v0.6.98: redundant index, security hardening, new copilot messages table, integration icons audit

[waleedlatif1]

• chore(db): drop redundant idx_webhook_on_workflow_id_block_id index (chore(db): drop redundant idx_webhook_on_workflow_id_block_id index #4809)
• perf(copilot): read chat transcripts from copilot_messages (R+1 cutover) (perf(copilot): read chat transcripts from copilot_messages (R+1 cutover) #4808)
• fix(tables): right-align run/stop in embedded toolbar; workflow cells format like normal cells (fix(tables): right-align run/stop in embedded toolbar; workflow cells format like normal cells #4806)
• fix(icons): repair broken integration icon rendering (fix(icons): repair broken integration icon rendering #4810)
• fix(tables): serialize schema mutations to prevent parallel column clobber (fix(tables): serialize schema mutations to prevent parallel column clobber #4812)
• fix(wait): resume live/draft async waits and preserve cell context on chained waits (fix(wait): resume live/draft async waits and preserve cell context on chained waits #4814)
• fix(security): harden SSO domain registration, webhook path isolation, and CSV export (fix(security): harden SSO domain registration, webhook path isolation, and CSV export #4813)
• fix(security): block private/reserved IPs for hosted 1Password Connect SSRF (fix(security): block private/reserved IPs for hosted 1Password Connect SSRF #4818)
• fix(search-replace): don't auto-navigate when content edits invalidate the active match (fix(search-replace): don't auto-navigate when content edits invalidate the active match #4819)
• improvement(integrations): validate and expand devin, cursor, and greptile (improvement(integrations): validate and expand devin, cursor, and greptile #4820)
• fix(files): don't reject external URLs containing '..' in file parse validation (fix(files): don't reject external URLs containing '..' in file parse validation #4821)
• improvement(enrichments): limit company-info to fields both providers return (improvement(enrichments): limit company-info to fields both providers return #4817)
• feat(google-sheets): add row filtering to read with numeric operators (feat(google-sheets): add row filtering to read with numeric operators #4822)
• fix(selectors): fetch all pages for paginated dropdown list routes (fix(selectors): fetch all pages for paginated dropdown list routes #4823)
• fix(sso): re-check domain conflict before write and reject IP-address domains (fix(sso): re-check domain conflict before write and reject IP-address domains #4825)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated (UTC)
docs	Skipped		May 31, 2026 4:01am

[cursor]

PR Summary

Medium Risk
Several auth and data-export paths change (SSO, webhooks, SSRF, CSV, file URL validation); behavior is mostly tightening but needs regression on SSO, webhooks, file parse, and hosted 1Password Connect.

Overview
This release bundles security and correctness fixes with integration/docs updates and a broad docs icon rendering pass.

Security & validation: SSO registration now normalizes domains and rejects domains already claimed by another tenant (409). Webhook creation uses path conflict checks so paths aren’t reused across workflows. CSV table export neutralizes spreadsheet formula injection in headers and string cells. Hosted 1Password Connect URLs block private/reserved IPs (self-hosted still allows RFC1918). File parse treats external http(s) URLs as non-filesystem paths so literal .. in slugs (e.g. Slack) isn’t flagged as traversal, while internal /api/files/serve/ URLs stay protected.

Product UX: Embedded table toolbar adds a right-aligned trailing slot for run/stop. Workflow-output cells render URL and in-workspace resource chips like string columns. Workflow search/replace stops auto-jumping to the first match when edits invalidate the active match; replace flows preserve selection index.

Integrations: Cursor gains list models/repositories and API key info tools; Devin expands (org ID, messages, attachments, tags, archive/terminate) with doc/block updates. Google Sheets read adds filter match types including numeric comparisons and filter metadata in outputs. Wiza consolidates individual reveal into one polled operation. icons.tsx updates many integration SVG viewBoxes/paths (OneDrive, Greptile brand color, Zoom currentColor, etc.) plus landing/docs metadata.

Other items referenced in the PR title (copilot messages table, wait resume, schema mutation serialization) are outside the attached diff snippet.

