mirror of
https://github.com/ruvnet/ruflo.git
synced 2026-11-09 14:04:06 +09:00
f5602c0091
* fix(cli): declare @claude-flow/aidefence as an optional dependency security-tools.ts, auto-install.ts and others import @claude-flow/aidefence at runtime but the package was in no dependency field. Flat node_modules layouts (npm) resolve it by accident; pnpm's isolated layout (pnpm dlx) hides it, so aidefence_* tools fail with 'AIDefence package not available'. Optional keeps the existing graceful-degradation path. * fix(cli): add @claude-flow/aidefence to pnpm-lock.yaml Matches the optionalDependencies entry added to @claude-flow/cli so the frozen-lockfile install in CI passes. Hand-edited per review rather than regenerated, to avoid rewriting unrelated importers. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_015Q8MPAof1TAgCWWkJKdDJy * fix(cli): pin @claude-flow/aidefence exactly and lift it from the #2561 guard Pin 3.0.2 (the workspace and a published version) like @claude-flow/memory, and keep the pnpm lock specifier in step. Remove aidefence from the guard's FORBIDDEN list per its escape clause: the published package has no dependencies (agentdb is an optional peer) and cold-installs in about 2-3 s and 150 KB, versus 139 s for the CLI itself. Co-Authored-By: RuFlo <ruv@ruv.net> * fix(ci): drop an apostrophe from a comment in the #2561 guard script The guard body is a single-quoted node -e string in the workflow, so an apostrophe in a JS comment ends the shell quote and the step fails with a syntax error. Co-Authored-By: RuFlo <ruv@ruv.net> --------- Co-authored-by: Claude <noreply@anthropic.com> Co-authored-by: RuFlo <ruv@ruv.net>