claude-flow 3.55.0 → 3.56.0

package/v3/@claude-flow/cli/dist/src/commands/doctor.js

@@ -7,7 +7,7 @@
 import { output } from '../output.js';
 import { existsSync, readFileSync, statSync, openSync, readSync, closeSync } from 'fs';
 import { join, dirname } from 'path';
-import { fileURLToPath } from 'url';
+import { fileURLToPath, pathToFileURL } from 'url';
 import { createHash } from 'crypto';
 import { execSync, exec, execFile } from 'child_process';
 import { promisify } from 'util';
@@ -2117,7 +2117,7 @@ async function checkMetaharnessIntegration() {
     // Runtime smoke: import the similarity module and exercise it
     try {
         const modPath = join(pluginDir, 'scripts', '_similarity.mjs');
-        const mod = await import(modPath);
+        const mod = await import(pathToFileURL(modPath).href);
         if (typeof mod.similarity !== 'function') {
             return {
                 name: 'MetaHarness integration (ADR-150)',
@@ -2144,7 +2144,7 @@ async function checkMetaharnessIntegration() {
         // parallelization primitives oia-audit depends on; if they're
         // missing, oia-audit's import fails and the whole pipeline breaks.
         const harnessPath = join(pluginDir, 'scripts', '_harness.mjs');
-        const harnessMod = await import(harnessPath);
+        const harnessMod = await import(pathToFileURL(harnessPath).href);
         if (typeof harnessMod.parseMcpScanText !== 'function') {
             return {
                 name: 'MetaHarness integration (ADR-150)',
@@ -2580,6 +2580,67 @@ export const doctorCommand = {
         const verbose = ctx.flags.verbose;
         // Parser camelCases kebab-case flag names — read via `fixHandles`, not `['fix-handles']`.
         const fixHandles = ctx.flags.fixHandles;
+        // #2677: `--component memory` now runs the whole memory-health suite,
+        // not just the existence check. Values can be a single check or an
+        // array — expanded at execution time. Stuinfla's report showed the
+        // existence-only check reporting PASS on a 99.97%-empty and even a
+        // SQLite-malformed DB; the array here layers integrity → content →
+        // embedding coverage over the existing existence probe; check 6 then
+        // verifies that distilled episodes are actually Reflexion-retrievable and
+        // execution feedback carries a lesson.
+        const componentMap = {
+            'version': checkVersionFreshness,
+            'freshness': checkVersionFreshness,
+            'node': checkNodeVersion,
+            'npm': checkNpmVersion,
+            'claude': checkClaudeCode,
+            'browser': checkAgentBrowserVersion,
+            'config': checkConfigFile,
+            'stale-settings': checkStaleSettingsNpx, // #2448
+            'helpers': () => checkHelperIntegrity(), // #3565
+            'daemon': checkDaemonStatus,
+            get memory() {
+                return [
+                    checkMemoryDatabase, // existing: exists + statable (unchanged)
+                    checkMemoryIntegrity, // #2677 check 1: sql.js open + PRAGMA integrity_check
+                    ...nativeAgentDbChecks, // #3195: present AgentDB authority, checked independently
+                    checkMemoryPersistenceDriver, // #2968/#3321: read-only native capability probe
+                    checkMemoryPackageVersion, // #3392: loaded memory package satisfies the declared range
+                    checkMemoryContent, // #2677 check 2: memory_entries content coverage
+                    checkMemoryEmbeddingCoverage, // #2677 check 3: vector coverage on populated rows
+                    checkMemoryReflexionCoverage, // #2677 check 6: episodes are retrievable
+                    checkMemoryCritiqueCoverage, // #2677 check 6: feedback carries lessons
+                ];
+            },
+            'memory-package': checkMemoryPackageVersion, // #3392
+            'learning': checkLearningBridge, // #2545
+            'learning-bridge': checkLearningBridge, // #2545
+            'api': checkApiKeys,
+            'git': checkGit,
+            'mcp': checkMcpServers,
+            'mcp-overhead': checkMcpSchemaOverhead,
+            'aidefence': checkAIDefence, // #1807
+            'disk': checkDiskSpace,
+            'typescript': checkBuildTools,
+            'agentic-flow': checkAgenticFlow,
+            'encryption': checkEncryptionAtRest, // ADR-096 Phase 5
+            'federation': checkFederationBreaker, // ADR-097 Phase 4
+            'metaharness': [checkMetaharness, checkMetaharnessDeclaredPackages, checkMetaharnessIntegration], // ADR-150 — upstream + declared deps + ruflo-side
+            'metaharness-integration': checkMetaharnessIntegration, // iter 45 — ruflo-side
+            'funnel': checkFunnel, // ADR-305
+            // ADR-307 — deep-dive array, same pattern as 'memory' above: the cheap
+            // sponsored-consent check first, then binary/process/bind in the order
