KyoubeAI 1.7.0

KyoubeAI can now keep teams apart on one instance: user groups decide who may use which agents and apps.

What's in 1.7.0

User groups. Owners and admins create groups under Company Settings → Groups. A group holds people, agents, apps and, if you like, a Data level. An agent or app that is in no group stays open to everyone, so nothing changes until you create your first group. Owners and admins are never restricted.

Agents only their group can use. Outside a group, people can't give the group's agents work or chat with them. They can still see the agents, their tasks and their runs. Changes reach agents within about a minute.

Apps only their group can open. A group's apps disappear from everyone else's Apps page, and a link to one says "You don't have access to this app. Ask a company admin." The app's tables are not hidden: they stay on the Data page at each person's own level.

A Data level per group. A group can set read, write or schema, and the highest level a person has wins. Groups can lower an operator to read. They can't raise a viewer, since viewers can't make changes anywhere in KyoubeAI. The Data access page now shows each person's level and where it comes from.

Part of the licence. Creating and changing groups needs a KyoubeAI licence. If the licence lapses, your groups keep working and you can still delete them.

Update

From 1.6, run ./update.sh. It backs up first, and ./update.sh --rollback returns to 1.6. The update adds empty tables and changes nothing until someone creates a group.

For agent rules and groups to work in a company, the instance's board key user must be a member of that company (any role). How groups work, and what they don't cover, is in docs/groups.md. The full list of changes is in CHANGELOG.md.