Files
rUv 402b701a9d fix(security): ADR-165 Phase 1 — close 5 critical CVEs + refresh registry + audit CI gate (#2508)
* fix(security): ADR-165 Phase 1 — close all critical CVEs, refresh registry, add CI gate

Closes ADR-165 Phase 1. Both workspaces pass `npm audit --audit-level=critical`.

## Before (2026-06-29)

| Workspace | Critical | High | Moderate | Total |
|-----------|----------|------|----------|-------|
| Root      | **1**    | 6    | 31       | 38    |
| v3        | **4**    | 33   | 57       | 97    |

## After

| Workspace | Critical | High | Moderate | Total |
|-----------|----------|------|----------|-------|
| Root      | **0**    | 0    | 31       | 31    |
| v3        | **0**    | 27   | 58       | 88    |

All 5 critical advisories closed (vitest GHSA-5xrq, handlebars prototype-pollution,
protobufjs constructor-pollution, plus 2 more in v3). 12 of 39 high advisories
closed via overrides; the remaining 27 v3 highs are deeper transitive chains
that would require breaking-change major bumps — flagged for ADR-165 Phase 2.

## Changes

### Root workspace overrides (package.json)

- `vitest`: `^1.0.0` → `^3.2.6` (closes critical GHSA-5xrq CVSS 9.8)
- `hono`: `>=4.11.4` → `>=4.12.25` (closes 6 hono advisories)
- `undici`: `>=7.18.0` → `>=8.5.0` (closes 7 undici advisories — bumps the
  stale pin that ADR-165 flagged as still-in-vulnerable-range)
- `vite`: `>=6.4.6` → `>=8.0.16` (closes 2 vite advisories)
- NEW `@grpc/grpc-js`: `>=1.14.4`
- NEW `form-data`: `>=4.0.6`
- NEW `http-proxy-middleware`: `>=3.0.7`
- `@hono/node-server`: `>=1.19.10` → `>=1.19.14`

### v3 workspace overrides (v3/package.json + pnpm.overrides)

- `vitest`: `^4.0.16` → `^4.1.0` (and `@vitest/coverage-v8` matched)
- Top-level + pnpm overrides: `handlebars: >=4.7.9`, `protobufjs: >=8.6.0`
- 27 sub-package `package.json` updated to `vitest ^4.1.0`

### CVE registry refresh (v3/@claude-flow/security/src/CVE-REMEDIATION.ts)

Rewritten from 5 stale Jan-2026 entries to 16 total: 15 fixed, 1 open
(ADR165-OPEN-01 — PII pipeline wiring per ADR-164 §6.1 not yet on
dispatch-layer). `SECURITY_SUMMARY` is now computed dynamically from the
registry; `validateRemediation()` correctly returns `allFixed: false`
with 1 issue. ADR-165 §5 flagged this as THE Phase 2 priority — now closed.

### New CI gate

`.github/workflows/cve-audit.yml`:
- `audit-root` — `npm audit --audit-level=critical` in root, blocking
- `audit-v3` — same in v3, blocking
- `audit-high-report` — warn-only summary on high-severity drift
- Triggers: PR, push to main, daily cron

### ADR-165 §9 evidence ledger addendum

Captures AFTER-remediation `npm audit --json` metadata for both workspaces.
The diff between BEFORE (already in §9) and AFTER makes Phase 1 verifiable.

Also CORRECTED one prior surprise in §9: the `validate-input.ts` in
`mcp-tools/` is NOT a 9-line shim. It's 269 lines of real implementation.
(That was an inaccurate findings note from the initial audit.)

