@claude-flow/cli 3.71.4 → 3.72.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (71) hide show
  1. package/.claude/helpers/helpers.manifest.json +4 -4
  2. package/.claude/helpers/hook-handler.cjs +23 -10
  3. package/.claude/helpers/statusline.cjs +29 -14
  4. package/README.md +18 -3
  5. package/bin/cli.js +13 -18
  6. package/bin/mcp-server.js +13 -18
  7. package/catalog-manifest.json +2 -2
  8. package/dist/src/appliance/rvfa-distribution.js +2 -2
  9. package/dist/src/benchmarks/gaia-critic.d.ts +1 -7
  10. package/dist/src/benchmarks/gaia-critic.js +1 -7
  11. package/dist/src/benchmarks/gaia-decomposer.d.ts +1 -8
  12. package/dist/src/benchmarks/gaia-decomposer.js +1 -8
  13. package/dist/src/commands/agent-wasm.js +2 -2
  14. package/dist/src/commands/analyze.js +1 -1
  15. package/dist/src/commands/daemon.js +1 -1
  16. package/dist/src/commands/doctor.js +3 -2
  17. package/dist/src/commands/guidance.js +9 -9
  18. package/dist/src/commands/hooks.js +13 -8
  19. package/dist/src/commands/init.js +14 -16
  20. package/dist/src/commands/neural.js +8 -6
  21. package/dist/src/commands/route.js +1 -1
  22. package/dist/src/commands/ruvector/backup.js +7 -5
  23. package/dist/src/commands/ruvector/benchmark.js +6 -1
  24. package/dist/src/commands/ruvector/import.js +19 -5
  25. package/dist/src/commands/ruvector/init.js +1 -1
  26. package/dist/src/commands/start.js +1 -1
  27. package/dist/src/commands/status.js +1 -1
  28. package/dist/src/commands/task.js +18 -1
  29. package/dist/src/commands/update.js +1 -1
  30. package/dist/src/funnel/local-signals.js +7 -2
  31. package/dist/src/mcp-protocol.d.ts +90 -0
  32. package/dist/src/mcp-protocol.js +179 -0
  33. package/dist/src/mcp-server.d.ts +1 -0
  34. package/dist/src/mcp-server.js +20 -22
  35. package/dist/src/mcp-tools/agent-execute-core.js +9 -1
  36. package/dist/src/mcp-tools/agent-tools.d.ts +13 -0
  37. package/dist/src/mcp-tools/agent-tools.js +59 -8
  38. package/dist/src/mcp-tools/browser-argv.d.ts +9 -0
  39. package/dist/src/mcp-tools/browser-argv.js +33 -0
  40. package/dist/src/mcp-tools/browser-session-tools.js +4 -0
  41. package/dist/src/mcp-tools/browser-tools.js +12 -2
  42. package/dist/src/mcp-tools/coordination-tools.js +5 -4
  43. package/dist/src/mcp-tools/embeddings-tools.js +12 -4
  44. package/dist/src/mcp-tools/glob-exclusions.d.ts +6 -0
  45. package/dist/src/mcp-tools/glob-exclusions.js +81 -0
  46. package/dist/src/mcp-tools/hive-mind-tools.js +104 -35
  47. package/dist/src/mcp-tools/hooks-tools.js +12 -5
  48. package/dist/src/mcp-tools/import-limits.d.ts +4 -0
  49. package/dist/src/mcp-tools/import-limits.js +28 -0
  50. package/dist/src/mcp-tools/memory-tools.js +21 -42
  51. package/dist/src/mcp-tools/performance-tools.js +7 -2
  52. package/dist/src/mcp-tools/record-store.d.ts +8 -0
  53. package/dist/src/mcp-tools/record-store.js +98 -1
  54. package/dist/src/mcp-tools/security-tools.d.ts +9 -0
  55. package/dist/src/mcp-tools/security-tools.js +39 -3
  56. package/dist/src/mcp-tools/session-tools.js +5 -3
  57. package/dist/src/mcp-tools/swarm-tools.js +35 -17
  58. package/dist/src/mcp-tools/task-tools.js +68 -5
  59. package/dist/src/mcp-tools/terminal-tools.js +9 -0
  60. package/dist/src/mcp-tools/workflow-tools.js +13 -12
  61. package/dist/src/mcp-tools/x-federation-join.js +55 -14
  62. package/dist/src/memory/intelligence.d.ts +11 -0
  63. package/dist/src/memory/intelligence.js +84 -6
  64. package/dist/src/memory/memory-initializer.d.ts +6 -2
  65. package/dist/src/memory/memory-initializer.js +15 -6
