Release notes from ruflo
Articles about Release notes from ruflo
V3.56.9 — policy envelope metering, Codex MCP backend retired, CLI parser fixes, ruflo-mods guards
Patch release: @claude-flow/cli, claude-flow, ruflo 3.56.9 (latest, alpha, v3alpha). The bundled leaves @claude-flow/security 3.0.5 and @claude-flow/codex 3.0.5 were published standalone first, and the CLI pins them, @claude-flow/shared 3.0.5 and @claude-flow/cli-core 3.7.2 exactly. Signed helpers changed (hook-handler.cjs, re-signed in #4096).
V3.56.8 — shared 3.0.4 pinned, coverage-gaps fixes, TUI page bar
Patch release: @claude-flow/cli, claude-flow, ruflo 3.56.8 (latest, alpha, v3alpha). The CLI now pins @claude-flow/shared 3.0.4 (3.56.7 still pinned 3.0.3). No other published package changed since 3.56.7; signed helpers did not change. Fixed @claude-flow/shared 3.0.4: the RVF event log repairs an incomplete or damaged tail before appending (#4031, @rudycelekli). A clean install can import ., ./core and ./mcp because zod and express are now declared, and the tarball no longer ships compiled tests (#4089,
Ruflo-console 0.43.0: Orbital look and Theme Studio
ruflo-console 0.43.0: optional Orbital look and Theme Studio Classic BBS stays the default. Orbital is opt-in; nothing changes until you pick it. Changelog feat: an optional Orbital look: black te
V3.56.7 — ruflo tui, MCP resources, auto-memory and purge fixes, safer init --dual
Feature patch: @claude-flow/cli, claude-flow, ruflo 3.56.7 (latest, alpha, v3alpha) and @claude-flow/codex 3.0.4 (published standalone; the CLI pins it exactly). Added ruflo tui: the ruflo console in a terminal of its own (ADR-489, #4059, #4075, #4076). Six pages, opened with --view or keys 1-6: Overview, Cost, Swarm, Events, Missions (read-only) and an AI page that asks Codex (pinned 0.162.0, read-only) or OpenRouter, each question after a confirm card. --no-ai turns the AI page off; --max-spend-usd
V3.56.6 — Windows hook launch fix, SessionStart risk scanner, cli-core/shared fixes
Patch release: @claude-flow/cli, claude-flow, ruflo 3.56.6 (latest, alpha, v3alpha). The CLI now pins @claude-flow/cli-core 3.7.1 and @claude-flow/shared 3.0.3 (published earlier today). Fixed Windows hooks launch through node -e instead of cmd /c, which started an interactive cmd that executed the hook JSON payload and created stray files (#4045). Signed helpers changed and were re-signed (#4053). The settings.json risk scanner now runs on the automatic SessionStart hook; encoded-PowerShell matching is linear time (#4052,
V3.56.5 — graph header sniff keeps SQLite locks
Patch release: one fix in @claude-flow/cli. The graph-edge-writer encryption-header sniff no longer closes the raw DB file descriptor, which dropped live SQLite POSIX locks; the header is read in a bounded child process (#4044, fixes #4040). Published: @claude-flow/cli, claude-flow, ruflo 3.56.5 (latest, alpha, v3alpha). No leaf package changed since 3.56.4.
V3.56.4 — plugin-trust and helper security hardening, MCP/task fixes
Patch release: plugin-trust and helper security fixes, MCP/task fixes, Node 24 sqlite fix. Published: @claude-flow/cli, claude-flow, ruflo 3.56.4 (latest, alpha, v3alpha); leaves memory 3.0.4, integration 3.0.1, plugins 3.0.2, mcp 3.1.1, security 3.0.4. Security: placeholder (all-zero) registry trust anchor no longer vouches (#3948); plugins upgrade no longer bypasses the install gate (#3951); plugin/helper locators stop at node_modules (#3986); session helper path and module-root hardening (
@claude-flow/swarm@3.0.2: Merge pull request #3961 from ruvnet/release/swarm-3.0.2
chore(release): @claude-flow/swarm 3.0.2
V3.56.3: Merge pull request #3960 from ruvnet/release/3.56.3
release: 3.56.3 (AgentDB alpha.20, memory 3.0.3, sql.js lock guard)
V3.56.2 — task_update status validation
Patch release of @claude-flow/cli, claude-flow and ruflo. Fixed task_update accepts only the five task statuses; a task stored as complete is no longer shown as pending or re-dispatched (#3932, fixes #3931). Notes No leaf package changed since 3.56.1; only @claude-flow/cli source differs. The ruflo-console fixes merged since 3.56.1 (console 0.40.4-0.40.8: #3933,
V3.56.1 — config, policy-trust and encrypted-store fixes
ruflo 3.56.1 Patch release: bug fixes only. Published as @claude-flow/cli, claude-flow and ruflo 3.56.1 (latest, alpha, v3alpha). No leaf package changed since 3.56.0. Fixed The policy trust mirro
V3.56.0: Merge pull request #3916 from ruvnet/feat/release-3.56.0-batch
release: 3.56.0 (hardening and correctness batch; memory 3.0.2, security 3.0.3)
V3.55.0 — MCP HTTP auth gate, hive gating, policy ledger anchor
Ruflo 3.55.0 Minor release. It contains one security behaviour change that can break existing setups: ruflo mcp start -t http on a non-loopback host now refuses to start without a token. Security
V3.54.1 — piped output, session export and AgentDB write fixes
