mirror of
https://github.com/simstudioai/sim.git
synced 2026-10-24 01:23:02 +08:00
WaleedandClaude Opus 4.7
2502369122
* feat(integrations): SAP S/4HANA tools, block, and proxy with multi-deployment support * fix(sap_s4hana): address PR review comments - Validate baseUrl/tokenUrl in Zod schema and at runtime to prevent SSRF (https-only, deny loopback/link-local/cloud-metadata hosts) - Cap proxy token cache at 500 entries with LRU eviction - Add 30s timeout to outbound token, CSRF, and OData fetches - Make parseJsonInput return T | undefined so missing input is type-safe - Reset authType when deploymentType changes and surface OAuth fields whenever auth is not basic, so cloud_public users always see clientId/ clientSecret after switching from a basic-auth private deployment - Reject OData service names that are not uppercase identifiers and paths containing ".." or "." traversal segments Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com> * fix(sap_s4hana): allow versioned service names; tighten proxy SSRF defenses - Permit ";v=NNNN" suffix on ServiceName regex so the four delivery tools (API_OUTBOUND_DELIVERY_SRV;v=0002, API_INBOUND_DELIVERY_SRV;v=0002) pass schema validation - Restrict subdomain to RFC 1123 label characters and region to lowercase alphanumeric short codes; run the constructed cloud_public host through assertSafeExternalUrl so a crafted subdomain (e.g. "evil.com#") cannot redirect requests carrying SAP credentials - Block RFC-1918 (10/8, 172.16/12, 192.168/16), 127/8, 169.254/16, and 0.0.0.0 via isPrivateIPv4, plus IPv4-mapped IPv6 variants (::ffff:10.0.0.1, ::10.0.0.1) so private internal hosts cannot be reached from baseUrl, tokenUrl, or the resolved cloud_public URL Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com> * fix(sap_s4hana): catch hex-form IPv4-mapped IPv6 in SSRF check The WHATWG URL parser normalizes IPv4-mapped IPv6 addresses to hex form (e.g. [::ffff:169.254.169.254] → [::ffff:a9fe:a9fe]), which slipped past the dotted-decimal-only extractor. Decode the trailing two 16-bit hex groups back into IPv4 octets and run them through isPrivateIPv4. Also add isPrivateOrLoopbackIPv6 so pure IPv6 loopback (::, ::1), unique local addresses (fc00::/7), and link-local (fe80::/10) cannot be reached. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com> * fix(sap_s4hana): scope CSRF metadata fetch and isolate token cache by secret - buildOdataUrl skips request query params when called with an internal pathOverride so the /$metadata CSRF probe never carries user OData options ($filter, $top, $select), which were causing write operations through the generic odata_query tool to fail. - tokenCacheKey now mixes a sha256 hash of clientSecret into the cache key so two tenants sharing the same tokenUrl + clientId but different secrets get isolated entries (no cross-tenant token leak). Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com> * fix(sap_s4hana): reject ?/# in service path; trim long update tool descriptions - ServicePath validator now rejects "?" and "#" so a caller can't smuggle query options through the path field (e.g., "/A_BusinessPartner?$format=atomsvc"); the Zod refine now reports ".." / "." segments, "?", and "#" together. - Update Customer / Update Supplier / Update Purchase Requisition tool descriptions exceeded the docs generator's 600-char regex window, so they were rendering with empty descriptions on the integrations landing page. Trimmed them to fit while keeping the limited-fields note and the If-Match guidance, then regenerated integrations.json and tool docs. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com> * fix(sap_s4hana): reject percent-encoded path traversal; widen Set-Cookie split - ServicePath now also rejects %2e/%2E, %2f/%2F, %5c/%5C, %3f/%3F, %23 so a caller cannot smuggle ".." / "." / "/" / "\" / "?" / "#" past the validator and have SAP's ABAP/ICM gateway decode them server-side. - joinSetCookies fallback regex now allows the ", " separator that's used when multiple Set-Cookie values are folded onto one header line (older runtimes without Headers.getSetCookie). Prevents CSRF cookies from being concatenated into a single value during write operations. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com> * fix(sap_s4hana): preserve $ in OData query params; reject empty items array - buildOdataUrl now constructs query strings manually with encodeURIComponent and restores literal "$" so OData system options ($filter, $top, $select, $expand, $orderby, $skip, $format) reach SAP and any intermediary proxies/WAFs as-is, not as "%24filter". URLSearchParams was percent-encoding "$" to "%24" which most ICMs decode but some intermediaries silently drop, returning unfiltered results. - create_sales_order now rejects an empty items array (matches create_purchase_requisition) so callers get a clear client-side error instead of an opaque SAP validation failure on the deep-insert. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com> * fix(sap_s4hana): ignore baseUrl on cloud_public to prevent token redirection Why: resolveHost previously preferred baseUrl unconditionally. A caller sending deploymentType=cloud_public with a baseUrl pointing elsewhere would obtain a real SAP UAA token, then forward it as Bearer to the attacker host. Zod superRefine did not validate baseUrl for cloud_public. Fix: resolveHost now constructs the SAP host from subdomain when deploymentType is cloud_public and only uses baseUrl for cloud_private and on_premise (where it is already SSRF-checked in superRefine). Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com> * fix(icons): use useId for SapS4HanaIcon and PipedriveIcon gradients Why: hardcoded SVG gradient/mask IDs collide when an icon renders more than once on a page (e.g. integrations listing). All other icons in this file use React's useId() — these were inconsistent. