feat(api): add v2 resource management endpoints

[TheodoreSpeaks]

Summary

• Add v2 skill editor roster, grant/revoke operations, accessible workspace listing, and full knowledge-base connector operations.
• Reuse shared application operations for authorization and enforce personal/workspace API-key rules, cursor pagination, and safe public projections.
• Change service-account credential creation to accept a strict write-only JSON credentials string, with corresponding CLI, OpenAPI, and generated documentation updates.
• Add public CLI workspace profiles that reuse a stored authentication profile, validate workspace access, and publish generated command documentation.

Type of Change

• Bug fix
• New feature
• Breaking change
• Documentation
• Other

Testing

• bun run lint
• bun run apps/sim/scripts/check-block-registry.ts origin/staging
• bun run check:audits — 32/32 audits passed
• bun run --cwd packages/sim-cli test — 449 passed, 1 skipped
• bun run --cwd packages/sim-cli type-check
• bun run --cwd packages/sim-cli build
• OpenAPI and CLI artifacts regenerated successfully

Checklist

• Code follows project style guidelines
• Self-reviewed my changes
• Tests added/updated and passing
• No new warnings introduced
• I confirm that I have read and agree to the terms outlined in the Contributor License Agreement (CLA)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
docs	Ready	Preview	Aug 20, 2026 10:41pm

[cursor]

PR Summary

Low Risk
Documentation-only CLI pages; no runtime, auth, or API behavior is changed in this diff.

Overview
Documents workspace profiles so one stored login can target several workspaces via auth_profile, including sim profiles add/list, logout rules that block dangling shared keys, and how config vs credentials resolve.

Also publishes generated command docs for knowledge connectors (create/update/delete/list/sync and document exclude/restore), sim workspaces list, and skill editor grant/list/revoke.

^{Reviewed by Cursor Bugbot for commit f0b8e0b. Bugbot is set up for automated code reviews on this repo. Configure here.}

[greptile-apps]

Greptile Summary

The PR adds public v2 endpoints and CLI support for skill editors, accessible workspaces, knowledge connectors, strict service-account credential input, and reusable workspace profiles.

• Centralizes protected resource operations behind authorized application use cases with canonical scope checks and semantic audit projection.
• Adds knowledge-connector CRUD, synchronization, and document-management contracts, routes, OpenAPI output, and generated CLI commands.
• Adds CLI workspace profiles that share stored authentication while retaining profile-local workspace and output settings.
• Updates credential creation to accept a strict write-only JSON string and regenerates documentation and API artifacts.

Confidence Score: 5/5

The PR appears safe to merge, with canonical authorization, connector containment, audit behavior, and shared CLI authentication invariants preserved.

The reviewed resource operations authenticate at their boundaries, resolve canonical parent and workspace context before authorization, preserve semantic audit effects, and expose validated public contracts without an accepted blocking or non-blocking defect.

Important Files Changed

Filename	Overview
apps/sim/lib/knowledge/application/connectors.ts	Adds authorized knowledge-connector operations that resolve canonical resource context before reads, mutations, synchronization, and document management.
apps/sim/app/api/v2/knowledge/[id]/connectors/route.ts	Exposes contract-backed v2 connector list and create endpoints through shared authentication, authorization, and presentation infrastructure.
apps/sim/lib/skills/application/use-cases.ts	Adds editor roster and grant/revoke use cases while preserving authoritative audit effects and no-op handling.
apps/sim/app/api/v2/credentials/route.ts	Updates service-account creation to consume the strict write-only credentials JSON contract.
apps/sim/lib/workspaces/application/list-public-workspaces.ts	Implements the public projection and pagination path for workspaces accessible to the authenticated principal.
packages/sim-cli/src/config/profile.ts	Adds direct shared-auth profile resolution with explicit validation against missing, chained, self-referential, or conflicting configuration.
packages/sim-cli/src/commands/auth.ts	Adds workspace-profile creation and dependency-aware authentication lifecycle behavior.
packages/sim-cli/src/generated/v2-api.ts	Regenerates CLI bindings for the new v2 resource-management contracts.

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart LR
  Client[CLI or API client] --> Route[v2 route adapter]
  Route --> Auth[Authenticate and construct Principal]
  Auth --> UseCase[Authorized application use case]
  UseCase --> Context[Resolve canonical resource and workspace]
  Context --> Authz[Check operation policy and permission]
  Authz --> Domain[Execute resource operation]
  Domain --> Audit[Project semantic audit and effects]
  Domain --> Response[Safe public response]
  Profile[Workspace CLI profile] --> AuthProfile[Stored authentication profile]
  AuthProfile --> Client

Loading

_{Reviews (1): Last reviewed commit: "feat(cli): add shared workspace profiles" | Re-trigger Greptile}