@claude-flow/cli 3.32.8 → 3.32.10

package/dist/src/init/statusline-generator.js

@@ -148,30 +148,30 @@ export function generateStatuslineHook(options) {
     if (!options.statusline.enabled) {
         return '#!/bin/bash\n# Statusline disabled\n';
     }
-    return `#!/bin/bash
-# RuFlo V3 Statusline Hook
-# Source this in your .bashrc/.zshrc for terminal statusline
-
-# Function to get statusline
-claude_flow_statusline() {
-  local statusline_script="\${CLAUDE_FLOW_DIR:-.claude}/helpers/statusline.cjs"
-  if [ -f "$statusline_script" ]; then
-    node "$statusline_script" 2>/dev/null || echo ""
-  fi
-}
-
-# Bash: Add to PS1
-# export PS1='$(claude_flow_statusline) \\n\\$ '
-
-# Zsh: Add to RPROMPT
-# export RPROMPT='$(claude_flow_statusline)'
-
-# Claude Code: Add to .claude/settings.json
-# "statusLine": {
-#   "type": "command",
-#   "command": "node .claude/helpers/statusline.cjs 2>/dev/null"
-#   "when": "test -f .claude/helpers/statusline.cjs"
-# }
+    return `#!/bin/bash
+# RuFlo V3 Statusline Hook
+# Source this in your .bashrc/.zshrc for terminal statusline
+
+# Function to get statusline
+claude_flow_statusline() {
+  local statusline_script="\${CLAUDE_FLOW_DIR:-.claude}/helpers/statusline.cjs"
+  if [ -f "$statusline_script" ]; then
+    node "$statusline_script" 2>/dev/null || echo ""
+  fi
+}
+
+# Bash: Add to PS1
+# export PS1='$(claude_flow_statusline) \\n\\$ '
+
+# Zsh: Add to RPROMPT
+# export RPROMPT='$(claude_flow_statusline)'
+
+# Claude Code: Add to .claude/settings.json
+# "statusLine": {
+#   "type": "command",
+#   "command": "node .claude/helpers/statusline.cjs 2>/dev/null"
+#   "when": "test -f .claude/helpers/statusline.cjs"
+# }
 `;
 }
 //# sourceMappingURL=statusline-generator.js.map

package/dist/src/mcp-tools/agentdb-tools.js

@@ -1182,21 +1182,21 @@ function buildKHopCTE(nodeId, depth, relation, maxNodes) {
     // since validateIdentifier has already vetted the value; but we sanitize quotes anyway).
     const safeNodeId = nodeId.replace(/'/g, "''");
     const relFilter = relation ? `AND e.relation = '${relation.replace(/'/g, "''")}'` : '';
-    return `
-    WITH RECURSIVE khop(node_id, hop_depth) AS (
-      SELECT '${safeNodeId}', 0
-      UNION
-      SELECT e.target_id, k.hop_depth + 1
-      FROM graph_edges e
-      JOIN khop k ON e.source_id = k.node_id
-      WHERE k.hop_depth < ${depth} ${relFilter}
-    )
-    SELECT DISTINCT node_id, MIN(hop_depth) as depth
-    FROM khop
-    WHERE node_id != '${safeNodeId}'
-    GROUP BY node_id
-    ORDER BY depth, node_id
-    LIMIT ${maxNodes}
+    return `
+    WITH RECURSIVE khop(node_id, hop_depth) AS (
+      SELECT '${safeNodeId}', 0
+      UNION
+      SELECT e.target_id, k.hop_depth + 1
+      FROM graph_edges e
+      JOIN khop k ON e.source_id = k.node_id
+      WHERE k.hop_depth < ${depth} ${relFilter}
+    )
+    SELECT DISTINCT node_id, MIN(hop_depth) as depth
+    FROM khop
+    WHERE node_id != '${safeNodeId}'
+    GROUP BY node_id
+    ORDER BY depth, node_id
+    LIMIT ${maxNodes}
   `;
 }
 function cosineSim(a, b) {

