claude-flow 3.6.12 → 3.6.13

package/.claude-plugin/marketplace.json

@@ -105,6 +105,66 @@
       "name": "ruflo-goals",
       "source": "./plugins/ruflo-goals",
       "description": "Long-horizon goal planning, deep research orchestration, and adaptive replanning using GOAP"
+    },
+    {
+      "name": "ruflo-adr",
+      "source": "./plugins/ruflo-adr",
+      "description": "ADR lifecycle management — create, index, supersede, and link Architecture Decision Records to code"
+    },
+    {
+      "name": "ruflo-cost-tracker",
+      "source": "./plugins/ruflo-cost-tracker",
+      "description": "Token usage tracking, model cost attribution per agent, budget alerts, and optimization recommendations"
+    },
+    {
+      "name": "ruflo-ddd",
+      "source": "./plugins/ruflo-ddd",
+      "description": "Domain-Driven Design scaffolding — bounded contexts, aggregate roots, domain events, and anti-corruption layers"
+    },
+    {
+      "name": "ruflo-federation",
+      "source": "./plugins/ruflo-federation",
+      "description": "Cross-installation agent federation with zero-trust security, PII-gated data flow, and compliance-grade audit trails"
+    },
+    {
+      "name": "ruflo-iot-cognitum",
+      "source": "./plugins/ruflo-iot-cognitum",
+      "description": "IoT device lifecycle, telemetry anomaly detection, fleet management, and witness chain verification for Cognitum Seed hardware"
+    },
+    {
+      "name": "ruflo-knowledge-graph",
+      "source": "./plugins/ruflo-knowledge-graph",
+      "description": "Knowledge graph construction — entity extraction, relation mapping, and pathfinder graph traversal"
+    },
+    {
+      "name": "ruflo-market-data",
+      "source": "./plugins/ruflo-market-data",
+      "description": "Market data ingestion — feed normalization, OHLCV vectorization, and HNSW-indexed pattern matching"
+    },
+    {
+      "name": "ruflo-migrations",
+      "source": "./plugins/ruflo-migrations",
+      "description": "Schema migration management — generate, validate, dry-run, and rollback database migrations"
+    },
+    {
+      "name": "ruflo-neural-trader",
+      "source": "./plugins/ruflo-neural-trader",
+      "description": "Neural trading strategies — self-learning LSTM/Transformer/N-BEATS models with Rust/NAPI backtesting"
+    },
+    {
+      "name": "ruflo-observability",
+      "source": "./plugins/ruflo-observability",
+      "description": "Structured logging, distributed tracing, and metrics — correlate agent swarm activity with application telemetry"
+    },
+    {
+      "name": "ruflo-ruvector",
+      "source": "./plugins/ruflo-ruvector",
+      "description": "Self-learning vector database — HNSW, FlashAttention-3, Graph RAG, hybrid search, DiskANN, and Brain AGI"
+    },
+    {
+      "name": "ruflo-sparc",
+      "source": "./plugins/ruflo-sparc",
+      "description": "SPARC methodology — Specification, Pseudocode, Architecture, Refinement, Completion phases with quality gates"
     }
   ]
 }

package/README.md

@@ -1,6 +1,10 @@
 <div align="center">
 
-![Ruflo Banner](ruflo/assets/ruflo-small.jpeg)
+[![Ruflo Banner](ruflo/assets/ruflo-small.jpeg)](https://flo.ruv.io/)
+
+[![✨ Try the UI Beta — flo.ruv.io](https://img.shields.io/badge/✨_Try_the_UI_Beta-flo.ruv.io-6366f1?style=for-the-badge&logoColor=white&logo=svelte)](https://flo.ruv.io/)
+[![🎯 Goal Planner — goal.ruv.io](https://img.shields.io/badge/🎯_Goal_Planner-goal.ruv.io-8b5cf6?style=for-the-badge&logoColor=white&logo=react)](https://goal.ruv.io/)
+[![🤖 Live Agents — goal.ruv.io/agents](https://img.shields.io/badge/🤖_Live_Agents-goal.ruv.io%2Fagents-10b981?style=for-the-badge&logoColor=white&logo=react)](https://goal.ruv.io/agents)
 
 [![Star on GitHub](https://img.shields.io/github/stars/ruvnet/claude-flow?style=for-the-badge&logo=github&color=gold)](https://github.com/ruvnet/claude-flow)
 [![MIT License](https://img.shields.io/badge/License-MIT-yellow?style=for-the-badge)](https://opensource.org/licenses/MIT)
@@ -16,7 +20,8 @@ Orchestrate 100+ specialized AI agents across machines, teams, and trust boundar
 
 ### Why Ruflo?
 
-> Claude Flow is now Ruflo — named by Ruv, who loves Rust, flow states, and building things that feel inevitable. The "Ru" is the Ruv. The "flo" is the flow. Underneath, WASM kernels written in Rust power the policy engine, embeddings, and proof system. 
+> Claude Flow is now Ruflo — named by rUv, who loves Rust, flow states, and building things that feel inevitable. The "Ru" is the Ruv. The "flo" is the flow. Underneath, WASM kernels written in Rust power the policy engine, embeddings, and proof system. 
+
 
