v0.9.51: Gmail search results marked as message openings, live chunk index refused before the provider read, enterprise identity and audit controls on the landing site, library posts

Author: waleedlatif1

README.md

@@ -48,6 +48,15 @@ macOS 12+, Apple Silicon and Intel. See the [desktop docs](https://docs.sim.ai/d
 - Ingest files, knowledge bases, and structured table data
 - Monitor runs, logs, schedules, and workflow activity
 
+## Security and governance
+
+- SOC 2 Type II, ISO 27001, and GDPR: reports and policies are in the [Trust Center](https://trust.sim.ai/)
+- [Single sign-on](https://docs.sim.ai/platform/enterprise/sso) with SAML 2.0 or OIDC, including Microsoft Entra ID, Okta, and Google Workspace
+- [SCIM directory provisioning](https://docs.sim.ai/platform/enterprise/scim) from Microsoft Entra ID or Okta
+- [Audit logs](https://docs.sim.ai/platform/enterprise/audit-logs) and [permission groups](https://docs.sim.ai/platform/enterprise/access-control) that restrict models, blocks, and tools by workspace and member
+
+These controls are part of the Enterprise plan on Sim Cloud. See the [enterprise docs](https://docs.sim.ai/platform/enterprise) for self-hosted setup.
+
 ## One workspace, every surface
 
 <p align="center">Chat and workflows are just the start — tables, files, and knowledge all live in the same workspace, in the browser or on your desktop.</p>

apps/docs/content/docs/introduction/index.mdx

@@ -59,6 +59,8 @@ The core source is available on [GitHub](https://github.com/simstudioai/sim) und
 
 Sim is SOC 2 Type II compliant. Find reports and security details in the [trust center](https://trust.sim.ai/).
 
+Enterprise organizations can sign in through [SSO](/platform/enterprise/sso) with SAML 2.0 or OIDC, including Microsoft Entra ID, Okta, and Google Workspace. They can also sync members from Entra ID or Okta with [SCIM](/platform/enterprise/scim), review [audit logs](/platform/enterprise/audit-logs), and restrict models, blocks, and tools with [permission groups](/platform/enterprise/access-control).
+
 ## Related docs
 
 - [Getting started](/getting-started): Build and run a simple summarizer.

apps/docs/content/docs/workflows/blocks/agent.mdx

@@ -187,7 +187,7 @@ Live tool-call chips stream for **OpenAI, Anthropic, Azure Anthropic, Google, Ve
 | Provider | Streamed thinking | Models |
 |----------|-------------------|--------|
 | OpenAI | Summaries only — Requires OpenAI organization verification; falls back to no summaries. | `gpt-6-astra`, `gpt-6.1-sol`, `gpt-6.1-terra`, `gpt-6-sol`, `gpt-6-luna`, `gpt-5.6-sol`, `gpt-5.6-terra`, `gpt-5.6-luna`, `gpt-5.5-pro`, `gpt-5.5`, `gpt-5.4-pro`, `gpt-5.4`, `gpt-5.4-mini`, `gpt-5.4-nano`, `gpt-5.3-codex`, `gpt-5.2-pro`, `gpt-5.2`, `gpt-5.1`, `gpt-5-pro`, `gpt-5`, `gpt-5-mini`, `gpt-5-nano`, `o4-mini`, `o3`, `o3-mini`, `o1` |
-| Anthropic | Summaries only — These generations omit full thinking; Sim requests summarized thinking on streaming runs. | `claude-fable-5-1`, `claude-fable-5`, `claude-sonnet-5-5`, `claude-sonnet-5`, `claude-opus-5-5`, `claude-opus-5`, `claude-opus-4-8`, `claude-opus-4-7`, `claude-opus-4-6`, `claude-sonnet-4-6`, `claude-opus-4-5`, `claude-sonnet-4-5`, `claude-haiku-5-5`, `claude-haiku-4-5` |
+| Anthropic | Summaries only — These generations omit full thinking; Sim requests summarized thinking on streaming runs. | `claude-fable-5-2`, `claude-fable-5-1`, `claude-fable-5`, `claude-sonnet-5-5`, `claude-sonnet-5`, `claude-opus-5-5`, `claude-opus-5`, `claude-opus-4-8`, `claude-opus-4-7`, `claude-opus-4-6`, `claude-sonnet-4-6`, `claude-opus-4-5`, `claude-sonnet-4-5`, `claude-haiku-5-5`, `claude-haiku-4-5` |
 | Azure OpenAI | Summaries only — Requires OpenAI organization verification; falls back to no summaries. | `azure/gpt-6.1-sol`, `azure/gpt-6-sol`, `azure/gpt-6-luna`, `azure/gpt-6-astra`, `azure/gpt-5.6-sol`, `azure/gpt-5.6-terra`, `azure/gpt-5.6-luna`, `azure/gpt-5.5`, `azure/gpt-5.4-pro`, `azure/gpt-5.4`, `azure/gpt-5.4-mini`, `azure/gpt-5.4-nano`, `azure/gpt-5.2`, `azure/gpt-5.1`, `azure/gpt-5.1-codex`, `azure/gpt-5`, `azure/gpt-5-mini`, `azure/gpt-5-nano`, `azure/o3`, `azure/o4-mini` |
 | Azure Anthropic | Summaries only — These generations omit full thinking; Sim requests summarized thinking on streaming runs. | `azure-anthropic/claude-fable-5-1`, `azure-anthropic/claude-opus-5-5`, `azure-anthropic/claude-sonnet-5-5`, `azure-anthropic/claude-haiku-5-5`, `azure-anthropic/claude-opus-5`, `azure-anthropic/claude-opus-4-8`, `azure-anthropic/claude-opus-4-7`, `azure-anthropic/claude-opus-4-6`, `azure-anthropic/claude-opus-4-5`, `azure-anthropic/claude-sonnet-5`, `azure-anthropic/claude-sonnet-4-6`, `azure-anthropic/claude-sonnet-4-5`, `azure-anthropic/claude-opus-4-1`, `azure-anthropic/claude-haiku-4-5` |
 | Google | Summaries only | `gemini-4-argon`, `gemini-3.8-flash`, `gemini-3.7-flash`, `gemini-3.6-flash`, `gemini-3.5-flash-lite`, `gemini-3.5-flash`, `gemini-3.1-pro-preview`, `gemini-3.1-flash-lite`, `gemini-3-flash-preview`, `gemini-2.5-pro`, `gemini-2.5-flash`, `gemini-2.5-flash-lite` |

