feat(misc): skills import, MCP modal, workmark, dispatch modals, collapsed tasks and workflows manipulation, README

[waleedlatif1]

Summary

• skills import, MCP modal, workmark, dispatch modals, collapsed tasks and workflows manipulation, README

Type of Change

• Bug fix
• New feature

Testing

Tested manually

Checklist

• Code follows project style guidelines
• Self-reviewed my changes
• Tests added/updated and passing
• No new warnings introduced
• I confirm that I have read and agree to the terms outlined in the Contributor License Agreement (CLA)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated (UTC)
docs	Skipped		Mar 26, 2026 2:58am

[cursor]

PR Summary

Medium Risk
Adds new authenticated API surfaces (skills GitHub fetch, mothership chat GET/PATCH/DELETE) and significant sidebar/integration UI refactors; primary risk is authorization/edge-case handling and behavior regressions in chat/task/integration flows.

Overview
Adds skill importing: new /api/skills/import endpoint fetches SKILL.md from GitHub (raw URL conversion, timeouts, 100KB limit) and a new Skills modal Import tab supporting drag/drop .md/.zip, GitHub URL fetch, or paste; includes parsing/ZIP extraction utilities and Vitest coverage.

Reworks chat/task APIs and UI behaviors: removes legacy rename/mark-read routes and introduces a consolidated mothership chat endpoint (/api/mothership/chats/[chatId]) with GET (optionally returns stream snapshot), PATCH (rename + unread state), and DELETE (publishes task events).

Improves credentials/integrations & MCP creation UX: integrations manager gets a two-step “connect integration” flow with scope display, available-integrations list, and uses useCreateCredentialDraft instead of manual fetch; workflow credential selectors now open an in-place ConnectCredentialModal (vs navigating to settings) and fetch inaccessible credential names via useWorkspaceCredential. MCP tools can now create MCP servers via an inline McpServerFormModal from deploy/tool pickers.

Sidebar/settings polish: adds richer collapsed sidebar flyouts (primary actions, inline rename helper, hover menu locking) and extends context menus with mark read/unread and optional delete; settings navigation adds showWhenLocked (e.g., show Max-only items with a badge) and renames collapsed tooltip prop. Minor UI tweaks include scrollbar gutter, credit/billing layout/button variants, and README branding/docs link updates.

^{Written by Cursor Bugbot for commit f475ae9. Configure here.}

[greptile-apps]

Greptile Summary

This PR is a broad feature drop covering six main areas: skill import (file/ZIP/GitHub/paste), an inline MCP server creation modal in the deploy panel, a Wordmark icon + SVG assets, inline task/workflow manipulation from the collapsed sidebar (context menus, rename, mark read/unread), a refactored settings sidebar that hides rather than disables plan-gated items (with a "Max" badge for showWhenLocked items), and a new ConnectCredentialModal for inline OAuth credential creation. Previous review concerns (CRLF handling, ZIP size guard, concurrent-save race, isUnread silent-discard) are confirmed addressed.\n\nKey points:\n- The skills import pipeline is well-layered: client-side validation → server-side GitHub URL rewriting with a 15 s timeout and 100 KB cap → parseSkillMarkdown with CRLF normalization and unit tests.\n- useFlyoutInlineRename consolidates the old ad-hoc rename state into a reusable hook with a synchronous isSavingRef guard against double-invocation.\n- Task API calls are unified to the PATCH /api/mothership/chats/[chatId] endpoint; the now-deleted /api/copilot/chat/rename and /api/mothership/chats/read routes are superseded.\n- onSuccess → onSettled in credential mutation hooks ensures query invalidation even on error, which is a correctness improvement.\n- Minor UX gap: the skill modal's Cancel button is absent when the Import tab is active.\n- zip.file(candidates[0])! non-null assertion in utils.ts is safe in practice but could be an explicit null check for clarity.

Confidence Score: 4/5

Safe to merge; all previously flagged blocking issues are resolved and remaining comments are non-blocking UX/style suggestions.