Ruflo 3.54.1 is a fixes release: @claude-flow/cli, claude-flow and ruflo all at 3.54.1. @claude-flow/shared 3.0.1 was published first. Fixes (npm packages) #3851: piped output (ruflo ... | consumer) is no longer cut at 64 KiB. stdio is made blocking for pipes. Not tested on Windows. #3845: session export --compress now writes real gzip, and import detects it by magic bytes. Thanks @rudycelekli (PR
V3.54.0 — console 0.35.0, measured control plane, recall log
Ruflo 3.54.0 Console 0.35.0 Layout fixes on the Workflows page: breadcrumbs, a clipped run id, button rows and the tab row. Replay now plays on its own clock. The control plane is now measured (Cl
V3.53.0 - console 0.34.0: intelligence views, workflows board, control plane, mission autopilot
ruflo 3.53.0 The npm packages (@claude-flow/cli, claude-flow, ruflo) are a version bump plus a catalog entry. The big changes live in the console, ruflo-protector and mods plugins, which reach you through the git marketplace, not npm.
V3.52.1 — console band notices, optional Anatole protector, bun install fix
What is in 3.52.1 Plainly: on npm, this train is a version bump plus a catalog entry. The three packages (@claude-flow/cli, claude-flow, ruflo) move to 3.52.1 and the plugin catalog gains one entry. Most of what is listed below shipped through the plugin marketplace and the git repo, not through the npm tarballs.
V3.52.0: safer mods — guard holes 788 to 0, new optional abilities, Mods view in the console
In plain words This release is about making the plugin "mods" safer and easier to see. Mods are the small background helpers that watch what Claude does (for example, refusing to save a password into memory). Overnight we tested every one of them hard, fixed the weak spots, and added a few optional new abilities.
@claude-flow/codex 3.0.3 — fixes bun install of ruflo
Fix: bun add ruflo failed (#3736) ruflo 3.51.1 depends on exactly @claude-flow/codex@3.0.3, but that version had never been published to npm (latest was 3.0.2). npm did not notice because it uses a copy bundled inside the package; bun looks the version up in the registry and stopped with "missing version 3.0.3".
V3.51.1: security fixes for the pre-bash hook and MCP service destinations
Security patch for @claude-flow/cli, claude-flow and ruflo (latest, alpha, v3alpha → 3.51.1). Upgrading is recommended. PreToolUse pre-bash denials now block (#3623). When the hook handler recognis
V3.51.0: the /ruflo console
ruflo 3.51.0: the /ruflo console @claude-flow/cli, claude-flow and ruflo 3.51.0 are on npm (latest, alpha, v3alpha). /ruflo: one command for the whole cockpit The new ruflo-console mod (#3614) turns Claude Code into a live view of ruflo: Views (keys 1–9, g, q, e, m): overview with health alerts; swarm topology graph with a leader heartbeat; claims lanes with countdown rings and handoff arrows; federation map by trust level; plugin health matrix; learning pipeline; MetaHarness radar; memory; cost gauge; agent timeline;
V3.50.0: ruflo as a Claude Code mod
ruflo 3.50.0: ruflo as a Claude Code mod Install with npx ruflo@latest; @claude-flow/cli, claude-flow and ruflo are all at 3.50.0. Claude Code mods let a plugin hook the engine directly, as in-proc
V3.49.0: eleven reported issues fixed (Martin Vladimirov), Nick Ruest and drakeo338 contributions
ruflo 3.49.0 Install: npx ruflo@latest (also @claude-flow/cli@3.49.0, claude-flow@3.49.0). @claude-flow/security@3.0.1 is bundled and published standalone. This release fixes eleven issues reported by Martin Vladimirov (@martinvlad). Each report included measurements and a reproduction, and that is what made fixing them quick. It also includes two PRs from Nick Ruest (@nicholas-ruest) and one from @drakeo338. Fixes #3555: helpers load in "type":"module"
@claude-flow/plugins 3.0.1 — SQL-injection fix in the RuVector GNN SQL builders
Security fix: SQL injection in the RuVector GNN SQL builders npm install @claude-flow/plugins@3.0.1. All dist-tags (latest, alpha, v3alpha) point to 3.0.1. Who is affected: code that calls the SQL-
V3.48.0 — stable internal @claude-flow/* packages
Stable internal packages The internal @claude-flow/* packages are off the alpha line. Everything npx ruflo@3.48.0 installs now resolves to a single stable version: Package Version @claude-fl
Release v3.47.1 · ruvnet/ruflo
v3.47.1
Release v3.47.0 · ruvnet/ruflo
feat(federation): add guarded public registration and release 3.47.0
V3.46.1 — Windows browser tools no longer pass tool input through a shell
Security fix: Windows browser MCP tools Who is affected: Windows hosts running the RuFlo browser MCP tools (browser_open, browser_fill, browser_type, browser_eval and the other browser_* tools) where agent-browser is not installed globally, so the tools fall back to npx. Every published version that carries the #2770 fallback is affected, including 3.46.0. macOS and Linux were never affected.