 ### What Ruflo Does
 
@@ -170,7 +175,56 @@ claude mcp add ruflo -- npx -y @claude-flow/cli@latest
 | 🧩 **Plugin Marketplace** | 32 native Claude Code plugins + 21 npm plugins |
 | 🔌 **Multi-Provider** | Claude, GPT, Gemini, Cohere, Ollama with smart routing |
 | 🛡️ **Security** | AIDefence, input validation, CVE remediation, path traversal prevention |
-| 🌐 **Agent Federation** | Cross-installation agent collaboration with zero-trust security 
+| 🌐 **Agent Federation** | Cross-installation agent collaboration with zero-trust security |
+| 💬 **[Web UI Beta](https://flo.ruv.io/)** | Multi-model chat at flo.ruv.io with parallel MCP tool calling and an in-browser WASM tool gallery |
+| 🎯 **[RuFlo Research](https://goal.ruv.io/)** | GOAP A\* planner at goal.ruv.io — plain-English goals → executable agent plans, with a live agent dashboard at [/agents](https://goal.ruv.io/agents) |
+
+<p align="center">
+  <a href="https://flo.ruv.io/">
+    <img src="v3/docs/assets/ruVocal.png" alt="RuFlo Web UI executing parallel MCP tool calls at flo.ruv.io — ruflo__memory_store and ruflo__memory_search firing in a single model turn with the 'Step 1 — 2 tools completed' parallel-execution indicator, thinking process panel visible, Qwen 3.6 Max as the active model. Multi-agent AI chat with Model Context Protocol (MCP) tool calling, persistent vector memory via AgentDB + HNSW, swarm coordination, and 6 frontier models including Claude Sonnet 4.6, Gemini 2.5 Pro, and OpenAI through OpenRouter." width="100%" />
+  </a>
+</p>
+
+### Web UI (Beta) — self-hostable, hosted demo at [flo.ruv.io](https://flo.ruv.io/)
+
+**RuFlo's web UI is a multi-model AI chat with built-in Model Context Protocol (MCP) tool calling.** Talk to Qwen, Claude, Gemini, or OpenAI while RuFlo invokes the same MCP tools the CLI uses — agent orchestration, persistent memory, swarm coordination, code review, GitHub ops — directly from chat. No install, no API key needed to try it.
+
+| | What it is | Why it matters |
+|---|------------|----------------|
+| 🧠 | **Any model, local or remote** | 6 curated frontier models out-of-the-box — Qwen 3.6 Max (default), Claude Sonnet 4.6, Claude Haiku 4.5, Gemini 2.5 Pro, Gemini 2.5 Flash, OpenAI — via OpenRouter. Add your own: any OpenAI-compatible endpoint (vLLM, Ollama, LM Studio, Together, Groq, self-hosted). |
+| 🦾 | **ruvLLM self-learning AI** | Native support for [ruvLLM](https://github.com/ruvnet/RuVector/tree/main/examples/ruvLLM) (lives in `ruvnet/RuVector/examples/ruvLLM`) — RuFlo's self-improving local model layer. Routes to MicroLoRA adapters, learns from your trajectories via SONA, and stays on your machine. Pair with the cloud models or run fully offline. |
+| 🛠️ | **~210 tools, ready to call** | 5 server groups (Core, Intelligence, Agents, Memory, DevTools) plus an 18-tool gallery that runs entirely in your browser — works offline. |
+| 🔌 | **Bring your own MCP servers** | Click the **MCP (n)** pill in the chat input → *Add Server* and paste any MCP endpoint (HTTP, SSE, or stdio). Your tools join RuFlo's native ones in the same parallel-execution flow. Run a local MCP server on `localhost:3000` and it just works. |
+| ⚡ | **Tools run in parallel** | One model response can fire 4–6+ tools at the same time. The UI shows them as cards with a *Step 1 — 2 tools completed* badge so you can see exactly what ran. |
+| 💾 | **Memory that sticks** | Say *"remember my favorite color is indigo"* and ask weeks later — RuFlo recalls it. Backed by AgentDB + HNSW vector search (≥150× faster than brute force). |
+| 📘 | **Built-in capabilities tour** | Click the question-mark icon in the sidebar — a "RuFlo Capabilities" modal opens with the full tool list, model strengths, architecture, and keyboard shortcuts. |
+| 🏠 | **Self-hostable** | Web UI is shipped as Docker (`ruflo/src/ruvocal/Dockerfile`) with embedded Mongo. Deploy to your own Cloud Run / Fly / Kubernetes / docker-compose. The hosted [flo.ruv.io](https://flo.ruv.io/) demo is one option; running your own is fully supported. |
+| 🚀 | **Zero install to try** | Open the hosted URL, pick a model, type a question. That's the whole onboarding. |
+
+**Try the hosted demo:** [https://flo.ruv.io/](https://flo.ruv.io/) — no account, no API key. **Run your own:** the source lives in [`ruflo/src/ruvocal/`](ruflo/src/ruvocal/) with a multi-stage Dockerfile (`INCLUDE_DB=true` builds in MongoDB) and a `cloudbuild.yaml` for Google Cloud Run. See [ADR-033](ruflo/docs/adr/ADR-033-RUVOCAL-WASM-MCP-INTEGRATION.md) for the architecture and [issue #1689](https://github.com/ruvnet/ruflo/issues/1689) for the roadmap.
+
+<p align="center">
+  <a href="https://goal.ruv.io/agents">
+    <img src="v3/docs/assets/goal.png" alt="goal.ruv.io/agents — RuFlo Goal-Oriented Action Planning (GOAP) UI for autonomous AI agents. Visual goal decomposition, A* search through state spaces, multi-agent task assignment, and live agent telemetry." width="100%" />
+  </a>
+</p>
+
+### Goal Planner UI — autonomous agents at [goal.ruv.io](https://goal.ruv.io/)
+
+**Turn high-level goals into executable agent plans.** `goal.ruv.io` is RuFlo's hosted Goal-Oriented Action Planning (GOAP) front-end — describe an outcome in plain English and watch RuFlo decompose it into preconditions, actions, and an A* path through state space, then dispatch the work to live agents at [`/agents`](https://goal.ruv.io/agents).
+
+| | What it is | Why it matters |
+|---|------------|----------------|
+| 🎯 | **Plain-English goals** | Type *"ship the auth refactor with tests and a PR"* — RuFlo extracts the success criteria, the constraints, and the implicit preconditions. No JSON, no DSL. |
+| 🧭 | **GOAP A\* planner** | Classic gaming-AI planning ported to software work: state-space search through actions with preconditions/effects to find the shortest viable path. Replans on the fly when state changes. |
+| 🤖 | **Live agent dashboard** | [goal.ruv.io/agents](https://goal.ruv.io/agents) shows every spawned agent — role, current step, memory namespace, token budget, status. Click in to inspect trajectories, kill runaway workers, or reassign. |
+| 🌳 | **Visual plan tree** | Goals render as collapsible action trees with progress, blocked branches, and rollbacks highlighted. See *exactly* why an agent picked a path — no opaque chain-of-thought. |
+| ♻️ | **Adaptive replanning** | When an action fails or new info arrives, the planner re-runs A\* from the current state instead of restarting. Failures become learning, not loops. |
+| 🧠 | **Shared memory + SONA** | Plans, trajectories, and outcomes flow into AgentDB. Future plans retrieve past solutions via HNSW — the planner gets smarter with every run. |
+| 🔗 | **Wired to MCP tools** | Every action node maps to a tool call (RuFlo's ~210 MCP tools, your custom servers, or shell). The planner schedules them in parallel where the dependency graph allows. |
+| 🚀 | **Zero install to try** | Open [goal.ruv.io](https://goal.ruv.io/), describe a goal, watch it run. Source lives in [`v3/goal_ui/`](v3/goal_ui/) — Vite + Supabase, self-hostable. |
+
+**Try it:** [https://goal.ruv.io/](https://goal.ruv.io/) for goals · [https://goal.ruv.io/agents](https://goal.ruv.io/agents) for live agents. **Run your own:** clone the `goal` branch and `cd v3/goal_ui && npm install && npm run dev`.
 
