Flowdular v0.6.1

Flowdular v0.6.1

Source commit: 0f14ceb

Previous release: v0.6.0

Full comparison

Packages

Package	Version	Artifact
@flowdular/sdk	0.6.1	flowdular-sdk-0.6.1.tgz
flowdular	0.6.1	flowdular-0.6.1.tgz
create-flowdular	0.6.1	create-flowdular-0.6.1.tgz
@flowdular/sandbox	0.6.1	flowdular-sandbox-0.6.1.tgz

Changes

• ui: let a single row action scroll with a narrow table (c3f6fd58)
• spec(system): draft 0.9.2 operator-only platform settings (55906a50)
• spec(system): approve 0.9.2 (4ff73863)
• system: change platform settings only from the operator workspace (7deef88f)
• docs: name the operator workspace that changes platform settings (97bfdd79)
• infra: pass FD_OPERATOR_TENANT to the app container (1a28fdcc)
• test(system): keep the operator workspace tests independent (ce8e8c3c)
• Merge pull request #99 from Flowdular/fix/tablecard-mobile (0b175a4b)
• Merge pull request #98 from Flowdular/fix/settings-platform-scope (105318bc)
• spec(system): draft 0.9.3 operator workspace recorded by first-run setup (3c31777e)
• spec(auth): draft 0.14.8 with the owner's operator answers (061031ad)
• platform: let the setup done page request its restart (26718f3f)
• sandbox: read the platform mode from its first answer (bdb38c40)
• sandbox: record the platform address the launcher starts (a967fa8c)
• spec(auth,system): approve auth.core 0.14.8 and system.core 0.9.3 (49ebe8c9)
• test: let the Chrome helper open a served page and type into it (7ace3b7d)
• fix: refuse invalid workspace address characters while typing (92fe8723)
• sandbox: send a refused questions block back to the specialist (a1c151a3)
• fix(sandbox): stop the launcher's platform when the launcher dies (e4c65c0c)
• sandbox: treat an exited platform process group as stopped (5df8a07d)
• sandbox: test cancelling startup before the platform answers (1b1329cd)
• sandbox: move only the credential the launcher collected (ff805d4b)
• sandbox: approve only the specification text the operator reviewed (dd2092a8)
• sandbox: follow session changes made from another tab or browser (bc802317)
• Merge remote-tracking branch 'origin/main' into fix/sandbox-session-fixes (539b48ee)
• fix: clear the CI audit for source-map-js (c3300627)
• Merge pull request #101 from Flowdular/fix/ci-audit-source-map-js (adc52628)
• coding-agent: give the business manager room for the questions limits (450ba8b7)
• Merge remote-tracking branch 'origin/main' into fix/sandbox-platform-restart (3f04303c)
• Merge origin/main into fix/setup-slug-typing (0c8d55da)
• Merge remote-tracking branch 'origin/main' into fix/sandbox-session-fixes (1a29b777)
• Merge pull request #102 from Flowdular/fix/sandbox-platform-restart (539068c8)
• Merge pull request #100 from Flowdular/fix/setup-slug-typing (2a830c42)
• Keep a closed PostgreSQL connection from crashing the process (09f79fca)
• Keep a dropped connection from crashing deploy start vercel (5bc4ff6c)
• Merge remote-tracking branch 'origin/main' into fix/setup-operator-tenant (aed5de4a)
• Merge remote-tracking branch 'origin/main' into fix/sandbox-session-fixes (6d0c6fa0)
• Merge origin/main into fix/sandbox-process-leak (7958a3b1)
• auth: record the deployment's operator workspace (c48aa2e0)
• system: take the operator workspace from auth.core's record (cddd1a5a)
• platform: test that first-run setup records the operator workspace (8bb77e2e)
• docs: describe the recorded operator workspace and the override (8de81e9c)
• chore: bump auth.core to 0.14.8 and system.core to 0.9.3 (23d34951)
• chore: remove the cl script from generated apps (bcbe9136)
• Merge pull request #103 from Flowdular/fix/sandbox-session-fixes (fe48f813)
• fix: fold accented letters in the workspace address (ac942e83)
• fix(sandbox): keep the platform guard alive through stop() (0af3a478)
• Merge remote-tracking branch 'origin/main' into fix/pg-pool-idle-error (81a6e9f2)
• auth: resolve a workspace id before a slug that spells it (81ee9cde)
• Merge pull request #105 from Flowdular/fix/pg-pool-idle-error (4c12b84b)

All 179 commits, their complete messages and the file summary are included in the attached CHANGELOG.md.

Verify downloaded assets

Download all release assets into one directory. With Cosign installed, run:

cosign verify-blob SHA256SUMS --bundle SHA256SUMS.sigstore.json \
  --certificate-identity 'https://github.com/Flowdular/flowdular/.github/workflows/platform-release.yml@refs/heads/main' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' \
  --certificate-github-workflow-sha '0f14ceb7d1ace1525aebdd4a112d0cc385307fde'
sha256sum --check SHA256SUMS

Signatures cover the listed artifacts through SHA256SUMS. Git tags and GitHub-generated source downloads are not signed by this workflow; use the attached signed source archive. The release workflow publishes the verified npm packages in a later job for non-draft releases.