@claude-flow/cli 3.57.1 → 3.58.0

package/dist/src/mcp-tools/agent-tools.js

@@ -216,6 +216,7 @@ export const agentTools = [
             properties: {
                 agentType: { type: 'string', description: 'Type of agent to spawn' },
                 agentId: { type: 'string', description: 'Optional custom agent ID' },
+                name: { type: 'string', description: 'Optional display name for the agent (shown by agent_list, agent_status and ruflo-console)' },
                 // #2085 — accept swarmId so spawned agents register in the
                 // swarm.agents array that swarm_status reports. Omit to register
                 // with the most-recently-created swarm.
@@ -241,6 +242,18 @@ export const agentTools = [
             }
             const agentId = input.agentId || `agent-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`;
             const agentType = input.agentType;
+            // #4300 — older callers (including `agent spawn` before this fix) send
+            // the name only as metadata.name.
+            const metadata = input.metadata;
+            const rawName = input.name ?? metadata?.name;
+            let name;
+            if (rawName !== undefined && rawName !== '') {
+                const vName = validateText(rawName, 'name', 200);
+                if (!vName.valid) {
+                    return { success: false, error: `Input validation failed: ${vName.error}` };
+                }
+                name = vName.sanitized;
+            }
             const config = input.config || {};
             // Add explicit model to config if provided
             if (input.model) {
@@ -262,6 +275,7 @@ export const agentTools = [
             const agent = {
                 agentId,
                 agentType,
+                ...(name ? { name } : {}),
                 status: 'idle',
                 health: 1.0,
                 taskCount: 0,
@@ -347,6 +361,7 @@ export const agentTools = [
                 success: true,
                 agentId,
                 agentType: agent.agentType,
+                ...(agent.name ? { name: agent.name } : {}),
                 model: agent.model,
                 modelRoutedBy: routingResult.routedBy,
                 ...(routingResult.modelId ? { modelId: routingResult.modelId } : {}),
@@ -501,6 +516,7 @@ export const agentTools = [
                 return {
                     agentId: agent.agentId,
                     agentType: agent.agentType,
+                    ...(agent.name ? { name: agent.name } : {}),
                     status: agent.status,
                     health: agent.health,
                     taskCount: agent.taskCount,
@@ -525,6 +541,7 @@ export const agentTools = [
             properties: {
                 status: { type: 'string', description: 'Filter by status' },
                 domain: { type: 'string', description: 'Filter by domain' },
+                agentType: { type: 'string', description: 'Filter by agent type' },
                 includeTerminated: { type: 'boolean', description: 'Include terminated agents' },
             },
         },
@@ -539,6 +556,11 @@ export const agentTools = [
                 if (!v.valid)
                     return { agents: [], total: 0, error: `Input validation failed: ${v.error}` };
             }
+            if (input.agentType) {
+                const v = validateIdentifier(input.agentType, 'agentType');
+                if (!v.valid)
+                    return { agents: [], total: 0, error: `Input validation failed: ${v.error}` };
+            }
             let agents = Object.values(loadAllAgents()); // #1916: includes hive-mind-spawned workers
             // Filter by status
             if (input.status) {
@@ -551,10 +573,15 @@ export const agentTools = [
             if (input.domain) {
                 agents = agents.filter(a => a.domain === input.domain);
             }
+            // Filter by agent type
+            if (input.agentType) {
+                agents = agents.filter(a => a.agentType === input.agentType);
+            }
             return {
                 agents: agents.map(a => ({
                     agentId: a.agentId,
                     agentType: a.agentType,
+                    ...(a.name ? { name: a.name } : {}),
                     status: a.status,
                     health: a.health,
                     taskCount: a.taskCount,
@@ -565,6 +592,7 @@ export const agentTools = [
                 filters: {
                     status: input.status,
                     domain: input.domain,
+                    agentType: input.agentType,
                     includeTerminated: input.includeTerminated,
                 },
             };

