v0.23.0

What's new

Switch an account off. The User accounts page has a Switch off button. A switched-off account keeps its history and its place in roles and groups, but cannot sign in, and its sessions, connection keys and agent connections stop working. Switch on restores them. The deployment admin and your own account cannot be switched off.

Add someone without a password. An admin can add an account with only an email address. The person signs in with single sign-on and finds the account waiting.

Past versions of documents and images. Version history now shows an older save of a PDF, an image, a Word, PowerPoint or Excel file, an email or an HTML page with the same viewer the file page uses. Each save offers "Download this version".

Moving to another repository takes effect at once. Saving a different repository, or a different way of having it, asks you to confirm and then moves the deployment on that save. No restart is needed. When change requests are open, you choose whether to keep them or close them as "repository replaced".

Links in HTML pages work. A link written in an HTML page to another document of the knowledge base opens it in the app. A link to an http, https or mailto address opens in a new tab.

Agents can try a skill before it is merged. list_skills and get_skill take an optional branch and read the skills as that draft has them. Anything that differs from the released skill is marked as not approved.

Smaller answer from open_change_request. The tool answers with the link, the changed paths and what blocks the merge. Patches are sent only when asked for with include: ["patches"].

Fixed

• The preview of a move or copy judges access as it will be afterwards, counting the access files that travel with the folder. A move that costs you nothing no longer warns.
• copy_file takes dryRun: true, and refuses a folder with a clear message.
• A boot no longer stops when the git host answers "repository not found" or rejects the credentials. The deployment comes up with the setup screen reachable and the cause shown.
• A refused save on the setup screen shows the reason the host gave.
• A working copy that is set aside takes its queued changes and its locks with it. Queued changes are held for an admin and are never committed into the new repository.
• A session whose account cannot be looked up during a database outage gets an error, not a sign-out.
• The write tools' descriptions say how escape sequences in content are handled.

Upgrading

Two database migrations run on start: 0014 and 0015. Nothing else is required of an existing deployment.

To move to another repository, open its tab on the Deployment page, save and confirm. Working copies of a different repository are kept under replaced-working-copies/ in the backups volume, with any work that was never pushed.

For overlays built on the @bevel-software/platform-* packages

• Session hooks replace the ontology boundary. Hexis calls hooks a deployment registers on WorkflowHooks before each gated agent read or write, and registers none itself. The session-ontology gate, service and policy modules, ontologyOf and ONTOLOGY_SESSION_BLOCK are removed. The table session_ontology_touches stays for this release, unused.
• ports.writeAccess (IWriteAccess) lets a host make a deployment read-only. Changes are refused with code: 'workspace_read_only'. Tools mounted outside core's tool handler are not covered and need their own check.
• ports.accountAdmission is asked with the new reason 'reactivate', and a refusal may carry waitForAdmin: true.
• createAuthMiddleware is async and takes anything with resolveSession. createTokenVerifier and createToolAuthMiddleware take the account checker as an optional third argument. Internal tokens are refused when their user has no active account.
• folderMenuItems on the app registry adds entries to a folder's right-click menu in the explorer.
• open_change_request no longer wraps its answer in changeRequest: read url and number at the top level.
• GET /api/workspace/:id/file/raw takes ?ref=<sha> and &side=before.
• WorkspaceService takes an optional seventh constructor argument, aroundSetAside. KbStartupRunner options gain beforeCloneSetAside, and onCloneDiscarded may return a promise.
• RepositoryChangeRequests gains an optional whileCommitsHeld.