What's new
- Inbox access gate: the manual GB-Agent trigger now checks the authenticated operator's
draft_replyaccess before connector lookup or queueing. - Access endpoint:
/api/inbox/gb-agent/accessreturns safe per-mode allow/deny state for the current operator so the inbox can hide GB-Agent UI when unavailable. - Server-side draft protection: GB-Agent connector drafts are filtered from the pending-drafts API for operators without matching mode access, and accept/reject routes gate GB-Agent drafts before transition.
- Draft-only narrowing: the current fast-path trigger sends
mode: "draft_reply", includes that mode in the dedupe key, and only allowsdraft_replyin the connector job payload.
Why
v0.16.29 added the database foundation and v0.16.30 added the admin settings panel. This release wires those settings into the inbox path so workspace toggles, mode flags, and allowlists begin controlling the actual GB-Agent surfaces.