  66. package/dist/src/ruvector/model-router.d.ts +6 -1
  67. package/dist/src/ruvector/model-router.js +16 -4
  68. package/dist/src/services/worker-daemon.js +30 -12
  69. package/dist/src/transfer/storage/gcs.js +3 -2
  70. package/package.json +1 -1
  71. package/plugins/ruflo-metaharness/.claude-plugin/plugin.json +1 -0
@@ -34,7 +34,7 @@ const compileCommand = {
34
34
  output.writeln(output.error(`Root guidance file not found: ${rootPath}`));
35
35
  return { success: false, message: `File not found: ${rootPath}` };
36
36
  }
37
- const modExport = ctx.flags['mod-projection'] === true;
37
+ const modExport = (ctx.flags.modProjection ?? ctx.flags['mod-projection']) === true;
38
38
  const checked = modExport ? await (await import('../guidance/mod-sources.js')).readModGuidanceSources({
39
39
  rootPath, localPath, revision: String(ctx.flags.revision || ''),
40
40
  }) : undefined;
@@ -112,7 +112,7 @@ const retrieveCommand = {
112
112
  const task = ctx.flags.task;
113
113
  const rootPath = ctx.flags.root || './CLAUDE.md';
114
114
  const localPath = ctx.flags.local;
115
- const maxShards = parseInt(ctx.flags['max-shards'] || '5', 10);
115
+ const maxShards = parseInt(String(ctx.flags.maxShards ?? ctx.flags['max-shards'] ?? 5), 10);
116
116
  const intentOverride = ctx.flags.intent;
117
117
  const jsonOutput = ctx.flags.json === true;
118
118
  if (!task) {
@@ -338,9 +338,9 @@ const optimizeCommand = {
338
338
  const rootPath = ctx.flags.root || './CLAUDE.md';
339
339
  const localPath = ctx.flags.local;
340
340
  const applyChanges = ctx.flags.apply === true;
341
- const contextSize = (ctx.flags['context-size'] || 'standard');
342
- const targetScore = parseInt(ctx.flags['target-score'] || '90', 10);
343
- const maxIterations = parseInt(ctx.flags['max-iterations'] || '5', 10);
341
+ const contextSize = (ctx.flags.contextSize ?? ctx.flags['context-size'] ?? 'standard');
342
+ const targetScore = parseInt(String(ctx.flags.targetScore ?? ctx.flags['target-score'] ?? 90), 10);
343
+ const maxIterations = parseInt(String(ctx.flags.maxIterations ?? ctx.flags['max-iterations'] ?? 5), 10);
344
344
  const jsonOutput = ctx.flags.json === true;
345
345
  output.writeln();
346
346
  output.writeln(output.bold('Guidance Optimizer'));
@@ -437,10 +437,10 @@ const abTestCommand = {
437
437
  { command: 'claude-flow guidance ab-test --json', description: 'Output full report as JSON' },
438
438
  ],
439
439
  action: async (ctx) => {
440
- const configAPath = ctx.flags['config-a'];
441
- const configBPath = ctx.flags['config-b'] || './CLAUDE.md';
440
+ const configAPath = (ctx.flags.configA ?? ctx.flags['config-a']);
441
+ const configBPath = (ctx.flags.configB ?? ctx.flags['config-b'] ?? './CLAUDE.md');
442
442
  const tasksPath = ctx.flags.tasks;
443
- const workDir = ctx.flags['work-dir'];
443
+ const workDir = (ctx.flags.workDir ?? ctx.flags['work-dir']);
444
444
  const jsonOutput = ctx.flags.json === true;
445
445
  output.writeln();
446
446
  output.writeln(output.bold('A/B Behavioral Benchmark'));
@@ -541,7 +541,7 @@ const modCandidatesCommand = {
541
541
  action: async (ctx) => {
542
542
  try {
543
543
  const { collectModCandidates } = await import('../guidance/mod-projection.js');
544
- const data = await collectModCandidates(String(ctx.flags.directory || '.claude-flow/mods/guidance/observations'), ctx.flags['bundle-id']);
544
+ const data = await collectModCandidates(String(ctx.flags.directory || '.claude-flow/mods/guidance/observations'), (ctx.flags.bundleId ?? ctx.flags['bundle-id']));
545
545
  output.writeln(JSON.stringify(data, null, ctx.flags.json === true ? undefined : 2));
