claude-flow 3.59.5 → 3.59.7

package/.claude/proven-config.json

@@ -1,5 +1,5 @@
 {
-  "adoptedAt": 1792556117950,
+  "adoptedAt": 1792565467884,
   "championId": "sha256:6141a8ea990c5063b77e090ae8f37f9c539d8aa8f58dcceb30f3a82f97e57319",
   "manifest": {
     "schema": "ruflo.proven-config/v1",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-flow",
-  "version": "3.59.5",
+  "version": "3.59.7",
   "workspaces": [
     "v3/@claude-flow/codex",
     "v3/@claude-flow/mcp",

package/v3/@claude-flow/cli/catalog-manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 1,
   "generation": 7,
-  "generatedAt": "2026-10-21T04:15:49.428Z",
-  "gitSha": "5f5f5941",
+  "generatedAt": "2026-10-21T06:52:34.888Z",
+  "gitSha": "51d42418",
   "catalog": {
     "agents": 176,
     "tools": 432,

package/v3/@claude-flow/cli/dist/src/commands/memory.js

@@ -1627,10 +1627,12 @@ const exportCommand = {
             description: 'Include vector embeddings',
             type: 'boolean',
             default: true
-        }
+        },
+        DB_PATH_OPTION
     ],
     examples: [
         { command: 'claude-flow memory export -o ./backup.json', description: 'Export all to JSON' },
+        { command: 'claude-flow memory export -o ./agentdb.json --path .swarm/agentdb-memory.db', description: 'Export one specific store' },
         { command: 'claude-flow memory export -o ./data.csv -f csv', description: 'Export to CSV' }
     ],
     action: async (ctx) => {
@@ -1647,6 +1649,7 @@ const exportCommand = {
                 format,
                 namespace: ctx.flags.namespace,
                 includeVectors: ctx.flags.includeVectors ?? true,
+                dbPath: resolveDbPath(ctx.flags.path),
             });
             // memory_export reports failure as { error } rather than throwing; without
             // this check the command printed "Exported to undefined" and then crashed

package/v3/@claude-flow/cli/dist/src/mcp-tools/memory-tools.js

@@ -1587,13 +1587,20 @@ export const memoryTools = [
             properties: {
                 outputPath: { type: 'string', description: 'File path to write the JSON export to' },
                 format: { type: 'string', enum: ['json', 'csv'], description: 'Export format (csv falls back to json today)' },
+                dbPath: { type: 'string', description: 'Explicit memory DB to export (default: the AgentDB store plus the CLI sibling)' },
                 namespace: { type: 'string', description: 'Limit export to one namespace' },
                 includeVectors: { type: 'boolean', description: 'Include embedding vectors (advisory — not exported yet)' },
             },
             required: ['outputPath'],
         },
         handler: async (input) => {
-            await ensureInitialized();
+            const requestedDbPath = typeof input.dbPath === 'string' && input.dbPath.trim()
+                ? resolve(input.dbPath)
+                : undefined;
+            // An explicit file selection is a single-store read. Do not initialize or
+            // migrate the unrelated default store just to export a snapshot.
+            if (!requestedDbPath)
+                await ensureInitialized();
             const { listEntries } = await getMemoryFunctions();
             const outputPath = String(input.outputPath ?? '');
             if (!outputPath)
@@ -1619,7 +1626,7 @@ export const memoryTools = [
                 } while (out.length < total);
                 return { entries: out };
             };
-            const primary = await readStore();
+            const primary = await readStore(requestedDbPath);
             if ('error' in primary)
                 return { error: primary.error };
             // #4148: the default reader is the AgentDB bridge, but the CLI's own store
@@ -1627,7 +1634,9 @@ export const memoryTools = [
             // sees, so an export silently covered one store and reported success. Read
             // the CLI store too and merge, newest copy of a (namespace, key) winning.
             const warnings = [];
-            const stores = [{ store: 'default', entries: primary.entries.length }];
+            const stores = [
+                { store: requestedDbPath ?? 'default', entries: primary.entries.length },
+            ];
             const merged = new Map();
             const keep = (e) => {
                 const id = `${e.namespace}\u0000${e.key}`;
@@ -1636,15 +1645,19 @@ export const memoryTools = [
                     merged.set(id, e);
             };
             primary.entries.forEach(keep);
-            const cliStore = await resolveCliStorePath();
-            if (cliStore && existsSync(cliStore)) {
-                const secondary = await readStore(cliStore);
-                if ('error' in secondary) {
-                    warnings.push(`Could not read the CLI store ${cliStore} (${secondary.error}); the export covers the AgentDB store only.`);
-                }
-                else {
-                    stores.push({ store: cliStore, entries: secondary.entries.length });
-                    secondary.entries.forEach(keep);
+            // The implicit default export still merges the sibling CLI store; an
+            // explicit dbPath must cover exactly that file.
+            if (!requestedDbPath) {
+                const cliStore = await resolveCliStorePath();
+                if (cliStore && existsSync(cliStore)) {
+                    const secondary = await readStore(cliStore);
+                    if ('error' in secondary) {
+                        warnings.push(`Could not read the CLI store ${cliStore} (${secondary.error}); the export covers the AgentDB store only.`);
+                    }
+                    else {
+                        stores.push({ store: cliStore, entries: secondary.entries.length });
+                        secondary.entries.forEach(keep);
+                    }
                 }
             }
             const all = { entries: [...merged.values()] };

