Product updates

​

BigQuery Workload Identity Federation

​

Thread costs on the billed basis

​

Required connector credential encryption

• Access control for Tableau datasets — Datasets created from a Tableau connector now enforce object-level access control from the moment they are created, and each grant is recorded in the audit log, bringing them in line with the access control already applied to other datasets.
• Improved sandbox DNS egress — Self-hosted deployments get more reliable sandbox DNS resolution, including a new option to route sandbox DNS egress through the in-cluster DNS service for clusters where a fixed DNS service IP does not work.

​

Scoped API access keys

​

Power BI row-level security for end users

​

Expanded audit logging

​

Merge conflict resolution for Ontology changes

• Tableau embeds attach the Ontology automatically — Tableau embed URLs can now enable the Ontology for all connector datasources.
• Org settings changes recorded as diffs — Audit entries for organization settings changes now record the exact before-and-after value of each changed field and render them as a from → to diff.
• Configurable service account annotations — Self-hosted deployments can now set annotations on the Kubernetes service accounts the chart creates and override each service account’s name or disable its creation, so cluster identities such as IRSA or Workload Identity can be bound to TextQL’s workloads.
• Custom sidecar and init containers — Self-hosted deployments can now append custom sidecar and init containers to TextQL’s pods through per-service extraContainers and extraInitContainers values, for log shippers, metrics exporters, credential bootstrappers, and similar.
• Sonnet 4.6 deprecation — Claude Sonnet 4.6 has been removed from the selectable model catalog and marked deprecated. Chats and defaults still on Sonnet 4.6 should move to a current model such as Claude Sonnet 5.
• Custom Tableau connector resources — Self-hosted deployments can now override the CPU and memory requests and limits for the Tableau connector from the values file.
• Chargeback for usage costs (Beta) — Administrators can now split an organization’s usage bill across internal teams with configurable bill lines. Team rosters update automatically as people are hired, offboarded, or change roles; past billing periods stay frozen and reproducible; and anyone who matches more than one line is flagged for one-click resolution rather than guessed. Includes what-if previews and CSV export.
• Revert approved Ontology changes — Approved changes in Ontology Reviews now have a Revert button that opens the inverse change as a new review.
• Progressive results in batch chat cells — When a chat runs cells in parallel, each result now streams in as it completes instead of appearing all at once.
• Streamed cell events in the chat API — The v2 chat streaming API now emits executable cell events, and generated assets are linked to the message and cell that produced them.
• Built-in skills — Organizations now get built-in skills — including a built-in documentation skill — alongside the skills they create themselves. When a built-in and an org-created skill share a trigger, the org-created skill takes precedence.
• Configurable Python execution timeout — Self-hosted deployments can cap how long a single sandbox Python execution may run; executions that exceed the limit are stopped with a clear timeout error.
• Helm chart version in settings — The Security settings page now shows the deployed Helm chart version, so administrators can confirm which platform release their deployment is running.
• Lower storage use for chat working files — Chats now use roughly half as much working storage: per-chat file storage is provisioned only when a chat actually needs it, rather than up front for every chat.
• Role management in the v2 REST API — The v2 REST API adds endpoints to create and update roles, along with a granular role-permission resource for reading and setting the individual permissions on a role, so roles can be provisioned and adjusted programmatically.
• Ontology library files in the v2 files API — The v2 files API now lists and downloads files from the Ontology library, matching the in-app file browser, with the same access-control and ownership gating applied.
• AWS CodeCommit git sync for Ontology — Ontology git sync now connects to AWS CodeCommit natively using an IAM role, so deployments on AWS can keep their Ontology in CodeCommit without managing separate git credentials.
• Research reports honor the requested document format — When you ask for a research report in a specific document format, Ana now delivers it in that format instead of always producing a PDF.
• Configurable sandbox worker directory retention — Self-hosted deployments can now configure how long sandbox worker directories are retained, giving operators control over scratch-space cleanup timing.

