v0.5.93: NextJS config changes, MCP and Blocks whitelisting, copilot keyboard shortcuts, audit logs

[waleedlatif1]

• fix(shortlink): use redirect instead of rewrite for Beluga tracking (fix(shortlink): use redirect instead of rewrite for Beluga tracking #3239)
• feat(mcp): add ALLOWED_MCP_DOMAINS env var for domain allowlist (feat(mcp): add ALLOWED_MCP_DOMAINS env var for domain allowlist #3240)
• feat(canvas): allow locked block outbound connections (feat(canvas): allow locked block outbound connections #3229)
• feat(access-control): add ALLOWED_INTEGRATIONS env var for self-hosted block restrictions (feat(access-control): add ALLOWED_INTEGRATIONS env var for self-hosted block restrictions #3238)
• fix(copilot): copilot shortcut conflict (fix(copilot): copilot shortcut conflict #3219)
• fix(lock): prevent socket crash when locking agent blocks (fix(lock): prevent socket crash when locking agent blocks #3245)
• feat(audit-log): add persistent audit log system with comprehensive route instrumentation (feat(audit-log): add persistent audit log system with comprehensive route instrumentation #3242)
• feat(audit-log): add audit events for templates, billing, credentials, env, deployments, passwords (feat(audit-log): add audit events for templates, billing, credentials, env, deployments, passwords #3246)
• feat(sub): hide enterprise member usage limits for non admin (feat(sub): hide enterprise member usage limits for non admin #3243)
• fix(normalization): update allowed integrations checks to be fully lowercase (fix(normalization): update allowed integrations checks to be fully lowercase #3248)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated (UTC)
docs	Skipped		Feb 18, 2026 8:08pm

[greptile-apps]

Greptile Summary

This release bundle (v0.5.93) introduces several features and fixes across the platform:

• Audit logging system: New audit_log database table with comprehensive instrumentation across ~60 API routes, recording actions like workflow CRUD, deployments, API key management, credential sets, MCP servers, and more. The recordAudit function is fire-and-forget (non-blocking) with proper error handling.
• MCP domain allowlisting: New ALLOWED_MCP_DOMAINS env var to restrict MCP server connections to approved domains. Includes server-side validation (with double-check after env var resolution), client-side UI feedback, and env var hostname bypass for deferred validation.
• Integration block restrictions: New ALLOWED_INTEGRATIONS env var for self-hosted deployments to restrict available block types. Merges with existing enterprise permission group config via intersection logic.
• Locked block outbound connections: Edge protection now only restricts connections to locked blocks, allowing outbound connections from locked blocks.
• Copilot keyboard shortcut fix: Keyboard navigation for the options selector is now gated to only fire when the copilot panel tab is active, preventing conflicts with other UI elements.
• Socket crash fix: Locked block subblock updates now send operation-confirmed instead of crashing, preventing client-side socket errors.
• NextJS config: Beluga tracking short links changed from rewrite to redirect for proper tracking behavior.
• SSO UI refinement: Callback URL copy button repositioned inline with label, icon changed from Copy to Clipboard.

Confidence Score: 4/5

• This PR is safe to merge with low risk — the core changes are well-tested and the audit logging is non-blocking.
• The PR is large (123 files, ~14k lines added) but the bulk of changes are mechanical audit log instrumentation following a consistent pattern. The three new features (audit logging, MCP domain allowlisting, integration block restrictions) are well-tested with dedicated test suites. The audit log is fire-and-forget so it cannot break existing API behavior. The MCP domain check has thorough edge case coverage including env var bypass. The block protection and copilot keyboard shortcut fixes are small, focused changes. Minor style issues exist around case normalization consistency but do not affect runtime behavior. Score reduced from 5 to 4 due to the sheer volume of changes and two minor consistency concerns flagged.
• apps/sim/hooks/use-permission-config.ts has an asymmetric lowercasing pattern in intersectAllowlists that could cause issues if permission group configs contain mixed-case values. apps/sim/app/workspace/[workspaceId]/w/components/sidebar/components/settings-modal/components/integrations/integrations.tsx is missing .toLowerCase() on service ID comparison.

