v0.6.37: audit logs page, isolated-vm worker rotation, permission groups ui

[waleedlatif1]

• fix(execution): fix isolated-vm memory leak and add worker recycling (fix(execution): fix isolated-vm memory leak and add worker recycling #4108)
• chore(triggers): deprecate trigger-save subblock (chore(triggers): deprecate trigger-save subblock #4107)
• fix(trigger): fix Google Sheets trigger header detection and row index tracking (fix(trigger): fix Google Sheets trigger header detection and row index tracking #4109)
• fix(trigger): handle Drive rate limits, 410 page token expiry, and clean up comments (fix(trigger): handle Drive rate limits, 410 page token expiry, and clean up comments #4112)
• feat(ee): add enterprise audit logs settings page (feat(ee): add enterprise audit logs settings page #4111)
• feat(ee): enterprise feature flags, permission group platform controls, audit logs ui (feat(ee): enterprise feature flags, permission group platform controls, audit logs ui, delete account #4115)
• improvement(landing): rebrand to AI workspace, add auth modal, harden PostHog tracking (improvement(landing): rebrand to AI workspace, add auth modal, harden PostHog tracking #4116)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
docs	Ready	Preview, Comment	Apr 12, 2026 3:44am

[cursor]

PR Summary

Medium Risk
Adds a new enterprise-facing audit logs UI/API with shared query/pagination logic, and changes isolated-vm worker lifecycle/cleanup behavior; both affect production observability and execution infrastructure despite being largely additive.

Overview
Adds an Enterprise Audit Logs settings section with a new client UI (search, resource-type/date filtering, cursor pagination) backed by a new /api/audit-logs route.

Refactors audit-log querying into shared helpers (buildFilterConditions, org scoping, cursor pagination) and reuses them across the v1 enterprise and admin audit-log endpoints.

Broadly enriches recordAudit calls across many API routes (credentials, schedules, workspaces, invitations, templates, knowledge, files, webhooks, etc.) with more consistent resourceId/resourceName and richer metadata, and centralizes audit action/resource enums into lib/audit/types (adding new actions like password reset requested, schedule created/deleted, environment deleted).

Deprecates the legacy trigger-save subblock (removes docs/type/test references and stops filtering it in the Linear block).

Improves isolated-vm execution stability by explicitly releasing isolated-vm objects in the worker process, spawning workers with --no-node-snapshot for Node 20+, and adding configurable worker recycling via IVM_MAX_EXECUTIONS_PER_WORKER with retirement logic in the worker pool.

^{Reviewed by Cursor Bugbot for commit 30c5e82. Configure here.}

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 30c5e82. Configure here.}