Back to changelog
Feb 6, 2026AISecurityIntegrationsDX

Shipping update - 2026-02-06

Shipped safer AI tool exposure, deeper AI assistant linking, and Slack multi-workspace installs, plus faster linting and streaming updates to improve reliability and UX.

Highlights

  • AI tool safety: mutating MCP tools are now filtered before being exposed to the agent, with clear logging of what was removed, so the AI assistant cannot surface write/destroy operations until authorization is ready.
  • AI assistant deep links: conversation responses now include structured sources derived from tool results, enabling users to jump to relevant screens with consistent titles and safe URL extraction.
  • AI assistant UI upgrades: the chat UI now renders structured tool-result cards and source links, with improved streaming handling and copy behavior to reflect only visible content.
  • Slack app multi-workspace installs: added OAuth install flow and per-workspace configuration so the Slack bot can be installed across multiple workspaces without custom setup.
  • Faster linting workflow: migrated web linting to Oxlint, updated CI and config to keep lint feedback fast while preserving core rules.

User outcomes

  • AI assistant users get safer tool availability and fewer risky actions exposed before RBAC is in place.
  • AI assistant answers now include clear, clickable sources that map to product areas, improving traceability and navigation.
  • Chat UI presents tool outputs more clearly, with structured parts and better loading states, making responses easier to scan and share.
  • Slack users can install the bot via OAuth across multiple workspaces and complete setup without manual token handling.
  • Engineers get quicker lint runs with a simplified lint pipeline in CI and local workflows.

Technical wins

  • Implemented a dedicated blacklist with filtering at tool aggregation time, plus structured logging, to prevent mutating tool exposure while keeping the tool pipeline intact.
  • Added source extraction and route-title mapping in the conversation pipeline, including URL parsing and per-tool source aggregation to keep links consistent and deduplicated.
  • Migrated streaming to the AI SDK v6 data stream protocol, introduced request-scoped stream writers, and aligned UI message handling with the new structured event model.
  • Built workspace-aware Slack configuration resolution with OAuth-backed installations and safe fallback to legacy single-workspace mode.
  • Replaced ESLint with Oxlint configs and updated CI steps so linting remains strict but faster, while removing rules that cannot be faithfully ported.

Notes

  • Sensitive/internal details have been redacted.

More updates

View all