@claude-flow/cli 3.27.4 → 3.29.0

package/dist/src/mcp-tools/agentdb-tools.js

@@ -1182,21 +1182,21 @@ function buildKHopCTE(nodeId, depth, relation, maxNodes) {
     // since validateIdentifier has already vetted the value; but we sanitize quotes anyway).
     const safeNodeId = nodeId.replace(/'/g, "''");
     const relFilter = relation ? `AND e.relation = '${relation.replace(/'/g, "''")}'` : '';
-    return `
-    WITH RECURSIVE khop(node_id, hop_depth) AS (
-      SELECT '${safeNodeId}', 0
-      UNION
-      SELECT e.target_id, k.hop_depth + 1
-      FROM graph_edges e
-      JOIN khop k ON e.source_id = k.node_id
-      WHERE k.hop_depth < ${depth} ${relFilter}
-    )
-    SELECT DISTINCT node_id, MIN(hop_depth) as depth
-    FROM khop
-    WHERE node_id != '${safeNodeId}'
-    GROUP BY node_id
-    ORDER BY depth, node_id
-    LIMIT ${maxNodes}
+    return `
+    WITH RECURSIVE khop(node_id, hop_depth) AS (
+      SELECT '${safeNodeId}', 0
+      UNION
+      SELECT e.target_id, k.hop_depth + 1
+      FROM graph_edges e
+      JOIN khop k ON e.source_id = k.node_id
+      WHERE k.hop_depth < ${depth} ${relFilter}
+    )
+    SELECT DISTINCT node_id, MIN(hop_depth) as depth
+    FROM khop
+    WHERE node_id != '${safeNodeId}'
+    GROUP BY node_id
+    ORDER BY depth, node_id
+    LIMIT ${maxNodes}
   `;
 }
 function cosineSim(a, b) {

package/dist/src/mcp-tools/browser-intent-tools.js

@@ -290,25 +290,25 @@ export function buildPageAgentInjection(iifeSource, pageConfig, task) {
         throw new DemoLeakError(leak);
     const cfgJson = JSON.stringify(pageConfig);
     const taskJson = JSON.stringify(task);
-    return `${safeIife}
-;(function(){
-  window.${BROWSER_ACT_RESULT_GLOBAL} = null;
-  try {
-    if (!window.PageAgent) {
-      window.${BROWSER_ACT_RESULT_GLOBAL} = { success: false, error: 'PageAgent not defined after injection' };
-      return;
-    }
-    var agent = new window.PageAgent(${cfgJson});
-    window.__ruflo_pageAgent__ = agent;
-    agent.execute(${taskJson}).then(function(r){
-      window.${BROWSER_ACT_RESULT_GLOBAL} = { success: true, result: r };
-    }).catch(function(e){
-      window.${BROWSER_ACT_RESULT_GLOBAL} = { success: false, error: String((e && e.message) || e) };
-    });
-  } catch (e) {
-    window.${BROWSER_ACT_RESULT_GLOBAL} = { success: false, error: String((e && e.message) || e) };
-  }
-})();
+    return `${safeIife}
+;(function(){
+  window.${BROWSER_ACT_RESULT_GLOBAL} = null;
+  try {
+    if (!window.PageAgent) {
+      window.${BROWSER_ACT_RESULT_GLOBAL} = { success: false, error: 'PageAgent not defined after injection' };
+      return;
+    }
+    var agent = new window.PageAgent(${cfgJson});
+    window.__ruflo_pageAgent__ = agent;
+    agent.execute(${taskJson}).then(function(r){
+      window.${BROWSER_ACT_RESULT_GLOBAL} = { success: true, result: r };
+    }).catch(function(e){
+      window.${BROWSER_ACT_RESULT_GLOBAL} = { success: false, error: String((e && e.message) || e) };
+    });
+  } catch (e) {
+    window.${BROWSER_ACT_RESULT_GLOBAL} = { success: false, error: String((e && e.message) || e) };
+  }
+})();
 'ruflo-browser-act-injected'`;
 }
 // ============================================================================

