claude-flow 3.27.3 → 3.27.4

package/.claude/helpers/hook-handler.cjs

@@ -15,99 +15,9 @@
 
 const path = require('path');
 const fs = require('fs');
-const os = require('os');
 
 const helpersDir = __dirname;
 
-// Resolve an installed @claude-flow/cli (or ruflo) bin — mirrors
-// statusline-generator.ts's resolveCliBin() candidate list. Used only to
-// spawn the detached funnel-refresh helper below; failures are silent (no
-// candidate found just means the refresh never fires this session).
-//
-// Verifies dist/src/index.js exists alongside bin/cli.js, not just the bin
-// itself — Claude Code's own plugin marketplace mechanism installs by
-// `git clone`/`git pull` with no build step, so `~/.claude/plugins/
-// marketplaces/ruflo` is a SOURCE-ONLY checkout by construction: bin/cli.js
-// is present on disk but importing dist/src/index.js throws
-// ERR_MODULE_NOT_FOUND on every real command (confirmed live — only
-// `--version` happens to survive it, since it reads package.json directly).
-// Without this check, resolveCliBinForHook() picked that doomed candidate
-// first every time and spawnDetachedFunnelRefresh() below had no fallback,
-// so the promo/disclosure row could never populate for any marketplace
-// install, on any OS.
-function resolveCliBinForHook() {
-  try {
-    const home = os.homedir();
-    const cwd = process.cwd();
-    const candidates = [
-      path.join(home, '.claude', 'plugins', 'marketplaces', 'ruflo', 'bin', 'cli.js'),
-      path.join(cwd, 'node_modules', '@claude-flow', 'cli', 'bin', 'cli.js'),
-      path.join(cwd, 'node_modules', 'ruflo', 'bin', 'cli.js'),
-      path.join(cwd, 'v3', '@claude-flow', 'cli', 'bin', 'cli.js'),
-      // helpersDir is .claude/helpers/ inside the package itself when this
-      // file is running from a real @claude-flow/cli install (not a project
-      // that merely copied the helper) — its bin/ is two levels up.
-      path.join(helpersDir, '..', '..', 'bin', 'cli.js'),
-    ];
-    for (const p of candidates) {
-      try {
-        if (fs.existsSync(p) && fs.existsSync(path.join(path.dirname(p), '..', 'dist', 'src', 'index.js'))) {
-          return p;
-        }
-      } catch (e) { /* try next candidate */ }
-    }
-  } catch (e) { /* ignore */ }
-  return null;
-}
-
-// Fire-and-forget doesn't work when the CALLER is itself a short-lived
-// subprocess (confirmed live: two consecutive statusline renders 5s apart
-// both saw an empty funnel-messages-cache, because the async HTTPS fetch
-// inside a `void refreshRemoteMessages()` call gets killed when the spawning
-// process exits before the request completes). Spawning fully DETACHED +
-// unref'd decouples the refresh's lifetime from this hook's — it keeps
-// running (up to message-transport.ts's own 4s fetch timeout) even after
-// session-restore's own process has already exited, so it actually gets a
-// chance to write the cache. Never awaited here — must not add to
-// SessionStart's own timeout budget.
-//
-// No usable local candidate (resolveCliBinForHook() returned null) falls
-// back to npx: this call is detached/unref'd, so a slower npx cold-start
-// costs nothing perceptible — unlike the statusline's own synchronous
-// render path, where local-first exists purely for per-render latency.
-// `--prefer-offline` avoids a registry round trip for the tarball when
-// already cached while still resolving the current `@latest` version.
-function spawnDetachedHookRefresh(subcommand) {
-  try {
-    const { spawn } = require('child_process');
-    const cliBin = resolveCliBinForHook();
-    const cmd = process.platform === 'win32' ? 'npx.cmd' : 'npx';
-    const spawnArgs = cliBin
-      ? [process.execPath, [cliBin, 'hooks', subcommand, '--quiet']]
-      : [cmd, ['--prefer-offline', '@claude-flow/cli', 'hooks', subcommand, '--quiet']];
-    const child = spawn(spawnArgs[0], spawnArgs[1], {
-      detached: true,
-      stdio: 'ignore',
-      env: process.env,
-    });
-    child.unref();
-  } catch (e) { /* best-effort only */ }
-}
-
-function spawnDetachedFunnelRefresh() {
-  spawnDetachedHookRefresh('refresh-funnel');
-}
-
-// Same fallback-aware pattern as spawnDetachedFunnelRefresh() above, for
-// ADR-316's co-pilot advisor tip. Safe to call on EVERY session-restore:
-// refresh-advisor's own action checks consent + a 24h TTL BEFORE spending
-// anything, so an unconsented or already-fresh install is a fast no-op file
-// read, never a network call. Never awaited here — must not add to
-// SessionStart's own timeout budget.
-function spawnDetachedAdvisorRefresh() {
-  spawnDetachedHookRefresh('refresh-advisor');
-}
-
 // Safe require with stdout suppression - the helper modules have CLI
 // sections that run unconditionally on require(), so we mute console
 // during the require to prevent noisy output.
@@ -258,57 +168,6 @@ const handlers = {
     } else {
       console.log('[INFO] Router not available, using default routing');
     }
-
-    // Rate-limit -> sponsored-capacity nudge (ADR-312/313). Fires here,
-    // client-side, BEFORE the API call this prompt would make — so it still
-    // reaches the transcript even if that call then fails from the rate
-    // limit. Cheap local file reads only; never a network call or a child
-    // process, so it cannot add latency to prompt submission.
-    try {
-      const rlFunnelEnv = process.env.RUFLO_FUNNEL;
-      const rlDisabledByEnv = rlFunnelEnv !== undefined && /^(0|false|off|no)$/i.test(String(rlFunnelEnv).trim());
-      const rlCiVars = ['CI', 'GITHUB_ACTIONS', 'GITLAB_CI', 'CIRCLECI', 'TRAVIS', 'BUILDKITE', 'JENKINS_URL', 'TEAMCITY_VERSION', 'TF_BUILD'];
-      const rlIsCi = rlCiVars.some((v) => {
-        const val = process.env[v];
-        return val !== undefined && val !== '' && val !== '0' && String(val).toLowerCase() !== 'false';
-      });
-      const rlHome = path.join(os.homedir(), '.ruflo');
-      let rlUserDisabled = false;
-      try {
-        const rlUserCfg = JSON.parse(fs.readFileSync(path.join(rlHome, 'funnel.json'), 'utf8'));
-        rlUserDisabled = !!(rlUserCfg && rlUserCfg.enabled === false);
-      } catch (e) { /* absent/malformed = not disabled */ }
-      let rlProjectDisabled = false;
-      try {
-        const rlProjCfg = JSON.parse(fs.readFileSync(path.join(process.cwd(), 'claude-flow.config.json'), 'utf8'));
-        rlProjectDisabled = !!(rlProjCfg && rlProjCfg.funnel && rlProjCfg.funnel.enabled === false);
-      } catch (e) { /* absent/malformed = not disabled */ }
-
-      if (!rlDisabledByEnv && !rlIsCi && !rlUserDisabled && !rlProjectDisabled) {
-        let rlStatus = null;
-        try { rlStatus = JSON.parse(fs.readFileSync(path.join(rlHome, 'rate-limit-status.json'), 'utf8')); } catch (e) { /* not flagged */ }
-        let rlIsLimited = false;
-        if (rlStatus && rlStatus.limited) {
-          if (rlStatus.since) {
-            const rlSinceMs = Date.parse(rlStatus.since);
-            rlIsLimited = isNaN(rlSinceMs) ? true : (Date.now() - rlSinceMs) < 6 * 60 * 60 * 1000;
-          } else {
-            rlIsLimited = true;
-          }
-        }
-        if (rlIsLimited) {
-          let rlConsented = false;
-          try {
-            const rlConsentFile = JSON.parse(fs.readFileSync(path.join(rlHome, 'consent.json'), 'utf8'));
-            const rlReceipt = rlConsentFile && rlConsentFile['sponsored-downtime'];
-            rlConsented = !!(rlReceipt && rlReceipt.granted === true && rlReceipt.at !== null && rlReceipt.policyVersion === 1);
-          } catch (e) { /* not consented */ }
-          if (!rlConsented) {
-            console.log('[COGNITUM] Hit your Claude usage limit? Free sponsored capacity is available at cognitum.one/meta-llm — run: ruflo proxy sponsor-enable --yes');
-          }
-        }
-      }
-    } catch (e) { /* nudge must never break the hook */ }
   },
 
