Changelog
Every new feature, improvement, and fix in Sim, the open-source AI workspace, with release notes straight from GitHub.
Features
- feat(blog): Tracking Secrets Through an Agent Run
- feat(library): What Is Retrieval-Augmented Generation (RAG)?
- feat(calendly): extend tools with booking, availability, no-shows, and routing forms
- feat(search): page-aware cmd+k palette with ask-Sim mode
- feat(incidentio): add on-call, alert, catalog, and team tools
- feat(salesforce): add JWT bearer flow and sandbox OAuth support
- feat(workflows): new workflow block card, progress indicator, colors, dsl for natural language preview, retry configs
- feat(comparisons): add code-sandbox and session-policy rows
Improvements
- perf(db): drop 0287's two zero-row scans from the ACCESS EXCLUSIVE hold
- improvement(integrations): add Managed Agents templates and guard docs links
- refactor(audit): derive updatedFields through one shared helper
- improvement(updates): validate update path and fix native mac help
- improvement(desktop, executions): fix desktop update script and throw error when thinking enabled on stream false
- improvement(desktop): help menu
- improvement(desktop): add apple signing, fix some bugs
- improvement(provenance): make the incompleteness reason set closed and complete
- improvement(audits): skip the sql-date-binding parse for files without drizzle-orm
- improvement(external-endpoints): v2 versions with clean signatures + updated docs based on openapi spec
- improvement(ui): align terminal with the workflow design system, fix row hover states
- improvement(setup): complete knowledge and update flows
- improvement(provenance): name every guard that can latch a registry
Bug Fixes
- fix(executor): carry child provenance across the workflow agent tool result
- fix(executor): copy the env map at the workflow-tool boundary
- fix(v2): derive the log and run status enums from the persisted status list
- fix(docs): restore api-reference URL continuity and fix translated SDK bodies
- fix(sdk): make the 0.2.0 SDK release safe to publish
- fix(copilot): clamp the legacy int4 size when materializing a chat upload
- fix(executor): give the workflow agent tool the caller's env and PII policy
- fix(workflows): pin a stored block retry policy when loading it
- fix(mcp): stop refusing tool results authored by another workspace member
- fix(uploads): sign Azure upload URLs create-only
- fix(mcp): audit an upsert that rewrites or revives a server
- fix(uploads): make execution attachment completion replay-safe
- fix(files): restore CSV preview cancellation
- fix(tables): tolerate row deletion during run cancellation
- fix(files): order file folders in SQL like every other folder list
- fix(mcp): audit the columns an MCP server update wrote, not the params it got
- fix(knowledge): return pending status for new documents
- fix(workflows): redact run and export secrets
- fix(tables): prevent legacy group auto-run dispatch
- fix(logs, workflows): snapshot fetch optionality, restore consistent draft read snapshots
- fix(tools): bind schema-enrichment reads to executor delegations
- fix(api): widen the cancel-execution reason contract to what the route emits
- fix(api): wait for knowledge dispatch and encode filenames
- fix(desktop): fix background tab spawning
- fix(security): redact workflow snapshot secrets
- fix(files): preserve slashes in folder paths
- fix(logs): restore narrow v1 detail query
- fix(api): conceal cross-tenant resource denials on internal routes
- fix(tables): preserve group auto-run semantics
- fix(docs): preserve items response fields
- fix(api): close five defects found auditing the v2 migration against main
- fix(authz): enforce credential and workspace boundaries
- fix(api): collapse the internal error envelope and restore requestId
- fix(tables): cap row pages and use native cursors
- fix(api): restore migrated endpoint and SDK compatibility
- fix(mship, desktop): fix bugs
- fix(agiloft): resolve attachment MIME type instead of trusting the header
- fix(v2-api): close three secret disclosures, make the surface consistent, and align docs with signatures
- fix(credentials): authorize shared credentials without requiring a workflow
- fix(agiloft): repoint the block at the alrest surface and fix EWLogin
- fix(forks): detect secrets referenced from advanced-mode fields
- fix(files): let a mouse wheel scroll CSV and XLSX previews horizontally
- fix(api): align v2 permissions and resource behavior
- fix(agiloft): align the integration with the documented ewws REST interface
- fix(files): restore horizontal scroll in CSV and XLSX preview tables
- fix(provenance): make one length floor the whole substitution rule
- fix(auth): rate limit the password reset endpoints
- fix(api): restore legacy endpoint compatibility
- fix(tools): bound internal tool calls by the plan deadline, not Bun's fetch default
- fix(auth): let Microsoft sign-in link via Entra's domain-verified email claim
- fix(cmdk): update search-modal assertions to the renamed New chat label
- fix(atlassian): share one cached, retrying cloudId resolver across Jira, Confluence, and JSM
- fix(v2-api): standardization
- fix(cmdk): New Chat -> New chat
- fix(knowledge): retain model input provenance
- fix(chat): deduplicate chat sends server-side instead of probing for them
- fix(executor): restore delegated workflow execution
- fix(ci): include auth package in app prune
- fix(chat): stop losing sends aborted during mount-settling
- fix(chat): stop the streaming transcript floor inventing scroll space
- fix(logs): keep run provenance when compaction drops the execution state
- fix(workflows): port the canvas card icons off lucide-react
- fix(tables): handle row deletion during cell execution
- fix(folders): show the folder trail in table and knowledge base headers
- fix(knowledge): pluralize the module header and root breadcrumb
- fix(sidebar): pluralize the Knowledge bases nav label
Other Changes
- test(export): pin the table and tool-param loss the sanitized export accepts
- chore: remove the stray .agiloft-spec working notes
- test(table): pin the executor auth pairing on the table read route
- docs(salesforce): correct the setup steps that would strand an admin
python-sdk-v0.2.0
Features
- feat(embeddings): add OpenRouter support
Improvements
- perf(ci): scope the Docker layer cache per image and platform
- perf(ci): build the app image on 16 vCPU and keep the toolchain out of it
Bug Fixes
- fix(idempotency): use compatible PostgreSQL JSON operations
- fix(chat): autosize long prompts in the composer
- fix(docker): ship libvips so sharp can actually load at runtime
Other Changes
- chore(skills): remove the unused skills-lock.json
Features
- feat(library): What Is an Agentic Workflow? (And How It's Different From Automation)
Bug Fixes
- fix(landing): load sharp lazily so a missing native binary can't 500 /blog and /library
- fix(env): assign window.__ENV directly instead of queueing it
- fix(provenance): name the importer that condemned a run
- fix(provenance): feature flagged, inexact sidecars
- fix(files): stop validating .jsonl as single-document JSON
Other Changes
- test(provenance): cover the enforced branch of the agent memory surface
v0.7.66
Improvements
- improvement(url-state): use nuqs setters and derive state instead of mirroring it
- improvement(emails): funnel every sender through the shared render and subject layer
Bug Fixes
- fix(invite): hold the loading state until the stored token resolves
- fix(provenance): report why a projection was refused, at the point of refusal
- fix(auth): stop offering account creation when registration is disabled
Other Changes
- chore(deps): drop the archived image-size dependency