 ### Agent Federation — Slack for Agents
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-flow",
-  "version": "3.6.12",
+  "version": "3.6.13",
   "description": "Ruflo - Enterprise AI agent orchestration for Claude Code. Deploy 60+ specialized agents in coordinated swarms with self-learning, fault-tolerant consensus, vector memory, and MCP integration",
   "main": "dist/index.js",
   "type": "module",
@@ -69,7 +69,8 @@
     "agentic-flow": "^2.0.7"
   },
   "overrides": {
-    "hono": ">=4.11.4"
+    "hono": ">=4.11.4",
+    "@ruvector/rvf-wasm": "0.1.5"
   },
   "devDependencies": {
     "@openai/codex": "^0.98.0",

package/v3/@claude-flow/cli/README.md

@@ -1,6 +1,10 @@
 <div align="center">
 
-![Ruflo Banner](ruflo/assets/ruflo-small.jpeg)
+[![Ruflo Banner](ruflo/assets/ruflo-small.jpeg)](https://flo.ruv.io/)
+
+[![✨ Try the UI Beta — flo.ruv.io](https://img.shields.io/badge/✨_Try_the_UI_Beta-flo.ruv.io-6366f1?style=for-the-badge&logoColor=white&logo=svelte)](https://flo.ruv.io/)
+[![🎯 Goal Planner — goal.ruv.io](https://img.shields.io/badge/🎯_Goal_Planner-goal.ruv.io-8b5cf6?style=for-the-badge&logoColor=white&logo=react)](https://goal.ruv.io/)
+[![🤖 Live Agents — goal.ruv.io/agents](https://img.shields.io/badge/🤖_Live_Agents-goal.ruv.io%2Fagents-10b981?style=for-the-badge&logoColor=white&logo=react)](https://goal.ruv.io/agents)
 