### §7.3 research items resolved

- `protobufjs` v3 chain confirmed gone after override pins
- `handlebars` v3 chain confirmed not user-reachable on the workflow path
  (toolchain-only; override sufficient)
- `validate-input.ts` confirmed real implementation, not a shim (registry
  entry corrected)
- CORS surface check: no `cors()` / `app.use(cors` call sites — the hono
  CORS-wildcard advisory is not exploitable on the current server
- ADR-164 §6.1 PII pipeline NOT wired in current agentbbs dispatch —
  recorded as ADR165-OPEN-01 (Phase 3 work)

## Gates (all PASS)

- `npm audit --audit-level=critical` root: exit 0 (was non-zero)
- `npm audit --audit-level=critical` v3:   exit 0 (was non-zero)
- vitest suites: 105/109 pass (4 skip-conditional — same as before)
- ADR-112 audit: 352/352 tools with guidance
- business-pods smoke: 11/11 PASS
- agentbbs smoke: 8/8 PASS
- agenticow smoke: 8/8 PASS
- cli build: clean (tsc)

## Phase 2+ deferred

The 27 v3 high-severity advisories that remain are transitive chains with
no patched-in-range version. ADR-165 §6 Phase 2 picks these up after the
`cve-watch.yml` automation in §6 lands (NEW PR — not in scope here).

Co-Authored-By: RuFlo <ruv@ruv.net>
Claude-Session: https://claude.ai/code/session_01WbBa4nccx5aGhXphoHxcni

* chore(lock): regen v3/pnpm-lock.yaml after override updates (PR #2508 CI fix)

PR #2508 added handlebars + protobufjs to v3 overrides + bumped vitest pin,
but v3/pnpm-lock.yaml wasn't regenerated. CI surfaced
ERR_PNPM_LOCKFILE_CONFIG_MISMATCH on every install step.

Same pattern as the previous lockfile-drift fixes on PR #2500 and #2503.

* fix(ci): cve-audit.yml jq-only + regen witness manifests for #1609 marker drift

Two PR #2508 CI failures fixed:

1. Static-regression-guard tripped on cve-audit.yml line 52: the static
   YAML strict-parser sees `if high > 0:` inside the `run: |` block as
   a YAML block-mapping key indicator. Refactored all 3 inline-python
   blocks to use jq (preinstalled on ubuntu-latest) — no embedded
   `if x > 0:` lines, so the YAML guard passes.

2. Witness marker drift smoke flagged fix-marker #1609 — the Phase 1
   vitest bump (4.0.16 → 4.1.0) drifted the cited marker string in
   v3/@claude-flow/aidefence/package.json. Updated `marker` field in
   all 3 platform manifests + `desc` to reference ADR-165 Phase 1, then
   re-signed via plugins/ruflo-core/scripts/witness/regen.mjs.

Co-Authored-By: RuFlo <ruv@ruv.net>
2026-06-29 22:41:24 -04:00
..

@claude-flow/plugin-cognitive-kernel

npm version license downloads

A cutting-edge cognitive augmentation plugin combining the Cognitum Gate Kernel with SONA self-optimizing architecture to provide LLMs with enhanced cognitive capabilities. The plugin enables dynamic working memory, attention control mechanisms, meta-cognitive self-monitoring, and cognitive scaffolding while maintaining low latency through WASM acceleration.

Installation

npm

npm install @claude-flow/plugin-cognitive-kernel

CLI

npx claude-flow plugins install --name @claude-flow/plugin-cognitive-kernel

Quick Start

import { CognitiveKernelPlugin } from '@claude-flow/plugin-cognitive-kernel';

// Initialize the plugin
const plugin = new CognitiveKernelPlugin();
await plugin.initialize();

// Allocate working memory for a complex reasoning task
const memorySlot = await plugin.workingMemory({
  action: 'allocate',
  slot: {
    id: 'current-problem',
    content: { problem: 'Design authentication system', context: {...} },
    priority: 0.9,
    decay: 0.05
  },
  capacity: 7  // Miller's number
});