package/dist/src/mcp-tools/claims-tools.js

@@ -13,6 +13,7 @@ import { existsSync, writeFileSync, mkdirSync } from 'fs';
 import { join, resolve } from 'path';
 const CLAIMS_DIR = '.claude-flow/claims';
 const CLAIMS_FILE = 'claims.json';
+const DEFAULT_MAX_CLAIMS = 5;
 function getClaimsPath() {
     return resolve(join(CLAIMS_DIR, CLAIMS_FILE));
 }
@@ -47,7 +48,7 @@ function parseClaimant(str) {
 export const claimsTools = [
     {
         name: 'claims_claim',
-        description: 'Claim an issue for work (human or agent) Use when nothing native covers per-agent capability gating — Claude Code agents have file-system access by default. Pair claims_grant + claims_check before letting an agent run privileged ops. For trusted in-session work, no claims call is needed.',
+        description: 'Claim an issue for work (human or agent). Use when multiple agents might pick up the same issue — claiming makes ownership visible via claims_list before work starts.',
         category: 'claims',
         inputSchema: {
             type: 'object',
@@ -64,6 +65,10 @@ export const claimsTools = [
                     type: 'string',
                     description: 'Optional context about the work approach',
                 },
+                ttlMs: {
+                    type: 'number',
+                    description: 'Optional time-to-live in milliseconds; when set, the claim records an expiresAt timestamp. Informational only today — no handler currently enforces it (e.g. claims_steal still requires claims_mark-stealable rather than checking expiry).',
+                },
             },
             required: ['issueId', 'claimant'],
         },
@@ -71,6 +76,7 @@ export const claimsTools = [
             const issueId = input.issueId;
             const claimantStr = input.claimant;
             const context = input.context;
+            const ttlMs = input.ttlMs;
             {
                 const v = validateIdentifier(issueId, 'issueId');
                 if (!v.valid)
@@ -86,6 +92,9 @@ export const claimsTools = [
                 if (!v.valid)
                     return { success: false, error: v.error };
             }
+            if (ttlMs !== undefined && (typeof ttlMs !== 'number' || !Number.isFinite(ttlMs) || ttlMs <= 0)) {
+                return { success: false, error: 'ttlMs must be a positive number' };
+            }
             const claimant = parseClaimant(claimantStr);
             if (!claimant) {
                 return { success: false, error: 'Invalid claimant format. Use "human:userId:name" or "agent:agentId:agentType"' };
@@ -109,6 +118,7 @@ export const claimsTools = [
                 statusChangedAt: now,
                 progress: 0,
                 context,
+                expiresAt: ttlMs !== undefined ? new Date(Date.now() + ttlMs).toISOString() : undefined,
             };
             store.claims[issueId] = claim;
             saveClaims(store);
@@ -121,7 +131,7 @@ export const claimsTools = [
     },
     {
         name: 'claims_release',
-        description: 'Release a claim on an issue Use when nothing native covers per-agent capability gating — Claude Code agents have file-system access by default. Pair claims_grant + claims_check before letting an agent run privileged ops. For trusted in-session work, no claims call is needed.',
+        description: 'Release a claim on an issue. Use when the claimant stops working on it, freeing it for another claims_claim instead of leaving it claimed indefinitely.',
         category: 'claims',
         inputSchema: {
             type: 'object',
@@ -186,7 +196,7 @@ export const claimsTools = [
     },
     {
         name: 'claims_handoff',
-        description: 'Request handoff of an issue to another claimant Use when nothing native covers per-agent capability gating — Claude Code agents have file-system access by default. Pair claims_grant + claims_check before letting an agent run privileged ops. For trusted in-session work, no claims call is needed.',
+        description: 'Request handoff of an issue to another claimant. Use when transferring in-progress work to a different agent, instead of releasing and having them claim it fresh.',
         category: 'claims',
         inputSchema: {
             type: 'object',
@@ -270,7 +280,7 @@ export const claimsTools = [
     },
     {
         name: 'claims_accept-handoff',
-        description: 'Accept a pending handoff Use when nothing native covers per-agent capability gating — Claude Code agents have file-system access by default. Pair claims_grant + claims_check before letting an agent run privileged ops. For trusted in-session work, no claims call is needed.',
+        description: 'Accept a pending handoff. Use when the receiving claimant confirms a claims_handoff request, completing the ownership transfer.',
         category: 'claims',
         inputSchema: {
             type: 'object',
@@ -333,7 +343,7 @@ export const claimsTools = [
     },
     {
         name: 'claims_status',
-        description: 'Update claim status Use when nothing native covers per-agent capability gating — Claude Code agents have file-system access by default. Pair claims_grant + claims_check before letting an agent run privileged ops. For trusted in-session work, no claims call is needed.',
+        description: 'Update claim status. Use when progress changes (active, blocked, review-requested, etc.) so claims_list and claims_load reflect current state.',
         category: 'claims',
         inputSchema: {
             type: 'object',