Important Files Changed

Filename	Overview
apps/sim/lib/audit/log.ts	New audit log module with fire-and-forget recordAudit function, comprehensive action/resource type enums, and proper error handling. Well-structured and non-blocking.
apps/sim/lib/mcp/domain-check.ts	New MCP domain allowlist enforcement with env var bypass for unresolvable hostnames. Properly handles edge cases for authority vs path/query env vars. Well tested.
apps/sim/ee/access-control/utils/permission-check.ts	Extended to merge env-level ALLOWED_INTEGRATIONS with permission group config using intersection logic. Case-insensitive matching added. Clean merge logic.
apps/sim/lib/core/config/feature-flags.ts	Added getAllowedIntegrationsFromEnv and getAllowedMcpDomainsFromEnv with proper normalization. Handles bare hostnames and full URLs correctly.
apps/sim/next.config.ts	Changed Beluga tracking from rewrite to redirect. Removes rewrites() function entirely. Correct fix for short link tracking.
apps/sim/app/workspace/[workspaceId]/w/[workflowId]/utils/block-protection-utils.ts	Edge protection now only checks target block, allowing outbound connections from locked blocks. Comments updated to match new behavior.
apps/sim/app/workspace/[workspaceId]/w/[workflowId]/components/panel/components/copilot/components/tool-call/tool-call.tsx	Fixed copilot keyboard shortcut conflicts by gating keyboard navigation to only when copilot panel is active. Added activeTab dependency correctly.
apps/sim/socket/handlers/subblocks.ts	Fixed socket crash by sending operation-confirmed instead of operation-failed when block is locked, preventing client-side errors.
apps/sim/hooks/use-permission-config.ts	Added client-side env allowlist fetch via React Query, intersects with permission group config. Proper loading state management.
apps/sim/app/workspace/[workspaceId]/w/components/sidebar/components/settings-modal/components/mcp/mcp.tsx	Added client-side MCP domain validation with UI feedback. Duplicates env var hostname detection logic from server-side. Domain check properly blocks submit and test buttons.
packages/db/schema.ts	New auditLog table with proper indexes on workspace+created_at, actor+created_at, resource_type+resource_id, and action. FK references with set null on delete.
apps/sim/lib/auth/hybrid.ts	Added userName and userEmail to AuthResult interface and populated them from session data. Enables audit logging in routes using hybrid auth.
apps/sim/lib/mcp/service.ts	Added domain validation at resolve time and filtered server listings by domain allowlist. Double validation (pre and post env var resolution) is correct.
apps/sim/app/api/mcp/servers/route.ts	Added MCP domain validation on POST and audit logging on POST/DELETE. Proper error handling for McpDomainNotAllowedError.
apps/sim/app/api/mcp/servers/test-connection/route.ts	Added domain validation both before and after env var resolution, correctly preventing bypass via environment variables resolving to disallowed domains.
apps/sim/lib/copilot/process-contents.ts	Extended block metadata processing to use env allowlist as fallback when no userId is present. Case-insensitive matching added.
apps/sim/app/api/settings/allowed-mcp-domains/route.ts	New API endpoint exposing allowed MCP domains to the client. Automatically includes platform hostname in the allowlist.
apps/sim/app/api/settings/allowed-integrations/route.ts	Simple API endpoint exposing allowed integrations from env var to client. Properly authenticated.
apps/sim/app/workspace/[workspaceId]/w/components/sidebar/components/settings-modal/components/integrations/integrations.tsx	Added hyphen-to-underscore normalization for service ID matching against allowlist. Ensures service IDs like google-drive match block types like google_drive.

