Shipping update - 2026-02-06
Shipped safer AI tool exposure, deeper AI assistant linking, and Slack multi-workspace installs, plus faster linting and streaming updates to improve reliability and UX.
Highlights
- AI tool safety: mutating MCP tools are now filtered before being exposed to the agent, with clear logging of what was removed, so the AI assistant cannot surface write/destroy operations until authorization is ready.
- AI assistant deep links: conversation responses now include structured sources derived from tool results, enabling users to jump to relevant screens with consistent titles and safe URL extraction.
- AI assistant UI upgrades: the chat UI now renders structured tool-result cards and source links, with improved streaming handling and copy behavior to reflect only visible content.
- Slack app multi-workspace installs: added OAuth install flow and per-workspace configuration so the Slack bot can be installed across multiple workspaces without custom setup.
- Faster linting workflow: migrated web linting to Oxlint, updated CI and config to keep lint feedback fast while preserving core rules.
User outcomes
- AI assistant users get safer tool availability and fewer risky actions exposed before RBAC is in place.
- AI assistant answers now include clear, clickable sources that map to product areas, improving traceability and navigation.
- Chat UI presents tool outputs more clearly, with structured parts and better loading states, making responses easier to scan and share.
- Slack users can install the bot via OAuth across multiple workspaces and complete setup without manual token handling.
- Engineers get quicker lint runs with a simplified lint pipeline in CI and local workflows.
Technical wins
- Implemented a dedicated blacklist with filtering at tool aggregation time, plus structured logging, to prevent mutating tool exposure while keeping the tool pipeline intact.
- Added source extraction and route-title mapping in the conversation pipeline, including URL parsing and per-tool source aggregation to keep links consistent and deduplicated.
- Migrated streaming to the AI SDK v6 data stream protocol, introduced request-scoped stream writers, and aligned UI message handling with the new structured event model.
- Built workspace-aware Slack configuration resolution with OAuth-backed installations and safe fallback to legacy single-workspace mode.
- Replaced ESLint with Oxlint configs and updated CI steps so linting remains strict but faster, while removing rules that cannot be faithfully ported.
Notes
- Sensitive/internal details have been redacted.