@@ -398,7 +408,7 @@ export const claimsTools = [
     },
     {
         name: 'claims_list',
-        description: 'List all claims or filter by criteria Use when nothing native covers per-agent capability gating — Claude Code agents have file-system access by default. Pair claims_grant + claims_check before letting an agent run privileged ops. For trusted in-session work, no claims call is needed.',
+        description: 'List all claims or filter by criteria. Use when checking what is already claimed before starting new work, instead of guessing from issue comments.',
         category: 'claims',
         inputSchema: {
             type: 'object',
@@ -453,7 +463,7 @@ export const claimsTools = [
     },
     {
         name: 'claims_mark-stealable',
-        description: 'Mark an issue as stealable by other agents Use when nothing native covers per-agent capability gating — Claude Code agents have file-system access by default. Pair claims_grant + claims_check before letting an agent run privileged ops. For trusted in-session work, no claims call is needed.',
+        description: 'Mark an issue as stealable by other agents. Use when a claimant is overloaded or stalled and wants another agent to pick it up via claims_steal.',
         category: 'claims',
         inputSchema: {
             type: 'object',
@@ -521,7 +531,7 @@ export const claimsTools = [
     },
     {
         name: 'claims_steal',
-        description: 'Steal a stealable issue Use when nothing native covers per-agent capability gating — Claude Code agents have file-system access by default. Pair claims_grant + claims_check before letting an agent run privileged ops. For trusted in-session work, no claims call is needed.',
+        description: 'Steal a stealable issue. Use when picking up work already marked stealable via claims_mark-stealable, rather than claiming an issue someone else still owns.',
         category: 'claims',
         inputSchema: {
             type: 'object',
@@ -592,7 +602,7 @@ export const claimsTools = [
     },
     {
         name: 'claims_stealable',
-        description: 'List all stealable issues Use when nothing native covers per-agent capability gating — Claude Code agents have file-system access by default. Pair claims_grant + claims_check before letting an agent run privileged ops. For trusted in-session work, no claims call is needed.',
+        description: 'List all stealable issues. Use when looking for available work that has been freed up via claims_mark-stealable.',
         category: 'claims',
         inputSchema: {
             type: 'object',
@@ -628,7 +638,7 @@ export const claimsTools = [
     },
     {
         name: 'claims_load',
-        description: 'Get agent load information Use when nothing native covers per-agent capability gating — Claude Code agents have file-system access by default. Pair claims_grant + claims_check before letting an agent run privileged ops. For trusted in-session work, no claims call is needed.',
+        description: 'Get agent load information. Use when deciding which agent should take new work by comparing claim counts against claims_rebalance targets.',
         category: 'claims',
         inputSchema: {
             type: 'object',
@@ -689,8 +699,8 @@ export const claimsTools = [
                 agentId: l.agentId,
                 agentType: l.agentType,
                 claimCount: l.claims.length,
-                maxClaims: 5, // Default max
-                utilization: l.claims.length / 5,
+                maxClaims: DEFAULT_MAX_CLAIMS,
+                utilization: l.claims.length / DEFAULT_MAX_CLAIMS,
                 blockedCount: l.blockedCount,
                 claims: l.claims.map(c => ({
                     issueId: c.issueId,
@@ -711,7 +721,7 @@ export const claimsTools = [
     },
     {
         name: 'claims_board',
-        description: 'Get a visual board view of all claims Use when nothing native covers per-agent capability gating — Claude Code agents have file-system access by default. Pair claims_grant + claims_check before letting an agent run privileged ops. For trusted in-session work, no claims call is needed.',
+        description: 'Get a visual board view of all claims. Use when scanning overall claim status across issues and agents instead of composing the view from claims_list yourself.',
         category: 'claims',
         inputSchema: {
             type: 'object',
@@ -760,7 +770,7 @@ export const claimsTools = [
     },
     {
         name: 'claims_rebalance',
-        description: 'Suggest or apply load rebalancing across agents Use when nothing native covers per-agent capability gating — Claude Code agents have file-system access by default. Pair claims_grant + claims_check before letting an agent run privileged ops. For trusted in-session work, no claims call is needed.',
+        description: 'Suggest or apply load rebalancing across agents. Use when some agents are overloaded and others idle, instead of manually reassigning claims one at a time.',
         category: 'claims',
         inputSchema: {
             type: 'object',
@@ -794,7 +804,7 @@ export const claimsTools = [
                 agentLoads.get(key).claims.push(claim);
             }
             const loads = Array.from(agentLoads.values());
-            const maxClaims = 5;
+            const maxClaims = DEFAULT_MAX_CLAIMS;
             const avgLoad = loads.length > 0
                 ? loads.reduce((sum, l) => sum + l.claims.length, 0) / loads.length
                 : 0;

