claude-flow 3.57.1 → 3.58.0

package/v3/@claude-flow/cli/dist/src/services/policy-runtime.js

@@ -7,17 +7,18 @@ import { AgenticPolicyEngine, POLICY_STATE_VERSION, createLegacyCompatibleState,
 import { isMcpCallerAuthEnabled, decodeTokenEnvelope, publicKeyFromHex, verifyInvocationToken, } from '@claude-flow/security/mcp-caller-identity';
 import { createHash, createHmac, randomBytes, randomUUID, timingSafeEqual } from 'node:crypto';
 import { execFileSync } from 'node:child_process';
-import { closeSync, constants as fsConstants, existsSync, fstatSync, fsyncSync, ftruncateSync, writeSync, lstatSync, mkdirSync, openSync, readFileSync, readSync, readlinkSync, realpathSync, renameSync, unlinkSync, writeFileSync, } from 'node:fs';
+import { closeSync, constants as fsConstants, existsSync, fstatSync, fsyncSync, ftruncateSync, writeSync, lstatSync, mkdirSync, openSync, readFileSync, readSync, readdirSync, readlinkSync, realpathSync, renameSync, unlinkSync, writeFileSync, } from 'node:fs';
 import { dirname, join, resolve } from 'node:path';
 import { hostname, userInfo } from 'node:os';
 import { syncPolicyProjection } from '../mods/policy-projection.js';
 import { ATOMIC_JSON_WRITER } from './policy-anchor-log.js';
 import { captureArchiveSnapshot, verifyFullPolicyLedger } from './policy-ledger-audit.js';
-import { assessAnchors, policyTrustRoot, recordAnchor } from './policy-ledger-anchor.js';
+import { ANCHOR_LOG_FILE, ANCHOR_MIRROR_FILE, assessAnchors, policyTrustRoot, recordAnchor } from './policy-ledger-anchor.js';
 const POLICY_DIR = join('.claude-flow', 'policy');
 const POLICY_FILE = 'state.json';
 const LOCK_FILE = 'state.lock';
 const RECEIPT_ARCHIVE_FILE = 'receipts.ledger.jsonl';
+const STATE_ANCHOR_FILE = 'state.anchor.json';
 const LOCK_WAIT_MS = 5_000;
 // #3164: without a bound, `state.receipts` grows forever and every
 // transaction's verify/clone/serialize cost is O(all receipts ever issued) —
@@ -362,11 +363,59 @@ async function writeJsonAtomic(file, value) {
         }
     }
 }
+// #3164: a writer killed between creating its temp file and renaming it
+// (SIGKILL from a caller's timeout, OOM) never reaches writeJsonAtomic's
+// cleanup, so a full-size copy of the file stays behind forever (~250 MB each
+// on a mature ledger). Every writer of these files holds the project's
+// state.lock, so while the lock is held no temp file for them can belong to a
+// write in progress. That invariant has known gaps: released versions before
+// the dead-owner fix take over any lock older than 30 s, even a live owner's
+// (a writer suspended mid-write, e.g. a sleeping laptop). So a temp is also
+// kept while its writer pid is alive on this host, and until it is
+// ORPHAN_TEMP_MIN_AGE_MS old; a skipped orphan is removed by a later call.
+const ORPHAN_TEMP_MIN_AGE_MS = 10 * 60_000;
+const ATOMIC_TEMP = /^(.+)\.(\d+)\.[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\.tmp$/;
+const PROJECT_ATOMIC_FILES = new Set([POLICY_FILE, ANCHOR_LOG_FILE]);
+const TRUST_ATOMIC_FILES = new Set([STATE_ANCHOR_FILE, ANCHOR_MIRROR_FILE]);
+function reapOrphanedTemps(dir, files) {
+    let names;
+    try {
+        names = readdirSync(dir);
+    }
+    catch {
+        return;
+    }
+    const now = Date.now();
+    for (const name of names) {
+        const match = ATOMIC_TEMP.exec(name);
+        if (!match || !files.has(match[1]))
+            continue;
+        const pid = Number(match[2]);
+        if (Number.isSafeInteger(pid) && pid > 0 && isPidAlive(pid))
+            continue;
+        const file = join(dir, name);
+        try {
+            const stat = lstatSync(file);
+            if (!stat.isFile() || now - stat.mtimeMs < ORPHAN_TEMP_MIN_AGE_MS)
+                continue;
+            unlinkSync(file);
+        }
+        catch { /* already gone, or not removable: never fail the caller */ }
+    }
+}
+/** Call only while holding the project's state.lock. */
+function reapOrphanedPolicyTemps(projectRoot) {
+    reapOrphanedTemps(paths(projectRoot).dir, PROJECT_ATOMIC_FILES);
+    try {
+        reapOrphanedTemps(dirname(trustPaths(projectRoot).anchor), TRUST_ATOMIC_FILES);
+    }
+    catch { /* no trust dir yet */ }
+}
 function trustPaths(projectRoot) {
     const trustRoot = policyTrustRoot();
     const projectId = createHash('sha256').update(realpathSync(projectRoot)).digest('hex');
     const dir = join(trustRoot, projectId);
-    return { key: join(dir, 'anchor.key'), anchor: join(dir, 'state.anchor.json') };
+    return { key: join(dir, 'anchor.key'), anchor: join(dir, STATE_ANCHOR_FILE) };
 }
 function trustKey(projectRoot, create) {
     const { key } = trustPaths(projectRoot);
@@ -531,6 +580,7 @@ export async function withPolicyTransaction(projectRoot, operation, options = {}
     mkdirDurably(target.dir);
     const release = await acquireLock(target.lock);
     try {
+        reapOrphanedPolicyTemps(projectRoot);
         const loaded = loadPolicyState(projectRoot);
         const engine = AgenticPolicyEngine.fromState(loaded, {
             signingKey: process.env.CLAUDE_FLOW_POLICY_SIGNING_KEY,
@@ -691,6 +741,7 @@ export async function verifyPolicyLedger(projectRoot = process.cwd(), options =
     // strings, receipt arrays or maps. The descriptor pins path replacements.
     const release = await acquireLock(target.lock);
     try {
+        reapOrphanedPolicyTemps(projectRoot);
         const engine = AgenticPolicyEngine.fromState(loadPolicyState(projectRoot), engineOptions);
         const outcome = reconcileLedger(projectRoot, engine, options);
         if (outcome.persist) {

