@claude-flow/cli 3.41.2 → 3.41.4

package/.claude/helpers/helpers.manifest.json

@@ -1,6 +1,6 @@
 {
   "manifest": {
-    "version": "3.41.2",
+    "version": "3.41.4",
     "files": {
       "auto-memory-hook.mjs": "85fe05c757421c52137c0bc8545a0896bab6b4714538c2a11d1d0835bfcc8c1c",
       "hook-handler.cjs": "209d9fafe10e17d1be0866727f6f9cf9ac66f9a0793f1c793a4f58319e8e4583",
@@ -8,6 +8,6 @@
       "statusline.cjs": "4a48353b4f1566fa4379b00fd0321b6676a22b6cc91fbbd8380ac5183d619468"
     }
   },
-  "signature": "cmz1Yt39LkaWY+8JH1BOtqD27A3TYoFbpHnMGTpKZDzpuhgq1RQCF9P90z1yrnnStOSX0e01meDsHeRoGQgtAA==",
+  "signature": "QbsQi7C+pl+Nam2mKSa0FmTWyFKbZnNzLGltRMREMq/BGR4U6klP43oN0eYzVHQCwQiUKz4YOsPo1CEfjVCcDA==",
   "algorithm": "ed25519"
 }

package/catalog-manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 1,
   "generation": 6,
-  "generatedAt": "2026-09-10T19:46:29.600Z",
-  "gitSha": "df87b0db",
+  "generatedAt": "2026-09-14T18:42:55.817Z",
+  "gitSha": "dfd65965",
   "catalog": {
     "agents": 167,
     "tools": 418,

package/dist/src/mcp-tools/agentdb-tools.js

@@ -167,8 +167,22 @@ export const agentdbPatternStore = {
             const confidence = validateScore(params.confidence, 0.8);
             const bridge = await getBridge();
             const result = await bridge.bridgeStorePattern({ pattern, type, confidence });
-            if (result)
-                return result;
+            if (result) {
+                // #3288: `controller: 'reasoningBank'` is the ONLY label that means
+                // the healthy path ran. Every other label bridgeStorePattern can
+                // return (`bridge-fallback` today; more may be added later) is a
+                // degraded write that still reports {success: true} — flag it at
+                // this one boundary instead of chasing each fallback label
+                // individually, so a new label can't silently reopen this gap.
+                if (result.controller === 'reasoningBank')
+                    return result;
+                return {
+                    ...result,
+                    degraded: true,
+                    reason: `reasoningBank-unavailable:${result.controller}`,
+                    note: `ReasoningBank controller unavailable (controller=${result.controller}). Pattern persisted via the fallback path. Run \`agentdb_health\` to inspect controller registration.`,
+                };
+            }
             // ADR-093 F4: when the ReasoningBank controller registry returns
             // null (the cause of audit-reported "AgentDB bridge not available"
             // even though `agentdb_health.reasoningBank.enabled === true`), fall
@@ -187,6 +201,12 @@ export const agentdbPatternStore = {
                 });
                 return {
                     success: true,
+                    // #3288: a caller must not have to already know to distrust a
+                    // "successful" response — degraded:true is the structural signal
+                    // (matching agentbbs-tools.ts's degradedResult() convention),
+                    // `note` stays for the human-readable detail.
+                    degraded: true,
+                    reason: 'reasoningBank-unavailable:registry-null',
                     patternId,
                     controller: 'memory-store-fallback',
                     note: 'ReasoningBank controller registry unavailable. Pattern persisted via memory_store. Run `agentdb_health` to inspect controller registration.',
@@ -232,7 +252,20 @@ export const agentdbPatternSearch = {
             const bridge = await getBridge();
             const result = await bridge.bridgeSearchPatterns({ query, topK, minConfidence });
             if (result && Array.isArray(result.results) && result.results.length > 0) {
-                return result;
+                // #3288: `controller: 'reasoningBank'` is the only label meaning the
+                // healthy path ran and actually found results. Any other label
+                // (`bridge-fallback` today; more may be added later) is a degraded
+                // response even though it has results — flag it here, since this
+                // early return bypasses the tier1/tier2 fallback block below
+                // entirely (and its degraded:true) whenever there ARE results.
+                if (result.controller === 'reasoningBank')
+                    return result;
+                return {
+                    ...result,
+                    degraded: true,
+                    reason: `reasoningBank-unavailable:${result.controller}`,
+                    note: `ReasoningBank controller unavailable (controller=${result.controller}); results returned via the fallback path. Run \`agentdb_health\` to inspect controller registration.`,
+                };
             }
             // #1889 — symmetric fallback. pattern-store writes to the `pattern`
             // namespace via memory_store when ReasoningBank is unavailable; the
@@ -316,8 +349,13 @@ export const agentdbPatternSearch = {
                 // round-trip sees both ends agree. The store reports
                 // `memory-store-fallback`; we use the same name + a `tier` field
                 // to expose which sub-strategy fired.
+                // #3288: degraded:true is the structural signal a caller can check
+                // without already knowing to distrust an apparently-successful
+                // response — matches agentbbs-tools.ts's degradedResult() convention.
                 return {
                     results,
+                    degraded: true,
+                    reason: result ? `reasoningBank-empty:${result.controller ?? 'unknown'}` : 'reasoningBank-unavailable:registry-null',
                     controller: 'memory-store-fallback',
                     tier,
                     note: result