^{Reviewed by Cursor Bugbot for commit f6685cf. Configure here.}

[greptile-apps]

Greptile Summary

This release bundles several independent security hardening patches, a performance cutover for copilot chat history, new tooling integrations, and two table-layer correctness fixes. The security changes are well-scoped and accompanied by tests; the copilot R+1 cutover is safe because the copilot_messages backfill was completed in migration 0217.

• Security hardening — SSO domain ownership gate blocks cross-tenant registration, webhook path isolation prevents cross-tenant delivery, 1Password Connect now rejects all private/reserved IPs on hosted deployments, CSV export neutralizes formula injection via single-quote prefix, and external file URLs bypass path-traversal checks while internal URLs retain full protection.
• Table & executor fixes — withLockedTable serializes schema mutations with a PostgreSQL advisory lock; the human-in-the-loop manager merges (rather than replaces) metadata so cellContext survives chained waits; and the executor preserves useDraftState from resumed context extensions.
• New capabilities — Google Sheets read gains numeric/ordering filter operators backed by filterSheetRows, plus new Cursor, Devin, and Greptile tool implementations and expanded enrichment fields.

Confidence Score: 4/5

Safe to merge; the security hardening, table locking, and copilot cutover all look correct. Two spots — SSO domain registration and webhook path collision — have a narrow check-then-act window that could allow duplicates under concurrent load, but neither causes data loss and both have runtime fallbacks.

The changes are well-tested and the new security guards are materially stronger than before. The two race windows (SSO domain ownership check vs. registration, and webhook path collision check vs. insert) are real but require concurrent requests from different tenants at the exact same moment, which is unlikely for admin-level operations. The tx parameter on findConflictingWebhookPathOwner signals intent for eventual transactional use. The copilot R+1 cutover is safe because the backfill ran in migration 0217.

apps/sim/app/api/auth/sso/register/route.ts and apps/sim/lib/webhooks/utils.server.ts (and its callers in deploy.ts / route.ts) both have the TOCTOU pattern worth addressing before the path-isolation work is considered fully closed.

Important Files Changed

Filename	Overview
apps/sim/app/api/auth/sso/register/route.ts	Adds domain-ownership guard for SSO registration, but the check and the registration call are not atomic, leaving a narrow race window.
apps/sim/lib/auth/sso/domain.ts	New normalization helper for SSO email domains; regex permits IP-address literals such as 10.0.0.1 that are not valid registrable email domains.
apps/sim/lib/webhooks/utils.server.ts	Adds findConflictingWebhookPathOwner, correctly scoped to active+non-archived webhooks; TOCTOU window exists between the check and the actual row insert.
apps/sim/app/api/table/[tableId]/export/route.ts	Adds CSV injection mitigation via neutralizeCsvFormula (single-quote prefix); implementation is correct and consistent across headers and data cells.
apps/sim/app/api/tools/onepassword/utils.ts	Hardens SSRF guard by blocking all private/reserved IPs on hosted deployments; clean separation of hosted vs self-hosted policy via assertConnectIpAllowed.
apps/sim/app/api/webhooks/route.ts	Replaces inline path-conflict check with findConflictingWebhookPathOwner; same TOCTOU window as deploy.ts but significantly cleaner isolation logic.
apps/sim/lib/copilot/chat/lifecycle.ts	R+1 cutover reading messages from copilot_messages table; safe because migration 0217 backfilled all pre-existing chat messages before this change.
apps/sim/lib/table/service.ts	Serializes schema mutations with a PostgreSQL advisory lock via withLockedTable; correctly avoids FOR UPDATE deadlocks with the row-count trigger.
apps/sim/lib/webhooks/processor.ts	Adds cross-tenant path collision handling in findAllWebhooksForPath, dispatching only to the earliest-registered workflow.
apps/sim/tools/google_sheets/filter.ts	New client-side row filter module with numeric/ordering operators; correctly handles mixed numeric/text comparisons and returns filter metadata.

_{Reviews (1): Last reviewed commit: "feat(google-sheets): add row filtering t..." | Re-trigger Greptile}