# ruflo v3.38.15 — v3.38.15 — session-end state, Windows Claude launch, MCP tool filter, settings-risk scanner

- Product: ruflo (https://whatsnew.fyi/product/ruflo)
- Vendor: ruflo
- Date: 2026-08-21
- Version: v3.38.15
- Original notes: https://github.com/ruvnet/ruflo/releases/tag/v3.38.15
- Permalink: https://whatsnew.fyi/product/ruflo/releases/v3.38.15

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

- **fixed** — mcp tools now honors CLAUDE_FLOW_MCP_TOOLS environment variable when listing
- **fixed** — Claude Code launches now resolve correctly on Windows npm installs by replacing execSync with platform-aware resolveClaudeLaunchCommand
- **fixed** — hooks session-end now persists real session state including session id, duration, and task/edit/command/error metrics instead of hardcoded summary
- **security** — Added advisory scanner for untrusted .claude/settings.json hooks and permissions.allow entries in ruflo init and ruflo init --upgrade
- **security** — Fixed six concrete bypass methods for settings.json hook payload execution including intermediate-pipe-stage downloads, two-step download+exec, eval-wrapped base64, interpreter-mediated commands, absolute-path-prefixed commands, and whitespace-evasive allow rules
- **security** — Removed ANSI and control-character injection risk from advisory warning output

Bug-fix + security-hardening train: four PRs merged from external contributors and one dream cycle.

##### Fixes

- **#3060 → #3055** — \`mcp tools\` now honors \`CLAUDE_FLOW_MCP_TOOLS\` when listing (previously the env var was accepted but ignored on the list path). Thanks @dajiaohuang.
- **#3076 → #3071** — Claude Code launches now resolve correctly on Windows npm installs. Replaces the brittle \`which claude\` execSync with a platform-aware \`resolveClaudeLaunchCommand\` that follows the npm shim to the native \`claude.exe\` (or falls back to \`node <cli.js>\` for older JS installs). Thanks @dajiaohuang.
- **#3077 → #3063** — \`hooks session-end\` now persists the real session state (session id, duration, task/edit/command/error metrics from the actual run) instead of a hardcoded summary + fabricated session id. Thanks @dajiaohuang.

##### Security (Dream Cycle 2026-08-16)

- **#3044 → #3043** — Advisory scanner for untrusted \`.claude/settings.json\` \`hooks\` and \`permissions.allow\` entries that \`ruflo init\` / \`ruflo init --upgrade\` previously carried forward unexamined. Same trust shape as **CVE-2025-59536** (settings.json hook payload achieving command execution with no review step), reached via ruflo's own merge logic. Advisory-only — the merge/write behavior itself is unchanged, findings surface as CLI warnings. Hardened after an independent adversarial-critic pass found 6 concrete bypasses (intermediate-pipe-stage downloads, two-step download+exec, eval-wrapped base64, interpreter-mediated dangerous commands, absolute-path-prefixed commands, whitespace-evasive allow rules) — all fixed and pinned as a held-out regression set. Also self-identified an ANSI/control-character injection risk in the warning output and stripped it.

##### Install

- \`npx ruflo@latest\` (or \`@alpha\` / \`@v3alpha\` — all three tags aligned)

##### Merged PRs

- [#3060](https://github.com/ruvnet/ruflo/pull/3060), [#3076](https://github.com/ruvnet/ruflo/pull/3076), [#3077](https://github.com/ruvnet/ruflo/pull/3077), [#3044](https://github.com/ruvnet/ruflo/pull/3044), [#3080](https://github.com/ruvnet/ruflo/pull/3080) (release bump)

Closes #3055, #3063, #3071, #3043.

🤖 Generated with [RuFlo](https://github.com/ruvnet/ruflo)

https://claude.ai/code/session_0118jMsYhwHD5dx2vStENsEB