Back to the changelog

• Feature

  The Copilot fills in missing outputs

  From the Designer you can ask the Copilot to fill in the expected outputs of tasks that have none: it only completes what is missing, asks you a question when a task is ambiguous, lets you undo the operation and saves nothing until you decide. If something goes wrong, the message says clearly what happened and your request stays in the field.

• Improvement

  The agent policy applies on every AI channel

  Your organization's instructions are now followed by every AI feature in FlowSharp: flow creation, Copilot, assistant, AI tasks and states, titles, summaries, procedures and maps. Each turn uses a consistent version of the policy and, if it changes while the AI is generating a description, the previous description stays in place.

• Security

  Webhook credentials protected in composed paths too

  Webhook addresses that carry an identifier and a key in the path (such as those from Zapier, Make or n8n) are now masked in full in the task log, in the MCP assistant and in exports, even when nested inside another address. We recommend rotating Webhooks that were already exposed.

• Security

  Assignees derived from sensitive data always masked

  If a task's assignee comes from a sensitive field, it stays masked on read even after the field is changed. Fragments of the masking placeholders can no longer be written into sensitive fields.

• Improvement

  Safer version deletion and complete event shutdown

  Deleting a published version now requires confirmation of its real state, so you cannot delete by mistake a version a colleague has just published, and numbers of deleted versions are no longer reused. Switching off event-based starts reaches every version, including archived or disabled ones, and "Reactivate" no longer revives what you had turned off; a warning appears at publish time if an event start is switched back on.

• Improvement

  GDPR erasure with a truthful outcome

  If the paths given for an erasure find no data, the case is blocked instead of showing as completed; if they find only some, the request is partial. Preview and outcome show which paths were found, not found or incompatible. Reasons made only of spaces or invisible characters are rejected everywhere.