February 2026

Updates released in February 2026.

February 28, 2026

Faster Login for Standalone Users

Signing in when using Operator outside an iframe is now significantly faster
The login flow now navigates directly to the authentication page instead of making an intermediate API call, eliminating CORS preflight delays

February 27, 2026

Lifecycle Callback Security Upgrade

App installation and uninstallation callbacks from the ERP.net Marketplace now require a cryptographic signature (v2 envelope format)
Unsigned (v1) lifecycle payloads are no longer accepted

February 26, 2026

Knowledge Search Fix

Fixed an issue where searching through business rules, internal cases, products, companies, and document types could return incomplete results when using date filters
All indexed items now have consistent timestamp metadata, ensuring reliable search and recency scoring

MCP Servers Integration

Users can now define MCP (Model Context Protocol) servers associated with their ERP.net instances
MCP servers extend Operator's AI with external tool capabilities via the OpenAI native MCP format
Management page at /mcp-servers allows Power Users and Instance Admins to add, edit, and delete MCP servers
Each server can be configured with authentication (none or instance token) and optional tool filtering
Base agent activation: Users can activate MCP servers for built-in agents (Business Specialist, System Architect, etc.) from the Capabilities page using per-server toggles
User-defined agent binding: Custom agents can be bound to a specific instance and pin selected MCP servers via the new MCP Servers tab in the agent editor
MCP servers are automatically injected into AI conversations when the associated instance is connected
All MCP tool calls require explicit user approval before execution, with a confirmation dialog showing the server label and tool name
Users can auto-approve all tools (including MCP) via the "Auto-approve everything" option
Documentation →

Execution Interrupt Reliability

Resetting an active/stalled execution now persists an "Execution interrupted" status message in chat history
Interrupted executions no longer save false "unexpected error" assistant messages caused by closed client streams
Final assistant persistence is skipped if the execution was reset mid-run, preventing misleading post-interrupt output

Background Execution Visual Continuity

Switching to or reloading a running execution now restores the typing indicator and elapsed-time clock
The start time is derived from the most recent user message or conversation update for accurate timing
The "tools used" count is restored from persisted message history
When a background execution completes, the final assistant message loads automatically without requiring a manual refresh

February 22, 2026

Agent Rename: ERP Consultant → System Expert

The ERP Consultant agent is now called System Expert
New description: "Solves complex business problems and configures the ERP: custom logic, workflows, settings, and specialized apps."
Internal key erp_manager remains unchanged — no impact on existing automations or saved agents

February 19, 2026

Locked Agent & Instance for Active Executions

Once an execution has messages, the connected business instance and agent are permanently locked for that execution
The instance selector shows a lock icon and is disabled during active executions
The agent selection submenu is hidden from both the profile dropdown and the chat input "+" menu during active executions
Switching to a different instance while viewing an active execution triggers re-authentication to the correct instance
New executions continue to use whatever instance and agent are currently selected

Type-Aware Record Button Numbering

Auto-generated "Open [Entity]" buttons now number records per entity type instead of globally
If only one record of a type is created, no number is shown (e.g., "Open Lead")
Multiple records of the same type are numbered starting from 1 (e.g., "Open Task 1", "Open Task 2")

February 18, 2026

Auto-Generated Record Creation Links

When a record is created via create_erp_record, an "Open [Entity]" button now appears automatically — no AI credits consumed
Button labels now use singular entity names (e.g., "Open Lead" instead of "Open Leads")
When multiple records are created, buttons are numbered (e.g., "Open Lead 1", "Open Lead 2")
If the record has a DisplayText, it is appended to the label (e.g., "Open Lead — Acme Bulgaria EOOD")
The AI no longer duplicates these links in its text response
Only aggregate root entities (e.g., Sales Orders) generate buttons; child records (e.g., Sales Order Lines) do not
If more than 4 records are created in a single turn, an overflow indicator is shown
New user setting: Record creation links (default: ON) — toggle in Settings to control this behavior

Record Creation No Longer Requires Confirmation

create_erp_record is no longer marked as a destructive tool — records are created immediately without a confirmation step

Topic Guard Setting

New optional user setting: Topic guard (default: OFF) — restricts the AI to ERP.net and business-related topics only
When disabled, saves ~400 tokens per message by omitting topic enforcement from the system prompt
Toggle in Settings to enable strict topic filtering when needed