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com> * icons * fix(icons): use useId for AWS-style icon gradients Why: IAMIcon, IdentityCenterIcon, STSIcon, SESIcon, and SecretsManagerIcon all used hardcoded `id='xxxGradient'` values that collide when an icon renders more than once on a page (e.g. integrations listing). Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com> * fix(sap_s4hana): ignore tokenUrl on cloud_public to prevent UAA redirection Why: resolveTokenUrl previously honored caller-supplied tokenUrl regardless of deploymentType, mirroring the same redirection class as the prior baseUrl bug. A cloud_public caller could send tokenUrl to an attacker host, causing the proxy to POST clientId:clientSecret as Basic auth to it. superRefine for cloud_public did not validate tokenUrl. Fix: derive UAA URL from subdomain+region for cloud_public; only honor tokenUrl for cloud_private/on_premise (already SSRF-checked). Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com> * fix(icons): remove unused mask in PipedriveIcon Why: the <mask> element had no consumer (no mask='url(#...)' anywhere in the SVG), so both it and the maskId variable were dead code. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com> --------- Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>
426 lines
8.9 KiB
TypeScript
426 lines
8.9 KiB
TypeScript
// Auto-generated file - do not edit manually
|
|
// Generated by scripts/generate-docs.ts
|
|
// Maps block types to their icon component references
|
|
|
|
import type { ComponentType, SVGProps } from 'react'
|
|
import {
|
|
A2AIcon,
|
|
AgentMailIcon,
|
|
AgentPhoneIcon,
|
|
AgiloftIcon,
|
|
AhrefsIcon,
|
|
AirtableIcon,
|
|
AirweaveIcon,
|
|
AlgoliaIcon,
|
|
AmplitudeIcon,
|
|
ApifyIcon,
|
|
ApolloIcon,
|
|
ArxivIcon,
|
|
AsanaIcon,
|
|
AshbyIcon,
|
|
AthenaIcon,
|
|
AttioIcon,
|
|
AzureIcon,
|
|
BoxCompanyIcon,
|
|
BrainIcon,
|
|
BrandfetchIcon,
|
|
BrightDataIcon,
|
|
BrowserUseIcon,
|
|
CalComIcon,
|
|
CalendlyIcon,
|
|
CirclebackIcon,
|
|
ClayIcon,
|
|
ClerkIcon,
|
|
CloudFormationIcon,
|
|
CloudflareIcon,
|
|
CloudWatchIcon,
|
|
ConfluenceIcon,
|
|
CrowdStrikeIcon,
|
|
CursorIcon,
|
|
DagsterIcon,
|
|
DatabricksIcon,
|
|
DatadogIcon,
|
|
DevinIcon,
|
|
DiscordIcon,
|
|
DocumentIcon,
|
|
DocuSignIcon,
|
|
DropboxIcon,
|
|
DsPyIcon,
|
|
DubIcon,
|
|
DuckDuckGoIcon,
|
|
DynamoDBIcon,
|
|
ElasticsearchIcon,
|
|
ElevenLabsIcon,
|
|
EnrichSoIcon,
|
|
EvernoteIcon,
|
|
ExaAIIcon,
|
|
ExtendIcon,
|
|
EyeIcon,
|
|
FathomIcon,
|
|
FirecrawlIcon,
|
|
FirefliesIcon,
|
|
GammaIcon,
|
|
GithubIcon,
|
|
GitLabIcon,
|
|
GmailIcon,
|
|
GongIcon,
|
|
GoogleAdsIcon,
|
|
GoogleBigQueryIcon,
|
|
GoogleBooksIcon,
|
|
GoogleCalendarIcon,
|
|
GoogleContactsIcon,
|
|
GoogleDocsIcon,
