claude-flow 3.6.15 → 3.6.17

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-flow",
-  "version": "3.6.15",
+  "version": "3.6.17",
   "description": "Ruflo - Enterprise AI agent orchestration for Claude Code. Deploy 60+ specialized agents in coordinated swarms with self-learning, fault-tolerant consensus, vector memory, and MCP integration",
   "main": "dist/index.js",
   "type": "module",

package/v3/@claude-flow/cli/bin/cli.js

@@ -10,14 +10,30 @@
 
 import { randomUUID } from 'crypto';
 
-// Suppress noisy [AgentDB Patch] warnings from agentic-flow's runtime patch
-// These are cosmetic — the patch tries to fix agentdb v1.x imports but we use v3
+// Suppress the SPECIFIC cosmetic "[AgentDB Patch] Controller index not found"
+// warning from agentic-flow's runtime patch — these are emitted because the
+// patch was written for agentdb v1.x and we use v3, where the controllers
+// dist directory is laid out differently. The warning surfaces on every
+// command and the audit (audit_1776483149979) flagged a too-broad suppression
+// as a security risk because it could hide legitimate [AgentDB Patch] warnings.
+//
+// Tight match: must include both the prefix AND the specific "Controller
+// index not found" text. Anything else (including future [AgentDB Patch]
+// warnings about real issues) flows through unchanged. Also patch
+// console.log because the underlying code uses it (the previous filter
+// only caught console.warn and was therefore a no-op).
 const _origWarn = console.warn;
+const _origLog = console.log;
+const _isCosmeticAgentdbPatchNoise = (msg) =>
+  msg.includes('[AgentDB Patch]') && msg.includes('Controller index not found');
 console.warn = (...args) => {
-  const msg = String(args[0] ?? '');
-  if (msg.includes('[AgentDB Patch]')) return;
+  if (_isCosmeticAgentdbPatchNoise(String(args[0] ?? ''))) return;
   _origWarn.apply(console, args);
 };
+console.log = (...args) => {
+  if (_isCosmeticAgentdbPatchNoise(String(args[0] ?? ''))) return;
+  _origLog.apply(console, args);
+};
 
 // Check if we should run in MCP server mode
 // Conditions:

package/v3/@claude-flow/cli/bin/mcp-server.js

@@ -9,12 +9,23 @@
 
 import { randomUUID } from 'crypto';
 
-// Suppress [AgentDB Patch] warnings (cosmetic, from agentic-flow v1.x compat patch)
+// Suppress the SPECIFIC cosmetic "[AgentDB Patch] Controller index not found"
+// noise. Tight match (both prefix AND "Controller index not found") so other
+// [AgentDB Patch] warnings about real issues still flow through. Also patch
+// console.log because the underlying call site uses it. See bin/cli.js for
+// the same rationale.
 const _origWarn = console.warn;
+const _origLog = console.log;
+const _isCosmeticAgentdbPatchNoise = (msg) =>
+  msg.includes('[AgentDB Patch]') && msg.includes('Controller index not found');
 console.warn = (...args) => {
-  if (String(args[0] ?? '').includes('[AgentDB Patch]')) return;
+  if (_isCosmeticAgentdbPatchNoise(String(args[0] ?? ''))) return;
   _origWarn.apply(console, args);
 };
+console.log = (...args) => {
+  if (_isCosmeticAgentdbPatchNoise(String(args[0] ?? ''))) return;
+  _origLog.apply(console, args);
+};
 
 import { listMCPTools, callMCPTool, hasTool } from '../dist/src/mcp-client.js';
 