 [![Star on GitHub](https://img.shields.io/github/stars/ruvnet/claude-flow?style=for-the-badge&logo=github&color=gold)](https://github.com/ruvnet/claude-flow)
 [![MIT License](https://img.shields.io/badge/License-MIT-yellow?style=for-the-badge)](https://opensource.org/licenses/MIT)
@@ -16,7 +20,8 @@ Orchestrate 100+ specialized AI agents across machines, teams, and trust boundar
 
 ### Why Ruflo?
 
-> Claude Flow is now Ruflo — named by Ruv, who loves Rust, flow states, and building things that feel inevitable. The "Ru" is the Ruv. The "flo" is the flow. Underneath, WASM kernels written in Rust power the policy engine, embeddings, and proof system. 
+> Claude Flow is now Ruflo — named by rUv, who loves Rust, flow states, and building things that feel inevitable. The "Ru" is the Ruv. The "flo" is the flow. Underneath, WASM kernels written in Rust power the policy engine, embeddings, and proof system. 
+
 
 ### What Ruflo Does
 
@@ -170,7 +175,56 @@ claude mcp add ruflo -- npx -y @claude-flow/cli@latest
 | 🧩 **Plugin Marketplace** | 32 native Claude Code plugins + 21 npm plugins |
 | 🔌 **Multi-Provider** | Claude, GPT, Gemini, Cohere, Ollama with smart routing |
 | 🛡️ **Security** | AIDefence, input validation, CVE remediation, path traversal prevention |
-| 🌐 **Agent Federation** | Cross-installation agent collaboration with zero-trust security 
+| 🌐 **Agent Federation** | Cross-installation agent collaboration with zero-trust security |
+| 💬 **[Web UI Beta](https://flo.ruv.io/)** | Multi-model chat at flo.ruv.io with parallel MCP tool calling and an in-browser WASM tool gallery |
+| 🎯 **[RuFlo Research](https://goal.ruv.io/)** | GOAP A\* planner at goal.ruv.io — plain-English goals → executable agent plans, with a live agent dashboard at [/agents](https://goal.ruv.io/agents) |
+
+<p align="center">
+  <a href="https://flo.ruv.io/">
+    <img src="v3/docs/assets/ruVocal.png" alt="RuFlo Web UI executing parallel MCP tool calls at flo.ruv.io — ruflo__memory_store and ruflo__memory_search firing in a single model turn with the 'Step 1 — 2 tools completed' parallel-execution indicator, thinking process panel visible, Qwen 3.6 Max as the active model. Multi-agent AI chat with Model Context Protocol (MCP) tool calling, persistent vector memory via AgentDB + HNSW, swarm coordination, and 6 frontier models including Claude Sonnet 4.6, Gemini 2.5 Pro, and OpenAI through OpenRouter." width="100%" />
+  </a>
+</p>
+
+### Web UI (Beta) — self-hostable, hosted demo at [flo.ruv.io](https://flo.ruv.io/)
+
+**RuFlo's web UI is a multi-model AI chat with built-in Model Context Protocol (MCP) tool calling.** Talk to Qwen, Claude, Gemini, or OpenAI while RuFlo invokes the same MCP tools the CLI uses — agent orchestration, persistent memory, swarm coordination, code review, GitHub ops — directly from chat. No install, no API key needed to try it.
+
+| | What it is | Why it matters |
+|---|------------|----------------|
+| 🧠 | **Any model, local or remote** | 6 curated frontier models out-of-the-box — Qwen 3.6 Max (default), Claude Sonnet 4.6, Claude Haiku 4.5, Gemini 2.5 Pro, Gemini 2.5 Flash, OpenAI — via OpenRouter. Add your own: any OpenAI-compatible endpoint (vLLM, Ollama, LM Studio, Together, Groq, self-hosted). |
+| 🦾 | **ruvLLM self-learning AI** | Native support for [ruvLLM](https://github.com/ruvnet/RuVector/tree/main/examples/ruvLLM) (lives in `ruvnet/RuVector/examples/ruvLLM`) — RuFlo's self-improving local model layer. Routes to MicroLoRA adapters, learns from your trajectories via SONA, and stays on your machine. Pair with the cloud models or run fully offline. |
+| 🛠️ | **~210 tools, ready to call** | 5 server groups (Core, Intelligence, Agents, Memory, DevTools) plus an 18-tool gallery that runs entirely in your browser — works offline. |
+| 🔌 | **Bring your own MCP servers** | Click the **MCP (n)** pill in the chat input → *Add Server* and paste any MCP endpoint (HTTP, SSE, or stdio). Your tools join RuFlo's native ones in the same parallel-execution flow. Run a local MCP server on `localhost:3000` and it just works. |
