improvement(ux): added tab key navigation for agent messages, made variables styling match chat, added neo4j and calendly

[waleedlatif1]

Summary

added tab key navigation for agent messages, made variables styling match chat

Type of Change

• Bug fix

Testing

Tested manually

Checklist

• Code follows project style guidelines
• Self-reviewed my changes
• Tests added/updated and passing
• No new warnings introduced
• I confirm that I have read and agree to the terms outlined in the Contributor License Agreement (CLA)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Preview	Comments	Updated (UTC)
docs	Ready	Preview	Comment	Nov 20, 2025 1:39am

[greptile-apps]

Greptile Summary

• Added Neo4j and Calendly integrations with comprehensive tool definitions, API routes, blocks, and documentation
• Implemented Tab key navigation for agent messages and fuzzy search functionality with fuzzysort library
• Updated UI styling for variables component and various deployment modal components to match design system

Confidence Score: 2/5

• Critical Cypher injection vulnerability makes this PR unsafe to merge
• Neo4j query route concatenates LIMIT values directly into queries instead of using parameterized queries, creating a Cypher injection vulnerability that could allow malicious users to execute arbitrary database operations
• Fix the Cypher injection vulnerability in apps/sim/app/api/tools/neo4j/query/route.ts before merging

Important Files Changed

Filename	Overview
apps/sim/app/api/tools/neo4j/query/route.ts	Added Neo4j query endpoint with Cypher injection vulnerability in LIMIT concatenation
apps/sim/app/api/tools/neo4j/utils.ts	Neo4j utility functions with validation, driver creation, and type conversion logic
apps/sim/app/api/webhooks/route.ts	Added Calendly webhook subscription creation with proper authentication and error handling

Sequence Diagram

sequenceDiagram
    participant User
    participant WebhooksAPI as "Webhooks API"
    participant DB as "Database"
    participant Calendly as "Calendly API"
    participant Workflow as "Workflow"

    User->>WebhooksAPI: "POST /api/webhooks (create Calendly webhook)"
    WebhooksAPI->>DB: "Verify workflow exists and permissions"
    DB-->>WebhooksAPI: "Workflow details"
    WebhooksAPI->>Calendly: "POST /webhook_subscriptions"
    Calendly-->>WebhooksAPI: "Webhook URI and ID"
    WebhooksAPI->>DB: "Save webhook with externalId"
    DB-->>WebhooksAPI: "Webhook created"
    WebhooksAPI-->>User: "Webhook details"
    
    Calendly->>WebhooksAPI: "POST /api/webhooks/trigger/{path} (event notification)"
    WebhooksAPI->>Workflow: "Execute workflow with event data"
    Workflow-->>WebhooksAPI: "Execution result"
    WebhooksAPI-->>Calendly: "200 OK"

Loading

[greptile-apps]

_{65 files reviewed, 1 comment}

_{Edit Code Review Agent Settings | Greptile
React with 👍 or 👎 to share your feedback on this new summary format}