​

GPT-5.6 model family

​

Desktop app tabs and multi-window

​

Connection diagnostics for restrictive networks

• Connector access management in the v2 REST API — The v2 REST API adds endpoints to read and replace which members and roles can access a connector, so connector permissions can be managed programmatically alongside the rest of the API.
• Postgres password from AWS Secrets Manager — PostgreSQL connectors can now source their password from AWS Secrets Manager, so the credential is resolved from your secrets store at connection time instead of being stored on the connector.
• Playbook output gated on connector access — Playbook reports are now visible only to members who have access to the connectors behind them, so sharing a playbook no longer exposes output built on connectors the viewer cannot reach.
• Persistent Power BI and Tableau selections — The Power BI workspace and reports and the Tableau dataset you attach to a chat now persist by default, carrying across turns and into playbooks created from the chat instead of needing to be reselected.
• Concurrent multi-organization sessions — Members who belong to more than one organization can now stay signed into several at once, with each browser tab pinned to its own organization instead of one active org shared across every tab.
• Encrypted OIDC and OAuth secrets at rest — OIDC and API OAuth client secrets are now encrypted at rest and transparently decrypted on read, with a one-time automatic backfill that encrypts any existing secrets on upgrade.
• Chat drafts — Unsent chat messages are now saved as drafts and restored when you return to a conversation, so switching between chats no longer loses what you were typing.
• People analytics in observability — Observability adds a People view with active-people trends, an engagement spectrum, and access-method breakdowns, plus custom start and end date-range filtering across the observability dashboards.
• Dashboard list-view actions — The dashboard list view gains a More actions menu — open in a new tab, duplicate, and move to a folder — with each option shown based on your permissions.
• Ontology Owners subtab — Code owners move into Ontology as a dedicated Owners subtab, and changes that touch owned files now notify the relevant owners for review.
• Workspace and asset endpoints in the v2 REST API — The v2 REST API adds endpoints to manage workspace members, roles, and API keys — including delegated keys for non-service-account users — plus chat asset and cell endpoints for parity with the app.
• Faster dashboard source execution — Dashboard Python data sources now run in parallel according to their dependencies, so dashboards with independent sources refresh faster.
• Dynamic slow-query warnings — Slow-query warnings now use a dynamic p90 threshold based on each connector’s recent query timings, so the warning reflects what is actually slow for your data sources.
• Compute functions return tabular data — Compute functions that return dataframes now surface as rows in chat instead of raw text representations, and the per-chat compute function limit was raised to 1,000.

​

Claude Sonnet 5 model

​

MongoDB connector

• Bedrock console proxy for Anthropic models — Self-hosted deployments can now route Anthropic model traffic through the TextQL console proxy over Bedrock, including as an automatic backup provider that takes over when the primary Anthropic endpoint is unavailable.
• Packages settings gated on read permission — The organization packages settings are now gated behind the packages:read permission, hiding package management from members who lack access.
• Monthly billing aligned to the first of the month — Usage billing periods now start on the first of each calendar month, giving every organization a consistent monthly billing cycle.
• Opus 4.7 and Kimi K2.5 deprecation — Claude Opus 4.7 and Kimi K2.5 are now deprecated and reach end-of-life on July 23, 2026. Playbooks, organization defaults, and active chats still on these models migrate automatically to Opus 4.8 and Kimi K2.6, and administrators receive advance warning emails before the models are removed.
• Sandbox scratch volume failover — Self-hosted deployments can now fail sandbox scratch storage over to a dedicated scratch volume when the primary volume runs out of space, replacing the previous snapshot-copy approach for more reliable out-of-volume recovery.

​

Support of custom gateway when using Anthropic models

​

Per-member Microsoft Entra ID OAuth for SQL Server and Synapse

​

Google Vertex AI model provider

• Self-managed Kubernetes secrets mode — A new secretsMode: "none" lets operators manage the chart’s Kubernetes Secrets entirely themselves, instead of having the chart render them.
• New chart flags to disable k8s CRDs and use Ingress in GKE — New chart options let self-hosted deployments fully disable Istio, skip Gateway API CRDs when the gateway is turned off, and use legacy Ingress on GKE.
• Configurable asset URL expiry — Administrators can now configure how long generated asset URLs — such as shared images and previews — stay valid, defaulting to one day.
• Ontology change review in the v2 REST API — The v2 REST API adds endpoints to list, get, approve, deny, and restore Ontology changes. The previous “patches” terminology is now “changes” across these endpoints.
• Importable library subdirectory modules — Python modules stored in subdirectories of the Ontology library can now be imported from the sandbox.
• Hide the desktop app page for branded deployments — When organization branding is enabled, the desktop app download page is hidden so white-labeled deployments stay on-brand.
• Per-member default model and fast mode — Each member can now set their own default model and turn on fast mode for new chats, layered on top of the existing role, org, and system defaults.
• Model selection in the v2 chat API — The v2 chat API now accepts an explicit model parameter, so programmatic chats can choose which model to run.
• Ontology building methodology — Organizations and individual members can now choose how Ana builds ontology, with a configurable default methodology and a chat-mode summary of the approach in use.
• Token usage for bring-your-own-key models — Chats running on a bring-your-own-key model now show token usage, so you can track consumption against your own provider account.

