Changelog

Features

• feat(secrets): record which secrets each run resolves, and surface it per secret
• feat(consent): manage cookies from Settings, not from a card in the workspace
• feat(account): let users delete their own account
• feat(consent): cookie consent banner and cookie policy
• feat(connectors): hand source files to the document pipeline instead of extracting them
• feat(emails): add sub-processor change notification template

Improvements

• improvement(settings): drop the Privacy row's description
• refactor(consent): fold cookie preferences into General > Privacy
• improvement(ui): give the two full-screen takeovers named design-system layers
• improvement(logs-block): filter runs by trigger type
• improvement(docs): clean up leftovers from the code-block alignment PR

Bug Fixes

• fix(workspaces): explain why org admins can't be removed from a workspace
• DONT MERGE fix(workflow): attach cmdk-added blocks to the selected block
• fix(emcn): prevent leading glyph clipping in chip inputs
• fix(search): prioritize actions and prevent palette clipping
• fix(desktop): guarantee the update feed resolves the newest release
• fix(forks): name the workspace a sync overwrites instead of "target"
• fix(forks): stop copying connector-managed knowledge base documents
• fix(knowledge): parse the stored artifact, not the document's display name

Other Changes

• chore(deps): collapse stale transitive js-yaml pins onto the patched releases
• chore(cli): release 2.1.0
• chore(skills): make public-repo scrubbing explicit in ship and babysit

View changes on GitHub

Features

• feat(cli): follow a run, wait for one, and tail the log
• feat(secrets): let mship add secret descriptions
• feat(jotform): trigger a workflow on every new form submission
• feat(secrets): add optional descriptions to workspace secrets
• feat(files): upload and safely extract ZIP archives

Improvements

• improvement(docs): align code blocks with the platform design system
• perf(table): collapse sequential round trips on the table read and write paths
• improvement(files): make the row the documented owner of module context

Bug Fixes

• fix(credential-groups): pin the clock in the enrollment tests
• fix(forking): stop a parent re-pick blanking a dependent's stored target value
• fix(email): greet SMTP relays with a qualified hostname instead of [127.0.0.1]
• fix(cli): bound, trace, and explain the requests the CLI makes
• fix(cli): name SIM_CONFIG_DIR in help, and fix the similarity score width
• fix(sap_concur): HMAC the token cache key and wire the sendback comment
• fix(cli): keep a path prefix in the login URLs
• fix(cli): identify the CLI to the API and name the remedy on every key refusal
• fix(sap_concur): align the integration with SAP Concur's documented API
• fix(cli): default to the host that serves the API
• fix(files): serve mothership chat attachments stored under a workspace key
• fix(workflows,connectors): close pre-merge audit findings
• fix(cli): resolve findings from a full command-surface audit
• fix(connectors): index Office documents and PDFs from SharePoint and OneDrive

Other Changes

• test(table): pin the row-write behavior the suite could not fail on
• docs(helm): document null as the way to remove an inherited env key
• chore(deps): bump js-yaml to 4.3.1 in sim-cli and drop the aged-out release-age waivers
• chore(deps): upgrade next to 16.3.1, its optimizer no longer deletes live code

View changes on GitHub

Features

• feat(library): Governing AI Agents Built by Different Teams in One Enterprise Workspace
• feat(jotform): add Jotform integration
• feat(microsoft_ad): licensing, security, audit, role, and device operations
• feat(mssql): add Microsoft SQL Server integration
• feat(tooling): enforce docs freshness and modernize agent skills
• feat(cloudflare): add WAF rulesets, rate limiting, Zero Trust Access, R2, Workers, and Tunnels
• feat(datadog): extend to 40 tools and align every operation with the published OpenAPI specs
• feat(servicenow): semantic incident, change, catalog, approval, CMDB, and knowledge tools
• feat(crowdstrike): add alerts, host response, IOC, Spotlight, RTR, and case tools
• feat(splunk): add Splunk Enterprise and Cloud integration
• feat(okta): add System Log, MFA, sessions, apps, roles, and group rules
• feat(resources): multiselect on tables and knowledge, spring-loaded folders
• feat(cli): Sim CLI with AWS-style profiles and a platform key exchange
• feat(credential-groups): complete managed account enrollment
• feat(credentials): add v2 credential lifecycle APIs
• feat(library): Automation Anywhere Alternative: AI Agents vs. RPA for Real Reasoning