// Control attention for focused analysis
await plugin.attentionControl({
  mode: 'focus',
  targets: [
    { entity: 'security-requirements', weight: 0.8, duration: 300 },
    { entity: 'user-experience', weight: 0.6, duration: 300 }
  ],
  filters: {
    includePatterns: ['auth*', 'security*', 'token*'],
    noveltyBias: 0.3
  }
});

console.log('Cognitive context established');

Available MCP Tools

1. cognition/working-memory

Manage dynamic working memory slots for complex reasoning tasks.

const result = await mcp.call('cognition/working-memory', {
  action: 'allocate',
  slot: {
    id: 'task-context',
    content: {
      goal: 'Refactor authentication module',
      constraints: ['maintain backward compatibility', 'improve security'],
      progress: []
    },
    priority: 0.8,
    decay: 0.1
  },
  capacity: 7,
  consolidationTarget: 'episodic'
});

Actions: allocate, update, retrieve, clear, consolidate

Returns: Memory slot state with current contents and decay status.

2. cognition/attention-control

Control cognitive attention and information filtering.

const result = await mcp.call('cognition/attention-control', {
  mode: 'selective',
  targets: [
    { entity: 'error-handling', weight: 0.9, duration: 600 },
    { entity: 'input-validation', weight: 0.7, duration: 600 }
  ],
  filters: {
    includePatterns: ['error*', 'exception*', 'validation*'],
    excludePatterns: ['deprecated*', 'legacy*'],
    noveltyBias: 0.5
  }
});

Modes: focus, diffuse, selective, divided, sustained

Returns: Attention state with active targets and filter configuration.

3. cognition/meta-monitor

Meta-cognitive monitoring of reasoning quality and self-reflection.

const result = await mcp.call('cognition/meta-monitor', {
  monitoring: [
    'confidence_calibration',
    'reasoning_coherence',
    'goal_tracking',
    'error_detection'
  ],
  reflection: {
    trigger: 'on_uncertainty',
    depth: 'medium'
  },
  interventions: true
});

Returns: Meta-cognitive assessment with confidence scores, detected issues, and suggested interventions.

4. cognition/scaffold

Provide cognitive scaffolding for complex reasoning tasks.

const result = await mcp.call('cognition/scaffold', {
  task: {
    description: 'Design a distributed caching system',
    complexity: 'complex',
    domain: 'distributed-systems'
  },
  scaffoldType: 'decomposition',
  adaptivity: {
    fading: true,
    monitoring: true
  }
});

Scaffold Types: decomposition, analogy, worked_example, socratic, metacognitive_prompting, chain_of_thought

Returns: Structured scaffolding with step-by-step guidance adapted to task complexity.

5. cognition/cognitive-load

Monitor and balance cognitive load during reasoning.

const result = await mcp.call('cognition/cognitive-load', {
  assessment: {
    intrinsic: 0.7,    // Task complexity
    extraneous: 0.3,   // Presentation complexity
    germane: 0.5       // Learning investment
  },
  optimization: 'reduce_extraneous',
  threshold: 0.8
});

Optimizations: reduce_extraneous, chunk_intrinsic, maximize_germane, balanced

Returns: Load assessment with optimization recommendations and intervention triggers.

Configuration Options

interface CognitiveKernelConfig {
  // Maximum working memory slots (default: 7, Miller's number)
  maxWorkingMemorySlots: number;

  // Memory limit in MB (default: 256)
  memoryLimit: number;

  // CPU time limit per operation in seconds (default: 10)
  cpuTimeLimit: number;

  // Enable session isolation (default: true)
  sessionIsolation: boolean;

  // Scaffold fading configuration
  scaffolding: {
    enableFading: boolean;
    fadingRate: number;
  };

  // Meta-cognitive intervention thresholds
  metaCognition: {
    confidenceThreshold: number;
    coherenceThreshold: number;
    autoIntervene: boolean;
  };
}