package/dist/src/memory/graph-edge-writer.js

@@ -100,25 +100,25 @@ export async function getBridgeDb(customDbPath, opts) {
         db.pragma('busy_timeout = 5000'); // wait up to 5s on lock contention
         // Ensure graph_edges table exists (in case this is an older DB that
         // predates ADR-130 Phase 1 schema migration).
-        db.exec(`
-      CREATE TABLE IF NOT EXISTS graph_edges (
-        id              TEXT PRIMARY KEY,
-        source_id       TEXT NOT NULL,
-        target_id       TEXT NOT NULL,
-        relation        TEXT NOT NULL,
-        weight          REAL DEFAULT 1.0,
-        confidence      REAL DEFAULT 1.0,
-        decay_rate      REAL DEFAULT 0.0,
-        last_reinforced TEXT,
-        witness_id      TEXT,
-        embedding_ref   TEXT,
-        metadata        TEXT,
-        created_at      TEXT NOT NULL
-      );
-      CREATE INDEX IF NOT EXISTS idx_graph_edges_source ON graph_edges (source_id);
-      CREATE INDEX IF NOT EXISTS idx_graph_edges_target ON graph_edges (target_id);
-      CREATE INDEX IF NOT EXISTS idx_graph_edges_relation ON graph_edges (relation);
-      CREATE INDEX IF NOT EXISTS idx_graph_edges_reinforced ON graph_edges (last_reinforced);
+        db.exec(`
+      CREATE TABLE IF NOT EXISTS graph_edges (
+        id              TEXT PRIMARY KEY,
+        source_id       TEXT NOT NULL,
+        target_id       TEXT NOT NULL,
+        relation        TEXT NOT NULL,
+        weight          REAL DEFAULT 1.0,
+        confidence      REAL DEFAULT 1.0,
+        decay_rate      REAL DEFAULT 0.0,
+        last_reinforced TEXT,
+        witness_id      TEXT,
+        embedding_ref   TEXT,
+        metadata        TEXT,
+        created_at      TEXT NOT NULL
+      );
+      CREATE INDEX IF NOT EXISTS idx_graph_edges_source ON graph_edges (source_id);
+      CREATE INDEX IF NOT EXISTS idx_graph_edges_target ON graph_edges (target_id);
+      CREATE INDEX IF NOT EXISTS idx_graph_edges_relation ON graph_edges (relation);
+      CREATE INDEX IF NOT EXISTS idx_graph_edges_reinforced ON graph_edges (last_reinforced);
     `);
         _db = db;
         _dbPath = dbPath;
@@ -153,9 +153,9 @@ export async function insertGraphEdge(input) {
             embeddingRef = encodeEmbedding(input.embedding);
         }
         const metaStr = input.metadata ? JSON.stringify(input.metadata) : null;
-        db.prepare(`INSERT OR IGNORE INTO graph_edges
-        (id, source_id, target_id, relation, weight, confidence, decay_rate,
-         last_reinforced, witness_id, embedding_ref, metadata, created_at)
+        db.prepare(`INSERT OR IGNORE INTO graph_edges
+        (id, source_id, target_id, relation, weight, confidence, decay_rate,
+         last_reinforced, witness_id, embedding_ref, metadata, created_at)
        VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`).run(id, input.sourceId, input.targetId, input.relation, input.weight ?? 1.0, input.confidence ?? 1.0, input.decayRate ?? 0.0, input.lastReinforced ?? null, input.witnessId ?? null, embeddingRef, metaStr, createdAt);
         return true;
     }

package/dist/src/memory/memory-bridge.d.ts

@@ -137,6 +137,16 @@ export declare function bridgeDeleteEntry(options: {
     guarded?: boolean;
     error?: string;
 } | null>;
+export declare function bridgePurgeNamespace(options: {
+    namespace: string;
+    dbPath?: string;
+}): Promise<{
+    success: boolean;
+    deletedCount: number;
+    remainingEntries: number;
+    guarded?: boolean;
+    error?: string;
+} | null>;
 /**
  * Generate embedding via AgentDB v3's embedder.
  * Returns null if bridge unavailable — caller falls back to own ONNX/hash.