​

Citation lineage

​

Connector explore page

​

Dataset access control

• Chat citations — Inline source citations appear alongside Ana’s answers, linking each statement back to the underlying data and documents.
• Refreshed tables across the app — Tables and lists throughout the product share a redesigned experience with inline filtering, sorting, pagination, resizable columns, and saved views — applied consistently across members, models, packages, playbooks, and more.
• MCP server management — Settings now has a redesigned page for connecting and managing external MCP servers, with a clearer add/edit form and validation.
• Connector discovery over MCP — Ana’s MCP server adds a list_connectors tool, so connected clients can discover which connectors a deployment has available.
• Save playbooks as configuration files — An existing playbook can now be saved as a configuration file in the Ontology library, bringing it under version control alongside config-defined playbooks.
• HubSpot connector — A new first-party HubSpot API connector lets Ana pull CRM data — contacts, companies, and deals — into the Python sandbox with guided authentication.
• pip extras in custom package installs — Custom Python package installs now accept pip extras such as sqlglot[rs], so packages that ship optional feature sets install correctly.

​

Ramp, ElevenLabs, Apollo, Pylon, and Mercury API connectors

​

Claude Fable 5 model

​

Cloudflare and SendGrid API connectors

​

Configurable SQL query timeouts

​

Hide non-ZDR models when data retention is disabled

​

HEIC image support

​

Connector management in the v2 REST API

​

Multi-approval for Ontology patches

​

New API connectors

​

Audio and video file previews

• FSx snapshot storage routing — On FSx ONTAP deployments, new Helm values can route scheduled workloads (such as playbook schedules) to snapshot copies instead of FlexClones and mount dashboards on read-only snapshots, preserving clone capacity for interactive chats.
• Istio toggle for Helm deployments — A new global.istio.enabled value (default true) controls whether Istio resources such as authorization policies are rendered, for clusters that don’t run Istio or manage their mesh externally.
• Clickable links in CSV previews — HTTP and HTTPS values in CSV previews now render as clickable links that open in a new tab.
• Desktop app automatic updates — The TextQL desktop app now checks for updates automatically and adds a Check for Updates menu item, with update artifacts served from your deployment.
• Live dashboard content updates — Dashboard content edits now push to anyone currently viewing the dashboard, so live viewers see changes without reloading.
• Per-connector database session identity — Database connectors can now pass the authenticated user’s identity into the database session, so queries are attributed to the acting user in your warehouse’s session metadata and audit logs.
• Cell response ratings — Thumbs-up and thumbs-down controls on chat cells let you rate Ana’s responses, capturing feedback for quality tracking.

​

Mid-conversation steering

​

Edit dashboard code and sources inline

​

Capabilities settings redesign

​

Distributed compute engine

​

Ana Claude Code plugin

• Resumable chat streaming — Live chat updates now resume from a saved cursor with periodic heartbeats and automatic reconnect, keeping streams reliable across compute replicas.
• Distributed sandbox pool — Sandbox workers are now coordinated through a shared distributed pool, with improved worker lifecycle handling and orphan cleanup for multi-replica deployments.
• Library skills via slash command — Skills stored in the org Library can now be invoked by typing /<name> directly in the chat composer.
• Word document uploads — .docx and .docm files can now be uploaded in chat and playbooks for analysis.
• PowerPoint uploads — .pptx and .pptm files can now be uploaded and manipulated in chat via python-pptx.
• Snowflake optional database — Snowflake connectors now support account-wide object discovery when no database is specified.
• Ontology patch revision history — A revisions dropdown lets reviewers browse and compare historical versions of a context patch.
• Bedrock per-user audit attribution — Each AWS Bedrock call is now tagged with the actor’s email, so AI usage audit logs attribute activity at the user level.
• Email tool access control — Admins can now enable or disable the Email tool org-wide from Tool Access Control settings.

