claude-flow

v3.25.6 Feature

This release adds 2 notable features for engineering teams evaluating rollout.

Published 17d AI Agents & Assistants

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

agentic-ai agentic-framework agentic-workflow agents ai-agents ai-assistant

+14 more

ai-coding ai-skills autonomous-agents claude-code codex harness mcp-server multi-agent multi-agent-systems npm skills swarm swarm-intelligence typescript

Summary

AI summary

Updates Release integrity, extension, and https://github.com/ruvnet/ruflo across a mixed release.

Changes in this release

Type	Severity	Summary	CVE
Bugfix
Bugfix	Medium	Cursor's third‑party hook import no longer fail‑closes every Bash/Edit tool call. Cursor's third‑party hook import no longer fail‑closes every Bash/Edit tool call. Source: llm_adapter@2026-07-16 Confidence: high	—
Bugfix	Medium	Synced shim types for @claude-flow/plugin-agent-federation to [email protected] and guarded optional close(). Synced shim types for @claude-flow/plugin-agent-federation to [email protected] and guarded optional close(). Source: llm_adapter@2026-07-16 Confidence: high	—
Bugfix	Medium	Indirected optional‑dep imports in @claude-flow/cli through string variables so tsc compiles cleanly without the deps. Indirected optional‑dep imports in @claude-flow/cli through string variables so tsc compiles cleanly without the deps. Source: llm_adapter@2026-07-16 Confidence: high	—
Bugfix	Medium	Duplicate MCP registrations between claude-flow and ruflo are detected and healed by `ruflo doctor`. Duplicate MCP registrations between claude-flow and ruflo are detected and healed by `ruflo doctor`. Source: llm_adapter@2026-07-16 Confidence: high	—
Refactor	Low	Rewrote ruflo‑metaharness smoke #16 to enforce ADR-150 rule 2 invariant, removing mutual‑exclusion with RUFLO_MAX=0 budget guard. Rewrote ruflo‑metaharness smoke #16 to enforce ADR-150 rule 2 invariant, removing mutual‑exclusion with RUFLO_MAX=0 budget guard. Source: llm_adapter@2026-07-16 Confidence: high	—

Full changelog

Highlights

Ships to @claude-flow/[email protected], [email protected], [email protected] (all three of latest / alpha / v3alpha dist-tags pointed at 3.25.6).

Fixes

#2613 — Cursor's third-party hook import no longer fail-closes every Bash/Edit tool call. ruflo-hook.sh (and its .cjs sibling) now silence CLI stdout, and hooks.json PreToolUse commands emit a valid {"permission":"allow"} verdict that both Claude Code and Cursor accept.
#2608 — @claude-flow/plugin-agent-federation shim types synced to [email protected]; guard optional close(). Fixes Build V3 red on all 3 platforms.
#2608 (extension) — @claude-flow/cli optional-dep imports (@ruvector/learning-wasm, @ruvector/attention, @metaharness/router) indirected through string variables so tsc no longer resolves them statically. install-safety builds now compile clean when the optional deps are absent.
#2590 — resolved as a consequence of the plugin-agent-federation fix.
ADR-150 / #2561 reconciliation — ruflo-metaharness smoke #16 rewritten to enforce the correct ADR-150 rule #2 invariant (no metaharness in ruflo hard dependencies) rather than demanding metaharness presence. Removes the mutual-exclusion with the RUFLO_MAX=0 optional-deps budget guard.
#2612 — Duplicate MCP registrations (claude-flow + ruflo for the same binary) are healed via ruflo doctor detection. The canonical MCP key stays claude-flow to preserve the ~166 plugin tool references to mcp__claude-flow__* (#2206). Doctor now surfaces "Duplicate Ruflo MCP registrations found" with an actionable fix-message pointing operators at the correct entry to remove.

Release integrity

Helpers manifest re-signed with Ed25519 for 3.25.6; verify-helpers OK.
All 726 CLI tests pass locally.
CI green on the merged PR (0 failures across 114 checks).

🤖 Generated with RuFlo

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track claude-flow

Get notified when new releases ship.

About claude-flow

Deploy multi-agent swarms with coordinated workflows.

All releases →