Improvements

• improvement(tables): make Cmd+F search as you type and clear on close
• refactor(resources): converge Files onto the shared drag hook and batch bulk authorization
• improvement(credential-groups): align settings surface with the shared page patterns

Bug Fixes

• fix(search): match block references by the name the canvas shows
• fix(forking): keep dependent overrides editable
• fix(execution): stop a cancelled run reporting success when its wait swallows the cancellation
• fix(connectors): validate and repair the knowledge-base connector fleet
• fix(integrations): close defects found by an independent cold audit
• fix(knowledge): stop capping the unpaged knowledge-base list
• fix(knowledge): list knowledge bases on the same authority that creates them
• fix(forks): stop sync demanding config the source never had
• fix(integrations): close regressions found in the final validation sweep
• fix(docs): serve JSON-LD in the HTML, fix sidebar spacing, and tighten the CLI guides
• fix(sandbox): undefine the raw fetch host bridge before user code runs
• fix(forking): hide satisfied dependent configuration
• fix(workflow): derive the webhook URL only where a sub-block shows one
• fix(fork): preserve folder structure across a fork edge for files, tables, and knowledge bases
• fix(tables): re-check the find match at the reveal, not just before paging
• fix(deploy): resolve the error-output flag from edges on both sides of change detection
• fix(credentials): restore reliable OAuth connections
• fix(okta): stop partial updates erasing stored profile data
• fix(auth): scope SSO account linking to the verified domain and fence plugin provider mutations
• fix(media): prevent drawtext filtergraph injection in add_text
• fix(credentials): let workspace admins disconnect a teammate's OAuth credential
• fix(docker): prune the app package by manifest name
• fix(knowledge): bound chunking separators so one config can't stall processing
• fix(credentials): conceal inaccessible credential reads
• fix(tables): auto-scroll during column drag

Other Changes

• docs(integrations): add missing manual intros; fix light brand tiles rendering white glyphs
• docs(cli): add a CLI docs section generated from the command tree

View changes on GitHub

Features

• feat(credentials): add managed credential groups
• feat(tables): filter by cell value from the cell menu, sort from the column menu
• feat(ashby): incremental job sync, custom field writes, and application lifecycle ops
• feat(connectors): add 9 knowledge base connectors
• feat(integrations): add Azure Data Explorer
• feat(rabbitmq): add RabbitMQ integration

Bug Fixes

• fix(access-control): default every operation and model picker to one the permission group allows
• fix(tables): allow unbounded v1 row queries
• fix(webhooks): read every Ashby error shape when webhook registration fails
• fix(knowledge): remove caution triangle overlay from connector icon
• fix(grafana): validate against the API docs, add data source querying and contact-point CRUD
• fix(settings): redirect unavailable tabs to general
• fix(icons): align table block icon and 12-unit icon stroke with the emcn family
• Revert "fix(integrations): read every service mark from one registry"
• fix(integrations): read every service mark from one registry
• fix(settings): preserve tab when switching workspaces
• fix(logger, blocks): log nested errors and stop spurious model-selection warnings
• fix(v2): close seven correctness and honesty gaps found sweeping the API
• fix(condition): stop a secret value from breaking or forging a condition

Other Changes

• chore(utils): consolidate record guards and remove dead code

View changes on GitHub

Features

• feat(library): How to Turn a Workflow Into a Reusable MCP Tool (Sim vs n8n, Gumloop, and Zapier)
• feat(canvas): add a setting to turn off auto-focus when clicking blocks
• feat(netsuite): add Oracle NetSuite integration
• feat(logrocket): add LogRocket integration
• feat(emails): add aug-13 what's new broadcast
• feat(v2): complete and align the v2 API surface
• feat(windchill): add document integration
• feat(xai): wire reasoning effort through the Grok adapter
• feat(models): add grok-4.6 and make it the xAI flagship

