GeezerVison

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated (UTC)
docs	Skipped		Jul 10, 2026 11:56pm

PR Summary

Medium Risk
Touches workflow execution boundaries (required-input validation and custom-block error handling) and org-scoped delete/usage SQL; authz is reused from manage routes, but wrong usage counts or enforcement could affect runs or destructive actions.

Overview
Hardens custom block deletion and adds publisher-defined required inputs for deploy-as-block workflows.

Delete flow: Unpublish now loads org-wide usage counts via GET /api/custom-blocks/[id]/usages (same authorizeManage as PATCH/DELETE). The settings UI prefetches counts, refetches when opening delete, shows how many workflows still reference the block, and requires typing the block name to confirm. Delete audit metadata records usageCount and deployedUsageCount. authorizeManage is extracted to a shared module for [id] routes.

Required inputs: Publishers can mark each exposed Start input required (stored in existing inputs JSON overrides—no migration). That flows into generated block config (required on sub-blocks for editor/serializer) and into getCustomBlockAuthority. At run time, findMissingRequiredCustomBlockInputs validates against the child’s live deployed Start fields; missing values throw a consumer-safe error (surfaced through ChildWorkflowError instead of the generic custom-block failure). Stale overrides for removed fields are ignored.

Usage counting: getCustomBlockUsageCounts unions workflows that place the block type in live workflow_blocks or in the active deployment snapshot (with a LIKE pre-filter before jsonb parsing).

^{Reviewed by Cursor Bugbot for commit 093a5cf. Bugbot is set up for automated code reviews on this repo. Configure here.}

Greptile Summary

This PR hardens custom block deletion and adds required input controls. The main changes are:

• A new usage-count endpoint for custom blocks.
• Delete confirmation with the block name and current usage count.
• Delete audit metadata with live and deployed usage counts.
• Per-input required overrides for custom block consumers.
• Runtime validation for required custom block inputs.

Confidence Score: 5/5

This looks safe to merge.

• No blocking issues found in the changed code.

Important Files Changed

_{Reviews (3): Last reviewed commit: "fix(custom-blocks): escape LIKE wildcard..." | Re-trigger Greptile}

@greptile review

@greptile review