package/dist/src/mcp-tools/x-federation-channels.js

@@ -88,13 +88,18 @@ function publishEvent(ws, nt, sk, tags, content) {
         ws.send(JSON.stringify(['EVENT', ev]));
     });
 }
-function reqEvents(ws, filter) {
+function reqEvents(ws, nt, filter) {
     const out = [];
     return new Promise((resolve) => {
         const t = setTimeout(() => resolve(out), 12000);
         ws.on('message', (d) => {
             const m = JSON.parse(d.toString());
-            if (m[0] === 'EVENT')
+            // Only a signature-verified event can be trusted as evidence of who sent
+            // it. Without this check an unverified EVENT frame — relay bug, MITM, or
+            // a compromised relay — would reach callers that treat .pubkey/.id as
+            // authenticated (channel_accept's NIP-44 conversation-key derivation,
+            // channel_read's returned identity).
+            if (m[0] === 'EVENT' && nt.verifyEvent(m[2]))
                 out.push(m[2]);
             else if (m[0] === 'EOSE') {
                 clearTimeout(t);
@@ -168,7 +173,7 @@ export const xFederationChannelTools = [
                 return degraded();
             const { sk, pubkey } = loadOrCreateKey(t.nt, KEY_FILE());
             const relay = RELAY_WS(i.relayWs);
-            const evs = await relayCall(relay, sk, t.nt, (ws) => reqEvents(ws, {
+            const evs = await relayCall(relay, sk, t.nt, (ws) => reqEvents(ws, t.nt, {
                 kinds: [1], '#t': ['ruflo-swarm'], '#k': ['ChannelGrant'], '#p': [pubkey],
                 since: Math.floor(Date.now() / 1000) - (i.sinceSeconds ?? 7 * 86400), limit: 200,
             }));
@@ -256,7 +261,7 @@ export const xFederationChannelTools = [
             if (!t)
                 return degraded();
             const { sk } = loadOrCreateKey(t.nt, KEY_FILE());
-            const evs = await relayCall(RELAY_WS(i.relayWs), sk, t.nt, (ws) => reqEvents(ws, {
+            const evs = await relayCall(RELAY_WS(i.relayWs), sk, t.nt, (ws) => reqEvents(ws, t.nt, {
                 kinds: [1], '#t': ['ruflo-swarm'], '#c': [i.channel],
                 since: Math.floor(Date.now() / 1000) - (i.sinceSeconds ?? 3600), limit: i.limit ?? 100,
             }));
@@ -266,9 +271,12 @@ export const xFederationChannelTools = [
                 const ev = e;
                 const k = ev.tags.find((x) => x[0] === 'k')?.[1];
                 const base = { id: ev.id, pubkey: ev.pubkey, created_at: ev.created_at };
+                // base's verified id/pubkey/created_at must win over the parsed/decrypted
+                // body — spread body first so a stray id/pubkey/created_at key in the
+                // publisher's own content can't override the authenticated identity.
                 if (k !== 'enc') {
                     try {
-                        return { ...base, ...JSON.parse(ev.content) };
+                        return { ...JSON.parse(ev.content), ...base };
                     }
                     catch {
                         return { ...base, raw: ev.content };
@@ -277,7 +285,7 @@ export const xFederationChannelTools = [
                 if (!key)
                     return { ...base, encrypted: true, reason: 'no channel key held' };
                 try {
-                    return { ...base, ...JSON.parse(t.nip44.v2.decrypt(ev.content, key)) };
+                    return { ...JSON.parse(t.nip44.v2.decrypt(ev.content, key)), ...base };
                 }
                 catch {
                     return { ...base, encrypted: true, reason: 'held key does not open this message' };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@claude-flow/cli",
-  "version": "3.41.2",
+  "version": "3.41.4",
   "type": "module",
   "description": "Ruflo CLI - Enterprise AI agent orchestration with 60+ specialized agents, swarm coordination, MCP server, self-learning hooks, and vector memory for Claude Code",
   "main": "dist/src/index.js",