simstudioai · icecrasher321 · Apr 4, 2026 · Apr 4, 2026 · Apr 5, 2026 · Apr 5, 2026
diff --git a/.github/workflows/test-build.yml b/.github/workflows/test-build.yml
@@ -123,6 +123,9 @@ jobs:
       - name: API contract boundary audit
         run: bun run check:api-validation:strict
 
+      - name: OpenAPI spec validation
+        run: bun run check:openapi
+
       - name: Desktop bridge contract audit
         run: bun run check:desktop-bridge
 

diff --git a/apps/docs/content/docs/de/api-reference/getting-started.mdx b/apps/docs/content/docs/de/api-reference/getting-started.mdx
@@ -121,7 +121,7 @@ This returns immediately with a `jobId` and `statusUrl`:
 }
 ```
 
-Poll the [Get Job Status](/api-reference/workflows/getJobStatus) endpoint until the status is `completed` or `failed`:
+Poll the [Get Job Status](/api-reference/execution/getJobStatus) endpoint until the status is `completed` or `failed`:
 
 ```bash
 curl https://www.sim.ai/api/jobs/{jobId} \

diff --git a/apps/docs/content/docs/de/api-reference/meta.json b/apps/docs/content/docs/de/api-reference/meta.json
@@ -2,6 +2,7 @@
   "title": "API Reference",
   "root": true,
   "pages": [
+    "---Getting Started---",
     "getting-started",
     "authentication",
     "---SDKs---",
@@ -10,9 +11,18 @@
     "---Endpoints---",
     "(generated)/workflows",
     "(generated)/logs",
-    "(generated)/usage",
     "(generated)/audit-logs",
     "(generated)/tables",
-    "(generated)/files"
+    "(generated)/files",
+    "(generated)/knowledge-bases",
+    "(generated)/mcp-servers",
+    "(generated)/skills",
+    "(generated)/custom-tools",
+    "(generated)/folders",
+    "(generated)/credentials",
+    "---Execution and Usage---",
+    "(generated)/execution",
+    "(generated)/human-in-the-loop",
+    "(generated)/usage"
   ]
 }
diff --git a/apps/docs/content/docs/en/api-reference/(generated)/execution/meta.json b/apps/docs/content/docs/en/api-reference/(generated)/execution/meta.json
@@ -0,0 +1,3 @@
+{
+  "pages": ["executeWorkflow", "getWorkflowExecution", "cancelExecution", "getJobStatus"]
+}
diff --git a/apps/docs/content/docs/en/api-reference/(generated)/workflows/meta.json b/apps/docs/content/docs/en/api-reference/(generated)/workflows/meta.json
@@ -1,15 +1,14 @@
 {
   "pages": [
-    "executeWorkflow",
-    "getWorkflowExecution",
-    "cancelExecution",
     "listWorkflows",
     "getWorkflow",
     "exportWorkflow",
     "importWorkflow",
     "deployWorkflow",
     "undeployWorkflow",
     "rollbackWorkflow",
-    "getJobStatus"
+    "executeWorkflowV2",
+    "getWorkflowExecutionV2",
+    "cancelExecutionV2"
   ]
 }
diff --git a/apps/docs/content/docs/en/api-reference/getting-started.mdx b/apps/docs/content/docs/en/api-reference/getting-started.mdx
@@ -121,7 +121,7 @@ This returns immediately with a `jobId` and `statusUrl`:
 }
 ```
 
-Poll the [Get Job Status](/api-reference/workflows/getJobStatus) endpoint until the status is `completed` or `failed`:
+Poll the [Get Job Status](/api-reference/execution/getJobStatus) endpoint until the status is `completed` or `failed`:
 
 ```bash
 curl https://www.sim.ai/api/jobs/{jobId} \

diff --git a/apps/docs/content/docs/en/api-reference/meta.json b/apps/docs/content/docs/en/api-reference/meta.json
@@ -10,12 +10,19 @@
     "typescript",
     "---Endpoints---",
     "(generated)/workflows",
-    "(generated)/human-in-the-loop",
     "(generated)/logs",
-    "(generated)/usage",
     "(generated)/audit-logs",
     "(generated)/tables",
     "(generated)/files",
-    "(generated)/knowledge-bases"
+    "(generated)/knowledge-bases",
+    "(generated)/mcp-servers",
+    "(generated)/skills",
+    "(generated)/custom-tools",
+    "(generated)/folders",
+    "(generated)/credentials",
+    "---Execution and Usage---",
+    "(generated)/execution",
+    "(generated)/human-in-the-loop",
+    "(generated)/usage"
   ]
 }
diff --git a/apps/docs/content/docs/en/integrations/zoho_desk.mdx b/apps/docs/content/docs/en/integrations/zoho_desk.mdx
@@ -5,7 +5,7 @@ description: Manage Zoho Desk tickets, comments, threads, and contacts
 
 import { BlockInfoCard } from "@/components/ui/block-info-card"
 