546
546
  return { success: true, data };
547
547
  }
@@ -2529,8 +2529,8 @@ const workerDetectCommand = {
2529
2529
  ],
2530
2530
  action: async (ctx) => {
2531
2531
  const prompt = ctx.flags['prompt'];
2532
- const autoDispatch = ctx.flags['auto-dispatch'];
2533
- const minConfidence = parseFloat(ctx.flags['min-confidence'] || '0.5');
2532
+ const autoDispatch = (ctx.flags.autoDispatch ?? ctx.flags['auto-dispatch']);
2533
+ const minConfidence = parseFloat(String(ctx.flags.minConfidence ?? ctx.flags['min-confidence'] ?? 0.5) || '0.5');
2534
2534
  if (!prompt) {
2535
2535
  output.printError('--prompt is required');
2536
2536
  return { success: false, exitCode: 1 };
@@ -2570,7 +2570,12 @@ const workerDetectCommand = {
2570
2570
  }
2571
2571
  if (result.autoDispatched && result.workerIds) {
2572
2572
  output.writeln();
2573
- output.writeln(output.success('Workers auto-dispatched:'));
2573
+ if (result.autoDispatchStatus === 'synthetic-completed') {
2574
+ output.printWarning(result.note ?? 'No executor ran. Worker records are synthetic placeholders.');
2575
+ }
2576
+ else {
2577
+ output.writeln(output.success('Workers auto-dispatched:'));
2578
+ }
2574
2579
  result.workerIds.forEach(id => {
2575
2580
  output.writeln(` - ${id}`);
2576
2581
  });
@@ -3079,8 +3084,8 @@ const coverageGapsCommand = {
3079
3084
  ],
3080
3085
  action: async (ctx) => {
3081
3086
  const threshold = ctx.flags.threshold ?? 80;
3082
- const groupByAgent = ctx.flags['group-by-agent'] !== false;
3083
- const criticalOnly = ctx.flags['critical-only'] || false;
3087
+ const groupByAgent = (ctx.flags.groupByAgent ?? ctx.flags['group-by-agent']) !== false;
3088
+ const criticalOnly = (ctx.flags.criticalOnly ?? ctx.flags['critical-only']) === true;
3084
3089
  const spinner = output.createSpinner({ text: 'Analyzing project coverage gaps...' });
3085
3090
  spinner.start();
3086
3091
  // Try reading coverage from disk first
@@ -4161,7 +4166,7 @@ const modelRouteCommand = {
4161
4166
  { name: 'task', short: 't', type: 'string', description: 'Task description to route', required: true },
4162
4167
  { name: 'context', short: 'c', type: 'string', description: 'Additional context' },
4163
4168
  { name: 'prefer-cost', type: 'boolean', description: 'Prefer lower cost models' },
4164
- { name: 'prefer-quality', type: 'boolean', description: 'Prefer higher quality models' },
4169
+ { name: 'prefer-speed', type: 'boolean', description: 'Prefer faster models when possible' },
4165
4170
  ],
4166
4171
  examples: [
4167
4172
  { command: 'claude-flow hooks model-route -t "fix typo"', description: 'Route simple task (likely haiku)' },
@@ -4178,8 +4183,8 @@ const modelRouteCommand = {
4178
4183
  const result = await callMCPTool('hooks_model-route', {
4179
4184
  task,
4180
4185
  context: ctx.flags.context,
4181
- preferCost: ctx.flags['prefer-cost'],
4182
- preferQuality: ctx.flags['prefer-quality'],
4186
+ preferCost: ctx.flags.preferCost,
4187
+ preferSpeed: ctx.flags.preferSpeed,
4183
4188
  });
4184
4189
  if (ctx.flags.format === 'json') {
4185
4190
  output.printJson(result);
@@ -816,16 +816,22 @@ const initClaudeAction = async (ctx) => {
816
816
  if (startDaemon || startAll) {
817
817
  output.writeln();
818
818
  output.printInfo('Starting services...');
819
- const { execSync } = await import('child_process');
819
+ const { execFileSync } = await import('child_process');
820
+ // #4770: drop stderr via stdio, not a shell redirect (breaks on cmd.exe).
821
+ // shell on win32 so npx.cmd resolves (#2770); args are fixed literals.