+| ⚡ | **Tools run in parallel** | One model response can fire 4–6+ tools at the same time. The UI shows them as cards with a *Step 1 — 2 tools completed* badge so you can see exactly what ran. |
+| 💾 | **Memory that sticks** | Say *"remember my favorite color is indigo"* and ask weeks later — RuFlo recalls it. Backed by AgentDB + HNSW vector search (≥150× faster than brute force). |
+| 📘 | **Built-in capabilities tour** | Click the question-mark icon in the sidebar — a "RuFlo Capabilities" modal opens with the full tool list, model strengths, architecture, and keyboard shortcuts. |
+| 🏠 | **Self-hostable** | Web UI is shipped as Docker (`ruflo/src/ruvocal/Dockerfile`) with embedded Mongo. Deploy to your own Cloud Run / Fly / Kubernetes / docker-compose. The hosted [flo.ruv.io](https://flo.ruv.io/) demo is one option; running your own is fully supported. |
+| 🚀 | **Zero install to try** | Open the hosted URL, pick a model, type a question. That's the whole onboarding. |
+
+**Try the hosted demo:** [https://flo.ruv.io/](https://flo.ruv.io/) — no account, no API key. **Run your own:** the source lives in [`ruflo/src/ruvocal/`](ruflo/src/ruvocal/) with a multi-stage Dockerfile (`INCLUDE_DB=true` builds in MongoDB) and a `cloudbuild.yaml` for Google Cloud Run. See [ADR-033](ruflo/docs/adr/ADR-033-RUVOCAL-WASM-MCP-INTEGRATION.md) for the architecture and [issue #1689](https://github.com/ruvnet/ruflo/issues/1689) for the roadmap.
+
+<p align="center">
+  <a href="https://goal.ruv.io/agents">
+    <img src="v3/docs/assets/goal.png" alt="goal.ruv.io/agents — RuFlo Goal-Oriented Action Planning (GOAP) UI for autonomous AI agents. Visual goal decomposition, A* search through state spaces, multi-agent task assignment, and live agent telemetry." width="100%" />
+  </a>
+</p>
+
+### Goal Planner UI — autonomous agents at [goal.ruv.io](https://goal.ruv.io/)
+
+**Turn high-level goals into executable agent plans.** `goal.ruv.io` is RuFlo's hosted Goal-Oriented Action Planning (GOAP) front-end — describe an outcome in plain English and watch RuFlo decompose it into preconditions, actions, and an A* path through state space, then dispatch the work to live agents at [`/agents`](https://goal.ruv.io/agents).
+
+| | What it is | Why it matters |
+|---|------------|----------------|
+| 🎯 | **Plain-English goals** | Type *"ship the auth refactor with tests and a PR"* — RuFlo extracts the success criteria, the constraints, and the implicit preconditions. No JSON, no DSL. |
+| 🧭 | **GOAP A\* planner** | Classic gaming-AI planning ported to software work: state-space search through actions with preconditions/effects to find the shortest viable path. Replans on the fly when state changes. |
+| 🤖 | **Live agent dashboard** | [goal.ruv.io/agents](https://goal.ruv.io/agents) shows every spawned agent — role, current step, memory namespace, token budget, status. Click in to inspect trajectories, kill runaway workers, or reassign. |
+| 🌳 | **Visual plan tree** | Goals render as collapsible action trees with progress, blocked branches, and rollbacks highlighted. See *exactly* why an agent picked a path — no opaque chain-of-thought. |
+| ♻️ | **Adaptive replanning** | When an action fails or new info arrives, the planner re-runs A\* from the current state instead of restarting. Failures become learning, not loops. |
+| 🧠 | **Shared memory + SONA** | Plans, trajectories, and outcomes flow into AgentDB. Future plans retrieve past solutions via HNSW — the planner gets smarter with every run. |
+| 🔗 | **Wired to MCP tools** | Every action node maps to a tool call (RuFlo's ~210 MCP tools, your custom servers, or shell). The planner schedules them in parallel where the dependency graph allows. |
+| 🚀 | **Zero install to try** | Open [goal.ruv.io](https://goal.ruv.io/), describe a goal, watch it run. Source lives in [`v3/goal_ui/`](v3/goal_ui/) — Vite + Supabase, self-hostable. |
+
+**Try it:** [https://goal.ruv.io/](https://goal.ruv.io/) for goals · [https://goal.ruv.io/agents](https://goal.ruv.io/agents) for live agents. **Run your own:** clone the `goal` branch and `cd v3/goal_ui && npm install && npm run dev`.
 
