Ironflow v0.42.0

Ironflow v0.42.0 adds a Files page and flow-map file buckets to the dashboard, interview-driven project creation, agent-guided VPS deploys, and ironflow update check. It also hardens fenced yields and run/step lifecycle writes against stale and racing updates.

Features

• Dashboard Files page for buckets, files and signed URLs (#2536)
• File buckets shown in the flow map (#2578)
• Interview-driven project creation (#2540)
• Agent-guided deploy to a target: seeded admin key, deploy vps --app, deploy-target skill (#2537)
• ironflow update check and version-skew warning (#2533)
• MCP exposes contract resources and authoring guidance (#2559)
• Projection definitions and event schema revisions preserved in history (#2560)

Fixes

• Guard run and step lifecycle mutations against stale writes (#2547)
• Fenced yields: keep redacted step payloads, preserve step lifecycle/metadata, publish committed state, skip no-op transitions (#2571, #2572, #2576)
• Release yield lease atomically before parent resume; fast wakes no longer strand yielded runs (#2574, #2562)
• Validate TransitionAndRelease steps and echo stored step ID (#2573)
• Reject legacy updates from superseded workers (#2564)
• Late uploads can no longer restore redacted blob payloads (#2581)
• Files: reclaimer safety, sweeper quarantine, debounce replay order (#2538); require retirement evidence before cleanup (#2550); limit concurrent uploads per principal (#2549)
• Gate skill packaging operations on application readiness (#2603)
• Close revalidated SRE hardening gaps in deploy (#2566)

Improvements

• SQLite WAL reads and writes share a bounded pool (#2554)

Ironflow Desktop changes ship in the desktop changelog.