package/v3/@claude-flow/cli/dist/src/memory/memory-bridge.js

@@ -93,84 +93,103 @@ async function getRegistry(dbPath) {
                 finally {
                     console.log = origLog;
                 }
-                // Wire intelligence module as the learning backend
-                // AgentDB's ReasoningBank/LearningSystem need a better-sqlite3 db handle
-                // which ControllerRegistry doesn't expose. Instead, use the local intelligence
-                // module (SONA + LocalReasoningBank + file persistence) for learning.
+                // Wire intelligence module as the learning backend.
+                // AgentDB's ReasoningBank/LearningSystem need a better-sqlite3 db
+                // handle which ControllerRegistry doesn't expose. Instead, use the
+                // local intelligence module (SONA + LocalReasoningBank + file
+                // persistence) for learning.
+                //
+                // PERF: parallelize the two independent post-init paths
+                // (intelligence module load + agentdb import). Previously these
+                // ran serially, adding ~50-150ms to cold start. Both can resolve
+                // concurrently because they touch disjoint controller slots.
                 try {
-                    const intelligence = await import('./intelligence.js');
-                    const initResult = await intelligence.initializeIntelligence();
                     const reg = registry;
-                    if (initResult.reasoningBankEnabled) {
-                        const rb = intelligence.getReasoningBank();
-                        if (rb && !reg.get('reasoningBank')) {
-                            if (typeof reg.set === 'function')
-                                reg.set('reasoningBank', rb);
-                            else
-                                reg._controllers = { ...(reg._controllers || {}), reasoningBank: rb };
+                    const intelligencePromise = (async () => {
+                        try {
+                            const intelligence = await import('./intelligence.js');
+                            const initResult = await intelligence.initializeIntelligence();
+                            if (initResult.reasoningBankEnabled) {
+                                const rb = intelligence.getReasoningBank();
+                                if (rb && !reg.get('reasoningBank')) {
+                                    if (typeof reg.set === 'function')
+                                        reg.set('reasoningBank', rb);
+                                    else
+                                        reg._controllers = { ...(reg._controllers || {}), reasoningBank: rb };
+                                }
+                            }
+                            if (initResult.sonaEnabled) {
+                                const sona = intelligence.getSonaCoordinator();
+                                if (sona && !reg.get('learningSystem')) {
+                                    if (typeof reg.set === 'function')
+                                        reg.set('learningSystem', sona);
+                                    else
+                                        reg._controllers = { ...(reg._controllers || {}), learningSystem: sona };
+                                }
+                            }
                         }
-                    }
-                    if (initResult.sonaEnabled) {
-                        const sona = intelligence.getSonaCoordinator();
-                        if (sona && !reg.get('learningSystem')) {
-                            if (typeof reg.set === 'function')
-                                reg.set('learningSystem', sona);
-                            else
-                                reg._controllers = { ...(reg._controllers || {}), learningSystem: sona };
+                        catch { /* intelligence module not available — learning stays unwired */ }
+                    })();
+                    const agentdbPromise = (async () => {
+                        // Single import shared across SkillLibrary + SemanticRouter probe.
+                        let agentdb = null;
+                        try {
+                            agentdb = (await import('agentdb'));
                         }
-                    }
-                    // SkillLibrary from AgentDB (no db required)
-                    try {
-                        const agentdb = await import('agentdb');
-                        if (agentdb.SkillLibrary && !reg.get('skills')) {
-                            const sk = new agentdb.SkillLibrary();
-                            if (typeof reg.set === 'function')
-                                reg.set('skills', sk);
-                            else
-                                reg._controllers = { ...(reg._controllers || {}), skills: sk };
+                        catch {
+                            return; /* AgentDB not available */
                         }
-                    }
-                    catch { /* AgentDB not available */ }
-                    // ADR-093 F9: post-init injection of low-risk disabled controllers.
-                    // Try multiple constructor names because the agentdb API renamed
-                    // SemanticRouter across alpha versions (alpha.10 had SemanticRouter,
-                    // alpha.11+ removed it in favor of @ruvector/router separately;
-                    // future versions may reintroduce). If the cwd's agentdb has a
-                    // viable router-shaped controller, wire it; otherwise leave it
-                    // unbound and let bridgeSemanticRoute return its actionable error.
-                    try {
-                        const agentdb = await import('agentdb');
-                        const candidates = ['SemanticRouter', 'IntentRouter', 'TaskRouter'];
-                        let routerInstance = null;
-                        for (const name of candidates) {
-                            const Ctor = agentdb[name];
-                            if (typeof Ctor === 'function') {
-                                try {
-                                    // Try with dimension config first (newer router classes), then no-args
-                                    const inst = (() => {
-                                        try {
-                                            return new Ctor({ dimension: 384 });
-                                        }
-                                        catch {
-                                            return new Ctor();
+                        // SkillLibrary (no db required)
+                        try {
+                            const SkillCtor = agentdb.SkillLibrary;
+                            if (SkillCtor && !reg.get('skills')) {
+                                const sk = new SkillCtor();
+                                if (typeof reg.set === 'function')
+                                    reg.set('skills', sk);
+                                else
+                                    reg._controllers = { ...(reg._controllers || {}), skills: sk };
+                            }
+                        }
+                        catch { /* SkillLibrary optional */ }
+                        // ADR-093 F9: probe multiple router class names across agentdb
+                        // alpha versions (alpha.10 had SemanticRouter; alpha.11+ removed
+                        // it in favor of @ruvector/router; future versions may
+                        // reintroduce). Wire only if .route() is callable.
+                        try {
+                            const candidates = ['SemanticRouter', 'IntentRouter', 'TaskRouter'];
+                            let routerInstance = null;
+                            for (const name of candidates) {
+                                const Ctor = agentdb[name];
+                                if (typeof Ctor === 'function') {
+                                    try {
+                                        const inst = (() => {
+                                            try {
+                                                return new Ctor({ dimension: 384 });
+                                            }
+                                            catch {
+                                                return new Ctor();
+                                            }
+                                        })();
+                                        if (inst && typeof inst.route === 'function') {
+                                            routerInstance = inst;
+                                            break;
                                         }
-                                    })();
-                                    if (inst && typeof inst.route === 'function') {
-                                        routerInstance = inst;
-                                        break;
                                     }
+                                    catch { /* try next candidate */ }
                                 }
-                                catch { /* try next candidate */ }
+                            }
+                            if (routerInstance && !reg.get('semanticRouter')) {
+                                if (typeof reg.set === 'function')
+                                    reg.set('semanticRouter', routerInstance);
+                                else
+                                    reg._controllers = { ...(reg._controllers || {}), semanticRouter: routerInstance };
                             }
                         }
-                        if (routerInstance && !reg.get('semanticRouter')) {
-                            if (typeof reg.set === 'function')
-                                reg.set('semanticRouter', routerInstance);
-                            else
-                                reg._controllers = { ...(reg._controllers || {}), semanticRouter: routerInstance };
-                        }
-                    }
-                    catch { /* SemanticRouter optional — bridgeSemanticRoute will surface "not available" */ }
+                        catch { /* router optional */ }
+                    })();
+                    // Run both in parallel; settle either way so a single failing
+                    // path doesn't tear down the rest of the post-init wiring.
+                    await Promise.allSettled([intelligencePromise, agentdbPromise]);
                     // Other disabled controllers remain disabled and tracked in
                     // ADR-093 F9 for future enablement:
                     //   - mutationGuard (write protection — needs config)
@@ -183,7 +202,7 @@ async function getRegistry(dbPath) {
                     //   - graphAdapter (graph DB adapter — needs graph DB)
                 }
                 catch {
-                    // Intelligence module not available — learning stays unwired
+                    // Top-level catch — registry stays usable even if post-init wiring fails wholesale.
                 }
                 registryInstance = registry;
                 bridgeAvailable = true;

