Highlights
- Added the Workspace multi-tenant foundation, workspace collaboration and invitations, workspace-scoped resources, model catalog provisioning, quota controls, and stronger tenant isolation.
- Added configurable reasoning controls for supported models and pipelines.
- Improved Plugin Runtime, Box, and MCP resilience with reconnect/recovery handling, bounded timeouts, readiness reporting, and safer runtime admission controls.
- Added marketplace voting/likes, Space rerank models, workspace member visibility, scoped support sessions, and workspace-aware telemetry.
- Improved OSS account onboarding: user-facing identity terminology is now LangBot Account, and OAuth callbacks support deployments on arbitrary domains, IP addresses, ports, HTTP, and HTTPS.
- Documented optional Plugin Runtime and Box control tokens. Open-source deployments may remain tokenless when both connection endpoints leave the token unset; strong shared tokens are recommended for Internet-accessible deployments.
Fixes and improvements
- Hardened OSS and Cloud workspace UI, invitations, QR sign-in, model balance and catalog activation, extension availability, and quota-reached actions.
- Fixed tenant scoping across plugins, pipelines, monitoring, knowledge bases, adapters, embedded chat, MCP, and extension tasks.
- Improved database migration safety for SQLite and PostgreSQL, including workspace/resource tenancy and vector dimensions up to 3072.
- Fixed Telegram image URL credential leakage and improved original-image handling across messaging adapters.
- Fixed Local Agent duplicate streamed content and grounded its system prompt with the current date.
- Added MCP tool-call timeout controls and improved recovery from runtime connection interruptions.
New Contributors
- @Constantine1916 made their first contribution in #2366
- @douxt contributed platform image URL handling and MCP timeout improvements.
- @leonoxo contributed current-date grounding for Local Agent in #2399
Full Changelog: v4.10.6...v4.10.7