claude-flow 3.6.23 → 3.6.24

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-flow",
-  "version": "3.6.23",
+  "version": "3.6.24",
   "description": "Ruflo - Enterprise AI agent orchestration for Claude Code. Deploy 60+ specialized agents in coordinated swarms with self-learning, fault-tolerant consensus, vector memory, and MCP integration",
   "main": "dist/index.js",
   "type": "module",

package/v3/@claude-flow/cli/dist/src/memory/memory-bridge.js

@@ -252,6 +252,7 @@ async function getRegistry(dbPath) {
                                 // (separate from the main memory.db so the audit trail
                                 // is isolated). Best-effort: if better-sqlite3 isn't
                                 // resolvable in this env, skip cleanly.
+                                let attestationInst = null;
                                 if (!reg.get('attestationLog')) {
                                     try {
                                         const attestationFile = path.join(adbDir, 'dist/src/security/AttestationLog.js');
@@ -267,6 +268,7 @@ async function getRegistry(dbPath) {
                                             const Ctor = mod.AttestationLog;
                                             if (typeof Ctor === 'function') {
                                                 const inst = new Ctor({ db });
+                                                attestationInst = inst;
                                                 if (typeof reg.set === 'function')
                                                     reg.set('attestationLog', inst);
                                                 else
@@ -276,6 +278,36 @@ async function getRegistry(dbPath) {
                                     }
                                     catch { /* better-sqlite3 missing or schema init failed — skip silently */ }
                                 }
+                                // ADR-095 G7 follow-up: GuardedVectorBackend wraps the
+                                // existing vectorBackend with mutationGuard + attestationLog
+                                // for proof-gated state mutations (ADR-060). All three
+                                // dependencies are reachable here — vectorBackend is in
+                                // the baseline init, mutationGuard was just activated, and
+                                // attestationLog is constructed above. Skip if any piece
+                                // is missing rather than constructing with undefined.
+                                if (!reg.get('guardedVectorBackend')) {
+                                    try {
+                                        const gvbFile = path.join(adbDir, 'dist/src/backends/ruvector/GuardedVectorBackend.js');
+                                        if (fs.existsSync(gvbFile)) {
+                                            const inner = reg.get('vectorBackend');
+                                            const guard = reg.get('mutationGuard');
+                                            const log = attestationInst ?? reg.get('attestationLog');
+                                            if (inner && guard) {
+                                                const url = pathToFileURL(gvbFile).href;
+                                                const mod = await import(url);
+                                                const Ctor = mod.GuardedVectorBackend;
+                                                if (typeof Ctor === 'function') {
+                                                    const inst = new Ctor(inner, guard, log);
+                                                    if (typeof reg.set === 'function')
+                                                        reg.set('guardedVectorBackend', inst);
+                                                    else
+                                                        reg._controllers = { ...(reg._controllers || {}), guardedVectorBackend: inst };
+                                                }
+                                            }
+                                        }
+                                    }
+                                    catch { /* GuardedVectorBackend optional */ }
+                                }
                             }
                         }
                         catch { /* G7 wiring optional */ }
@@ -284,9 +316,7 @@ async function getRegistry(dbPath) {
                     // path doesn't tear down the rest of the post-init wiring.
                     await Promise.allSettled([intelligencePromise, agentdbPromise]);
                     // Remaining disabled controllers tracked in ADR-095 G7 for
-                    // per-controller activation ADRs (each needs config / key
-                    // material that we don't pass blindly):
-                    //   - guardedVectorBackend (secured backend — needs key material)
+                    // per-controller activation ADRs:
                     //   - graphAdapter (graph DB adapter — needs graph DB connection)
                 }
                 catch {

package/v3/@claude-flow/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@claude-flow/cli",
-  "version": "3.6.23",
+  "version": "3.6.24",
   "type": "module",
   "description": "Ruflo CLI - Enterprise AI agent orchestration with 60+ specialized agents, swarm coordination, MCP server, self-learning hooks, and vector memory for Claude Code",
   "main": "dist/src/index.js",