reasoning tasks.
const result = await mcp.call('cognition/working-memory', {
action: 'allocate',
slot: {
id: 'task-context',
content: {
goal: 'Refactor authentication module',
constraints: ['maintain backward compatibility', 'improve security'],
progress: []
},
priority: 0.8,
decay: 0.1
},
capacity: 7,
consolidationTarget: 'episodic'
});
Actions: allocate, update, retrieve, clear, consolidate
Returns: Memory slot state with current contents and decay status.
2. cognition/attention-control
Control cognitive attention and information filtering.
const result = await mcp.call('cognition/attention-control', {
mode: 'selective',
targets: [
{ entity: 'error-handling', weight: 0.9, duration: 600 },
{ entity: 'input-validation', weight: 0.7, duration: 600 }
],
filters: {
includePatterns: ['error*', 'exception*', 'validation*'],
excludePatterns: ['deprecated*', 'legacy*'],
noveltyBias: 0.5
}
});
Modes: focus, diffuse, selective, divided, sustained
Returns: Attention state with active targets and filter configuration.
3. cognition/meta-monitor
Meta-cognitive monitoring of reasoning quality and self-reflection.
const result = await mcp.call('cognition/meta-monitor', {
monitoring: [
'confidence_calibration',
'reasoning_coherence',
'goal_tracking',
'error_detection'
],
reflection: {
trigger: 'on_uncertainty',
depth: 'medium'
},
interventions: true
});
Returns: Meta-cognitive assessment with confidence scores, detected issues, and suggested interventions.
4. cognition/scaffold
Provide cognitive scaffolding for complex reasoning tasks.
const result = await mcp.call('cognition/scaffold', {
task: {
description: 'Design a distributed caching system',
complexity: 'complex',
domain: 'distributed-systems'
},
scaffoldType: 'decomposition',
adaptivity: {
fading: true,
monitoring: true
}
});
Scaffold Types: decomposition, analogy, worked_example, socratic, metacognitive_prompting, chain_of_thought
Returns: Structured scaffolding with step-by-step guidance adapted to task complexity.
5. cognition/cognitive-load
Monitor and balance cognitive load during reasoning.
const result = await mcp.call('cognition/cognitive-load', {
assessment: {
intrinsic: 0.7, // Task complexity
extraneous: 0.3, // Presentation complexity
germane: 0.5 // Learning investment
},
optimization: 'reduce_extraneous',
threshold: 0.8
});
Optimizations: reduce_extraneous, chunk_intrinsic, maximize_germane, balanced
Returns: Load assessment with optimization recommendations and intervention triggers.
Configuration Options
interface CognitiveKernelConfig {
// Maximum working memory slots (default: 7, Miller's number)
maxWorkingMemorySlots: number;
// Memory limit in MB (default: 256)
memoryLimit: number;
// CPU time limit per operation in seconds (default: 10)
cpuTimeLimit: number;
// Enable session isolation (default: true)
sessionIsolation: boolean;
// Scaffold fading configuration
scaffolding: {
enableFading: boolean;
fadingRate: number;
};
// Meta-cognitive intervention thresholds
metaCognition: {
confidenceThreshold: number;
coherenceThreshold: number;
autoIntervene: boolean;
};
}
Performance Targets
| Metric | Target | Notes |
|---|---|---|
| Working memory operations | <1ms per slot | 10x faster than naive cache |
| Attention steering | <5ms for reallocation | 10x faster than context rebuild |
| Meta-cognitive check | <10ms per assessment | Novel capability |
| Memory consolidation | <100ms batch | 10x faster than full reindex |
| Scaffold generation | <50ms per step | Novel capability |
Cognitive Theories Implemented
| Theory | Implementation |
|---|---|
| Baddeley's Working Memory | Multi-component memory system with phonological loop, visuospatial sketchpad, and episodic buffer |
| Cognitive Load Theory | Intrinsic/extraneous/germane load management |
| Metacognition | Self-monitoring, error detection, and regulation |
| Zone of Proximal Development | Adaptive scaffolding with gradual fading |
| Dual Process Theory | Fast/slow thinking modes |
Security Considerations
- Session Isolation: Each cognitive session has isolated working memory with session-specific encryption keys (AES-256-GCM)
- Secure Clearing: Working memory is securely cleared and overwritten (zero-fill) at session end
- Prompt Injection Prevention: Scaffold content is sanitized to remove potential prompt injection patterns (special tokens, control sequences)
- Input Validation: All inputs validated with Zod schemas with strict limits
- Rate Limiting: Prevents abuse of cognitive resources
- Content Filtering: Memory content scanned for sensitive data patterns before storage
WASM Security Constraints
| Constraint | Value | Rationale |
|---|---|---|
| Memory Limit | 256MB | Sufficient for cognitive operations |
| CPU Time per Operation | 10 seconds | Prevent runaway processing |
| No Network Access | Enforced | Prevent data exfiltration |
| Session Isolation | Enforced | Per-session WASM instances |
| Secure Memory Clear | Zero-fill on exit | Prevent memory forensics |
Input Limits
| Constraint | Limit |
|---|---|
| Working memory slots | 20 max |
| Memory limit | 256MB |
| CPU time per operation | 10 seconds |
| Attention targets | 50 max |
| Scaffold description | 5,000 characters |
Rate Limits
| Tool | Requests/Minute | Max Concurrent |
|---|---|---|
working-memory |
120 | 10 |
attention-control |
60 | 5 |
meta-monitor |
60 | 5 |
scaffold |
30 | 3 |
cognitive-load |
60 | 5 |
Dependencies
cognitum-gate-kernel- Core cognitive kernel for memory gating and attention controlsona- Self-Optimizing Neural Architecture for adaptive cognitionruvector-attention-wasm- Multi-head attention for cognitive focusruvector-nervous-system-wasm- Coordination between cognitive subsystemsmicro-hnsw-wasm- Fast retrieval for episodic memory
Use Cases
- Complex Reasoning: Support multi-step reasoning with working memory persistence
- Research Synthesis: Maintain focus across long document analysis sessions
- Learning Enhancement: Adaptive scaffolding for skill acquisition
- Error Prevention: Meta-cognitive monitoring catches reasoning errors before output
- Context Management: Intelligent attention control for managing long contexts
Related Plugins
| Plugin | Description | Synergy |
|---|---|---|
| @claude-flow/plugin-neural-coordination | Multi-agent coordination | Cognitive kernel provides enhanced reasoning for coordinated agents |
| @claude-flow/plugin-hyperbolic-reasoning | Hierarchical reasoning | Combines hierarchical structure with cognitive scaffolding |
| @claude-flow/plugin-quantum-optimizer | Quantum-inspired optimization | Optimizes cognitive resource allocation and attention scheduling |
Architecture
+------------------+ +----------------------+ +------------------+
| LLM Input |---->| Cognitive Kernel |---->| Enhanced Output |
| (Prompts) | | (WASM Accelerated) | | (Augmented) |
+------------------+ +----------------------+ +------------------+
|
+--------------------+--------------------+
| | |
+------+------+ +-------+-------+ +------+------+
| Cognitum | | SONA | | Attention |
| Gate Kernel | | Self-Optimize | | Control |
+-------------+ +---------------+ +-------------+
| | |
+--------------------+--------------------+
|
+-------+-------+
| Working Memory |
| (HNSW Index) |
+---------------+
License
MIT