v0.0.410

Version 0.0.410 (June 13, 2026)

• Email the AI analyst (AI Mailbox) — a new Email channel (alongside Slack/Teams/WhatsApp) lets people email the analyst and get answers back. It's IMAP/SMTP under the hood (provider-agnostic: Microsoft 365, Google Workspace, or any self-hosted server) with three auth modes — password/app-password, Microsoft 365 app-only OAuth (XOAUTH2), and Google Workspace (service account + domain-wide delegation). Inbound mail flows into a report, the agent replies in-thread (with a deep link back to the report), and attachments are ingested as report files (size-limited). Configure it from Settings → Integrations, with an inline Test connection before saving. IMAP is the optional upgrade that turns a send-only mailbox into a two-way channel.
• Verify-first inbound identity — by default a new sender must prove they control both the mailbox and a BOW account: first contact gets a verification link that, clicked while signed in, creates a trusted email → user binding (subsequent mail is trusted, like Slack/Teams). A spoofable From alone never grants data access. A pre-filter (DMARC/DKIM where available + domain allowlist + loop/auto-reply suppression) drops spoofers and noise first; registered-but-unlinked users, open invites, and signup-admitted domains each get the appropriate link rung, and everything else is ignored + audited. Auto-linking without verification is now an explicit, clearly-labeled opt-in.
• Org SMTP transport — a dedicated SMTP Server setting (separate from the AI Mailbox) becomes the org's transport for system mail — share notifications, scheduled-report/prompt results, verification links — overriding the global bow-config SMTP. The password is Fernet-encrypted at rest, no-auth/anonymous relays and a validate_certs toggle are supported, and there's a pre-save Test connection. Analyst mail always uses the mailbox; system mail never does — the two transports are kept strictly separate.
• Scheduled schema auto-reindex — connections can now periodically re-index themselves so tables stay fresh, with a per-connection toggle and a configurable interval (every N hours) in the connection detail modal; the last reindex error is surfaced inline. Scheduled reindexing is an enterprise feature.
• Per-org license quotas — licenses can now cap max_users and max_agents per organization (claims read from the license JWT; missing/negative means unlimited), enforced on user and agent creation.
• Guaranteed data access on every dashboard — building on 0.0.409's component ⓘ popover, an always-on, LLM-independent DataInspector (a floating "Data" button auto-mounted into the dashboard iframe) lists every visualization with the same Data/Code tabs, so even fully custom dashboards that never use the prebuilt cards still expose their backing data and query. A bare <EChart> outside a SectionCard now also carries the ⓘ popover. Suppressed in headless thumbnail/preview renders.
• Instruction pill fix — the report completion pill now includes system-category instructions (previously hidden), and partial/pill accepts are reflected correctly in the knowledge group.