package/dist/src/mcp-tools/hooks-tools.js

@@ -4175,12 +4175,12 @@ export const hooksIntelligenceLearn = {
 // Intelligence attention hook
 export const hooksIntelligenceAttention = {
     name: 'hooks_intelligence_attention',
-    description: 'Compute attention-weighted similarity using MoE/Flash/Hyperbolic Use when native Bash hooks (via Claude Code\'s settings.json) are wrong because you need Ruflo-side state — pattern persistence, neural training signals, model-routing learning, cost tracking, audit chain. For one-off shell commands, plain Bash hooks are fine.',
+    description: 'Compute attention-weighted similarity using MoE/Flash. Use when native Bash hooks (via Claude Code\'s settings.json) are wrong because you need Ruflo-side state — pattern persistence, neural training signals, model-routing learning, cost tracking, audit chain. For one-off shell commands, plain Bash hooks are fine.',
     inputSchema: {
         type: 'object',
         properties: {
             query: { type: 'string', description: 'Query for attention computation' },
-            mode: { type: 'string', description: 'Attention mode (flash, moe, hyperbolic)' },
+            mode: { type: 'string', description: 'Attention mode (flash, moe)' },
             topK: { type: 'number', description: 'Top-k results' },
         },
         required: ['query'],
@@ -4195,6 +4195,12 @@ export const hooksIntelligenceAttention = {
             if (!v.valid)
                 return { success: false, error: v.error };
         }
+        // #3548: only flash and moe have an implementation. Any other mode
+        // (including the previously advertised 'hyperbolic') used to return an
+        // empty stub whose note blamed a missing package; say so instead.
+        if (mode !== 'flash' && mode !== 'moe') {
+            return { success: false, error: `Attention mode "${mode}" is not implemented; supported modes: flash, moe` };
+        }
         let implementation = 'placeholder';
         let embeddingSource = 'none';
         const results = [];
@@ -4370,7 +4376,7 @@ export const hooksIntelligenceAttention = {
                 implementation,
                 _embeddingSource: embeddingSource,
                 _stub: implementation === 'none',
-                _note: implementation === 'none' ? 'No attention backend available. Install @ruvector/attention for real computation.' : undefined,
+                _note: implementation === 'none' ? 'No attention backend available: flash/moe attention from @claude-flow/neural could not be loaded or failed.' : undefined,
                 ...(embeddingSource === 'hash-fallback' && implementation !== 'none'
                     ? { _embeddingNote: 'Query embeddings are hash-based (not semantic). Install @claude-flow/embeddings for real ONNX embeddings.' }
                     : {}),

