Skip to content

v0.6.1 — 2026-07-29

Feature-flag framework, tenant self-service account management, a capability-wide dashboard, and the graphify knowledge-graph tooling.

Added

  • Feature flags (DEE-36). Registry-driven, per-brain, per-environment flags (boolean / multivariate / json). Management (GET/PUT /v1/brains/{id}/flags) is platform-admin only; tenant clients read a values-only gating map (GET /v1/brains/{id}/features) and evaluate in-memory. Mutations emit a flag.changed SSE so clients re-gate live. Seed the existing feature set with bb seed-flags.
  • Tenant account management. Tenant Admins can provision users (Admin/Curator/Reader) for their own brain, and suspend them, from a Members panel in Settings. Platform admins can still create tenant admins for any brain.
  • Self-service password change. POST /v1/auth/password (verifies the current password, revokes other sessions, reissues a token bundle so you stay signed in) with a Change password panel in Settings for every user.
  • Capability dashboard. A command deck on the tenant dashboard surfacing key metrics across every capability — Scout, Curator, Sentinel (alerts first), Workspace, and a 7-day Cost summary — and feature-flag aware.
  • Password visibility toggle. A reusable PasswordInput primitive adds an eye/eye-off show-hide toggle to every password field (login, change-password, add-member, onboarding).
  • graphify tooling (DEE-25). Knowledge-graph integration committed to the repo: .githooks/ auto-rebuild hooks, the graphify MCP server in .mcp.json, the config loader, and CLAUDE.md docs.

Changed

  • Dashboard Team panel now gates on the true Admin role (the accounts API is Admin-only), so Curators no longer see an empty roster.
  • Removed the non-functional attachment paperclip from non-Librarian chat drawers (only the Librarian ingests documents).

Fixed

  • Duplicate account email now returns a clean 409 instead of a generic error.
  • Self-edit guard prevents an Admin from changing their own role or suspending themselves (anti-lockout); platform admins remain exempt as superusers.