This release fixes issues for SREs watching stability and regressions.
✓ No known CVEs patched in this version
Topics
+14 more
Summary
AI summaryFixes silent write loss on Node 24/26, mismatched pattern store/search, missing route‑learning persistence, stale statusline version display, and contradictory flash‑attention state.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Bugfix | High |
Fixes silent write loss on Node 24/26 by overriding better-sqlite3 to >=12.8.0. Fixes silent write loss on Node 24/26 by overriding better-sqlite3 to >=12.8.0. Source: llm_adapter@2026-05-29 Confidence: high |
— |
| Bugfix | Medium |
Fixes mismatch between agentdb_pattern-store and agentdb_pattern-search backends. Fixes mismatch between agentdb_pattern-store and agentdb_pattern-search backends. Source: llm_adapter@2026-05-29 Confidence: high |
— |
| Bugfix | Medium |
Ensures route feedback persists by explicitly awaiting `router.saveModel()` after updates. Ensures route feedback persists by explicitly awaiting `router.saveModel()` after updates. Source: llm_adapter@2026-05-29 Confidence: high |
— |
| Bugfix | Medium |
Corrects statusline version display for global installs by probing the global npm root. Corrects statusline version display for global installs by probing the global npm root. Source: llm_adapter@2026-05-29 Confidence: high |
— |
| Bugfix | Medium |
Aligns `system_info` flashAttention reporting with live probe from hooks_intelligence. Aligns `system_info` flashAttention reporting with live probe from hooks_intelligence. Source: llm_adapter@2026-05-29 Confidence: high |
— |
Full changelog
Ruflo v3.10.6 — memory, routing & statusline bug-fix release
Five reproducible bugs reported by external contributors (@pacphi, @casparml, @HF-teamdev), each verified against source and covered by a regression test. Thanks to all three for the detailed, well-traced reports.
🔴 #2219 — Silent write loss on Node 24/26
agentdb declares better-sqlite3 as an optional dependency at ^11.8.1, which has no prebuilt binary for Node 24/25/26. On those runtimes the optional native build fails silently (optional deps never error), and AgentDB drops to a non-persistent backend — stores appear to succeed but never land on disk.
Fix: override better-sqlite3 → >=12.8.0 (ships Node 20–26 prebuilds) in both the root umbrella and the ruflo wrapper (root overrides don't propagate to the published wrapper — the #2112 lesson). A new CI guard (audit-better-sqlite3-override.mjs) keeps the override pinned so this can't regress.
If you installed globally on Node 24/26 before this release:
npm i -g ruflo@latestrestores the native backend.
🔴 #2226 — agentdb_pattern-store / agentdb_pattern-search never agreed
The store and search MCP tools hit disjoint backends, so a stored pattern was never returned by search. Two paths fixed:
- Controller present:
bridgeSearchPatternsnow readsLocalReasoningBank.findSimilar/getAll— the same backend the store writes to. - Controller absent (the common case): the
memory-store-fallbacksearch now hydrates each entry's content viagetEntrybefore matching —listEntriesreturns metadata only (see #2014), so the substring scan previously matched nothing.
🟠 #2222 — route feedback was a no-op
Feedback applied the Q-learner update in memory, but the CLI process exits before the autoSaveInterval flush fires, so route-learning never persisted across invocations. Fix: explicit awaited router.saveModel() after feedback.
🟡 #2221 — Statusline showed RuFlo V3.6 on global installs
getPkgVersion() never probed the global npm root, so npm i -g ruflo fell back to the hard-coded default version. Fix: derive the global node_modules dir from process.execPath (no npm spawn — statusline renders often); covers nvm/mise and Windows layouts.
🟡 #2215 — flashAttention reported contradictory state
system_info emitted a hard-coded flashAttention: false while hooks_intelligence reported the live probe. Fix: system_info now runs the same getFlashAttention() probe as the authoritative path, so the two tools can't disagree.
Verification
- New regression suite
bug-cluster-2219-2226.test.ts— 5/5 (incl. end-to-end store→search roundtrip) - Statusline drift guard — 8/8 (regenerated
.cjsbyte-identical to generator) tscclean; CI 29/29 green including the new better-sqlite3 override guard
Install
npm i -g ruflo@latest # or @3.10.6
npx ruflo@latest --version # → 3.10.6
All three packages (@claude-flow/cli, claude-flow, ruflo) published at 3.10.6 with latest/alpha/v3alpha in lockstep.
🤖 Generated with RuFlo
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Related tools
Beta — feedback welcome: [email protected]