package/v3/@claude-flow/cli/dist/src/mcp-tools/session-tools.js

@@ -502,6 +502,8 @@ export const sessionTools = [
             else if (sortBy === 'size') {
                 sessions.sort((a, b) => (b.stats?.totalSize ?? 0) - (a.stats?.totalSize ?? 0));
             }
+            // Count every session before applying the limit so callers can tell when the list was truncated
+            const total = sessions.length;
             // Apply limit
             const limit = input.limit || 10;
             sessions = sessions.slice(0, limit);
@@ -522,7 +524,7 @@ export const sessionTools = [
                         projection.metrics = s.metrics;
                     return projection;
                 }),
-                total: sessions.length,
+                total,
                 limit,
             };
         },

package/v3/@claude-flow/cli/dist/src/services/policy-runtime.js

@@ -178,9 +178,13 @@ function reclaimDeadLock(lockPath) {
  */
 export async function acquireLock(lockPath) {
     const started = Date.now();
+    // O_NOFOLLOW closes the create-through-a-symlink path on platforms that
+    // support it; lstat below still rejects non-regular existing paths.
+    const createFlags = fsConstants.O_WRONLY | fsConstants.O_CREAT | fsConstants.O_EXCL
+        | (process.platform === 'win32' ? 0 : (fsConstants.O_NOFOLLOW ?? 0));
     while (Date.now() - started < LOCK_WAIT_MS) {
         try {
-            const fd = openSync(lockPath, 'wx', 0o600);
+            const fd = openSync(lockPath, createFlags, 0o600);
             const ownership = JSON.stringify({
                 pid: process.pid,
                 acquiredAt: Date.now(),
@@ -204,7 +208,30 @@ export async function acquireLock(lockPath) {
                 catch { /* already released */ }
             };
         }
-        catch {
+        catch (error) {
+            const code = error?.code;
+            // Only EEXIST is normal lock contention. Permission/path/IO failures
+            // must not masquerade as a five-second timeout on every MCP call.
+            // ELOOP is O_NOFOLLOW rejecting a symlink at the lock path.
+            if (code === 'ELOOP') {
+                throw new Error('policy-state-lock-error: lock path is not a regular file');
+            }
+            if (code !== 'EEXIST') {
+                throw new Error(`policy-state-lock-error: ${code ?? (error instanceof Error ? error.message : String(error))}`);
+            }
+            // EEXIST can also mean a directory/FIFO/symlink was planted at the lock
+            // path. Those are never a live lock: fail immediately instead of
+            // waiting, and never follow/remove the non-regular target.
+            try {
+                if (!lstatSync(lockPath).isFile()) {
+                    throw new Error('policy-state-lock-error: lock path is not a regular file');
+                }
+            }
+            catch (statError) {
+                if (statError instanceof Error && statError.message.startsWith('policy-state-lock-error:'))
+                    throw statError;
+                // The lock vanished between open() and lstat(); retry immediately.
+            }
             reclaimDeadLock(lockPath);
             await sleep(10);
         }

package/v3/@claude-flow/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@claude-flow/cli",
-  "version": "3.59.5",
+  "version": "3.59.7",
   "type": "module",
   "description": "Ruflo CLI - Enterprise AI agent orchestration with 60+ specialized agents, swarm coordination, MCP server, self-learning hooks, and vector memory for Claude Code",
   "main": "dist/src/index.js",