Flowchart

flowchart TD
    subgraph EnvConfig["Environment Configuration"]
        ALLOWED_MCP["ALLOWED_MCP_DOMAINS env var"]
        ALLOWED_INT["ALLOWED_INTEGRATIONS env var"]
    end

    subgraph MCPDomainEnforcement["MCP Domain Enforcement"]
        ALLOWED_MCP --> FeatureFlags["getAllowedMcpDomainsFromEnv()"]
        FeatureFlags --> DomainCheck["domain-check.ts"]
        DomainCheck -->|"validateMcpDomain()"| ServerRoutes["MCP Server Routes\n(POST/PATCH/DELETE)"]
        DomainCheck -->|"isMcpDomainAllowed()"| McpService["MCP Service\n(resolve/list/get)"]
        DomainCheck -->|"isMcpDomainAllowed()"| ClientMCP["MCP Settings UI\n(domain warning)"]
        FeatureFlags --> AllowedDomainsAPI["/api/settings/allowed-mcp-domains"]
        AllowedDomainsAPI --> ClientMCP
    end

    subgraph IntegrationEnforcement["Integration Block Enforcement"]
        ALLOWED_INT --> IntFeatureFlags["getAllowedIntegrationsFromEnv()"]
        IntFeatureFlags --> PermCheck["permission-check.ts\nmergeEnvAllowlist()"]
        IntFeatureFlags --> CopilotTools["Copilot Block Tools\n(5 server tools)"]
        IntFeatureFlags --> ProcessContents["process-contents.ts"]
        IntFeatureFlags --> AllowedIntAPI["/api/settings/allowed-integrations"]
        AllowedIntAPI --> UsePermConfig["usePermissionConfig hook"]
        UsePermConfig --> IntegrationsUI["Integrations Settings UI"]
        UsePermConfig --> BlockToolbar["Block Toolbar Filter"]
    end

    subgraph AuditSystem["Audit Log System"]
        AuditTable[("audit_log table")] 
        RecordAudit["recordAudit()\nfire-and-forget"]
        RecordAudit -->|"async insert"| AuditTable
        APIRoutes["~60 API Routes"] -->|"recordAudit()"| RecordAudit
        AuthHooks["Auth Hooks\n(password reset)"] -->|"recordAudit()"| RecordAudit
    end

Loading

_{Last reviewed commit: e396462}

[greptile-apps]

_{29 files reviewed, 3 comments}

_{Edit Code Review Agent Settings | Greptile}

[greptile-apps]

Additional Comments (1)

apps/sim/ee/access-control/utils/permission-check.ts
getPermissionConfig returns null without env merge when userId is absent

getPermissionConfig returns null (line 142) when userId is undefined, skipping the mergeEnvAllowlist(null) call. While validateBlockType (line 191) handles this by directly calling mergeEnvAllowlist(null), other callers of getPermissionConfig (like copilot tools that use it via context caching) will not see the env allowlist when userId is undefined. Consider returning mergeEnvAllowlist(null) here for consistency:

  if (!userId) {
    return mergeEnvAllowlist(null)
  }

[waleedlatif1]

@greptile

[waleedlatif1]

@cursor review

[greptile-apps]

_{123 files reviewed, 2 comments}

_{Edit Code Review Agent Settings | Greptile}

[cursor]

Cursor Bugbot has reviewed your changes and found 2 potential issues.

^{Bugbot Autofix is OFF. To automatically fix reported issues with Cloud Agents, enable Autofix in the Cursor dashboard.}

[cursor]

Inconsistent resource names in audit logs

Low Severity

Some recordAudit calls omit resourceName while similar operations include it, creating inconsistent audit log completeness. For credential set operations, memberships/route.ts doesn't include the credential set name, while [id]/members/route.ts does via result.set.name. Similarly, billing and environment audit calls lack resource names that would improve traceability. This reduces audit log usefulness since users can't easily identify which specific resource was affected without cross-referencing IDs.

Additional Locations (2)

• apps/sim/app/api/billing/credits/route.ts#L60-L70
• apps/sim/app/api/environment/route.ts#L56-L66

 

[cursor]

Domain validation runs on optional URLs

Medium Severity

Domain validation executes unconditionally on body.url even when undefined, causing the creation endpoint to reject servers without URLs when an MCP domain allowlist is configured. This contradicts the deliberate design choice to allow creating servers without URLs (evidenced by line 86 generating random UUIDs when URL is missing), and creates inconsistency with the PATCH endpoint which only validates domains when a URL is actually provided.