Small changes. Better testing.

tofupilot validate now checks your uv.lock the way the deployment build does, offline on your machine, so you see the build's verdict before you push.

• Added lock checks to tofupilot validate: it reports a uv.lock that no longer matches pyproject.toml, a missing one, and one that will not ship with the deployment (ignored by .gitignore or not committed).
• Added a guard to tofupilot deploy: it refuses an outdated uv.lock before uploading, and warns when the lock is missing or left out.
• Improved tofupilot validate --watch so that saving pyproject.toml or uv.lock runs the check again.

A station whose test logged a null character stopped updating its live view in the dashboard until the next run started.

• Fixed live run updates being refused when a log, measurement or prompt text contained a null character. The character is now removed before the update is stored.
• Fixed the dashboard showing an outdated run state when opening such a station in the middle of a run. Recorded runs were never affected.

The station activity now confirms that a setting changed from the dashboard was actually applied on the station.

• Fixed the station activity, which showed a setting change as requested but never as applied by the station.
• Added an entry when a station restores its launch on boot service at startup, for example after it was disabled by hand.

Developing a procedure is now a single tofupilot run from its folder, and moving a machine between station and development work no longer leaves it in a mixed state that opened the kiosk on a developer's computer.

• Added the current folder as the default for tofupilot run, and made the procedure ID optional on --deployment so it picks from the pulled deployments. Station scripts started outside a procedure folder keep running their deployment.
• Added automatic station removal when you log in as a user on a station, and the new tofupilot logout --station: the station service stops, queued runs upload under the station first, then its login, deployments and desktop icon are removed. Nothing changes while a run is still in progress.
• Improved the offline upload queue so each run only uploads with the kind of login that recorded it, so station runs never appear under a user.

Some plug calls in a phase only failed at run time, on the station, after the operator had started the test.

• Added tofupilot validate warnings for a plug method called with a keyword argument, an await on a plug call, and a property called like a method, each with the corrected call when one exists.
• Improved checks on plug classes defined under an if or a try: misspelled methods, unknown with: keys and misspelled class names are now reported there too.

The plug debugger in Studio now gives a plug the procedure's environment variables, secrets included, so a method could return a secret and show it in clear.

• Fixed secret values appearing in plug debugger results and errors: they are now masked, as they already are in tofupilot plug call output and plug logs.
• Added an end-to-end check that the procedure's env: reaches a debugged plug, with the plug's own env: taking precedence.

Deployments on self-hosted servers are now more robust.

• Fixed an issue that could prevent stations from installing new deployments on some self-hosted setups. After updating, deploy a new build to your stations.
• Improved the messages shown when a deployment cannot be installed.

A phase that reads units or batches from your workspace no longer fails when you run a procedure locally without uploading its results.

• Fixed phases and plugs that take dashboard failing on tofupilot run without --upload: they now act as your CLI login whether or not the run uploads.
• Added the same access to Studio runs, Studio plug debugging and tofupilot plug.
• Improved the error on a machine with no login: it now tells you to run tofupilot login instead of adding --upload.

We upgraded the libraries the dashboard, CLI and Rust SDK use to their latest versions for the newest security fixes. We also added extra protection to sign-in.

The public tofupilot/framework repository still held old Studio sources and releases, so it did not match the Framework you run today.

• Updated tofupilot/framework to the current Framework execution engine source, which builds standalone with cargo build.
• Removed the old Studio code, local templates and v1.x releases, and published release v2.0.0.
• Moved templates to tofupilot.com/templates, linked from the repository README.
• Fixed commit titles on the public Framework and CLI repositories, which now carry the change title instead of a description heading.