3 posts tagged with "release"

Highlights​

A new UI. Navigation and settings were unified into a single application shell: one settings center instead of scattered per-area config, a coherent workspace nav, and consistent breadcrumbs, deep links, and pickers throughout. Most screens you touch daily have moved or been rebuilt.

Knowledge base access control. RAG knowledge bases are now fully governed. Ingestion sources are managed from the UI instead of YAML, gated by their own RBAC relations, and authorization is enforced at query time on the live agent tool path, so a search only ever sees datasources the caller can read.

Underneath both: the legacy supervisor and standalone A2A agents are gone, and the Centralized Authorization Service is now the single decision point for every resource.

Highlights​

Enterprise authorization. A full cutover from role-based to relationship-based access control (ReBAC) backed by OpenFGA, with Keycloak as the identity provider and an AgentGateway ext_authz bridge enforcing per-call MCP decisions.

A workflow engine. Multi-step agentic workflows with a visual editor, human-in-the-loop approval, artifact capture, and sharing.

Alongside those: a new Webex bot, an envelope-encrypted credential store with an OAuth connector platform, and a rebuilt Skills platform.

The entire authorization stack is opt-in and disabled by default: for a stock 0.4.x deployment this is a drop-in upgrade with no values.yaml edits required.

Highlights​

0.4.0 restructures the platform around the AG-UI protocol and makes the Next.js gateway the single front door. Streaming, conversation storage, and authentication stop being per-client concerns: the web UI, Slack bot, and dynamic agents all speak one event model and share one conversation API.

Helm values for all three components are restructured. The upgrade guide below has the complete before/after mapping.