Concise Responses for Business Specialist

The Business Specialist agent (and all user-defined agents based on it) now produces shorter, more concise text responses
Other agents (Advisor, System Architect, Sales Executive) are unaffected

Performance Optimizations

Improved performance and reliability across chat and backend operations

February 17, 2026

Word & Excel File Attachments

Chat now supports attaching Word (.docx) and Excel (.xlsx, .xls) files
Text is automatically extracted server-side and sent to the AI for analysis
Extracted content is truncated to 15,000 characters for large documents
Graceful error handling for corrupted or unreadable files

Update Data & Import/Export Improvements

Improved performance and reliability for Update Data and Import/Export operations

February 13, 2026

Capability Rename: "Manage Records" → "Update Data"

The "Manage Records" capability is now called Update Data to better complement the read-only "Query Data" capability
All user-facing labels, documentation, and agent prompts updated
No changes to internal capability keys, tool names, or automation configurations

Agent Renames

ERP Advisor is now Advisor — knows everything about business operations and ERP.net
ERP Manager is now System Expert — solves complex business problems and configures the ERP
Updated Business Specialist description
All agent keys remain unchanged — no impact on existing automations or saved agents

February 9, 2026

Follow-Up Execution Continuity

Automations configured with "Continue in same execution" now reuse the existing execution when a follow-up event arrives in the same thread (e.g., email replies)
Action buttons are automatically disabled for automation executions — no wasted tokens on interactive UI elements in headless runs
If the execution is busy, the follow-up is queued as a Waiting run and automatically processed when the current run completes
New thread_id tracking on executions enables thread-based lookup
Run history now displays the Waiting status for queued follow-up runs

Automation Capabilities Merged with Agent

Automation-configured capabilities are now merged (unioned) with the user-defined agent's capabilities instead of being restricted to their intersection
This fixes an issue where capabilities like Email, explicitly enabled on an automation, were stripped if the assigned agent didn't include them
Interactive chat sessions continue to respect the agent's configured capability subset

February 8, 2026

Automations Menu Simplified

The Automations submenu has been replaced with a single direct menu item navigating to /automations
Monitor and Event Sources sub-items removed (now integrated into the Automations page)
Automations remain restricted to Power User+ (level 30+)

Automation Deletion Fix

Dropping the execution_type_integrity constraint allows automation deletion to proceed without errors

Event Skip Reasons

Events that are skipped (no matching automations) now store a clear reason in the message field
The Events dashboard shows skip reasons with an info-style banner, distinct from error messages
The error_message column has been renamed to message to support both error and informational context

Auto-Approve Capabilities for Automations

Automations now support per-capability auto-approve for destructive tools, configurable from the Capabilities tab in the automation editor
In Custom mode, each destructive capability shows a shield icon toggle — amber when auto-approve is active
"Auto-approve all" button sets global auto-approval for the automation's executions
Auto-approve settings are persisted on the automation and passed to every execution

Real-time Mail Notifications

Mail event sources with emission mode set to Real-time now receive instant push notifications via Microsoft Graph change notifications (MS365) or Gmail Pub/Sub watches
Push subscriptions are created automatically when switching to Real-time mode and torn down when switching away
Automatic subscription renewal: Expiring subscriptions are renewed nightly — MS365 (~3 days) and Gmail (~7 days) subscriptions are refreshed before they expire with no manual intervention required
The sync mechanism acts as a catch-up fallback for real-time sources, ensuring no emails are missed
Subscription metadata is stored polymorphically on the event source, ready for future instant-message platform support
Sources with emission mode Never are now skipped during scheduled sync runs

Event Source Emission Mode

Mail event sources now support an emission mode setting: Real-time, On sync only, or Never
Configured during the post-OAuth mailbox selection dialog when connecting a mailbox
Emission mode is displayed as a badge on the Event Sources page and in the automation editor's trigger picker
Default is "On sync only" for backward compatibility with existing sources

Business Context Persistence per Execution

Each execution now snapshots the active business connection and enterprise context (company + location) at creation time
When switching between executions, the header bar automatically reflects the business context that was active when the execution was started
The AI agent always sees the correct business context matching the header display
When no execution is active, the header manages the global default for new executions

Reasoning Level Persistence per Execution

Each execution now snapshots the active reasoning level (Fast/Smart/Expert/Genius) at creation time
When switching between executions, the reasoning badge reflects the level that was active for that execution
Changing the reasoning level while an execution is active updates the execution's persisted level
When no execution is active, the reasoning badge manages the global default for new executions

