@claude-flow/cli 3.39.2 → 3.39.3

package/.claude/helpers/helpers.manifest.json

@@ -1,6 +1,6 @@
 {
   "manifest": {
-    "version": "3.39.2",
+    "version": "3.39.3",
     "files": {
       "auto-memory-hook.mjs": "85fe05c757421c52137c0bc8545a0896bab6b4714538c2a11d1d0835bfcc8c1c",
       "hook-handler.cjs": "209d9fafe10e17d1be0866727f6f9cf9ac66f9a0793f1c793a4f58319e8e4583",
@@ -8,6 +8,6 @@
       "statusline.cjs": "4a48353b4f1566fa4379b00fd0321b6676a22b6cc91fbbd8380ac5183d619468"
     }
   },
-  "signature": "k7dMs07mB2+Adq7BXfz0YD7oLqfFaFIptNwCrAzvwFlphXj9BYWLEDj55lNTnVxnhK+WsDU85A5e2OR7f4xkAQ==",
+  "signature": "rJ2JGAqKGTyEQH0zJfJEUHMUC+KV5FdSPiprkhc9gf620sZQO0r9/YksOolXgQOJLpg9EF05oFc+XSBaA772AA==",
   "algorithm": "ed25519"
 }

package/catalog-manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 1,
   "generation": 6,
-  "generatedAt": "2026-09-09T13:30:27.887Z",
-  "gitSha": "498a2387",
+  "generatedAt": "2026-09-09T20:16:38.603Z",
+  "gitSha": "07f1cf3a",
   "catalog": {
     "agents": 167,
     "tools": 397,

package/dist/src/log-filters.d.ts

@@ -40,7 +40,7 @@ declare const STDERR_REDIRECT_PREFIXES: string[];
 declare const AGENTDB_MOCK_FALLBACK_DROP_PREFIXES: string[];
 declare const shouldRedirectToStderr: (msg: unknown) => boolean;
 declare const isAgentdbMockFallbackNoise: (msg: unknown) => boolean;
-declare const origWarn: (...data: any[]) => void;
-declare const origLog: (...data: any[]) => void;
-declare const origError: (...data: any[]) => void;
+declare const origWarn: (message?: any, ...optionalParams: any[]) => void;
+declare const origLog: (message?: any, ...optionalParams: any[]) => void;
+declare const origError: (message?: any, ...optionalParams: any[]) => void;
 //# sourceMappingURL=log-filters.d.ts.map

package/dist/src/mcp-tools/agentbbs-tools.d.ts

@@ -21,6 +21,17 @@
  *     so callers see one contract regardless of install state
  *   - Phase 1: polling-based watch (streaming subscriptions are Phase 4)
  *
+ * Presence check: the published `agentbbs` package (as of 0.2.1) is a CLI-only
+ * launcher — a `bin` script with no importable JS entry point (no `main` /
+ * `exports` field) — that downloads/builds a Rust binary and shells out to it.
+ * `await import('agentbbs')` can therefore never resolve, even when the CLI is
+ * correctly installed and on PATH: there is no module for Node to find. This
+ * previously made every tool report `degraded: true` unconditionally,
+ * regardless of install state. Detect real availability instead by probing the
+ * CLI itself, matching how the rest of this codebase treats optional
+ * command-line tools (`shutil.which()`-style guards) rather than assuming a
+ * package shape the dependency doesn't have.
+ *
  * @module @claude-flow/cli/mcp-tools/agentbbs
  */
 import type { MCPTool } from './types.js';

