v0.3.14

@workglow/browser-control

Features

• add bugs URL to package.json files across all packages and providers

@workglow/task-graph

Features

• add bugs URL to package.json files across all packages and providers

Bug Fixes

task-graph,storage

• cache restart-resume + SharedInMemory sync barrier (#552)

Documentation

task-graph

• fix TaskOutputTabularRepository README examples for new constructor signature

@workglow/javascript

Features

• add bugs URL to package.json files across all packages and providers

Bug Fixes

• tsgo issue

@workglow/ai

Features

• add typecheck budget guard to catch type-instantiation regressions (#555)
• add bugs URL to package.json files across all packages and providers

Bug Fixes

ai

• export ChunkRetrievalInputSchema + nightly schema-vs-type drift guard (#565)

@workglow/knowledge-base

Features

• add bugs URL to package.json files across all packages and providers

workglow

Features

• add bugs URL to package.json files across all packages and providers

@workglow/storage

Features

• add bugs URL to package.json files across all packages and providers

Bug Fixes

task-graph,storage

• cache restart-resume + SharedInMemory sync barrier (#552)

@workglow/mcp

Features

• add bugs URL to package.json files across all packages and providers

Bug Fixes

mcp

• thread run-scoped registry through discoverSchemas (#577)
• resolve auth credentials through the run-scoped registry

@workglow/util

Features

• add bugs URL to package.json files across all packages and providers

@workglow/test

Features

• add bugs URL to package.json files across all packages and providers

supabase

• add Supabase vector storage with pgvector support (#578)

Bug Fixes

mcp

• thread run-scoped registry through discoverSchemas (#577)
• resolve auth credentials through the run-scoped registry

task-graph,storage

• cache restart-resume + SharedInMemory sync barrier (#552)

Tests

• pin HF router provider for tool-calling conformance tests (#564)

Chores

• update deps

Updated Dependencies

• @aws-sdk/client-sqs: ^3.1068.0
• @cloudflare/workers-types: ^4.20260612.1
• @types/dom-chromium-ai: ^0.0.17
• miniflare: ^4.20260611.0

@workglow/tasks

Features

• add bugs URL to package.json files across all packages and providers

@workglow/job-queue

Features

• add bugs URL to package.json files across all packages and providers

@workglow/indexeddb

Features

• add bugs URL to package.json files across all packages and providers

@workglow/openai

Features

• add bugs URL to package.json files across all packages and providers

@workglow/llamacpp-server

Features

• add bugs URL to package.json files across all packages and providers

@workglow/mlx

Features

• add bugs URL to package.json files across all packages and providers

@workglow/electron

Features

• add bugs URL to package.json files across all packages and providers

@workglow/ollama

Features

• add bugs URL to package.json files across all packages and providers

@workglow/node-llama-cpp

Features

• add bugs URL to package.json files across all packages and providers

@workglow/aws

Features

• add bugs URL to package.json files across all packages and providers

Chores

• update deps

Updated Dependencies

• @aws-sdk/client-sqs: ^3.1068.0

@workglow/anthropic

Features

• add bugs URL to package.json files across all packages and providers

@workglow/google-gemini

Features

• add bugs URL to package.json files across all packages and providers

@workglow/postgres

Features

• add bugs URL to package.json files across all packages and providers

@workglow/stable-diffusion-server

Features

• add bugs URL to package.json files across all packages and providers

@workglow/supabase

Features

• add bugs URL to package.json files across all packages and providers

supabase

• add Supabase vector storage with pgvector support (#578)

@workglow/playwright

Features

• add bugs URL to package.json files across all packages and providers

@workglow/sqlite

Features

• add bugs URL to package.json files across all packages and providers

@workglow/cloudflare

Features

• add bugs URL to package.json files across all packages and providers

Chores

• update deps

Updated Dependencies

• @cloudflare/workers-types: ^4.20260612.1

@workglow/huggingface-transformers

Features

• add bugs URL to package.json files across all packages and providers

@workglow/tf-mediapipe

Features

• add bugs URL to package.json files across all packages and providers

@workglow/chrome-ai

Features

• add bugs URL to package.json files across all packages and providers

Chores

• update deps

Updated Dependencies

• @types/dom-chromium-ai: ^0.0.17

@workglow/huggingface-inference

Features

• add bugs URL to package.json files across all packages and providers

@workglow/cactus

Features

• add bugs URL to package.json files across all packages and providers

@workglow/bun-webview

Features

• add bugs URL to package.json files across all packages and providers

@workglow/cli

Features

• add bugs URL to package.json files across all packages and providers

@workglow/web

Features

• add bugs URL to package.json files across all packages and providers

Chores

• update deps

Updated Dependencies

• @tailwindcss/vite: ^4.3.1
• tailwindcss: ^4.3.1

v0.3.13

@workglow/task-graph

Refactors

• optimize task output repository implementations
• update task graph wrapper registration and fix circular issues
• streamline TaskOutputTabularRepository and enhance task graph wrappers
• unify task output storage implementation
• update cache keying for private slots to use taskId

