OpenFlow v1.1.0

Everything in this release is in packages/flow. No upstream OpenCode package is
modified, so merging upstream stays clean.

MCP servers

A new MCP panel manages the project's servers — local stdio and remote http/sse —
writing them into the project's own opencode.json rather than a hidden OpenFlow
file. Each node picks which servers it may reach; the choice compiles to
<server>_* permission rules on that node's generated agent, so the allowlist is
enforced at runtime instead of being advisory.

Those rules can only be built from the project's server list, so OpenFlow now
refuses to write agents while that list is unreadable rather than emitting agents
with no rules at all — the case that would have quietly handed every node access
to servers it had been denied.

Runs

Prompt attachments: files and images can be attached to a whole run or to a single
card, and are carried as data: URLs, so no upload endpoint is involved. Models
that cannot read images are detected from the model's declared input capabilities
and told what was withheld instead of being handed something they will hallucinate
over.

In-run questions: a node can stop and ask, and the canvas surfaces a modal that
blocks until you answer. Opt in per node. The timeout rejects rather than guesses —
an invented answer would be treated as your intent, which is worse than none.

Runs also merge the current agent block into opencode.json before starting, so a
node never runs against a def that was edited but never merged. The write is
skipped entirely when nothing changed, so repeated runs neither rewrite the file
nor leave a backup.

Canvas and project

• Skills can be authored from the canvas, written to .openflow/skills/<name>/SKILL.md
  and self-registered in the project config.
• The project folder can be picked through the OS file explorer.
• OpenFlow reopens the project folder you had open, and within it the pipeline you
  were last editing.
• Panel buttons no longer overflow their container.

Note

OpenFlow is an independent project and is not affiliated with, endorsed by, or
sponsored by the OpenCode project or its maintainers.