The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Review	Updated (UTC)
docs	Skipped		Jan 20, 2026 0:20am

Greptile Summary

This PR adds a toggleable debug mode for superusers that allows importing workflows by ID for debugging purposes. The implementation introduces a two-factor authentication pattern where superuser features require both the database isSuperUser flag AND the superUserModeEnabled setting toggle.

Key Changes:

• introduced verifyEffectiveSuperUser helper that checks both conditions, replacing the old verifySuperUser function
• new /api/superuser/import-workflow endpoint that copies workflows with copilot chats to target workspace
• Debug settings panel in workflow settings modal, visible only to effective superusers
• refactored all existing superuser checks across template and creator endpoints to use the new effective superuser pattern
• fixed typo edit_responsd → edit_respond in tool-call component

Note: Previous thread identified missing user feedback in the Debug component (silent success/failure). This wasn't addressed in the current changes.

Confidence Score: 4/5

• safe to merge with minor UX concern
• the core implementation is solid with proper permission checks, error handling, and cleanup on failure - the only issue is missing user feedback in the Debug component (already noted in previous thread), which affects UX but not functionality or security
• pay attention to apps/sim/app/workspace/[workspaceId]/w/components/sidebar/components/settings-modal/components/debug/debug.tsx - missing user feedback on import success/failure

Important Files Changed

Sequence Diagram

sequenceDiagram
    participant User
    participant DebugUI as Debug Component
    participant API as /api/superuser/import-workflow
    participant PermCheck as verifyEffectiveSuperUser
    participant DB as Database
    participant WorkflowOps as Workflow Operations

    User->>DebugUI: Enter workflow ID & click Import
    DebugUI->>API: POST {workflowId, targetWorkspaceId}
    API->>PermCheck: Check superuser access
    PermCheck->>DB: Query user.isSuperUser
    PermCheck->>DB: Query settings.superUserModeEnabled
    PermCheck-->>API: {effectiveSuperUser: true/false}
    
    alt Not Effective Superuser
        API-->>DebugUI: 403 Forbidden
        DebugUI->>DebugUI: Log error (no user feedback)
    else Effective Superuser
        API->>DB: Verify target workspace exists
        API->>DB: Fetch source workflow
        API->>WorkflowOps: loadWorkflowFromNormalizedTables
        API->>WorkflowOps: sanitizeForExport
        API->>WorkflowOps: parseWorkflowJson (regenerate IDs)
        API->>DB: Create new workflow record
        API->>WorkflowOps: saveWorkflowToNormalizedTables
        
        alt Save Failed
            API->>DB: Delete workflow record (cleanup)
            API-->>DebugUI: 500 Error
        else Save Success
            API->>DB: Copy copilot chats
            API-->>DebugUI: 200 {newWorkflowId, copilotChatsImported}
            DebugUI->>DebugUI: Invalidate workflow list query
            DebugUI->>DebugUI: Clear input & log (no user feedback)
        end
    end

@greptile