Changelog

Features

• feat(blog): Tracking Secrets Through an Agent Run
• feat(library): What Is Retrieval-Augmented Generation (RAG)?
• feat(calendly): extend tools with booking, availability, no-shows, and routing forms
• feat(search): page-aware cmd+k palette with ask-Sim mode
• feat(incidentio): add on-call, alert, catalog, and team tools
• feat(salesforce): add JWT bearer flow and sandbox OAuth support
• feat(workflows): new workflow block card, progress indicator, colors, dsl for natural language preview, retry configs
• feat(comparisons): add code-sandbox and session-policy rows

Improvements

• perf(db): drop 0287's two zero-row scans from the ACCESS EXCLUSIVE hold
• improvement(integrations): add Managed Agents templates and guard docs links
• refactor(audit): derive updatedFields through one shared helper
• improvement(updates): validate update path and fix native mac help
• improvement(desktop, executions): fix desktop update script and throw error when thinking enabled on stream false
• improvement(desktop): help menu
• improvement(desktop): add apple signing, fix some bugs
• improvement(provenance): make the incompleteness reason set closed and complete
• improvement(audits): skip the sql-date-binding parse for files without drizzle-orm
• improvement(external-endpoints): v2 versions with clean signatures + updated docs based on openapi spec
• improvement(ui): align terminal with the workflow design system, fix row hover states
• improvement(setup): complete knowledge and update flows
• improvement(provenance): name every guard that can latch a registry

Bug Fixes

• fix(executor): carry child provenance across the workflow agent tool result
• fix(executor): copy the env map at the workflow-tool boundary
• fix(v2): derive the log and run status enums from the persisted status list
• fix(docs): restore api-reference URL continuity and fix translated SDK bodies
• fix(sdk): make the 0.2.0 SDK release safe to publish
• fix(copilot): clamp the legacy int4 size when materializing a chat upload
• fix(executor): give the workflow agent tool the caller's env and PII policy
• fix(workflows): pin a stored block retry policy when loading it
• fix(mcp): stop refusing tool results authored by another workspace member
• fix(uploads): sign Azure upload URLs create-only
• fix(mcp): audit an upsert that rewrites or revives a server
• fix(uploads): make execution attachment completion replay-safe
• fix(files): restore CSV preview cancellation
• fix(tables): tolerate row deletion during run cancellation
• fix(files): order file folders in SQL like every other folder list
• fix(mcp): audit the columns an MCP server update wrote, not the params it got
• fix(knowledge): return pending status for new documents
• fix(workflows): redact run and export secrets
• fix(tables): prevent legacy group auto-run dispatch
• fix(logs, workflows): snapshot fetch optionality, restore consistent draft read snapshots
• fix(tools): bind schema-enrichment reads to executor delegations
• fix(api): widen the cancel-execution reason contract to what the route emits
• fix(api): wait for knowledge dispatch and encode filenames
• fix(desktop): fix background tab spawning
• fix(security): redact workflow snapshot secrets
• fix(files): preserve slashes in folder paths
• fix(logs): restore narrow v1 detail query
• fix(api): conceal cross-tenant resource denials on internal routes
• fix(tables): preserve group auto-run semantics
• fix(docs): preserve items response fields
• fix(api): close five defects found auditing the v2 migration against main
• fix(authz): enforce credential and workspace boundaries
• fix(api): collapse the internal error envelope and restore requestId
• fix(tables): cap row pages and use native cursors
• fix(api): restore migrated endpoint and SDK compatibility
• fix(mship, desktop): fix bugs
• fix(agiloft): resolve attachment MIME type instead of trusting the header
• fix(v2-api): close three secret disclosures, make the surface consistent, and align docs with signatures
• fix(credentials): authorize shared credentials without requiring a workflow
• fix(agiloft): repoint the block at the alrest surface and fix EWLogin
• fix(forks): detect secrets referenced from advanced-mode fields
• fix(files): let a mouse wheel scroll CSV and XLSX previews horizontally
• fix(api): align v2 permissions and resource behavior
• fix(agiloft): align the integration with the documented ewws REST interface
• fix(files): restore horizontal scroll in CSV and XLSX preview tables
• fix(provenance): make one length floor the whole substitution rule
• fix(auth): rate limit the password reset endpoints
• fix(api): restore legacy endpoint compatibility
• fix(tools): bound internal tool calls by the plan deadline, not Bun's fetch default
• fix(auth): let Microsoft sign-in link via Entra's domain-verified email claim
• fix(cmdk): update search-modal assertions to the renamed New chat label
• fix(atlassian): share one cached, retrying cloudId resolver across Jira, Confluence, and JSM
• fix(v2-api): standardization
• fix(cmdk): New Chat -> New chat
• fix(knowledge): retain model input provenance
• fix(chat): deduplicate chat sends server-side instead of probing for them
• fix(executor): restore delegated workflow execution
• fix(ci): include auth package in app prune
• fix(chat): stop losing sends aborted during mount-settling
• fix(chat): stop the streaming transcript floor inventing scroll space
• fix(logs): keep run provenance when compaction drops the execution state
• fix(workflows): port the canvas card icons off lucide-react
• fix(tables): handle row deletion during cell execution
• fix(folders): show the folder trail in table and knowledge base headers
• fix(knowledge): pluralize the module header and root breadcrumb
• fix(sidebar): pluralize the Knowledge bases nav label

Other Changes

• test(export): pin the table and tool-param loss the sanitized export accepts
• chore: remove the stray .agiloft-spec working notes
• test(table): pin the executor auth pairing on the table read route
• docs(salesforce): correct the setup steps that would strand an admin

View changes on GitHub

Python SDK v0.2.0

Published simstudio-sdk==0.2.0 to PyPI.

Installation

pip install simstudio-sdk==0.2.0

Documentation

See the README or the docs for more information.

Features

• feat(embeddings): add OpenRouter support

Improvements

• perf(ci): scope the Docker layer cache per image and platform
• perf(ci): build the app image on 16 vCPU and keep the toolchain out of it

Bug Fixes

• fix(idempotency): use compatible PostgreSQL JSON operations
• fix(chat): autosize long prompts in the composer
• fix(docker): ship libvips so sharp can actually load at runtime

Other Changes

• chore(skills): remove the unused skills-lock.json

View changes on GitHub

Features

• feat(library): What Is an Agentic Workflow? (And How It's Different From Automation)

Bug Fixes

• fix(landing): load sharp lazily so a missing native binary can't 500 /blog and /library
• fix(env): assign window.__ENV directly instead of queueing it
• fix(provenance): name the importer that condemned a run
• fix(provenance): feature flagged, inexact sidecars
• fix(files): stop validating .jsonl as single-document JSON

Other Changes

• test(provenance): cover the enforced branch of the agent memory surface

View changes on GitHub

Improvements

• improvement(url-state): use nuqs setters and derive state instead of mirroring it
• improvement(emails): funnel every sender through the shared render and subject layer

Bug Fixes

• fix(invite): hold the loading state until the stored token resolves
• fix(provenance): report why a projection was refused, at the point of refusal
• fix(auth): stop offering account creation when registration is disabled

Other Changes

• chore(deps): drop the archived image-size dependency

View changes on GitHub