Platform Update — August 14, 2026

Covers releases from iblai/iblai-prod-images (1.133.0 – 1.146.0) and iblai/iblai-web-frontend (26 package releases) published between 2026-08-07 and 2026-08-14.

---

iblai-dm-pro (4.332.0-ai → 4.338.0-ai)

Spend-cap filtering. The spend-cap list endpoints accept frontend filters: GET /spend-caps/agents/?mentor=<uuid> returns a single agent's cap, and GET /mentors/<uuid>/spend-caps/users/?username=<username>&email=<email> filters per-user agent caps (#2311).

Langfuse tenant tagging. Every Langfuse trace — including RAG retrieval and embedding traces — now carries a platform_key:<tenant> tag for cross-tenant filtering while preserving the richer metadata used by analytics and cost rollups. Run backfill_langfuse_trace_tags to tag existing traces (#2330).

Cross-tenant system prompt sharing. A source agent's system_prompt can be shared to agents on other tenants via GET/POST/PUT/DELETE /orgs/<org>/users/<user_id>/mentors/<mentor>/shared-prompt/. Editing the source prompt updates every consumer; unsharing restores each consumer's own prompt. The caller must be a platform admin of every tenant involved. Migration 0346 adds a nullable self-FK (additive, rolling-safe) (#2339).

Real-time claw usage billing. Credits are now deducted within seconds of a chat turn instead of waiting for the hourly cost rollup. Each immediate charge advances a usage checkpoint so the rollup does not double-bill. New settings: CLAW_USAGE_IMMEDIATE_CHARGE_BUDGET_SECONDS (default 120), CLAW_USAGE_PRICE_RETRY_DELAYS (default 2, 3, 5, 8, 12 s), CLAW_USAGE_CAPTURE_DEBOUNCE_SECONDS (default 2). CLAW_USAGE_LANGFUSE_EMIT_SETTLE_DAYS is retained as a no-op for compatibility. Migration 0347_claw_usage_emitted_watermarks adds watermark columns and a partial index — deploy with migrations enabled (#2295).

Cross-tenant claw billing. Cross-tenant claw sessions now resolve a provision mode from the serving instance and are billed correctly (#2299).

Advertising cost-based billing. CLAW_ADVERTISING_COST_BILLING_FROM (unset by default) switches advertising tenants from flat per-message fees to measured-cost billing from the configured date forward. Set it to a future date before deploying so no single day is split. Each usage row records its billing mode at creation (#2296).

Course embedding optimization. ENABLE_COURSE_STRUCTURE_EMBEDDING (default False) gates the large structure/grading_policy payload that search and recommendations do not use. Catalog-level fields that /api/ai-search/recommendations/ reads remain always-on. The orphaned settings ENABLE_EMBED_COURSE_DATA_TASK / ENABLE_EMBED_COURSE_BLOCK_DATA_TASK have been removed (#2340).

Admin memory management. Tenant admins and RBAC-granted users can create, update, and delete global and mentor-specific memories for other users through the existing memory endpoints. PATCH on global memory details supports content updates with duplicate detection and embedding refresh (#2325).

Document scanner bypass. ENABLE_MENTOR_DOCUMENT_SCANNER (default False) skips the scanner request for uploaded mentor documents. Set to True to restore scanner integration once the scanner service is healthy. IBL-managed, no tenant override (#2357).

Kokoro TTS as default voice provider. The ibl.ai voice provider now defaults to Kokoro (hexgrad/kokoro-82m) instead of OpenAI tts-1. IBLAIRoutingProfile gains tts_model_slug and tts_voice, editable per tenant from the Data Manager — changes take effect on the next request with no deploy required. Resolution order: tenant profile → global profile → settings.IBLAI_TTS_MODEL → Kokoro. Voice rows are seeded for the iblai provider from Kokoro's full 54-voice set across nine languages, listable via GET .../voices/?provider=iblai. The new Mentor.iblai_voice FK is exposed read/write on the settings endpoints alongside openai_voice / google_voice. Migration 0348 is additive and rolling-safe. Deploy steps: run seed_flows to populate Kokoro voice rows and register_langfuse_tts_models to price Kokoro generations (#2351).

• Behaviour change: tenants using the ibl.ai voice provider move from openai/tts-1 to Kokoro with af_heart on deploy. Set tts_model_slug on a tenant's profile before deploying to pin the previous behaviour.
• Behaviour change: Kokoro has no style-instruction parameter, so voice_instructions is ignored. Pin openai/gpt-4o-mini-tts on the profile to keep styled speech.