 ### Agent Federation — Slack for Agents
 

package/v3/@claude-flow/cli/dist/src/commands/daemon.js

@@ -4,7 +4,7 @@
  */
 import { output } from '../output.js';
 import { getDaemon, startDaemon, stopDaemon } from '../services/worker-daemon.js';
-import { spawn } from 'child_process';
+import { fork } from 'child_process';
 import { fileURLToPath } from 'url';
 import { dirname, join, resolve } from 'path';
 import * as fs from 'fs';
@@ -224,39 +224,43 @@ async function startBackgroundDaemon(projectRoot, quiet, maxCpuLoad, minFreeMemo
         output.printError(`CLI not found at: ${cliPath}`);
         return { success: false, exitCode: 1 };
     }
-    // Platform-aware spawn flags
+    // Platform-aware spawn flags. We use child_process.fork() because the daemon
+    // child is itself a Node script — fork() spawns Node directly and skips the
+    // cmd.exe interpretation pass that broke Windows + Node 25 when
+    // process.execPath contained a space (#1691). It also avoids the [DEP0190]
+    // shell:true security warning.
     const isWin = process.platform === 'win32';
-    const spawnOpts = {
+    const forkOpts = {
         cwd: resolvedRoot,
-        detached: !isWin, // detached is POSIX-only; Windows uses windowsHide
-        // Use 'ignore' for all stdio — passing fs.openSync() FDs causes the child to
-        // die on Windows when the parent exits and closes the FDs (#1478 Bug 3).
-        // The daemon writes its own logs via appendFileSync to .claude-flow/logs/.
-        stdio: ['ignore', 'ignore', 'ignore'],
+        // detached is POSIX-only; on Windows we rely on windowsHide
+        detached: !isWin,
+        // Use 'ignore' for all stdio + 'ignore' for the IPC channel via silent:true off.
+        // fork() defaults to creating an IPC channel; we don't need it here, so we
+        // pass stdio explicitly. Passing fs.openSync() FDs causes the child to die
+        // on Windows when the parent exits and closes the FDs (#1478 Bug 3) — the
+        // daemon writes its own logs via appendFileSync to .claude-flow/logs/.
+        stdio: ['ignore', 'ignore', 'ignore', 'ipc'],
+        windowsHide: true,
         env: {
             ...process.env,
             CLAUDE_FLOW_DAEMON: '1',
             // Prevent macOS SIGHUP kill when terminal closes
             ...(process.platform === 'darwin' ? { NOHUP: '1' } : {}),
         },
-        ...(isWin ? { shell: true, windowsHide: true } : {}),
     };
-    // Use spawn with explicit arguments instead of shell string interpolation
-    // This prevents command injection via paths
-    const spawnArgs = [
-        cliPath,
-        'daemon', 'start', '--foreground', '--quiet',
-    ];
-    // Forward resource threshold flags to the foreground child process
-    // Validate with strict numeric pattern to prevent shell injection on Windows (S1)
+    // Forward args to the foreground child. fork() resolves the script path
+    // via Node's normal module resolution, so cliPath does not need to be
+    // shell-quoted even when it contains spaces.
+    const forkArgs = ['daemon', 'start', '--foreground', '--quiet'];
+    // Validate with strict numeric pattern to prevent injection via crafted flags.
     const SPAWN_NUMERIC_RE = /^\d+(\.\d+)?$/;
     if (maxCpuLoad && SPAWN_NUMERIC_RE.test(maxCpuLoad)) {
-        spawnArgs.push('--max-cpu-load', maxCpuLoad);
+        forkArgs.push('--max-cpu-load', maxCpuLoad);
     }
     if (minFreeMemory && SPAWN_NUMERIC_RE.test(minFreeMemory)) {
-        spawnArgs.push('--min-free-memory', minFreeMemory);
+        forkArgs.push('--min-free-memory', minFreeMemory);
     }
-    const child = spawn(process.execPath, spawnArgs, spawnOpts);
+    const child = fork(cliPath, forkArgs, forkOpts);
     // Get PID from spawned process directly (no shell echo needed)
     const pid = child.pid;
     if (!pid || pid <= 0) {

package/v3/@claude-flow/cli/dist/src/commands/embeddings.js

@@ -499,6 +499,13 @@ const indexCommand = {
         output.writeln(output.dim('─'.repeat(50)));
         try {
             const { getHNSWStatus, getHNSWIndex, searchHNSWIndex, generateEmbedding } = await import('../memory/memory-initializer.js');
+            // Trigger lazy initialization before reading status, otherwise the
+            // singleton stays null and produces a misleading "@ruvector/core not
+            // available" warning even when the package is present (#1698).
+            await getHNSWIndex().catch(() => null);
+            // Probe whether @ruvector/core is loadable so we can distinguish
+            // "package missing" from "package present but index empty".
+            const ruvectorAvailable = await import('@ruvector/core').then(() => true).catch(() => false);
             // Get real HNSW status
             const status = getHNSWStatus();
             if (action === 'status') {
@@ -538,11 +545,17 @@ const indexCommand = {
                         `  Results: ${results?.length || 0} matches`,
                     ].join('\n'), 'Search Performance');
                 }
-                else if (!status.available) {
+                else if (!status.available && !ruvectorAvailable) {
                     output.writeln();
                     output.printWarning('@ruvector/core not available');
                     output.printInfo('Install: npm install @ruvector/core');
                 }
+                else if (!status.available) {
+                    output.writeln();
+                    output.printWarning('HNSW index not initialized (but @ruvector/core is installed)');
+                    output.printInfo('This usually means no embeddings have been stored yet.');
+                    output.printInfo('Run: claude-flow memory store -k "key" --value "text"');
+                }
                 else {
                     output.writeln();
                     output.printInfo('Index is empty. Store some entries to populate it.');

