@claude-flow/cli 3.39.0 → 3.39.2

package/.claude/helpers/helpers.manifest.json

@@ -1,6 +1,6 @@
 {
   "manifest": {
-    "version": "3.39.0",
+    "version": "3.39.2",
     "files": {
       "auto-memory-hook.mjs": "85fe05c757421c52137c0bc8545a0896bab6b4714538c2a11d1d0835bfcc8c1c",
       "hook-handler.cjs": "209d9fafe10e17d1be0866727f6f9cf9ac66f9a0793f1c793a4f58319e8e4583",
@@ -8,6 +8,6 @@
       "statusline.cjs": "4a48353b4f1566fa4379b00fd0321b6676a22b6cc91fbbd8380ac5183d619468"
     }
   },
-  "signature": "ezHXe7aYuhhtcjCgjytboA5ImEY+bpGDC7eJXkqXPmlVHtNyG6I0DPoBUV2SPSeyf4VRRjME3gdANH35XSMmDg==",
+  "signature": "k7dMs07mB2+Adq7BXfz0YD7oLqfFaFIptNwCrAzvwFlphXj9BYWLEDj55lNTnVxnhK+WsDU85A5e2OR7f4xkAQ==",
   "algorithm": "ed25519"
 }

package/catalog-manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 1,
   "generation": 6,
-  "generatedAt": "2026-09-08T16:51:58.984Z",
-  "gitSha": "e341ec8c",
+  "generatedAt": "2026-09-09T13:30:27.887Z",
+  "gitSha": "498a2387",
   "catalog": {
     "agents": 167,
     "tools": 397,

package/dist/src/log-filters.d.ts

@@ -40,7 +40,7 @@ declare const STDERR_REDIRECT_PREFIXES: string[];
 declare const AGENTDB_MOCK_FALLBACK_DROP_PREFIXES: string[];
 declare const shouldRedirectToStderr: (msg: unknown) => boolean;
 declare const isAgentdbMockFallbackNoise: (msg: unknown) => boolean;
-declare const origWarn: (message?: any, ...optionalParams: any[]) => void;
-declare const origLog: (message?: any, ...optionalParams: any[]) => void;
-declare const origError: (message?: any, ...optionalParams: any[]) => void;
+declare const origWarn: (...data: any[]) => void;
+declare const origLog: (...data: any[]) => void;
+declare const origError: (...data: any[]) => void;
 //# sourceMappingURL=log-filters.d.ts.map

package/dist/src/mcp-tools/memory-tools.js

@@ -214,7 +214,25 @@ async function describeBackend() {
     try {
         const { getHNSWStatus } = await import('../memory/memory-initializer.js');
         const status = getHNSWStatus();
-        return status.algorithm === 'hnsw' ? 'sql.js + HNSW' : 'sqlite (bridge, brute-force cosine)';
+        if (status.algorithm !== 'hnsw')
+            return 'sqlite (bridge, brute-force cosine)';
+        // #3228: with the native bridge gated off (the Windows default since
+        // 3.38.12), memory tools silently fall back to the sql.js store rather
+        // than the AgentDB corpus the bridge would have opened. A bare
+        // "sql.js + HNSW" hides that substitution — an upgrade can change which
+        // file receives writes while store/retrieve smoke tests still pass,
+        // because both operations use the same unintended file. Name the gate.
+        try {
+            const { shouldDisableNativeBridge, getBridgeFailureReason } = await import('../memory/memory-bridge.js');
+            if (shouldDisableNativeBridge()) {
+                const reason = getBridgeFailureReason();
+                return `sql.js + HNSW (native bridge disabled${reason ? `: ${reason}` : ''})`;
+            }
+        }
+        catch {
+            // bridge module unavailable — the plain sql.js label is already accurate
+        }
+        return 'sql.js + HNSW';
     }
     catch {
         return 'sqlite';

package/dist/src/memory/memory-initializer.js

@@ -836,7 +836,17 @@ export function getHNSWStatus() {
     // name promises — that's false while the bridge is the active path, so
     // this no longer claims otherwise. Vector search itself still works via
     // the bridge; `algorithm` tells callers it's brute-force, not HNSW.
-    if (_bridge && _bridge !== null) {
+    //
+    // #3228: this branch previously tested only that the bridge MODULE was
+    // loaded. On Windows the module imports fine but `getRegistry()` returns
+    // null behind the #3024 kill-switch, so every read/write actually goes to
+    // the sql.js store while this function still reported the bridge as the
+    // active path — `describeBackend()` then printed "sqlite (bridge, ...)"
+    // for a store the bridge never touched. Gate on whether the bridge is
+    // *permitted to be* the active path, not on whether the module resolved.
+    // `shouldDisableNativeBridge()` is sync and a pure function of platform +
+    // env, so it is a faithful discriminator here and needs no warm registry.
+    if (_bridge && _bridge !== null && !_bridge.shouldDisableNativeBridge()) {
         return {
             available: false,
             initialized: false,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@claude-flow/cli",
-  "version": "3.39.0",
+  "version": "3.39.2",
   "type": "module",
   "description": "Ruflo CLI - Enterprise AI agent orchestration with 60+ specialized agents, swarm coordination, MCP server, self-learning hooks, and vector memory for Claude Code",
   "main": "dist/src/index.js",
@@ -115,7 +115,7 @@
     "cors": "^2.8.5",
     "express": ">=4.22.2",
     "express-rate-limit": ">=8.4.1",
-    "fast-uri": "3.1.5",
+    "fast-uri": "^3.1.6",
     "fs-extra": "^11.2.0",
     "helmet": "^7.2.0",
     "inquirer": "^9.2.0",