ragleap-core v0.12.0 release notes

ragleap-core v0.12.0

New since v0.11.1. Pre-1.0: features may change.

Grant a folder with ragleap files add /path --name docs --purpose knowledge. The sandbox copies allowed documents (the 28 supported formats; no symlinks, no .env or keys, 25 MB per file) into a read-only staging volume, and the app reads new, changed and deleted files every 15 minutes (#901, #912, #918).
The first read of a folder waits for the owner's approval, because embeddings can cost money. The Documents tab has a Folders card with an Approve button.
Needs COMPUTER_CONTROL=true, FOLDER_INGEST_ENABLED=true, a rebuilt sandbox image and db/schema.sql applied.

Four roles (viewer, operator, admin, owner), personal keys (shown once, stored as a hash) and a role for every route. The shared RAGLEAP_API_KEY keeps working and counts as the owner (#966).
A person in every approval and in the activity log; audit_events and GET /audit record who made each state-changing request (#997).
Dashboard: tabs by role, a Users tab and an Audit tab (#1013).

Meta WhatsApp Cloud API provider (#932); Google Calendar event scheduling as an outbound action (#952); HubSpot CRM record updates.

Webhook, Slack and email senders no longer log exception detail (#979). Pillow 13.0.0 and pypdf 6.21.1 (#913, also in v0.11.1).

Apply db/schema.sql (idempotent) to existing databases (back up first). Rebuild the sandbox image to use folder ingest.

Single-tenant. No single sign-on or multi-factor sign-in. The audit record says who called a route, not what they changed. Folder ingest was tested on one server with a small folder; Docker Desktop, rootless Docker and macOS are untested. The channel and integration items above are listed from merged pull requests and were not separately tested for this release. Not independently security reviewed.

Thank you to everyone who contributed since v0.11.1:

@Nitjsefnie: Meta WhatsApp Cloud API provider, Google Calendar scheduling, HubSpot record updates, no exception detail in sender logs, Deepgram and ElevenLabs voice providers, Twilio-compatible audio, Telegram webhook secret fix.
@ahmet-izgi: voice number normalization (Turkish, Spanish, German, Italian) and the German README.
Yunare Maia: test coverage for the /chat role wiring.