apps/sim/app/llms-full.txt/route.ts

@@ -22,6 +22,7 @@ import {
   linkLine,
   markdownResponse,
   navMenuLines,
+  SECURITY_LINES,
   SOLUTION_LINES,
   section,
   toLlmsMarkdown,
@@ -172,6 +173,7 @@ export async function GET() {
         `- ${max.name}: $${max.dollars} per user per month, ${max.credits.toLocaleString('en-US')} credits.`,
         '- Enterprise: custom limits, infrastructure, and governance for large organizations.',
       ]),
+      section('Security and governance', SECURITY_LINES),
       section('Solutions', SOLUTION_LINES),
       section(
         'Customer stories',

apps/sim/app/llms.txt/llms.ts

@@ -54,6 +54,37 @@ export const SITEMAP_LINE = linkLine(
 /** One llms.txt entry per `/solutions/*` page. */
 export const SOLUTION_LINES = SOLUTIONS.map((s) => linkLine(s.title, s.path, s.description))
 
+/** Compliance and enterprise identity controls, which buyers check before shortlisting. */
+export const SECURITY_LINES = [
+  linkLine(
+    'Trust Center',
+    'https://trust.sim.ai/',
+    'SOC 2 Type II, ISO 27001, and GDPR: reports, policies, and subprocessors'
+  ),
+  linkLine(
+    'Single sign-on',
+    `${DOCS_URL}/platform/enterprise/sso`,
+    'SAML 2.0 and OIDC, with setup guides for Okta, Microsoft Entra ID, Google Workspace, and AD FS'
+  ),
+  linkLine(
+    'Directory provisioning',
+    `${DOCS_URL}/platform/enterprise/scim`,
+    'SCIM 2.0 member and group sync from Microsoft Entra ID or Okta'
+  ),
+  linkLine(
+    'Audit logs',
+    `${DOCS_URL}/platform/enterprise/audit-logs`,
+    'Actor, time, and resource for configuration and security events, with CSV export and data drains'
+  ),
+  linkLine(
+    'Permission groups',
+    `${DOCS_URL}/platform/enterprise/access-control`,
+    'Restrict features, models, blocks, and tools by workspace and member'
+  ),
+  '',
+  'On Sim Cloud, single sign-on, directory provisioning, audit logs, and permission groups are part of the Enterprise plan.',
+]
+
 /** One llms.txt list entry: `- [title](url): description`. */
 export function linkLine(title: string, href: string, description?: string): string {
   return `- [${title}](${toSiteUrl(href)})${description ? `: ${description}` : ''}`

apps/sim/app/llms.txt/route.ts

@@ -21,6 +21,7 @@ import {
   markdownResponse,
   navMenuLines,
   PRICING_LINE,
+  SECURITY_LINES,
   SITEMAP_LINE,
   SOLUTION_LINES,
   section,
@@ -52,6 +53,7 @@ export async function GET() {
         ...navMenuLines(PLATFORM_MENU),
         PRICING_LINE,
       ]),
+      section('Security and governance', SECURITY_LINES),
       section('Solutions', SOLUTION_LINES),
       section(
         'Customers',