package/dist/src/mcp-tools/memory-tools.js

@@ -227,15 +227,31 @@ function loadLegacyStore() {
 /**
  * Mark migration as complete
  */
-function markMigrationComplete() {
+function markMigrationComplete(counts) {
     const legacyDir = resolve(LEGACY_MEMORY_DIR);
     if (!existsSync(legacyDir))
         mkdirSync(legacyDir, { recursive: true });
     writeFileSync(resolve(join(LEGACY_MEMORY_DIR, MIGRATION_MARKER)), JSON.stringify({
         migratedAt: new Date().toISOString(),
         version: '3.0.0',
+        ...(counts ?? {}),
     }), 'utf-8');
 }
+/**
+ * Counts recorded by the migration that wrote the marker, or null when no
+ * marker (or an older marker without counts) is present.
+ */
+function readMigrationCounts() {
+    try {
+        const marker = JSON.parse(readFileSync(resolve(join(LEGACY_MEMORY_DIR, MIGRATION_MARKER)), 'utf-8'));
+        return typeof marker?.migrated === 'number' && typeof marker?.total === 'number'
+            ? { migrated: marker.migrated, total: marker.total }
+            : null;
+    }
+    catch {
+        return null;
+    }
+}
 /**
  * Lazy-load memory initializer functions to avoid circular deps
  */
@@ -391,7 +407,7 @@ async function ensureInitialized(dbPath) {
                         }
                     }
                     console.error(`[MCP Memory] Migrated ${migrated}/${Object.keys(legacyStore.entries).length} entries`);
-                    markMigrationComplete();
+                    markMigrationComplete({ migrated, total: Object.keys(legacyStore.entries).length });
                 }
             }
         }
@@ -636,7 +652,11 @@ export const memoryTools = [
                             });
                             return {
                                 results: r.results.map(e => ({
-                                    id: e.id,
+                                    // #2271: searchEntries() truncates ids to 12 chars ("entry_" +
+                                    // the leading digits of Date.now()), so entries written within
+                                    // ~2.8h share one id and RRF fused them into a single result.
+                                    // SmartRetrieval dedupes on id: give it the (namespace, key) tuple.
+                                    id: JSON.stringify([e.namespace, e.key]),
                                     key: e.key,
                                     content: e.content,
                                     score: e.score,
@@ -966,11 +986,17 @@ export const memoryTools = [
         },
         handler: async (input) => {
             const force = input.force;
-            // Remove migration marker if forcing
+            // Remove the migration marker if forcing. hasLegacyStore() checks the marker
+            // beside the legacy store, so that is the one force must clear (#4194);
+            // the old .swarm marker path is cleared too for compatibility.
             if (force) {
-                const markerPath = getMigrationMarkerPath();
-                if (existsSync(markerPath)) {
-                    unlinkSync(markerPath);
+                for (const markerPath of [
+                    resolve(join(LEGACY_MEMORY_DIR, MIGRATION_MARKER)),
+                    getMigrationMarkerPath(),
+                ]) {
+                    if (existsSync(markerPath)) {
+                        unlinkSync(markerPath);
+                    }
                 }
             }
             // Check for legacy data
@@ -982,12 +1008,35 @@ export const memoryTools = [
                     migrated: 0,
                 };
             }
+            // A marker beside the store means a migration already ran; ensureInitialized
+            // would move nothing, so say so instead of reporting the store's size.
+            if (!hasLegacyStore()) {
+                return {
+                    success: true,
+                    message: 'Legacy store already migrated (marker present); nothing was moved. Pass force: true to re-run.',
+                    migrated: 0,
+                    total: Object.keys(legacyStore.entries).length,
+                };
+            }
             // Run migration via ensureInitialized
             await ensureInitialized();
+            // ensureInitialized swallows errors and records what it moved in the marker.
+            const counts = readMigrationCounts();
+            if (!counts) {
+                return {
+                    success: false,
+                    message: 'Migration did not complete; no entries were recorded as migrated. See the MCP server log.',
+                    migrated: 0,
+                    total: Object.keys(legacyStore.entries).length,
+                };
+            }
             return {
                 success: true,
-                message: 'Migration completed',
-                migrated: Object.keys(legacyStore.entries).length,
+                message: counts.migrated === counts.total
+                    ? 'Migration completed'
+                    : `Migration completed with failures: ${counts.migrated} of ${counts.total} entries migrated`,
+                migrated: counts.migrated,
+                total: counts.total,
                 backend: await describeBackend(),
             };
         },

