chore: import upstream snapshot with attribution

apps/sim/app/api/custom-blocks/route.ts

@@ -0,0 +1,145 @@
+import { AuditAction, AuditResourceType, recordAudit } from '@sim/audit'
+import { createLogger } from '@sim/logger'
+import { getErrorMessage } from '@sim/utils/errors'
+import type { NextRequest } from 'next/server'
+import { NextResponse } from 'next/server'
+import {
+  listCustomBlocksContract,
+  publishCustomBlockContract,
+} from '@/lib/api/contracts/custom-blocks'
+import { parseRequest } from '@/lib/api/server'
+import { getSession } from '@/lib/auth'
+import { isOrganizationOnEnterprisePlan } from '@/lib/billing'
+import { isFeatureEnabled } from '@/lib/core/config/feature-flags'
+import { withRouteHandler } from '@/lib/core/utils/with-route-handler'
+import {
+  CustomBlockValidationError,
+  type CustomBlockWithInputs,
+  listCustomBlocksWithInputs,
+  publishCustomBlock,
+} from '@/lib/workflows/custom-blocks/operations'
+import { checkWorkspaceAccess } from '@/lib/workspaces/permissions/utils'
+
+const logger = createLogger('CustomBlocksAPI')
+
+/** Wire shape for a custom block. Keeps the icon field name explicit for the client. */
+function toWire(block: CustomBlockWithInputs) {
+  return {
+    id: block.id,
+    organizationId: block.organizationId,
+    workflowId: block.workflowId,
+    workflowName: block.workflowName,
+    workspaceId: block.workspaceId,
+    workspaceName: block.workspaceName,
+    type: block.type,
+    name: block.name,
+    description: block.description,
+    iconUrl: block.iconUrl,
+    enabled: block.enabled,
+    inputFields: block.inputFields,
+    exposedOutputs: block.exposedOutputs,
+  }
+}
+
+export const GET = withRouteHandler(async (request: NextRequest) => {
+  const session = await getSession()
+  if (!session?.user?.id) {
+    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
+  }
+
+  const parsed = await parseRequest(listCustomBlocksContract, request, {})
+  if (!parsed.success) return parsed.response
+
+  const userId = session.user.id
+  const { workspaceId } = parsed.data.query
+
+  const access = await checkWorkspaceAccess(workspaceId, userId)
+  if (!access.hasAccess) {
+    return NextResponse.json({ error: 'Access denied' }, { status: 403 })
+  }
+
+  const organizationId = access.workspace?.organizationId
+  if (!organizationId) {
+    return NextResponse.json({ enabled: false, customBlocks: [] })
+  }
+
+  if (!(await isFeatureEnabled('deploy-as-block', { userId, orgId: organizationId }))) {
+    return NextResponse.json({ enabled: false, customBlocks: [] })
+  }
+
+  const enabled = await isOrganizationOnEnterprisePlan(organizationId)
+  const blocks = enabled ? await listCustomBlocksWithInputs(organizationId) : []
+  return NextResponse.json({ enabled, customBlocks: blocks.map(toWire) })
+})
+
+export const POST = withRouteHandler(async (request: NextRequest) => {
+  const session = await getSession()
+  if (!session?.user?.id) {
+    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
+  }
+
+  const parsed = await parseRequest(publishCustomBlockContract, request, {})
+  if (!parsed.success) return parsed.response
+
+  const userId = session.user.id
+  const { workspaceId, workflowId, name, description, iconUrl, inputs, exposedOutputs } =
+    parsed.data.body
+
+  const access = await checkWorkspaceAccess(workspaceId, userId)
+  if (!access.canAdmin) {
+    return NextResponse.json({ error: 'Admin permissions required' }, { status: 403 })
+  }
+
+  const organizationId = access.workspace?.organizationId
+  if (!organizationId) {
+    return NextResponse.json(
+      { error: 'Publishing a block requires the workspace to belong to an organization' },
+      { status: 400 }
+    )
+  }
+
+  if (!(await isFeatureEnabled('deploy-as-block', { userId, orgId: organizationId }))) {
+    return NextResponse.json({ error: 'Deploy as block is not enabled' }, { status: 403 })
+  }
+
+  if (!(await isOrganizationOnEnterprisePlan(organizationId))) {
+    return NextResponse.json(
+      { error: 'Deploy as block requires an enterprise plan' },
+      { status: 403 }
+    )
+  }
+
+  try {
+    const block = await publishCustomBlock({
+      organizationId,
+      workspaceId,
+      workflowId,
+      userId,
+      name,
+      description,
+      iconUrl,
+      inputs,
+      exposedOutputs,
+    })
+    recordAudit({
+      workspaceId,
+      actorId: userId,
+      actorName: session.user.name,
+      actorEmail: session.user.email,
+      action: AuditAction.CUSTOM_BLOCK_PUBLISHED,
+      resourceType: AuditResourceType.CUSTOM_BLOCK,
+      resourceId: block.id,
+      resourceName: block.name,
+      description: `Published custom block "${block.name}"`,
+      metadata: { organizationId, type: block.type, workflowId },
+      request,
+    })
+    return NextResponse.json({ customBlock: toWire(block) })
+  } catch (error) {
+    if (error instanceof CustomBlockValidationError) {
+      return NextResponse.json({ error: error.message }, { status: 400 })
+    }
+    logger.error('Failed to publish custom block', { error: getErrorMessage(error) })
+    throw error
+  }
+})