v0.0.480

Version 0.0.480 (July 21, 2026)

• Forward per-user identity to MCP servers (#750) — MCP connections can now map each signed-in user's identity and membership attributes into every tool call, both as outbound HTTP headers and as a metadata object merged into the tool arguments (custom_metadata by default), configured per-field in the connection's Advanced panel. Fields marked locked are injected server-side, always win over model-supplied values, and are stripped from the model-facing tool schema — so sensitive identity (e.g. user_email) can never be invented or overridden by the model; fields marked ai surface as defaults the model may fill. Also fixes a routing bug where an external MCP tool whose name collided with a BOW built-in (create_report, get_context, …) was silently intercepted and run in-process: a configured MCP/custom-API connection is now always called over its own wire, with genuine loopback self-calls detected and handled without deadlocking. MCP tool failures now render amber instead of red, and call durations round to whole seconds.