-<BlockInfoCard 
+<BlockInfoCard
   type="zoho_desk"
   color="#FFFFFF"
 />
@@ -512,4 +512,3 @@ Trigger a workflow when a Zoho Desk event occurs (ticket, comment, thread, conta
 | `orgId` | string | Zoho Desk organization ID |
 | `payload` | json | The full resource that changed \(ticket, comment, thread, etc.\). Comment and thread events gain a derived plain-text `contentText` alongside the raw `content` + `contentType`; ticket events gain `descriptionText` alongside `description`. |
 | `prevState` | json | Previous state of the resource \(update events only\) |
-
diff --git a/apps/docs/content/docs/en/platform/enterprise/audit-logs.mdx b/apps/docs/content/docs/en/platform/enterprise/audit-logs.mdx
@@ -33,7 +33,7 @@ Audit logs are also accessible through the Sim API for integration with external
 
 ```http
 GET /api/v1/audit-logs
-Authorization: Bearer <api-key>
+X-API-Key: <api-key>
 ```
 
 **Query parameters:**
@@ -71,11 +71,18 @@ Authorization: Bearer <api-key>
       "createdAt": "2026-04-20T21:16:00.000Z"
     }
   ],
-  "nextCursor": "eyJpZCI6ImFiYzEyMyJ9"
+  "nextCursor": "eyJpZCI6ImFiYzEyMyJ9",
+  "limits": {
+    "workflowExecutionRateLimit": {
+      "sync": { "requestsPerMinute": 60, "maxBurst": 10, "remaining": 59, "resetAt": "2026-04-20T21:17:00.000Z" },
+      "async": { "requestsPerMinute": 30, "maxBurst": 5, "remaining": 30, "resetAt": "2026-04-20T21:17:00.000Z" }
+    },
+    "usage": { "currentPeriodCost": 1.25, "limit": 50, "plan": "enterprise", "isExceeded": false }
+  }
 }
 ```
 
-Paginate by passing the `nextCursor` value as the `cursor` parameter in the next request. When `nextCursor` is absent, you have reached the last page.
+Paginate by passing the `nextCursor` value as the `cursor` parameter in the next request. When `nextCursor` is absent, you have reached the last page. Each entry also includes `actorName`; `metadata` is an arbitrary per-action JSON object. The `limits` object reports your current rate-limit and usage status.
 
 The API accepts both personal and workspace-scoped API keys. Rate limits apply — the response includes `X-RateLimit-*` headers with your current limit and remaining quota.
 

diff --git a/apps/docs/content/docs/en/platform/self-hosting/object-storage.mdx b/apps/docs/content/docs/en/platform/self-hosting/object-storage.mdx
@@ -237,6 +237,26 @@ AZURE_STORAGE_OG_IMAGES_CONTAINER_NAME=og-images
 AZURE_STORAGE_WORKSPACE_LOGOS_CONTAINER_NAME=workspace-logos
 ```
 
+Direct browser uploads require a Blob service CORS rule on the storage account. Allow your exact
+Sim origin, `GET` and `PUT`, the `Content-Type` header, and the `x-ms-*` prefix used by signed blob
+and metadata headers:
+
+```bash
+az storage cors add \
+  --services b \
+  --methods GET PUT \
+  --origins https://sim.yourdomain.com \
+  --allowed-headers content-type 'x-ms-*' \
+  --exposed-headers ETag \
+  --max-age 3600 \
+  --account-name mystorageaccount \
+  --account-key '<account-key>'
+```
+
+If you authenticate with a connection string, replace the last two options with
+`--connection-string "$AZURE_CONNECTION_STRING"`. CORS is configured once for the account's Blob
+service and applies to all of its containers.
+
 A full Helm example lives at `helm/sim/examples/values-azure.yaml`.
 