package/dist/src/mcp-tools/workflow-tools.js

@@ -577,7 +577,8 @@ export const workflowTools = [
             const store = loadWorkflowStore();
             let workflows = Object.values(store.workflows);
             // Apply filters
-            if (input.status) {
+            // 'all' is the CLI's explicit "no filter" value (`workflow list` sends it by default).
+            if (input.status && input.status !== 'all') {
                 workflows = workflows.filter(w => w.status === input.status);
             }
             // Sort by creation date (newest first)

package/dist/src/memory/graph-edge-writer.d.ts

@@ -30,10 +30,12 @@
  * @module v3/cli/memory/graph-edge-writer
  */
 /**
- * True iff the memory.db bridge at `customDbPath` (or the default location)
- * is currently RFE1-encrypted-at-rest. Callers that receive `null` from
- * getBridgeDb()/insertGraphEdge() can use this to avoid recommending the
- * destructive `memory init` command for this specific, non-corrupt case.
+ * True iff the memory.db bridge at `customDbPath` — or, when omitted, the
+ * path `resolveDbPath()` resolves from the `CLAUDE_FLOW_DB_PATH` env binding
+ * / memory root default (#4291) — is currently RFE1-encrypted-at-rest.
+ * Callers that receive `null` from getBridgeDb()/insertGraphEdge() can use
+ * this to avoid recommending the destructive `memory init` command for this
+ * specific, non-corrupt case.
  */
 export declare function isBridgeDbEncryptedAtRest(customDbPath?: string): boolean;
 /** Test-only: clear the once-per-path warning dedup set. */
@@ -60,6 +62,16 @@ export declare function releaseBridgeDb(dbPath?: string): boolean;
  * #2431 fix: better-sqlite3 + WAL mode replaces sql.js + whole-file
  * writeFileSync. Eliminates the dual-write race that corrupted memory.db
  * when called alongside the memory bridge's better-sqlite3 writer.
+ *
+ * #4291 fix: the file is resolved via `resolveDbPath()` — the project's one
+ * documented path-priority rule (explicit `customDbPath` argument wins, then
+ * the `CLAUDE_FLOW_DB_PATH` env binding, then the plain `memory.db` default
+ * under the memory root) — instead of a local `customDbPath ?? <default>`
+ * expression that silently ignored `CLAUDE_FLOW_DB_PATH`. A caller that
+ * explicitly selected a store via that env var no longer gets answers read
+ * from a different, unselected database file. When the resolved file is
+ * missing (and `createIfMissing` is false) or encrypted at rest, this
+ * refuses (returns null) rather than falling back to any other store.
  */
 export declare function getBridgeDb(customDbPath?: string, opts?: {
     createIfMissing?: boolean;