​

TQL frontmatter in tql files

​

PowerBI preconfiguration via embed URL

​

Ana as an MCP server

​

MCP streaming responses and inline previews

​

Interactive ECharts visualizations

​

Library TQL data source for dashboards

​

Ontology auto-approve rules

​

OIDC identity provider

​

TextQL Doctor diagnostics

​

Language adherence

​

Unified Ontology surface

​

Ontology relationship graph redesign

​

Microsoft Teams integration

​

Power BI per-member OAuth

​

Firebolt connector

​

Observability export to S3

​

Cerebras LLM provider

• Chat input and conversation polish — The chat input box gets aesthetic refinements, messages from other users now show attribution with name and avatar, and consecutive turns from the same author are visually stacked.
• Auto-attach select all — A “Select all visible” checkbox is now available in the Auto Attach file picker.
• Paginated patch reviews — Patch reviews are now paginated per status tab (Open, Draft, Approved, Denied), with server-provided counts shown as badges.
• Cross-domain email allowlist toggle — A new Helm toggle lets administrators restrict cross-domain email allowlisting in OIDC authentication.
• Library plan-first git sync — Git sync now shows a merge plan up front, covering additions, conflicts, and unrelated-history warnings, so admins can preview changes before they land.
• Ontology settings section — A dedicated Ontology section in Settings adds a Context Patch Auto-Approve tab alongside per-org configuration options.
• Ontology sync run tracking — Git sync events are now tracked as discrete objects, enabling precise notification routing and easier conflict resolution.
• Ontology PDF and image migration — Legacy document and image datasets can now be migrated into Ontology directly from the UI.
• Ontology GitHub App connect flow — GitHub App installation now uses an OAuth-first PKCE redirect flow, and install results are preserved across redirects.
• Ontology reviews split view — The Reviews tab now separates patches into Open and Closed (Approved or Denied) with a refinement filter, and closed patches sort by review time.
• Ontology new file highlighting — Newly added files are now visually highlighted in the file tree.
• Playbook connector inheritance — Playbooks now inherit the active connectors, Power BI workspace, and Tableau dataset selections from the chat they were created in.
• Plain-English role editor — Permission labels in the role editor are rewritten in plain English with clear access boundaries, billing:read and usage:read are now visually distinct, and the Bulk Role Assignment modal is unfrozen.
• Email domain enforcement — Member invite and notification emails are now validated against the organization’s allowed domain list.
• Editable Python package versions — Org-installed packages no longer conflict with default sandbox packages, and affected deployments can edit package versions directly.
• SCIM and OIDC identity merge — OAuth login now detects email collisions and attempts reconciliation, while SCIM provisioning heals email mismatches and migrates associated identity and membership data.
• Safe iframe embedding — Pages can now be embedded in iframes safely, without redirect interference.
• Custom documentation URL — Organizations can set a custom documentation URL in their theme settings, replacing the default docs link throughout the product.