 ## Set up Google Cloud Storage
@@ -276,11 +296,13 @@ cat > /tmp/cors.json <<'EOF'
     "responseHeader": [
       "Content-Type",
       "ETag",
+      "x-goog-meta-uploadid",
       "x-goog-meta-originalname",
       "x-goog-meta-uploadedat",
       "x-goog-meta-purpose",
       "x-goog-meta-userid",
       "x-goog-meta-workspaceid",
+      "x-goog-meta-knowledgebaseid",
       "x-goog-meta-folderid",
       "x-goog-meta-workflowid",
       "x-goog-meta-executionid"
@@ -445,6 +467,27 @@ The same browser-reachability and CORS requirements apply.
   </Tab>
 </Tabs>
 
+## Configure temporary upload cleanup
+
+Sim stages every direct upload under the `upload-sessions/` prefix before promoting it to its final,
+immutable object key. Apply the cleanup policy to **every** purpose-specific bucket or container
+configured above:
+
+- On AWS S3 and Google Cloud Storage, expire objects under `upload-sessions/` after two days and
+  abort incomplete multipart uploads after two days.
+- On Azure Blob, expire committed blobs under `upload-sessions/` after two days. Azure automatically
+  removes uncommitted blocks after seven days.
+- For an S3-compatible provider, configure both rules when its lifecycle implementation supports
+  them. Check the provider's documentation because lifecycle feature support varies.
+
+The two-day window exceeds the 24-hour upload-token lifetime and leaves time to retry completion.
+Do not apply this prefix rule to final objects outside `upload-sessions/`.
+
+<Callout type="warning">
+  Configure both expiration and incomplete-multipart cleanup where available. Expiring staged
+  objects alone does not necessarily remove abandoned multipart parts.
+</Callout>
+
 ## Verify it works
 
 After restarting with the new configuration:

diff --git a/apps/docs/content/docs/en/platform/self-hosting/platforms.mdx b/apps/docs/content/docs/en/platform/self-hosting/platforms.mdx
@@ -49,4 +49,4 @@ Recommended for any production deployment. The requirement is **pgvector**.
 DATABASE_URL="postgresql://user:pass@host:5432/simstudio?sslmode=require"
 ```
 
-For the Helm chart, disable the bundled Postgres and use `externalDatabase` — see [Kubernetes](/platform/self-hosting/kubernetes#external-database). 
+For the Helm chart, disable the bundled Postgres and use `externalDatabase` — see [Kubernetes](/platform/self-hosting/kubernetes#external-database).
diff --git a/apps/docs/content/docs/es/api-reference/getting-started.mdx b/apps/docs/content/docs/es/api-reference/getting-started.mdx
@@ -121,7 +121,7 @@ This returns immediately with a `jobId` and `statusUrl`:
 }
 ```
 
-Poll the [Get Job Status](/api-reference/workflows/getJobStatus) endpoint until the status is `completed` or `failed`:
+Poll the [Get Job Status](/api-reference/execution/getJobStatus) endpoint until the status is `completed` or `failed`:
 
 ```bash
 curl https://www.sim.ai/api/jobs/{jobId} \

diff --git a/apps/docs/content/docs/es/api-reference/meta.json b/apps/docs/content/docs/es/api-reference/meta.json
@@ -2,6 +2,7 @@
   "title": "API Reference",
   "root": true,
   "pages": [
+    "---Getting Started---",
     "getting-started",
     "authentication",
     "---SDKs---",
@@ -10,7 +11,18 @@
     "---Endpoints---",
     "(generated)/workflows",
     "(generated)/logs",
-    "(generated)/usage",
-    "(generated)/audit-logs"
+    "(generated)/audit-logs",
+    "(generated)/tables",
+    "(generated)/files",
+    "(generated)/knowledge-bases",
+    "(generated)/mcp-servers",
+    "(generated)/skills",
+    "(generated)/custom-tools",
+    "(generated)/folders",
+    "(generated)/credentials",
+    "---Execution and Usage---",
+    "(generated)/execution",
+    "(generated)/human-in-the-loop",
+    "(generated)/usage"
   ]
 }
diff --git a/apps/docs/content/docs/fr/api-reference/getting-started.mdx b/apps/docs/content/docs/fr/api-reference/getting-started.mdx
@@ -121,7 +121,7 @@ This returns immediately with a `jobId` and `statusUrl`:
 }
 ```
 