package/v3/@claude-flow/cli/dist/src/commands/hooks.js

@@ -888,8 +888,12 @@ const pretrainCommand = {
                 spinner.setText(`${step.name}: ${step.desc}`);
                 await new Promise(resolve => setTimeout(resolve, 800));
             }
-            // Call MCP tool for pretraining
-            const result = await callMCPTool('hooks_pretrain', {
+            // Call MCP tool for pretraining. The tool currently returns
+            // `{ statistics: { ..., executionTime }, ... }` but earlier CLI
+            // versions read `result.stats` and `result.duration` (#1686). Accept
+            // either shape so the dashboard works whether you upgraded the tool
+            // or the CLI first.
+            const rawResult = await callMCPTool('hooks_pretrain', {
                 path: repoPath,
                 depth,
                 skipCache: ctx.flags.skipCache || false,
@@ -898,24 +902,29 @@ const pretrainCommand = {
                 fileTypes: fileTypes.split(',').map((t) => t.trim()),
             });
             spinner.succeed('Pretraining completed');
+            // Normalize shape: prefer `statistics`, fall back to `stats` for older tools.
+            const stats = (rawResult.statistics ?? rawResult.stats ?? {});
+            const durationMs = rawResult.duration ?? rawResult.statistics?.executionTime ?? 0;
+            const result = { ...rawResult, stats, duration: durationMs };
             if (ctx.flags.format === 'json') {
                 output.printJson(result);
                 return { success: true, data: result };
             }
             output.writeln();
-            // Base stats
+            // Base stats — use ?? 0 fallbacks to keep the table readable even when
+            // the tool omits a counter rather than crashing on undefined.
             const tableData = [
-                { metric: 'Files Analyzed', value: result.stats.filesAnalyzed },
-                { metric: 'Patterns Extracted', value: result.stats.patternsExtracted },
-                { metric: 'Strategies Learned', value: result.stats.strategiesLearned },
-                { metric: 'Trajectories Evaluated', value: result.stats.trajectoriesEvaluated },
-                { metric: 'Contradictions Resolved', value: result.stats.contradictionsResolved },
+                { metric: 'Files Analyzed', value: stats.filesAnalyzed ?? 0 },
+                { metric: 'Patterns Extracted', value: stats.patternsExtracted ?? 0 },
+                { metric: 'Strategies Learned', value: stats.strategiesLearned ?? 0 },
+                { metric: 'Trajectories Evaluated', value: stats.trajectoriesEvaluated ?? 0 },
+                { metric: 'Contradictions Resolved', value: stats.contradictionsResolved ?? 0 },
             ];
             // Add embedding stats if available
-            if (withEmbeddings && result.stats.documentsIndexed !== undefined) {
-                tableData.push({ metric: 'Documents Indexed', value: result.stats.documentsIndexed }, { metric: 'Embeddings Generated', value: result.stats.embeddingsGenerated || 0 }, { metric: 'Hyperbolic Projections', value: result.stats.hyperbolicProjections || 0 });
+            if (withEmbeddings && stats.documentsIndexed !== undefined) {
+                tableData.push({ metric: 'Documents Indexed', value: stats.documentsIndexed }, { metric: 'Embeddings Generated', value: stats.embeddingsGenerated ?? 0 }, { metric: 'Hyperbolic Projections', value: stats.hyperbolicProjections ?? 0 });
             }
-            tableData.push({ metric: 'Duration', value: `${(result.duration / 1000).toFixed(1)}s` });
+            tableData.push({ metric: 'Duration', value: `${(durationMs / 1000).toFixed(1)}s` });
             output.printTable({
                 columns: [
                     { key: 'metric', header: 'Metric', width: 30 },
@@ -1068,12 +1077,36 @@ const metricsCommand = {
         output.writeln(output.bold(`Learning Metrics Dashboard (${period})`));
         output.writeln();
         try {
-            // Call MCP tool for metrics
-            const result = await callMCPTool('hooks_metrics', {
+            // Call MCP tool for metrics. The tool returns `{ summary, routing,
+            // edits, commands }` (see MetricsResult in v3/mcp/tools/hooks-tools.ts)
+            // but earlier CLI versions expected `{ patterns, agents, commands.avgRiskScore }`.
+            // Accept the union and normalize below — without the `?? 0` guards the
+            // dashboard crashed with "Cannot read properties of null (reading 'toFixed')"
+            // whenever a counter was missing (#1686).
+            const rawMetrics = await callMCPTool('hooks_metrics', {
                 period,
                 includeV3: v3Dashboard,
                 category: ctx.flags.category,
             });
+            // Normalize across both shapes; default every numeric to 0 so toFixed
+            // never sees null/undefined.
+            const totalPatterns = rawMetrics.patterns?.total ?? rawMetrics.summary?.patternsLearned ?? 0;
+            const successfulPatterns = rawMetrics.patterns?.successful ?? Math.round((rawMetrics.summary?.successRate ?? 0) * totalPatterns);
+            const failedPatterns = rawMetrics.patterns?.failed ?? Math.max(0, totalPatterns - successfulPatterns);
+            const avgConfidence = rawMetrics.patterns?.avgConfidence ?? rawMetrics.summary?.avgQuality ?? 0;
+            const routingAccuracy = rawMetrics.agents?.routingAccuracy
+                ?? (rawMetrics.routing?.avgConfidence ?? 0);
+            const totalRoutes = rawMetrics.agents?.totalRoutes ?? rawMetrics.routing?.totalRoutes ?? 0;
+            const topAgent = rawMetrics.agents?.topAgent ?? rawMetrics.routing?.topAgents?.[0]?.agent ?? 'n/a';
+            const totalCommands = rawMetrics.commands?.totalExecuted ?? rawMetrics.commands?.totalCommands ?? 0;
+            const commandSuccessRate = rawMetrics.commands?.successRate ?? 0;
+            const avgRiskScore = rawMetrics.commands?.avgRiskScore ?? rawMetrics.commands?.avgExecutionTime ?? 0;
+            const result = {
+                ...rawMetrics,
+                patterns: { total: totalPatterns, successful: successfulPatterns, failed: failedPatterns, avgConfidence },
+                agents: { routingAccuracy, totalRoutes, topAgent },
+                commands: { totalExecuted: totalCommands, successRate: commandSuccessRate, avgRiskScore },
+            };
             if (ctx.flags.format === 'json') {
                 output.printJson(result);
                 return { success: true, data: result };
@@ -1086,10 +1119,10 @@ const metricsCommand = {
                     { key: 'value', header: 'Value', width: 20, align: 'right' }
                 ],
                 data: [
-                    { metric: 'Total Patterns', value: result.patterns.total },
-                    { metric: 'Successful', value: output.success(String(result.patterns.successful)) },
-                    { metric: 'Failed', value: output.error(String(result.patterns.failed)) },
-                    { metric: 'Avg Confidence', value: `${(result.patterns.avgConfidence * 100).toFixed(1)}%` }
+                    { metric: 'Total Patterns', value: totalPatterns },
+                    { metric: 'Successful', value: output.success(String(successfulPatterns)) },
+                    { metric: 'Failed', value: output.error(String(failedPatterns)) },
+                    { metric: 'Avg Confidence', value: `${(avgConfidence * 100).toFixed(1)}%` }
                 ]
             });
             output.writeln();
@@ -1101,9 +1134,9 @@ const metricsCommand = {
                     { key: 'value', header: 'Value', width: 20, align: 'right' }
                 ],
                 data: [
-                    { metric: 'Routing Accuracy', value: `${(result.agents.routingAccuracy * 100).toFixed(1)}%` },
-                    { metric: 'Total Routes', value: result.agents.totalRoutes },
-                    { metric: 'Top Agent', value: output.highlight(result.agents.topAgent) }
+                    { metric: 'Routing Accuracy', value: `${(routingAccuracy * 100).toFixed(1)}%` },
+                    { metric: 'Total Routes', value: totalRoutes },
+                    { metric: 'Top Agent', value: output.highlight(topAgent) }
                 ]
             });
             output.writeln();
@@ -1115,9 +1148,9 @@ const metricsCommand = {
                     { key: 'value', header: 'Value', width: 20, align: 'right' }
                 ],
                 data: [
-                    { metric: 'Total Executed', value: result.commands.totalExecuted },
-                    { metric: 'Success Rate', value: `${(result.commands.successRate * 100).toFixed(1)}%` },
-                    { metric: 'Avg Risk Score', value: result.commands.avgRiskScore.toFixed(2) }
+                    { metric: 'Total Executed', value: totalCommands },
+                    { metric: 'Success Rate', value: `${(commandSuccessRate * 100).toFixed(1)}%` },
+                    { metric: 'Avg Risk Score', value: avgRiskScore.toFixed(2) }
                 ]
             });
             if (v3Dashboard && result.performance) {