February 8, 2026

Capability-Scoped Auto-Approve for Destructive Tools

Auto-approve for destructive tool confirmations is now per-capability and persisted on the execution
When a destructive tool asks for confirmation, you can now:
- Execute — approve this single action
- Auto-approve [Capability] — automatically approve future actions under that capability (e.g., "Auto-approve Email")
- Auto-approve everything — (overflow menu) approve all destructive actions for this execution
Auto-approve settings survive page refresh and execution switching
New status messages distinguish between single approval, capability-level, and full auto-approval
Manage auto-approve from the Capabilities dialog: Open the + menu → Capabilities to see shield icons next to each destructive-capable capability, allowing you to toggle auto-approval proactively without waiting for a tool to trigger

February 8, 2026

Database Rename: conversations → agent_executions

The conversations table has been renamed to agent_executions to better reflect its purpose as agent work execution records
Column conversation_type renamed to execution_type
All constraints, indexes, triggers, RLS policies, and database functions updated accordingly
Frontend hooks and components updated with backward-compatible aliases
No user-facing URL changes — /c/:id routes remain the same

Email Folder Management

New list_mail_folders tool to list all folders/labels in a connected mailbox
New move_email_to_folder tool to move emails to specific folders by folder ID
New list_folder_emails tool to list emails in any folder by ID (unlike list_emails which only supports predefined folders)
Supports both MS365 and Gmail providers

February 7, 2026

Visual Event Filter Builder

New visual filter builder in the automation editor's Filter tab replaces raw JSON editing
Field selection uses a dropdown populated from the event type's schema
Type-aware value inputs: date picker for date-time fields, boolean toggle, and text input
Support for nested AND/OR groups for complex filter logic
11 operators available: equals, not equals, contains, does not contain, starts with, does not start with, ends with, does not end with, matches regex, does not match regex, and exists
Regex operators enable powerful domain-based email filtering (e.g., exclude emails from @internal.com)

Schedules as Event Sources

Schedules are now managed as event sources alongside mailboxes and webhooks
Create reusable schedules from the Trigger tab or the Event Sources page
Multiple automations can share the same schedule
The automation editor no longer has a separate Schedule/Event toggle — all triggers use the unified Event Source picker
Backend scheduler queries the new schedules table and supports legacy inline schedules during transition

Event Sources

New unified Event Sources page to manage all connections that emit events (mailboxes, schedules, webhooks, ERP connectors)
Each mail connection now automatically creates an event source with linked event types
Deleting an event source removes the entire hierarchy (including the underlying mail connection)
Automation editor now uses a two-level event picker: first select the event source, then the event type
Replaces the previous flat event type dropdown for clearer, source-aware event selection

Capabilities Page: Default vs. Custom Mode

New two-option mode selector on the Capabilities page: Agent defaults (all included capabilities active, recommended) or Custom (manually toggle individual capabilities)
Agent defaults mode hides toggle switches for a cleaner read-only view
Replaces the previous preset dropdown with a more intuitive experience

February 4, 2026

Agent Editor Improvements

Suggested actions now derive from agent greeting buttons—no separate configuration needed
Added expand button (↗) to Suggested Actions editor for editing long messages or URLs in a larger modal
Consolidated Suggested Actions editing into the Greeting tab for a streamlined workflow
Improved macro editing with larger dialogs and quick search

Stability

AI engine errors are now automatically retried with exponential backoff for better reliability

February 3, 2026

Agent Sharing

Share user-defined agents with other users via the Sharing tab
Shared agents appear in recipients' agent selection under "Shared with Me"
Recipients can use shared agents but cannot modify their definitions

Import/Export Data

New capability for bulk import and export of ERP.net data using the standard Import format
Supports create, update, delete, merge, and find operations with transaction control

Tool Gating

Complex tools now require reading documentation first before becoming available
Prevents malformed requests by ensuring proper understanding of tool requirements

February 2, 2026

Execution URLs

Each execution now has its own URL (/c/:id) for bookmarking and sharing
Browser back/forward navigation works between executions
Legacy ?conversation= query param auto-redirects to new format

Draft Action Buttons

New "draft" button type that populates the input field without sending, allowing users to review and edit before submitting
Useful for complex queries, templates with placeholders, or suggestions users might want to customize
Draft buttons display with a dashed border and pencil icon for visual distinction