How to switch the Codex config that ruflo init wrote to safe defaults

Ruflo (formerly claude-flow) is an open-source tool that adds agent swarms, memory and hooks to Claude Code and Codex. Starting with 3.57.0, released October 17, the .codex/config.toml that ruflo init writes has new defaults. The old file turned off the sandbox (danger-full-access), never asked for approval (never) and enabled live web search (live). It now writes the standard level below.

sandbox_mode = "workspace-write"
approval_policy = "on-request"
web_search = "cached"

1. For a new project, just run init. It prints which trust level it wrote.

npx ruflo@latest init

1. An existing .codex/config.toml is never rewritten, not even with --force, so projects initialized with an older version keep the permissive settings. Running init again flags that file; open it and change it to the three lines above.

2. If you really need the old allow-everything setup, ask for it explicitly.

npx ruflo@latest init --codex-trust full

Setting the environment variable RUFLO_CODEX_TRUST=full does the same. The values follow the Codex config reference: workspace-write allows writes only inside the workspace, on-request asks for approval when needed, and cached searches an OpenAI-maintained index without going out to the live web.