Skip to main content

Release 0.5.47 — OpenFGA Batch-Check Limit, Slack Agent Pagination, RBAC Self-Check Fix

Released: 2026-07-09 Chart: oci://ghcr.io/cnoe-io/charts/ai-platform-engineering:0.5.47 Previous release: 0.5.46

Highlights

0.5.47 fixes three RBAC and UI reliability issues: OpenFGA batch-check calls are now chunked under the 50-check API limit, Slack integration agent pickers paginate past the first 20 agents, and the RBAC self-check no longer incorrectly flags shared-only team grants as failures.

Bug Fixes

OpenFGA batch-check calls chunked over the 50-check limit

hasAccessibleSlackChannel and hasAccessibleWebexSpace fan out 2 OpenFGA checks per active channel/space mapping into a single batchCheckOpenFgaTuples call. On deployments with more than 25 configured channels or spaces, this exceeded OpenFGA's 50-check-per-call limit and caused the admin tab gates to fail. Calls are now automatically chunked into batches of 50.

(#2174)

Slack integration agent pickers paginate beyond first page

The Admin → Integrations → Slack panel's agent pickers (onboard channels section and the configured channel route editor) only ever showed the first 20 agents because the /api/dynamic-agents fetch omitted page_size and fell back to the endpoint default. Full cursor pagination is now used, so all agents are available regardless of how many are deployed.

(#2175)

RBAC self-check no longer expects manager grant for shared-only teams

The RBAC admin self-check was incorrectly expecting a team#admin manager agent OpenFGA tuple for every team in an agent's owner+shared set. Sharing an agent with a team grants use-only access — a manager tuple is only written for the owner team. The self-check no longer flags use-only shared teams as misconfigured.

(#2171)

Breaking Changes

No breaking changes. Drop-in upgrade from 0.5.46.


Upgrade Guide: 0.5.46 → 0.5.47

No values changes required.

helm upgrade ai-platform-engineering \
oci://ghcr.io/cnoe-io/charts/ai-platform-engineering \
--version 0.5.47 \
-f your-values.yaml