@claude-flow/cli 3.56.4 → 3.56.5

package/.claude/helpers/helpers.manifest.json

@@ -1,6 +1,6 @@
 {
   "manifest": {
-    "version": "3.56.4",
+    "version": "3.56.5",
     "files": {
       "auto-memory-hook.mjs": "381412515fb490def7d821ddfe1ebf8d9bee76e49a86e182806c0274f568bf15",
       "hook-handler.cjs": "38fc235079ddcf74b62452a91b9e56703026a1a7682dcce3c635be5ad1c8ea19",
@@ -9,6 +9,6 @@
       "router.cjs": "16648b3c0d73b6681ac2d8d13def6a68286c57f5a11004de5b19a0fa088c833d"
     }
   },
-  "signature": "Dhlixv3hNK+hc+t5recMVcHtVZ6ilyT4uN4YLuFsoSVwbTI6dt6VfzyZZXDjgfm6ei8NR9IHIjjmVgKkUmRBDw==",
+  "signature": "/MW5zFGHYeVuoNFAcDlUhkjIdDhPmBiUQTVJTz8Ku20SpFOoxpIXbgv01PxS5IloBqfmuDLieu++2cG55SIzAg==",
   "algorithm": "ed25519"
 }

package/catalog-manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 1,
   "generation": 7,
-  "generatedAt": "2026-10-11T01:01:00.018Z",
-  "gitSha": "f6781f1a",
+  "generatedAt": "2026-10-11T02:06:08.884Z",
+  "gitSha": "72255a2f",
   "catalog": {
     "agents": 176,
     "tools": 423,

package/dist/src/memory/graph-edge-writer.js

@@ -32,6 +32,7 @@
 import * as path from 'path';
 import * as fs from 'fs';
 import * as crypto from 'crypto';
+import { execFileSync } from 'child_process';
 import { getMemoryRoot } from './memory-initializer.js';
 import { encodeEmbedding } from './embedding-quantization.js';
 import { loadBetterSqlite3 } from './shared-sqlite.js';
@@ -54,20 +55,41 @@ import { isEncryptedBlob } from '../encryption/vault.js';
 // skip the native open (it would only throw) and warn once per distinct
 // dbPath (not once per process — a process can legitimately touch more
 // than one encrypted store via a custom `dbPath` argument).
+/** Child-process body: print the first `argv[2]` bytes of `argv[1]` as hex. */
+const HEADER_READER = "const fs=require('fs');const fd=fs.openSync(process.argv[1],'r');const b=Buffer.alloc(Number(process.argv[2]));" +
+    "const n=fs.readSync(fd,b,0,b.length,0);process.stdout.write(b.subarray(0,n).toString('hex'))";
+const HEADER_READ_TIMEOUT_MS = 5000;
 /** Read just the first `len` bytes of a file without loading the whole file
- * into memory. Mirrors the pattern in commands/doctor.ts's readHeaderBytes
- * (not imported from there — this is a memory-layer module and must not
- * depend on the command layer). */
+ * into memory.
+ *
+ * #4040: on POSIX this never opens the file in THIS process. close(2) on any
+ * descriptor for an inode drops every advisory lock the process holds on it
+ * (https://www.sqlite.org/howtocorrupt.html), including the ones SQLite's own
+ * live handle holds - a second process then believes it is the only
+ * connection and checkpoints/deletes the WAL under us. This module (and the
+ * shared AgentDB handle) can own such a handle, so the header is read by a
+ * short-lived child: empty environment, one bounded read, 5 s timeout. Windows
+ * byte-range locks are per handle, not per process, so it reads in-process. */
 function readHeaderBytes(filePath, len) {
-    const fd = fs.openSync(filePath, 'r');
-    try {
-        const buf = Buffer.alloc(len);
-        const bytesRead = fs.readSync(fd, buf, 0, len, 0);
-        return buf.subarray(0, bytesRead);
-    }
-    finally {
-        fs.closeSync(fd);
+    if (process.platform === 'win32') {
+        const fd = fs.openSync(filePath, 'r');
+        try {
+            const buf = Buffer.alloc(len);
+            const bytesRead = fs.readSync(fd, buf, 0, len, 0);
+            return buf.subarray(0, bytesRead);
+        }
+        finally {
+            fs.closeSync(fd);
+        }
     }
+    const hex = execFileSync(process.execPath, ['-e', HEADER_READER, filePath, String(len)], {
+        env: {},
+        timeout: HEADER_READ_TIMEOUT_MS,
+        maxBuffer: len * 2 + 64,
+        stdio: ['ignore', 'pipe', 'ignore'],
+        encoding: 'utf8',
+    });
+    return Buffer.from(hex, 'hex');
 }
 // RFE1 wire format is magic(4) + iv(12) + ciphertext(N) + tag(16); the
 // shortest possible blob is 32 bytes. 64 gives headroom.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@claude-flow/cli",
-  "version": "3.56.4",
+  "version": "3.56.5",
   "type": "module",
   "description": "Ruflo CLI - Enterprise AI agent orchestration with 60+ specialized agents, swarm coordination, MCP server, self-learning hooks, and vector memory for Claude Code",
   "main": "dist/src/index.js",