Credit enforcement. All AI endpoints — chat completions (POST /orgs/<org>/v1/chat/completions), chat-message TTS, and custom-voice TTS preview — now return 402 when the caller has insufficient credits. Tenants without billing configured are unaffected.

RBAC. Student chat actions and the Limited Editor role gain Ibl.Mentor/Settings/iblai_voice/read for reading which ibl.ai voice a mentor selected.

iblai-os-spa (0.117.0 → 0.125.1)

Chrome extension side panel. The browser extension now supports side-panel auth, page context injection, and a full-panel layout. Embed parameters are preserved through side-panel SSO login and across mentor re-resolve.

LLM tab redesign. The LLM settings tab shows an ibl.ai provider card, orders providers by access level, and grays out inactive provider cards. Model rows match the inactive state styling.

Grading and results. The grading view adds a results tab with RBAC-gated visibility.

Analytics memory. Analytics SDK memory integration adds a Memory sidebar menu item, gated by the watcher permission filter.

Immutable static hosting. Opt-in deployment-ID-namespaced static hosting writes immutable assets to S3 + CloudFront (assets.ibl.ai), wired into the SPA Docker build.

Tenant-locked builds. IBL_TENANT configuration produces per-tenant app builds and releases.

Agent skills UI. Chat supports slash-command skill search and a skill dropdown alongside the canvas.

CSP. The asset CDN origin is now allowed in style-src, font-src, and connect-src.

iblai-lms-spa (0.60.0 → 0.68.1)

Branding. Default page title updated to "ibl.ai | Agentic LMS".

Analytics memory. Analytics SDK memory menu items integrated with the sidebar.

CSP. Partner hosts are now configurable via CSP_PARTNER_HOSTS (environment variable). WebSocket (wss://) partner origins are allowed in connect-src.

Desktop builds. Windows installers and a download README are now produced alongside macOS builds.

Course display settings. LMS dashboard integrates SDK-backed course display settings configuration.

Time tracking. Course and unit time tracking uses the SDK provider, replacing any prior ad-hoc instrumentation.

ibl-cli (5.54.0 → 5.54.1)

SSO provider config consolidation. ibl-edx-third-party-auth's MONITORED_PROVIDERS and ibl-edx-base-oauth-sso-backend's TRACKED_PROVIDERS are now both driven by the single key IBL_EDX.IBL_EDX_BASE_OAUTH_SSO_BACKEND.TRACKED_PROVIDERS. One ibl config save --set command updates both signal handlers' provider gates identically.

iblai-auth-spa (2.2.1 → 2.2.2)

Deployment pin updated to @iblai/auth v2.2.2. Feature details below under @iblai/auth.

@iblai/web-containers (1.16.6 → 1.16.12)

Course display settings. LMS dashboard course display settings configuration components and test coverage.

Grading results tab. New results tab in the grading view.

LLM tab enhancements. ibl.ai LLM provider logo, provider ordering and access helpers, inactive-state styling, and bundled logo fallback.

Analytics tooltips. Analytics views revamped with descriptive icon tooltips.

Audit log. Platform-scoped audit log view with MCP integration.

Application redirect. Application feature redirect path corrected.

Navigation UI. Back-to buttons UI refreshed.

@iblai/iblai-js (2.3.9 → 2.3.16)

SDK releases tracking API type updates from iblai-dm-pro 4.333.0 through 4.338.1 and api-core counterparts. Cowork status check waits up to 8 seconds after app start to avoid racing with IPC enablement. Agent skills settings fixes. Audit log platform-scoped support.

@iblai/data-layer (1.12.3 → 1.12.5)

API type definitions updated to track backend releases 4.332.0 through 4.338.1. No user-facing behaviour changes beyond type accuracy.

@iblai/mcp (1.8.10 → 1.8.13)

MCP tooling updated for platform-scoped audit log support. Transitive dependency updates from web-containers and iblai-js.

@iblai/web-utils (2.1.12 → 2.1.13)

Propagates upstream dependency updates. No standalone feature changes in this window.

@iblai/auth (2.2.2 → 2.2.3)

Application page. New application page implementation with full Playwright test coverage.

CSP. wss:// partner origins allowed in connect-src for WebSocket-based integrations.

Audit log. Platform-scoped audit log test coverage. Application feature redirect path corrected.