Files
ruvnet__ruflo/ruflo/package.json
ruvnet e855ae2e4e chore(release): 3.39.2 -> 3.39.3
Ships #3250: the agentbbs MCP tools gated on `await import('agentbbs')`, but the
published package is a CLI-only launcher with no importable entry point, so all
four federation_bbs_* tools reported degraded regardless of install state.
Replaced with a subprocess probe.

Includes the follow-up hardening: the probe's shell is now gated to win32
instead of always on. The probed binary comes from AGENTBBS_BIN, and under a
shell that argument is command-interpreted, so a crafted value executed a
trailing command (verified locally). POSIX now spawns without a shell.

Co-Authored-By: RuFlo <ruv@ruv.net>
Claude-Session: https://claude.ai/code/session_013u4pmL9ZUAXb6usVQgNo67
2026-09-09 16:26:04 -04:00

118 lines
3.4 KiB
JSON

{
"name": "ruflo",
"version": "3.39.3",
"description": "Ruflo - Enterprise AI agent orchestration platform. Deploy 60+ specialized agents in coordinated swarms with self-learning, fault-tolerant consensus, vector memory, and MCP integration",
"main": "bin/ruflo.js",
"type": "module",
"bin": {
"ruflo": "bin/ruflo.js"
},
"homepage": "https://github.com/ruvnet/claude-flow#readme",
"bugs": {
"url": "https://github.com/ruvnet/claude-flow/issues",
"email": "support@ruv.io"
},
"funding": {
"type": "github",
"url": "https://github.com/sponsors/ruvnet"
},
"files": [
"bin/**",
"src/**",
"dist/**",
"README.md",
"LICENSE"
],
"scripts": {
"prepublishOnly": "node scripts/prepare-publish.mjs",
"dev": "node src/mcp-bridge/index.js",
"dev:bridge": "node --watch src/mcp-bridge/index.js",
"dev:test": "node src/mcp-bridge/test-harness.js",
"start": "node src/mcp-bridge/index.js",
"docker:up": "docker compose up -d",
"docker:down": "docker compose down",
"docker:build": "docker compose build",
"docker:logs": "docker compose logs -f",
"install:bridge": "cd src/mcp-bridge && npm install",
"generate:config": "node src/scripts/generate-config.js",
"generate:welcome": "node src/scripts/generate-welcome.js",
"deploy": "bash src/scripts/deploy.sh",
"package:rvf": "bash src/scripts/package-rvf.sh"
},
"dependencies": {
"@claude-flow/cli": "^3.33.0"
},
"optionalDependencies": {},
"overrides": {
"ruvector": "^0.2.27",
"better-sqlite3": "12.9.0",
"@ruvector/rvf-wasm": "0.1.5",
"@hono/node-server": ">=1.19.10",
"flatted": ">=3.4.0",
"tar": ">=7.5.11",
"picomatch": ">=4.0.3",
"path-to-regexp": ">=8.2.1",
"undici": ">=7.18.0",
"minimatch": ">=10.0.0",
"@isaacs/brace-expansion": ">=5.0.1",
"cacache": ">=20.0.0",
"make-fetch-happen": ">=15.0.0",
"express-rate-limit": ">=8.4.1",
"protobufjs": ">=7.5.6",
"uuid": ">=14.0.0",
"@opentelemetry/core": ">=2.8.0",
"@opentelemetry/resources": ">=2.8.0",
"@opentelemetry/sdk-trace-base": ">=2.8.0",
"@opentelemetry/sdk-node": ">=0.220.0",
"@opentelemetry/auto-instrumentations-node": ">=0.75.0",
"@opentelemetry/exporter-prometheus": ">=0.220.0",
"@opentelemetry/exporter-trace-otlp-grpc": ">=0.220.0",
"@opentelemetry/exporter-trace-otlp-http": ">=0.220.0",
"@opentelemetry/exporter-trace-otlp-proto": ">=0.220.0",
"@opentelemetry/otlp-exporter-base": ">=0.220.0",
"@opentelemetry/otlp-grpc-exporter-base": ">=0.220.0",
"@opentelemetry/otlp-transformer": ">=0.220.0",
"agentdb": ">=3.0.0-alpha.17",
"agentic-flow": ">=2.0.14",
"@ruvector/ruvllm": ">=2.6.0",
"fast-uri": ">=3.1.6"
},
"engines": {
"node": ">=20.0.0"
},
"repository": {
"type": "git",
"url": "https://github.com/ruvnet/claude-flow.git",
"directory": "ruflo"
},
"keywords": [
"ruflo",
"claude-flow",
"claude",
"claude-code",
"anthropic",
"ai",
"ai-agents",
"multi-agent",
"agent-orchestration",
"swarm-intelligence",
"swarm",
"mcp",
"model-context-protocol",
"cli",
"developer-tools",
"enterprise",
"self-learning"
],
"author": {
"name": "RuvNet",
"email": "ruv@ruv.io",
"url": "https://ruv.io"
},
"license": "MIT",
"publishConfig": {
"access": "public",
"tag": "latest"
}
}