v1.10.0

Added

• Admin: a company's queue breakdown on the dashboard shows its waits by
  hour of the day, in your own time zone: for each hour, how many of the
  sessions that joined the queue then waited, and their p95. Its days are in
  your time zone too, and opening a day shows that day's hours.
• Sign-in & onboarding: the hosted product publishes its Terms of Service,
  Terms of Use and Privacy Policy at /legal, linked from the sign-in page and
  the app's footer. Everyone accepts the Terms of Use the first time they sign
  in, and whoever creates a workspace accepts the Terms of Service for their
  company on the signup form; a company that has not accepted them asks its next
  admin to. Publishing a new version of either asks again. A record of each
  acceptance, naming who accepted and for which company, is kept after that
  person or company is deleted. Self-hosted and AWS Marketplace installations
  neither publish nor ask.
• Workflows: a session in the workflow builder has a Reasoning Effort
  next to its model, and the new-session form has one too. It appears once a
  model is chosen (a level needs an explicit runtime and model), offers only the
  levels the chosen runtime and model take, and is disabled, with the reason,
  where they take none. Unset keeps the CLI's own default. The
  create_workflow_step and update_workflow_step tools accept
  reasoning_effort and preferred_model, and get_workflow_step returns
  them.

Changed

• Workflows: leaving the workflow builder with unsaved changes — by a link,
  browser Back or Forward, signing out, reloading or closing the tab — asks
  first, in the same dialog the rest of the app uses, and offers Save next
  to Discard.
• Settings: project settings ask before you leave with unsaved changes,
  and can save them from the question.
• Company settings: the general settings and a new SSO connection ask
  before you leave with unsaved changes; the general settings can save them
  from the question.
• Profile: your name and language, password and MCP tools ask before you
  leave with unsaved changes.
• Triggers & gates: closing the trigger panel, or leaving the page, with an
  edited trigger asks before throwing the edits away.
• Tasks: the new-task drawer and a comment being written or edited ask
  when you leave the page, not only when you close them.
• Sign-in & onboarding: /privacy-policy and /terms-of-service redirect to
  /legal/privacy_policy and /legal/terms_of_service.

Fixed

• Wrappers: secrets chosen on a wrapper's Secrets tab are now saved.
  Before, saving without uploading a file silently dropped them, so the
  wrapper's container never received them.
• Sessions & Runs: a session secret no longer shows in a session's terminal
  log when the agent's terminal splits it with colours or wraps it onto the next
  line, as it does when previewing a written file. The stored log, the log replay
  and get_session_log all mask it. A terminal log stored earlier is masked when
  it is read, as long as the secret still has the same value.
• Sessions & Runs: logs an agent's CLI writes itself, such as Claude Code's
  transcript, are masked before they are stored. Before, that transcript (open
  only to platform administrators) kept session secrets in plain text.
• Connectors: closing a connector's install drawer from Browse
  connectors — ✕, Cancel or Escape — goes back to the catalog instead of
  closing it as well. Installing a connector still closes both.
• Templates: exporting a project whose hand-added connector launches an
  unpinned package (npx some-mcp with no version) now stops and names the
  connector to pin. Before, the export went through and every install of it
  failed at the last step.
• Templates: a template with a required setting that has no default can be
  installed from its install page again. The page shows what the install will
  create and keeps Install disabled until every required setting is filled
  in. Before, it said the template could not be installed and offered no button.
• Templates: tables in a template's Readme and Setup tabs and in the setup
  notes of its install checklist render as tables. Before, they showed as raw
  | … | text.

Images

Published as ghcr.io/aixlehq/flow-<name>:1.10.0: flow-web, flow-otlp-ingest, flow-agent-base-core, flow-claude-code, flow-cursor-cli, flow-codex, flow-gemini-cli, flow-antigravity-cli, flow-grok, flow-kiro-cli. Web 1.10.0 launches the agent images of the same version.

What's Changed

• docs(runners): record the decisions from task 4's review by @aixle-com[bot] in #627
• feat(agents): reasoning-effort setting on workflow steps and sessions by @aixle-com[bot] in #616
• feat(runners): the runner gateway, environments and credentials, tokens and manual registration by @aixle-com[bot] in #628
• feat(runners): the operations queue, the ops long-poll and op results by @aixle-com[bot] in #629
• docs(runners): the runner protocol spec and the v1 conformance fixtures, run by the gateway's tests by @aixle-com[bot] in #630
• fix(templates): refuse an unpinned stdio launch line before install by @artempartos in #631
• feat(admin): show a company's waits by hour of the day by @artempartos in #632
• feat(legal): publish the SaaS legal documents and record their acceptance by @artempartos in #633
• fix(templates): plan the install page before required settings are typed by @artempartos in #634
• feat(forms): ask about unsaved changes on every way out of a form by @dvislov in #635
• fix(templates): render markdown tables in a template's readme and setup notes by @artempartos in #639
• fix(wrappers): save a wrapper's secrets when no file is uploaded by @artempartos in #638
• feat(legal): keep acceptance evidence and link the documents in footers by @artempartos in #640
• fix(sessions): mask secrets a terminal splits or a stream fragments by @artempartos in #641
• chore(release): 1.10.0 by @artempartos in #642

Full Changelog: v1.9.0...v1.10.0