@claude-flow/cli 3.32.21 → 3.32.22

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -1 +1 @@
1
- 3.32.19
1
+ 3.32.9
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "manifest": {
3
- "version": "3.32.21",
3
+ "version": "3.32.22",
4
4
  "files": {
5
5
  "auto-memory-hook.mjs": "e3e1033b24704992ddef6b31c7fa9dd7fcd9e1af7935dd77ef73402b916b31e6",
6
6
  "hook-handler.cjs": "f87ec28684bfc5fd0a54c46bd2a53a3fb037defe71d0ea4b8a5cb88a2cd87a3f",
@@ -8,6 +8,6 @@
8
8
  "statusline.cjs": "10f74a1aa9af217d0623c0a9839d82825b0eed31a4707a7531a85c6116869a6c"
9
9
  }
10
10
  },
11
- "signature": "/u6cu5Rvxtw6aRDpqL1ZUGcCxrzoRUfDRtDI13Yd8RQres08uHFd1tSWJgDDw+fYYNHvmR/yfJS3Hb9KCccTAQ==",
11
+ "signature": "x+a6i2vOgGoyYNLlXKQR5fpycPB+vO4DJtKMljxX4ZNpY8ED0AQ2XoMToVJn/2XWA+70yerxmytfVBDP546WCg==",
12
12
  "algorithm": "ed25519"
13
13
  }
@@ -1,5 +1,5 @@
1
1
  {
2
- "adoptedAt": 1785103598198,
2
+ "adoptedAt": 1785161585700,
3
3
  "championId": "sha256:6141a8ea990c5063b77e090ae8f37f9c539d8aa8f58dcceb30f3a82f97e57319",
4
4
  "manifest": {
5
5
  "schema": "ruflo.proven-config/v1",
@@ -1,8 +1,8 @@
1
1
  {
2
2
  "schemaVersion": 1,
3
3
  "generation": 1,
4
- "generatedAt": "2026-07-27T03:27:12.952Z",
5
- "gitSha": "6b6eef90",
4
+ "generatedAt": "2026-07-27T14:27:09.930Z",
5
+ "gitSha": "e263c269",
6
6
  "catalog": {
7
7
  "agents": 164,
8
8
  "tools": 387,
@@ -78,10 +78,13 @@ const storeCommand = {
78
78
  // on the value BEFORE persistence and refuse the write if a
79
79
  // finding is present. Opt-in per-call; RUFLO_MEMORY_SCAN_ON_WRITE=1
80
80
  // enables it globally.
81
+ // NOTE: no `default:` here — needed so the ADR-125 CLI-flag-wins
82
+ // precedence (`ctx.flags.scanContent ?? envVar`) can distinguish
83
+ // "user didn't pass the flag" (undefined) from "user explicitly
84
+ // said --no-scan-content" (false). Fixes #2794.
81
85
  name: 'scan-content',
82
86
  description: 'Scan the value for injection payloads before persisting (dream-cycle #2752 MemPoison gate)',
83
87
  type: 'boolean',
84
- default: false
85
88
  },
86
89
  DB_PATH_OPTION
87
90
  ],
@@ -126,9 +129,11 @@ const storeCommand = {
126
129
  return { success: false, exitCode: 1 };
127
130
  }
128
131
  // #2752 MemPoison gate — scan before persist when opted in.
129
- const scanContentFlag = ctx.flags.scanContent;
130
- const scanContentEnv = /^(1|true|yes|on)$/i.test(String(process.env.RUFLO_MEMORY_SCAN_ON_WRITE ?? ''));
131
- if (scanContentFlag || scanContentEnv) {
132
+ // CLI flag ctx.flags.scanContent takes precedence over RUFLO_MEMORY_SCAN_ON_WRITE env var
133
+ // (ADR-125 §"CLI flag wins" / ADR-130 §env-var-config-precedence fix for #2794).
134
+ const scanContent = ctx.flags.scanContent
135
+ ?? /^(1|true|yes|on)$/i.test(String(process.env.RUFLO_MEMORY_SCAN_ON_WRITE ?? ''));
136
+ if (scanContent) {
132
137
  try {
133
138
  const { scanChannelMessage } = await import('../security/channel-guard.js');
134
139
  const scan = scanChannelMessage(value);
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@claude-flow/cli",
3
- "version": "3.32.21",
3
+ "version": "3.32.22",
4
4
  "type": "module",
5
5
  "description": "Ruflo CLI - Enterprise AI agent orchestration with 60+ specialized agents, swarm coordination, MCP server, self-learning hooks, and vector memory for Claude Code",
6
6
  "main": "dist/src/index.js",