package/v3/@claude-flow/cli/dist/src/services/worker-daemon.js

@@ -1699,6 +1699,10 @@ export class WorkerDaemon extends EventEmitter {
                 rotatedAway: r.rotatedAway?.length ?? 0,
                 gcsUri: r.gcsUri,
                 skipped: r.skipped,
+                // Which method actually completed (per-store detail is in `backups`);
+                // migration tooling should require 'native-online-backup', not a
+                // blanket `backedUp: true` — see #4287.
+                method: r.method,
             };
         }
         catch (error) {

package/v3/@claude-flow/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@claude-flow/cli",
-  "version": "3.57.1",
+  "version": "3.58.0",
   "type": "module",
   "description": "Ruflo CLI - Enterprise AI agent orchestration with 60+ specialized agents, swarm coordination, MCP server, self-learning hooks, and vector memory for Claude Code",
   "main": "dist/src/index.js",
@@ -48,6 +48,7 @@
       "import": "./dist/src/index.js"
     },
     "./dist/*": "./dist/*",
+    "./package.json": "./package.json",
     "./ruvector": {
       "types": "./dist/src/ruvector/index.d.ts",
       "import": "./dist/src/ruvector/index.js"
@@ -98,7 +99,7 @@
     "vitest": "^4.1.0"
   },
   "dependencies": {
-    "@claude-flow/cli-core": "3.7.4",
+    "@claude-flow/cli-core": "3.7.5",
     "@claude-flow/codex": "3.0.5",
     "@claude-flow/mcp": "3.1.1",
     "@claude-flow/neural": "3.0.0",
@@ -125,11 +126,11 @@
     "ws": "^8.21.0",
     "yaml": "^2.8.0",
     "zod": "^3.22.0",
-    "@claude-flow/memory": "3.0.5"
+    "@claude-flow/memory": "3.0.6"
   },
   "optionalDependencies": {
     "@agntcy/slim-bindings": "2.0.0-alpha.5",
-    "@claude-flow/memory": "3.0.5",
+    "@claude-flow/memory": "3.0.6",
     "@metaharness/darwin": "~0.12.0",
     "@metaharness/flywheel": "~0.1.10",
     "@metaharness/radio": "~0.1.0",