Back to the changelog

• Feature

  Credentials safe inside variables

  New **secret** type for variables (global and per-flow), designed for tokens and credentials used in webhooks and AI tasks. The value is **encrypted in the database** (AES-256-GCM) and never appears in clear: lists, edits and the designer picker only show `••••••••`.

• Security

  Controlled reveal, always audited

  Only an **Admin** can see the clear value, with a click on the eye icon — and every reveal is **tracked in the audit log**.

• Security

  Works everywhere, redacted in logs

  `{{global.vars.token}}` / `{{flow.vars.token}}` resolve normally in webhook headers, URLs, bodies and AI prompts. In task execution logs the value is **automatically redacted**, even when it lands in an innocuously-named field or in the URL. Documented caveat: a template writing the secret into item data exposes it there — that responsibility stays with the flow designer.

• Improvement

  Edit without re-exposing

  When editing, the value field starts empty — leaving it empty means "unchanged"; to rotate the secret just type a new one.

• Improvement

  Process Maps: list filters and pagination

  The Process Maps list now validates its parameters (unknown values → clear error), supports filtering by publish status and pagination — they used to be silently ignored.

• Design

  Sidebar nodes without overlaps

  Nodes added in sequence from the Process Map sidebar now arrange on a grid instead of stacking on top of each other.