package/dist/src/memory/memory-bridge.js

@@ -505,25 +505,25 @@ function getDb(registry) {
     // WeakSet so a new db instance re-ensures without a stale global flag.
     if (!_schemaEnsuredDbs.has(db)) {
         try {
-            db.exec(`CREATE TABLE IF NOT EXISTS memory_entries (
-        id TEXT PRIMARY KEY,
-        key TEXT NOT NULL,
-        namespace TEXT DEFAULT 'default',
-        content TEXT NOT NULL,
-        type TEXT DEFAULT 'semantic',
-        embedding TEXT,
-        embedding_model TEXT DEFAULT 'local',
-        embedding_dimensions INTEGER,
-        tags TEXT,
-        metadata TEXT,
-        owner_id TEXT,
-        created_at INTEGER NOT NULL DEFAULT (strftime('%s', 'now') * 1000),
-        updated_at INTEGER NOT NULL DEFAULT (strftime('%s', 'now') * 1000),
-        expires_at INTEGER,
-        last_accessed_at INTEGER,
-        access_count INTEGER DEFAULT 0,
-        status TEXT DEFAULT 'active',
-        UNIQUE(namespace, key)
+            db.exec(`CREATE TABLE IF NOT EXISTS memory_entries (
+        id TEXT PRIMARY KEY,
+        key TEXT NOT NULL,
+        namespace TEXT DEFAULT 'default',
+        content TEXT NOT NULL,
+        type TEXT DEFAULT 'semantic',
+        embedding TEXT,
+        embedding_model TEXT DEFAULT 'local',
+        embedding_dimensions INTEGER,
+        tags TEXT,
+        metadata TEXT,
+        owner_id TEXT,
+        created_at INTEGER NOT NULL DEFAULT (strftime('%s', 'now') * 1000),
+        updated_at INTEGER NOT NULL DEFAULT (strftime('%s', 'now') * 1000),
+        expires_at INTEGER,
+        last_accessed_at INTEGER,
+        access_count INTEGER DEFAULT 0,
+        status TEXT DEFAULT 'active',
+        UNIQUE(namespace, key)
       )`);
             // Ensure indexes
             db.exec(`CREATE INDEX IF NOT EXISTS idx_bridge_ns ON memory_entries(namespace)`);
@@ -672,15 +672,15 @@ export async function bridgeStoreEntry(options) {
         }
         // better-sqlite3 uses synchronous .run() with positional params
         const insertSql = options.upsert
-            ? `INSERT OR REPLACE INTO memory_entries (
-          id, key, namespace, content, type,
-          embedding, embedding_dimensions, embedding_model,
-          tags, metadata, created_at, updated_at, expires_at, status
+            ? `INSERT OR REPLACE INTO memory_entries (
+          id, key, namespace, content, type,
+          embedding, embedding_dimensions, embedding_model,
+          tags, metadata, created_at, updated_at, expires_at, status
         ) VALUES (?, ?, ?, ?, 'semantic', ?, ?, ?, ?, ?, ?, ?, ?, 'active')`
-            : `INSERT INTO memory_entries (
-          id, key, namespace, content, type,
-          embedding, embedding_dimensions, embedding_model,
-          tags, metadata, created_at, updated_at, expires_at, status
+            : `INSERT INTO memory_entries (
+          id, key, namespace, content, type,
+          embedding, embedding_dimensions, embedding_model,
+          tags, metadata, created_at, updated_at, expires_at, status
         ) VALUES (?, ?, ?, ?, 'semantic', ?, ?, ?, ?, ?, ?, ?, ?, 'active')`;
         // #1941: provision a `vector_indexes` row for this namespace before the
         // entry insert. AgentDB's HNSW/router keys lookups by namespace via this
@@ -699,10 +699,10 @@ export async function bridgeStoreEntry(options) {
         // stop reporting "HNSW index: 0 vectors" while embedded entries exist.
         try {
             ctx.db
-                .prepare(`UPDATE vector_indexes SET
-             total_vectors = (SELECT COUNT(*) FROM memory_entries
-                              WHERE namespace = ? AND embedding IS NOT NULL),
-             updated_at = ?
+                .prepare(`UPDATE vector_indexes SET
+             total_vectors = (SELECT COUNT(*) FROM memory_entries
+                              WHERE namespace = ? AND embedding IS NOT NULL),
+             updated_at = ?
            WHERE name = ?`)
                 .run(namespace, now, namespace);
         }
@@ -775,11 +775,11 @@ export async function bridgeSearchEntries(options) {
             : '';
         let rows;
         try {
-            const stmt = ctx.db.prepare(`
-        SELECT id, key, namespace, content, embedding
-        FROM memory_entries
-        WHERE status = 'active' ${nsFilter}
-        LIMIT 1000
+            const stmt = ctx.db.prepare(`
+        SELECT id, key, namespace, content, embedding
+        FROM memory_entries
+        WHERE status = 'active' ${nsFilter}
+        LIMIT 1000
       `);
             rows = effectiveNamespace !== 'all' ? stmt.all(effectiveNamespace) : stmt.all();
         }
@@ -900,12 +900,12 @@ export async function bridgeListEntries(options) {
         // List
         const entries = [];
         try {
-            const stmt = ctx.db.prepare(`
-        SELECT id, key, namespace, content, embedding, access_count, created_at, updated_at
-        FROM memory_entries