   'pre-bash': () => {
@@ -375,14 +234,6 @@ const handlers = {
         console.log(`[INTELLIGENCE] Loaded ${initResult.nodes} patterns, ${initResult.edges} edges`);
       }
     }
-    // Warm the funnel message cache once per session (see
-    // spawnDetachedFunnelRefresh's doc comment for why this must happen
-    // here, detached, rather than as the statusline's own fire-and-forget).
-    spawnDetachedFunnelRefresh();
-    // ADR-316 co-pilot advisor tip — same detached pattern; cheap no-op
-    // when not consented or still within the 24h TTL (see refresh-advisor's
-    // own doc comment).
-    spawnDetachedAdvisorRefresh();
   },
 
   'session-end': async () => {

package/.claude/helpers/intelligence.cjs

@@ -587,16 +587,6 @@ function recordEdit(file, success) {
     sessionId: sessionGet('sessionId') || null,
   });
   fs.appendFileSync(PENDING_PATH, entry + '\n', 'utf-8');
-  // Runaway-storage guard: pending-insights is append-only and only drained by
-  // consolidation. If it grows past ~512KB (thousands of un-consolidated edits
-  // — e.g. the daemon never ran), keep only the most recent 2000 lines so it
-  // can never grow unbounded. Cheap (a statSync per edit; rewrite only when over).
-  try {
-    if (fs.statSync(PENDING_PATH).size > 512 * 1024) {
-      const lines = fs.readFileSync(PENDING_PATH, 'utf-8').split('\n').filter(Boolean);
-      if (lines.length > 2000) fs.writeFileSync(PENDING_PATH, lines.slice(-2000).join('\n') + '\n', 'utf-8');
-    }
-  } catch (e) { /* non-fatal */ }
 }
 
