GeezerVison

Summary

Introduces a parallel /api/v2 external API with consistent authentication, response envelopes, pagination, errors, and resource semantics. Existing v1 wire behavior remains available; breaking cleanup and the expanded resource model live in v2.

The v2 OpenAPI reference is now generated from the shared Zod route contracts. Schema descriptions, examples, formats, bounds, nullability, and requiredness stay next to the runtime validation they document, eliminating the hand-maintained spec drift that previously existed.

Highlights

• Adds and expands v2 APIs for workflows and runs, files and signed uploads, tables, knowledge bases, logs, billing, folders, credentials, MCP servers, skills, and custom tools.
• Completes workflow CRUD, version, execution, status, cancellation, resume, filtering, sorting, and pagination surfaces.
• Adds file metadata with share status plus explicit share and unshare operations.
• Adds ownerEmail to knowledge-base and table metadata and rejects unsupported table required input.
• Centralizes protected operations behind shared Principal/application use cases across public APIs, internal APIs, and Copilot adapters.
• Returns access denied when a caller can see a resource but lacks mutation permission, while continuing to hide resources they cannot see.
• Persists signed multipart upload sessions and unifies file and knowledge-document upload lifecycles.
• Generates and validates seven OpenAPI documents covering 128 operations directly from the contracts.
• Updates the API reference and CI drift checks around the generated specifications.
• Integrates the latest staging changes; the upload-session migration is sequenced as 0289 after staging's 0287 and 0288 migrations.

Compatibility and rollout

• v1 endpoints remain available and retain their existing wire contracts.
• The v2 surface is gated behind the shared v2 API feature flag.
• Database changes are additive and backward-compatible with the deployed application version.

Verification

• bun run check:api-validation:strict
• bun run check:openapi
• bun run check:migrations
• env NODE_OPTIONS=--max-old-space-size=8192 bun run type-check in apps/sim
• 215 focused API, authorization, knowledge, table, folder, and provenance tests
• bun run test in packages/audit
• bun run type-check in packages/testing
• helm lint helm/sim --values helm/sim/ci/default-values.yaml
• bun run scripts/check-cron-parity.ts

Checklist

• Code follows project style guidelines
• Self-reviewed the conflict resolutions and generated migration chain
• Tests added or updated and passing
• Generated OpenAPI output is current and contract-validated
• No new API-boundary validation drift
• I confirm that I have read and agree to the terms outlined in the Contributor License Agreement