Ruflo 3.56.7 puts the console in your terminal and asks before every AI request

What changed

Ruflo 3.56.7, released late on October 11, adds ruflo tui: the Ruflo console in a terminal of its own. It has six pages. Overview, Cost, Swarm, Events and Missions only read state. The sixth, an AI page, can send a question to Codex or OpenRouter, but only after it has shown you a confirm card for that question.

Codex questions go to a pinned Codex 0.162.0 in read-only mode. OpenRouter questions stop being sent once the spend OpenRouter reports reaches --max-spend-usd, which defaults to 0.5. That cap relies on the provider's reported figure. It is not a guaranteed billing limit. --no-ai turns the AI page off, and --plain prints one frame and exits, for scripts.

The same release changes what init --dual writes for Codex (PR #4070). A newly generated .codex/config.toml now uses the workspace-write sandbox, on-request approvals and cached web search. The old full-access values need an explicit --codex-trust full or RUFLO_CODEX_TRUST=full. An existing .codex/config.toml is never rewritten, even with --force. If it already uses danger-full-access, Ruflo only prints a warning that suggests tightening it.

What the published packages contain

• npm lists @claude-flow/cli, ruflo and claude-flow at 3.56.7, published 2026-10-11 between 22:48:54Z and 22:52:49Z, and @claude-flow/codex at 3.0.4, published standalone at 20:55:48Z. All four are tagged latest.
• The 3.56.7 CLI tarball contains the tui command and the bundled console at plugins/ruflo-console/dist/tui.mjs. Its help text names the pinned Codex 0.162.0, the read-only mode, the confirm card, --no-ai and the provider-reported spend stop.
• The CLI depends on @claude-flow/codex at exactly 3.0.4, and ruflo depends on @claude-flow/cli at exactly 3.56.7.
• The Codex 3.0.4 tarball's initializer writes the standard trust values for new files, and keeps an existing .codex/config.toml without rewriting it.

PR #4070 was written while Codex 3.0.4 was still unpublished. The registry now shows it published, so this story relies on the registry record, not the PR's earlier status.

Also in this release

• The CLI's MCP server gains a resources capability, and a three-host integration loop (Claude Code, Codex, OpenRouter) is added with ADR-490 and ADR-491 (PR #4068).
• Auto-memory hooks now deliver their subcommand, sync sees learnings, worktrees share the main memory directory and store writes are atomic (PR #4071). The release notes also list memory purge and recording fixes. These are scoped fixes, not a new memory system.
• Console 0.42.7 is a marketplace plugin, not a separate npm package.
• Known: nested better-sqlite3 11.x copies under agentdb and agentic-flow still ship. The release says doctor warns on affected Node versions.

This release is separate from the 3.56.5 SQLite header-read fix, which is covered in its own story. The open Theme Studio pull request (#4079, a draft at review time) is not part of 3.56.7.

Get started

Use Node 20 or later in a disposable project. The first command only asks the registry for the published version and should print 3.56.7. The second is the release's documented script-friendly form: it prints one plain console frame with the AI page off.

Documentation-verified only. We inspected the published package files but did not install this release, run these commands or send any AI request.

npm view ruflo@3.56.7 version

npx ruflo@3.56.7 tui --plain --no-ai | head -40

The terminal console needs no MCP configuration. If you configured Ruflo's MCP server for an earlier release, that setup is unchanged.

Use it today

Input: a project where Ruflo already runs. Workflow: open ruflo tui, move between pages with keys 1 to 6, and read cost, swarm and mission state in a standalone terminal. Output: a terminal view of the project's recorded state. Use --no-ai when you want the AI page disabled.

Experimental commentary — acceptance test

One idea is to use --plain frames as a lightweight CI snapshot of swarm state. Acceptance: --plain exits 0 in CI, and the job sends no network request to a model provider. Limitation: the frame layout is not a documented stable format, so a parser could break in a later release.

Limits and verification

• Sources: release notes, merged PR records, pinned source files, and the npm registry records and tarballs, inspected read-only on 2026-10-12.
• The confirm card and read-only Codex mode reduce accidental requests. They do not make every prompt or provider safe, and the spend stop depends on what the provider reports.
• The newsroom ran no console session, AI request, test suite or workload.