# ruflo v3.37.0 — v3.37.0 — proxy install hardening, cloud routing disclosure, tier pinning

- Product: ruflo (https://whatsnew.fyi/product/ruflo)
- Vendor: ruflo
- Date: 2026-08-11
- Version: v3.37.0
- Original notes: https://github.com/ruvnet/ruflo/releases/tag/v3.37.0
- Permalink: https://whatsnew.fyi/product/ruflo/releases/v3.37.0

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

- **changed** — Bumped the pinned meta-proxy release from 0.4.0 to 0.7.3 to separate authentication from cloud-routing consent
- **changed** — proxy status and console guidance now surface when an already-installed binary has drifted behind the current pin with a one-line proxy update prompt
- **fixed** — proxy install on Windows no longer discards a fully signature-verified archive when PowerShell's Expand-Archive fails to autoload its module, and now falls back to tar -xf with independent SafeExecutor allowlists per extractor
- **added** — ruflo proxy config --cloud now discloses who processes the prompt, who pays, and that the cloud plane picks a tier per prompt instead of honoring the client's requested model
- **added** — New flag ruflo proxy config --routing-mode <auto|low|mid|high> to pin a tier, matching meta-proxy's RoutingMode enum
- **added** — New flag ruflo proxy config --passthrough to restore the subscription plane and enable automatic quota failover
- **changed** — ruflo proxy config --cloud now remembers and reports the plane you're leaving so there's always a real undo command

#### v3.37.0 — proxy install hardening, cloud routing disclosure, tier pinning

##### What's in this release

Four independently-reviewed fixes to the Meta LLM Proxy control surface (`ruflo proxy ...`):

- **[#2925](https://github.com/ruvnet/ruflo/pull/2925)** — bumps the pinned meta-proxy release from `0.4.0` to `0.7.3`. The old pin predates the commit that separated authentication from cloud-routing consent (meta-proxy #60, first in v0.7.0) — on `0.4.0`, even a `--version` probe starts the daemon and binds a port. `proxy status`/console guidance now also surfaces when an already-installed binary has drifted behind the current pin, with a one-line `proxy update` prompt.
- **[#2926](https://github.com/ruvnet/ruflo/pull/2926)** — `proxy install` on Windows no longer discards a fully signature-verified archive when PowerShell's `Expand-Archive` fails to autoload its module (intermittent, unrelated to the archive itself). It now falls back to `tar -xf` (bsdtar, ships on Windows 10+), with independent `SafeExecutor` allowlists per extractor and a combined error message if both fail.
- **[#2927](https://github.com/ruvnet/ruflo/pull/2927)** — `ruflo proxy config --cloud` now discloses all three things enabling cloud routing actually decides: who processes the prompt, who pays, and — previously undisclosed entirely — that the cloud plane picks a tier per prompt instead of honoring the client's requested model. New flag: `ruflo proxy config --routing-mode <auto|low|mid|high>` to pin a tier, matching meta-proxy's `RoutingMode` enum (ADR-321 rev-2/rev-3).
- **[#2928](https://github.com/ruvnet/ruflo/pull/2928)** — `--local-only` was the only documented way to leave the cloud plane, but it points at your own local backend — not `passthrough` (meta-proxy's own default, which uses your Claude subscription and is the only plane eligible for ADR-321's automatic quota failover). New flag: `ruflo proxy config --passthrough` restores the subscription plane; `--cloud` now remembers and reports the plane you're leaving so there's always a real "undo" command.

##### Versioning note

Minor bump (not patch) — #2927 and #2928 add backward-compatible CLI flags (`--routing-mode`, `--passthrough`), not just bug fixes. No breaking changes; a user who never touches `proxy config` sees no behavior change.

##### Verification

- All three packages (`@claude-flow/cli`, `claude-flow`, `ruflo`) published at 3.37.0 with `latest`/`alpha`/`v3alpha` dist-tags aligned — verified via `npm view <pkg> dist-tags --json`.
- 64/64 proxy-suite tests passing, `tsc --noEmit` clean, `pnpm install --frozen-lockfile` verified in the `v3/` workspace.
- Each PR independently reviewed against its own claims (not just its description) before merge; one factual inaccuracy caught and fixed in #2927's disclosure text pre-merge (a "which plane you're currently on" claim that didn't hold for `--local-only` users).

🤖 Generated with [RuFlo](https://github.com/ruvnet/ruflo)