@workglow/storage

Features

• add isDurable method to in-memory storage classes

Refactors

• optimize task output repository implementations

@workglow/test

Refactors

• optimize task output repository implementations
• streamline TaskOutputTabularRepository and enhance task graph wrappers
• unify task output storage implementation
• update cache keying for private slots to use taskId

@workglow/web

Refactors

• unify task output storage implementation

v0.3.12

@workglow/browser-control

Chores

• comment review pass across packages and providers

@workglow/task-graph

Chores

• comment review pass across packages and providers

@workglow/ai

Bug Fixes

ai

• align IPv6 loopback check with isLoopbackHostname
• label-boundary match on provider base-URL host allow-list

Chores

• comment review pass across packages and providers

@workglow/knowledge-base

Bug Fixes

knowledge-base

• close obfuscated-scheme bypass in escapeLinkDestination
• escape backslashes in escapeInlineText (CodeQL #136)
• escape attacker-controlled fields in renderMarkdown

Refactors

• rework delete events

Chores

• comment review pass across packages and providers

workglow

Chores

• comment review pass across packages and providers

@workglow/storage

Bug Fixes

storage

• reject puts to credential-store sentinel key

Refactors

• rework delete events

Chores

• comment review pass across packages and providers

@workglow/mcp

Chores

• comment review pass across packages and providers

@workglow/util

Chores

• comment review pass across packages and providers

@workglow/test

Bug Fixes

storage

• reject puts to credential-store sentinel key

ai

• align IPv6 loopback check with isLoopbackHostname
• label-boundary match on provider base-URL host allow-list

Refactors

• rework delete events

Style

ai

• apply prettier formatting to baseUrlValidation tests

Tests

ai

• add IPv6 + redirect-canonicalisation localOnlyFetch tests (#543)

Chores

• update deps
• comment review pass across packages and providers
• update dependencies to latest versions

Updated Dependencies

• @aws-sdk/client-sqs: ^3.1063.0
• @cloudflare/workers-types: ^4.20260605.1
• miniflare: ^4.20260603.0

@workglow/tasks

Chores

• comment review pass across packages and providers

@workglow/job-queue

Chores

• comment review pass across packages and providers

@workglow/indexeddb

Refactors

• rework delete events

Chores

• comment review pass across packages and providers

@workglow/openai

Chores

• comment review pass across packages and providers

@workglow/llamacpp-server

Chores

• comment review pass across packages and providers

@workglow/mlx

Chores

• comment review pass across packages and providers

@workglow/electron

Chores

• comment review pass across packages and providers

@workglow/node-llama-cpp

Chores

• comment review pass across packages and providers

@workglow/aws

Chores

• update deps
• comment review pass across packages and providers
• update dependencies to latest versions

Updated Dependencies

• @aws-sdk/client-sqs: ^3.1063.0

@workglow/anthropic

Chores

• comment review pass across packages and providers

@workglow/google-gemini

Chores

• comment review pass across packages and providers

@workglow/postgres

Refactors

• rework delete events

Chores

• comment review pass across packages and providers

@workglow/supabase

Refactors

• rework delete events

Chores

• comment review pass across packages and providers

@workglow/playwright

Chores

• comment review pass across packages and providers

@workglow/sqlite

Refactors

• rework delete events

Chores

• comment review pass across packages and providers

@workglow/cloudflare

Chores

• update deps
• comment review pass across packages and providers
• update dependencies to latest versions

Updated Dependencies

• @cloudflare/workers-types: ^4.20260605.1

@workglow/huggingface-transformers

Chores

• comment review pass across packages and providers

@workglow/chrome-ai

Chores

• comment review pass across packages and providers

@workglow/huggingface-inference

Chores

• comment review pass across packages and providers

@workglow/cactus

Chores

• comment review pass across packages and providers

@workglow/bun-webview

Chores

• comment review pass across packages and providers

@workglow/cli

Chores

• update deps

Updated Dependencies

• @types/react: ^19.2.17

@workglow/web

Chores

• update deps

Updated Dependencies

• @types/react: ^19.2.17

v0.3.11

@workglow/ai

Bug Fixes

storage,ai

• SQL operator allow-list + baseURL validation + credential-store passphrase sentinel (#546)

@workglow/knowledge-base

Features

knowledge-base

• add table/list/image document node kinds, renderMarkdown (#547)