822
+ const runCli = (args) => {
823
+ execFileSync('npx', ['@claude-flow/cli@latest', ...args], {
824
+ stdio: ['ignore', 'pipe', 'ignore'],
825
+ cwd: ctx.cwd,
826
+ timeout: 30000,
827
+ shell: process.platform === 'win32',
828
+ });
829
+ };
820
830
  // Initialize memory database
821
831
  if (startAll) {
822
832
  try {
823
833
  output.writeln(output.dim(' Initializing memory database...'));
824
- execSync('npx @claude-flow/cli@latest memory init 2>/dev/null', {
825
- stdio: 'pipe',
826
- cwd: ctx.cwd,
827
- timeout: 30000
828
- });
834
+ runCli(['memory', 'init']);
829
835
  output.writeln(output.success(' ✓ Memory initialized'));
830
836
  }
831
837
  catch {
@@ -854,11 +860,7 @@ const initClaudeAction = async (ctx) => {
854
860
  if (startDaemon) {
855
861
  try {
856
862
  output.writeln(output.dim(' Starting daemon...'));
857
- execSync('npx @claude-flow/cli@latest daemon start 2>/dev/null', {
858
- stdio: 'pipe',
859
- cwd: ctx.cwd,
860
- timeout: 30000
861
- });
863
+ runCli(['daemon', 'start']);
862
864
  output.writeln(output.success(' ✓ Daemon started'));
863
865
  }
864
866
  catch {
@@ -872,11 +874,7 @@ const initClaudeAction = async (ctx) => {
872
874
  if (startAll) {
873
875
  try {
874
876
  output.writeln(output.dim(' Initializing swarm...'));
875
- execSync('npx @claude-flow/cli@latest swarm init --topology hierarchical 2>/dev/null', {
876
- stdio: 'pipe',
877
- cwd: ctx.cwd,
878
- timeout: 30000
879
- });
877
+ runCli(['swarm', 'init', '--topology', 'hierarchical']);
880
878
  output.writeln(output.success(' ✓ Swarm initialized'));
881
879
  }
882
880
  catch {
@@ -35,8 +35,8 @@ const trainCommand = {
35
35
  action: async (ctx) => {
36
36
  const patternType = (ctx.flags.pattern || ctx.flags.patternType || ctx.flags['pattern-type']) || 'coordination';
37
37
  const epochs = parseInt(ctx.flags.epochs || '50', 10);
38
- const learningRate = parseFloat(ctx.flags['learning-rate'] || '0.01');
39
- const batchSize = parseInt(ctx.flags['batch-size'] || '32', 10);
38
+ const learningRate = parseFloat((ctx.flags.learningRate ?? ctx.flags['learning-rate']) || '0.01');
39
+ const batchSize = parseInt((ctx.flags.batchSize ?? ctx.flags['batch-size']) || '32', 10);
40
40
  const dim = Math.min(parseInt(ctx.flags.dim || '256', 10), 256);
41
41
  // #2549 follow-up — backend routing: 'native' = @ruvector/ruvllm
42
42
  // TrainingPipeline (real epochs/early-stopping/disk checkpoints),
@@ -44,7 +44,7 @@ const trainCommand = {
44
44
  // 'auto' = native when the module resolves, else wasm.
45
45
  const backendFlag = String(ctx.flags.backend || 'auto');
46
46
  // Feature: validation split + resume (native TrainingPipeline leg).
47
- const valSplitRaw = parseFloat(ctx.flags['val-split'] ?? '0.1');
47
+ const valSplitRaw = parseFloat((ctx.flags.valSplit ?? ctx.flags['val-split']) ?? '0.1');
48
48
  const valSplit = Number.isFinite(valSplitRaw) ? Math.max(0, Math.min(1, valSplitRaw)) : 0.1;
49
49
  const resumePath = ctx.flags.resume ? String(ctx.flags.resume) : undefined;
50
50
  // --resume is a native-only capability; refuse the WASM combination up
@@ -1023,7 +1023,7 @@ const exportCommand = {
1023
1023
  const outputFile = ctx.flags.output;
1024
1024
  const pinToIpfs = ctx.flags.ipfs;
1025
1025
  const signExport = ctx.flags.sign !== false;
1026
- const stripPii = ctx.flags['strip-pii'] !== false;
1026
+ const stripPii = (ctx.flags.stripPii ?? ctx.flags['strip-pii']) !== false;
1027
1027
  const customName = ctx.flags.name;
1028
1028
  output.writeln();
1029
1029
  output.writeln(output.bold('Secure Model Export'));
@@ -1703,7 +1703,8 @@ const routerTrainCommand = {
1703
1703
  action: async (ctx) => {
1704
1704
  const corpusPath = ctx.flags.corpus;
1705
1705
  const outPath = ctx.flags.out || './router.krr.json';
1706
- const qualityBar = parseFloat(ctx.flags['quality-bar'] || '0.8') || 0.8;
1706
+ const requestedQualityBar = parseFloat(String(ctx.flags.qualityBar ?? ctx.flags['quality-bar'] ?? 0.8));
1707
+ const qualityBar = Number.isNaN(requestedQualityBar) ? 0.8 : requestedQualityBar;
