@claude-flow/cli 3.38.11 → 3.38.12

package/.claude/helpers/.helpers-version

@@ -1 +1 @@
-3.32.29
+3.38.12

package/.claude/helpers/helpers.manifest.json

@@ -1,6 +1,6 @@
 {
   "manifest": {
-    "version": "3.38.11",
+    "version": "3.38.12",
     "files": {
       "auto-memory-hook.mjs": "85fe05c757421c52137c0bc8545a0896bab6b4714538c2a11d1d0835bfcc8c1c",
       "hook-handler.cjs": "dae295fb9ae2626b89899c19a20cc911541af82b52d2eeb9b214d618b96e9a86",
@@ -8,6 +8,6 @@
       "statusline.cjs": "0457fe53f8cd2c56458ff178392536a5868efd1a573665fa43bc01d2d95ca677"
     }
   },
-  "signature": "rNkivgIb+R5mwQcChrNF+m4lsfPPlKBn4oizP9Q7nuuIi8en/J3NJYf5l6mPRfEc4vdlqnnf0+Oid/007092Dw==",
+  "signature": "8JINtA8uubiBqNQbsz8OL2fcc4xmKGk6gKPGoa1ib7/21nYDaYWiWrZB/4xli8AGUdmQuMS9GT6ANbpPjqAcCw==",
   "algorithm": "ed25519"
 }

package/catalog-manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 1,
   "generation": 4,
-  "generatedAt": "2026-08-14T23:30:39.000Z",
-  "gitSha": "45e65b5d",
+  "generatedAt": "2026-08-15T15:33:50.000Z",
+  "gitSha": "44b9dad1",
   "catalog": {
     "agents": 164,
     "tools": 397,

package/dist/src/commands/hooks.js

@@ -4457,7 +4457,8 @@ const teammateIdleCommand = {
             short: 'a',
             description: 'Automatically assign pending tasks to idle teammate',
             type: 'boolean',
-            default: true
+            // #3031: explicit opt-in only. Idle/liveness is not assignment authority.
+            default: false
         },
         {
             name: 'check-task-list',
@@ -4483,7 +4484,7 @@ const teammateIdleCommand = {
         { command: 'claude-flow hooks teammate-idle -t worker-1 --check-task-list', description: 'Check tasks for specific teammate' }
     ],
     action: async (ctx) => {
-        const autoAssign = ctx.flags.autoAssign !== false;
+        const autoAssign = ctx.flags.autoAssign === true;
         const checkTaskList = ctx.flags.checkTaskList !== false;
         const teammateId = ctx.flags.teammateId;
         const teamName = ctx.flags.teamName;

package/dist/src/init/executor.d.ts

@@ -23,6 +23,12 @@ export interface UpgradeResult {
     /** Added by --settings flag */
     settingsUpdated?: string[];
 }
+/**
+ * Merge new settings into existing settings.json
+ * Preserves user customizations while adding new features like Agent Teams
+ * Uses platform-specific commands for Mac, Linux, and Windows
+ */
+export declare function mergeSettingsForUpgrade(existing: Record<string, unknown>): Record<string, unknown>;
 /**
  * Execute upgrade - updates helpers and creates missing metrics without losing data
  * This is safe for existing users who want the latest statusline fixes

package/dist/src/init/executor.js

@@ -276,7 +276,7 @@ export async function executeInit(options) {
  * Preserves user customizations while adding new features like Agent Teams
  * Uses platform-specific commands for Mac, Linux, and Windows
  */
-function mergeSettingsForUpgrade(existing) {
+export function mergeSettingsForUpgrade(existing) {
     const merged = { ...existing };
     const platform = detectPlatform();
     const isWindows = platform.os === 'windows';
@@ -440,13 +440,15 @@ function mergeSettingsForUpgrade(existing) {
             taskListEnabled: true,
             mailboxEnabled: true,
             coordination: {
-                autoAssignOnIdle: true,
+                // #3031: an upgrade must remove the unsafe generated default. Idle
+                // status is not proof that a task is unowned or inside agent scope.
+                autoAssignOnIdle: false,
                 trainPatternsOnComplete: true,
                 notifyLeadOnComplete: true,
                 sharedMemoryNamespace: 'agent-teams',
             },
             hooks: {
-                teammateIdle: { enabled: true, autoAssign: true, checkTaskList: true },
+                teammateIdle: { enabled: true, autoAssign: false, checkTaskList: true },
                 taskCompleted: { enabled: true, trainPatterns: true, notifyLead: true },
             },
         },

package/dist/src/init/settings-generator.js

@@ -83,7 +83,11 @@ export function generateSettings(options) {
             taskListEnabled: true,
             mailboxEnabled: true,
             coordination: {
-                autoAssignOnIdle: true, // Auto-assign pending tasks when teammate is idle
+                // #3031: Liveness alone is not authority. Keep idle assignment off
+                // until the scheduler can prove task ownership, agent scope, and a
+                // refusal/back-off state. Users may explicitly opt in after supplying
+                // those controls in their host configuration.
+                autoAssignOnIdle: false,
                 trainPatternsOnComplete: true, // Train neural patterns when tasks complete
                 notifyLeadOnComplete: true, // Notify team lead when tasks complete
                 sharedMemoryNamespace: 'agent-teams', // Memory namespace for team coordination
@@ -91,7 +95,7 @@ export function generateSettings(options) {
             hooks: {
                 teammateIdle: {
                     enabled: true,
-                    autoAssign: true,
+                    autoAssign: false,
                     checkTaskList: true,
                 },
                 taskCompleted: {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@claude-flow/cli",
-  "version": "3.38.11",
+  "version": "3.38.12",
   "type": "module",
   "description": "Ruflo CLI - Enterprise AI agent orchestration with 60+ specialized agents, swarm coordination, MCP server, self-learning hooks, and vector memory for Claude Code",
   "main": "dist/src/index.js",