V3.46.0 — 29 reviewed fixes, and the standalone packages that were silently skipping them
What changed 29 reviewed PRs landed together, plus the memory fix that #3352 needed. Every diff was read by a security reviewer first; the combined tree was built and tested before it merged. Fixes that were silently not working Daemon YAML config was ignored under ESM (#3420); a stale daemon state could end a fresh session (#3421). Workflow steps with hyphenated names never interpolated (
V3.45.0 — upgrades stop leaving a stale memory package behind
RuFlo 3.45.0: upgrades stop leaving a stale memory package behind Released 24 September 2026. Upgrade: npx ruflo@latest --version # should print: ruflo v3.45.0 The short version A fix that spa
V3.44.0 — the agent picker gets fixed on your machine, and gets measured
RuFlo 3.44.0: the agent picker gets fixed on your machine, and gets measured Released 23 September 2026. Upgrade: npx ruflo@latest --version # should print: ruflo v3.44.0 The short version The
Release v3.43.0 · ruvnet/ruflo
Highlights Vector search actually finds neighbours again. @ruvector/router floor raised to ^0.1.31 (#3399). Measured in ruflo’s own install on clustered data: HNSW recall@10 0.071 → 1.000. Used by
Release v3.42.5 · ruvnet/ruflo
v3.42.5 — activate reasoningBank (#3390 / #3327 Finding A)
V3.42.4 — smart search score semantics fix
What changed Fixes Finding B of #3327: memory_search({ smart: true }) was reporting SmartRetrieval’s internal RRF fusion score in the similarity field instead of the underlying retrieval relevance
V3.42.3 — Windows publish + hook-override quoting fixes
Fixes hooks: quote-aware split for RUFLO_HOOK_CLI_OVERRIDE (#3344) — the test-only CLI-override parser in plugins/ruflo-core/scripts/ruflo-hook.cjs did a naive .split(' '), which broke process.execPath into C:\Program plus stray tokens on a standard Windows Node install (C:\Program Files\nodejs\node.exe). Found while verifying #3332's Windows argv fix on a real Windows machine rather than windows-latest CI (whose hosted Node path has no space). No production impact — RUFLO_HOOK_CLI_OVERRIDE is never set outside the test harness.
V3.42.1 — SONA env-default, review batch, and reliability fixes
v3.42.1 — SONA env-default, review batch, and reliability fixes A patch release: one small feature (opt-in, fully backward-compatible) plus a batch of independently-reviewed bug fixes, a performance fix, and a dependency bump — all reviewed, tested, and merged in this pass.
V3.42.0 — Swarm, Memory & Security Reliability Batch
v3.42.0 — Swarm, Memory & Security Reliability Batch This release lands 14 fixes produced by Ruflo's own nightly "Dream Cycle" research pipeline — each one found a real bug or gap in the codebase, built a fix, proved it with before/after tests, and (in several cases) survived an independent adversarial review before merging. Nothing here is speculative: every change below has a passing regression test that failed before the fix and passes after it.
V3.41.4 — agentdb_pattern-search/store degraded-state flag
Fix agentdb_pattern-store/agentdb_pattern-search now surface degraded: true whenever the response comes from anything other than a healthy reasoningBank controller (the bridge-fallback and memory-store-fallback paths alike), instead of only in a note string a caller has no structural reason to check. Fixes #3288.
V3.41.3 — federation identity & Windows hook argument-escaping fixes
Security fix Federation event identity: fetchRecent/fetchManyOn/fetchChannel now apply the signature-verified id/pubkey/created_at after the publisher's own message content, instead of before — a publisher could otherwise put those keys in their own content and overwrite their verified identity downstream, which the swarm claims ledger (reduceClaims) trusts for release/handoff authorization.