Helpdock 0.4.0

Minor Changes

• #147 a35e65f Thanks @Docker-Hunterpedia! - AI foundation (M7-01, M7-02, M7-08), API only. Install admins configure AI providers through /api/install/ai: an API key, subscription (OAuth) credentials or none for a local OpenAI-compatible server, stored encrypted and never returned; model discovery; the default model; and the one embedding model of the install, whose change re-embeds every knowledge chunk in the worker without ever serving two models at once. Brands set a model override, PII redaction, the injection filter, a daily and monthly budget and a system prompt through /api/brands/:brandId/ai. Every model call is logged to ai_calls with its tokens and cost, and a ticket's calls are readable at /api/brands/:brandId/tickets/:ticketId/ai-calls. Data retention now nulls AI call bodies after the brand's AI-log window and keeps their counts and cost. See docs/guides/ai.md.

• #149 fd9c371 Thanks @Docker-Hunterpedia! - M6 Telegram, M7 AI and M8 API, webhooks, reports are complete. This release connects Telegram bots to the desk, adds grounded AI that assists agents and answers customers from the brand's own knowledge under a budget and a persistent handoff, and opens the platform up: scoped API keys and a documented REST v1, signed outbound webhooks, reports with CSV export, the System page with Bull Board, satisfaction surveys on every channel, and brand deletion with a grace period. What each milestone built, the test behind every exit criterion, and the gaps each left open are in docs/completed/.

• #147 a35e65f Thanks @Docker-Hunterpedia! - Close carried gaps: the offline auto-unassign waits for the department to open, the first-run wizard generates the web push key pair, the widget names the agents online, staff socket events have per-person budgets, and signing out of one browser closes only that browser's sockets. CI adds Helpdock's Semgrep rules and a dependency audit; release branches and tags get a ZAP baseline scan.

Patch Changes

• #151 358d464 Thanks @Docker-Hunterpedia! - Complete install authentication settings with write-only OAuth credentials, correct shared admin field and session layouts in English and Arabic, add nonce-based admin styles and a restrictive browser permissions policy, and patch the Fastify HTTP/2 trailer-response denial of service.

What's Changed

• fix: close retention and own-sender milestone gaps by @Docker-Hunterpedia in #146
• feat: M6 Telegram, M7 AI, M8 API/webhooks/reports and M9 hardening towards 1.0 by @Docker-Hunterpedia in #147
• docs: close out M6 Telegram, M7 AI and M8 API, webhooks, reports by @Docker-Hunterpedia in #149
• fix: complete M9 settings, usability, and runtime hardening by @Docker-Hunterpedia in #151
• chore: version packages by @github-actions[bot] in #148

Full Changelog: v0.3.1...v0.4.0