Evidence record / agent-zero
A dated record of one change, kept so the writing that cites it can be checked. Compiled from the sources listed below by the research run, not written for reading. The judgment lives in the issues that cite it, below.
2026-10-13-agent-zero-messaging-users-can-toggle-plugins-and-edit-project-scoped-profile-permissions
Messaging users can toggle plugins and edit project-scoped profile permissions. Telegram and WhatsApp run incoming messages through the shared Commands catalog before the agent sees them. /plugins changes toggles instance-wide, protecting always-enabled plugins, Commands and the integration itself; it can disable the opt-in _infection_check. /permissions refuses the built-in Default profile and active runs, then writes through Agent Editor. The change persists in that profile’s active project scope, or its global scope when no project is active; chats resolving that scope can inherit it. /copy exports the bound transcript. Telegram /chat accepts an arbitrary instance chat ID and its picker lists all contexts; WhatsApp checks conversation ownership. Empty Telegram allowed_users and WhatsApp allowed_numbers admit every sender once configured. Telegram numeric IDs match account IDs; @name entries match the current username. Both integrations ship unconfigured, not as active public bots. Computer Use grants stay at the host bridge.
Channel: tagged-release. Half: both. Date: 2026-09-23 (first stable; implementation 2026-09-14).
Operator consequence: Before upgrading a configured bot or pairing, set explicit numeric allowed_users or allowed_numbers. Treat admitted identities as plugin administrators and as policy editors for non-Default profiles/scopes they can reach. Check both the saved project scope and plugin toggles after messaging use. A non-allowed account should receive no /permissions response; an allowed account should reach the menu. That live acceptance test remains to be performed.
Receipt
- https://github.com/agent0ai/agent-zero/commit/17033d277e4a39a99865455d87e4b0719bc3bf0f
- https://github.com/agent0ai/agent-zero/commit/359ccb11c5fa3b10df095f80a4950dfb1637a19f
- https://github.com/agent0ai/agent-zero/blob/v2.14/plugins/_telegram_integration/helpers/settings_ui.py#L19-L113
- https://github.com/agent0ai/agent-zero/blob/v2.14/plugins/_whatsapp_integration/helpers/slash_commands.py#L204-L251
- https://github.com/agent0ai/agent-zero/blob/v2.14/plugins/_telegram_integration/helpers/handler.py#L99-L115
- https://github.com/agent0ai/agent-zero/blob/v2.14/plugins/_whatsapp_integration/helpers/handler.py#L88-L98
- https://github.com/agent0ai/agent-zero/blob/v2.14/plugins/_telegram_integration/helpers/slash_commands.py#L63-L68
- https://github.com/agent0ai/agent-zero/blob/v2.14/plugins/_agent_editor/helpers/editor.py#L742-L781
- https://github.com/agent0ai/agent-zero/blob/v2.14/plugins/_agent_editor/helpers/editor.py#L1056-L1090
- https://github.com/agent0ai/agent-zero/blob/v2.14/helpers/plugins.py#L850-L863
Finding metadata
Run: 2026-10-13-profile-refresh-2026-09-21_2026-10-13-frontier-v0
Finding ID: 2026-10-13-agent-zero-messaging-users-can-toggle-plugins-and-edit-project-scoped-profile-permissions
Profile citations
- Agent Zero / claim / messaging-administration-scope
- Agent Zero / posture / accessibility
- Agent Zero / posture / governance
Source links
Primary links, including exact changelog lines when available.
- commit2026-10-13-agent-zero-messaging-users-can-toggle-plugins-and-edit-project-scoped-profile-permissionsgithub.com/agent0ai/agent-zero/commit/17033d277e4a39a99865455d87e4b0719bc3bf0fcommit2026-10-13-agent-zero-messaging-users-can-toggle-plugins-and-edit-project-scoped-profile-permissionsgithub.com/agent0ai/agent-zero/commit/359ccb11c5fa3b10df095f80a4950dfb1637a19ftagged commit file2026-10-13-agent-zero-messaging-users-can-toggle-plugins-and-edit-project-scoped-profile-permissionsagent0ai/agent-zero / plugins/_telegram_integration/helpers/settings_ui.py#L19-L113tagged commit file2026-10-13-agent-zero-messaging-users-can-toggle-plugins-and-edit-project-scoped-profile-permissionsagent0ai/agent-zero / plugins/_whatsapp_integration/helpers/slash_commands.py#L204-L251tagged commit file2026-10-13-agent-zero-messaging-users-can-toggle-plugins-and-edit-project-scoped-profile-permissionsagent0ai/agent-zero / plugins/_telegram_integration/helpers/handler.py#L99-L115tagged commit file2026-10-13-agent-zero-messaging-users-can-toggle-plugins-and-edit-project-scoped-profile-permissionsagent0ai/agent-zero / plugins/_whatsapp_integration/helpers/handler.py#L88-L98tagged commit file2026-10-13-agent-zero-messaging-users-can-toggle-plugins-and-edit-project-scoped-profile-permissionsagent0ai/agent-zero / plugins/_telegram_integration/helpers/slash_commands.py#L63-L68tagged commit file2026-10-13-agent-zero-messaging-users-can-toggle-plugins-and-edit-project-scoped-profile-permissionsagent0ai/agent-zero / plugins/_agent_editor/helpers/editor.py#L742-L781tagged commit file2026-10-13-agent-zero-messaging-users-can-toggle-plugins-and-edit-project-scoped-profile-permissionsagent0ai/agent-zero / plugins/_agent_editor/helpers/editor.py#L1056-L1090tagged commit file2026-10-13-agent-zero-messaging-users-can-toggle-plugins-and-edit-project-scoped-profile-permissionsagent0ai/agent-zero / helpers/plugins.py#L850-L863
Versioned source: run artifact