Release 1.10.0: the AI support agent, and Bale replaces SMS
An MCP server at POST /mcp so any agent that speaks the protocol can work the
support queue - read waiting tickets with the customer's balance, machine
state and account age attached, reply, and export one customer's own data,
only while that customer has an open ticket. Its address, key and tool list
are in the admin panel, with rotation handled by the root provisioner because
the key file is deliberately unreadable to the web process.
A signed webhook wakes an agent the moment a customer writes, and a skill and
unattended prompt tell it how to answer: what may never be promised, when to
escalate, and that nobody is reading its transcript.
Messages go through Bale rather than SMS. On the line this platform used, 12
of the last 25 messages were accepted, charged, and then filtered by the
operator before reaching the handset - including every verification code
measured on the day it was replaced. Each account links once by sharing its
contact with the bot, which is stronger evidence than a code proving somebody
could read a message.
Twelve findings from an external review of the 1.9.0 diff are fixed, among
them a contact-linking hole that could redirect another customer's
verification codes, a bot token written to the journal on every request, and
an installer that never created the credential files its own units declare.