Release v0.10.0 · Roles and Box access · rerun-build/rerun

Minor release: read Upgrade before updating.

Highlights

Workspace roles: Admin runs the workspace (members, API keys, AI providers, settings), Member uses it. A Box can be open to the workspace or restricted to named people, with use or manage rights, on the web app, the workspace assistant and iOS.
The iOS app and its API, phone and SMS, Rewind and the transactional emails are now public (AGPL). Emails send on a self-hosted install.
The phone signup step takes the number without a verification code.

A coworker created right after another one no longer opens the first one's conversation.
An unreachable engine shows a readable message instead of "fetch failed", and an unreachable coworker database shows "Database unavailable" instead of an empty table.
Only one team build runs at a time per workspace; a duplicate request gets the same result instead of a second copy of every coworker.
An expired Google or Apple sign-in reopens the account dialog instead of a toast that disappears.
A coworker described as "You are X, working for…" is named "X".
A tool called under its Claude or Codex name answers instead of failing, and the error reads in the chat.
Schedules: a timezone the scheduler cannot use is refused when the routine is saved, one bad routine no longer stops the others, and a scheduled task waits for the live run of a coworker with a desktop.
WhatsApp no longer sends to the countries where Meta refuses the message.

Database: 5 new migrations (workspace roles, Box access, team builds, the author of an API key, message feedback closed to the browser). Run npx supabase db push before starting the new images. Every existing member becomes Admin and every Box stays open, so nothing changes until an admin restricts access.
No new variable, no engine data-dir step, docker-compose.yml unchanged.