package/dist/src/mcp-tools/browser-intent-tools.js

@@ -290,25 +290,25 @@ export function buildPageAgentInjection(iifeSource, pageConfig, task) {
         throw new DemoLeakError(leak);
     const cfgJson = JSON.stringify(pageConfig);
     const taskJson = JSON.stringify(task);
-    return `${safeIife}
-;(function(){
-  window.${BROWSER_ACT_RESULT_GLOBAL} = null;
-  try {
-    if (!window.PageAgent) {
-      window.${BROWSER_ACT_RESULT_GLOBAL} = { success: false, error: 'PageAgent not defined after injection' };
-      return;
-    }
-    var agent = new window.PageAgent(${cfgJson});
-    window.__ruflo_pageAgent__ = agent;
-    agent.execute(${taskJson}).then(function(r){
-      window.${BROWSER_ACT_RESULT_GLOBAL} = { success: true, result: r };
-    }).catch(function(e){
-      window.${BROWSER_ACT_RESULT_GLOBAL} = { success: false, error: String((e && e.message) || e) };
-    });
-  } catch (e) {
-    window.${BROWSER_ACT_RESULT_GLOBAL} = { success: false, error: String((e && e.message) || e) };
-  }
-})();
+    return `${safeIife}
+;(function(){
+  window.${BROWSER_ACT_RESULT_GLOBAL} = null;
+  try {
+    if (!window.PageAgent) {
+      window.${BROWSER_ACT_RESULT_GLOBAL} = { success: false, error: 'PageAgent not defined after injection' };
+      return;
+    }
+    var agent = new window.PageAgent(${cfgJson});
+    window.__ruflo_pageAgent__ = agent;
+    agent.execute(${taskJson}).then(function(r){
+      window.${BROWSER_ACT_RESULT_GLOBAL} = { success: true, result: r };
+    }).catch(function(e){
+      window.${BROWSER_ACT_RESULT_GLOBAL} = { success: false, error: String((e && e.message) || e) };
+    });
+  } catch (e) {
+    window.${BROWSER_ACT_RESULT_GLOBAL} = { success: false, error: String((e && e.message) || e) };
+  }
+})();
 'ruflo-browser-act-injected'`;
 }
 // ============================================================================

package/dist/src/mcp-tools/browser-tools.js

@@ -29,9 +29,17 @@ export async function execBrowserCommand(args, session = 'default') {
         const err = error;
         if (err.code === 'ENOENT') {
             try {
+                // #2770: On Windows, `npx` ships as `npx.cmd`; execFileSync cannot spawn
+                // a .cmd file without going through cmd.exe. Enable shell on win32 so
+                // cmd.exe resolves the .cmd extension. POSIX keeps shell:false.
+                // NOTE: shell:true joins args by spaces and passes to cmd.exe — the args
+                // here are hard-coded flags + a package name, so no injection risk. If
+                // user-controlled args are ever added, escape them before spawn.
                 result = execFileSync('npx', ['--yes', 'agent-browser', ...fullArgs], {
                     encoding: 'utf-8',
                     timeout: 60000,
+                    shell: process.platform === 'win32',
+                    windowsHide: true,
                 });
             }
             catch (npxError) {

package/dist/src/mcp-tools/hooks-tools.js

@@ -1372,6 +1372,27 @@ export const hooksPostTask = {
                 }
             }
             catch { /* non-critical */ }
+            // #2786 fix-2 — also mirror into the JSON memory store so
+            // `getIntelligenceStatsFromMemory()` (which reads .claude-flow/memory/store.json
+            // synchronously) counts this routing decision in the hooks_metrics dashboard.
+            // The AgentDB write above is authoritative for cross-session retrieval; this
+            // is just the counter surface the sync reader depends on.
+            try {
+                const key = `routing-decision:${taskId}`;
+                const store = loadMemoryStore();
+                store.entries[key] = {
+                    key,
+                    value: JSON.stringify({ task: taskText, agent, success, quality, keywords: outcomeKeywords }),
+                    namespace: 'patterns',
+                    createdAt: new Date().toISOString(),
+                    metadata: { type: 'routing-decision', confidence: typeof quality === 'number' ? quality : undefined, agent, success },
+                };
+                const memDir = resolve(MEMORY_DIR);
+                if (!existsSync(memDir))
+                    mkdirSync(memDir, { recursive: true });
+                writeFileSync(getMemoryPath(), JSON.stringify(store, null, 2), 'utf-8');
+            }
+            catch { /* non-critical */ }
         }
         const duration = Date.now() - startTime;
         // Persist to auto-memory-store for statusline visibility