The PR addresses every prior P0/P1 concern (CRLF, ZIP bomb, double-save race, isUnread silent-discard). The new additions are well-structured with proper error handling, auth guards, and optimistic updates. The only open issues are a missing Cancel button on the skill import tab (cosmetic), an undocumented no-op delete handler in the collapsed workflow context menu (technical debt), and a non-null assertion that could be an explicit guard. None of these block correctness or security.

apps/sim/app/workspace/[workspaceId]/settings/components/skills/components/skill-modal.tsx (Cancel button on Import tab), apps/sim/app/workspace/[workspaceId]/settings/components/skills/components/utils.ts (non-null assertion)

Important Files Changed

Filename	Overview
apps/sim/app/api/skills/import/route.ts	New POST endpoint that fetches a SKILL.md from a GitHub URL, with proper auth, timeout (15s), size limits (100KB), and clear error handling for non-GitHub URLs and HTTP failures.
apps/sim/app/workspace/[workspaceId]/settings/components/skills/components/skill-modal.tsx	Adds tabbed Create/Import UI to the skill modal; footer with Cancel button is hidden on the Import tab, leaving users without an explicit dismiss action there.
apps/sim/app/workspace/[workspaceId]/settings/components/skills/components/skill-import.tsx	New component supporting three skill import paths (file upload/drop, GitHub URL fetch, paste); includes 5 MB ZIP guard and delegates content parsing to utils.
apps/sim/app/workspace/[workspaceId]/settings/components/skills/components/utils.ts	Utility functions for SKILL.md parsing and ZIP extraction; CRLF normalization is included; non-null assertion on zip.file() could be replaced with an explicit null check.
apps/sim/app/workspace/[workspaceId]/w/components/sidebar/sidebar.tsx	Large refactor adding collapsed-state task/workflow context menus, inline rename via useFlyoutInlineRename, mark-as-read/unread actions, and a Wordmark in the expanded header; no-op delete handler on collapsed workflow context menu is intentional but undocumented.
apps/sim/app/workspace/[workspaceId]/w/components/sidebar/hooks/use-flyout-inline-rename.ts	New hook for inline rename with concurrent-invocation guard (isSavingRef), cancel/Escape support, and error recovery (resets value to original name on failure).
apps/sim/app/workspace/[workspaceId]/w/components/sidebar/components/collapsed-sidebar-menu/collapsed-sidebar-menu.tsx	Significant expansion adding CollapsedTaskFlyoutItem, CollapsedWorkflowFlyoutItem, and folder-recursive rename support; shared inputRef across instances is safe due to single-editing-target invariant.
apps/sim/hooks/queries/credentials.ts	Adds useCreateCredentialDraft mutation and switches onSuccess to onSettled for cache invalidation in create/update/delete/member mutations, ensuring invalidation even on errors.
apps/sim/hooks/queries/tasks.ts	Consolidates task API calls to the unified PATCH /api/mothership/chats/[chatId] REST resource; adds useMarkTaskUnread with optimistic update mirroring the existing useMarkTaskRead pattern.

Sequence Diagram

sequenceDiagram
    participant U as User
    participant SI as SkillImport (client)
    participant SR as /api/skills/import
    participant GH as GitHub (raw.githubusercontent.com)
    participant SM as SkillModal

    Note over U,SM: GitHub URL import path
    U->>SI: Enter GitHub URL + click Fetch
    SI->>SR: POST /api/skills/import { url }
    SR->>SR: toRawGitHubUrl() - rewrite blob to raw URL
    SR->>GH: GET raw file (timeout 15s, Accept: text/plain)
    GH-->>SR: file content
    SR->>SR: Check content-length and content.length <= 100KB
    SR-->>SI: { content }
    SI->>SI: parseSkillMarkdown(content)
    SI->>SM: onImport({ name, description, content })
    SM->>SM: setActiveTab('create') - switch to edit form

    Note over U,SM: File / ZIP drop path
    U->>SI: Drop .md or .zip file
    SI->>SI: isAcceptedFile() + size check (ZIP <= 5MB)
    SI->>SI: extractSkillFromZip() or file.text()
    SI->>SI: parseSkillMarkdown()
    SI->>SM: onImport({ name, description, content })

Loading

_{Reviews (4): Last reviewed commit: "fix(skills): normalize CRLF line endings..." | Re-trigger Greptile}

[waleedlatif1]

@greptile

[waleedlatif1]

@cursor review

[waleedlatif1]

@greptile

[waleedlatif1]

@cursor review

[cursor]

✅ Bugbot reviewed your changes and found no new issues!

Comment @cursor review or bugbot run to trigger another review on this PR

[waleedlatif1]

@greptile