package/v3/@claude-flow/cli/dist/src/commands/performance.js

@@ -30,7 +30,7 @@ const benchmarkCommand = {
         const spinner = output.createSpinner({ text: `Running ${suite} benchmarks...`, spinner: 'dots' });
         spinner.start();
         // Import real implementations
-        const { generateEmbedding, batchCosineSim, flashAttentionSearch, getHNSWStatus, storeEntry, searchEntries, } = await import('../memory/memory-initializer.js');
+        const { generateEmbedding, batchCosineSim, flashAttentionSearch, getHNSWStatus, getHNSWIndex, storeEntry, searchEntries, } = await import('../memory/memory-initializer.js');
         const { benchmarkAdaptation, initializeIntelligence } = await import('../memory/intelligence.js');
         const results = [];
         const startTotal = Date.now();
@@ -95,6 +95,10 @@ const benchmarkCommand = {
         // 3. HNSW Search Benchmark
         if (suite === 'all' || suite === 'search') {
             spinner.setText('Benchmarking HNSW search...');
+            // Trigger lazy initialization before reading status (#1698) — without
+            // this the singleton stays null and we report "No index" even when
+            // @ruvector/core is loadable and the index has data on disk.
+            await getHNSWIndex().catch(() => null);
             const hnswStatus = getHNSWStatus();
             if (hnswStatus.available && hnswStatus.entryCount > 0) {
                 const searchTimes = [];

package/v3/@claude-flow/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@claude-flow/cli",
-  "version": "3.6.12",
+  "version": "3.6.13",
   "type": "module",
   "description": "Ruflo CLI - Enterprise AI agent orchestration with 60+ specialized agents, swarm coordination, MCP server, self-learning hooks, and vector memory for Claude Code",
   "main": "dist/src/index.js",