+            // a user would actually debug them (is it installed? running? exposed?).
+            'proxy': [checkProxySponsoredConsent, checkProxyBinary, checkProxyProcess, checkProxyBindAddress],
+            'auth': checkAuth, // ADR-306
+            'typesafe': checkTypesafeRouter, // opt-in @ruvector/typesafe task router
+            'mods': checkMods, // ADR-404 — ruflo as a Claude Code mod
+        };
+        if (component !== undefined && !Object.hasOwn(componentMap, component)) {
+            const message = `Unknown doctor component: ${JSON.stringify(component)}. Valid components: ${Object.keys(componentMap).join(', ')}`;
+            output.printError(message);
+            return { success: false, exitCode: 1, message };
+        }
         // Early-return short-circuit: `--fix-handles` is a targeted mitigation, not
         // part of the health-check flow. Runs, reports, exits.
         if (fixHandles) {
@@ -2684,62 +2745,8 @@ export const doctorCommand = {
             checkAuth, // ADR-306 — Cognitum identity (warn-only; never fails bare `ruflo doctor`)
             checkMods, // ADR-404 — Claude Code mod path (warn-only)
         ];
-        // #2677: `--component memory` now runs the whole memory-health suite,
-        // not just the existence check. Values can be a single check or an
-        // array — expanded at execution time. Stuinfla's report showed the
-        // existence-only check reporting PASS on a 99.97%-empty and even a
-        // SQLite-malformed DB; the array here layers integrity → content →
-        // embedding coverage over the existing existence probe; check 6 then
-        // verifies that distilled episodes are actually Reflexion-retrievable and
-        // execution feedback carries a lesson.
-        const componentMap = {
-            'version': checkVersionFreshness,
-            'freshness': checkVersionFreshness,
-            'node': checkNodeVersion,
-            'npm': checkNpmVersion,
-            'claude': checkClaudeCode,
-            'browser': checkAgentBrowserVersion,
-            'config': checkConfigFile,
-            'stale-settings': checkStaleSettingsNpx, // #2448
-            'helpers': () => checkHelperIntegrity(), // #3565
-            'daemon': checkDaemonStatus,
-            'memory': [
-                checkMemoryDatabase, // existing: exists + statable (unchanged)
-                checkMemoryIntegrity, // #2677 check 1: sql.js open + PRAGMA integrity_check
-                ...nativeAgentDbChecks, // #3195: present AgentDB authority, checked independently
-                checkMemoryPersistenceDriver, // #2968/#3321: read-only native capability probe
-                checkMemoryPackageVersion, // #3392: loaded memory package satisfies the declared range
-                checkMemoryContent, // #2677 check 2: memory_entries content coverage
-                checkMemoryEmbeddingCoverage, // #2677 check 3: vector coverage on populated rows
-                checkMemoryReflexionCoverage, // #2677 check 6: episodes are retrievable
-                checkMemoryCritiqueCoverage, // #2677 check 6: feedback carries lessons
-            ],
-            'memory-package': checkMemoryPackageVersion, // #3392
-            'learning': checkLearningBridge, // #2545
-            'learning-bridge': checkLearningBridge, // #2545
-            'api': checkApiKeys,
-            'git': checkGit,
-            'mcp': checkMcpServers,
-            'mcp-overhead': checkMcpSchemaOverhead,
-            'aidefence': checkAIDefence, // #1807
-            'disk': checkDiskSpace,
-            'typescript': checkBuildTools,
-            'agentic-flow': checkAgenticFlow,
-            'encryption': checkEncryptionAtRest, // ADR-096 Phase 5
-            'federation': checkFederationBreaker, // ADR-097 Phase 4
-            'metaharness': [checkMetaharness, checkMetaharnessDeclaredPackages, checkMetaharnessIntegration], // ADR-150 — upstream + declared deps + ruflo-side
-            'metaharness-integration': checkMetaharnessIntegration, // iter 45 — ruflo-side
-            'funnel': checkFunnel, // ADR-305
-            // ADR-307 — deep-dive array, same pattern as 'memory' above: the cheap
-            // sponsored-consent check first, then binary/process/bind in the order
-            // a user would actually debug them (is it installed? running? exposed?).
-            'proxy': [checkProxySponsoredConsent, checkProxyBinary, checkProxyProcess, checkProxyBindAddress],
-            'auth': checkAuth, // ADR-306
-            'typesafe': checkTypesafeRouter, // opt-in @ruvector/typesafe task router
-            'mods': checkMods, // ADR-404 — ruflo as a Claude Code mod
-        };
         let checksToRun = allChecks;
-        if (component && componentMap[component]) {
+        if (component !== undefined) {
             const entry = componentMap[component];
             checksToRun = Array.isArray(entry) ? entry : [entry];
         }

