Flowdular v0.4.3

Flowdular v0.4.3

Source commit: 894e95e

Previous release: v0.4.1

Full comparison

Packages

Package	Version	Artifact
@flowdular/sdk	0.4.3	flowdular-sdk-0.4.3.tgz
flowdular	0.4.3	flowdular-0.4.3.tgz
create-flowdular	0.4.3	create-flowdular-0.4.3.tgz
@flowdular/sandbox	0.4.3	flowdular-sandbox-0.4.3.tgz

Changes

• fix(database): name a locked or unreadable local database (ff979204)
• Merge pull request #63 from Flowdular/fix/local-database-guard (9f0ab43b)
• feat(spec): declare a feature flag, and use one (35486fcb)
• Merge pull request #64 from Flowdular/feat/spec-feature-flags (7a667184)
• feat(auth): configure the SMTP relay from module settings (7e799be4)
• test(auth): cover the mail settings refusals, precedence and test route (d86e147c)
• fix(auth): refuse a relay URL whose credentials are not percent-encoded (9887af61)
• fix(auth): keep the test route's refusal to the mail port's own words (5600ffae)
• fix(create-flowdular): retarget the example module at auth.core 0.14 (8b17f589)
• test(agents): stub auth.core at the version the dependency range names (95966b99)
• Merge pull request #65 from Flowdular/feat/mail-settings-ui (801bfbae)
• fix(ui): line a settings group head up with its rows (6e05ae6e)
• Merge pull request #66 from Flowdular/fix/flags-group-header (7c59ab4d)
• spec(agents): the workspace assistant as a thread of runs (ddcf1167)
• feat(agents): store assistant threads and turns (8d480737)
• test(agents): cover the assistant scenarios end to end (b54887f7)
• feat(auth): seed and backfill the workspace assistant scope (95e7ecf4)
• fix(agents): write a settled run onto its assistant turn (dd0c11e4)
• chore(agents): keep the assistant translation namespace for the client (f94b7d9f)
• perf(agents): index the turn a settled run is written onto (a41f3b71)
• test(agents): cover the assistant conversation data class (a9d3ed28)
• fix(agents): keep the new spec invariant a YAML string (21249f5d)
• Merge pull request #67 from Flowdular/feat/platform-assistant (4f3a36fd)
• feat(auth): let an API token write and bind it to browser origins (9bec9c85)
• feat(core): describe the served API and open it to a named browser origin (c16a564b)
• feat(system): show the deployment's API in Administration (dc21bab9)
• feat(core): serve the API document from a generated application too (f76fc54a)
• feat(auth): bound what an API token may spend per minute (46b876e5)
• feat(agents): the workspace assistant in the header (#68) (8f72e986)
• fix(database-testing): run its own suites on the preset it publishes (60cf217f)
• fix(sandbox): read a denied SDK lookup as an absent SDK (d85bb715)
• Merge pull request #69 from Flowdular/core/server-public-api-openapi (ce280cfb)
• feat(design): design a screen as a preview the platform dresses (b8018e36)
• Merge pull request #70 from Flowdular/core/ui-preview-harness (0f47ae68)
• fix(agents): give the lease renewal case room to be measured (814ed959)
• feat(design): show a preview to the person who asked for it (71f25595)
• Merge pull request #71 from Flowdular/fix/agents-action-lease-flake (dede4e87)
• Release 0.4.2 of the SDK, the CLI, the generator and the sandbox (86cf6ccb)
• chore(release): keep every place that carries the version in step (5ae99fbd)
• fix(cli): translate every library the SDK publishes into a scaffolded module (13da7a63)
• Merge pull request #72 from Flowdular/release/0.4.2 (ce540f67)
• fix(web): stop a development page painting before its own stylesheets (7b08ddcb)
• feat(web): mount a module site from the command line, at the address it needs (b477bc5c)
• Merge pull request #73 from Flowdular/core/cli-web-mount (329e4443)
• Release 0.4.3 of the SDK, the CLI, the generator and the sandbox (91ee36ab)
• Merge pull request #74 from Flowdular/release/0.4.3 (894e95e0)

All 46 commits, their complete messages and the file summary are included in the attached CHANGELOG.md.

Verify downloaded assets

Download all release assets into one directory. With Cosign installed, run:

cosign verify-blob SHA256SUMS --bundle SHA256SUMS.sigstore.json \
  --certificate-identity 'https://github.com/Flowdular/flowdular/.github/workflows/platform-release.yml@refs/heads/main' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' \
  --certificate-github-workflow-sha '894e95e0f6bd49aa4390abb813b2a4464ca39580'
sha256sum --check SHA256SUMS

Signatures cover the listed artifacts through SHA256SUMS. Git tags and GitHub-generated source downloads are not signed by this workflow; use the attached signed source archive. This action does not publish to npm.