Performance Targets

Metric Target Notes
Working memory operations <1ms per slot 10x faster than naive cache
Attention steering <5ms for reallocation 10x faster than context rebuild
Meta-cognitive check <10ms per assessment Novel capability
Memory consolidation <100ms batch 10x faster than full reindex
Scaffold generation <50ms per step Novel capability

Cognitive Theories Implemented

Theory Implementation
Baddeley's Working Memory Multi-component memory system with phonological loop, visuospatial sketchpad, and episodic buffer
Cognitive Load Theory Intrinsic/extraneous/germane load management
Metacognition Self-monitoring, error detection, and regulation
Zone of Proximal Development Adaptive scaffolding with gradual fading
Dual Process Theory Fast/slow thinking modes

Security Considerations

  • Session Isolation: Each cognitive session has isolated working memory with session-specific encryption keys (AES-256-GCM)
  • Secure Clearing: Working memory is securely cleared and overwritten (zero-fill) at session end
  • Prompt Injection Prevention: Scaffold content is sanitized to remove potential prompt injection patterns (special tokens, control sequences)
  • Input Validation: All inputs validated with Zod schemas with strict limits
  • Rate Limiting: Prevents abuse of cognitive resources
  • Content Filtering: Memory content scanned for sensitive data patterns before storage

WASM Security Constraints

Constraint Value Rationale
Memory Limit 256MB Sufficient for cognitive operations
CPU Time per Operation 10 seconds Prevent runaway processing
No Network Access Enforced Prevent data exfiltration
Session Isolation Enforced Per-session WASM instances
Secure Memory Clear Zero-fill on exit Prevent memory forensics

Input Limits

Constraint Limit
Working memory slots 20 max
Memory limit 256MB
CPU time per operation 10 seconds
Attention targets 50 max
Scaffold description 5,000 characters

Rate Limits

Tool Requests/Minute Max Concurrent
working-memory 120 10
attention-control 60 5
meta-monitor 60 5
scaffold 30 3
cognitive-load 60 5

Dependencies

  • cognitum-gate-kernel - Core cognitive kernel for memory gating and attention control
  • sona - Self-Optimizing Neural Architecture for adaptive cognition
  • ruvector-attention-wasm - Multi-head attention for cognitive focus
  • ruvector-nervous-system-wasm - Coordination between cognitive subsystems
  • micro-hnsw-wasm - Fast retrieval for episodic memory

Use Cases

  1. Complex Reasoning: Support multi-step reasoning with working memory persistence
  2. Research Synthesis: Maintain focus across long document analysis sessions
  3. Learning Enhancement: Adaptive scaffolding for skill acquisition
  4. Error Prevention: Meta-cognitive monitoring catches reasoning errors before output
  5. Context Management: Intelligent attention control for managing long contexts
Plugin Description Synergy
@claude-flow/plugin-neural-coordination Multi-agent coordination Cognitive kernel provides enhanced reasoning for coordinated agents
@claude-flow/plugin-hyperbolic-reasoning Hierarchical reasoning Combines hierarchical structure with cognitive scaffolding
@claude-flow/plugin-quantum-optimizer Quantum-inspired optimization Optimizes cognitive resource allocation and attention scheduling

Architecture

+------------------+     +----------------------+     +------------------+
|    LLM Input     |---->|  Cognitive Kernel    |---->|  Enhanced Output |
|   (Prompts)      |     |  (WASM Accelerated)  |     |  (Augmented)     |
+------------------+     +----------------------+     +------------------+
                                   |
              +--------------------+--------------------+
              |                    |                    |
       +------+------+     +-------+-------+    +------+------+
       | Cognitum    |     |    SONA       |    | Attention   |
       | Gate Kernel |     | Self-Optimize |    | Control     |
       +-------------+     +---------------+    +-------------+
              |                    |                    |
              +--------------------+--------------------+
                                   |
                           +-------+-------+
                           | Working Memory |
                           | (HNSW Index)   |
                           +---------------+

License

MIT