|
|
GoogleDriveIcon,
|
|
GoogleFormsIcon,
|
|
GoogleGroupsIcon,
|
|
GoogleIcon,
|
|
GoogleMapsIcon,
|
|
GoogleMeetIcon,
|
|
GooglePagespeedIcon,
|
|
GoogleSheetsIcon,
|
|
GoogleSlidesIcon,
|
|
GoogleTasksIcon,
|
|
GoogleTranslateIcon,
|
|
GoogleVaultIcon,
|
|
GrafanaIcon,
|
|
GrainIcon,
|
|
GranolaIcon,
|
|
GreenhouseIcon,
|
|
GreptileIcon,
|
|
HexIcon,
|
|
HubspotIcon,
|
|
HuggingFaceIcon,
|
|
HunterIOIcon,
|
|
IAMIcon,
|
|
IdentityCenterIcon,
|
|
ImageIcon,
|
|
IncidentioIcon,
|
|
InfisicalIcon,
|
|
IntercomIcon,
|
|
JinaAIIcon,
|
|
JiraIcon,
|
|
JiraServiceManagementIcon,
|
|
KalshiIcon,
|
|
KetchIcon,
|
|
LangsmithIcon,
|
|
LaunchDarklyIcon,
|
|
LemlistIcon,
|
|
LinearIcon,
|
|
LinkedInIcon,
|
|
LinkupIcon,
|
|
LoopsIcon,
|
|
LumaIcon,
|
|
MailchimpIcon,
|
|
MailgunIcon,
|
|
MailServerIcon,
|
|
Mem0Icon,
|
|
MicrosoftDataverseIcon,
|
|
MicrosoftExcelIcon,
|
|
MicrosoftOneDriveIcon,
|
|
MicrosoftPlannerIcon,
|
|
MicrosoftSharepointIcon,
|
|
MicrosoftTeamsIcon,
|
|
MistralIcon,
|
|
MondayIcon,
|
|
MongoDBIcon,
|
|
MySQLIcon,
|
|
Neo4jIcon,
|
|
NotionIcon,
|
|
ObsidianIcon,
|
|
OktaIcon,
|
|
OnePasswordIcon,
|
|
OpenAIIcon,
|
|
OutlookIcon,
|
|
PackageSearchIcon,
|
|
PagerDutyIcon,
|
|
ParallelIcon,
|
|
PerplexityIcon,
|
|
PineconeIcon,
|
|
PipedriveIcon,
|
|
PolymarketIcon,
|
|
PostgresIcon,
|
|
PosthogIcon,
|
|
ProfoundIcon,
|
|
PulseIcon,
|
|
QdrantIcon,
|
|
QuiverIcon,
|
|
RDSIcon,
|
|
RedditIcon,
|
|
RedisIcon,
|
|
ReductoIcon,
|
|
ResendIcon,
|
|
RevenueCatIcon,
|
|
RipplingIcon,
|
|
RootlyIcon,
|
|
S3Icon,
|
|
SalesforceIcon,
|
|
SapS4HanaIcon,
|
|
SESIcon,
|
|
SearchIcon,
|
|
SecretsManagerIcon,
|
|
SendgridIcon,
|
|
SentryIcon,
|
|
SerperIcon,
|
|
ServiceNowIcon,
|
|
SftpIcon,
|
|
ShopifyIcon,
|
|
SimilarwebIcon,
|
|
SixtyfourIcon,
|
|
SlackIcon,
|
|
SmtpIcon,
|
|
SQSIcon,
|
|
SshIcon,
|
|
STSIcon,
|
|
STTIcon,
|
|
StagehandIcon,
|
|
StripeIcon,
|
|
SupabaseIcon,
|
|
TailscaleIcon,
|
|
TavilyIcon,
|
|
TelegramIcon,
|
|
TextractIcon,
|
|
TinybirdIcon,
|
|
TranslateIcon,
|
|
TrelloIcon,
|
|
TTSIcon,
|
|
TwilioIcon,
|
|
TypeformIcon,
|
|
UpstashIcon,
|
|
VercelIcon,
|
|
VideoIcon,
|
|
WealthboxIcon,
|
|
WebflowIcon,
|
|
WhatsAppIcon,
|
|
WikipediaIcon,
|
|
WordpressIcon,
|
|
WorkdayIcon,
|
|
xIcon,
|
|
YouTubeIcon,
|
|
ZendeskIcon,
|
|
ZepIcon,
|
|
ZoomIcon,
|
|
} from '@/components/icons'
|
|
|
|
type IconComponent = ComponentType<SVGProps<SVGSVGElement>>
|
|
|
|
export const blockTypeToIconMap: Record<string, IconComponent> = {
|
|
a2a: A2AIcon,
|
|
agentmail: AgentMailIcon,
|
|
agentphone: AgentPhoneIcon,
|
|
agiloft: AgiloftIcon,
|
|
ahrefs: AhrefsIcon,
|
|
airtable: AirtableIcon,
|
|
airweave: AirweaveIcon,
|
|
algolia: AlgoliaIcon,
|
|
amplitude: AmplitudeIcon,
|
|
apify: ApifyIcon,
|
|
apollo: ApolloIcon,
|
|
arxiv: ArxivIcon,
|
|
asana: AsanaIcon,
|
|
ashby: AshbyIcon,
|
|
athena: AthenaIcon,
|
|