Improvements

• perf(tables): stop a table write refetching every loaded page in the tab that made it
• perf(workspace): stop the sidebar fetching palette data on every route
• improvement(search): make overlap dedupe linear in match count
• improvement(canvas): cancel an in-flight edge drag with Escape
• perf(server): stop calling our own API over HTTP during render, execution, and tool runs
• perf(prefetch): stop calling our own API over the wire during server render
• improvement(nav): cut prefetch and session-recorder waste
• improvement(docs): make the API reference read as code and unify its type token
• improvement(emails): size the header wordmark to the landing navbar's rule
• improvement(workflow): smooth the running hatch and sit it in the slot's own box
• improvement(blog): simplify provenance post structure

Bug Fixes

• fix(agent): show files in tool picker
• fix(search): stop cmd+k boosts from lifting weaker matches over stronger ones
• fix(desktop): let sites copy to the clipboard in the browser tab
• fix(desktop): report a stock Chrome user agent in the browser tab
• fix(tables): stop every table paginating forever on a null totalCount
• fix(execution): give a cancelled async run its terminal metadata
• fix(sidebar): align credits chip with panel toggle and square the collapsed rail
• fix(icons): match folder icon optical size to sibling resource icons
• fix(execution): resolve secrets against the acting principal, not the workflow owner
• fix(logs): record how long a cancelled run had been going
• fix(canvas): stop phantom ports and a latched-open action bar
• fix(v2): hold create to the rules update enforces, and bind the last two cursors
• fix(chat): focus the composer when opening a new or existing chat
• fix(v2): close the defects live probing found
• fix(autolayout): rescue new notes from blocks they were created on top of
• fix(sidebar): stop bubbled dragleave events cancelling an in-progress drag
• fix(desktop): move prereleases to release repo
• fix(v2): stop telling callers something the server did not do
• fix(loading): debounce selector search, fix two row-cache snapshots, and move Vertex refresh to the app
• fix(blocks): give the detail headers the same tile as everything else
• fix(v2): close the correctness gaps the release audit found
• fix(sidebar): keep the right-click context menu open over the collapsed chat flyout
• fix(realtime): keep the file-doc store reconnecting instead of dying quietly
• fix(v2): close the correctness gaps an end-to-end audit found
• fix(tools): resolve credentials over HTTP again so token refresh keeps the app's OAuth config
• fix(files): stop the collaborative editor rewriting and reflowing a document on open
• fix(files): preserve principals when serving generated documents
• fix(emails): re-export the wordmark onto its original canvas
• fix(enrichment): require work email company domain
• fix(copilot): align principal lifetime with orchestration
• fix(files): allow document compiler to read referenced images
• fix(tools): sanitize database execution errors
• fix(billing): checkout guard, admin panel case
• fix(workflow): draw a highlighted edge over the ordinary ones
• fix(workflow): stop a nested block jumping when it leaves its container
• fix(workflow): stop subflows resizing themselves after every load
• fix(v2): give the keyset cursor's timestamp an explicit SQL type
• fix(cmdk): keep the first result focused and the top fog stable across re-ranks
• fix(copilot): surface document render failures
• fix(blocks): give a block one tile everywhere it is listed
• fix(workflow): stop the coloured knob leaving a barb at each shoulder tip
• fix(workflow): allow dual-mode blocks inside loop/parallel subflows
• fix(desktop): fix desktop prod ci #6628
• fix(v2): serve HEAD, advertise PATCH, and document the reachable 403
• fix(v2): tell a caller when to come back on every failure meant to be retried
• fix(docs): include API key header in generated code samples
• fix(v2): give every collection one pagination contract and close four envelope holes
• fix(copilot): keep a file-preview failure from stripping a tool call's arguments

Other Changes

• test(realtime): wait for the idle read the streak test depends on
• test(prefetch): cover the workspace-list seed, and fix two tests that could not fail
• chore(ci): declare least-privilege permissions on the desktop e2e workflow

View changes on GitHub