1707
1708
  // Indirect the optional-dep specifier through a string variable so tsc
1708
1709
  // doesn't statically resolve `@metaharness/router` at build time (TS2307
1709
1710
  // when it isn't installed — #2586 pattern). The dep is optional at
@@ -3464,7 +3465,8 @@ const routerBanditStateCommand = {
3464
3465
  const statePath = ctx.flags.path
3465
3466
  ?? path.resolve(process.cwd(), '.swarm', 'model-router-state.json');
3466
3467
  const fmt = ctx.flags.format || 'table';
3467
- const coldThreshold = parseInt(ctx.flags['cold-threshold'] || '4', 10) || 4;
3468
+ const requestedColdThreshold = parseInt(String(ctx.flags.coldThreshold ?? ctx.flags['cold-threshold'] ?? 4), 10);
3469
+ const coldThreshold = Number.isNaN(requestedColdThreshold) ? 4 : requestedColdThreshold;
3468
3470
  if (!fs.existsSync(statePath)) {
3469
3471
  const msg = `Bandit state file not found at ${statePath}`;
3470
3472
  if (fmt === 'json')
@@ -367,7 +367,7 @@ const feedbackCommand = {
367
367
  const taskDescription = ctx.flags.task;
368
368
  const agentId = ctx.flags.agent;
369
369
  const reward = ctx.flags.reward;
370
- const nextTask = ctx.flags['next-task'];
370
+ const nextTask = ctx.flags.nextTask;
371
371
  if (!taskDescription || !agentId) {
372
372
  output.printError('Task description and agent are required');
373
373
  return { success: false, exitCode: 1 };
@@ -53,10 +53,10 @@ const backupSubcommand = {
53
53
  {
54
54
  name: 'format',
55
55
  short: 'f',
56
- description: 'Output format',
56
+ description: 'Output format (defaults to SQL)',
57
57
  type: 'string',
58
- default: 'sql',
59
- choices: ['sql', 'json', 'csv'],
58
+ default: 'text',
59
+ choices: ['text', 'sql', 'json', 'csv'],
60
60
  },
61
61
  {
62
62
  name: 'compress',
@@ -125,9 +125,11 @@ const backupSubcommand = {
125
125
  const config = getConnectionConfig(ctx);
126
126
  let outputPath = ctx.flags.output;
127
127
  const tablesFilter = ctx.flags.tables;
128
- const format = ctx.flags.format || 'sql';
128
+ // The CLI validates the shared --format flag against its global choices.
129
+ const requestedFormat = ctx.flags.format;
130
+ const format = !requestedFormat || requestedFormat === 'text' ? 'sql' : requestedFormat;
129
131
  const compress = ctx.flags.compress;
130
- const includeIndexes = ctx.flags['include-indexes'] !== false;
132
+ const includeIndexes = (ctx.flags.includeIndexes ?? ctx.flags['include-indexes']) !== false;
131
133
  output.writeln();
132
134
  output.writeln(output.bold('RuVector Backup'));
133
135
  output.writeln(output.dim('='.repeat(60)));
@@ -158,7 +158,8 @@ export const benchmarkCommand = {
158
158
  const topK = parseInt(ctx.flags.k || '10', 10);
159
159
  const metric = ctx.flags.metric || 'cosine';
160
160
  const indexType = ctx.flags.index || 'hnsw';
161
- const batchSize = parseInt(ctx.flags['batch-size'] || '1000', 10);
161
+ const batchSizeFlag = ctx.flags.batchSize ?? ctx.flags['batch-size'] ?? 1000;
162
+ const batchSize = typeof batchSizeFlag === 'string' ? Number(batchSizeFlag) : batchSizeFlag;
162
163
  const cleanup = ctx.flags.cleanup !== false;
163
164
  output.writeln();
164
165
  output.writeln(output.bold('RuVector Performance Benchmark'));
@@ -168,6 +169,10 @@ export const benchmarkCommand = {
168
169
  output.printError('Database name is required. Use --database or -d flag, or set PGDATABASE env.');
169
170
  return { success: false, exitCode: 1 };
170
171
  }
172
+ if (typeof batchSize !== 'number' || !Number.isSafeInteger(batchSize) || batchSize < 1) {
173
+ output.printError('--batch-size must be a positive integer');
174
+ return { success: false, exitCode: 1 };
175
+ }
171
176
  // Show benchmark configuration
172
177
  output.writeln(output.highlight('Benchmark Configuration:'));
173
178
  output.printTable({
@@ -166,15 +166,21 @@ export const importCommand = {
166
166
  ],
167
167
  action: async (ctx) => {
168
168
  const inputFile = ctx.flags.input;
169
- const fromMemory = ctx.flags['from-memory'];
169