package/v3/@claude-flow/cli/dist/src/commands/memory-backup.d.ts

@@ -1,7 +1,7 @@
 /**
  * V3 CLI `memory backup` command.
  *
- * WAL-safe snapshot of the vector-memory DB (`.swarm/memory.db`) with rotation
+ * WAL-safe snapshots of the active CLI and AgentDB stores with rotation
  * and optional GCS offsite. Thin surface over ../services/memory-backup.js; the
  * daemon's nightly `backup` worker calls the same service.
  */

package/v3/@claude-flow/cli/dist/src/commands/memory-backup.js

@@ -1,39 +1,53 @@
 import { output } from '../output.js';
-import { backupMemoryDb, defaultMemoryDbPath } from '../services/memory-backup.js';
+import { backupMemoryDb, backupProjectMemoryDbs } from '../services/memory-backup.js';
 export const backupCommand = {
     name: 'backup',
-    description: 'Snapshot the vector-memory DB (.swarm/memory.db) — WAL-safe, rotated, optional GCS offsite',
+    description: 'Snapshot active project memory stores — WAL-safe, rotated, optional GCS offsite',
     options: [
-        { name: 'db', description: 'Source DB (default: .swarm/memory.db)', type: 'string' },
+        { name: 'db', description: 'Source DB (default: configured CLI and AgentDB stores)', type: 'string' },
         { name: 'dir', description: 'Destination dir (default: .swarm/backups)', type: 'string' },
         { name: 'keep', description: 'Rotation — keep the newest N snapshots (default 7)', type: 'number', default: 7 },
         { name: 'gcs', description: 'Also upload the snapshot to a gs://bucket/prefix (offsite)', type: 'string' },
         { name: 'verbose', short: 'v', description: 'Verbose logging', type: 'boolean' },
     ],
     examples: [
-        { command: 'claude-flow memory backup', description: 'Snapshot to .swarm/backups, keep last 7' },
+        { command: 'claude-flow memory backup', description: 'Snapshot active project stores, keep last 7' },
         { command: 'claude-flow memory backup --keep 30', description: 'Keep a month of nightly snapshots' },
         { command: 'claude-flow memory backup --gcs gs://my-bucket/ruflo-backups', description: 'Also upload offsite to GCS' },
     ],
     action: async (ctx) => {
-        const r = await backupMemoryDb({
-            dbPath: ctx.flags.db || defaultMemoryDbPath(ctx.cwd),
+        const options = {
             destDir: ctx.flags.dir,
             keep: typeof ctx.flags.keep === 'number' ? ctx.flags.keep : 7,
             gcs: ctx.flags.gcs,
             verbose: ctx.flags.verbose === true,
-        });
+        };
+        const explicitDb = ctx.flags.db;
+        let r;
+        let receipts;
+        if (explicitDb) {
+            r = await backupMemoryDb({ ...options, dbPath: explicitDb });
+            receipts = [r];
+        }
+        else {
+            const project = await backupProjectMemoryDbs(ctx.cwd, options);
+            r = project;
+            receipts = project.backups;
+        }
         if (!r.backedUp) {
             // no-db is a benign "nothing to back up yet"; anything else is a real skip.
             if (r.skipped === 'no-db') {
-                output.printWarning('No memory DB found to back up (.swarm/memory.db). Nothing to do.');
+                output.printWarning('No memory DB found to back up. Nothing to do.');
                 return { success: true, data: r };
             }
             output.printError(`Backup skipped: ${r.skipped}`);
             return { success: false, exitCode: 1, data: r };
         }
         output.writeln();
-        output.writeln(output.success(`Backed up → ${r.path}`));
+        for (const receipt of receipts) {
+            if (receipt.backedUp)
+                output.writeln(output.success(`Backed up → ${receipt.path}`));
+        }
         output.printList([
             `Size:      ${Math.round((r.sizeBytes ?? 0) / 1024)} KB`,
             `Rotated:   ${r.rotatedAway?.length ?? 0} old snapshot(s) removed`,

package/v3/@claude-flow/cli/dist/src/commands/memory.d.ts

@@ -1,7 +1,3 @@
-/**
- * V3 CLI Memory Command
- * Memory operations for AgentDB integration
- */
 import type { Command } from '../types.js';
 export declare const memoryCommand: Command;
 export default memoryCommand;