​

Asset origin restrictions and Content Security Policies

​

Rich-text editing for Ontology markdown

​

Insert connectors and files as chat chips

​

Expanded Ontology git providers

​

REST API v2 endpoints

​

Per-member OAuth for Snowflake and Databricks ontology

​

Opt-in email tool with recipient lists

​

Sandboxed PDF processing

• Context page refresh on role changes — The context page now refetches library files, permission gates, and review state whenever you assume or clear a role, preventing stale listings and outdated write buttons.
• Paginated chat listing endpoint — A new GET /v2/chats endpoint lists chats with pagination, search, sorting, and an is_running status field.
• Per-viewer dashboard breakdown popover — The views and viewers stat in the dashboard header is now clickable, opening a popover with a per-viewer breakdown.
• Org defaults for dashboard output and private playbooks — New org-level settings let you make dashboard mode the default output format in chat and set playbooks to private by default from the Security tab.
• Ontology enabled by default with seeded connectors — Ontology is now on by default for new orgs, which are also seeded with example connectors to get started faster.
• Fast mode for Anthropic Opus 4.7 — Fast mode is now available for Anthropic Opus 4.7, speeding up inference on that model.
• Delete playbook from detail page — You can now delete a playbook directly from the … dropdown on the playbook detail page, with a confirmation modal to prevent accidental removal.
• Per-source dashboard cache invalidation — Dashboards now invalidate query caches on a per-source basis, so refreshing one data source no longer clears the rest.
• Bedrock STS role assumption — Bedrock now supports STS role assumption with a configurable role ARN and external ID, enabling cross-account Bedrock access.
• Configurable proxy trusted-host allowlist — A configurable trusted-host allowlist lets private resolved IPs for designated hosts pass outbound request validation.
• Unified default model resolution — Chats now resolve their default model in a consistent order: role default, then org default, then system default.
• Patch cell UX refinements — Patch cells now clamp long descriptions with Show more and Show less, scope markdown heading sizes, add a thin custom scrollbar to file lists, and include an Open in Reviews footer link.

​

File uploads in chat and stream APIs

• Redesigned share modal with airlock preview — The share modal is rebuilt with an airlock-style preview and hardened permission controls for safer sharing.
• Automatic ontology migration — Legacy contexts now migrate automatically to the current Ontology, with git sync improvements, owners validation with clear error messages, and auto-attach refinements.

​

GPT-5.5 and Kimi K2.6 models

​

SAP HANA support

​

Expanded connector authentication

​

Ontology git sync

• Fast mode inference — Fast mode inference is now supported for faster responses.
• SCIM group linking to system roles — SCIM now fixes Okta group push and lets you link SCIM groups directly to system roles.
• OIDC single-tenant role sync — OIDC now correctly syncs roles in single-tenant deployments, with an improved environment configuration UI.
• Self-healing dashboard workers — Dashboards now auto-respawn unhealthy workers, drop the automatic LIMIT from queries, run Python data sources in parallel, persist sandbox state with configurable retention, and flush globals atomically on hot refresh.
• Playbook owner failure alerts — Playbooks now notify their owner when a connector fails, with bounded retries before alerting.
• Tool-level RBAC enforcement — RBAC is now enforced at the tool level, with fixed assume-roles enforcement and locked models shown in the picker with a role-restriction tooltip.

​

Dashboards engine rebuild

​

Ontology library redesign

​

Per-user MCP OAuth tokens

• Redesigned assume-roles experience — Assuming a role now uses a redesigned sidebar UI and modal, making it clearer which role you are acting as and how to switch.
• Mark threads as unread — The thread action menu in the sidebar now includes a “Mark as unread” option so you can flag conversations to revisit later.
• Markdown previews in the artifact drawer — The artifact drawer now renders Markdown previews, so you can read formatted content without leaving the drawer.
• Connector UI gated on connector write permission — The connector management UI is now gated behind the connector:write permission, hiding edit controls from members who lack access.
• Observability billing granularity — Observability now reports billing data at a finer granularity for more precise usage tracking.
• TLS 1.2 and 1.3 enforcement — Connections are now restricted to TLS 1.2 and 1.3 only, and several core libraries have been upgraded to strengthen security.
• Automated Helm chart releases — The Helm chart now ships with an automated changelog and Semver release conventions, streamlining the upgrade process for each new release.
• Slack sender names and View in App — Ana now receives sender names in Slack messages for clearer attribution, and the “View in App” button has been restored and fixed across all channel types.
• Granular per-thread sharing controls — Thread sharing now offers granular per-thread controls, letting you decide exactly who can access each conversation.
• Tool restriction controls and admin override — Tool restrictions gain improved controls with an admin override, and tool-level access is now enforced through RBAC.
• Pause playbooks from the editor — Playbooks can now be paused via the editor tool, and playbooks created in chat are now visible to their creator.
• Copy artifact filenames — A copy button has been added to artifact filenames for quick reuse.
• Ontology file API — Ontology now exposes a file-level CRUD API for programmatic create, read, update, and delete of individual files.
• Usage and billing sidebar permission gating — The usage and billing sidebar entries are now hidden for members who lack the required permissions.
• Org logo removal and theme editor polish — Settings now support removing the org logo, alongside theme editor refinements and context list cleanup.