# ruflo v3.38.9 — v3.38.9 — path-validator symlinked-prefix fix

- Product: ruflo (https://whatsnew.fyi/product/ruflo)
- Vendor: ruflo
- Date: 2026-08-13
- Version: v3.38.9
- Original notes: https://github.com/ruvnet/ruflo/releases/tag/v3.38.9
- Permalink: https://whatsnew.fyi/product/ruflo/releases/v3.38.9

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

- **fixed** — PathValidator now canonicalizes allowed prefixes through fs.realpath at construction time, fixing path validation failures on macOS where os.tmpdir() is reached through a symlink, which was breaking ruflo proxy install

##### Fixes

**#3010 — `PathValidator` rejected everything under a symlinked prefix, breaking `ruflo proxy install` on macOS.** `validate()` canonicalized the candidate path through `fs.realpath` but the constructor only ever `path.resolve()`d the allowed prefixes — so on macOS, where `os.tmpdir()` is reached through a symlink (`/var` → `/private/var`), the realpath'd candidate could never match the non-realpath'd prefix, and every path under it — including the prefix's own contents — was rejected as "outside allowed directories." Download and Ed25519 signature verification both succeeded during proxy install; it then failed on this defense-in-depth path check. Fixed by realpath-ing prefixes at construction time too, with the same ENOENT-tolerant fallback `validate()` already uses for candidates.

##### Links

- PR: [#3013](https://github.com/ruvnet/ruflo/pull/3013) (#3010)
- Previous release: [v3.38.8](https://github.com/ruvnet/ruflo/releases/tag/v3.38.8) (#2962 — provider/model config propagation)