-Poll the [Get Job Status](/api-reference/workflows/getJobStatus) endpoint until the status is `completed` or `failed`:
+Poll the [Get Job Status](/api-reference/execution/getJobStatus) endpoint until the status is `completed` or `failed`:
 
 ```bash
 curl https://www.sim.ai/api/jobs/{jobId} \

diff --git a/apps/docs/content/docs/fr/api-reference/meta.json b/apps/docs/content/docs/fr/api-reference/meta.json
@@ -2,6 +2,7 @@
   "title": "API Reference",
   "root": true,
   "pages": [
+    "---Getting Started---",
     "getting-started",
     "authentication",
     "---SDKs---",
@@ -10,7 +11,18 @@
     "---Endpoints---",
     "(generated)/workflows",
     "(generated)/logs",
-    "(generated)/usage",
-    "(generated)/audit-logs"
+    "(generated)/audit-logs",
+    "(generated)/tables",
+    "(generated)/files",
+    "(generated)/knowledge-bases",
+    "(generated)/mcp-servers",
+    "(generated)/skills",
+    "(generated)/custom-tools",
+    "(generated)/folders",
+    "(generated)/credentials",
+    "---Execution and Usage---",
+    "(generated)/execution",
+    "(generated)/human-in-the-loop",
+    "(generated)/usage"
   ]
 }
diff --git a/apps/docs/content/docs/ja/api-reference/getting-started.mdx b/apps/docs/content/docs/ja/api-reference/getting-started.mdx
@@ -121,7 +121,7 @@ This returns immediately with a `jobId` and `statusUrl`:
 }
 ```
 
-Poll the [Get Job Status](/api-reference/workflows/getJobStatus) endpoint until the status is `completed` or `failed`:
+Poll the [Get Job Status](/api-reference/execution/getJobStatus) endpoint until the status is `completed` or `failed`:
 
 ```bash
 curl https://www.sim.ai/api/jobs/{jobId} \

diff --git a/apps/docs/content/docs/ja/api-reference/meta.json b/apps/docs/content/docs/ja/api-reference/meta.json
@@ -2,6 +2,7 @@
   "title": "API Reference",
   "root": true,
   "pages": [
+    "---Getting Started---",
     "getting-started",
     "authentication",
     "---SDKs---",
@@ -10,7 +11,18 @@
     "---Endpoints---",
     "(generated)/workflows",
     "(generated)/logs",
-    "(generated)/usage",
-    "(generated)/audit-logs"
+    "(generated)/audit-logs",
+    "(generated)/tables",
+    "(generated)/files",
+    "(generated)/knowledge-bases",
+    "(generated)/mcp-servers",
+    "(generated)/skills",
+    "(generated)/custom-tools",
+    "(generated)/folders",
+    "(generated)/credentials",
+    "---Execution and Usage---",
+    "(generated)/execution",
+    "(generated)/human-in-the-loop",
+    "(generated)/usage"
   ]
 }
diff --git a/apps/docs/content/docs/zh/api-reference/getting-started.mdx b/apps/docs/content/docs/zh/api-reference/getting-started.mdx
@@ -121,7 +121,7 @@ This returns immediately with a `jobId` and `statusUrl`:
 }
 ```
 
-Poll the [Get Job Status](/api-reference/workflows/getJobStatus) endpoint until the status is `completed` or `failed`:
+Poll the [Get Job Status](/api-reference/execution/getJobStatus) endpoint until the status is `completed` or `failed`:
 
 ```bash
 curl https://www.sim.ai/api/jobs/{jobId} \

diff --git a/apps/docs/content/docs/zh/api-reference/meta.json b/apps/docs/content/docs/zh/api-reference/meta.json
@@ -2,6 +2,7 @@
   "title": "API Reference",
   "root": true,
   "pages": [
+    "---Getting Started---",
     "getting-started",
     "authentication",
     "---SDKs---",
@@ -10,7 +11,18 @@
     "---Endpoints---",
     "(generated)/workflows",
     "(generated)/logs",
-    "(generated)/usage",
-    "(generated)/audit-logs"
+    "(generated)/audit-logs",
+    "(generated)/tables",
+    "(generated)/files",
+    "(generated)/knowledge-bases",
+    "(generated)/mcp-servers",
+    "(generated)/skills",
+    "(generated)/custom-tools",
+    "(generated)/folders",
+    "(generated)/credentials",
+    "---Execution and Usage---",
+    "(generated)/execution",
+    "(generated)/human-in-the-loop",
+    "(generated)/usage"
   ]
 }
-Original file line number
+Diff line change
@@ Expand Up / @@ -121,7 +121,7 @@ This returns immediately with a `jobId` and `statusUrl`: @@
     }
     ```
-    Poll the [Get Job Status](/api-reference/workflows/getJobStatus) endpoint until the status is `completed` or `failed`:
+    Poll the [Get Job Status](/api-reference/execution/getJobStatus) endpoint until the status is `completed` or `failed`:
     ```bash
     curl https://www.sim.ai/api/jobs/{jobId} \
@@ Expand Down @@