feat(tools): added rds, dynamodb, background color gradient

[waleedlatif1]

Summary

• added rds, dynamodb, background color gradient

Type of Change

• New feature

Testing

Tested manually

Checklist

• Code follows project style guidelines
• Self-reviewed my changes
• Tests added/updated and passing
• No new warnings introduced
• I confirm that I have read and agree to the terms outlined in the Contributor License Agreement (CLA)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Preview	Comments	Updated (UTC)
docs	Ready	Preview	Comment	Dec 1, 2025 9:40pm

[greptile-apps]

Greptile Overview

Greptile Summary

This PR adds comprehensive Amazon RDS and DynamoDB integration to Sim, enabling database operations directly within workflows. The implementation includes secure parameterized queries, proper credential handling, and a minor UI enhancement for gradient support.

Key Changes

• RDS Integration: Full CRUD operations (query, insert, update, delete, execute) with SQL injection prevention via parameterized queries and identifier sanitization
• DynamoDB Integration: Complete DynamoDB operations (get, put, query, scan, update, delete) using AWS SDK Document Client
• Security: Both integrations properly use user-only visibility for AWS credentials and implement secure query building
• UI Enhancement: Changed backgroundColor to background CSS property in workflow and note blocks to support linear gradient backgrounds
• Documentation: Added comprehensive MDX documentation for both tools with usage examples

Implementation Quality

The SQL injection concerns from previous review threads have been resolved. The RDS implementation now uses:

• Parameterized queries with SqlParameter[] for all user-provided values
• Identifier sanitization with regex validation for table/column names
• Proper separation of structure (identifiers) and data (parameters)

The DynamoDB implementation follows AWS best practices using the Document Client with proper marshalling options.

Confidence Score: 5/5

• This PR is safe to merge with no critical issues found
• The implementation demonstrates excellent security practices with parameterized queries, proper input validation, correct credential visibility settings, and comprehensive error handling. The background gradient change is a simple, safe CSS property update. All previous SQL injection concerns have been addressed.
• No files require special attention

Important Files Changed

File Analysis

Filename	Score	Overview
apps/sim/app/api/tools/rds/utils.ts	5/5	Implements parameterized queries for RDS operations (INSERT, UPDATE, DELETE), properly sanitizing identifiers and using SQL parameters to prevent injection
apps/sim/app/api/tools/dynamodb/utils.ts	5/5	Implements DynamoDB operations using AWS SDK's Document Client with proper marshalling/unmarshalling options
apps/sim/blocks/blocks/rds.ts	5/5	Defines RDS block config with multi-operation support (query, insert, update, delete, execute) and proper JSON parsing in params transform
apps/sim/blocks/blocks/dynamodb.ts	5/5	Defines DynamoDB block config with comprehensive operation support (get, put, query, scan, update, delete) and proper JSON parsing
apps/sim/tools/rds/query.ts	5/5	RDS query tool definition with correct user-only visibility for AWS credentials per custom instruction requirements
apps/sim/tools/dynamodb/get.ts	5/5	DynamoDB get tool definition with correct user-only visibility for AWS credentials
apps/sim/app/workspace/[workspaceId]/w/[workflowId]/components/workflow-block/workflow-block.tsx	5/5	Changed backgroundColor to background CSS property to support gradient values in block icon styling
apps/sim/app/workspace/[workspaceId]/w/[workflowId]/components/note-block/note-block.tsx	5/5	Changed backgroundColor to background CSS property to support gradient values in note block icon styling

Sequence Diagram

sequenceDiagram
participant User
participant WorkflowBlock
participant BlockConfig
participant APIRoute
participant Utils
participant AWS
User->>WorkflowBlock: Configure RDS/DynamoDB block
WorkflowBlock->>BlockConfig: Load block definition
BlockConfig-->>WorkflowBlock: Return subBlocks & tools config
User->>WorkflowBlock: Select operation & provide credentials
WorkflowBlock->>WorkflowBlock: Validate inputs
User->>WorkflowBlock: Execute workflow
WorkflowBlock->>BlockConfig: Transform params (parse JSON)
BlockConfig->>BlockConfig: Select appropriate tool based on operation
BlockConfig->>APIRoute: POST to /api/tools/{rds|dynamodb}/{operation}
APIRoute->>APIRoute: Validate request with Zod schema
APIRoute->>Utils: Create AWS client with credentials
Utils-->>APIRoute: Return configured client
alt RDS Operation
APIRoute->>Utils: Call executeInsert/Update/Delete/Statement
Utils->>Utils: Sanitize identifiers
Utils->>Utils: Build parameterized query with SqlParameter[]
Utils->>AWS: Send ExecuteStatementCommand to RDS Data API
AWS-->>Utils: Return query results
Utils->>Utils: Parse RDS response (rows + metadata)
else DynamoDB Operation
APIRoute->>Utils: Call getItem/putItem/queryItems/etc
Utils->>AWS: Send DynamoDB command via DocumentClient
AWS-->>Utils: Return operation results
Utils->>Utils: Unmarshall response data
end
Utils-->>APIRoute: Return formatted results
APIRoute->>APIRoute: Destroy client
APIRoute-->>WorkflowBlock: Return JSON response
WorkflowBlock-->>User: Display results (rows/items/count)

Loading

[greptile-apps]

_{51 files reviewed, 2 comments}

_{Edit Code Review Agent Settings | Greptile}

[waleedlatif1]

@greptile

[greptile-apps]

_{51 files reviewed, no comments}

_{Edit Code Review Agent Settings | Greptile}