@workglow/storage

Bug Fixes

storage,ai

• SQL operator allow-list + baseURL validation + credential-store passphrase sentinel (#546)

@workglow/test

Bug Fixes

storage,ai

• SQL operator allow-list + baseURL validation + credential-store passphrase sentinel (#546)

@workglow/openai

Bug Fixes

storage,ai

• SQL operator allow-list + baseURL validation + credential-store passphrase sentinel (#546)

@workglow/anthropic

Bug Fixes

storage,ai

• SQL operator allow-list + baseURL validation + credential-store passphrase sentinel (#546)

@workglow/cli

Bug Fixes

storage,ai

• SQL operator allow-list + baseURL validation + credential-store passphrase sentinel (#546)

v0.3.10

@workglow/ai

Bug Fixes

ai

• close WHATWG canonicalisation bypass in localOnlyFetch (sec) (#542)

@workglow/storage

Bug Fixes

storage

• restore ICredentialStore contract on ServerCredentialStore (sec) (#544)
• ServerCredentialStore put-race + vault orphan on rollback failure (sec) (#540)

@workglow/test

Bug Fixes

ai

• close WHATWG canonicalisation bypass in localOnlyFetch (sec) (#542)

Chores

• update deps

Updated Dependencies

• @aws-sdk/client-sqs: ^3.1060.0
• @cloudflare/workers-types: ^4.20260603.1
• miniflare: ^4.20260601.0
• vitest: ^4.1.8

@workglow/aws

Chores

• update deps

Updated Dependencies

• @aws-sdk/client-sqs: ^3.1060.0

@workglow/supabase

Features

supabase

• introduce error handling functions for PostgREST interactions

Refactors

supabase

• streamline table existence checks in SupabaseQueueStorage, SupabaseRateLimiterStorage, and SupabaseTabularStorage

@workglow/cloudflare

Chores

• update deps

Updated Dependencies

• @cloudflare/workers-types: ^4.20260603.1

@workglow/cli

Chores

• update deps

Updated Dependencies

• commander: ^15.0.0
• ink: ^7.0.5
• react: ^19.2.7
• @types/react: ^19.2.16

@workglow/web

Chores

• update deps

Updated Dependencies

• @xyflow/react: ^12.11.0
• react: ^19.2.7
• react-dom: ^19.2.7
• @types/react: ^19.2.16
• vite: ^8.0.16

v0.3.9

@workglow/ai

Chores

• update deps

@workglow/storage

Chores

• update deps

@workglow/test

Chores

• update deps

Updated Dependencies

• @aws-sdk/client-sqs: ^3.1055.0
• @cloudflare/workers-types: ^4.20260528.1
• miniflare: ^4.20260526.0

@workglow/aws

Chores

• update deps

Updated Dependencies

• @aws-sdk/client-sqs: ^3.1055.0

@workglow/cloudflare

Chores

• update deps

Updated Dependencies

• @cloudflare/workers-types: ^4.20260528.1

@workglow/cli

Chores

• update deps

Updated Dependencies

• ink: ^7.0.4

v0.3.8

@workglow/ai

Features

• add provider runtime metadata: supportsServer and isAvailable() (#538)

Bug Fixes

• close redirect-based SSRF bypass in local provider fetches (sec) (#536)

@workglow/storage

Features

• add ServerCredentialStore for server-side credential management (#539)

@workglow/test

Features

• add provider runtime metadata: supportsServer and isAvailable() (#538)

Bug Fixes

• close redirect-based SSRF bypass in local provider fetches (sec) (#536)

@workglow/llamacpp-server

Bug Fixes

• close redirect-based SSRF bypass in local provider fetches (sec) (#536)

@workglow/mlx

Features

• add provider runtime metadata: supportsServer and isAvailable() (#538)

@workglow/node-llama-cpp

Features

• add provider runtime metadata: supportsServer and isAvailable() (#538)

@workglow/stable-diffusion-server

Bug Fixes

• close redirect-based SSRF bypass in local provider fetches (sec) (#536)

@workglow/huggingface-transformers

Features

• add provider runtime metadata: supportsServer and isAvailable() (#538)

@workglow/tf-mediapipe

Features

• add provider runtime metadata: supportsServer and isAvailable() (#538)

@workglow/chrome-ai

Features

• add provider runtime metadata: supportsServer and isAvailable() (#538)

@workglow/cactus

Features

• add provider runtime metadata: supportsServer and isAvailable() (#538)

v0.3.7

@workglow/ai

Bug Fixes

ai,llamacpp-server,stable-diffusion-server

• strict local-only URL allow-list (sec) (#533)

@workglow/storage

Features

storage

• add HttpTabularProxyStorage for remote table operations (#534)

@workglow/test

Features

storage

• add HttpTabularProxyStorage for remote table operations (#534)