-        WHERE ${statusFilter} ${nsFilter}
-        ORDER BY updated_at DESC
-        LIMIT ? OFFSET ?
+            const stmt = ctx.db.prepare(`
+        SELECT id, key, namespace, content, embedding, access_count, created_at, updated_at
+        FROM memory_entries
+        WHERE ${statusFilter} ${nsFilter}
+        ORDER BY updated_at DESC
+        LIMIT ? OFFSET ?
       `);
             const rows = stmt.all(...nsParams, limit, offset);
             for (const row of rows) {
@@ -974,11 +974,11 @@ export async function bridgeGetEntry(options) {
         }
         let row;
         try {
-            const stmt = ctx.db.prepare(`
-        SELECT id, key, namespace, content, embedding, access_count, created_at, updated_at, tags
-        FROM memory_entries
-        WHERE status = 'active' AND key = ? AND namespace = ?
-        LIMIT 1
+            const stmt = ctx.db.prepare(`
+        SELECT id, key, namespace, content, embedding, access_count, created_at, updated_at, tags
+        FROM memory_entries
+        WHERE status = 'active' AND key = ? AND namespace = ?
+        LIMIT 1
       `);
             row = stmt.get(key, namespace);
         }
@@ -1042,10 +1042,10 @@ export async function bridgeDeleteEntry(options) {
         // Soft delete using parameterized query
         let changes = 0;
         try {
-            const result = ctx.db.prepare(`
-        UPDATE memory_entries
-        SET status = 'deleted', updated_at = ?
-        WHERE key = ? AND namespace = ? AND status = 'active'
+            const result = ctx.db.prepare(`
+        UPDATE memory_entries
+        SET status = 'deleted', updated_at = ?
+        WHERE key = ? AND namespace = ? AND status = 'active'
       `).run(Date.now(), key, namespace);
             changes = result?.changes ?? 0;
         }
@@ -1081,6 +1081,57 @@ export async function bridgeDeleteEntry(options) {
         return null;
     }
 }
+// #2666 — Hard, namespace-scoped purge. bridgeDeleteEntry above only ever
+// soft-deletes a single (namespace, key); this is a real
+// `DELETE FROM memory_entries WHERE namespace = ?` against the live
+// better-sqlite3-style handle, for callers (e.g. a plugin's index-reconcile
+// step) that need a namespace to be genuinely empty rather than tombstoned.
+// Irreversible — callers must gate this behind an explicit confirmation.
+export async function bridgePurgeNamespace(options) {
+    const registry = await getRegistry(options.dbPath);
+    if (!registry)
+        return null;
+    const ctx = getDb(registry);
+    if (!ctx)
+        return null;
+    try {
+        const { namespace } = options;
+        const guardResult = await guardValidate(registry, 'purge', { namespace });
+        if (!guardResult.allowed) {
+            return { success: false, deletedCount: 0, remainingEntries: 0, error: `MutationGuard rejected: ${guardResult.reason}` };
+        }
+        let deletedCount = 0;
+        try {
+            const result = ctx.db.prepare(`DELETE FROM memory_entries WHERE namespace = ?`).run(namespace);
+            deletedCount = result?.changes ?? 0;
+        }
+        catch (e) {
+            return { success: false, deletedCount: 0, remainingEntries: 0, error: e instanceof Error ? e.message : String(e) };
+        }
+        const safeNs = String(namespace).replace(/:/g, '_');
+        await cacheInvalidate(registry, `namespace:${safeNs}`);
+        if (deletedCount > 0) {
+            await logAttestation(registry, 'purge', namespace, { namespace, deletedCount });
+        }
+        let remaining = 0;
+        try {
+            const row = ctx.db.prepare(`SELECT COUNT(*) as cnt FROM memory_entries WHERE status = 'active'`).get();
+            remaining = row?.cnt ?? 0;
+        }
+        catch {
+            // Non-fatal
+        }
+        return {
+            success: true,
+            deletedCount,
+            remainingEntries: remaining,
+            guarded: true,
+        };
+    }
+    catch {
+        return null;
+    }
+}
 // ===== Phase 2: Embedding bridge =====
 /**
  * Generate embedding via AgentDB v3's embedder.
@@ -1207,11 +1258,11 @@ export async function bridgeSearchHNSW(queryEmbedding, options, dbPath) {
             : '';
         let rows;
         try {
-            const stmt = ctx.db.prepare(`
-        SELECT id, key, namespace, content, embedding
-        FROM memory_entries
-        WHERE status = 'active' AND embedding IS NOT NULL ${nsFilter}
-        LIMIT 10000
+            const stmt = ctx.db.prepare(`
+        SELECT id, key, namespace, content, embedding
+        FROM memory_entries
+        WHERE status = 'active' AND embedding IS NOT NULL ${nsFilter}
+        LIMIT 10000
       `);
             rows = nsFilter
                 ? stmt.all(options.namespace)
@@ -1263,12 +1314,12 @@ export async function bridgeAddToHNSW(id, embedding, entry, dbPath) {
     try {
         const now = Date.now();
         const embeddingJson = JSON.stringify(embedding);
