Merge remote-tracking branch 'origin/staging' into feat/admin-org-to-org-workspace-move

Author: mzxchandra

.agents/skills/add-integration/SKILL.md

@@ -606,8 +606,8 @@ If creating V2 versions (API-aligned outputs):
 - [ ] Created tool file for each operation
 - [ ] Chose exactly one boundary per tool: registered `InternalToolConfig.operation` or absolute
       external HTTP(S) `ToolConfig.request`
-- [ ] No tool points to `/api/...`, constructs a URL back to Sim, declares `request.internal`, or
-      `directExecution`, or has an HTTP fallback for an in-process operation
+- [ ] No tool points to `/api/...`, constructs a URL back to Sim, declares `request.internal` or the
+      retired `directExecution` property, or has an HTTP fallback for an in-process operation
 - [ ] All params have correct visibility
 - [ ] All nullable fields use `?? null`
 - [ ] All optional outputs have `optional: true`

.gitignore

@@ -111,4 +111,3 @@ __pycache__/
 # `apps/sim/lib/uploads/` — 61 files of tracked source — and silently ignore
 # anything added there later.
 /uploads
-.gstack/

apps/docs/content/docs/de/introduction/index.mdx

@@ -12,9 +12,9 @@ Sim ist ein Open-Source-Tool zur visuellen Workflow-Erstellung für die Entwickl
 <div className="flex justify-center">
   <Image
     src="/static/introduction.png"
-    alt="Sim visuelle Workflow-Leinwand"
-    width={700}
-    height={372}
+    alt="Sim-Workflow-Editor mit leerer Leinwand, Editor-Bereich und Navigation"
+    width={2304}
+    height={1600}
     className="my-6"
   />
 </div>

apps/docs/content/docs/en/introduction/index.mdx

@@ -14,9 +14,9 @@ Sim is the open-source AI workspace where teams build, deploy, and manage AI age
 <div className="mx-auto w-full overflow-hidden rounded-lg my-6">
   <Image
     src="/static/introduction.png"
-    alt="A focused Sim workflow builder view with connected blocks, the Editor panel, and run output"
-    width={1695}
-    height={900}
+    alt="Sim workflow editor with an empty canvas, Editor panel, and workspace navigation"
+    width={2304}
+    height={1600}
     className="w-full"
   />
 </div>

apps/docs/content/docs/es/introduction/index.mdx

@@ -12,9 +12,9 @@ Sim es un constructor de flujos de trabajo visuales de código abierto para crea
 <div className="flex justify-center">
   <Image
     src="/static/introduction.png"
-    alt="Lienzo visual de flujos de trabajo de Sim"
-    width={700}
-    height={372}
+    alt="Editor de flujos de Sim con lienzo vacío, panel Editor y navegación"
+    width={2304}
+    height={1600}
     className="my-6"
   />
 </div>
@@ -114,4 +114,4 @@ Implementa en tu propia infraestructura usando Docker Compose o Kubernetes. Mant
   <Card title="Permisos de equipo" href="/permissions/roles-and-permissions">
     Configura roles y permisos del espacio de trabajo
   </Card>
-</Cards>
+</Cards>

apps/docs/content/docs/fr/introduction/index.mdx

@@ -12,9 +12,9 @@ Sim est un constructeur de flux de travail visuel open-source pour créer et dé
 <div className="flex justify-center">
   <Image
     src="/static/introduction.png"
-    alt="Canevas de flux de travail visuel Sim"
-    width={700}
-    height={372}
+    alt="Éditeur de flux Sim avec canevas vide, panneau Editor et navigation"
+    width={2304}
+    height={1600}
     className="my-6"
   />
 </div>

apps/docs/content/docs/ja/introduction/index.mdx

@@ -12,9 +12,9 @@ Simはオープンソースのビジュアルワークフロービルダーで
 <div className="flex justify-center">
   <Image
     src="/static/introduction.png"
-    alt="Simビジュアルワークフローキャンバス"
-    width={700}
-    height={372}
+    alt="空のキャンバス、Editorパネル、ナビゲーションを表示したSimワークフローエディター"
+    width={2304}
+    height={1600}
     className="my-6"
   />
 </div>

apps/docs/content/docs/zh/introduction/index.mdx

@@ -12,9 +12,9 @@ Sim 是一个开源的可视化工作流构建器，用于构建和部署 AI 代
 <div className="flex justify-center">
   <Image
     src="/static/introduction.png"
-    alt="Sim 可视化工作流画布"
-    width={700}
-    height={372}
+    alt="包含空白画布、Editor 面板和导航的 Sim 工作流编辑器"
+    width={2304}
+    height={1600}
     className="my-6"
   />
 </div>

apps/docs/public/static/introduction.png

@@ -14,6 +14,7 @@ const mocks = vi.hoisted(() => ({
   getBaseUrl: vi.fn(),
   requireClient: vi.fn(),
   createConnection: vi.fn(),
+  getPerRequestScopes: vi.fn(),
   launchConnection: vi.fn(),
 }))
 
@@ -46,6 +47,9 @@ vi.mock('@/lib/credentials/application/launch-credential-connection', () => ({
     execute: mocks.launchConnection,
   },
 }))
+vi.mock('@/lib/oauth/utils', () => ({
+  getPerRequestOAuthLinkScopes: mocks.getPerRequestScopes,
+}))
 
 import { GET } from '@/app/api/auth/oauth2/authorize/route'
 
@@ -89,6 +93,7 @@ describe('OAuth2 authorize route', () => {
       },
     })
     mocks.linkAccount.mockResolvedValue(linkResponse())
+    mocks.getPerRequestScopes.mockReturnValue(undefined)
   })
 
   it('creates a canonical application draft for a legacy connect URL', async () => {
@@ -123,6 +128,29 @@ describe('OAuth2 authorize route', () => {
     expect(mocks.createConnection).not.toHaveBeenCalled()
   })
 
+  it('passes per-request scopes to providers that cannot inherit static connector scopes', async () => {
+    const scopes = ['openid', 'https://dynamics.microsoft.com/user_impersonation']
+    mocks.getPerRequestScopes.mockReturnValue(scopes)
+    mocks.createConnection.mockResolvedValue({
+      providerId: 'microsoft-dataverse',
+      workspaceId: WORKSPACE_ID,
+      draftId: 'draft-1',
+      expiresAt: new Date(),
+      authorizationUrl: '',
+    })
+
+    await GET(request({ providerId: 'microsoft-dataverse', workspaceId: WORKSPACE_ID }))
+
+    expect(mocks.linkAccount).toHaveBeenCalledWith(
+      expect.objectContaining({
+        body: expect.objectContaining({
+          providerId: 'microsoft-dataverse',
+          scopes,
+        }),
+      })
+    )
+  })
+
   it('launches an exact draft without creating another one', async () => {
     const response = await GET(request({ draftId: 'draft-1' }))