v0.9.10: aeo improvements, chat fixes, sandbox fixes

Author: waleedlatif1

.agents/skills/ship/SKILL.md

@@ -42,6 +42,7 @@ When the user runs `/ship`:
   - If the diff modifies UI code (any non-test `.tsx` file, or anything under `apps/sim/components/`, `apps/sim/hooks/`, or `apps/sim/stores/`), run `/cleanup`. It fans out the React/UI passes (effects, memo, callbacks, state, React Query, emcn, url-state), the comment pass, and the test-audit pass, and applies fixes so they land in this commit.
   - Otherwise, if the diff adds or changes tests (`*.test.ts(x)`, `*.integration.ts`, `**/e2e/**`, `apps/sim/scripts/test-*-e2e.ts`), run `/test-audit audit <changed test files>` on its own. Every new or changed test must pass the authoring gate; delete the ones that don't rather than shipping them.
   - Then run the test files the diff adds or changes, plus the existing tests beside changed source files, with `bun run --cwd <workspace> test <paths>` (`bun run --cwd apps/sim test <paths>` for the app; `*.integration.ts` needs the setup in `.claude/rules/sim-testing.md`). A failing test aborts ship.
+  - Then run root `bun run test` from the repo root. It chains `test:scripts` (the `scripts/*.test.ts` suite CI runs) before every workspace suite; workspace-scoped runs skip it, which is how a `scripts/check-*.test.ts` failure has reached CI. A failing test aborts ship.
 5. **Run migration safety** — only if the diff touches `packages/db/migrations/**` or `packages/db/schema.ts`:
   - Run `/db-migrate` to review the migration for zero-downtime safety (expand/contract phasing, backward-compatibility with the deployed app version).
   - `bun run check:migrations origin/staging` must pass (staging is the PR base). Do not silence a flagged statement with a `-- migration-safe:` annotation unless `/db-migrate` confirmed the old code no longer depends on it; otherwise split the destructive change into a later deploy.

.github/CONTRIBUTING.md

@@ -354,9 +354,8 @@ In addition, you will need to update the registries:
    // apps/sim/blocks/blocks/pinecone.ts
    import { PineconeIcon } from '@/components/icons'
    import type { BlockConfig } from '@/blocks/types'
-   import type { PineconeResponse } from '@/tools/pinecone/types'
 
-   export const PineconeBlock: BlockConfig<PineconeResponse> = {
+   export const PineconeBlock: BlockConfig = {
      type: 'pinecone',
      name: 'Pinecone',
      description: 'Use Pinecone vector database',

.github/actions/setup-workspace/action.yml

@@ -0,0 +1,61 @@
+name: Setup Workspace
+description: Install the pinned Bun and Node toolchain, mount the dependency (and optionally Turbo) caches, and install workspace dependencies.
+
+inputs:
+  provider:
+    description: The CI_PROVIDER repo variable, forwarded to cache-mount.
+    required: false
+    default: ''
+  turbo-cache-key:
+    description: Suffix for a Turbo cache mounted at ./.turbo. Empty skips the mount. Jobs that write Turbo entries need distinct suffixes, or last-writer-wins commits evict each other's entries.
+    required: false
+    default: ''
+
+# Cache keys are scoped by event name, and fork PRs get their own namespace on
+# top: untrusted fork runs must never share a cache with push runs (whose caches
+# feed production image builds) or with trusted internal-PR runs.
+#
+# node_modules also keys on the lockfile hash: a sticky disk is a mutable volume,
+# and `bun install --frozen-lockfile` adds what the lockfile needs without
+# pruning what it dropped, so branches on different lockfiles were contaminating
+# each other (a stale @next/swc 16.2.6 outlived the 16.2.11 bump). The bun and
+# Turbo caches are content/hash-addressed, so they stay shared — that is what
+# keeps a fresh node_modules disk cheap to fill.
+runs:
+  using: composite
+  steps:
+    - name: Setup Bun
+      uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2
+      with:
+        bun-version: 1.4.2
+
+    - name: Setup Node
+      uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
+      with:
+        node-version: 24
+
+    - name: Mount Bun cache
+      uses: ./.github/actions/cache-mount
+      with:
+        provider: ${{ inputs.provider }}
+        key: ${{ github.repository }}-bun-cache-${{ github.event_name }}${{ github.event.pull_request.head.repo.fork && '-fork' || '' }}
+        path: ~/.bun/install/cache
+
+    - name: Mount node_modules
+      uses: ./.github/actions/cache-mount
+      with:
+        provider: ${{ inputs.provider }}
+        key: ${{ github.repository }}-node-modules-${{ github.event_name }}${{ github.event.pull_request.head.repo.fork && '-fork' || '' }}-${{ hashFiles('bun.lock') }}
+        path: ./node_modules
+
+    - name: Mount Turbo cache
+      if: inputs.turbo-cache-key != ''
+      uses: ./.github/actions/cache-mount
+      with:
+        provider: ${{ inputs.provider }}
+        key: ${{ github.repository }}-${{ inputs.turbo-cache-key }}-${{ github.event_name }}${{ github.event.pull_request.head.repo.fork && '-fork' || '' }}
+        path: ./.turbo
+
+    - name: Install dependencies
+      shell: bash
+      run: bun install --frozen-lockfile --ignore-scripts

.github/workflows/ci.yml

@@ -222,7 +222,6 @@ jobs:
           platforms: linux/amd64
           tags: ${{ steps.login-ecr.outputs.registry }}/${{ steps.ecr-repo.outputs.name }}:${{ github.sha }}-dev
           build-args: |
-            SIM_SEARCH_LIVE_DEFAULT=true
             MSHIP_PLAN_MODE_DEFAULT=true
           max-cache-size-mb: ${{ matrix.cache_mb }}
 

.github/workflows/desktop-e2e.yml

@@ -11,6 +11,14 @@ on:
       - '.github/workflows/desktop-release.yml'
       - 'apps/desktop/**'
       - 'apps/sim/app/_shell/desktop-update-*.tsx'
+      - 'apps/sim/app/workspace/**/home/hooks/use-mothership-resize.ts'
+      - 'apps/sim/app/workspace/**/home/hooks/use-resource-panel.ts'
+      - 'apps/sim/app/workspace/**/home/components/chat-panel-layout.tsx'
+      - 'apps/sim/stores/chat-panel/**'
+      - 'apps/sim/stores/constants.ts'
+      - 'apps/sim/lib/browser-agent/transport.ts'
+      - 'apps/sim/lib/core/utils/separator-keys.ts'
+      - 'apps/sim/scripts/fixtures/chat-panel.tsx'
       - 'apps/sim/app/layout.tsx'
       - 'apps/sim/hooks/use-desktop-update-state.ts'
       - 'apps/sim/lib/desktop/**'
@@ -20,7 +28,6 @@ on:
       - 'apps/sim/hooks/queries/personal-search-integrations.ts'
       - 'apps/sim/hooks/use-search-integration-connection.ts'
       - 'apps/sim/hooks/use-github-installation-setup.ts'
-      - 'apps/sim/app/o/**/integrations/indexed/use-member-enrollment.ts'
       - 'apps/sim/lib/api/contracts/desktop-source-connect.ts'
       - 'apps/sim/scripts/fixtures/desktop-source-connect.tsx'
       - 'apps/sim/app/workspace/**/browser-session/**'