 /**

package/.claude/helpers/statusline.cjs

@@ -618,7 +618,7 @@ function getPkgVersion() {
   // version (see generateStatuslineScript()'s doc comment) — correct even
   // when this renders via a pure npx invocation with no local install for
   // the candidate scan below to find.
-  let ver = "3.27.3";
+  let ver = "3.27.4";
   try {
     const home = os.homedir();
     const pkgPaths = [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-flow",
-  "version": "3.27.3",
+  "version": "3.27.4",
   "description": "Ruflo - Enterprise AI agent orchestration for Claude Code. Deploy 60+ specialized agents in coordinated swarms with self-learning, fault-tolerant consensus, vector memory, and MCP integration",
   "main": "dist/index.js",
   "type": "module",

package/v3/@claude-flow/cli/catalog-manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 1,
   "generation": 1,
-  "generatedAt": "2026-07-14T04:26:59.494Z",
-  "gitSha": "6643d44d",
+  "generatedAt": "2026-07-14T04:41:45.824Z",
+  "gitSha": "b254e321",
   "catalog": {
     "agents": 164,
     "tools": 387,

package/v3/@claude-flow/cli/dist/src/commands/init.js

@@ -468,7 +468,9 @@ const initAction = async (ctx) => {
             output.writeln(output.bold('Next steps:'));
             output.printList([
                 `Run ${output.highlight(`${bin} daemon start`)} to start background workers`,
-                `Run ${output.highlight(`${bin} memory init`)} to initialize memory database`,
+                // Memory is initialized automatically during init (persistent by
+                // default — see executor.ts) — no separate `memory init` step needed
+                // unless the DB was skipped (MINIMAL_INIT_OPTIONS) or needs --force.
                 `Run ${output.highlight(`${bin} swarm init`)} to initialize a swarm`,
                 `Or use ${output.highlight(`${bin} init --start-all`)} to do all of the above`,
                 options.components.settings ? `Review ${output.highlight('.claude/settings.json')} for hook configurations` : '',

package/v3/@claude-flow/cli/dist/src/init/executor.js

@@ -212,15 +212,39 @@ export async function executeInit(options) {
             // the `vector_indexes` table (older CLI / agentdb-written), self-heal it
             // so the statusline vector count + namespace routing work. Best-effort,
             // dynamically imported so a WASM-only host without better-sqlite3 just
-            // skips it. Fresh projects have no DB yet — this is a no-op there.
+            // skips it.
+            //
+            // Persistent memory ON BY DEFAULT: `runtime.memoryBackend` already
+            // defaults to 'hybrid' in DEFAULT_INIT_OPTIONS, but that only ever
+            // configured the DECLARED backend — the actual .swarm/memory.db file
+            // was never created until something eventually called `memory store`
+            // or the user ran `memory init --force` by hand (both the generated
+            // CLAUDE.md and the quickstart docs told users to do this as a
+            // separate step). A fresh project could sit for days looking
+            // "configured for AgentDB" while genuinely capturing nothing, with no
+            // signal that the config and the on-disk reality had diverged. Fresh
+            // projects now get the DB eagerly created here, matching what
+            // `memoryBackend` already promised; MINIMAL_INIT_OPTIONS
+            // (memoryBackend: 'memory') opts out, matching its non-persistent intent.
             try {
                 const memDbPath = path.join(targetDir, '.swarm', 'memory.db');
                 if (fs.existsSync(memDbPath)) {
                     const { repairVectorIndexes } = await import('../memory/memory-initializer.js');
                     await repairVectorIndexes(memDbPath, { autoRecover: true });
                 }
+                else if (options.runtime.memoryBackend !== 'memory') {
+                    const { initializeMemoryDatabase } = await import('../memory/memory-initializer.js');
+                    const initResult = await initializeMemoryDatabase({
+                        backend: options.runtime.memoryBackend,
+                        dbPath: memDbPath,
+                        verbose: false,
+                    });
+                    if (initResult.success) {
+                        result.created.files.push('.swarm/memory.db');
+                    }
+                }
             }
-            catch { /* best-effort — never block init on memory repair */ }
+            catch { /* best-effort — never block init on memory setup */ }
         }
         // Generate statusline
         if (options.components.statusline) {

package/v3/@claude-flow/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@claude-flow/cli",
-  "version": "3.27.3",
+  "version": "3.27.4",
   "type": "module",
   "description": "Ruflo CLI - Enterprise AI agent orchestration with 60+ specialized agents, swarm coordination, MCP server, self-learning hooks, and vector memory for Claude Code",
   "main": "dist/src/index.js",