The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated (UTC)
docs	Skipped		May 21, 2026 11:15pm

PR Summary

Medium Risk
Medium risk due to broad changes across several production API/tool routes and altered error/status behavior (notably new 413 paths), though the changes are mostly additive safety checks and bounded reads.

Overview
Hardens multiple API and tool routes against unbounded memory/materialization by switching from raw arrayBuffer()/formData() reads to stream-limits helpers with explicit byte caps, and by returning 413 for oversized payloads/responses.

/api/files/parse now enforces a max 10 files, validates file reference shape (rejects inline/data-like inputs), streams external/cloud downloads with maxResponseBytes, and adds a combined parsed-output cap with partial-result preservation for multi-file requests.

File upload and CSV import routes now read multipart bodies/files with size limits (supporting chunked uploads without content-length) and add tests asserting early rejection before materializing file contents.

Adds new internal tool routes for Google Slides export and Typeform file download that download with byte caps and store results as files (execution or copilot storage), and updates DocuSign, image, TTS, and video tool proxies to use bounded JSON/text/buffer reads, timeouts/abort propagation, and capped reference/media downloads; related block outputs gain a file output where applicable.

Also adds a reviewer skill doc (memory-load-check) and tightens log cleanup reference checks by scoping the retained-reference query by workspace.

^{Reviewed by Cursor Bugbot for commit 56116aa. Configure here.}

Greptile Summary

This PR addresses memory and performance safety in the execution log cleanup pipeline, adds server-side proxy routes for Typeform and Google Slides file transfers, and introduces a new stream-size enforcement library used across all download routes.

• Paginated workspace loading (cleanup-dispatcher.ts): replaces a full-table workspace load with a cursor-based page loop (500 rows per page), eliminating the OOM risk on large deployments.
• Execution log compaction (logger.ts): adds a three-tier size-bounding strategy to prevent oversized JSONB writes, plus new extractFilesFromExecution for cleanup tracking — but file extraction happens after compaction, so files in large span outputs can be silently dropped from the files column.
• Streaming size limits (stream-limits.ts): new module with bounded stream readers and PayloadSizeLimitError, adopted by all tool download routes.

Confidence Score: 3/5

The log-compaction path can silently drop file references, causing permanent storage leaks for large executions; the cross-tenant reference scan gap in cleanup-logs.ts is also still present.

The execution logger compacts trace span outputs exceeding 8 KB before extractFilesFromExecution runs, so file references in large span outputs are never written to the files column and are never deleted during log cleanup. This storage resource leak is introduced by the ordering of two new operations. The cross-tenant reference-scan narrowing was previously flagged and remains unaddressed.

apps/sim/lib/logs/execution/logger.ts — file extraction must happen before compaction; apps/sim/background/cleanup-logs.ts — cross-tenant reference scan is still narrowed to only the deleting workspaces

Important Files Changed

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    A[dispatchCleanupJobs] --> B{isTriggerAvailable?}
    B -- yes --> C[forEachCleanupChunk]
    B -- no --> D{shouldExecuteInline?}
    D -- yes --> C
    D -- no --> E[JobQueue enqueue]
    C --> F[listActiveWorkspaceCleanupScopeRowsPage]
    F --> G[resolvePlanTypesByWorkspaceId]
    G --> H[emit chunks per plan]
    H --> I{dispatch path}
    I -- Trigger.dev --> J[tasks.batchTrigger]
    I -- inline --> K[runCleanupLogs]
    I -- job queue --> E
    K --> L[cleanupWorkflowExecutionLogs]
    L --> M[chunkedBatchDelete]
    M --> N[filterLargeValueKeys scoped to workspaceIds]
    N --> O[deleteExecutionFiles from row.files]
    N --> P[deleteLargeValueStorageKeys]

_{Reviews (8): Last reviewed commit: "more fixes" | Re-trigger Greptile}

@greptile

bugbot run

@greptile

bugbot run

bugbot run

@greptile

@greptile

bugbot run

bugbot run

@greptile

@greptile

bugbot run

@greptile

bugbot run