package/v3/@claude-flow/cli/dist/src/commands/memory.js

@@ -2,6 +2,7 @@
  * V3 CLI Memory Command
  * Memory operations for AgentDB integration
  */
+import { validateAppendConditions } from '../memory/append-conditions.js';
 import { output } from '../output.js';
 import { select, confirm, input } from '../prompt.js';
 import { callMCPTool, MCPClientError } from '../mcp-client.js';
@@ -110,6 +111,10 @@ const storeCommand = {
             type: 'boolean',
             default: false
         },
+        { name: 'embedding', type: 'boolean', description: 'Generate an embedding (default true; --no-embedding stores structured data only)' },
+        { name: 'append-conditions', type: 'string', description: 'JSON predicates checked atomically with a native append-only write' },
+        { name: 'require-native', type: 'boolean', description: 'Refuse whole-image and in-memory fallback memory writers' },
+        { name: 'append-only', type: 'boolean', description: 'Immutable insert; never update or resurrect an existing key' },
         {
             name: 'upsert',
             short: 'u',
@@ -233,7 +238,7 @@ const storeCommand = {
             size: Buffer.byteLength(value, 'utf8')
         };
         output.printInfo(`Storing in ${namespace}/${key}...`);
-        // Use direct sql.js storage with automatic embedding generation
+        // Use the canonical provider; embedding and native immutable append controls are explicit.
         try {
             const { storeEntry, resolveDbPath: _rdbStore } = await import('../memory/memory-initializer.js');
             const dbPath = _rdbStore(ctx.flags.path);
@@ -244,7 +249,10 @@ const storeCommand = {
                 key,
                 value,
                 namespace,
-                generateEmbeddingFlag: true, // Always generate embeddings for semantic search
+                generateEmbeddingFlag: ctx.flags.embedding !== false,
+                requireNative: ctx.flags.requireNative === true,
+                appendOnly: ctx.flags.appendOnly === true,
+                ...(typeof ctx.flags.appendConditions === 'string' ? { appendConditions: validateAppendConditions(JSON.parse(ctx.flags.appendConditions)) } : {}),
                 tags,
                 ttl,
                 upsert,

package/v3/@claude-flow/cli/dist/src/commands/plugins.js

@@ -86,7 +86,15 @@ const listCommand = {
                 output.printError(result.error || 'Unknown error');
                 return { success: false, exitCode: 1 };
             }
-            spinner.succeed(`Registry discovered: ${result.registry.totalPlugins} plugins available`);
+            if (result.demo) {
+                // The signed registry was unavailable or failed verification (see ruvnet/ruflo#3211):
+                // say so instead of reporting a successful discovery over the built-in list.
+                spinner.stop(output.warning(`Signed plugin registry unavailable or unverified; showing the built-in list ` +
+                    `(${result.registry.totalPlugins} plugins)`));
+            }
+            else {
+                spinner.succeed(`Registry discovered: ${result.registry.totalPlugins} plugins available`);
+            }
             output.writeln();
             // Build search options
             const searchOptions = {
@@ -165,6 +173,10 @@ const listCommand = {
                 output.writeln(output.dim('(ratings: cached — cloud unavailable)'));
             }
             output.writeln(output.dim(`Source: ${result.source}${result.fromCache ? ' (cached)' : ''}`));
+            if (result.demo) {
+                output.writeln(output.warning('Not from the signed registry: download counts, ratings and trust labels are the ' +
+                    "CLI's built-in defaults, not verified registry data."));
+            }
             if (result.cid) {
                 output.writeln(output.dim(`Registry CID: ${result.cid.slice(0, 30)}...`));
             }

package/v3/@claude-flow/cli/dist/src/commands/task.js

@@ -339,6 +339,18 @@ const statusCommand = {
                 includeLogs: ctx.flags.logs,
                 includeMetrics: true
             });
+            // The MCP tool answers an unknown id with status "not_found" and no other fields.
+            // Rendering that as a record printed "Task: undefined", "Invalid Date" and
+            // "undefined%" and exited 0, so scripts and agents took it as success.
+            if ((result.status) === 'not_found') {
+                if (ctx.flags.format === 'json') {
+                    output.printJson(result);
+                }
+                else {
+                    output.printError(`Task not found: ${taskId}`);
+                }
+                return { success: false, exitCode: 1 };
+            }
             if (ctx.flags.format === 'json') {
                 output.printJson(result);
                 return { success: true, data: result };

package/v3/@claude-flow/cli/dist/src/init/settings-generator.js

@@ -51,9 +51,9 @@ export function generateSettings(options) {
             pr: '🤖 Generated with [RuFlo](https://github.com/ruvnet/ruflo)',
         };
     }
-    // Note: Claude Code expects 'model' to be a string, not an object
-    // Additional ruflo-specific model preferences live in claudeFlow.modelPreferences below
-    settings.model = 'claude-sonnet-5';
+    // #3527: deliberately no settings.model. Project settings outrank the user's
+    // own settings, so a pin here would silently override the model the user chose.
+    // Ruflo's own routing preferences live in claudeFlow.modelPreferences below.
     // Add Agent Teams configuration (experimental feature)
     settings.env = {
         // Enable Claude Code Agent Teams for multi-agent coordination