-        ctx.db.prepare(`
-      INSERT OR REPLACE INTO memory_entries (
-        id, key, namespace, content, type,
-        embedding, embedding_dimensions, embedding_model,
-        created_at, updated_at, status
-      ) VALUES (?, ?, ?, ?, 'semantic', ?, ?, 'Xenova/all-MiniLM-L6-v2', ?, ?, 'active')
+        ctx.db.prepare(`
+      INSERT OR REPLACE INTO memory_entries (
+        id, key, namespace, content, type,
+        embedding, embedding_dimensions, embedding_model,
+        created_at, updated_at, status
+      ) VALUES (?, ?, ?, ?, 'semantic', ?, ?, 'Xenova/all-MiniLM-L6-v2', ?, ?, 'active')
     `).run(id, entry.key, entry.namespace, entry.content, embeddingJson, embedding.length, now, now);
         return true;
     }
@@ -1592,9 +1643,9 @@ export async function bridgeRecordCausalEdge(options) {
         const ctx = getDb(registry);
         if (ctx) {
             try {
-                ctx.db.prepare(`
-          INSERT OR REPLACE INTO memory_entries (id, key, namespace, content, type, created_at, updated_at, status)
-          VALUES (?, ?, 'causal-edges', ?, 'procedural', ?, ?, 'active')
+                ctx.db.prepare(`
+          INSERT OR REPLACE INTO memory_entries (id, key, namespace, content, type, created_at, updated_at, status)
+          VALUES (?, ?, 'causal-edges', ?, 'procedural', ?, ?, 'active')
         `).run(generateId('edge'), `${options.sourceId}→${options.targetId}`, JSON.stringify(options), Date.now(), Date.now());
                 return { success: true, controller: 'bridge-fallback' };
             }
@@ -1673,10 +1724,10 @@ export async function bridgeDeleteHierarchical(options) {
         const ctx = getDb(registry);
         if (ctx) {
             try {
-                const result = ctx.db.prepare(`
-          UPDATE memory_entries
-          SET status = 'deleted', updated_at = ?
-          WHERE key = ? AND namespace LIKE 'hierarchical%' AND status = 'active'
+                const result = ctx.db.prepare(`
+          UPDATE memory_entries
+          SET status = 'deleted', updated_at = ?
+          WHERE key = ? AND namespace LIKE 'hierarchical%' AND status = 'active'
         `).run(Date.now(), key);
                 const changes = result?.changes ?? 0;
                 if (changes > 0) {
@@ -1752,10 +1803,10 @@ export async function bridgeDeleteCausalEdge(options) {
         const ctx = getDb(registry);
         if (ctx) {
             try {
-                const result = ctx.db.prepare(`
-          UPDATE memory_entries
-          SET status = 'deleted', updated_at = ?
-          WHERE key = ? AND namespace = 'causal-edges' AND status = 'active'
+                const result = ctx.db.prepare(`
+          UPDATE memory_entries
+          SET status = 'deleted', updated_at = ?
+          WHERE key = ? AND namespace = 'causal-edges' AND status = 'active'
         `).run(Date.now(), edgeKey);
                 const changes = result?.changes ?? 0;
                 if (changes > 0) {
@@ -1827,18 +1878,18 @@ export async function bridgeDeleteCausalNode(options) {
         let deletedEdges = 0;
         let deletedNode = false;
         try {
-            const edgeResult = ctx.db.prepare(`
-        UPDATE memory_entries
-        SET status = 'deleted', updated_at = ?
-        WHERE namespace = 'causal-edges'
-          AND status = 'active'
-          AND (key LIKE ? OR key LIKE ?)
+            const edgeResult = ctx.db.prepare(`
+        UPDATE memory_entries
+        SET status = 'deleted', updated_at = ?
+        WHERE namespace = 'causal-edges'
+          AND status = 'active'
+          AND (key LIKE ? OR key LIKE ?)
       `).run(Date.now(), `${nodeId}→%`, `%→${nodeId}`);
             deletedEdges = edgeResult?.changes ?? 0;
-            const nodeResult = ctx.db.prepare(`
-        UPDATE memory_entries
-        SET status = 'deleted', updated_at = ?
-        WHERE key = ? AND status = 'active'
+            const nodeResult = ctx.db.prepare(`
+        UPDATE memory_entries
+        SET status = 'deleted', updated_at = ?
+        WHERE key = ? AND status = 'active'
       `).run(Date.now(), nodeId);
             deletedNode = (nodeResult?.changes ?? 0) > 0;
             await logAttestation(registry, 'delete', nodeId, { namespace: 'causal-nodes', deletedEdges });
@@ -2325,11 +2376,11 @@ export async function bridgeGetAllEmbeddings(options) {
     try {
         const dims = options?.dimensions ?? 384;
         const maxRows = options?.limit ?? 50000;
-        const rows = ctx.db.prepare(`
-      SELECT id, key, namespace, embedding
-      FROM memory_entries
-      WHERE status = 'active' AND embedding IS NOT NULL
-      LIMIT ?
+        const rows = ctx.db.prepare(`
+      SELECT id, key, namespace, embedding
+      FROM memory_entries
+      WHERE status = 'active' AND embedding IS NOT NULL
+      LIMIT ?
     `).all(maxRows);
         const results = [];
         for (const row of rows) {