+ const fromMemory = (ctx.flags.fromMemory ?? ctx.flags['from-memory']);
170
170
  const outputFile = ctx.flags.output;
171
- const batchSize = ctx.flags['batch-size'] || 100;
171
+ const batchSizeFlag = ctx.flags.batchSize ?? ctx.flags['batch-size'] ?? 100;
172
+ const batchSize = typeof batchSizeFlag === 'string' ? Number(batchSizeFlag) : batchSizeFlag;
172
173
  const containerName = ctx.flags.container || 'ruvector-postgres';
173
174
  const verbose = ctx.flags.verbose;
174
175
  output.writeln();
175
176
  output.writeln(output.bold('RuVector PostgreSQL Import'));
176
177
  output.writeln(output.dim('='.repeat(50)));
177
178
  output.writeln();
179
+ if (typeof batchSize !== 'number' || !Number.isSafeInteger(batchSize) || batchSize < 1) {
180
+ const message = '--batch-size must be a positive integer';
181
+ output.printError(message);
182
+ return { success: false, message };
183
+ }
178
184
  // Validate input
179
185
  if (!inputFile && !fromMemory) {
180
186
  output.printError('Either --input <file> or --from-memory is required');
@@ -248,6 +254,7 @@ export const importCommand = {
248
254
  sqlStatements.push('');
249
255
  sqlStatements.push('BEGIN;');
250
256
  sqlStatements.push('');
257
+ const inserts = [];
251
258
  for (const entry of entries) {
252
259
  try {
253
260
  // Track statistics
@@ -256,9 +263,7 @@ export const importCommand = {
256
263
  if (entry.embedding && entry.embedding.length > 0) {
257
264
  stats.withEmbeddings++;
258
265
  }
259
- const sql = generateInsertSQL(entry);
260
- sqlStatements.push(sql);
261
- sqlStatements.push('');
266
+ inserts.push(generateInsertSQL(entry));
262
267
  stats.imported++;
263
268
  if (verbose) {
264
269
  output.writeln(output.dim(` Processed: ${entry.key} (${ns})`));
@@ -270,6 +275,15 @@ export const importCommand = {
270
275
  output.printWarning(`Skipped entry "${entry.key}": ${errorMessage}`);
271
276
  }
272
277
  }
278
+ // Send each batch as one statement while keeping ordered upserts in the same transaction.
279
+ for (let offset = 0; offset < inserts.length; offset += batchSize) {
280
+ const batch = inserts.slice(offset, offset + batchSize).join('\n\n');
281
+ let tag = 'ruvector_batch';
282
+ // A value containing the delimiter must stay inside the block.
283
+ while (batch.includes(`$${tag}$`))
284
+ tag += '_';
285
+ sqlStatements.push(`DO $${tag}$\nBEGIN\n${batch}\nEND;\n$${tag}$;`, '');
286
+ }
273
287
  sqlStatements.push('COMMIT;');
274
288
  sqlStatements.push('');
275
289
  sqlStatements.push(`-- Import complete: ${stats.imported} entries`);
@@ -145,7 +145,7 @@ export const initCommand = {
145
145
  }
146
146
  const force = ctx.flags.force;
147
147
  const dimensions = parseInt(ctx.flags.dimensions || '1536', 10);
148
- const indexType = ctx.flags['index-type'] || 'hnsw';
148
+ const indexType = (ctx.flags.indexType ?? ctx.flags['index-type']) || 'hnsw';
149
149
  // Show configuration
150
150
  output.writeln(output.highlight('Connection Configuration:'));
151
151
  output.printTable({
@@ -85,7 +85,7 @@ const startAction = async (ctx) => {
85
85
  const daemon = ctx.flags.daemon;
86
86
  const port = ctx.flags.port || DEFAULT_PORT;
87
87
  const topology = ctx.flags.topology || DEFAULT_TOPOLOGY;
88
- const skipMcp = ctx.flags['skip-mcp'];
88
+ const skipMcp = ctx.flags.skipMcp;
89
89
  const cwd = ctx.cwd;
90
90
  // Check initialization
91
91
  if (!isInitialized(cwd)) {
@@ -281,7 +281,7 @@ function formatHealth(health) {
281
281
  const statusAction = async (ctx) => {
282
282
  const watch = ctx.flags.watch;
283
283
  const interval = ctx.flags.interval || DEFAULT_WATCH_INTERVAL / 1000;
284
- const healthCheck = ctx.flags['health-check'];
284
+ const healthCheck = ctx.flags.healthCheck;
285
285
  const cwd = ctx.cwd;
286
286
  // Check initialization
287
287
  if (!isInitialized(cwd)) {
@@ -571,6 +571,12 @@ const assignCommand = {
571
571
  taskId,
572
572
  agentIds: selectedAgents
573
573
  });
574
+ // task_assign answers a finished task or an unknown agent with
575
+ // success: false instead of throwing (#4725).
