Change Gate

Approve production changes from a card that says what changes, where and how to undo it. Agents ask before a migration, a deploy or deleting shared data, and you answer with one click. An approval covers one request, and a decline tells the agent not to look for another route. Every decision stays in a journal page and in bb change-gate log. Agents are instructed to ask; the gate does not block other tools.

Overview

View source

Tired of typing "I confirm" into chat? Agents ask with a clear card: what changes, where, and how to undo it. You answer in one click, and every decision stays in a journal.

What you get

An approval card in place of the composer, written in plain words.
A journal page and a bb change-gate log command.
An approval covers one request; a decline tells the agent not to look for another route.

How it works

Agents are instructed to call the change_gate tool before changing production or shared data. It is an agreement, not a lock: it cannot block other tools, and an agent with shell access could answer its own request, so keep your provider permission rules. Nothing leaves your BB server.

More from Alexander Kashin

File VersionsSee which copy of a deck, document or spreadsheet is the latest across all your projects. Groups v2, final, dated and (1) copies of one document, in English and Russian. Copies in archive folders never count as the latest ahead of a current one. Agents get the same answer from bb file-versions list, so they work from the right file. Reads project folders on the BB server and never changes a file.New Token GuardStop API keys from landing in your agent chats, and find the ones already there. Rejects a message that contains a credential before it reaches the agent or thread history. Scans Claude Code, Codex and BB history on your server in one click. Lists each credential by kind and fingerprint with a link to its revoke page, and never shows, stores or sends a value.New Try ItTest what your agent built from your phone, and send your verdict back with one tap per check. The agent shows a QR code, a link, what changed and a checklist in place of the composer. Each check gets Works or Broken, plus an optional note, and the answer goes straight back to the agent. Localhost links are refused, so the link you get opens on your phone.New

More in Security 5

Protect credentials or prevent unsafe code.

View all

Env CatalogStore API keys, tokens, and secrets in a single encrypted catalog across all BB sessions and machines. Securely request credentials via masked in-app modals. Agents automatically check available credentials before prompting you, and persist newly provided keys on demand. Values are encrypted at rest with AES-256-GCM and synchronized via your central BB server. Includes dedicated agent tools, a full-featured management UI with .env import/export, and terminal CLI commands.

Kirill Vechkasov57

Security GuidancePattern-matched security warnings for code the agent writes — 25 rules covering unsafe deserialization, injection, XSS, and crypto footguns.

prismatic755

Password GateLocks the bb app behind a password, so an unattended window stops exposing your threads. Set the password in Settings, and every window shows an unlock panel until someone enters it. Tick Trust this device once and that browser skips the prompt until the trust window ends. Forgot it? The panel covers the Settings page, so run `bb password-gate reset` in a terminal to open the app again. The lock is the app window, not your data: it does not stop anyone who can run commands on the bb machine or reach its port.

rayzalzero7