package/dist/src/memory/memory-initializer.d.ts

@@ -516,6 +516,22 @@ export declare function deleteEntry(options: {
     remainingEntries: number;
     error?: string;
 }>;
+/**
+ * Advisory O_EXCL lock scoped to a single memory.db file (`<dbPath>.lock`),
+ * same stale-takeover pattern as services/global-ai-budget.ts. Only
+ * meaningful between callers that opt into it (purgeNamespace does); it
+ * cannot coordinate against writers that don't call this helper.
+ */
+export declare function withMemoryDbLock<T>(dbPath: string, fn: () => Promise<T> | T): Promise<T>;
+export declare function purgeNamespace(options: {
+    namespace: string;
+    dbPath?: string;
+}): Promise<{
+    success: boolean;
+    deletedCount: number;
+    remainingEntries: number;
+    error?: string;
+}>;
 declare const _default: {
     initializeMemoryDatabase: typeof initializeMemoryDatabase;
     checkMemoryInitialization: typeof checkMemoryInitialization;
@@ -530,6 +546,8 @@ declare const _default: {
     listEntries: typeof listEntries;
     getEntry: typeof getEntry;
     deleteEntry: typeof deleteEntry;
+    purgeNamespace: typeof purgeNamespace;
+    withMemoryDbLock: typeof withMemoryDbLock;
     rebuildSearchIndex: typeof rebuildSearchIndex;
     MEMORY_SCHEMA_V3: string;
     getInitialMetadata: typeof getInitialMetadata;