Flowdular v0.6.2

Flowdular v0.6.2

Source commit: 1092d8e

Previous release: v0.6.1

Full comparison

Packages

Package	Version	Artifact
@flowdular/sdk	0.6.2	flowdular-sdk-0.6.2.tgz
flowdular	0.6.2	flowdular-0.6.2.tgz
create-flowdular	0.6.2	create-flowdular-0.6.2.tgz
@flowdular/sandbox	0.6.2	flowdular-sandbox-0.6.2.tgz

Changes

• fix(reference): bind the catalog reference to flowdular.tenant_id (4cfac465)
• chore(reference): keep the catalog reference as a plain in-repo module (134b2651)
• docs: stop naming the separate module repository (5f658ae8)
• fix(sandbox): give every agent turn the sandbox's own time limit (2693d8de)
• fix(sandbox): keep long transcript lines inside the chat column (e927569c)
• spec(reference): approve catalog.core 0.8.2 (0429f3f9)
• Merge pull request #132 from Flowdular/fix/catalog-reference-names (82ac3132)
• Merge pull request #133 from Flowdular/fix/sandbox-turn-time-limit (80b57a30)
• feat(sandbox): send an implementer's questions through the spec owner (ac8f5a3a)
• feat(agents): implementing roles ask instead of deciding (3d63cf90)
• feat(sandbox): fail module rules on a permission the spec does not list (a02317ef)
• docs(sandbox): describe questions an implementer asks (4514d922)
• fix(coding-agent): report an operator stop of a BYOK turn as aborted (81a6a968)
• Merge pull request #134 from Flowdular/feat/sandbox-implementation-questions (46c33e87)
• fix(sandbox): answer a reload inside the preview (9371c848)
• fix(sandbox): leave the gate verdict as the session state (59102a0a)
• fix(sandbox): inset the quality checks drawer like every other drawer (e8be22d2)
• fix(sandbox): put a question's options on their own line (ea4951b1)
• fix(sandbox): keep the verdict a turn wrote while a check ran (1c4eda71)
• Merge pull request #135 from Flowdular/fix/byok-abort-finish-reason (3d4c2bf5)
• Merge pull request #136 from Flowdular/fix/sandbox-preview-status (9a8388a5)
• fix(sandbox): route gate repairs to a role that can write the fix (a2775970)
• Merge pull request #137 from Flowdular/fix/sandbox-gate-repair-routing (28c427c6)
• fix(sandbox): resume an implementer with its answers before a repair (dd4f99b0)
• fix(sandbox): keep why a repair chain stopped in the transcript (55bdf9be)
• fix(sandbox): redact the handoff prompt before it is stored (37b4fce7)
• Merge pull request #138 from Flowdular/fix/sandbox-repair-follow-ups (7fde625b)
• fix(sandbox): stop module rules failing correct module code (3f89e34f)
• fix(sandbox): redact all transcript fields, stored and streamed (50480f39)
• Merge pull request #139 from Flowdular/fix/sandbox-module-rules-false-positives (91c934fd)
• Merge pull request #140 from Flowdular/fix/sandbox-transcript-redaction (b8a2a34c)
• release: 0.6.2 (b9b4e3ee)
• Merge pull request #141 from Flowdular/release/0.6.2 (1092d8e8)

All 33 commits, their complete messages and the file summary are included in the attached CHANGELOG.md.

Verify downloaded assets

Download all release assets into one directory. With Cosign installed, run:

cosign verify-blob SHA256SUMS --bundle SHA256SUMS.sigstore.json \
  --certificate-identity 'https://github.com/Flowdular/flowdular/.github/workflows/platform-release.yml@refs/heads/main' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' \
  --certificate-github-workflow-sha '1092d8e8ad3e8291a10b6a3b3a62a4c2752c6910'
sha256sum --check SHA256SUMS

Signatures cover the listed artifacts through SHA256SUMS. Git tags and GitHub-generated source downloads are not signed by this workflow; use the attached signed source archive. The release workflow publishes the verified npm packages in a later job for non-draft releases.