package/dist/src/mcp-tools/memory-tools.js

@@ -249,7 +249,7 @@ async function ensureInitialized() {
 export const memoryTools = [
     {
         name: 'memory_store',
-        description: 'Persistent key-value store with vector embedding — survives across sessions and is searchable by meaning, not just by file path. Use when native Write is wrong because the data is not a file (e.g. a learned pattern, a decision, a budget config) AND you need to recall it later by semantic query, not by path. Defaults to namespace="default"; pass --upsert=true to update an existing key.',
+        description: 'Persistent key-value store with vector embedding — survives across sessions and is searchable by meaning, not just by file path. Use when native Write is wrong because the data is not a file (e.g. a learned pattern, a decision, a budget config) AND you need to recall it later by semantic query, not by path. Defaults to namespace="default". Upsert semantics: writing an existing key updates it (matching the CLI `memory store` default); pass `upsert: false` to force strict-insert instead.',
         category: 'memory',
         inputSchema: {
             type: 'object',
@@ -263,7 +263,7 @@ export const memoryTools = [
                     description: 'Optional tags for filtering',
                 },
                 ttl: { type: 'number', description: 'Time-to-live in seconds (optional)' },
-                upsert: { type: 'boolean', description: 'If true, update existing key instead of failing (default: false)' },
+                upsert: { type: 'boolean', description: 'Update existing key instead of failing (default: true, matching CLI `memory store`; set false for strict-insert). #2775 parity.' },
             },
             required: ['key', 'value'],
         },
@@ -276,7 +276,8 @@ export const memoryTools = [
             const value = typeof rawValue === 'string' ? rawValue : (rawValue !== undefined ? JSON.stringify(rawValue) : '');
             const tags = input.tags || [];
             const ttl = input.ttl;
-            const upsert = input.upsert || false;
+            // #2775 parity with CLI: default true; only explicit `upsert: false` opts out.
+            const upsert = input.upsert !== false;
             if (!value) {
                 return {
                     success: false,

package/dist/src/memory/graph-edge-writer.d.ts

@@ -90,6 +90,15 @@ export declare function countGraphEdges(dbPath?: string): Promise<number>;
  * #2431 fix: also explicitly closes the prior handle so file locks
  * release immediately — better-sqlite3 holds an OS-level file handle
  * which the prior sql.js implementation did not.
+ *
+ * #2736-followup fix: `close()` alone only checkpoints the WAL back into
+ * the main file as a best-effort PASSIVE checkpoint when SQLite considers
+ * this the last connection — which is not guaranteed to fully flush under
+ * contention, and was observed leaving writes invisible to a same-process
+ * sql.js reader that re-reads the raw file immediately after close() on
+ * Linux CI runners (not reproduced on Windows). Force a blocking TRUNCATE
+ * checkpoint before close so cross-engine readers always see committed
+ * writes deterministically, regardless of platform/timing.
  */
 export declare function _resetBridgeDb(): void;
 //# sourceMappingURL=graph-edge-writer.d.ts.map

