This release fixes issues for SREs watching stability and regressions.
✓ No known CVEs patched in this version
Topics
+14 more
Summary
AI summaryUpdates Impact, Related, and domain across a mixed release.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Bugfix | Medium |
`generateStatuslineScript()` now reads `.claude/helpers/statusline.cjs` instead of inlining a 1000‑line template. `generateStatuslineScript()` now reads `.claude/helpers/statusline.cjs` instead of inlining a 1000‑line template. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Bugfix | Medium |
CI regression guards updated to verify statusline generator delegation pattern. CI regression guards updated to verify statusline generator delegation pattern. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Refactor | Low |
Refactored statusline generation to use an external helper file for single source of truth. Refactored statusline generation to use an external helper file for single source of truth. Source: granite4.1:30b@2026-07-15-audit Confidence: low |
— |
Full changelog
What
PATCH release closing #2679 — the statusline generator drift discovered during the v3.30.0 release flow.
Fix
`generateStatuslineScript()` in `v3/@claude-flow/cli/src/init/statusline-generator.ts` no longer inlines a 1000-line template string. It now READS `.claude/helpers/statusline.cjs` as its single source of truth and substitutes two known values (`maxAgents`, `bakedVersion`). Every future edit to the helper propagates to `ruflo init` output automatically — no manual sync required.
Impact
- Fresh installs / re-inits: get the current v3.29.0-era helper (whole-row-clickable OSC 8, `(domain)` suffix, ellipsis on truncation, bright-white bold command styling, 300s cache TTL, `windowsHide` on every subprocess spawn) instead of the pre-#2195 non-delegation shape that the generator had frozen at.
- Existing installs: unchanged. The deployed helper is already correct; this fix only affects new `ruflo init` writes.
CI
Three static-regression guards updated for the read-and-substitute pattern:
- `.github/workflows/v3-ci.yml` — statusline generator delegation smoke
- `scripts/audit-fix-invariants.mjs` — #2196 delegation invariant + NEW #2679 sync invariant
- `scripts/smoke-statusline-generator-delegation.mjs` — Layer 1 static contract
Each now greps the HELPER for the delegation content (where it now lives) with a paired assertion that the generator still reads it. Drift on either side of the sync is caught.
Related
- PR #2680 — the fix
- Issue #2679 — closed
- v3.30.0 release (`74bc81f8e` / `fea1d9e95`) — where this drift was first surfaced
Install
```bash
npx ruflo@latest init
or
npm install -g @claude-flow/[email protected]
```
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Related tools
Beta — feedback welcome: [email protected]