claude-flow 3.59.6 → 3.59.7

package/.claude/proven-config.json

@@ -1,5 +1,5 @@
 {
-  "adoptedAt": 1792558322684,
+  "adoptedAt": 1792565467884,
   "championId": "sha256:6141a8ea990c5063b77e090ae8f37f9c539d8aa8f58dcceb30f3a82f97e57319",
   "manifest": {
     "schema": "ruflo.proven-config/v1",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-flow",
-  "version": "3.59.6",
+  "version": "3.59.7",
   "workspaces": [
     "v3/@claude-flow/codex",
     "v3/@claude-flow/mcp",

package/v3/@claude-flow/cli/catalog-manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 1,
   "generation": 7,
-  "generatedAt": "2026-10-21T04:52:34.678Z",
-  "gitSha": "a00b2855",
+  "generatedAt": "2026-10-21T06:52:34.888Z",
+  "gitSha": "51d42418",
   "catalog": {
     "agents": 176,
     "tools": 432,

package/v3/@claude-flow/cli/dist/src/mcp-tools/session-tools.js

@@ -502,6 +502,8 @@ export const sessionTools = [
             else if (sortBy === 'size') {
                 sessions.sort((a, b) => (b.stats?.totalSize ?? 0) - (a.stats?.totalSize ?? 0));
             }
+            // Count every session before applying the limit so callers can tell when the list was truncated
+            const total = sessions.length;
             // Apply limit
             const limit = input.limit || 10;
             sessions = sessions.slice(0, limit);
@@ -522,7 +524,7 @@ export const sessionTools = [
                         projection.metrics = s.metrics;
                     return projection;
                 }),
-                total: sessions.length,
+                total,
                 limit,
             };
         },

package/v3/@claude-flow/cli/dist/src/services/policy-runtime.js

@@ -178,9 +178,13 @@ function reclaimDeadLock(lockPath) {
  */
 export async function acquireLock(lockPath) {
     const started = Date.now();
+    // O_NOFOLLOW closes the create-through-a-symlink path on platforms that
+    // support it; lstat below still rejects non-regular existing paths.
+    const createFlags = fsConstants.O_WRONLY | fsConstants.O_CREAT | fsConstants.O_EXCL
+        | (process.platform === 'win32' ? 0 : (fsConstants.O_NOFOLLOW ?? 0));
     while (Date.now() - started < LOCK_WAIT_MS) {
         try {
-            const fd = openSync(lockPath, 'wx', 0o600);
+            const fd = openSync(lockPath, createFlags, 0o600);
             const ownership = JSON.stringify({
                 pid: process.pid,
                 acquiredAt: Date.now(),
@@ -204,7 +208,30 @@ export async function acquireLock(lockPath) {
                 catch { /* already released */ }
             };
         }
-        catch {
+        catch (error) {
+            const code = error?.code;
+            // Only EEXIST is normal lock contention. Permission/path/IO failures
+            // must not masquerade as a five-second timeout on every MCP call.
+            // ELOOP is O_NOFOLLOW rejecting a symlink at the lock path.
+            if (code === 'ELOOP') {
+                throw new Error('policy-state-lock-error: lock path is not a regular file');
+            }
+            if (code !== 'EEXIST') {
+                throw new Error(`policy-state-lock-error: ${code ?? (error instanceof Error ? error.message : String(error))}`);
+            }
+            // EEXIST can also mean a directory/FIFO/symlink was planted at the lock
+            // path. Those are never a live lock: fail immediately instead of
+            // waiting, and never follow/remove the non-regular target.
+            try {
+                if (!lstatSync(lockPath).isFile()) {
+                    throw new Error('policy-state-lock-error: lock path is not a regular file');
+                }
+            }
+            catch (statError) {
+                if (statError instanceof Error && statError.message.startsWith('policy-state-lock-error:'))
+                    throw statError;
+                // The lock vanished between open() and lstat(); retry immediately.
+            }
             reclaimDeadLock(lockPath);
             await sleep(10);
         }

package/v3/@claude-flow/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@claude-flow/cli",
-  "version": "3.59.6",
+  "version": "3.59.7",
   "type": "module",
   "description": "Ruflo CLI - Enterprise AI agent orchestration with 60+ specialized agents, swarm coordination, MCP server, self-learning hooks, and vector memory for Claude Code",
   "main": "dist/src/index.js",