attio: AttioIcon,
|
|
box: BoxCompanyIcon,
|
|
brandfetch: BrandfetchIcon,
|
|
brightdata: BrightDataIcon,
|
|
browser_use: BrowserUseIcon,
|
|
calcom: CalComIcon,
|
|
calendly: CalendlyIcon,
|
|
circleback: CirclebackIcon,
|
|
clay: ClayIcon,
|
|
clerk: ClerkIcon,
|
|
cloudflare: CloudflareIcon,
|
|
cloudformation: CloudFormationIcon,
|
|
cloudwatch: CloudWatchIcon,
|
|
confluence: ConfluenceIcon,
|
|
confluence_v2: ConfluenceIcon,
|
|
crowdstrike: CrowdStrikeIcon,
|
|
cursor: CursorIcon,
|
|
cursor_v2: CursorIcon,
|
|
dagster: DagsterIcon,
|
|
databricks: DatabricksIcon,
|
|
datadog: DatadogIcon,
|
|
devin: DevinIcon,
|
|
discord: DiscordIcon,
|
|
docusign: DocuSignIcon,
|
|
dropbox: DropboxIcon,
|
|
dspy: DsPyIcon,
|
|
dub: DubIcon,
|
|
duckduckgo: DuckDuckGoIcon,
|
|
dynamodb: DynamoDBIcon,
|
|
elasticsearch: ElasticsearchIcon,
|
|
elevenlabs: ElevenLabsIcon,
|
|
enrich: EnrichSoIcon,
|
|
evernote: EvernoteIcon,
|
|
exa: ExaAIIcon,
|
|
extend: ExtendIcon,
|
|
extend_v2: ExtendIcon,
|
|
fathom: FathomIcon,
|
|
file: DocumentIcon,
|
|
file_v3: DocumentIcon,
|
|
firecrawl: FirecrawlIcon,
|
|
fireflies: FirefliesIcon,
|
|
fireflies_v2: FirefliesIcon,
|
|
gamma: GammaIcon,
|
|
github: GithubIcon,
|
|
github_v2: GithubIcon,
|
|
gitlab: GitLabIcon,
|
|
gmail: GmailIcon,
|
|
gmail_v2: GmailIcon,
|
|
gong: GongIcon,
|
|
google_ads: GoogleAdsIcon,
|
|
google_bigquery: GoogleBigQueryIcon,
|
|
google_books: GoogleBooksIcon,
|
|
google_calendar: GoogleCalendarIcon,
|
|
google_calendar_v2: GoogleCalendarIcon,
|
|
google_contacts: GoogleContactsIcon,
|
|
google_docs: GoogleDocsIcon,
|
|
google_drive: GoogleDriveIcon,
|
|
google_forms: GoogleFormsIcon,
|
|
google_groups: GoogleGroupsIcon,
|
|
google_maps: GoogleMapsIcon,
|
|
google_meet: GoogleMeetIcon,
|
|
google_pagespeed: GooglePagespeedIcon,
|
|
google_search: GoogleIcon,
|
|
google_sheets: GoogleSheetsIcon,
|
|
google_sheets_v2: GoogleSheetsIcon,
|
|
google_slides: GoogleSlidesIcon,
|
|
google_slides_v2: GoogleSlidesIcon,
|
|
google_tasks: GoogleTasksIcon,
|
|
google_translate: GoogleTranslateIcon,
|
|
google_vault: GoogleVaultIcon,
|
|
grafana: GrafanaIcon,
|
|
grain: GrainIcon,
|
|
granola: GranolaIcon,
|
|
greenhouse: GreenhouseIcon,
|
|
greptile: GreptileIcon,
|
|
hex: HexIcon,
|
|
hubspot: HubspotIcon,
|
|
huggingface: HuggingFaceIcon,
|
|
hunter: HunterIOIcon,
|
|
iam: IAMIcon,
|
|
identity_center: IdentityCenterIcon,
|
|
image_generator: ImageIcon,
|
|
imap: MailServerIcon,
|
|
incidentio: IncidentioIcon,
|
|
infisical: InfisicalIcon,
|
|
intercom: IntercomIcon,
|
|
intercom_v2: IntercomIcon,
|
|
jina: JinaAIIcon,
|
|
jira: JiraIcon,
|
|
jira_service_management: JiraServiceManagementIcon,
|
|
kalshi: KalshiIcon,
|
|
kalshi_v2: KalshiIcon,
|
|
ketch: KetchIcon,
|
|
knowledge: PackageSearchIcon,
|
|
langsmith: LangsmithIcon,
|
|
launchdarkly: LaunchDarklyIcon,
|
|
lemlist: LemlistIcon,
