v0.9.48: fal.ai video start frames, security fixes for OTP attempts, OAuth launches, ZIP parsing and sandbox timers, Trust Center redirects, leaner Search MCP results by waleedlatif1 · Pull Request #9784 · simstudioai/sim

docs(library): update best-ai-agents-for-executive-assistant-tasks (#9766)

waleedlatif1

and

Sim Pi Agent

authored

1747267

feat(library): How to Connect an MCP Server to an AI Agent Workflow (#9767)

waleedlatif1

and

Sim Pi Agent

authored

cf4e6b7

feat(library): Best AI Agent Platforms for Product Analytics Automation: Mixpanel, Segment, Amplitude, and PostHog (#9768)

waleedlatif1

and

Sim Pi Agent

authored

51951de

feat(library): 8 Best AI Business Process Automation Platforms for Enterprise Operations in 2026 (#9769)

waleedlatif1

and

Sim Pi Agent

authored

8d07844

feat(library): How to Standardize MCP Servers Across an Enterprise: Platforms Compared (#9770)

waleedlatif1

and

Sim Pi Agent

authored

472399b

fix(execute): derive credential actor from auth type, not body isClientSession (#9771)

waleedlatif1

authored

12a6517

fix(oauth): reject cross-site workspace OAuth launches (#9772)

waleedlatif1

authored

e39ae88

chore(execute): tidy credential-actor tests and comment (#9775)

waleedlatif1

authored

83914e7

fix(sandbox): cap task timer bridges and dispose isolates on host timeout (#9776)

waleedlatif1

authored

63487f7

improvement(search): send each Search MCP result fact once (#9778)

waleedlatif1

authored

17a0287

fix(file-parsers): reject ZIP archives JSZip reads from outside the guarded region (#9773)

waleedlatif1

authored

44ce671

fix(desktop): explain macOS Local Network blocks for private self-hosted servers (#9777)

waleedlatif1

authored

d5451f6

docs(zoom): clarify account selection and separate search connections (#9779)

waleedlatif1

authored

13c5924

fix(otp): reserve a verification attempt atomically before comparing the code (#9774)

waleedlatif1

authored

5123abb

feat(landing): redirect /security and /trust to the Trust Center (#9780)

waleedlatif1

authored

07a8d0c

feat(video): accept a start frame image for fal.ai video models (#9761)

authored

e820b58

docs(library): update how-to-build-ai-slackbot-without-code (#9781)

waleedlatif1

and

Sim Pi Agent

authored

7a5b96e

docs(library): update best-hubspot-alternatives-ai-marketing-automation-2026 (#9783)

waleedlatif1

and

Sim Pi Agent

authored

b5ad749

docs(library): update best-ai-agent-platforms-for-enterprise-teams-2026 (#9785)

waleedlatif1

and

Sim Pi Agent

authored

06bda4c

fix(video): read the active start frame input when serializing video settings (#9787)

waleedlatif1

authored

887bece

fix(oauth): reject cross-site Instagram workspace launches (#9788)

waleedlatif1

authored

776c33a

fix(desktop): skip the Local Network hint when Sim Cloud is unreachable (#9791)

waleedlatif1

authored

c808a88

fix(docs): keep search responsive and contain sidebar scrolling (#9786)

waleedlatif1

authored

ced5556

fix(otp): make a correct code single-use and never compare a code without expiry (#9789)

waleedlatif1

authored

a0afe79

ci(npm): publish every npm package through trusted publishing (#9790)

waleedlatif1

authored

27972e1

fix(oauth): confirm workspace connect links before starting the connection (#9792)

waleedlatif1

authored

c7f78aa

fix(sandbox): drop in-flight fetches once the pool gives up or the time budget passes (#9793)

waleedlatif1

authored

e999cf5

Navigation Menu

Repository navigation

v0.9.48: fal.ai video start frames, security fixes for OTP attempts, OAuth launches, ZIP parsing and sandbox timers, Trust Center redirects, leaner Search MCP results - #9784

v0.9.48: fal.ai video start frames, security fixes for OTP attempts, OAuth launches, ZIP parsing and sandbox timers, Trust Center redirects, leaner Search MCP results#9784
waleedlatif1 merged 29 commits into
mainfrom
staging

Commits on Nov 7, 2026

docs(library): update best-ai-agents-for-executive-assistant-tasks (#9766)

feat(library): How to Connect an MCP Server to an AI Agent Workflow (#9767)

feat(library): Best AI Agent Platforms for Product Analytics Automation: Mixpanel, Segment, Amplitude, and PostHog (#9768)

feat(library): 8 Best AI Business Process Automation Platforms for Enterprise Operations in 2026 (#9769)

feat(library): How to Standardize MCP Servers Across an Enterprise: Platforms Compared (#9770)

fix(execute): derive credential actor from auth type, not body isClientSession (#9771)

fix(oauth): reject cross-site workspace OAuth launches (#9772)

chore(execute): tidy credential-actor tests and comment (#9775)

fix(sandbox): cap task timer bridges and dispose isolates on host timeout (#9776)

improvement(search): send each Search MCP result fact once (#9778)

fix(file-parsers): reject ZIP archives JSZip reads from outside the guarded region (#9773)

fix(desktop): explain macOS Local Network blocks for private self-hosted servers (#9777)

docs(zoom): clarify account selection and separate search connections (#9779)

fix(otp): reserve a verification attempt atomically before comparing the code (#9774)

feat(landing): redirect /security and /trust to the Trust Center (#9780)

feat(video): accept a start frame image for fal.ai video models (#9761)

docs(library): update how-to-build-ai-slackbot-without-code (#9781)

docs(library): update best-hubspot-alternatives-ai-marketing-automation-2026 (#9783)

docs(library): update best-ai-agent-platforms-for-enterprise-teams-2026 (#9785)

fix(video): read the active start frame input when serializing video settings (#9787)

fix(oauth): reject cross-site Instagram workspace launches (#9788)

fix(desktop): skip the Local Network hint when Sim Cloud is unreachable (#9791)

fix(docs): keep search responsive and contain sidebar scrolling (#9786)

fix(otp): make a correct code single-use and never compare a code without expiry (#9789)

ci(npm): publish every npm package through trusted publishing (#9790)

fix(oauth): confirm workspace connect links before starting the connection (#9792)

fix(sandbox): drop in-flight fetches once the pool gives up or the time budget passes (#9793)

Commits on Nov 8, 2026

improvement(search): shorter live document IDs (#9794)

fix(desktop): return account sites from the source-connect e2e server (#9795)