package/dist/src/mcp-tools/agentbbs-tools.js

@@ -21,33 +21,50 @@
  *     so callers see one contract regardless of install state
  *   - Phase 1: polling-based watch (streaming subscriptions are Phase 4)
  *
+ * Presence check: the published `agentbbs` package (as of 0.2.1) is a CLI-only
+ * launcher — a `bin` script with no importable JS entry point (no `main` /
+ * `exports` field) — that downloads/builds a Rust binary and shells out to it.
+ * `await import('agentbbs')` can therefore never resolve, even when the CLI is
+ * correctly installed and on PATH: there is no module for Node to find. This
+ * previously made every tool report `degraded: true` unconditionally,
+ * regardless of install state. Detect real availability instead by probing the
+ * CLI itself, matching how the rest of this codebase treats optional
+ * command-line tools (`shutil.which()`-style guards) rather than assuming a
+ * package shape the dependency doesn't have.
+ *
  * @module @claude-flow/cli/mcp-tools/agentbbs
  */
 import { existsSync, mkdirSync, readFileSync, writeFileSync, appendFileSync } from 'node:fs';
 import { resolve, isAbsolute, join } from 'node:path';
 import { randomBytes, createHash } from 'node:crypto';
+import { execFileSync } from 'node:child_process';
 import { getProjectCwd } from './types.js';
-const PACKAGE_NAME = 'agentbbs';
-// Cache: amortize dynamic-import cost across handler calls.
-// null = not yet attempted; false = unavailable; module = loaded.
-let _agentbbsMod = null;
-let _loadAttempted = false;
-async function loadAgentbbs() {
-    if (_loadAttempted)
-        return _agentbbsMod || null;
-    _loadAttempted = true;
+const CLI_NAME = 'agentbbs';
+// Cache: amortize the subprocess probe cost across handler calls within a
+// process. null = not yet probed; boolean = probe result.
+let _cliAvailable = null;
+function agentbbsCliAvailable() {
+    if (_cliAvailable !== null)
+        return _cliAvailable;
+    const bin = process.env.AGENTBBS_BIN || CLI_NAME;
     try {
-        _agentbbsMod = await import(PACKAGE_NAME);
-        return _agentbbsMod;
+        // On Windows npm's global-install shim is `agentbbs.cmd`, and
+        // child_process cannot spawn a .cmd without going through cmd.exe, which
+        // is what resolves the PATHEXT extension. POSIX keeps shell:false so the
+        // AGENTBBS_BIN override is never shell-interpreted — same convention as
+        // browser-tools.ts and commands/init.ts.
+        execFileSync(bin, ['--version'], {
+            stdio: 'ignore',
+            timeout: 5000,
+            shell: process.platform === 'win32',
+            windowsHide: true,
+        });
+        _cliAvailable = true;
     }
-    catch (err) {
-        if (err && (err.code === 'ERR_MODULE_NOT_FOUND' || err.code === 'MODULE_NOT_FOUND' ||
-            /Cannot find (module|package)/i.test(String(err?.message)))) {
-            _agentbbsMod = false;
-            return null;
-        }
-        throw err;
+    catch {
+        _cliAvailable = false;
     }
+    return _cliAvailable;
 }
 function degradedResult(reason) {
     return { success: true, degraded: true, reason };
@@ -128,12 +145,22 @@ function nextSeq(path) {
  * agentbbs server's responsibility (nonce JTI tracking, per ADR-164 §3.2.4).
  * Phase 2+ will wire this to the existing federation Ed25519 keypair.
  */
+// Use @noble/ed25519 (already a hard dep of @claude-flow/cli for IPFS
+// signing). Memoized behind one loader — two separate dynamic `import()`
+// call sites for the same bare specifier in this module tripped up the
+// test runner's dependency pre-bundling (surfaced once federation_bbs_
+// human_join actually ran instead of always short-circuiting to degraded).
+let _edMod = null;
+async function loadEd25519() {
+    if (!_edMod)
+        _edMod = await import('@noble/ed25519');
+    return _edMod;
+}
 let _signingKey = null;
 async function getSigningKey() {
     if (_signingKey)
         return _signingKey;
-    // Use @noble/ed25519 (already a hard dep of @claude-flow/cli for IPFS signing).
-    const ed = await import('@noble/ed25519');
+    const ed = await loadEd25519();
     const priv = ed.utils.randomPrivateKey
         ? ed.utils.randomPrivateKey()
         : randomBytes(32);
@@ -177,8 +204,7 @@ export const agentbbsTools = [
             // to mask malformed requests.
             const roomLabel = validateRoomLabel(String(input.roomLabel));
             const basePath = resolveBasePath(input.basePath);
-            const api = await loadAgentbbs();
-            if (!api)
+            if (!agentbbsCliAvailable())
                 return degradedResult('agentbbs-not-found');
             ensureDir(basePath);
             const roomId = roomIdFromLabel(roomLabel);
@@ -260,8 +286,7 @@ export const agentbbsTools = [
             if (typeof input.payload !== 'object' || input.payload === null) {
                 throw new Error('payload must be a JSON object');
             }
-            const api = await loadAgentbbs();
-            if (!api)
+            if (!agentbbsCliAvailable())
                 return degradedResult('agentbbs-not-found');
             ensureDir(basePath);
             const logPath = roomLogPath(basePath, roomId);
@@ -314,8 +339,7 @@ export const agentbbsTools = [
         handler: async (input) => {
             const basePath = resolveBasePath(input.basePath);
             const roomId = validateRoomId(String(input.roomId));
-            const api = await loadAgentbbs();
-            if (!api)
+            if (!agentbbsCliAvailable())
                 return degradedResult('agentbbs-not-found');
             const limitRaw = typeof input.limit === 'number' ? input.limit : 50;
             const limit = Math.max(1, Math.min(500, Math.trunc(limitRaw)));
@@ -358,8 +382,7 @@ export const agentbbsTools = [
         },
         handler: async (input) => {
             const roomId = validateRoomId(String(input.roomId));
-            const api = await loadAgentbbs();
-            if (!api)
+            if (!agentbbsCliAvailable())
                 return degradedResult('agentbbs-not-found');
             const ttlRaw = typeof input.ttlSeconds === 'number' ? input.ttlSeconds : 300;
             const ttlSeconds = Math.max(30, Math.min(900, Math.trunc(ttlRaw)));
@@ -368,7 +391,7 @@ export const agentbbsTools = [
             const nonce = base64url(randomBytes(16));
             const payload = { roomId, nonce, expiresAt };
             const canonical = JSON.stringify(payload);
-            const ed = await import('@noble/ed25519');
+            const ed = await loadEd25519();
             const { priv, pub } = await getSigningKey();
             const sigBytes = await (ed.signAsync ?? ed.sign)(new TextEncoder().encode(canonical), priv);
             // Token format: base64url(JSON{payload, sig, pub}). Single string, easy

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@claude-flow/cli",
-  "version": "3.39.2",
+  "version": "3.39.3",
   "type": "module",
   "description": "Ruflo CLI - Enterprise AI agent orchestration with 60+ specialized agents, swarm coordination, MCP server, self-learning hooks, and vector memory for Claude Code",
   "main": "dist/src/index.js",