v0.10.1

[0.10.1] — 2026-09-08

Changed

• A self-hosted installation now serves one workshop, as the licence describes.
  The first sign-up creates the workshop with no trial and no quotas (plan
  enterprise); the database refuses a second workshop and the sign-in page hides
  registration once one exists. The hosted service marks itself with the vault
  secret hosted_mode and keeps plans, trials and quotas.
• Removed every mention of a Premium edition from the app, README, licence notes
  and website; the commercial licence applies to multi-site use and offering the
  app as a service. Real customer names in design-kit demo data were replaced, and
  the archived pre-consolidation migrations and QA screenshots left the tree.
• Removed the OpenTrace tooling, the Makefile and one-off bootstrap scripts;
  npm run deploy:hosted rolls out migrations, Edge Functions and the Vercel
  frontend in order from the repository root.

Fixed

• dispatch_webhook is no longer executable by anonymous or authenticated API
  clients; only the database triggers and the service role can emit signed events.
• MCP batch completion starts unstarted operations before finishing them, keeps
  completion notes, and reports how far a batch got on failure.

Upgrade notes

• Apply 20260908110000 before deploying this frontend. On the hosted project run
  SELECT vault.create_secret('true', 'hosted_mode'); first; self-hosted
  installations need nothing and keep their existing workshop.

Commit: eda2e42815963e5e2fb66212ee1a835ccfe7eef6

Image: ghcr.io/sheetmetalconnect/eryxon-flow@sha256:c5d36b0525cba384d275553a220d525f9e850d32904074bb73ad978eb206af3b

Production deployment: false