Repository navigation
Flowdular v0.5.0
Flowdular v0.5.0
Source commit: d65b299
Previous release: v0.4.3
Packages
| Package | Version | Artifact |
|---|---|---|
| @flowdular/sdk | 0.5.0 | flowdular-sdk-0.5.0.tgz |
| flowdular | 0.5.0 | flowdular-0.5.0.tgz |
| create-flowdular | 0.5.0 | create-flowdular-0.5.0.tgz |
| @flowdular/sandbox | 0.5.0 | flowdular-sandbox-0.5.0.tgz |
Changes
- feat(branding): brand the backoffice from the platform settings (#75) (6ba1cbc5)
- core(ai-provider): add the typed decision port (fb25e97e)
- fix(cli): let migrate-state run when both state roots exist (32389696)
- feat(create-flowdular): ship the sandbox, a model key and the role subagents (e977b732)
- feat(sandbox): read a model key from the workspace and classify with decisions (1c5fb39a)
- feat(agents,workflows): typed decisions behind a workspace flag (01d1a510)
- fix(create-flowdular): declare the decision capability in the template composition (f81c5d91)
- fix(branding): close the three notes the branding review left open (#77) (e3532a54)
- Merge pull request #76 from Flowdular/feat/core-typed-decisions (d408c49d)
- feat(docs): render handbook markdown into branded print-ready HTML (7d3dfe07)
- feat(sandbox): frozen evaluation suite for the implementation skills (6858941d)
- feat(ui): three-bar brand mark (8c29e974)
- Merge pull request #79 from Flowdular/feat/three-bar-brand-mark (3c04bfe2)
- Merge pull request #78 from Flowdular/feat/evals-and-doc-pipeline (9659135c)
- feat(sandbox): close the containment gaps and gate eject on the module rules (0205547d)
- feat(sandbox): make the recorded approval unforgeable and bound the transcript (7969c600)
- feat(sandbox): check the build against the approved specification (6d87ef16)
- feat(sandbox): create a workspace when there is none (524d13a1)
- fix(.ai): correct the API names and rule numbers the skills cite (af5d5fd2)
- docs: showcase Flowdular with a product demo (0ac46300)
- fix: restore CI audit and SDK consumer smoke (0fa1aa9d)
- fix(sandbox): a slow preview reports a slow preview (e35a8c37)
- feat(sandbox): prepare its own platform access and start the application (e9447091)
- fix(sandbox): provision before the application holds the database (a59978e9)
- feat(sandbox): provision inside the application boot instead of a second process (44119d1f)
- fix(sandbox): set the provision request before the application is spawned (bcdccbfc)
- fix(sandbox): a valid operator address and a non-fatal provision (f0427f39)
- fix(sandbox): mint one sandbox credential per workspace (064f831b)
- fix(sandbox): mark provisioning separately from the credential it writes (40002d1f)
- feat(sandbox): the business flow needs no setup steps (60067671)
- fix(database): release the auth lease the sandbox commands were leaking (7975b0f7)
- fix(modules): give back every lease when a module command fails part way (5ce27782)
- feat(kernel): a declared lifecycle is now enforceable (ad5570e2)
- fix(sandbox): do not fail a turn because pnpm restamped its own lockfile (cc844474)
- fix(sandbox): a directory pnpm created is not the model writing outside its role (f06d165b)
- fix: clear the CI audit and update the sandbox consumer check to the new contract (f4e77059)
- fix(smoke): wait for the sandbox connection instead of asserting it (b7aa8463)
- fix(smoke): the packed consumer has no application to connect to (3232efc1)
- fix(sandbox): serve the dashboard before the application boots (70542f21)
- fix(sandbox): the deferred platform startup referenced an undeclared binding (b2f0b12b)
- fix(sandbox): a refresh re-reads the credential the launcher wrote (259533e6)
- fix(cli): a scaffolded lifecycle declares the kernel its guard imports (f5be922b)
- release: 0.5.0 (d65b2998)
All 43 commits, their complete messages and the file summary are included in the attached CHANGELOG.md.
Verify downloaded assets
Download all release assets into one directory. With Cosign installed, run:
cosign verify-blob SHA256SUMS --bundle SHA256SUMS.sigstore.json \
--certificate-identity 'https://github.com/Flowdular/flowdular/.github/workflows/platform-release.yml@refs/heads/main' \
--certificate-oidc-issuer 'https://token.actions.githubusercontent.com' \
--certificate-github-workflow-sha 'd65b299803dba4f3740d801958c77aa576900ff4'
sha256sum --check SHA256SUMSSignatures cover the listed artifacts through SHA256SUMS. Git tags and GitHub-generated source downloads are not signed by this workflow; use the attached signed source archive. This action does not publish to npm.