ruflo v3.37.0

v3.37.0 — proxy install hardening, cloud routing disclosure, tier pinning

What's in this release

Four independently-reviewed fixes to the Meta LLM Proxy control surface (ruflo proxy ...):

• #2925 — bumps the pinned meta-proxy release from 0.4.0 to 0.7.3. The old pin predates the commit that separated authentication from cloud-routing consent (meta-proxy #60, first in v0.7.0) — on 0.4.0, even a --version probe starts the daemon and binds a port. proxy status/console guidance now also surfaces when an already-installed binary has drifted behind the current pin, with a one-line proxy update prompt.
• #2926 — proxy install on Windows no longer discards a fully signature-verified archive when PowerShell's Expand-Archive fails to autoload its module (intermittent, unrelated to the archive itself). It now falls back to tar -xf (bsdtar, ships on Windows 10+), with independent SafeExecutor allowlists per extractor and a combined error message if both fail.
• #2927 — ruflo proxy config --cloud now discloses all three things enabling cloud routing actually decides: who processes the prompt, who pays, and — previously undisclosed entirely — that the cloud plane picks a tier per prompt instead of honoring the client's requested model. New flag: ruflo proxy config --routing-mode <auto|low|mid|high> to pin a tier, matching meta-proxy's RoutingMode enum (ADR-321 rev-2/rev-3).
• #2928 — --local-only was the only documented way to leave the cloud plane, but it points at your own local backend — not passthrough (meta-proxy's own default, which uses your Claude subscription and is the only plane eligible for ADR-321's automatic quota failover). New flag: ruflo proxy config --passthrough restores the subscription plane; --cloud now remembers and reports the plane you're leaving so there's always a real "undo" command.

Versioning note

Minor bump (not patch) — #2927 and #2928 add backward-compatible CLI flags (--routing-mode, --passthrough), not just bug fixes. No breaking changes; a user who never touches proxy config sees no behavior change.

Verification

• All three packages (@claude-flow/cli, claude-flow, ruflo) published at 3.37.0 with latest/alpha/v3alpha dist-tags aligned — verified via npm view <pkg> dist-tags --json.
• 64/64 proxy-suite tests passing, tsc --noEmit clean, pnpm install --frozen-lockfile verified in the v3/ workspace.
• Each PR independently reviewed against its own claims (not just its description) before merge; one factual inaccuracy caught and fixed in #2927's disclosure text pre-merge (a "which plane you're currently on" claim that didn't hold for --local-only users).

🤖 Generated with RuFlo