package/dist/src/memory/graph-edge-writer.js

@@ -100,25 +100,25 @@ export async function getBridgeDb(customDbPath, opts) {
         db.pragma('busy_timeout = 5000'); // wait up to 5s on lock contention
         // Ensure graph_edges table exists (in case this is an older DB that
         // predates ADR-130 Phase 1 schema migration).
-        db.exec(`
-      CREATE TABLE IF NOT EXISTS graph_edges (
-        id              TEXT PRIMARY KEY,
-        source_id       TEXT NOT NULL,
-        target_id       TEXT NOT NULL,
-        relation        TEXT NOT NULL,
-        weight          REAL DEFAULT 1.0,
-        confidence      REAL DEFAULT 1.0,
-        decay_rate      REAL DEFAULT 0.0,
-        last_reinforced TEXT,
-        witness_id      TEXT,
-        embedding_ref   TEXT,
-        metadata        TEXT,
-        created_at      TEXT NOT NULL
-      );
-      CREATE INDEX IF NOT EXISTS idx_graph_edges_source ON graph_edges (source_id);
-      CREATE INDEX IF NOT EXISTS idx_graph_edges_target ON graph_edges (target_id);
-      CREATE INDEX IF NOT EXISTS idx_graph_edges_relation ON graph_edges (relation);
-      CREATE INDEX IF NOT EXISTS idx_graph_edges_reinforced ON graph_edges (last_reinforced);
+        db.exec(`
+      CREATE TABLE IF NOT EXISTS graph_edges (
+        id              TEXT PRIMARY KEY,
+        source_id       TEXT NOT NULL,
+        target_id       TEXT NOT NULL,
+        relation        TEXT NOT NULL,
+        weight          REAL DEFAULT 1.0,
+        confidence      REAL DEFAULT 1.0,
+        decay_rate      REAL DEFAULT 0.0,
+        last_reinforced TEXT,
+        witness_id      TEXT,
+        embedding_ref   TEXT,
+        metadata        TEXT,
+        created_at      TEXT NOT NULL
+      );
+      CREATE INDEX IF NOT EXISTS idx_graph_edges_source ON graph_edges (source_id);
+      CREATE INDEX IF NOT EXISTS idx_graph_edges_target ON graph_edges (target_id);
+      CREATE INDEX IF NOT EXISTS idx_graph_edges_relation ON graph_edges (relation);
+      CREATE INDEX IF NOT EXISTS idx_graph_edges_reinforced ON graph_edges (last_reinforced);
     `);
         _db = db;
         _dbPath = dbPath;
@@ -153,9 +153,9 @@ export async function insertGraphEdge(input) {
             embeddingRef = encodeEmbedding(input.embedding);
         }
         const metaStr = input.metadata ? JSON.stringify(input.metadata) : null;
-        db.prepare(`INSERT OR IGNORE INTO graph_edges
-        (id, source_id, target_id, relation, weight, confidence, decay_rate,
-         last_reinforced, witness_id, embedding_ref, metadata, created_at)
+        db.prepare(`INSERT OR IGNORE INTO graph_edges
+        (id, source_id, target_id, relation, weight, confidence, decay_rate,
+         last_reinforced, witness_id, embedding_ref, metadata, created_at)
        VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`).run(id, input.sourceId, input.targetId, input.relation, input.weight ?? 1.0, input.confidence ?? 1.0, input.decayRate ?? 0.0, input.lastReinforced ?? null, input.witnessId ?? null, embeddingRef, metaStr, createdAt);
         return true;
     }
@@ -203,9 +203,22 @@ export async function countGraphEdges(dbPath) {
  * #2431 fix: also explicitly closes the prior handle so file locks
  * release immediately — better-sqlite3 holds an OS-level file handle
  * which the prior sql.js implementation did not.
+ *
+ * #2736-followup fix: `close()` alone only checkpoints the WAL back into
+ * the main file as a best-effort PASSIVE checkpoint when SQLite considers
+ * this the last connection — which is not guaranteed to fully flush under
+ * contention, and was observed leaving writes invisible to a same-process
+ * sql.js reader that re-reads the raw file immediately after close() on
+ * Linux CI runners (not reproduced on Windows). Force a blocking TRUNCATE
+ * checkpoint before close so cross-engine readers always see committed
+ * writes deterministically, regardless of platform/timing.
  */
 export function _resetBridgeDb() {
     if (_db) {
+        try {
+            _db.pragma('wal_checkpoint(TRUNCATE)');
+        }
+        catch { /* best-effort */ }
         try {
             _db.close();
         }