576
+ if (result.success === false) {
577
+ output.printError(`Failed to assign task ${taskId}: ${result.error || 'unknown error'}`);
578
+ return { success: false, exitCode: 1, data: result };
579
+ }
574
580
  output.writeln();
575
581
  output.printSuccess(`Task ${taskId} assigned to ${result.assignedTo.join(', ')}`);
576
582
  return { success: true, data: result };
@@ -592,6 +598,17 @@ const assignCommand = {
592
598
  agentIds: unassign ? [] : agentIds.split(',').map(id => id.trim()),
593
599
  unassign
594
600
  });
601
+ // task_assign answers a finished task or an unknown agent with
602
+ // success: false instead of throwing (#4725).
603
+ if (result.success === false) {
604
+ if (ctx.flags.format === 'json') {
605
+ output.printJson(result);
606
+ }
607
+ else {
608
+ output.printError(`Failed to assign task ${taskId}: ${result.error || 'unknown error'}`);
609
+ }
610
+ return { success: false, exitCode: 1, data: result };
611
+ }
595
612
  output.writeln();
596
613
  if (unassign) {
597
614
  output.printSuccess(`Task ${taskId} unassigned`);
@@ -630,7 +647,7 @@ const retryCommand = {
630
647
  ],
631
648
  action: async (ctx) => {
632
649
  const taskId = ctx.args[0];
633
- const resetState = ctx.flags['reset-state'];
650
+ const resetState = (ctx.flags.resetState ?? ctx.flags['reset-state']);
634
651
  if (!taskId) {
635
652
  output.printError('Task ID is required');
636
653
  return { success: false, exitCode: 1 };
@@ -120,7 +120,7 @@ const allCommand = {
120
120
  autoUpdate: {
121
121
  patch: true,
122
122
  minor: true,
123
- major: flags['include-major'] || false,
123
+ major: flags.includeMajor || false,
124
124
  },
125
125
  };
126
126
  const { results } = await checkForUpdates(config);
@@ -9,7 +9,7 @@
9
9
  */
10
10
  import * as fs from 'fs';
11
11
  import * as path from 'path';
12
- import { execSync } from 'child_process';
12
+ import { execFileSync, execSync } from 'child_process';
13
13
  export function getSecurityStatus(cwd = process.cwd()) {
14
14
  const empty = {
15
15
  status: 'PENDING', findings: 0, cvesFixed: 0, totalCves: 0,
@@ -67,7 +67,12 @@ export function getSwarmStatus() {
67
67
  /** Count of uncommitted-changed files (git status --short line count). */
68
68
  export function getGitUncommittedCount() {
69
69
  try {
70
- const out = execSync('git status --porcelain 2>/dev/null', { encoding: 'utf-8', timeout: 3000 });
70
+ // #4770: no shell, so this also works on Windows.
71
+ const out = execFileSync('git', ['status', '--porcelain'], {
72
+ encoding: 'utf-8',
73
+ timeout: 3000,
74
+ stdio: ['ignore', 'pipe', 'ignore'],
75
+ });
71
76
  const lines = out.split('\n').filter((l) => l.trim().length > 0);
72
77
  return lines.length;
73
78
  }
@@ -0,0 +1,90 @@
1
+ /**
2
+ * MCP protocol-version handling for the stdio servers (ADR-524).
3
+ *
4
+ * Ruflo ships three stdio entry points (`bin/cli.js` auto-detect, `bin/mcp-server.js`,
5
+ * and `MCPServerManager` in mcp-server.ts). All three answered `initialize` with a
6
+ * hardcoded `2024-11-05` and knew nothing of the 2026-07-28 revision, which drops the
7
+ * handshake and carries the version on every request. This module is the one place
8
+ * that decides which revision a message speaks, so the three handlers cannot drift.
9
+ *
10
+ * Dual-era behaviour (spec: basic/versioning):
11
+ * - `initialize` selects legacy semantics; the requested legacy version is echoed.
12
+ * - a request carrying `_meta["io.modelcontextprotocol/protocolVersion"]` is served
13
+ * statelessly: `resultType` and `serverInfo` on every result, cache hints on lists,
14
+ * `-32602` for an unknown resource, `-32022` for an unsupported version.
