Skip to content
ironflow
Ironflow is pre-1.0: APIs can change between releases. Pin a version. What is ready →

Ironflow v0.43.1

Ironflow v0.43.1 makes the engine easier for coding agents to drive: a unified error envelope with retry hints, remote MCP with the caller’s key, function-scoped agent keys, and opt-in CEL deny enforcement. It also adds A2A, a push-mode conformance suite, and two security-audit hardening waves.

v0.43.0 was never published; this release includes everything in it.

Breaking Changes

Section titled “Breaking Changes”
  • Function IDs are now unique per environment, not per project (#2701)

Features

Section titled “Features”
  • Remote MCP on the engine, authenticated with the caller’s key (#2694)
  • Agent keys scoped to specific functions (#2688)
  • Opt-in enforcement of CEL deny policies (#2685)
  • Expose agents to remote agents over the A2A protocol (#2615)
  • Push-mode conformance suite: ironflow conformance push (#2721)
  • One error envelope for REST, MCP and the CLI, with message, retryable, retry_after and class exit codes (#2661, #2676)
  • SDKs honor the server retry signal; 501 is not retried; the Go SDK stops resending writes after 5xx (#2682)
  • Go and Python SDK errors keep the server’s error text (#2659)
  • Make Ironflow easier for coding agents to drive (#2657)
  • Accept a debounce config without a key as one global lane (#2687)

Fixes

Section titled “Fixes”
  • Wave 1 and wave 2 security audit fixes: tenant/platform isolation, environment handling, SQL, SSRF, inspector, cloud slug, CLI and release (#2632, #2634)
  • Harden CSV export, JWT secret files, bundled NATS and Helm metrics exposure (#2652)
  • Scope cloud break-glass and wrapped-DEK secrets to customer and cluster (#2653); remove ungated cluster upsert (#2648); isolate re-provisioned slug lifetime (#2651)
  • Pause queued pull runs before worker assignment; honour a pending pause on HTTP pull workers (#2702, #2675)
  • Abandon stale polling worker executions in the SDKs; fail fast on terminal function registration errors (#2704, #2707)
  • Pin the push reserve plan so a deep bucket stays an index seek (#2714)
  • Align UTC schedules and automatic waiting semantics (#2711)
  • Restore parent-to-child run links (#2703)
  • Time-travel step numbering now matches live runs (#2700)
  • Dashboard writes no longer overwrite concurrent changes (#2693)
  • Dashboard shows errors instead of empty states when lists fail to load; fails closed when the capabilities probe fails; shows rejected resume errors and readable step names (#2710, #2697, #2708, #2698)
  • g-chord navigation now matches the shortcuts help (#2689)
  • Send environment headers for circuit-breaker CLI commands (#2706)
  • Serve /platform/* pages without a tenant session (#2692)
  • MCP spec and security gaps: elicitation, schemas, annotations, path traversal (#2614)

Improvements

Section titled “Improvements”
  • Files page: better browsing, resizable side panes, compact upload batch summary (#2644, #2646)
  • Docs: reference landing page, subject-grouped sidebar, remote MCP page, full docs audit (#2616, #2617, #2719)

Other

Section titled “Other”
  • Dashboard UI test suite with scenario catalog (#2658, #2683, #2684)

Ironflow Desktop changes ship in the desktop changelog.