Want to influence priorities? Vote and comment on the public board at GitHub Discussions. The most-upvoted items in Next get pulled forward.
Now (in progress)
· May 2026Daemon production polish
systemd unit file, Docker image, sample logrotate config.
Mobile chat polish — round 2
v0.7.4 shipped the slide-in sidebar drawer + hamburger button. Round 2: keyboard-aware composer, swipe-to-open drawer, mobile model selector improvements.
Real QR encoder client-side
Daemon already pushes a PNG data URL; once 0.7.x lands we'll also offer SVG with selectable size for accessibility.
Next quarter
· Q3 2026SOC 2 Type I report
With Vanta. Once we have the report, we'll make it available under NDA from /security.
Community-published templates
v0.7.5 shipped 8 curated templates. Round 2: workspace-published templates with publish-to-public flow + per-template plan caps.
Audit log forwarding
Stream audit events to your SIEM (Datadog, Splunk) for customers with their own retention policies.
Later this year
· Q4 2026EU data residency option
Neon Frankfurt cluster, gated by enough EU customers to justify the operational cost.
Customer-managed encryption keys (CMEK)
For enterprise customers who want to hold the key that decrypts their bridge tokens and BYOK keys.
Computer-use tool for the daemon
Once Anthropic's computer-use model is generally available; sandboxed via container.
Recently shipped
AI co-pilot chat in photo editor
v0.10.5 — Bee Creative photo editor gets a chat panel. User describes edits in natural language ('buat lebih sinematik', 'ganti latar belakang jadi pantai tropis'); vision LLM returns a plan of operations the client applies — local adjusts (instant), generative-fill, outpaint expand, conversational explain. Photorealism prompt anchor + 40-step FLUX defaults for natural-looking output. Also fixed: AI describe error from a stale model id (`claude-sonnet-4-5` → `claude-sonnet-4-6`) — added non-throwing `tryGetModel` so future id changes don't break the fallback chain.
Mock executor wrapped in `after()` for serverless
v0.10.4 — closes the last fire-and-forget pattern in the cloud. Previously demo-mode missions got killed mid-step by Vercel's response-flush suspend; now they run to completion via `after()` bounded by maxDuration. Mock executor also stamps heartbeatAt opportunistically so the v0.10.3 reaper has fresh data if the function ever exceeds 60s.
AgentTask heartbeat + stuck-task reaper
v0.10.3 — daemon that crashed mid-task no longer leaves a permanent 'running' row in Mission Control. New `heartbeatAt` column + 30s daemon ping + cron reaper flips stale (>5 min no heartbeat) tasks to `failed`. Atomic claim prevents racing a daemon that woke back up. Backward-compat with older daemons via opportunistic heartbeat updates on the event endpoint.
Platform-wide security & integrity audit
v0.10.2 — 4-commit hardening pass closing ~25 P0/P1 findings. OAuth open-redirect + cookie HMAC + Telegram + CRON_SECRET all moved to `timingSafeEqual`; CRON_SECRET query fallback removed. R2 storageKey strict-whitelist (SSRF defence). Schema cascade fixes + BcPortfolio @@unique. Encryption key rotation support (KEY_PREVIOUS). GDPR export bumped to v2 with full Bee Creative footprint. Stripe webhook future-proofed for API-2025-08-27. apiErrorResponse stops echoing library error messages. Per-user rate limits on Replicate + OAuth start + GDPR export. 119 tests passing (was 107).
Social-accounts settings + auto-refresh
v0.10.1 — Settings → Social accounts page lists connected YouTube/X/Facebook/Instagram/TikTok with expiry + scopes + one-click disconnect. New shared `oauth-refresh.ts` rotates short-lived access tokens (YT 1h, X ~2h, TikTok 24h) on publish so users don't see 401s mid-post. Twitter refresh helper closes the gap from v0.9.
Bee Creative v0.10 — R2 storage + 3 more social platforms
v0.10.0 — Cloudflare R2 (S3-compatible) blob storage with backward-compat data URL fallback. Facebook + Instagram (one Meta consent yields both via Pages + IG Business linkage) + TikTok (PULL_FROM_URL via R2). Five platforms total: YouTube · X · Facebook · Instagram · TikTok. All five share one OAuth helper + one publish endpoint.
Bee Creative v0.9 — diffusion + FFmpeg + OAuth
v0.9.0 — generative fill / remove / expand via Replicate FLUX. Server-side video render (≤5 min) via fluent-ffmpeg with watermark + drawtext overlays + audio mux. YouTube + X (Twitter) OAuth + actual posting via Data API. Per-call cost tracking on bcAiCalls + bcExportMinutesPerMonth budgets.
Bee Creative — photo + video editor
v0.8.0 — Canvas-based photo editor (layers, adjustments, text, shapes, PNG/JPEG export) + multi-track video editor (timeline drag-drop, MediaRecorder MP4/WebM export ≤60 s). AI describe + AI auto-title via existing vision LLM. 12 platform-aspect templates, 16 curated fonts, plan-aware caps + free-tier watermark.
Slack bridge + Sentry + rate limiting + e2e tests
v0.7.6 — fourth bridge surface (Slack /bee command), Sentry error tracking, Upstash rate limiting, Playwright e2e for public surfaces, 89 unit tests including integration tests via prisma-mock.
Custom agents marketplace
v0.7.5 — 8 curated templates (Slack digest, code review, bug investigation, doc writer, etc.) with one-click instantiation. Public /marketplace browse for non-signed-in discovery.
Audit log + outbound invite email + mobile drawer
v0.7.4 — three-pack: SOC-2-style audit trail with cursor-paginated UI, Resend-powered invite emails, slide-in conversation drawer for mobile chat.
Mission scheduling
v0.7.3 — cron-driven recurring missions with timezone, presets + custom expressions, plan-aware caps. Vercel Cron config + self-host instructions.
Workspace member invites
v0.7.2 — invite by email + role, link-based with revocation, plan-aware seat enforcement, public accept page.
WhatsApp bridge (M6.7)
v0.7.1 — QR-pair via whatsapp-web.js. Daemon owns the live session; messages never traverse our cloud.
Privacy & compliance pre-launch pass
v0.7.0 — encryption at rest, full legal pages, GDPR export, soft-delete, BYOK.
Multi-provider chat with 9 models
v0.6.6 — Anthropic + OpenAI + Google grouped by provider with availability badges.
Daemon ↔ cloud handshake (M6.5–6.6)
v0.6.5–v0.6.6 — workspace-scoped API keys, open-bee CLI, Telegram bridge.
Mission Control Kanban (M6)
v0.6.0 — drag-to-move board, live event log, retry, archive.
Open-source agent runtime (M5)
v0.5.0 — Apache-2.0, plugin system, reference tools.
Visual Mode (M4)
v0.4.0 — Mermaid + Recharts in a sandboxed iframe.