|
|
linear: LinearIcon,
|
|
linear_v2: LinearIcon,
|
|
linkedin: LinkedInIcon,
|
|
linkup: LinkupIcon,
|
|
loops: LoopsIcon,
|
|
luma: LumaIcon,
|
|
mailchimp: MailchimpIcon,
|
|
mailgun: MailgunIcon,
|
|
mem0: Mem0Icon,
|
|
memory: BrainIcon,
|
|
microsoft_ad: AzureIcon,
|
|
microsoft_dataverse: MicrosoftDataverseIcon,
|
|
microsoft_excel: MicrosoftExcelIcon,
|
|
microsoft_excel_v2: MicrosoftExcelIcon,
|
|
microsoft_planner: MicrosoftPlannerIcon,
|
|
microsoft_teams: MicrosoftTeamsIcon,
|
|
mistral_parse: MistralIcon,
|
|
mistral_parse_v3: MistralIcon,
|
|
monday: MondayIcon,
|
|
mongodb: MongoDBIcon,
|
|
mysql: MySQLIcon,
|
|
neo4j: Neo4jIcon,
|
|
notion: NotionIcon,
|
|
notion_v2: NotionIcon,
|
|
obsidian: ObsidianIcon,
|
|
okta: OktaIcon,
|
|
onedrive: MicrosoftOneDriveIcon,
|
|
onepassword: OnePasswordIcon,
|
|
openai: OpenAIIcon,
|
|
outlook: OutlookIcon,
|
|
pagerduty: PagerDutyIcon,
|
|
parallel_ai: ParallelIcon,
|
|
perplexity: PerplexityIcon,
|
|
pinecone: PineconeIcon,
|
|
pipedrive: PipedriveIcon,
|
|
polymarket: PolymarketIcon,
|
|
postgresql: PostgresIcon,
|
|
posthog: PosthogIcon,
|
|
profound: ProfoundIcon,
|
|
pulse: PulseIcon,
|
|
pulse_v2: PulseIcon,
|
|
qdrant: QdrantIcon,
|
|
quiver: QuiverIcon,
|
|
rds: RDSIcon,
|
|
reddit: RedditIcon,
|
|
redis: RedisIcon,
|
|
reducto: ReductoIcon,
|
|
reducto_v2: ReductoIcon,
|
|
resend: ResendIcon,
|
|
revenuecat: RevenueCatIcon,
|
|
rippling: RipplingIcon,
|
|
rootly: RootlyIcon,
|
|
s3: S3Icon,
|
|
salesforce: SalesforceIcon,
|
|
sap_s4hana: SapS4HanaIcon,
|
|
search: SearchIcon,
|
|
secrets_manager: SecretsManagerIcon,
|
|
sendgrid: SendgridIcon,
|
|
sentry: SentryIcon,
|
|
serper: SerperIcon,
|
|
servicenow: ServiceNowIcon,
|
|
ses: SESIcon,
|
|
sftp: SftpIcon,
|
|
sharepoint: MicrosoftSharepointIcon,
|
|
shopify: ShopifyIcon,
|
|
similarweb: SimilarwebIcon,
|
|
sixtyfour: SixtyfourIcon,
|
|
slack: SlackIcon,
|
|
smtp: SmtpIcon,
|
|
sqs: SQSIcon,
|
|
ssh: SshIcon,
|
|
stagehand: StagehandIcon,
|
|
stripe: StripeIcon,
|
|
sts: STSIcon,
|
|
stt: STTIcon,
|
|
stt_v2: STTIcon,
|
|
supabase: SupabaseIcon,
|
|
tailscale: TailscaleIcon,
|
|
tavily: TavilyIcon,
|
|
telegram: TelegramIcon,
|
|
textract: TextractIcon,
|
|
textract_v2: TextractIcon,
|
|
tinybird: TinybirdIcon,
|
|
translate: TranslateIcon,
|
|
trello: TrelloIcon,
|
|
tts: TTSIcon,
|
|
twilio_sms: TwilioIcon,
|
|
twilio_voice: TwilioIcon,
|
|
typeform: TypeformIcon,
|
|
upstash: UpstashIcon,
|
|
vercel: VercelIcon,
|
|
video_generator: VideoIcon,
|
|
video_generator_v2: VideoIcon,
|
|
vision: EyeIcon,
|
|
vision_v2: EyeIcon,
|
|
wealthbox: WealthboxIcon,
|
|
webflow: WebflowIcon,
|
|
whatsapp: WhatsAppIcon,
|
|
wikipedia: WikipediaIcon,
|
|
wordpress: WordpressIcon,
|
|
workday: WorkdayIcon,
|
|
x: xIcon,
|
|
youtube: YouTubeIcon,
|
|
zendesk: ZendeskIcon,
|
|
zep: ZepIcon,
|
|
zoom: ZoomIcon,
|
|
}
|