package/v3/@claude-flow/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@claude-flow/cli",
-  "version": "3.6.15",
+  "version": "3.6.17",
   "type": "module",
   "description": "Ruflo CLI - Enterprise AI agent orchestration with 60+ specialized agents, swarm coordination, MCP server, self-learning hooks, and vector memory for Claude Code",
   "main": "dist/src/index.js",
@@ -84,7 +84,7 @@
     "test": "vitest run",
     "test:plugin-store": "npx tsx src/plugins/tests/standalone-test.ts",
     "test:pattern-store": "npx tsx src/transfer/store/tests/standalone-test.ts",
-    "postinstall": "node -e \"const{existsSync,cpSync,readdirSync}=require('fs');const{join,dirname}=require('path');try{const r=require.resolve('agentdb');const base=r.includes('dist/src')?join(dirname(r),'..','..'):(r.includes('dist')?join(dirname(r),'..'):dirname(r));const s=join(base,'dist','src','controllers');const t=join(base,'dist','controllers');if(existsSync(s)&&!existsSync(t)){cpSync(s,t,{recursive:true});}}catch{}\"",
+    "postinstall": "node -e \"const{existsSync,cpSync,readdirSync,statSync}=require('fs');const{join,dirname}=require('path');try{const r=require.resolve('agentdb');const base=r.includes('dist/src')?join(dirname(r),'..','..'):(r.includes('dist')?join(dirname(r),'..'):dirname(r));const srcDist=join(base,'dist','src');if(!existsSync(srcDist))process.exit(0);for(const e of readdirSync(srcDist)){const s=join(srcDist,e);const t=join(base,'dist',e);try{if(statSync(s).isDirectory()&&!existsSync(t)){cpSync(s,t,{recursive:true});}}catch{}}}catch{}\"",
     "prepublishOnly": "cp ../../../README.md ./README.md",
     "release": "npm version prerelease --preid=alpha && npm run publish:all",
     "publish:all": "./scripts/publish.sh"