fix(app): bunch-of-fixes

[github-actions]

Summary:

• Fixes CS-393 by removing the duplicate Requirements heading from the grouped framework requirements tab.
• Fixes CS-381 by limiting integration marketplace search to integration/provider names only, so SAST no longer matches Datto text from descriptions.
• Fixes ENG-226 by removing dead cross-origin BotID protected routes and keeping only the same-origin chat route.

Validation:

• PASS: bunx vitest run "src/app/(app)/[orgId]/integrations/components/integration-search.test.ts"
• BASELINE FAIL: PlatformIntegrations.test.tsx has the same 3 failures on main and on this branch.
• BASELINE FAIL: bunx turbo run typecheck --filter=@trycompai/app fails on unrelated existing app type errors.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
app	Ready	Preview, Comment	May 30, 2026 7:38pm
comp-framework-editor	Ready	Preview, Comment	May 30, 2026 7:38pm

1 Skipped Deployment

Project	Deployment	Actions	Updated (UTC)
portal	Skipped		May 30, 2026 7:38pm

[linear]

CS-393

CS-381

ENG-226

[cubic-dev-ai]

1 issue found across 5 files

Confidence score: 2/5

• There is a concrete high-severity regression risk in apps/app/src/instrumentation-client.ts: BotId protection appears to be removed for enterprise automation chat requests, which can weaken request validation/security controls.
• Because client calls to ${NEXT_PUBLIC_ENTERPRISE_API_URL}/api/tasks-automations/chat still remain, this change likely impacts real user-facing automation flows rather than being a dead-code refactor.
• Given severity (7/10) and strong confidence (8/10), this is not a minor uncertainty; it is a likely behavior change that should be addressed before merge.
• Pay close attention to apps/app/src/instrumentation-client.ts - BotId protection for enterprise automation chat requests appears to have been dropped.

<sub>Reply with feedback, questions, or to request a fix.

Fix all with cubic | Re-trigger cubic</sub>