Changelog

v0.9.0 — 2026-04-18

New Features

Multi-Task Orchestrator

• plan_tasks and plan_status tools exposed to all agents
• LLM-driven task decomposition into parallel sub-tasks with dependency graph
• Job handlers: orchestrator-plan, orchestrator-subtask, orchestrator-synthesize
• REST API: POST /v1/orchestrate, GET /v1/orchestrate/:planId
• TUI: /orchestrate and /plan-status commands

Learning Loop (Self-Improving Agents)

• plugin-reflection fires after every session — generates trajectory hash + LLM reflection
• Auto-proposes skills when ≥3 similar trajectories detected (cosine similarity > 0.8, tool overlap ≥70%)
• Skill lifecycle: proposed → promoted → deprecated
• REST API: GET /v1/skills, PATCH /v1/skills/:id/promote|deprecate
• TUI: /skills command

Browser Automation

• plugin-browser with 6 tools: browser_navigate, browser_click, browser_type, browser_snapshot, browser_screenshot, browser_scroll
• Accessibility-tree snapshots (~100× cheaper than screenshots)
• Lazy Chromium singleton; noVNC at :6080 for visual debugging

Azure Deployment

• packages/core/Dockerfile — multi-stage Bun image for API + worker
• Bicep IaC modules: ACR, Key Vault, Log Analytics, App Insights, PostgreSQL Flexible Server (pgvector), Container Apps
• KeyringProvider abstraction: FileKeyring (local) + AzureKeyVaultKeyring (production)
• .github/workflows/deploy-azure.yml — test → build → staging → manual gate → prod
• Parameter files: dev / staging / prod

Semantic Memory

• pgvector cosine search replaces recency-only recall
• Last user message cached by chat.message hook; embedded before system.transform
• buildEmbedderFromEnv() in @orginabox/shared — prefers Azure OpenAI, falls back to OpenAI
• embed-memories job handler for backfilling NULL embeddings
• 2000-token budget with <memory-context> block wrapping

Agent Templates

• 8 bundled templates seeded on first boot: Executive Assistant, Research Analyst, IT Help Desk, Content Writer, Code Reviewer, Data Engineer, Project Manager, Security Analyst
• Idempotent seeding — won't re-create if already present
• TUI: /template list, /template use <slug>

TUI Polish

• Status bar showing session ID, model, token count, cost, tenant slug
• Fuzzy slash-command search (subsequence matching)
• 7 new commands: /orchestrate, /plan-status, /template, /skills, /login, /audit, /memories
• /login — Azure device code flow for terminal auth

---

v0.8.0 — 2026-03-15

New Features

Additional Gateways

• Slack gateway (Socket Mode + Block Kit)
• Discord gateway (discord.js v14, DMs + @mentions)
• Email gateway (IMAP polling + SMTP sending, thread continuity via References header)
• SETUP.md for each gateway

Multi-Tenancy

• tenants, roles, user_roles, entra_sessions, agent_templates tables
• users extended: tenant_id, email, display_name, entra_object_id
• All tables scoped by tenant_id; NULL = legacy single-operator mode

RBAC

• 4 system roles: owner / admin / member / viewer
• RbacPermissions typed JSONB schema
• resolveUserPermissions(), seedSystemRoles(), per-action helpers
• Azure AD group → role mapping via tenants.settings.groupRoleMapping

Azure AD SSO

• PKCE auth flow (auth/entra.ts)
• HMAC-SHA256 JWTs: 15min access / 7day refresh
• Auth middleware with JWT → API key fallback
• Find-or-create tenant + user on first SSO login

REST API Expansion

• Route modules: auth, sessions, memories, templates, admin, orchestrate, skills
• SSE proxy for session event streaming

Web Dashboard

• Next.js 15 + React 19 + Tailwind v4
• Chat, Memories, Admin pages with Playwright tests

Audit Logging

• Write-behind buffer (1s / 64-entry flush)
• SOC 2 action categories with 1–2 year retention tiers
• Filterable REST API: GET /v1/admin/audit-log

Embeddings

• EmbeddingProvider interface in @orginabox/shared
• createOpenAIEmbedder + createAzureOpenAIEmbedder + buildEmbedderFromEnv

Migration

• 0002_multi_tenancy.sql — idempotent DDL for all enterprise tables

---

v0.7.0 — 2026-02-01

New Features

• PostgreSQL job queue with LISTEN/NOTIFY wakeup and SELECT FOR UPDATE SKIP LOCKED
• agent-turn job handler — opencode promptAsync + SSE streaming
• analytics-write job handler — usage events with per-request idempotency
• Plugin system: plugin-memory, plugin-permissions, plugin-analytics, plugin-session-search, plugin-subagent, plugin-tunnel-tools, plugin-host-tools, plugin-skill-autowrite
• Telegram gateway
• iMessage gateway (BlueBubbles)
• Microsoft Teams gateway
• Docker sandbox (Ubuntu 24.04 + Xvfb + noVNC + opencode)
• TUI: oiab chat with OpenTUI alternate-screen layout
• pgvector schema: memories table with 1536-dim embedding column
• AES-256-GCM keyring for secret encryption

---

v0.1.0 — 2026-01-15

• Initial release: single-operator mode with opencode sandbox + Postgres