claude-flow

Summary

Tracker-fire sweep from the 2026-07-24 → 2026-07-26 window. Ten tracked bugs plus one cold-start regression, landed as six commits on the branch (seventh test-coverage commit incoming). Rebased against origin/main at v3.32.9 — one issue's proposed fix (Codex #2774) was based on an incorrect diagnosis and reverted during rebase.

Regression check: apples-to-apples fresh-worktree tests — origin/main baseline 98 failed / 3199 total, this branch 91 failed / 3199 total — net -7 failures, zero new failures introduced.

Commits

1. 38f4eaebf — main tracker sweep (9 fixes + promo seed)
2. 8933c6c8c — parser.ts:applyDefaults walks command/subcommand options (#2775 root cause)
3. b2a383079 — memory_store MCP defaults upsert=true for CLI parity (#2775)
4. 3abb25823 — CHANGELOG re-scope to 3.32.10
5. 4c39225ca — hooks_post-task dual-writes routing decisions to JSON store (#2786 fix-2)
6. 72e6cd705 — 3 parser regression tests for #2775 (52/52 → 55/55)

Fixed

• Statusline promo row blank on new installs — cold-start local seed pool restored (ADR-311 had emptied it). Cognitum remote pool (funnel.ruv.io/v1/messages) remains authoritative via eligibleMessagesFromPools (remote wins by id); seed only renders during the ≤ 60s cold-start window before first successful remote fetch. Nine seed messages: 1 disclosure, 7 educational tips pointing at cognitum.one docs, 1 promotional. (v3/@claude-flow/cli/src/funnel/messages.ts)
• #2777 — ruflo init no longer imports the entire ruvnet/ruflo repo (97 MB, 384 SKILL.md) into .agents/skills/ruflo/. Materializes single platform SKILL.md; detects bloated prior install and re-materializes.
• #2781 — ruflo-adr adr-index no longer silently drops ADR data: status regex accepts - **Status**: proposed; single-line and wrapped relation lines parse fully; CLI_CORE=1 warns and unifies on @claude-flow/cli@latest. Dry-run over 531 ADRs captures 608 edges cleanly.
• #2770 — Windows: browser-session MCP tools + two init execFileSync('npx', …) sites now set shell: process.platform === 'win32' so cmd.exe resolves npx.cmd. POSIX behavior unchanged.
• #2782 — WorkerDaemon.saveState() + autopilot-state.saveState() + autopilot-state.appendLog() no longer race on shared .tmp filename. All three call writeFileAtomic (pid + timestamp + random-suffixed temp) with try/catch.
• #2785 — ruflo hooks post-task accepts --task/-t and --store-results flags per CLAUDE.md-documented usage. Routing outcomes finally persist to the namespace hooks_metrics reads.
• #2786 — AgentDB no longer silently fails to initialize under CLAUDE_FLOW_ENCRYPT_AT_REST=1. New getAgentDbPath() returns agentdb-memory.db in the same dir as memory.db; ControllerRegistry (native better-sqlite3) opens a distinct file from the sql.js CRUD writer's encrypted memory.db.
  • Follow-up #2786 fix-2: hooks_metrics "Pattern Learning" / "Agent Routing" counters were stuck at zero because the sync reader getIntelligenceStatsFromMemory() reads .claude-flow/memory/store.json while hooks_post-task writes only to AgentDB. Fix: dual-write — after AgentDB write, mirror routing decision into the JSON store with metadata.type: 'routing-decision'.
• #2776 — Statusline security segment: STALE/IN_PROGRESS branches reachable via local overlay recomputing freshness on every render from .claude/security-scans/scan-*.json. Env: RUFLO_SCAN_STALE_HOURS (24), RUFLO_SCAN_PENDING_CAP_MIN (30). STALE renders dim gray.
• #2775 — Memory store to existing key no longer dead-ends. Four layers of fix:
  1. bridgeStoreEntry uses INSERT ... ON CONFLICT with tombstone auto-resurrect; UNIQUE returns typed error instead of null (no more misleading demotion into #2735 guard).
  2. bridgeDeleteEntry runs wal_checkpoint(PASSIVE).
  3. parser.ts:applyDefaults walks command + subcommand options (root cause of --upsert default silently dropping — affected every subcommand-declared default, not just this one).
  4. memory_store MCP tool schema defaults upsert: true for CLI parity.

Investigated / not fixed

• #2774 — Reporter's diagnosis "Codex MCP generator registers management CLI instead of stdio server" appears incorrect: ruflo mcp start IS a working stdio server per v3/@claude-flow/cli/src/commands/mcp.ts (MCP Server started on stdio). Upstream d20f1323b fix(codex): ship stable Windows-safe Ruflo integration cleanly centralized the Codex MCP config in mcp-config.ts using the same command shape. A proposed swap to claude-flow-mcp was reverted during rebase. Recommend closing unless a fresh repro against 3.32.9+ is produced.
• #2786 fix-3 — bridgeRecordFeedback() calls learningSystem.recordFeedback() / .record() and reasoningBank.recordOutcome({taskId, verdict, …}) with signatures that don't exist on [email protected]'s actual API. Wrapped in silent catch. Genuine integration work — needs RL-session lifecycle management across separate CLI processes plus meaningful state/action/reward mapping. Deferred to a separate PR.

Test plan

• [x] pnpm install at repo root
• [x] cd v3/@claude-flow/security && npm run build → tsc + OAuth export verify pass
• [x] cd v3/@claude-flow/cli && npm run build → tsc exit 0
• [x] cd v3/@claude-flow/codex && npm run build → tsc exit 0
• [x] CLI test suite on fresh worktree: 91 failed / 3031 passed / 77 skipped / 3199 total — vs origin/main baseline 98 failed / same total. Net -7 failures; sampled failing tests are WASM/sharp/env issues in files this PR does not touch.
• [x] Parser tests: 55/55 pass (52 pre-existing + 3 new #2775 regression tests)
• [ ] Windows CI: exercise browser-session MCP tools and init execFileSync npx paths to confirm the shell: process.platform === 'win32' fix.
• [ ] Fresh install smoke: ruflo init in an empty dir, check .agents/skills/ruflo/ is a single ~2KB SKILL.md (not 97MB).
• [ ] Statusline cold-start: on a clean ~/.ruflo/, first ruflo hooks statusline render shows a promo row from the local seed pool.
• [ ] Encrypt-at-rest: CLAUDE_FLOW_ENCRYPT_AT_REST=1 ruflo memory store … succeeds and agentdb-memory.db appears next to memory.db.
• [ ] hooks_metrics after several hooks_post-task --store-results calls: "Agent Routing" decision count is non-zero.

Closes: #2770 #2776 #2777 #2781 #2782 #2785 #2786 (main + fix-2)
Refs: #2775 (main fix inline + parser root cause + MCP parity)
Investigation: #2774 (proposed fix reverted; diagnosis appears incorrect against current main)
Deferred: #2786 fix-3 (agentdb LearningSystem API skew — architectural)

🤖 Generated with RuFlo