package/dist/src/memory/graph-edge-writer.js

@@ -33,7 +33,7 @@ import * as path from 'path';
 import * as fs from 'fs';
 import * as crypto from 'crypto';
 import { execFileSync } from 'child_process';
-import { getMemoryRoot } from './memory-initializer.js';
+import { resolveDbPath } from './memory-initializer.js';
 import { encodeEmbedding } from './embedding-quantization.js';
 import { loadBetterSqlite3 } from './shared-sqlite.js';
 import { isEncryptedBlob } from '../encryption/vault.js';
@@ -125,13 +125,15 @@ function warnRfe1EncryptedOnce(dbPath) {
         'See #2889 (https://github.com/ruvnet/ruflo/issues/2889) for details and recovery options.');
 }
 /**
- * True iff the memory.db bridge at `customDbPath` (or the default location)
- * is currently RFE1-encrypted-at-rest. Callers that receive `null` from
- * getBridgeDb()/insertGraphEdge() can use this to avoid recommending the
- * destructive `memory init` command for this specific, non-corrupt case.
+ * True iff the memory.db bridge at `customDbPath` — or, when omitted, the
+ * path `resolveDbPath()` resolves from the `CLAUDE_FLOW_DB_PATH` env binding
+ * / memory root default (#4291) — is currently RFE1-encrypted-at-rest.
+ * Callers that receive `null` from getBridgeDb()/insertGraphEdge() can use
+ * this to avoid recommending the destructive `memory init` command for this
+ * specific, non-corrupt case.
  */
 export function isBridgeDbEncryptedAtRest(customDbPath) {
-    const dbPath = customDbPath ?? path.join(getMemoryRoot(), 'memory.db');
+    const dbPath = resolveDbPath(customDbPath);
     return fs.existsSync(dbPath) && isRfe1EncryptedAtRest(dbPath);
 }
 /** Test-only: clear the once-per-path warning dedup set. */
@@ -222,9 +224,19 @@ export function releaseBridgeDb(dbPath) {
  * #2431 fix: better-sqlite3 + WAL mode replaces sql.js + whole-file
  * writeFileSync. Eliminates the dual-write race that corrupted memory.db
  * when called alongside the memory bridge's better-sqlite3 writer.
+ *
+ * #4291 fix: the file is resolved via `resolveDbPath()` — the project's one
+ * documented path-priority rule (explicit `customDbPath` argument wins, then
+ * the `CLAUDE_FLOW_DB_PATH` env binding, then the plain `memory.db` default
+ * under the memory root) — instead of a local `customDbPath ?? <default>`
+ * expression that silently ignored `CLAUDE_FLOW_DB_PATH`. A caller that
+ * explicitly selected a store via that env var no longer gets answers read
+ * from a different, unselected database file. When the resolved file is
+ * missing (and `createIfMissing` is false) or encrypted at rest, this
+ * refuses (returns null) rather than falling back to any other store.
  */
 export async function getBridgeDb(customDbPath, opts) {
-    const dbPath = customDbPath ?? path.join(getMemoryRoot(), 'memory.db');
+    const dbPath = resolveDbPath(customDbPath);
     const createIfMissing = opts?.createIfMissing === true;
     if (_db && _dbPath === dbPath) {
         armIdleRelease();

package/dist/src/memory/intelligence.js

@@ -1077,6 +1077,10 @@ export async function recordTrajectory(steps, verdict) {
         }
         bumpStat('trajectoriesRecorded');
         globalStats.lastAdaptation = Date.now();
+        // #4283: the bank's own save is debounced, and the one-shot bins exit as
+        // soon as the command resolves, so write the patterns now. Otherwise
+        // stats.json counts patterns that never reach patterns.json.
+        reasoningBank?.flushToDisk();
         savePersistedStats();
         return true;
     }