Bug Fixes

ai,llamacpp-server,stable-diffusion-server

• strict local-only URL allow-list (sec) (#533)

@workglow/llamacpp-server

Bug Fixes

ai,llamacpp-server,stable-diffusion-server

• strict local-only URL allow-list (sec) (#533)

@workglow/stable-diffusion-server

Bug Fixes

ai,llamacpp-server,stable-diffusion-server

• strict local-only URL allow-list (sec) (#533)

v0.3.6

@workglow/ai

Features

ai

• IBackendsTransport interface + provider package scaffolding

@workglow/test

Features

ai

• IBackendsTransport interface + provider package scaffolding

cactus

• SHA-256 integrity verification for fetched model assets (#530)

Bug Fixes

cactus,chrome-ai

• security and correctness fixes from review (#531)

Tests

stable-diffusion-server

• full unit and integration test suite

llamacpp-server

• full unit and integration test suite

Chores

• update deps, turn off preview libs for now

Updated Dependencies

• @aws-sdk/client-sqs: ^3.1053.0
• @cloudflare/workers-types: ^4.20260523.1
• miniflare: ^4.20260521.0

@workglow/llamacpp-server

Features

llamacpp-server

• @workglow/llamacpp-server provider — run-fns, registration, and barrels

ai

• IBackendsTransport interface + provider package scaffolding

Tests

stable-diffusion-server

• full unit and integration test suite

llamacpp-server

• full unit and integration test suite

Documentation

llamacpp-server

• README — install, quickstart, capability table, browser/worker constraints

@workglow/mlx

Features

ai

• IBackendsTransport interface + provider package scaffolding

@workglow/aws

Chores

• update deps, turn off preview libs for now

Updated Dependencies

• @aws-sdk/client-sqs: ^3.1053.0

@workglow/stable-diffusion-server

Features

stable-diffusion-server

• @workglow/stable-diffusion-server provider — run-fns, registration, and barrels

ai

• IBackendsTransport interface + provider package scaffolding

Tests

stable-diffusion-server

• full unit and integration test suite

Documentation

stable-diffusion-server

• README — install, quickstart, capability table, browser note

@workglow/cloudflare

Chores

• update deps, turn off preview libs for now

Updated Dependencies

• @cloudflare/workers-types: ^4.20260523.1

@workglow/chrome-ai

Bug Fixes

cactus,chrome-ai

• security and correctness fixes from review (#531)

@workglow/cactus

Features

cactus

• SHA-256 integrity verification for fetched model assets (#530)

Bug Fixes

cactus,chrome-ai

• security and correctness fixes from review (#531)

Refactors

cli

• replace execSync with spawnSync for editor command execution and add command parsing functionality

@workglow/cli

Refactors

cli

• replace execSync with spawnSync for editor command execution and add command parsing functionality

@workglow/web

Chores

• update deps, turn off preview libs for now

Updated Dependencies

• react-resizable-panels: ^4.11.2

v0.3.5

@workglow/ai

Features

ai

• enhance AiTask with model property requirements and semantic validation

chrome-ai

• enhance WebBrowser provider with new capabilities and session management

Bug Fixes

• Chrome-ai (#514)

@workglow/util

Features

cactus

• enhance Cactus_ModelInfo to report cache status and file sizes

@workglow/test

Features

chrome-ai

• enhance WebBrowser provider with new capabilities and session management

cactus

• enhance Cactus_ModelInfo to report cache status and file sizes

Bug Fixes

• Chrome-ai (#514)

Chores

• update @cloudflare/workers-types dependency to version 4.20260522.1 across multiple package.json files

Updated Dependencies

• @cloudflare/workers-types: ^4.20260522.1

@workglow/openai

Bug Fixes

• Chrome-ai (#514)

@workglow/ollama

Bug Fixes

• Chrome-ai (#514)

@workglow/node-llama-cpp

Bug Fixes

• Chrome-ai (#514)

@workglow/anthropic

Bug Fixes

• Chrome-ai (#514)

@workglow/google-gemini

Bug Fixes

• Chrome-ai (#514)

@workglow/cloudflare

Chores

• update @cloudflare/workers-types dependency to version 4.20260522.1 across multiple package.json files

Updated Dependencies

• @cloudflare/workers-types: ^4.20260522.1

@workglow/chrome-ai

Features

chrome-ai

• enhance WebBrowser provider with new capabilities and session management

Bug Fixes

• Chrome-ai (#514)

@workglow/huggingface-inference

Bug Fixes

• Chrome-ai (#514)

@workglow/cactus

Features

cactus

• enhance Cactus_ModelInfo to report cache status and file sizes

Bug Fixes

• Chrome-ai (#514)