15
+ * - `server/discover` is always answered, so a dual-era client's stdio probe succeeds.
16
+ */
17
+ export declare const MODERN_PROTOCOL_VERSIONS: readonly ["2026-07-28"];
18
+ export declare const LEGACY_PROTOCOL_VERSIONS: readonly ["2025-11-25", "2025-06-18", "2024-11-05"];
19
+ export declare const SUPPORTED_PROTOCOL_VERSIONS: readonly string[];
20
+ /** Offered to a legacy client whose requested version we do not know. */
21
+ export declare const LATEST_LEGACY_PROTOCOL_VERSION: "2025-11-25";
22
+ export declare const META_PROTOCOL_VERSION = "io.modelcontextprotocol/protocolVersion";
23
+ export declare const META_CLIENT_CAPABILITIES = "io.modelcontextprotocol/clientCapabilities";
24
+ export declare const META_SERVER_INFO = "io.modelcontextprotocol/serverInfo";
25
+ export declare const ERROR_INVALID_PARAMS = -32602;
26
+ export declare const ERROR_UNSUPPORTED_PROTOCOL_VERSION = -32022;
27
+ /** 2025-11-25 and earlier; replaced by -32602 in 2026-07-28. */
28
+ export declare const ERROR_LEGACY_RESOURCE_NOT_FOUND = -32002;
29
+ /** Tool catalogue is fixed for the life of a stdio process; five minutes is a conservative hint. */
30
+ export declare const TOOLS_LIST_TTL_MS = 300000;
31
+ export declare const DISCOVER_TTL_MS = 3600000;
32
+ export interface ServerIdentity {
33
+ name: string;
34
+ version: string;
35
+ }
36
+ export interface ProtocolContext {
37
+ /** True when the request used 2026-07-28 per-request metadata. */
38
+ modern: boolean;
39
+ /** Version the request declared, or undefined for legacy requests. */
40
+ version?: string;
41
+ /** Validated W3C traceparent, if the client propagated one. */
42
+ traceparent?: string;
43
+ tracestate?: string;
44
+ }
45
+ export interface JsonRpcMessage {
46
+ jsonrpc?: string;
47
+ id?: string | number | null;
48
+ method?: string;
49
+ params?: unknown;
50
+ }
51
+ export interface JsonRpcResponse {
52
+ jsonrpc: '2.0';
53
+ id?: string | number | null;
54
+ result?: Record<string, unknown>;
55
+ error?: {
56
+ code: number;
57
+ message: string;
58
+ data?: unknown;
59
+ };
60
+ }
61
+ export type Preflight = {
62
+ response: JsonRpcResponse;
63
+ context?: undefined;
64
+ } | {
65
+ response?: undefined;
66
+ context: ProtocolContext;
67
+ };
68
+ /** The CLI package version, read once from package.json (dist/src/ → ../../). */
69
+ export declare function rufloPackageVersion(): string;
70
+ export declare function defaultServerIdentity(): ServerIdentity;
71
+ /** Pick the legacy version to answer `initialize` with (spec: echo if supported, else our latest). */
72
+ export declare function negotiateLegacyVersion(requested: unknown): string;
73
+ export declare function isValidTraceparent(value: unknown): value is string;
74
+ /**
75
+ * Decide how to serve one inbound message before the handler's own switch runs.
76
+ * Returns a complete response for `initialize`, `server/discover` and protocol
77
+ * errors; otherwise returns the context the handler passes to `finalizeResponse`.
78
+ */
79
+ export declare function protocolPreflight(message: JsonRpcMessage, capabilities: Record<string, unknown>, identity?: ServerIdentity): Preflight;
80
+ /** The resource-not-found code the request's revision expects. */
81
+ export declare function resourceNotFoundCode(context: ProtocolContext): number;
82
+ /** Stable, name-ordered copy so `tools/list` is byte-identical across calls (prompt-cache friendly). */
83
+ export declare function sortToolsDeterministically<T extends {
84
+ name: string;
85
+ }>(tools: readonly T[]): T[];
86
+ /** Tool-call context fields to forward, so handlers and logs can join the caller's trace. */
87
+ export declare function traceContextFields(context: ProtocolContext): Record<string, string>;
88
+ /** Add the 2026-07-28 result fields to a handler's response. Legacy responses pass through untouched. */
89
+ export declare function finalizeResponse(response: JsonRpcResponse | null, method: string | undefined, context: ProtocolContext, identity?: ServerIdentity): JsonRpcResponse | null;
90
+ //# sourceMappingURL=mcp-protocol.d.ts.map